skysight-inc/HackerNews huggingface dataset:
This is great research but I think an important point is missed. It may come across that these images are vulnerable because of some intrinsic property of using Docker however this is not the case. What is also important to point out is by adopting Docker this analysis actually becomes easier to do across an organization and similarly mitigation becomes easier as well.

I think another aspect that is missed is that just because you use a vulnerable image doesn't necessarily mean you are at risk of being compromised no matter what other security layers you employ. This gets to the practical scenarios of security operations.
> What's needed for "another Aaron"?

Courage. The cynic in me answers "Someone who doesn't mind being becoming a target?" I notice nobody is jumping up and down volunteering to be "another Assange" or "another Snowden". Different topics but similar level of fortitude needed.
I did some market research before I started working on Federacy (which began as frustrations I encountered at mopub/twitter). It seems that very few companies sub-hundreds of employees and thousands of servers have a security specialist, and almost no one is running vulnerability analysis in a real way.
God.js
> The bedroom is the one refuge from the state/government and you can bet any attempts to take that intimacy away are going to be met with high resistance.

I can assure you, this is not the prevailing reason nor do most adults view the world through this lense.

It's purely an emotional knee-jerk, the same as when you see nuclear reactor plans being turned down because of public outcry.

There are some things the public is exuberantly irrational about where any deviation will cause business failure.
Sort of, binary formats are mostly optimisation for scene data specifically and working with human readable formats is quite normal for content creation. If you can put up with the time taken to parse then it's workable.

If you think of declarative vr in those terms it's a lot like a web page where a portion arrives as text that describes the layout of the bulk of binary data for rich applications.

Where it gets tricky is for large scenes and/or streaming scene data where generally you need better performance. But this sort of thing could still be pre-baked and live within a declarative wrapper.
What worries me is when Facebook and Google both decide to insert themselves into politics. I definitely saw Google trying to influence the last election. I would constantly get push notifications to my phone with anti Trump news. These were the very first and only push notifications I received from Google News.

There's also the question of "Fake News" on Facebook. You could conceivably abuse their reporting system to bury articles you don't want people to see. This already happens quite a bit on YouTube where people will mass report videos for copyright infringement just to get them taken down.

If we rely entirely on these global channels for our world information they could conceivably shape our world view to their benefit. It's a scary proposition.
Apologies for tooting my own horn, but I have made a language that compiles to vectorised code: https://futhark-lang.org

You don't really need much in the way of fancy language features. If you take a simplified functional language, the requisite compiler is not too hard to write.
Rehabilitation facilities email lists
While I like the Internet being open, I don't like "net neutrality" extremism.

1) While I dislike monopoly carrier antics, I'm even more unhappy about the idea of government bureaucrats dictating network engineering standards to carriers and ISPs. If you build a network with caches/content servers close to users, and expensive backhaul back to your network core, you can offer essentially unlimited traffic to users hitting the cache, and still provide more limited access to other stuff. I'd prefer high bandwidth everywhere, but that isn't always an option. It should be a market decision, not a national government decision.

2) The real problems with lack of NN are due to lack of competition in the access provider market. Focus on fixing that. A lot of this is due to local governments requiring providers cover entire markets to cover any of a market -- if someone wants to build another WebPass or CondoInternet and only serve high-density developments, that's great! Trenching fiber to single family homes is marginal anyway, but if you have low take-up in a neighborhood it is even worse. If you are going to push for regulation, have it be regulation to empower actual competition in the network access market.

3) Zero-rating in emerging markets (e.g. FB in India) is really the only way for many lower income users to afford services at all -- particularly for video services.
> It is better for a poor Iraqi to get free Wikipedia even though that hurts other upstart wikis, than for poor Iraqis to have no Wikipedia at all.

I don't accept this premise. This is a false dichotomy because these are not the only two options. There is a third, better option: to get access to the entire internet.

A company offering you that choice is using a classic game-theoretic bargaining approach: commit to only allowing a restricted set of possibilities, of which the other person's best option is the one you want to happen. This makes it sound like the company has no chioce in the matter: they are just presenting you with the options, and you are the one who has to choose between eliminating this poor Iraqi's internet or giving her partial access. In reality, the company has stacked the deck by presenting you with this particular pair of options.

I'm not saying it's completely illegitimate for a company to want to sponsor free partial internet for those who don't have it in some places of the world.

But I am saying it is opposite from the ideal we should be working towards in already-developed countries like the USA. Ideally, the company providing internet should not at all be vertically integrated with the company providing websites on it and should have no incentive to prioritize one over the other.
Apple found guilty of fixing iPhone prices in Russia
> it doesn't look to me he was up to his own standards

Would anyone pass your test?
Props to Ken Liu for having the character Luan Zya derive the Monte Carlo estimator in "The Grace of Kings". That was a wonderful read.
Seems like a perfectly reasonable approach to hoisting Hg into the future. A big ship turns slowly.
Hamilton also revised the word order of the original text to conform to the word order of modern languages, overcoming perhaps the greatest difficulty for modern students of classics.

Well now that's just silly.

It gives you have a book written in English, with some incorrect, or at best stilted, Greek written above it. OK can you with vocab -- if you don't fall into just reading the English.

Surely it is better to have word-by-word English transliterations as cribs for an untampered Greek sentence.
I think the point was that these days technology has made things so efficient and cheap that even college students can make a big production.

Of course it was harder and more expensive back in the day...but that also meant less competition and a smaller pool of talent.
OK, so philosophically speaking, you only care about net neutrality in America? I thought that NN was a universal philosophy about the freedom of the internet.

If you do believe that Iraqis should be able to have zero rated Wikipedia, because they are poor, shouldn't poor Americans (of which their are millions living in abject poverty) be able to get zero rated services as well?
How is what they did different than what facebook does?
Being faithful to chance events is a great way to organise your knowledge - it basically subordinates facts to wit. Fight the facts! Become self-aware! That's how I think it works anyway.

Difficult to follow through with on the larger scale, though - which is where the little synchronicities come in.
You are misunderstanding. Bluetooth pairing is not foreplay, it's real sex.
One reason is that there's a variety of research showing that learning a foreign language is one of the few practices that can increase your intelligence and delay dementia.

Another reason would be to have an experience that is a basic part of our human heritage. Never speaking a foreign language would be kind of like never dancing. Sure it's not necessary, maybe it won't make you money and not everyone will get into it to the same degree, but do you really want to die without having at least explored life a bit more?
Depends on the company. Sometimes most of it goes to democrats:

Google for ex - https://www.opensecrets.org/pacs/lookup2.php?strID=C00428623

Microsoft also almost 2x to dems - https://www.opensecrets.org/orgs/summary.php?id=D000000115&l...
And best of luck finding these in immigrant rich silicon valley who are already petrified of losing their visa with the new government change.
I'm confused. I don't get what the novelty in this is. It looks like all they do is include an input that identifies different tasks and then trains one neural network to learn a separate distributions for each task, with some weight sharing...
They do charge discounts for certain types of equipment (cars, medical devices). I don't think there are any differences between equipment vendors, though.
The constitution protects everyone in the United states. The area before you walk in before going through customs doesn't count, although you do have some limited statutory protections. American citizens are protected because we must eventually be allowed into American territory at which point american law kicks in, but we are not guaranteed that our property can also come through the border.

My advice is always the same -- don't pass through any international border with anything you'll be too sad about losing. Countries are weird
> It's really hard to imagine a situation where Wikipedia is delivered to Iraqis on some kind of special limited internet pipe.

FWIW, that isn't just a hypothetical situation; it's already happening. https://en.wikipedia.org/wiki/Wikipedia_Zero
You can trivially modify their example to be 1.02003000400005... cycling through the digits and the argument still holds.

As another commenter pointed out, pi is not proven to be normal, but is suspected to be.
Absolutely agree. I did see some bad practices in the Docker community that I expect to see elsewhere as well. Specifically: reliance on deprecated images and not updating images during build. Thoughts?

I didn't address the implications of software vulnerabilities in respect to other mitigation techniques, however, as it's far outside the scope of the article. I probably should at least add a second addendum though. I'll work on this soon. Thanks!
I don't accept either the assertion regarding being in an ivory tower or the premise regarding Wikipedia and Iraqis.
Umm... why? The only rationale for this project I can see is this:

> Piping JSON through multiple programs creates lots of trivial changes, which makes it hard to do things like take meaningful diffs.

But you can always put JSON through a pretty-printer which puts values into canonical form before diffing. I wouldn't bother turning it into a formal specification. And you mention 'No insignificant whitespace' in the README, so it's not like your format makes line-by-line diffs any clearer.

It's as if IT hasn't had enough solutions in search of a problem...
It's missing humans.
If you are a poor American on a Lifeline phone (free phone provided by the government) with a very limited data plan, no one is (at this time) willing to subsidize unlimited services for this user. But maybe some companies, for their services, are willing to subsidize them. And in my opinion, it's better for the poor person to have access to some services than no services.
Introducing Domino 2.0
Linking the data with email addresses was stupid and unnecessary. Regardless of whether it's right or wrong (if this wasn't 'embarrassing' data I don't think anyone would care) linking data to emails was just a totally stupid decision.
How to Negotiate a Salary
I am the same way with HN, Reddit, or news sites. Every day I don't check the site, I feel like I am missing out on some important indispensable news and information.
A bit negative I thought.

18mm structural ply is a lot less than £40/sheet http://www.wickes.co.uk/Structural-Softwood-Plywood-CE2%2B-1... here is a well known (non trade) supplier selling it for £25+VAT (VAT is reclaimable on new homes)

Many houses in the UK use prefab timber frames and or heavy roof trusses. A crane is a perfectly normal requirement.

The airtightness requirement in UK is not that hard to pass. When the airtightness rules came in it caused a lot of headaches for cowboys, and was a doddle for well build dwellings. The vapor control layer needs to be right on the inside as it is supposed to stop vapour from reaching the structure. On a normal timber frame it would be right behind the plasterboard, right where picture hangers will hit it. Obviously a few holes are not hurting the bulk of buildings out there. Loose fill insulation is very widely used and doesn't have to slump, obviously everything could be made badly and installed badly.

I love to see new ideas for building. Personally I can see the future being about plywood panels laminated to foam in ready made units, rather than this, but good luck
Possibly. If you ignore the fact that your claim is pure conjecture that departs sharply from our history of dealing with Russia. Moreover, confronting Russia militarily over election-hacking would have been a strikingly disproportionate response.

On the other hand, you seem to be ignoring Russia's rhetoric and posturing at the time. And, also the fact that they'd already invaded a sovereign nation.

Instead, you've managed to turn it all around to paint those in the U.S. who expressed concern over Russia's agression as the actual aggressors.

And you've combined that stance with intense scrutiny of U.S. intelligence conclusions that seem to perfectly explain Trump's otherwise inexplicable behavior.

Now, why is that?
I've noticed that younger kids seems to take events extremely seriously

One thing that helped me keep this in perspective, is that every event makes up a significantly larger fraction of their existence than that event makes up of my existence

I'm 36, my oldest daughter is 6

occasionally she'll get really upset when seemingly minor setbacks happen (a craft she's working on doesn't turn out the way she wants it too seems typical), while we do try to work on her handling her frustration better

its helpful for us, to remember that 1 messed up craft out of 6 years of life experience, is 6 times a bigger deal than 1 messed up craft out of 36 years
I disagree with those saying that this is a good comparison. Telephone companies were not regulated because they were addictive, but rather because they are a public utility. Facebook possesses none of the characteristics of a public utility:

-Supplies an essential good or service

-Prohibitively expensive to replicate/enormous initial investment

-Inelastic demand

-Region-specific

-Few or zero consumer alternatives
based on, compatible with, or is common mark?

I'd hate to see them pushing a different spec around, that would solve nothing
In my opinion, this is the most dangerous aspect of games, though - they can fulfill that feeling of achievement that would otherwise belong to creative work, and satiate the need for that kind of work. The problem is that the achievements aren't helpful in the same way that eg building a company/invention/coffee table are.

I say this as a lifelong game player, and it's not to discount their positive effects - I think I'm a much better strategist and planner as a result of playing games as a kid.
Why would you need a garbage collector?

To allow for stack growing, the compiler would insert a small number of additional instructions into function entries that either do nothing or call out to a runtime library function that handles stack growing.

Nothing conceptually new in here, that isn't already done by compilers to deal with exception handling, initialize variables or perform division on machines that don't do it natively.

Sure, it requires some runtime support but so does almost every C or C++ program in existence.

edit:
Take a look at the split stack support implemented by GCC:
https://gcc.gnu.org/wiki/SplitStacks
its probably because the bastards were in the tree too

most likely had nothing to do with her direct privacy
Have you checked out lattice based crypto? It's the spiritual successor to merkel-hellman, based on the hardness of subset sum. I've got a rough presentation from when I talked about it at a reading group: https://docs.google.com/presentation/d/1_kLJ7M_7HKrzN0auz0-z...
My setup is dead simple. I'm on Windows, so I use Notepad++ with syntax highlighting as my editor and do a lot via the REPL. I just use regular Julia, not JuliaPro. Installing packages hasn't been a problem for me, just Pkg.add("PackageYouNeed"). I've had very few problems with package setup in the past and none recently.

On a 4-core CPU I have the environment variable JULIA_NUM_THREADS set to 3 so that when Julia is doing threaded worked there's still a core free for web browsing.

One potential gotcha: the Julia docs will mention that you can access shell commands from the REPL by starting your line with a semicolon, e.g. ;ls. For me this only works if you start Julia from something like Git Bash, not cmd.

Lots of people seem to like Juno (junolab.org) as an IDE. The team behind it has made incredible progress recently, and sometimes I use it for its GUI around the debugger, but for the most part I tend to stick to Notepad++.
> My experience is that people are very upset with the state and want their rights back.

It's easy to _say_ you're upset about something. It's another thing to take action or even vote (with the ballot, your feet or your wallet). How many people out there who will say they are vaguely "concerned" about Company Xyz's service actually have an account at Company Xyz and use that service?!
I bet that the index will be larger than the data for most cases... but then you could store the index of the index... of the index, and the number of times this goes on.
>It's individuals who make decisions to sell their data in search of convenience.

Here's the problem: They're selling your data, too. If you have an average social life, your picture will end up on Facebook. People will click on the little box around your head and put in your name. They may mention you or discuss you in the comments.

With enough of that kind of stuff, Facebook knows you exist, what you look like, and where you like to hang out. It can make educated guesses at other things like whether you went to college and where, plus all the things you can derive from pictures like age, ethnicity, and weight.

Social networks really are networks, and you can know a lot about a network node from its neighbors.
How to Save Money: Intro
Levitt's been more entertainer than social scientist for a while now, and as for other social scientists wanting a broad section of candidates for field experiments, social media associated with the university or other third party, or even paid social has the same recruitment potential without the systematic biases of Freakonomics fans
Go camping and leave your phone off and only for emergencies.
I think the appliance analogy is a pretty good one. But now imagine that on top of being able to charge different amounts for different brands of appliances, the electric company happens to manufacture their own line of not-so-quality stoves, refrigerators, etc.
Note that normality of a number in a given base is a sufficient condition for existence of all finite sequences in its expansion in this base, but not necessary.

It might turn out that Pi is not normal say in base 2, but all possible finite sequences of 0s and 1s occur in it, just with some of them being slightly more frequent than others of the same length.
> There's an argument that Internet Service Providers should be able to charge a metered rate based on usage. I'm not sure whether I agree with this, but in principle it seems ok. That's how we pay for public utilities.

I can monitor and control the power usage of my electrical appliances.

I can control outgoing network requests from my networked devices.

I cannot control what is sent to my network from the outside. It doesn't make much sense to be charged for what someone else sends to me. Even if I shut off my network device, a particularly rude service might just continue blindly sending data my way, running up my costs with no way to opt out.

Typical postal mail delivery is paid for by the sender, not the recipient. It becomes complicated here.
Brilliant take.
>Be it weight loss, improving mental health, curing addiction, becoming a better writer/photographer/programmer, the theme all comes down to a battle against yourself.

Most of them say that, but a few say the wiser thing: Prevention is king. If you don't get addicted to something, it causes fewer problems. This applies to both physical and mental addictions. Don't let your body get used to fatty foods, and there will be nothing to fight. Same goes for alcohol. Or tobacco. Or TV binging: I've been relatively cable-free for well over a decade.

>fighting the desire to veg and watch netflix instead of watching another lecture in the MOOC you're taking.

Amusingly, I have to fight the desire to take yet another MOOC. I'm addicted to information/knowledge. I absorb it easily. Retaining the information, and actually utilizing it takes a lot of work. For me, taking another MOOC is just a way of slacking off to avoid putting in the effort to apply those skills I keep "learning".
I didn't know this. Will look into it, thanks!

edit: looked up "call R from Julia", it looks like there's a n "RJulia" library for this. Assuming there's a Python equivalent? How does this compare to, say, using RPy2 in Python (which is nice but kind of annoying)?
3 things I learned from 5 jobs in 12 years
This is extremely exciting. I can't wait to try this out.

On the other hand, I wonder why such an effort was never carried out with Java itself? Or maybe it was but just never took off?
It does, although it may not be 100%. I've seen lots of PRs going by that fix problems with Swift support.
I doubt this could happen on any grand scale in a city. This does sound like the temporary autonomous zones you find in Burning Man, or the sustained exaltation you find at dinner parties and get-togethers. The key word here is sustained, because something always breaks exaltation. Someone makes a rude remark, or the wine goes to everyone's head and they make cynical remarks which dampen the mood of the dinner. Multiply this concept to cities and it's clear you're going to have bad apples ruining it for everyone. The bikes casually parked outside shops will be stolen even if they're freely given out to tourists to explore the city. The bum drinking cheap Olde English liquor will start begging for change.
For some reason I'm reminded of Gwyneth Paltrow and her macrobiotic diet. Oh to have a colon so pure!
None. If you are interested in some subject then you would have taken. And if you got interested in future there must be some course.
So don't waste your hard disk space.
Things to know before buying a diamond ring
Yes. Comparatively speaking, there's this tiny little difference in perspective.

HexoPress offers a complete sync between a folder on your Google Drive and your blog. Wordpress doesn't. It just takes a given post from Google Docs, when you are done with it and puts it into its database. That's pretty much it.
> Games often involve problem solving, learning systems, practice and continual improvement.

A lot of videogames focus on instant gratification and variable time rewards. There have been some games focused on problem solving - games where instead of simply playing you'd find yourself spending 20 minutes looking over your handwritten notes trying to puzzle something out - but they're a minority.