skysight-inc/HackerNews huggingface dataset:
You have bugs in every (mainstream) kernels. With them, you can elevate your privileges to kernel level, and once you've done that it's game over.

There is no reason to believe an additional layer (a VM) will always protect you (at least given how they are also written in unsafe languages for now). However there is no reason to believe it will in average makes things worse, and every reasons to believe it will in average increase your security.
A search engine for developers to “naming thing”
Imagine you want to learn the Roman alphabet. Which book should you use? Any book. There are so many good books and courses that it's almost useless to select. Don't worry about selecting the initial book, just use any course or book in the beginning, and later when you will know exactly what fits your needs, you will be able to fine tune.
SSDs spin?
That bank experience shows that women from India do show equal skills in IT. So the difference comes not from gender but from other things.
WASM apps will still have access to the browser; you'll need more than SDL to replace that.

More likely, native apps will port to WASM.
These guys are definitely acting against their own best economic interest. Good for them.
Chrome on iOS fails revoked and pinning tests.
I enjoyed that. I have been reading John's social media posts for a while, and it was good to hear him talk about his business. I also liked the interviewer's style for running the podcast.
My wife did an elimination diet a few years ago. It turns out that doesn't do well with either dairy or gluten. If she eats a bagel, she looks 6 months pregnant for a day or two.
I think https://badssl.com/dashboard/ does a good job at that — you could probably do something like what SSL Labs does with a letter grade but I think the Good/Okay/Bad levels is probably the level of nuance you want for a simple “Should I learn more about this?” prod.

What I'd like would be for that to eventually become the default view with an advanced tab for people who want to drill down into the full list of everything available.
> What I am working on will change the course of history if I even get close to succeeding.

Don't tell me...an app that lets you pay for people to stand in line at Whole Foods for you?
Those problems can and have been resolved with appropriate power filters and shielding.
So does Safari on iOS.

I'd say it also fails the others, because simply pressing 'continue' makes the warning dissapear without any visual indication that the connection is insecure.
I used to have a print-out of this on my bedroom wall as a teenager, next to the Hacker Manifesto.

Looking back at this as an adult, having not read it for many year, I'm shocked at how antisocial it is. Did I really believe this stuff?

I'm guessing it was a way for an intelligent, yet powerless, kid to gain some sense of control -- identifying strongly with my skills to feel superior to the society that denied me the freedoms I desired.

Now, as an adult member of society, I'm acutely aware how much I depend on the established systems for my security and well-being. Young people shouldn't feel the need to withdraw and create their own subcultures to gain a sense of belonging or security. We should be incorporating them into society, giving them a sense of purpose and belonging, and equipping them to make meaningful contributions.

Any thoughts how we can achieve that?
Take a look at jsonnet: http://jsonnet.org. It extends JSON with loops, conditionals, variables and more in an elegant way. We don't write JSON anymore and treat it like an "assembly language." We use jsonnet to generate CloudFormation templates, terraform templates and Kubernetes resource definitions.
This comment is worthy of http://www.n-gate.com/ .
That's why Google is handling this on the kid's Android device (possibly the main computing device for many) now.
I'm curious by the idea that your co-workers/bosses aren't making minor grammatical errors on a regular basis.
Given that Chrome runs on many platforms, and Edge one, it makes this even more sobering
I'm not sure I understand their use of "large edge providers" in this context - are they insinuating that backbone providers such as Level 3 are already collecting my web traffic when they peer with my ISP? Or is that just a odd reference to "the largest email, search, and social media companies" mentioned further on? The article goes on to talk about common carrier status, so it feels like they mean the former but that just doesn't make sense.

Either way, I think you hit the nail on the head with this statement: "there is greater potential for ISPs if left unchecked and harder for users to avoid."

The CTIA's logic here can be reduced to "they do it so we want to do it too", seemingly framed within their long-time disposition of not considering themselves the "dumb pipes" that they are. Giving residential ISP's access to use this information, combined with what they already have on file for accounting purposes, is a situation just ripe for abuse. The article then goes on to say "What's less clear is whether the FCC will have any authority over ISPs' privacy practices after the rules are eliminated" - so there there may very well be no recourse whatsoever through either the FCC or FTC if or when widespread abuse were to occur. And of course, that's not even to start the age-old discussion about how & where the data is stored (plaintext on an insecure FTP server), who has access to it (all employees & contractors), etc.

I am confident that this change from the FCC will only serve to screw over individual people at the gain of large corporations.
I agree. The most interesting thing to check would be to try finding some Tsimane that left to work in the city and check their heart values.
Just a warning, gathering user data from an API endpoint like this is illegal in the US, even if it doesn't require auth. Be safe!
Run this:

document.getElementById("sidebar-toggle-container").className = document.getElementById("sidebar-toggle-container").className.replace( /(?:^|\s)hasBlockingOverlay(?!\S)/g , '' );
document.getElementsByClassName("blockingOverlay")[0].remove();

in the browser JS console.
Buffer overflows and uninitialized memory are not only possible in Rust (excuse me, "unsafe Rust", as if that were a different thing), if Rust gains any genuine traction and widespread use it is very likely they'll exist "in the wild" and as exploits waiting to be discovered.

Rust isn't a panacea or cure-all, and its fans are doing more harm than good (for Rust) by their zealotry on this matter, in my view.

And just to make it very clear: I do like Rust. It has some great features that I can envision having an excellent (and superior to C or C++) case for using in certain kinds of systems and application programming. But I'm not convinced these features are as much of a safeguard as some apparently are.
and more https://www.youtube.com/watch?v=Fzmm87oVQ6c
Anyone else getting "
Assertion failed: Cannot call unknown function run_lua (perhaps LLVM optimizations or closure removed it?)" ?
Ahh, all a matter of adaptation..
There is a difference between what the chef will do for you after a one-on-one discussion vs. what their marketing people will claim in written documentation that will come back to bite them in court if you get sick and sue them. We live in a litigious society, and it impacts our communications.

But they are right -- if you are Celiac, and it is so serious that a shared utensil is dangerous to you... their CYA statements are probably correct that it is not advisable to eat there. That doesn't mean you cannot do it... but it is your decision whether to go against that advice, and take that risk upon yourself... not their decision to give you a green light and put that risk on their kitchen staff.
Once you get your feet wet, the first year PHD course book for good theory is Pattern Recognition and Machine Learning by Bishop.

But it could be a bit too theoretical - it provides a foundational mathematical framework and got me thinking about problems in a better way.
Does anyone know about more apis in India that are so porous?
I was thinking more generally for disparate accounts. Email is just one example. Banking, utilities, iTunes, etc.

Email would cover a lot though as most of the rest allow for password resets if you control the email address on file.
Any large position purchase of Palantir by China will have to pass national security approval by the US Government.
Ask HN: How to approach for Junior developer positions in Sydney / Melbourne
Hello,

I completed online MOOC on Java & Android, and graphic design is my educational background.

I am interested in junior development positions in Sydney / Melbourne area.

Any suggestions on how to approach job applications for new developers who have come recently completed mooc's ?

I will share my github link and resume if anyone is interested.

Cheers
This was just a little demo that I threw together. I didn't expect so much interest but I'm glad people like it.

Lua is a unique language and it's ease of embedding made it a perfect fit for WASM.
If children having lack of access to digital devices is psychological torture, our grandparents truly were monsters.

Children have rights but they do not have liberty.
Thanks for creating a throwaway to put this comment, it really shows how it hit a nerve

PR companies working weekends are expensive
Well Gibson was "bemused" that people considered the world he described a dystopia, as that was never his intent.
Saxe Ganguli McClelland, 2013, about linear nets and orthogonal initialization. But then, read Li Jiao Han Weissman 2017 (maybe preprint), "Demystifying ResNet", which makes a nice claim about the niceness being conditioning of Hessian at init.

Tldr: it's good conditioner but you can do better ab initio
You don't understand. Imagine that some of your best friends are in another country and your contact to them is cut by means of removing your digital devices. Since children also cannot be allowed outside alone anymore, because the world is dangerous, this is truly like solitary confinement.

Also, to reduce your argument ad absurdum: Would you take away the shoes of your kid because well, our ancestors once walked around without shoes so it seems like an appropriate punishment.

Relative differences are the keywords here. Taking away something one is accustomed to causes pain.
Basically the VM is sandwiched between the host and parent OS. With a full VM you have a separate kernel. With containers, like Docker, you share a kernel.

The VM is then considered more secure because it adds that extra layer between them... but is it? It's just more code - more code, more problems.

The more effective solution is to simply harden the kernel of the host system, and then use a lighter solution like docker. Grsecurity + Docker seems like a solid fit to me, and you can mash another layer like Apparmor on top. It is very rare that I see a kernel vulnerability that would not be entirely mitigated by Grsecurity, or otherwise made far more costly.

The point is to stop adding layers on top and instead to focus on security that lower, trusted base.
> Since this isn't a public company, and many startups have rules over what is valid or invalid sale of their private stock, isn't Palantir able to say who can and cannot buy the stock?

Hmm I don't know if that's common. I think the company often has right of first refusal for founders, meaning the company can buy shares being sold, though not sure whether they can block sales outright.

> Also, if the US govt were very concerned about this, I imagine they would step in and block it.

Yeah, I agree. The security argument sounds like an investor's way of hyping the value of the company, since it's "so valuable China shouldn't be allowed to invest in it". Also could be Thiel's version of "I don't want to bake your gay wedding cake", substituting the Chinese for gays.
A Day in the Life: Professional Game Developer
Given this topic is kind of important, especially to hackers and founders who decide who gets hired and why, this is not a topic I feel should be considered a flamewar topic, and it definitely is not tedious. I will not avoid such discussion here. With that said, I'll be sure to add more substance to my posts in the future.
1. Sanakirja is fully transactional.

2. Sanakirja supports fork.

3. TiKV is distributed.

4. Sanakirja was started before (the Pijul project needed something like that, and TiKV was not around).
Yup, on Chrome 56.
Yes. My 9 year old daughter just figured out a pretty impressive workaround for Kindle FreeTime. If there's a parent account that is logged out you can click to reset password - opens a browser window to a page on Amazon. No browser bar but has Amazon search. Search Amazon for a product related to where you want to go, follow links until you get to what you want. Or just find a google link and get anywhere.
That's really cool(and kinda meta!).

I love how multi-paradigm Lua is, we used to do component based composition with metatables but I've seen OO inheritance and a slew of other approaches as well.
Not quite sure. But perhaps treating them as persons and not as pests may be a start.

I think the primary problem humanity has is that adults kinda forget that we learned our way as much by experiencing things first hand as being lectured on what was good and what was bad. Forbidden fruit and all that.

BTW, i seem to recall reading that giving kids responsibilities early results in them grouping up to behave responsible. The example used was a kid watching the family store while the parent was out running and errand or some such.
I have two recommendations that anyone with a CS degree or equivalent knowledge should be able to jump into with 0 other training, and come out with a solid understanding of how to find vulnerabilities and exploit them.

* Hacking: The Art Of Exploitation

This is an excellent book. It's lab-oriented, so you will be getting hands-on experience with reverse engineering and exploiting software.

And:
http://opensecuritytraining.info/

They have a graph of classes somewhere, and you can see "Oh I want to get to advanced exploitation, what should I take?" and you just follow along. Start with intro to x86, intermediary x86, then move on to the software vulnerability classes, life of a binary, etc.

Really, with only these skills alone, you can self-teach the rest of the way. There's a book called The Art Of Kernel Exploitation, if I'm remembering right, that would take you into a more advanced but more niche area, and it's really up to you where to go after you get the basis (just like with programming).
I don't doubt that you might change the world, but you should temper your expectations.

My question to you is do you really need YC or another incubator to do it? If what you've got is so world-changing, what they can offer you does not matter. Do you have no other alternatives than moving to one of the most expensive work locales in the world and joining in the rat race? Can you bootstrap? Do you have close friends you can trust? Etc.

YC seems like good people but the VC model is predicated on convincing people they need it. There are just as many failures as successes and there are other ways to succeed and other ways you can control your own destiny. You may even have a better shot if you don't do what everyone else is.
Culture and Revolution – Andreessen Horowitz
If you're shipping anything after 2010, you're not going to get within an order of magnitude within state of the art with that book (PAI), unfortunately.

There's basically no numerics in that book about anything that'll past muster at NIPS or ICML nowadays or would be shipped by one of the big corporate AI labs, I'm sorry to say.
It's not a "fork" per se, but it is reasonable to describe Darwin as a member of the BSD family tree, descended largely from FreeBSD. My understanding, based on my memory and the [Wikipedia page](https://en.wikipedia.org/wiki/XNU) is that the XNU kernel was built out of Mach, but then had 4.3BSD grafted on to provide a normal-looking UNIX API, which was later upgraded using FreeBSD. But it isn't a normal BSD, certainly; Darwin still shows its Mach heritage in the way it does process management and message passing.
You are the one prolonging this thread by making the preposterous assertion that a PR company would be stupid enough to create a numerical account for astroturfing.

Proper astroturfing is done with "respected" accounts and is far more subtle.

BTW, the '.' key on your keyboard is broken.
Well that's strictly a bug caused by mistaken use, as strings are not expanded lazily and heredocs are just another string syntax. How can one use the unix shell without string interpolation? Also, a similar programme would give the wrong result in, say, Ruby or Perl too.
Kinda funny watching him getting rebuffed when trying to convince FreeBSD to adopt Launchd.

Sometimes i wish the same kind of attitude towards stability would be a prevalent in the Linux world, rather than the magpie like chase of shinies.
I heard only parts of the podcast, what I believe he said: His best tool is emacs, travels about every three months, emphasizes the importance of marketing, get many clients from reading his blog, he doesn't like to be payed with equity, a big program is the refrigerator is always at hand. I didn't hear anything about a concrete project, perhaps because of NDAs, and if you are curious the interviewer/podcaster likes to travel and traves all around the world.
I agree, I only wanted to point out the irony of "linux on desktop". It actually happened* (MS failed big time), but not the way it was meant.

You had your own SGI Indy? I only had temporary access to one, but loved it at the time...

EDIT: it happened at home (mobile), not so much in business.
Windows might have been the OS with the overall top market share at one point (depending on precisely what you include in your measure), however measuring only "traditional" desktop/WS and server makes no sense anymore, and even Android alone has now nearly caught it: http://gs.statcounter.com/os-market-share

If you consider all the consumer electronics with a GUI that run under Linux, it is probably even "worse" (well, worse for Windows...)

You could argue that all of that does not make a unified platform, but neither does all the Windows (although the fragmentation might be somehow less important there)

Believing that a system/techno can take over the world in a year can be stupid. Believing that market dominance can't change in a decade or 2 (even if that's driven by usage changes), equally so.

(I was kind of surprised when MS started to completely switch their strategy and be furiously OS agnostic in tons of area. When you look at the figures, they actually did not have the choice if they want to survive the next several decades, and they probably would not have done that if they had...)
I write prolifically in my journal but I'm a little shy about putting all my observations and thoughts online. I did that when I younger and it became a distraction with the constant comment threads and wondering if people got what I was trying to say or were trying to dissect every sentence to find a mistake.

Currently, I am making an outline for a scientific paper that will double as a business plan. That is what I hope will win YC over to help me. I live in Utah right now, moved here a year ago from Maui, before that I lived in Atlanta for most of my life. Bay Area or PNW was the final leap or Bowser #3, here we go! :)
Well a healthy heart is a good basis for 'longevity'. "Wild", not-primarily/fulltime-agricultural and fully nourished tribes are also throughout the ages known to have never encountered diabetes alzheimers dementia bone-issues tooth-decay gout etc. How the heck do you account for the relative/potential/likely lack of vaccines/antibiotics/ambulances however? For at least a half million years, the life-span of any human individual that survived birth and somehow avoided/survived all the sorts of infections (that we are not inherently immune to either, absent pharma) and accidents and strife inherent in their lifestyles long enough was entirely within range with what modern homo sapiens can hope for, with medicines/ambulances/care-homes etc. It's just that on the whole, many-probably-most didn't make it that far to begin with. Those who managed to, were of course treasured respected and prompted for their 'wisdom' =)

A large part of "the strides medical progress has achieved" in terms of longevity is entirely about dealing with "the diseases of civilization" that we invented in the first place (out of necessity and lacking better info) with a chronic highish intake non-stone-age food-stuffs, cities, heavy industries etc.
For anyone using github and heroku - this may be convenient, but for anyone on bitbucket side - there is built in alternative (even within free tier). I'd say that they are quite late in the game
“Witcher” Studio Boss: 'We Had No Clue How to Make Games'
Yes, Axis Bank's MF. I made a full-disclosure here (plaintext passwords).

https://medium.com/@anilgulecha/axismf-coms-bad-security-pra...
> Yes, but that's the fiber backbone underlying the residential internet service.

True, but that still does not mean you can attribute 100% of the federal smart meter grant to the fiber buildout. Even if you chose to ignore all the other investments made into the smart metering infrastructure, fiber routes built to service the electric grid (such as routes to substations) cannot be used for providing Internet service. As such it is not reasonable to attribute 100% of the $111.5M grant to EPB fiber's network.

> Sure, with the newer 83,000 subscribers figue, it's more like $4,000 rather than $5,000.

This again assumes 100% of the federal grant being used to subsidize EPB fiber. I don't think that argument has any merit, as both the Feds and the incumbents would have words if that were the case.

> The FiOS uptake rate is under 40% (and during the first decade was under 1/3).

Yes, but we aren't talking about Verizon here. EPB's take rate is somewhere between 50% and 66% (83k subs out of 120k households, but part of those 83k are businesses), so my point still stands that costs are equivalent, given the actual take rate.

> It says that's the "Average cost of hooking up new fiber optic customer for EPB." I don't take that to be the cost including construction of the network in the first place.

No, but it includes the new construction needed to hook up customers in new developments.

> Is that for debt service? That could be for shared O&M too.

"$10 million: Fiber optic system access fees and rents paid to electric system in 2014"

> Television packages are also a major revenue source. In computing the operating margin, if you exclude TV from costs you also need to exclude TV from revenues.

Yes, but TV services are usually a loss leader and a break even proposition at best. Margins would probably improve by dropping TV.
> Is this a common thing in the ~infosec industry~ black community? Personally I have known two people who were sexually harassed who work in ~security~ the black community. I've also hung out with some and they do seem to have an unrealistic view on the opposite sex.

If you think I have a problem with afro-americans, you have a problem with getting the point
If you want to buy something from the US (perhaps a new computer), is it difficult and expensive to get stuff sent there?
Nope. It's rooted in computational biology.
GraphQL implementation in pure Clojure (by walmartlabs)
> I'm not saying it's never right to put it all on the line and bet on your idea. I'm saying the vast majority of the time it's a terrible idea and doing something like this serially would make for a terrible existence.

Yes, much has been made of becoming Ramen rich at the expense of the broke/really rich duality. However, if one creates a business that is profitable you have really done that something that is really impressive and worthy of respect. Only about 20 people in the history of the world get to create a Google. In my mind, success is a business that can be profitable in the medium/long term (not failing fast so the VCs can more quickly move on to something else).