skysight-inc/HackerNews huggingface dataset:
The points on Linux foundation half-assing or stealing credit are damning. They shouldn't be doing it if it's true. I do have to question or counter a few things:

"The ability to create stuff out of nothing( from 0 to 1) is rare. PaX/Grsecurity is the origin of OS defense mitigation and still is the most effective defense solution."

Secure UNIX goes back to the 80's with commercial releases with security-enhancements back to about 1990 w/ Trusted Xenix. They disappeared except for the Compartment Mode Workstations, which whittled down to maybe two, since neither paid market nor FOSS would compromise on legacy app breakage to reduce attacks or leaks. High-assurance security switched to creating deprivileged VM's for UNIX's on separation kernels with rigorous development, review, and testing. Some were even modifying the CPU's themselves to try to encrypt or authenticate memory pages to spot breaks. This work wasn't the first in OS security, the strongest in OS security then, or the strongest model today.

This author's evangelism aside, it was a great supplement to a Linux box to reduce the risk in many ways. They did a lot of great, tactical mitigations that would certainly stop a decent chunk of exploits. Neater still is that they're complementary to the prior work in high-security UNIX and attempts to automatically obfuscate systems for security. I recommend adding as many as possible long as it performs well.

"Closing the public access doesn’t make PaX/Grsecurity a non-free/libre software. Those who purchase subscriptions can access the source code. "

This is what I'm not getting. I've seen the claim in several places. Free/libre software requires ability to read, modify, and distribute the code. It's only free-as-in-speech software if I'm allowed to give it to the whole world for free. If it's freely provided and no source distribution is allowed, then it's free-as-in-beer. If it's paid-source and no redistribution, then it's proprietary software that comes with source. So-called shared source is a business model I encourage for companies that absolutely won't do paid GPL or dual-licensed. Better than nothing if tool becomes popular or necessary. Plus, might let license of specific products or versions expire into FOSS license later.

In any case, it's proprietary, shared-source software if I have to pay for the source and can't redistribute it. So, could any HN readers who really know how their business model works confirm or reject that with data? What exactly do people buy with what rights? I keep hearing different things.

"More importantly, PaX team/Spender generously shared their work with the FLOSS world in the past 16 years."

This is very commendable on top of the security gains it provided. It's why I'm questioning the claims instead of critiquing the team for going paid. I encourage it given companies will just freeload off you until the work is nearly unsustainable. One can always offer perpetual, free licenses to contributors, universities, non-profits, small businesses, and so on if feeling altruistic. Otherwise, they get what quality/security they pay for.
That may well be the case but forced arbitration clauses are legal in the US. There have been several recent Supreme Court cases that upheld mandatory arbitration clauses.

Here are some citations:

"American Express Co., et al. v. Italian Colors Restaurant." Oyez, https://www.oyez.org/cases/2012/12-133. Accessed 29 Apr. 2017.

"AT&T Mobility LLC v. Concepcion." Oyez, https://www.oyez.org/cases/2010/09-893. Accessed 29 Apr. 2017.

"The End of Class Actions?" Arizona Law Review, http://arizonalawreview.org/fitzpatrick/

Gilles, Myriam and Friedman, Gary (2012) "After Class: Aggregate Litigation in the Wake of "AT&T Mobility v Concepcion"," University of Chicago Law Review: Vol. 79 : Iss. 2 , Article 3.
Available at: http://chicagounbound.uchicago.edu/uclrev/vol79/iss2/3

Edited to add the third and fourth citations.
You realize how you're not making any sense. Docker is another abstraction so it can not be better in terms of resource usage than running whatever process you are now running inside docker. You literally have more overhead with the docker approach in terms of all resource utilization. You now have all the overhead of an OS and then you are layering docker on top of it. The OS has not gone away. It is still managing processes, memory, files, sockets, networking, etc.
But those other people who can't cycle can do other things. Rural people may not be able to cycle, but they can probably grow some or most of their own food.

Everyone can contribute in their own way.
There's all kinds of weird and different rules/laws from country to country.

For example in my country (Germany):
"Minors between 14 and 18 years are sentenced by juvenile justice. An adult between 18 and 21 years may still be sentenced by juvenile justice if considered mentally immature." [0]

This also means if the prosecution opens a court case against an individual that was less than 14 years of age at the time the crime was committed the criminal must be immediately dismissed although charges under private law can still be brought up (suing for damages etc.) and the parents can also possibly be sued for not supervising their children properly. [1]

[0]: https://en.wikipedia.org/wiki/Defense_of_infancy

[1]: https://en.wikipedia.org/wiki/Vicarious_liability

edit: formatting
Because either there is no RPM or the RPM conflicts with other RPMs on the machine.
Waste of space, and extra complexity. This is a thread about over engineering, right?
This is a more charitable interpretation of what I meant: "we can quickly test the value of an idea via a prototype without the cost of making it super well behaved in other areas." Which is an excellent application of containers!

I just sometimes wonder if the cart hasn't gotten in front of the horse on the whole container front. The fact that the term "bare iron" has been hijacked to mean "not under virtualization" made me start to think that something is seriously fucked up.
I don't see that as an organizational problem, but a way to try something out safely and faster.
All I see is a purple blank page.
Not the guy you asked, but for me, nested tmux is usually just pressing the hotkey twice. ^b^b <cmd> for nested and ^b <cmd> for parent.
This makes me think of "foot glove" shoes like Vibrams, which are designed to give the minimum of impact/penetration protection against splinters, nails, etc, but constantly replacing those as the kid grows would probably be rather expensive, given that they have to be very well-fitted to avoid friction blisters and the like.
Ds is still going strong isn't it? http://www.dsss.cz/

Wait, you're right https://cs.wikipedia.org/wiki/D%C4%9Blnick%C3%A1_strana it was banned as a threat to democracy. That lasted long...
Sorry, I grew up in a culture in which being so explicit was rude, while being barely-elliptically witty is the normal mode of discourse. I sometimes forget.
One way to interpret OP's 'rounding' concept is that in a round of a dice game, the winner's score is rounded up to 1, and the loser's score rounded down to 0. If, on the other hand, each turn each player got a fractional score between 0 and 1 (without 'rounding'), then that would represent a 'truer' evaluation of the dice.

The best way I can think of to allocate a fractional score to each die player is to sum all the dice rolled, and give each player their roll divided by the sum. So if players rolled 2 and 5, one player would get 2/7 and the other 5/7 - instead of rounding the scores to 0 and 1.

Note that to calculate the EV for a die under this scheme, you have to calculate it versus a particular opposing die, so it would produce a different EV for the transitive A/B/C dice in different combinations.

Perhaps that's what the OP was trying to suggest?
Here's the upstream issue: https://github.com/mobile-shell/mosh/issues/649

Looks like it's a desired feature, but just requires some work (in part around parsing the extended escape sequences correctly).
You fool should have informed yourself before commenting.
I do too, but...here I am.

I wonder if an opt-out payment scheme would work: you authorize the site to bill you up to (say) $5/month. When you finish reading an article, the site deducts $0.25 from your account unless you take some simple action. If your account is empty, you read for free until the next month, and maybe some "proud support/well read" flair or something.

It does put a limit on the site's monthly revenue, but perhaps ensuring that readers feel like they're getting what they paid for helps make up for that.
I was referring to how they are unable to provision the right resources to run experiments because of all the red tape and they are getting around the issue by using docker. What happens when the red tape guard get wind of this?
Wow, I was just thinking of spinning up something similar. This is a fantastic idea good sir. I'm going to make a pull request right after this comment.
How about checking your phone every five seconds even though you know you have no notifications for neuroticism? Stop picking on my internet forums.
I have done live coding exercises with candidates, allowing them to use the web, etc. This is actually even more enlightening... you should see some of the things people google, copy-and-paste, etc.
Yeah, no kidding.
I meant it in the sense of "oh god I just spent 40 minutes reading a circular argument".
Considering that such a change would likely involve a constitutional amendment, the correct target for such voting would be the legislature (both state and federal).
A fair amount of the popularity was being the first scripting language with a reasonably complete, cross platform, UI widget toolkit.

It was also very easy to embed inside a C application for a user facing scripting capability.
It's not change that is alarming, it's the rate of change. In the past, you'd have something like 1 degree C of change over the course of tens of thousands of years. Now you have that same change in less than a few hundred years. Short of a massive asteroid hit, the Earth hasn't experienced that sort of short term change.
The tool is launched on boot via launchctl on OS X and runs all the time.
(https://developer.apple.com/legacy/library/documentation/Dar...) It automatically deletes screenshots older than four days. I use it in conjunction with Workflowy and a web app I wrote called Task Ranger (http://taskranger.com) to keep track of how I spend my time and to come up with improvement plans.

Task Ranger gives me the big picture -- e.g. learning new things is my biggest time sync and takes 25% of my working hours. The screenshots + workflowy give me the micro level view -- e.g. studying unfamiliar codebases is 1/3 of this 25% timeslice.

So now that I know learning new codebases takes a lot of time, how can I get better at that? Well one thing I've started doing is creating a txt file containing basically a manually generated tree of the function calls made by a program. It might look something like this:

/new_user
validate_form
create_new_user
User(...)
send_welcome_email
load_email_template
pass_to_email_service

That's a toy example of course -- real-world call trees are huge. After I generate this once I can quickly see how the whole program fits together. And I can use it with this feature in Sublime Text where you right click on a function name and then pick "jump to function".

That's just one small example of something I'm trying. It's an ongoing improvement process that I try to allocate time for. The screenshots are just a helpful view toward understanding where my time goes in more detail.
The other angle is that regulations (FDA etc) probably make it impossible to legally offer any treatment that doesn't have at least $1B behind it.
I think you are overestimating the importance of facebook in the lives of its users. Sure, there are people that depend on it pretty heavily, but I don't imagine that would be all of their users. Moreover, the younger generation is abandoning facebook in favor of other platforms like Snapchat. But I don't have the raw data to know which way the pendulum swings...
Learn from their mistakes? I think the biggest lesson has been that you can scam a small percentage of users out of their money, without any real impact. There's been so many stories about paypal stealing people's money, but their core business is still going strong.
Poor, poor Sartre.
Thanks for the answer!

I guess my lack of knowledge in the field shines through. Continuous learning is apparently under active research at the moment, and this blog post about it [0] is less than two months old, so your intuition was right.

If I were to guess the secret sauce I'd say that a mirror might be involved. Is depth information not worth the trouble for these kinds of classification problems?

[0] https://deepmind.com/blog/enabling-continual-learning-in-neu...
> Actually, I think it's true that "If you swap out every use of strcpy for a correct use of strncpy, you'll have fewer bugs."

Yes, I agree that this statement is true. But my claim is that this is not what the article means by "safer", and the article's definition of "safer" is more useful.

That is, people who are saying "The article is wrong because it is possible to use strncpy correctly in cases where strcpy was not being used correctly" are not disagreeing with the article so much as talking past it.
Oh if you put it that way :)
I think mosh could be improved with a single trick. Native scrolling for last 10000 lines is super useful. however 99% of time user only looks at say 150x80 chr screen.

Mosh syncing that 150x80 screen is a superb idea. Udp is great for mobile hotspot connections. However mosh server should save a buffer of 150x10000 on server side. Only sync 150x80 but If user uses native scroll then it should ask server for last X lines depending on scroll position.
Do you have a reference for the 1 million number?
That's the "Stroop effect"
If you want total control of your funds - Bitcoin. No TOS, no age check, no account freezing, no corporation behind it.
One huge benefit of containers is that you can treat a program as something atomic: Delete the container and it's gone, as if it were never installed.

Modern package management systems like APT spend a lot of effort installing and removing files, and they don't do it completely; any file created by a program after it is installed will not be tracked.

You could accomplish the same thing in other ways (as Apple's sandboxing tech does), of course.
Why can't I tell a bank employee a time-based 2FA code over the telephone?
I have a whole bag of tricks for that.
http://www.newsweek.com/vibram-caught-flat-footed-250388

http://www.huffingtonpost.com/2014/05/22/barefoot-shoes_n_53...

http://www.runnersworld.com/newswire/vibram-settles-class-ac...

http://www.dailymail.co.uk/news/article-2625700/Bizarre-bare...
Maybe losing the current web wouldn't be that bad, it's largely become a centralised, tracking and surveillance tool for mass marketing and used for spying on citizens. One gets the feeling that any significant level of "openness" died a long time ago.

It's not that it's useless, but a fresh start might not be the worst outcome.
It sounds like OP is actually the one in control of the proxy (think enterprise-grade ones rather than proxy sites like hidemyass.com).

Even if that weren't true, one could always just throttle the proxy as if it were a porn site.
Sangoma Data Breach: SSH and SIP Credentials Stolen
''NSA does not have the ability at this time to stop collecting ‘about’ information without losing some other important data''

Uh huh.
Maneesh, I found your journey truly inspiring in the way you automated a slap in the face. I had actually heard about the product before seeing the Shark Tank episode, and was aghast by their rudeness! You're clearly a smart guy and I think you made the right decision at the end.

Would you mind commenting on the value that TV exposure on Shark Tank brought to Pavlok?
Yet I think you'll find that the more you read (both in depth and breadth) the more you will see that there are tight connections and parallels between things that are often, for social/academic/political reasons, considered disjoint. This was the key insight (and only insight IMHO) of the deconstructionists.

The implication is that either lots of breadth with some depth, or lots of depth and some breadth will give you sufficient insight and ontological complexity to attack any reasonable problem.

Which fundamentally was the original meaning (since lost in the early 20th century) of the Ph.D.
Nope. Depends on what kind of security you are looking for. Which door is more likely to reliably allow me to enter my home? 1. No door. 2. A door with N locks in parallel. 3. A door with N locks in series. As N increases, or goes serial instead of parallel, my ability to enter my own home reliably decreases. Consequently, assuming so side channel attacks (windows or other doors) the chance that other people can't get in also increases.

Understanding that adding variables in serial in order to fuel your car reduces the chance you can successfully fuel your car is easy. Understanding that when the internet goes down, you won't get gas is easy to understand.

Hedges aren't what they're cracked up to be. 1. What happens when your hedge counterpart fails? (check out credit default swaps, or trades that can't execute, or limit down markets, etc etc, bad oracles (credit rating agencies..)) All hedges require a counterparty. Counterparties fail. Even when they don't fail, they become corrupted by bad oracles.

You can't create reliability by wiring variables in series. You can create "security" at the cost of reliablity. How much cash has been lost in "smart" contracts, vs stupid safes per capita.
China Doesn't Understand the Concept of American Chinese Food (2014)
React is excellent. I've been building UIs for 20 years and it is by far the best development experience I've ever had.

Watch out for contrarians and purist wonks. Set aside your preconceptions and bias against new things you don't understand.

Embrace reality with an open mind.

Fighting it and wishing for an alternate reality is not the path to happiness. I know that much.
To be honest I find C/C++ quite scary. I would love to get better but I had a very bad taste when I was in school.

Now if this was javascript, I'd be all over it.
> If I were to guess the secret sauce I'd say that a mirror might be involved.

You might be right there :)

> Is depth information not worth the trouble for these kinds of classification problems?

Yes, it would be, but there's much more to it than that. Also keep in mind that there are parts that are almost transparent and that no matter what background color you come up with there will be a bunch of lego parts that match it.
I signed up for Amazon's repeat delivery, which not only reminds me to change it (oh look a filter showed up time to change!) but it saved me money too. It's way cheaper than that subscription program (I looked at that too).
If only we had some sort of technology in the 21st century that makes it so people very rarely die from infected wounds. Perhaps a type of medication that fights bacteria? Or a thing to sterilize the wound and keep it clean while it heals? Hmmm

That said, I used to run barefoot all the time. Even in San Francisco. Never got any wounds or infections. After a year of practiceb even stepping on glass didn't pierce my skin.
So, the question is: What can we do as a community? Come on guys. We have probably many of the smartest people on this planet reading this shit here right now.

What can we do? What could be a cool tool, solution, initiative? Ideas anybody?!
I think the "just as easily" is highly debatable. I'm not a container evangelist by any stretch, but if you were going to take a "just chroot it" approach, the very first thing you'd want to do to ease the operational burden is define some kind of standard app packaging format that defines what's in the chroot and an entry point and an environment, and maybe some scheme for mapping external data and various other niceties you get with containers, and at that point, congratulations, you've reinvented containers.
Why Companies Are Not Startups
Wasm has no facility for GC, polymorphic inline cache, or direct DOM integration. They are on the roadmap, but probably far off.

So there isn't a direct path to WASM for many dynamically typed languages. Tcl can get by without all that because it's small enough to just port the whole C interpreter instead of trying to have tcl compile down to wasm. That would be very large, slow, and tricky for Perl, Python, etc.
Ms Streisand called, wants her metaphor back
AMON TOBIN Supermodified Album Continuous Track Stream DrumnBass IDM Downtempo
No, it would miserably fail at that unless I fed a whole bunch of such composites in and tried to teach it the difference between the two. Even then I'm not sure if it would work but it doesn't happen often enough to be a problem.
I've had my Sprint plan for a few years and I'm grandfathered in to unlimited data. Before I had Internet set up in my apartment, I used 400 GB in one month with it tethered to two laptops, a desktop, and a PS3. No complaints and no slowdowns.

Are these plans really nonexistent nowadays?
That’s strange. I’m looking at it in a number of browsers, and it’s visible in all of those. What browser are you viewing in?
I think there were there were beads of water on the outside of the mould, but it was much closer to water-tight than I had imagined, even without the vaseline.

They're astonishingly well made for a children's toy.
Sounds like then you should learn what a chroot is. All the existing linux platforms already provide the solution to your exact problem with much less overhead than docker.
To be clear a FeatureRequest not a Bug. So I think the age is understandable.
The number of bins is of course directly related to the number of passes. 7 is the largest that I can still fit on my desk so that's why it is 7 right now, I'd love to take it up to 13 that would make things much faster. Two would be so slow that it probably would be quicker to sort by hand because of the number of passes you'd have to make.
How I got an FBI record at age 11 from dabbling in cryptography (2015)
> It is weirdos and neurotics that are most disposed to spending all their time posting online

Uh.. hey...

But seriously, I think it's also simple the case that an anonymous internet forum is a great place to vent your innermost feelings.
I was all ready to mock this by saying how most papers get only 1) Read the abstract, 2) Read the conclusion, 3) Look at the graphics, from me.

Turns out that it's basically what the paper says, but then goes into more detail about going into more detail. Worth at least a second pass :)
Right but the other things in that list were interpreted languages. A purely compiled language is certainly going to be smaller, but that's slightly apples to oranges.
Yes, for one the weights are totally new, second I dropped a bunch of layers because vgg16 is way too powerful for this task. As I get into more kinds of parts I may have to put those back in though. Finally, I added dropout after the convolutional layers as well as after the fully connected layers, that seems to help a lot with the accuracy. All this was arrived at empirically, I don't know enough about neural net topology to go about that in a more analytical way but it does the job.

As for opensourcing it, yes, but then likely lego would have a trademark case so I would probably use another name. The whole thing would make for a pretty neat Kaggle competition.
Or just shoes.

MRSA can eat a kid's foot right off you know.
The article says "has launched". It hasn't?
What's your average customer LTV?