skysight-inc/HackerNews huggingface dataset:
The docker project has done quite a bit of work on container security, so I'm not sure it's entirely fair to say that them not enabling user namespace by default is for that reason.

For example the work that was done on their seccomp filtering and apparmor profiles.

My guess would be that it's as User namespacing can introduce some issues (e.g. where mounting host filesystems), that they've decided the trade-offs aren't worth it.

Also looking at the CRI-O trello (https://trello.com/c/Ak2yMcpf/714-epic-cri-o-support-for-use...) it seems like user namespaces isn't even an option there yet?
You weren't speaking about the case. You spoke in absolutes for all cases.

In this case? I suspect the officer was completely in the wrong, but I'll reserve judgment until I have all the facts.

>So you're saying that if cops were more afraid of being prosecuted and punished after using their guns they would be more careful before killing a citizen.

No. I am saying that body cams, prosecution, and other tools will help protect bystanders, police officers, and suspects. It will help make better policies, protect innocent officers, prosecute guilty officers, and inform the public (because the police are sometimes wrong, but also sometimes not, in shooting people).

Expecting police officers and any bystanders/hostages to be target practice before they can shoot back just makes for a lot of dead officers and bystanders. It doesn't solve the problem. And it probably exacerbates it by increasing tension in an already stressful situation, limiting officer control of the situation, and encouraging corruption (since a system so unfair to police will necessarily cause them to close ranks further).
I don't understand your objection at all. They clearly break out "Gross Bookings", which is the total of all fares, from "Net Revenue", which is the amount that goes to Uber after paying drivers. The income statement is very clear in that respect.
Do you see a purpose to the non-revenue sports?
Hmm. Perhaps this is a difference between dev and ops, but almost every tool we use comes out of the box with settings unfit for production. Instead, they're tuned for development, and in some cases, deploying to a staging environment. At least, this has been the case in my experience.
Well, at least you recalled the story toothfully.
Human-Readable Explanation of Dual-Card GPUs
Learn how to be a better programmer by automating the boring stuff
The Nintendo Switch is basically a nVidia Jetson TX1 (4xA57@1GHz) with some additional parts and a nice plastic packaging. That's comparable to a RasPi 3 except for the GPU. The costs are probably a bit more then 30$ of a raspi but it's not 1000$.
I was matching my advertising reports with server logs, GA, and piwik. I wasn't trying to naively compare two different metrics.
If you don't change the data, why would the network change its results with just some more learning iterations? It's already converging.
Ask HN: Best solution for encrypting text data, accessible publicly?
I've been buying cryptocurrencies and I'd like to leave instructions for my family to restore them should something happen to me.

They're non-technical so the simpler for them, the better. I was thinking I could just encrypt a text file which is unlockable by a password.

The question is where can I host this data and update it easily as well? Some sort of encrypted git would be ideal. It doesn't have to live online forever, just for the next while until a better solution comes up. I suppose I could just keep an encrypted file on dropbox?
Nah, we're too poor for that: before the crisis, 87% of women between 25-to-44 had a job here (now they're just unemployed, not voluntarily staying-at-home).

They do most of the chores despite having jobs. We're a very patriarchal society still.
Currently, probably not. I'm using ant design right now and it uses Flexbox as its underlying layout engine. I think Bootstrap 4 is the same. Once they ditch support for IE11, then they'll probably move to CSS Grid, but at that point you really don't need a UI toolkit to be based on CSS Grid. You either just use the css directly, or have a UI toolkit-independent component wrappers around the grid.
Seems one solution could be for officers to use loudspeaker to state why they are outside, and give very specific protocols for safely exiting the residence. Possibly offer a communication channel to dispute validity of their arrival. I imagine they have the phone number of the land-line or cells within a certain radius of the residence, along with social media profiles they could examine to 'profile' participants in the situation and assess validity. You can't have a system that solves the problem 100% and is immune to being gamed by criminals, but with data and clear lines for communication it seems you could pretty easily create a reliable 'safety net' for people caught up in fraudulent 911 calls without exposing the responding officers to any risk.
As a dumb end user, I would rather use a vector-based language (APL) like k than Python to play with this stuff. Probably no arguable advantage against overwhelming conventional programmer wisdom, just personal preference.
Studies have shown APL can be easier for non-programmmers to learn. I agree with this, but I do not wish to argue with programmmers about it.
YalpStore [1,2] makes getting Play Store apps a lot less painful than going through the process of extracting an APK from one phone and side loading it onto another. There are some that simply won't / don't work without Google Play Services, but most do. This made switching to Copperhead OS much easier for me.

[1] https://github.com/yeriomin/YalpStore

[2] https://f-droid.org/packages/com.github.yeriomin.yalpstore/
If not Bill then Bob. At least he's doing some good in the world with that cash instead of hoarding it for him and his family. If it weren't for him, how long would have malaria persisted?
>Cryptocurrency is to blockchain, what email is to internet

Some cryptocurrency, like Byteball, are a DAG and not a blockchain at all.
The question isn't "How can you do possibly well on NP-hard problems?" It's, what particular tricks are these people using that allow them to get around the NP-hardness of this particular problem? The article doesn't talk about that and it should.
It sucks. Hopefully, they are held accountable.

But do you honestly see an outcome where information is not collected at all? Because I don't, so as I see it we need to put the correct incentives in place to not only make it less likely but to handle when it inevitably does.

Maybe a fine up to $X per account leaked with a soft cap (but absolutely no less than $1 or $2 per account) is levied. Losing 1 million accounts would hurt, so companies would make real decisions about what and when to collect data for liability reasons, and protect it better in many cases when they did.
This article got me thinking. There should be an ad company without any tracking. And the only company that I would actually trust with this is Mozilla.
> false report with the hope that it will provoke an armed response is effectively an attempt at homicide.

that requires malice aforethought which must meet the following criteria in some jurisdictions in US:

> Intent to kill

Just because they called SWAT doesn't show intent to kill. Hard to prove even if the accused has threatened to kill the gamer because calling SWAT is not like calling a hit squad.

> Intent to inflict grievous bodily harm short of death,
Reckless indifference to an unjustifiably high risk to human life (sometimes described as an "abandoned and malignant heart"), or
Intent to commit a dangerous felony (the "felony murder" doctrine).

So this is where the problem lies with your argument. The accused did not call or hire assassins which would suggest intent to kill. The accused could not physically hurt or threaten the life of the deceased by calling SWAT because that would mean its common knowledge SWAT are hired guns.

At best involuntary manslaughter makes sense. If there was a law in place before this event, specifically aimed at protecting people from getting SWATTED, then there's a small chance in escalating the charges.

I'm equally frustrated at the lack of laws and punishment to deter SWATing, but this is a side effect of the militrilization of local security apparatuses.

But like other tragedies in America, it will do little to deter the trend, as it is clearly divided on excessive force. Proponents will claim guns will keep the government in check....against a suite of surplus military hardware used to invade a few countries.

This is a systematic problem, charging one man will not fix the situation. Of course, after this case, people stupid enough to swat each other are going to find an increasingly less sympathetic jury. But it will happen and SWAT is not suddenly going to stop and ask if it's legit or not.

It's incredibly cowardly and shortsighted to traumatize using security apparatuses meant for true emergencies, over some ruffled egos, in a virtual, ephemeral electronic world.
Given that was the direct result of a panic over tsunami's in japan and guess what Germany doesn't have much of a coast line.

The early mothballing of Germanys nuclear reactor which where being phased out is the direct cause of the increase.
If the endgame is an autonomous fleet, you just might want to show people how big of a market this is and how much you're capturing.
How the embeddability of Lua impacted its design (2011)
Easily use ARKit to detect facial gestures
How to not get stressed out during a programming interview
I’m sure there are a large range of mobile home building quality but the many that I have ever been in have had thin walls and cheap finishes inside. Maybe it’s because of the price point they need to hit for their target market. Most tiny homes I’ve seen have had high quality materials and finishes. Maybe people convert the cost savings of building themselves to building with higher quality materials (for tiny homes).

It’s also worth mentioning that most tiny homes I’ve looked at were far lower square footage than a typical mobile home.

All this to say tiny homes are not imho rebranded mobile homes. They are a different beast altogether.
Here's a full-length CSS Grid tutorial posted to HN a few days ago.

https://medium.freecodecamp.org/heres-my-free-css-grid-cours...
We treat them almost exactly the same. As the province of starry-eyed dreamers to whom we pay lip service while only allowing them a pittance in comparison to what we spend on wars, enriching the few at the expense of the many, and indulging our varied desires for swift gratification.
>I think you probably underestimate how common SWAT-ing is.

It's easy to underestimate unless you've listened to it happen tens of times in a single hour.

The calls take two minutes or less, individuals have literally been competing on how many they could do within a single day.

"I'm at 725 5th Ave, I've shot a bunch of people and will shoot any police that come" Takes only seconds to say and would almost guarantee a heavily armed police response.

There must be thousands, possibly over ten thousand of these incidents every year.
I think his primary motivation is so simple.. he wants people to like him.

Many, many people disliked him after his predatory business days. This is the perfect way to a) keep doing interesting work, b) getting people to like him again, c) get some personal karma.

I can quite easily see the appeal of this.

Also; I'm a big fan of his current work. I loved how my country (Sweden) matched a very large billg foundation program funding the other year; I think he's way better equipped with handling that money than my government's idealistic but fumbling people.

I just think we shouldn't forget his past just because he's turned into modern day santa. We should learn from history...
Meditation is essentially an attempt to fill a God-shaped hole in your life with a new-age-shaped brick
And House rules give the top positions based on seniority, so states are incentivized to gerrymander to protect their senior representatives. We need to change Congressional rules in that regard as well. Due to top-two, California lost a 40-year incumbent in Fremont who was fifth in seniority in the 435-member House. Sometimes California takes it on the chin with its referendum when doing things that are against its current best interests but provide a useful experiment and forcing function.
What were examples of those bad vibes?
TBH the USSR got into space not because of its government but because it had captured enough expertise and manufacturing ability from the remains of Nazi Germany. If not for the end of WW2 and all they confiscated its very likely they would never have catapulted so far ahead of where they were so fast.

the issue with all ideal forms of each government type is that people in charge elevate themselves above the tenets of said government.
No. Kansas recognizes depraved-heart murder, which does not require a specific intent to kill, as 2nd degree murder. Sorry. If the prosecutors find with any certainty who called in this fake emergency, they are going to ruin that person's life, that person will deserve it, and the ruin will serve the public interest.

Maybe they'll get manslaughter on a plea.
Steve Earl did the title "copperhead row" ?
women have started going to college in higher numbers than men. the vast majority of women will only date a man who is equal or higher education level than they are.
Swap can be useful for batch jobs that need lots of memory to run but the working set is small. Then you can keep the physical memory for the working set and the disk swap for the (larger) whole set of memory.
GUN v0.9.5 Release – A Decentralized CRDT Graph Database
How Japan and Korea Design Cities for People Instead of Cars [video]
>How often do they result in fatalities?

This seems to be the first publicized incident. Pets have had worse luck in the past though.
> In particular if you are setting per-container usernamespaces, like you ought to be, then this exploit doesn’t do anything.

User namespacing in docker is enabled at the daemon level, not per container, so all containers share the same offset. This would ensure that a root user in the container would escape to a different uid on the host, but doesn't prevent someone from moving sideways through the containers on the same host.

Note that enabling this will break the developer workflow of mounting files from the host into the container. I believe files will show up with the wrong ownership inside the container.
The stock launcher that ships with AOSP (and Copperhead OS) [1] is OK but leaves something to be desired. I used Nova Launcher [2] for years before switching to Copperhead and liked it quite a bit, but after forgetting to back up my settings and being to lazy to reconfigure it just the way I liked it, I switched to KISS Launcher [3]. It took a few days to adjust, but I prefer it now, and it has the added benefit of being open source and available through F-Droid.

[1] https://android.googlesource.com/platform/packages/apps/Laun...

[2] http://novalauncher.com/

[3] http://kisslauncher.com/
Does Grid work in IE 10 or 11?

`caniuse` says "partial" support with prefixes in 11. Anyone have experience of how well it works, with prefixes, how "partial" or compatible the support is?

> I implemented this CSS Grid progressive enhancement on The New York Times Watching media card component. Users on old browsers see Bootstrap, but users on browsers that support the display: grid property

Okay... yeah, I don't want to do that. Workaround with bootstrap or flexbox that don't really do _quite_ what I want as well as grid does... are still better than having to do the workaround _and_ grid, to get all browsers.

> You’re absolutely ready to declare display: grid if you’re the only person contributing code.

I think it's the other way around. If you have a team big enough to do grid _and_ fallbacks with flexbox or float or whatever, you're ready for grid. If you're one person... you probably don't got time for that! If I got to do the good enough fallback anyway, I'd rather just be done then. At least if you're me. Sadly, so goes CSS improvements. In a couple years I can probably use grid. Hey, at least I can finally use flexbox, which is awesome too!
C++, Python, bash, javascript, Rust.

They introduce unnecessary complexity and tend to make users too dependent on them, while hiding actual functionality behind colorful buttons. There's a reason most productivity-focused programs are terminal or text-mode programs.

An IDE-dependent toolchain is a sure sign of an immature project and, likely, rookie developers.
Well yeah. In a FPTP system those third-party candidates hurt the major-party candidates closest to their viewpoints, whereas now their voters end up having a say once it becomes clear that their favored candidate is not viable.

Same with Republicans in liberal districts; a choice between two Democrats is just what the voter profile of those districts leads to, and at least this way the minority party gets to influence the final winner.
> Yeah, so blacklist that data center.

The most egregious fraudulent traffic came from at least a dozen different no-name data centers, and it was actually easier for us to cut out the fraudsters selling us the traffic than to blacklist the traffic itself (even though it was several steps away from the original source the traffic was purchased from).

The traffic itself was actually rather easy to identify independently of its actual network source, because they were using Selenium locked to a specific, outdated version of Firefox that also happened to consistently throw some errors that our standard infrastructure monitoring caught and alerted us to.

I still think that cost per impression is a difficult traffic source to properly verify (especially if you end up with a traffic source that is botting from compromised PCs) and as such should be treated with skepticism. Cost per conversion/install/etc. generally seem to be slightly less gameable (excluding, of course, the farms spread around economically disadvantaged areas where workers have hundreds of actual devices on which they are installing apps to game the cost per install ad traffic)
> This could just be because I'm a mediocre developer (1X) but:

If you're mediocre as in average, that makes you 4x, not 1x. The 10x developer is 10 times better than the worst performer who is still employed, or 2.5x the median.

I only point this out because lots of people get it wrong and end up unfairly underestimating their own competence.
Thatcher refused to take panda to Washington in Concorde, papers show
Three Wordpress Plugins Backdoored in Supply Chain Attack
I use CopperheadOS on my Nexus 5X and I am extremely happy with it. My job is android development and I have some personal paid apps on Google play and one Foss app on F-Droid.
Access clipboard in the background and record audio in the background have been lately added to the security features available on CopperheadOS, and I can't imagine now using my phone without COS hardened implementation. I use FDroid for all the apps I need and yalp for a couple of other apps not available on FDroid.
The majority of apps now depends on Google play services and that is flattering and disappointing: all those GPS APIs are very appealing to developers and teams because makes things easier and all but IMHO using all those services is contributing to data mining and I don't think it is fair.
Depends whether one's interest in Rails[1] was because it was growing quickly and getting a lot of attention, or because it made developing Web apps quicker and much more enjoyable.

The former is over. The era when a "Rails shop" (consultant) could grow quickly - often by delivering brand new apps to customers who asked for Rails by name - ended years ago. I don't think there's a current equivalent to this. For a few years, the interest in mobile apps was about as high as Rails had been, but that's past too. (It's not a language or framework, but… I think containers/Docker has had this spot for the last 1-2 years.)

The latter is still true. Rails is still remarkably efficient in developer time. Moreover, a developer who enjoyed writing Ruby 5 or 10 years ago will probably enjoy it even more now. Of course, other languages and frameworks have also improved[2], but Rails is still competitive by these measures.

One thing that has changed from "peak Rails": the importance of JavaScript and client-side, well, everything. For about 2 years, choosing a JS-centric stack often led to using Node. Since 2015 or so, I think server-independent frameworks (React) and languages (TypeScript) made other server frameworks competitive again.

[1]: or Ruby, but not many people were attracted to Ruby for this reason

[2]: Node gets a lot of attention as a "Rails competitor," but I think someone considering Rails for developer productivity and happiness would probably consider Python (Django) and more recently, Crystal (Lucky or Kemal) before Node.
Ah, dev... ops... How about DevOps? As a (originally) dev I bring my app to production. How do I stand a fighting chance to reconfigure the defaults in the way you suggest, without suddenly gaining a whole new set of skills? Good defaults would be helpful, even if they're very conservative. I can break things open, but at least then I know what to read up on.
The thing about Bootstrap (at least v3) is that the component library is pretty bare bones.

But I'm curious to your statement about "working together". Are Bootstrap components "aware" of the layout css/components?
Interesting although if you have access to a computer it probably makes more sense to plug your phone in and use remote debugging.
> Simple transactions require more planning. Employees must leave earlier to cash their paychecks, says Ms. Baker, who plans to add automatic deposit next year.

Paychecks... As a European I'm always suprised about how primitive the US financial system is.
I don't think Leninism, Bolsheviks or Communism are anything to do with what I understand leftism (or socialism) to be.

The former were all about a minority controlling the majority, while the latter is about the majority being in control (although that does not work out all that well always either).

Note that the it is almost impossible to discuss this due to overloaded terms like liberalism which means the opposite depending on who you ask. I define leftism like this: https://en.wikipedia.org/wiki/Left-wing_politics
While an interesting metric, a sample size of 3 (states) seems insanely low to draw cause between guns carry == safety. There has to be more meaningful ways to glean that data, no?

May as well tie it into most popular music if we're using sample sizes that small.
There is if you manage you ppc and display advertising properly. btw I think you misusing channel here there are not "hundreds of channel's".

A channel is say Display vs PPC or Organic - I think you meant campaign.
That seems to be outdated information: "For the first time in 50 years, the educational balance among married couples has tipped towards women. Wives are more likely to be the better educated partner than the other way around. The trend is particularly sharp among newlyweds; in 2012 almost 40% of college educated women were married to a guy without a degree."

http://time.com/7442/wives-are-now-more-educated-than-husban...
Follow me on twitter to get latest updates: https://twitter.com/romanorac
I did say "part of" public transit. Clearly trains have a role in moving people from point A to F to M, and the in-between can be done with autonomous. And I don't have a 5-10 year pie in the sky idea of autonomous either, I'm thinking 25 years down the road.

The point is car ownership itself is obsolete and it's not a big stretch for there to be a public car option. The road infra is already public, just like rail tracks and rail cars.
I'd be shocked if the ad revenue per video view were even a cent, and I'd happily pay a cent to see the video in the scenario you described.