skysight-inc/HackerNews huggingface dataset:
In the article the author states:

> CVE-2017-5123 was published earlier this year on Oct 12 — it was a Linux kernel vulnerability in the waitid() syscall for 4.12-4.13 kernel versions.

Does this mean that kernel versions prior to 4.12 are not affected? That's what I understood from the related issue in the bug tracker https://bugzilla.redhat.com/show_bug.cgi?id=1500094

By the way, this is very important:

> In 2017 alone, 434 linux kernel exploits where found, and as you have seen in this post, kernel exploits can be devastating for containerized environments. This is because containers share the same kernel as the host, thus trusting the built-in protection mechanisms alone isn’t sufficient. Make sure your kernel is always updated on all of your production hosts.

Great article!
10 Interesting Facts About USA , You Would Probably Never Know
tee seems ripe for parallelisation
Uber’s Financials: An Inside Look
> Small town businesses cant turn a profit and as such shouldnt be getting a loan. They are barely keeping the lights on.

Businesses which turn a profit usually need loans and lines of credit. Regular income and expenses don't necessarily match, using an LC for a net 7 may be quite a bit cheaper than paying net 30 (and the other way around you may need your LC to wait for an incoming net 30 or worse), failing to expand or buy new hardware (which you don't have the cash on hand for) can kill the business, payroll may be touch and go some months when getting started, …

Avoiding loans is more likely to kill your business than help it. You obviously shouldn't go over your head, but loans are a normal way to operate and help a business get ahead.
This was just posted on the mainsite fb page: https://www.facebook.com/crossfit/videos/10154940743797676/

I think most affiliates are like mine or yours these days. Supporting competitive athletes but overall focussed on serving the broader population.
> I really doubt this information overload is the limiting factor.

It's definitely a factor. Even if you filter out the utter bullshit (which is a task in itself), there's a huge amount of stuff out there around the theme of "exercising wrong", most of which doesn't agree about anything outside a handful of basics (e.g. sit-ups aren't very good at engaging abs) and much of which warns of injury if you fail to heed the advice. Are crunches a good exercise, or will they wreck my spine? How deep should I squat? What are the tradeoffs between high weight/low reps versus low weight/high reps? Are resistance bands or dumbbells worthwhile, or is barbell training so superior that anything else is a waste of time? The answers all seem to depend on which "school" of exercise you subscribe to.

> Everyone knows what a pushup is.

I know what a pushup is, but I can't actually do one, and it's not obvious how to progress it in a practical way ("wall pushups" aren't challenging, but going down to chair level is too much). There are a lot of practical issues like this that are glossed over by mainstream exercise advice (most of which seems to be written for relatively young, fit people with no chronic health issues that might interfere).

> But exercise sucks.

There's a huge amount of disagreement on this as well. Statements like "your body wants to move" are a common refrain from fitness gurus, for example. The chemical and neurological responses to exercise seem to vary quite a bit throughout the population, all the way from exercise triggering euphoria to exercise triggering depression (but it's only socially accepted to advertise the former). It's also pretty common in exercise studies for a given outcome measure to get no better or even get worse in ~10% of subjects, even when the average response is a statistically significant improvement. Conversely, there's often a ~10% with a markedly above-average improvement; this has been spun by the popular press as some people being "superexercisers" and others being "non-responders", but it seems to be much more complicated than that (i.e. one can be a "superexerciser" on one axis but a "non-responder" on another).
I really enjoyed the read, very inspiring.
It's probably being replaced with a more complete file, since the original one had its ending cut by mistake.

There's always the raw recording if somebody needs to watch it right now: https://streaming.media.ccc.de/34c3/relive/8941
As an anecdote, I knew one old guy who swore by this program. He was in his 80s and could keep up with adults in their prime when filling sandbags all day.

He said it was the only exercise he got most days, but he did it every morning.
SQL injection vulnerability in 'reorder' method in Ruby on Rails
The people being hurt are the people who don't make a lot of money. NY spends all this money and the subway is still a mess.
If a goldman employee is an hour late because trains were delayed, he'll be fine. If a minimum wage worker is late, he's going to miss out on an hour of pay and could get fired for being late.
As a longtime fan of Age of Empires, I have absolutely fallen in love with the open source 0ad clone.

http://play0ad.com/

The AI is surprisingly good, and the character models are as good as Age of Empires. Bonus points that it is in all major Linux distro repositories if you're one of those kinds of people (like me!).
Agreed — and be rather unsurprising given the patchy nature of video driver quality. It'd be really easy to believe that Metal 2 is putting more pressure on a previously less used code-path and is flushing out bugs or hardware issues.
We would do well to remember that BitTorrent came from Mojo Nation, which attempted to tokenize distribution long before Filecoin and the like.

Ultimately, "too cheap to meter" was the problem they encountered, so they stripped out the tit-for-tat portion and Bittorrent was released.

https://elaineou.com/2017/10/14/the-transaction-costs-of-tok...
And that would matter to a VC. But a bank isn't looking for a big exit... just to get their loan back with some interest payments. Which is why they consider not only the business itself, but the credit history of owners, and their assets.
An in depth comparison is in order (though you made a decent stub, and other responses are also valuable).

I went to Japancrate, and I can order once but also subscribe for say a year and save $30 in total (one month). That's not a whole lot saving. I get moved when I get 2 months free when I sub for a year (~16,67%). Also, Japancrate do seem to send to world-wide, but only accept credit card (Candyjapan's statistics show about half of the customers pay via PayPal). I feel like Candyjapan is winning out on these PayPal customers but you wouldn't know that for sure until you'd cancel the option or did an A/B test. Regardless, things like payment options, different packages, and discounts matter. Kawaiibox also provides PayPal as payment option.

PS: What happened with Candy Japan and not sending to Germany?
I didn’t say it would be cheap, but it would be an Apple like solution to an otherwise fairly simple problem.
Answer from OP

https://news.ycombinator.com/item?id=16015163
I spoke to fast, you and your sibling were right.
What part of south america are you in, if you don't mind me asking? I'm living in south america and I'm worried about the lack of safety drug cartels cause, making me travel less often than I'd like.
Re: adversarial ML & steganography. There were 2 papers at this year's NIPS studying these ideas (http://papers.nips.cc/paper/6802-hiding-images-in-plain-sigh... and http://papers.nips.cc/paper/6791-generating-steganographic-i...)
PaycheckCity calculates $65,000 net on $100k salary in California, for a single person. Take out $24k for rent, and that leaves $3,400 per month for other stuff. That’s extremely comfortable.

If Des Moines offered similar opportunities, people would live there instead of San Francisco. Those opportunities are themselves a benefit that can’t be ignored. And if people live in SF even though the benefits don’t outweigh the increased cost of living, why should th government subsidize that lifestyle choice?
Linus really needs to start having more formal verification around patches.
Who is hiring associate/junior product managers 2018?
resume: https://drive.google.com/file/d/1Gc5E93yD-QezLgJ1qiD8mi5b1WPZuZMA/view?usp=sharing
I agree with all the other comments - this is an excellent video.

Does anyone know how the slides were made? Some of the animations are rather lovely. They look like they were made by a professional TV media company. I'm guess this is not the case.
Share terminal sessions via SVG and CSS
"Chang can remember a time when Black Lotuses were pushed around card shops for $50, or blithely traded for mediocre creatures by people who didn’t respect its power. Things are different now. In 2013 a 9.5-graded Alpha Black Lotus sold for $27,000 at auction."

I'd expect old Magic cards would not be difficult to forge, and would be very surprised if it didn't happen.

People forge art, they forge money, why not $27k Magic cards?
Bitcoin Lightning Network Node Easy Setup Tutorial
A big part of is ensuring that unsigned code isn't run to cheat in multiplayer games. A lot of times there will be games that come out on Xbox and PC, and the PC one will have rampant cheating, and the Xbox version will not.
Why would you want to have strong suspicions on such a complex topic?

One of the reasons racial ghettos have such an effect on crime is that violence can be driven by young people who can see opportunity near them, and who believe they don’t have access to those opportunities.

Understandable don’t you think? And it doesn’t require a culture of criminality. Just visibility into a differential of access.

As a side note, I hear this “culture of criminality” idea a lot, but I haven’t seen any science around it. Can you point me in the right direction?
>How do you know?

I've worked in housing advice and have been personally involved in rehousing homeless people. A member of my immediate family is a director of a housing association and has run several supported housing facilities.

It'd be fantastic if homelessness was as simple as "give people homes", but it isn't. Housing is part of the problem - a very large part in some areas - but chronic rough sleepers have very complex needs.

If you don't believe me, go out and talk to some rough sleepers. Ask them about their life stories. Ask them about the people they've met on the streets. You'll find some people who have had a bad run of luck and just need somewhere to stay, but you'll also find people who are highly dysfunctional and need intensive support to rebuild their lives.
I've tried countless browsers on Android, as well as various adblocking plugins and services. I always found myself going back to Chrome because it just worked.

I started using Brave about a year ago and I love it. The only thing I'm missing is syncing my bookmarks between Brave on my phone and Chrome on my computer, but a year later and it hasn't bothered me enough to find a fix.
If I had some guarantee that if I paid for Youtube and Google Maps they'd stop spying on me, I'd buy a subscription in a heartbeat. Likewise for online news sources.
Introducing svc-js – a BitTorrent/DHT based microservice framework
Why side projects are important to our company
Interview with Brunello Cucinelli, King of Cashmere
Yep, definitely makes sense! I guess it’s similar in meaning to if you chose “conscious” or “present”...?
Uhh, what do you mean? It has an excellent 12.3" 2400x1600 screen which is "retina" by any definition.
"the Gell-Mann Amnesia effect is as follows. You open the newspaper to an article on some subject you know well. In Murray's case, physics. In mine, show business. You read the article and see the journalist has absolutely no understanding of either the facts or the issues. Often, the article is so wrong it actually presents the story backward—reversing cause and effect. I call these the "wet streets cause rain" stories. Paper's full of them. In any case, you read with exasperation or amusement the multiple errors in a story, and then turn the page to national or international affairs, and read as if the rest of the newspaper was somehow more accurate about Palestine than the baloney you just read. You turn the page, and forget what you know."

Michael Crichton
Learning to Segment Every Thing [pdf]
It was mostly built in the right-of-way of existing roads, so it's probably not comparable to projects that involved a lot of land acquisition.
Nitendo Switch's firmware 4.0.0 code hints at Virtual Console preparations
I think not the best idea but best executed idea wins.
It has been an honor and a pleasure to use your library
> Its a perfectly reasonable function of the operating system to tell the user that their battery is end-of-life and it should be replaced.

Agreed

> for this unacceptable, anti-customer behaviour

There are two choices (besides warning the user): either you make the phone use less electricity (slowing down the CPU, dimming the screen, etc) or you let it shutdown unexpectedly and without warning.

The pro-customer behaviour is the first one, not the second one. It is graceful degradation of a system that can't perform to its top specification.

This is regardless of the battery being replaceable or not, there is no other option that keeps the phone running and without unexpected shutdowns.
PostgreSQL and ZFS best practices
Correct me if I'm wrong but The article doesn't describe how 'classical' cryptography will survive quantum computers. It merely describes how it will break RSA and then lightly covers a potential alternative quantum proof public private key cryptography scheme.

Misleading title?
that's correct, versions prior to 4.12 are not affected
The big difference that you are missing is that those other technologies that they got rid of had ready and working replacements. The headphone jack does not have a ready and working replacement yet.
Nobody has "found" their anything when it was stolen by thieves. You file a lost report and go home. You don't go knocking on the door of a thief and expect them to hand it to you.
SMBC has a great comic on how quantum computers work https://www.smbc-comics.com/comic/the-talk-3
I think it would be beneficial to explicitly mention model extraction attacks since they (kind of) enable such attacks: https://news.ycombinator.com/item?id=12557782
You Can't Regulate Away Crony Capitalism
Seconded, AWS Polly should be good, there's also Bing Speech

https://azure.microsoft.com/en-us/services/cognitive-service...

Google WaveNet promises even better audio, but it's not available yet. In my experience, Amazon is "good enough".

https://deepmind.com/blog/wavenet-generative-model-raw-audio...
I'd start with local agencies that provide support for people experiencing homelessness and addiction. I'd also look to work with anyone who might be seen as a "community leader". If you're looking to open a wet house then you'll need great staff, but you'll also need good working relationships with other agencies. If you can't get the local government on your side, then you're doomed from the outset. You need people who are connected and know how to work the system.

Good luck.
Pro-customer would be:

1. Measure the battery, see that it is not optimal.
2. Tell the user: "your system has been slowed down due to non-optimal battery performance. Please replace the battery as soon as possible."
3. Let the user replace the battery.

Instead, this phenomenon is being exploited to prompt people into dumping the old phone and upgrade to the new one.
Successful use of closed-loop allostatic neurotechnology for PTS symptoms
I just asked 23,000 developers what they think of JavaScript
I pretty much entirely agree with that, there is a lot of complexity and it can play a role in deciding to just avoid everything. Though in practice I think the complexity effect is overblown, and the role in deciding to do nothing is small (I'd bet the role is larger in deciding to do lots of different things unsuccessfully because one quits the current thing after it becomes difficult). Though if the complexity mattered all that much, this just sounds like the OP's desire for a government-approved 'average' outside of what exists in required PE is even more ludicrous.
I am certain. I like the way iOS 10 works and don't want to learn different ways of doing things, and be unable to turn off (really turn off) WiFi/Bluetooth quickly. (I'm a pilot, these things are important.)

I like the way macOS 10.12 works (I prefer 10.8, but whatever). At least Apple provides security and patch updates to 10.12 and I can stay on it for several years until they put out another version I either need to upgrade to (for third party reasons) or want to.

Apple does not allow me to stay on iOS 10. I have no option to upgrade to 10.3.4 - they won't put out a 10.3.4 even. No, the only option is 11.

If 10 is working for me, why am I forced to move to 11?

This is very anti-consumer of Apple.
Any advice for the parent of a teenage who absolutely loves making music?
I don’t believe people are as easily manipulated as you do.

I don’t buy things I don’t have a pre existing need for based on advertising, or really in general. If anything ads make me less likely to buy something based on the associated irritation.

My political beliefs have not been swayed by my Facebook feed. I think if anything Facebook has made people more hardline to their existing beliefs by feeding them that there is mass agreement with them.

You rolled off into unsupported tinfoil hat land for a bit. Soon to be divorced men isn’t a big enough market to go after.

And if your kid wants gummy bears, that’s on you for buying them.
>This is a product of SF being extremely welcoming and supportive of the homeless and the poor.

>NYC has less of these things because it has undergone extreme gentrification and has politics and police which treat the homeless much worse.

This is part of the puzzle. However, I think there are other contributing factors too, like the weather. If I was homeless I sure wouldn't want to be in NY in winter.
It's strange how obsessed software engineers are about methods of working.

So you are surprised that a bunch of people whose work is to create mental models and automate them are obsessed with creating mental models of their own work and automate it?

It's fascinating, but at the same time I wish it was all simpler.

Actually it is, IMHO. A lot of the parafernalia around the job is useless obsession indeed. We're just that way for good or bad.
DBMS for Analytics: Risky Business Without Foundation Knowledge, Part 2
ElectricPork: Electron app that helps you write and publish threads on Twitter
as usual pf is your friend:

https://app.printfriendly.com/print?source=homepage&url_s=uG...
What Makes Some of Us Left-Handed? Hint: Nobody Knows
When you have no market and no chance of the market growing that is a fundamental problem. Go visit a small town. If you arent making money this year the next 5 years arent likely to change.
This right here is something way too few people understand. I basically had to unlearn a lot of bad habits from my family before I could get myself sorted and on a path to financial stability.
Using Customer Development to Build Your Product
My original magic card collection was stolen out of a gym bag when I parked in a not-great side street in Philadelphia in the late 1990s. Some homeless guy probably dumped it in the trash a few blocks away.

At the time, the collection was worth about $3000 -- it was revised and antiquities up to about Ice Age-era cards. I had, I think, 5 of the power nine cards and a full set of 4 of each dual land. It would probably worth close to $100k or more today if I sold everything at face value.

Even so, the return isn't that great, compared to other things you could have invested in:

Today an unlimited black lotus is about $4k. In 1995, it was about $300, if I remember correctly, maybe even a little bit less.

If you bought a black lotus in 1995, you'd have about a 1,300% return. If you had bought Hasbro stock instead, you'd have about 700% return.

if you had bought apple stock, you'd have had 12,000% return, and the market for stocks is a lot more liquid than the market for magic cards.
Considering mtGox started out as a Magic the Gathering exchange, it's not the first time I see it :)

As long as M:TG stays popular, this sounds like a good investment. I wonder if M:TG will ever give in to their famous and controversial reprint policy (or print a functional equivalent or something).

https://en.wikipedia.org/wiki/Mt._Gox

https://magic.wizards.com/en/articles/archive/official-repri...
Hiring a hacker online might be quite difficult because of the number of people claiming they offer the service, it will be nice to share our experiences with others so they know what works and are saved the stress and trouble of having to sieve through the lot to get the real hackers. I personally recommend DarkWeb, I was introduced to him by a friend and I have used him a couple of times, he is very good. He does mobile phone hack, employee monitoring, cheating spouse and more. Contact -darkwebsolutions dot co
I bought a couple of games from ebay once. I thought it would be the serial codes to input in the store, but the seller had me create a new Nintendo account and send him the name.

They added funds to the account and bought the games themselves and told me to play from other accounts. Then I realized it might had been carding.

The games downloaded and worked fine. After some weeks the bad account has an admiration sign in it's icon and I can't log into the store with it, but the games still work and even get updates.

IIRC, the 3DS had the record of which games were bought tied to the console instead of the account, which made it easy for pirates to download the games once the console was jailbroken. It seems to be the same route for the Switch.
The biggest thing we get wrong is living like we will live forever and assuming we will never die and therefore never prepare for it whether it be financially or spiritually
I'm not looking to accuse anyone of racism here. It just felt as though there were some underlying values being expressed in the comment that were not being stated explicitly.

I find it extremely difficult to have meaningful conversations when we obscure our values and are not transparent about our ethical reasoning. The commenter said the driver was nice but clearly didn't interact with her. "Nice" is a signifier of value and I was hoping to tease out a conversation about that.
I'd expect alpha cards to have a decent record of provenance. They only printed about 1000 alpha black lotuses and a lot of them have been destroyed from play.
This is indirectly pro consumer of Apple. This means they can engineer for the current gen. Everyone on all platforms should only be served the latest and greatest!
https://www.youtube.com/watch?v=A-xnjDevAzE . Fakes are indeed a part and fear of the market. Note the cards have specific tests that weed most out, due to the amount of effort needed. The light test and spring test for example.
The Best SMTP Service Providers – Business Email Hosting Services
Yes the commentary was a little fast paced, shades of Patrick Moore on Sky at Night.

I personally found the graphic presentation of the machine instructions and machine design informative. I was pausing and stepping through frames quite a lot.

57:38 or so for the code 1202 alarm. I have a much better understanding of 1202 from this presentation.
That’s not true. The majority of the costs in the light rail project discussed (ST3) involves ROW acquisition, for above grade or underground rights of way.

You may be thinking of the original light rail or Sound Transit 2.

The original light rail was kind of a disaster but since then the management has changed; we will see how ST2, currently in construction, plays out.
Is Silicon Valley Actively Biased Against Certain Viewpoints?
How to Build Brand Value and Customer Loyalty
And with FBI and the title DB, you don't even need freeShop. Things can be installed on a 3DS with custom firmware using the front camera and QR codes.