skysight-inc/HackerNews huggingface dataset:
locate may be the most-overlooked timesaver on the GNU distro. For searches of more than ~50000 directories, it's an order of magnitude faster than find:

$ time locate -0 /{opt,usr}/\*.gitignore |
xargs -0 stat --format=%s | wc
387 387 1225

real	0m0.087s

$ time find /{opt,usr} -name '.gitignore' -print0 2>/dev/null |
xargs -0 stat --format=%s | wc
387 387 1225

real	0m0.748s

The speedup comes from reading a single database file rather than every directory within the tree to be searched. If the files you want were last touched today, a manually triggered rebuild of the database may be needed:

$ sudo updatedb

The argument syntax for path specification of locate I find more convenient as well.
I _love_ that book so much - thank you!
Scanning bots consume resources and traffic. I pay for both. They increase my bill so it makes sense to restrict them.
CPG Revenue Management Success: Using Advanced Analytics to Build Pricing
For those who might not know everyone in the industry: why not?
How to Improve Cloud App Development Security? – IQVIS Inc
> that RMS doesn't believe in that strong "technical" vs. "political" separation

I do not believe that for a second. RMS is completely capable of seeing it, and he himself on his own site has this separation, and in there's no indication he is incapable of distinguishing between UNIX API and political advocacy. He just wants to use his considerable technical capital to promote his political agenda. In places, where such promotion is not appropriate.
We can all find a rationalisation if we look hard enough.
That's a wrong metric as well because average order size and lifetime customer value will vary a lot in India.

From anecdotal evidence, Amazon seems to be more popular among younger crowds in big cities who are likely to spend more and often
Do you speak German? There are stories, but they may not be in your native tongue.
we call it hacking forums/teams. main motivation is some idelogical/political belief tho.

imho try to hack yourself first
There's nothing 'improper' about the answers, you just don't like how they're presented. As I said, that's a totally fair objection. It's just that nobody owes you free advice in the precise format you find acceptable. That's usually a feature of paid advice.
I'll admit I'm not big into the who's who behind glibc, but I saw 4 or so people speak against it. Are those 4 the only main maintainers of glibc? Do you know?
What do you mean by "eating properly"? As in, "enough", or more like, "not McDonald's"?
How a Free Calling App Changed How We Think About Death
This is fantastic, good job!

I'm currently teaching an introductory programming course using Python (for people who have never programmed), and the level of abstraction you are using in your worksheets inspired me to actually update the exercises on my worksheets I'm using for the course (e.g. break down concepts even further and use more repetitive tasks to actually help students get the hang of these concepts).

Thanks a lot for sharing your ideas!
> We observe other agents acting in an environment, deduce their policy, then implement that policy ourselves.

This is essential, especially internationally. If you're an American you think it's perfect normal to be allowed to turn right even when the traffic light is red. You don't get told not to do that when you hire a car in Italy. Now an automatic car can be programmed with different rules depending on which country it's in, but even in the same country, you wouldn't enter a box junction when the exit isn't clear, at least in most places. Turn up in rush hour London and you find there's no way to actually get through the junction unless you do that, because others fill the junction so when your light is on green, the exit isn't clear.

I remember pulling upto a red light late an night. Empty road, but the red light only goes green when it detects a car. It didn't. What would a fully automatic car do in that case?
I don't think you should count CO2 used from existing because it's the same either way.

Maybe a better way to think about it is to compare CO2 per day from different ways of spending your time?

And this isn't something to minimize, but rather to make sure it's worth the cost.

It seems like we should start by reducing business travel, since most people don't enjoy it much? Also: combine trips when possible.
Coming from KubeCon Europe, I can confirm that Google is anything but bored from k8s.

Google's spring-cleaning has nothing to do with their open source projects. Kubernetes is one of their most widely used open source "products" and the industry is creating an incredible community around it with several big players that could easily jump in to take over project leadership and financing.

It is actually a good thing that some k8s founding members left Google because they already got what they wanted to achieve and went on to work on stuff that Google probably wouldn't have prioritized as much, see Ark and kssonnet.

Kubernetes is IMHO the platform for cloud native applications for the next 5+ years.

Not wanting to use it because Google dropped everyone's darling (Reader) is rather naive.
The dictator in question certainly doesn't seem Benevolent to me in this case.
In the UK construction industry the pozidrive has long been the most used, followed by some special purpose designs using torx. Sometimes kitchens would come with the same crappy phillips screws as flatpack furniture.

However belt feed drywall screws were always phillips. In fact most drywall screws were. It always infuriated me if you wanted to put some extras in with a drill (or take some out) that you had to go searching for a PH2. I wondered if there was some special reason for it persisting with drywall screws, especially when screwing drywall is relative new to the UK, with most being nailed up until maybe 15 years ago? Auto feed drywall guns cam out like crazy...

Now I also wonder why we would always call the drywall "plasterboard" yet call the screws for it "drywall screws"!
Well it works and the poor schmuck is the person I hired and trained and they are still there. The db is still being sold and making money. Since code will be read more times than be written, I try to write it so that a junior version of me from 10 years ago could understand it, after waking up in the morning before the 1st cup of coffee :-)

The best advice is really to keep it simple. Build the system of out small, isolated units with clear APIs between them. The API and components should be isolated at runtime, so they can be restarted or fail separately, as well as in the code - separate modules / files / libraries. That way looking at it can be easier to understand how everything fits together.

The simple part wasn't just a platitude or a generalizing statement. A db is really a beast that can easily turn into a giant ball of spaghetti with a ton of features, settings and tweaks and never-ending list of bugs. A lot of work and thinking I did on it (including a rewrite after an initial prototype) was with the goal of making it simple by cutting unnecessary features.
I think a class gets protected when it's powerful enough to have popular support to demand that. The examples of Nazis and peadophiles show that it's not really a fundamental principal - Nazism is an ideology, much like a religion so shouldn't it get the same protection as religions? Peadophilia is a sexuality so shouldn't it be protected just like any other. Maybe it already is?
It does take a number of malicious requests before someone can find an oppening. If you ban them after the 1st or 2nd request, you will be safe. It is going to be a miracle if some vulnerability scanner finds and oppening after 1 request, not impossible but HIGHLY unlikely
Europe aims to become a world-class commercializer of fuel cell technology
Fail2ban is for all practical purposes resource depletion protection against bots that pose no threat but still generate work for the server. For this purpose you do sacrifice a bit of I/O performance, but hopefully won't get those spikes that brings things down.

It is not a replacement for the actually security of keeping things updated and having good passwords/client certificates.
This is great in theory, but the potential never seems to have come to fruition in practice. Google tries to figure out what I'm interested in globally, but what it tends to end up with are ideas that are either irrelevant, outdated, or inappropriate for my mood at the moment. In the best case, Google has figured out that I'm currently in the market for a new smartphone, but right _now_ I'm looking at car reviews, and what I want to see are good deals for the cars I'm interested in, not the new Samsung Galaxy model.

Compare this to a popular car review site I use, which seems to manage their own ads. You know what ad I'm shown when reading a review for a car? A deal on purchasing or leasing that car. This is something I'm highly likely to be interested in _now_, and if the deal is good- there's a decent chance I'll click on the ad.

When I'm reading a magazine, ads are often not just NOT an annoyance, but are actually part of the experience, because they're advertising things that are really interesting to the target audience of the magazine. There is a very small handful of websites where I will even glance at the ads not by accident, and none of these are using Google's ad network...
A new Microsoft Store revenue share is coming
Jual Alat Drumband Untuk Tk Muara Teweh 081294970606 – Mahakarya Drumband
From India, wish there was a way to separate, cheap products (yes, I can filter via price) and counterfeit products to get some high-quality products (albeit at a higher price point).
So many of my recent decisions have been offline because I can't figure out which products are high quality. ex:- phone charger (the quick charge one, wire tears in days), infusion water bottle (breaks in months), Bluetooth earphones (This one was a nightmare)
Wish there was a filter for this on Amazon!
One of the things we do with txtify.it is try to find the content block in the HTML first, then convert only that from HTML to plain text. So in situations where the input URL is a news article or blog post, the output should be cleaner.
Robertson in Canada is just appeal to tradition at this point. They have no technical merit over Torx except maybe ease of ad-hoc construction of a driver.
I see a lot of mod_security misconfiguration across hostings. While I think it is a great tool, these misconfigs make it difficult for me to recommend it.
Although you are right that the Republican - Democratic struggle about which level of government should be responsible for the patients did play a part, it was not just not about defunding. There was a growing public opposition against institutionalization. The 1975 movie One Flew Over the Cuckoo’s Nest is just one example of criticism against the contemporary pshycatric care model.

Also, in the 60-70s there was (and there still is?) an over-belief in how medication could solve the problem.
New York looks like a well regulated army training course compared with somewhere like Cairo.

Never is a long time, but I don't see self driving cars coping well when traffic is coming the wrong way down the street, let alone when cars are driving along the sidewalk
As someone who has almost completely abandoned offline shopping, Amazon is my go to store because it usually has really obscure products.

Like today, I ordered a downrod for a ceiling fan. I don't even know if Flipkart stocks it.

Amazon has got the long tail of retail right at least
USPS negotiates rates with companies that engage in bulk transactions at scale. The claim that Amazon is ripping off the USPS is... well that's "fake news":

> [Amazons] rates are kept under wraps. That said, we do know the Amazon deal is at least a break-even venture.

> That’s because the 2006 Postal Accountability and Enhancement Act made it illegal for USPS to price parcel delivery below its cost.

http://www.politifact.com/truth-o-meter/statements/2018/apr/...
> This technology will only be new once

This technology is decades old, and the fact that you consider it novel indicates that it can actually be new more than once.
Godot Engine Experiments: shaders, vr, raspi, twicil, procgen, blending
I spend 1-3 hours each day on side projects. Weekends make no difference.
I mean, they just announced a new container runtime called gVisor to further increase security for containerized apps. It's pretty clear they want to be able to offer fully managed multi-tenancy Kubernetes clusters that execute untrusted code.
> We want

Please speak for yourself alone. tptacek's comments in the thread are quite clear.
Well, that wouldn't be without precedent either. Apparently in the 20s, pro-car groups pushed social and political agendas against "jay-walkers", and indeed were responsible for popularising the term.

Source: http://www.slate.com/articles/life/transport/2009/11/in_defe...
Check out S2N, Ion, DSSTNE, Carbonado, Guzzle, git-secrets and others.
That reminds me, Alexander carved a path to the India region c. 300BCE, I wonder what kind of cross-fertilization that brought with it.

(Much as I like history ... now, not when I was young, there's so much of it!)
I used to work on Google Search. I now work on my own startup, which uses ElasticSearch. In many cases, they use the exact same algorithms and data structures, or can easily be fine-tuned to be equivalent. Nevertheless, stock ElasticSearch results are much, much worse, because you start with zero data. To say nothing of not having Suggest, Refinements, universal results, good spell-correction, disambiguation, etc.

I also use DDG when I'm in Tor Browser, and it always strikes me how much worse the results are when I try to do technical searches there.

I've still got my music collection in MP3 form on my hard disk, and it's only an iTunes click away. Nevertheless, when I listen to music, it's all on YouTube now, because YouTube can actually recommend stuff that a.) I like b.) is of a similar genre and c.) I haven't heard before.

I rely on GMail's spam filtering for E-mail to be useful; when I've tried to go back to Yahoo Mail or (heaven forbid) running my own server, the result is just unusable.

You're welcome to try founding a startup that operates as a desktop app and collects zero data from users. With improvements in developer tools and payment systems, most of the ideas from the late 1990s that required millions in venture capital financing could be done by a single motivated dev in a few months. Good luck getting users to adopt your software, though, regardless of how privacy-conscious they say they are.
oh yeah the partial disassembly is frustrating

after a year of toying with devices and watching people on youtube I'm a lot more unorthodox.. anything goes as long as it's not too stupid. Yesterday I used a knife and a wrench to open a braun toothbrush.
There are websites that let you practice. hackthebox.eu is really popular. And there is a bit of a test to even get access to that.
There's a Udacity course that's supposed to go live tomorrow:

https://www.udacity.com/course/build-native-mobile-apps-with...

Also the subreddit has a lot of stuff: https://www.reddit.com/r/FlutterDev
Finally a practical use for JavaScript: to repel the new programmers
> And no one else has a real argument here other than "it's unprofessional and embarassing and we want it gone".

No one needs any better argument. It's unprofessional, and it's embarrassing (both as poorly executed joke and as political advocacy bolted onto the technical manual). RMS has a perfectly good personal site and lots of speaking engagements where he is very welcome to advocate whatever he likes and people are happy to see him to do just that. And nobody has a problem with it - nobody ever, as far as I know, demanded to close his site or protested him speaking anywhere, let alone demanded him to be banned. His advocacy (the fact that he's doing what he's doing) is very accepted even among people who disagree with him. However, he insists on doing in in the place where people don't want it. That's just being annoying and stubborn for no other reason but "because I want it so".
Thinking of Uber as Physical Infrastructure
Get more into DevOps/SRE/Ops/SysAdmin/WordOfTheWeek where building secure infrastructure is part of their job. Writing secure applications is one thing, deploying them on secure infrastructure is another.
GM SuperCruise uses a driver-facing camera to confirm that the driver does in fact have eyes on the road. Something like that would be trivial for Uber to add to its self-driving car fleet.
This reminds me of a Facebook story and why they don't want browsers to have "view source". Apparently they get complains now and then after someone has accidentally got into view source. Something about appending and removing childs.
I never held back much when fixing my own stuff either. But it's a different game when I'm fixing things for someone else (e.g. a friend or family member) - then I really don't want to break or even scratch anything.
That is correct. It is actually all about marketing. For example, there shouldn't be a huge difference between something working intuitively vs using AI/ML. But somehow parading it as something build on AI gives a lot of airtime and credence to an extent.
I came here to add an important detail about WAFs that's missing in this thread. For context, I am the original author of ModSecurity (but haven't worked on it since at least 2009). I wrote ModSecurity for three use cases that still make a lot of sense sense; they are: 1) full HTTP transaction logging (meaning request and response bodies), 2) rule-based analysis of HTTP traffic (largely to trigger logging and otherwise highlight anomalies) and 3) virtual patching.

The first two use cases are all about traffic visibility, which has been, and remains a big problem. If we're talking about improving security, the third use case—virtual patching—is the exciting part. The story goes something like this: you discover a vulnerability in your code but you can't fix it immediately, for whatever reason (take your pick). In practice, it may be weeks until the problem is fixed. However, if you have ModSecurity installed, you can write a virtual patch for your problem, often to fix it 100% reliably.

However, it's very important to understand that virtual patching doesn't mean just slapping together some rule that appears to be doing the job. Blacklisting doesn't work. To properly virtual-patch, you have to fully understand the vulnerability and the entry point to the application. You have to carefully whitelist all parameters in that particular location. In other words, you have to almost replicate the work that should have been done by the developer.

Even in this context, it's not all rosy. Virtual patching requires a great deal of expertise to do properly. It's almost always better to spend your time fixing the actual problem. Sometimes, however, that's not possible to do in a reasonable time frame, and that's when a WAF (according to my definition), can be a life saver.
The only real reason for Phillips screw heads were the old electromechanical industry robots that would rely on auto-centering and spring tension to pop the driver out of the screw against a switch at the set torque. Modern (since 1980s or so) industry robots are computer-driven and torque-sensing. Phillips (and Pozidriv) needs to die in favor of modern superior screw drive designs like Torx.
Im fairly sure it was typography.com is notorious for tracking your movements around the Internet, obviously this is common behaviour from web font providers but I seem to remember this group being especially intertwined with ad tracking *citation needed but currently walking and typing!
Another part is claiming Kubernetes experiences on your resume.
How We Can Leverage Technology to Help Refugees Gain Employment
I had similar experiences. Buying a set of JIS screwdrivers was one of the best decisions I ever made. They even work on screws that have been mangled by improper tools. I haven't stripped a screw head since, though I've had to use an impact driver on a few really stubborn ones.
It certainly did in the latter half of 2013.
https://en.wikipedia.org/wiki/Hoefler_%26_Co.#Conflict_betwe...

What was perceived by one partner and onlookers (perhaps based on the name) as a 50/50 partnership turned out to be anything but.
> yet it's a fact that lower speed limits and mandatory seat-belts save lives.

Near where I live there was a bridge that lorrys kept getting stuck under, and the local council were very confused.

Then measured it, and found the warning sign wasn't right -- it said 15' but it should actually have been 14'.

They changed the sign, and the accidents reduced dramatically. Having a lower limit reduced accidents.

Unfortunatly someone looked at the statistics and thought "we're still getting accidents. Last time reducing the sign on the bridge by 1' caused them to go down, lets reduce it further and save even more lives!"

So the sign was reduced to saying 10'. And accidents went up because people ignored the signs.

Lower speed limits may save lives in some circumstances, but in the UK the safest roads are the fastest roads, which seems to contradict your statement.

If you put a 30mph limit on the motorway, it will cost more lives
1) It would be ignored by many, so difference in speeds will be higher
2) People would route down more dangerous back roads rather than staying on the safest roads
3) The extra time spent on the motorway has a cost too. The average life is say 40 million minutes long. If your speed limit adds 40 minutes to 1 million people's day, that's 1 life a day you're costing

You could argue that we should stop all vehicles, but then the economy collapses and you end up with civil war as we can't support this population level with an agrarian society
https://www.bloomberg.com/news/articles/2014-05-15/font-war-...
I'm traditionally a textbook person too, but I really like fast.ai. You get to see how to tinker with things in real time (which is often clunky in a textbook), and there's a lot of informal folklore that people don't normally write in academic textbooks. If you're dead set against video you could just work through the notebooks yourself and read the referenced papers on the website.
I dig the article (mostly about small fonts, a lot of GDPR and cookie warnings and such are written as notes / small fonts and are hard to read for example), but at the same time I noticed the top logo, which read "Fontsby Hoefler&Co.". Who's Fontsby? Bit of an odd name, bit posh.

oh wait, there's a space there.
Always keep up to date with OWASP
At least in Los Angeles, this is not only legal but, in many cases, the only legal way to make a left turn.
It's impossible until it's easy, like any good trick question.
Yes, who is this person and why would you not read it. It seems quite informative on first read.
Im currently building a SoC for a fairly large company in Germany and before that I worked for what probably by now through M&A is the largest MSSP in the world. I dont know if I agree with you that having a MSSP is out of the question. we had plenty of clients who only paid us maybe 2 to 3 thousand a year if even that. Most MSSPs will charge on a contract to contract basis revolving around log volume and estimated daily event creation. If you are only creating an estimated .1 events per day you could very well have a rather cheap contract.
It is the best passenger airplane I ever flew as a passenger.
That was a fascinating read. Thanks for sharing!
https://www.theguardian.com/us-news/ng-interactive/2017/dec/...

Google "homeless bus tickets" and a city name.

Though the article makes it sound like expensive cities come out ahead with the vast majority of people being sent to lower cost destinations.