skysight-inc/HackerNews huggingface dataset:
Well congrats man.

That's impressive and im glad it was such an intellectual as well as spiritual journey for you.

Teach me, or share with me some of your self lerning tips. You seem to be a high functioning autodidact, whats your method? Where do you get your knowledge? sources?

Also, what is DSM?

Missile-defense research? That sounds impressive, how would someone even get started on that??

And now forensics And criminal profiling. Now that you have a working proficiency in these subjects, what would you recommend others use to learn these subjects?
> At the time of writing, every single image is labelled with "This image has vulnerabilities".

The majority of those are not applicable in any way to your average container. I would highly encourage you to not attempt to make points off such bad data. See below for why I think it's bad data.

I'd also like to point out that those CVEs are even more of a pointless thing to make such a point with since almost all of them aren't fixed in upstream ubuntu... which is to say an ubuntu server with 'unattended upgrades' would be just as 'vulnerable' as these docker containers, except moreso because more of them would actually be relevant in such an environment.

Your overall point is valid, but your reference to those 'vulnerabilities' is egregiously misleading.

Let me analyse as a human all the so-called "critical vulnerabilities" listed there for Xenial:

1. glibc 2.23-0ubuntu10 - CVE-2018-6485

This is exploited by C code which intentionally calls posix_memalign or aligned_alloc (instead of malloc) with unusually large arguments. There are very few codebases out there which make use of that in the first place.

If your container is not running untrusted code which links against libc, you have little to fear.
This CVE will not impact the average container running some ruby or nodejs application.

Ubuntu also offers no update yet, so it's not actionable.

2. ncurses 6.0+20160213-1ubuntu1 - CVE-2017-10684, CVE-2017-10685

Only affects you if you're piping un-sanitized user input into an ncurses application which then displays it. I doubt there are many, if any, server applications that do this.

Also not actionable.

3. shadow 4.2-3.1ubuntu5.3 - CVE-2017-12424

I'm sure there are plenty of containers out there shelling out to "newusers" with totally unvalidated input. Highly critical I'm sure.

4. cryptsetup 1.6.6-5ubuntu2.1 - CVE-2016-4484

This one only impacts the initrd of luks encrypted setups.... literally impossible to accomplish in a container. Completely garbage listing, no value, cannot possibly impact a docker container.

5. systemd 229-4ubuntu21.2 - CVE-2018-6954

This requires 'systemd-tmpfiles' to run after an attacker has manipulated the filesystem. 'systemd-tmpfiles' is not run in docker containers, and even if it did, since it starts from a fresh root filesystem each time it's a moot point since any changes the attacker makes won't persist to the next time the container "reboots" and tmpfiles runs (assuming the rare case it's run for some reason as part of the container's boot up).

Another non-applicable one.

6. util-linux 2.27.1-6ubuntu3.4 - CVE-2018-7738

This one's a bug in bash-completions for umount, which aren't installed in the container by default.
This one's a false positive because the vulnerable code (the bash-completions script) is not present in the docker image.
What can you actually do to avoid a nuclear war, though? I mean, aside from not giving the big red button to a guy who brags about the size of his big red button, there's not much. And I doubt your vote did any more good in that regard than my vote did. (There's probably a sizable fraction of America who actively wants nuclear war because we have more nukes than anyone else. The idea that your loss might not actually be my gain doesn't seem to compute for a lot of people.)
Is there any evidence that Rumsfeld was more effective at managing budgets than other Secretaries of Defense? He liked to talk big, but he talked big about Iraq and was a complete failure and liar (including on the budget).

Gates did a lot, canceling Cold War era projects such as the F-22 rather than throw good money after bad, especially with the U.S. fighting two insurgencies (for which advanced fighter planes were a waste). His successor Ash Carter refocused the Defense Department on planning and developing for future warfare, especially in the 'cyber' domain.
After the CD-i debacle in the 90s, it's not surprising that Nintendo holds their IP close to their chest. The value of their IP would go down if the licensed content isn't good.

https://en.wikipedia.org/wiki/Philips_CD-i
"but that's my own biases and cultural conditioning talking. How I see the world, filtered through centuries of colonial oppression and destruction, is irrelevant to understanding how they saw the world."

This is an utterly disturbing thought.

To think that 'wanting to be sacrificed' can be part of, you know, a normal kind of cultural artifact, like 'coffee' or 'metallurgy' - and that her ostensible view that 'I probably shouldn't sacrifice myself' is a function of 'colonial oppression'.

It's maximally postmodern and beyond bizarre.

Literally mass murdering children, peeling their skin away is now 'cool' - you know - so long as it's 'really authentically part of your culture' , and not, of course something some white guy did!

2018.
I hope nobody self-elects work to live. It is miserable!
ever tried sikulix? it clicks the things
Happiness is an absurd goal anyhow, because it's unsustainable. Better to shoot for content (comfortable, healthy, engaged in creative/work/etc) than gasping for peaks in mood.

Less wasteful, less disappointment at not being happy all the time.
Is it really either/or? Can't parenting utilize both styles?
which part of what you just said makes you feel comfortable arguing against immigrant poverty?
If it is an interesting enough article to attract a fair amount of comments, which is reasonably common with NYT articles, there will usually be enough information in the comments here to make the thread worthwhile without reading the article.

This is especially true if the article is about a controversial or contentious topic, because then people will often cite other articles in support of or opposition to the points of the article and those are often not behind paywalls.

If it is a current events news article, there will also usually be other sources covering the same events you can turn to if the discussion is such that you really do need to read an article in order to follow along.

If you want to filter them out, you could probably write a simple bookmarklet to do so. Here's something that almost works with HN's current page structure:

(function () {
var stories = document.getElementsByClassName('storylink');
for (var i = 0; i < stories.length; ++i)
if (stories[i].href.includes('://www.nytimes'))
stories[i].parentNode.parentNode.hidden = 'hidden';})()

You can change the if statement to check for all the sites you want to hide (and to handle links to nytimes.com in addition to www.nytimes.com, and things like that). This doesn't quite hide it. The title line goes away, but the small gray line below with the points and the link to the comments remains, but I think that is fine. It's non-obtrusive and lets you see that something was removed.

If you really want to get rid of that other line, this will do:

(function () {
var stories = document.getElementsByClassName('storylink');
for (var i = 0; i < stories.length; ++i)
if (stories[i].href.includes('://www.nytimes')) {
stories[i].parentNode.parentNode.hidden = 'hidden';
stories[i].parentNode.parentNode.nextSibling.hidden = 'hidden';
}
})()

That will leave a small vertical space for the hidden items. That's the next row down from the two that are hidden, but

stories[i].parentNode.parentNode.nextSibling.nextSibling.hidden = 'hidden'

doesn't get rid of it, so if you want it gone too, you'll have to poke around the page yourself and figure out how to reference it.

Here's something you can put in a bookmarklet to un-hide all the hidden stories:

(function () {
var stories = document.getElementsByClassName('storylink');
for (var i = 0; i < stories.length; ++i)
stories[i].parentNode.parentNode.hidden = '';})()

or this if you are using the version to hide both lines:

(function () {
var stories = document.getElementsByClassName('storylink');
for (var i = 0; i < stories.length; ++i)
if (stories[i].href.includes('://www.nytimes')) {
stories[i].parentNode.parentNode.hidden = '';
stories[i].parentNode.parentNode.nextSibling.hidden = '';
}
})()

Disclaimer: I suck at JavaScript. There are probably better ways to do this. I don't know how portable this is (worked on Chrome and Firefox).

To use, create a bookmark and set the URL to "javascript: <code from above>". You can paste in the "<code from above>" part. You don't have to do any encoding or putting it on one line. Both Firefox and Chrome will automatically do that for you.
Do you think as we continue to get better about detection, that we'll find an increasing array of slow-growing tumors present in much of the body? I.e. ones that may not need a full round of radiation / chemo for perhaps 5 years and perhaps more targeted approaches can be deployed?

Just something i've been wondering about since I've got cancer on both sides of family and have been pondering doing full-body scans (which still seem quick excessive on the risk/reward)
You're gonna need to restate that because I'm not really sure what you're trying to say.
It’s really just the AI folks.
How do you define "custom" DNS exactly?
City Journal is run by the Manhattan Institute.
You need to know a minimum of 7 (seven) languages, not just one.
Stewart Butterfield spent the first five years of his life living on a commune
JSON is not actually strictly a subset of JavaScript, surprisingly. Although, in practice, it doesn't really matter, because you wouldn't want to blindly eval JSON data, anyway.

I mention this not to be pedantic, but in case it helps another coder from wasting a couple days chasing a bug like I once had to, when I thought I could template raw JSON into a script file to make some server-side data available as a global var on in the browser.

http://timelessrepo.com/json-isnt-a-javascript-subset
Abort PST to Exchange Server Operation and Auto Discover Exchange Server Setting
Even if they didn't see through the experiments; they still believed they were helping to advance the state of science.

Milgram's Experiments are often casually tossed around as proving that people blindly follow orders, but they actually showed the opposite. Teachers complied when they believed they shared a common cause with the experimenter (advancing science.) When this common cause was taken away, compliance rates plummeted. Removed from the prestige of Yale, compliance rates dropped; when the experimenter was not appealing to the necessity of science, compliance rates dropped.

What this demonstrates contrary to popular wisdom is that Adolf Eichmann's "I was just following orders" excuse was a load of shit. When the Milgram experiment results were first made public the narrative sold to people is that any common person would have become a Nazi had they been on the receiving end of those orders, just like Eichmann pleaded. The public was sold a bogus narrative about the experiments and this bogus narrative was subsequently reinforced by claims of the experiments being replicated (they were, but like in the original the experiments weren't demonstrating what they were claimed to demonstrate; that people blindly follow orders.)

Adolf Eichmann was not merely following orders, he was a true believer. This of course was revealed in quotes that came to light later:

>"Hätten wir 10,3 Millionen Juden getötet, dann wäre ich befriedigt und würde sagen, gut, wir haben einen Feind vernichtet. … Ich war kein normaler Befehlsempfänger, dann wäre ich ein Trottel gewesen, sondern ich habe mitgedacht, ich war ein Idealist gewesen." [If we would have killed 10.3 million Jews, then I would be satisfied and would say, good, we annihilated an enemy. … I wasn't only issued orders, in this case I'd have been a moron, but I rather anticipated, I was an idealist.]
The Milgram experiment did not involve a prison, real or otherwise.
On the other hand, it's a drag that there isn't something like Yelp for FLOSS.

I would have loved to see a rating and some reviews of several development processes before wasting my time posting patches.
Eclectic and severe right-wing politics? Awfully colorful way to describe him in an article which isn’t an editorial.

Would love to see the NYT describing a left winger as eclectic and severe. Even masked antifa don’t get that treatment.

It’s frustrating to have to mentally guard against this political mudslinging. The article is worse for it, and IMO it’s just coddling their readership and narrowing their audience.
I don't think anyone missed the point, it's just a nonsensical comparison. The implication is that Vive and Oculus foolhardily over complicated their solution to the controller tracking problem, and Nintendo did the same thing much simpler. (The space pen vs Russian pencil)

But they are doing entirely different things. Labo is cool, but is entirely unrelated to VR tracking technology.
s/Richter scale/moment magnitude scale/

https://en.wikipedia.org/wiki/Moment_magnitude_scale
In my admittedly amateurish opinion, having a vivid picture of the horrors of nuclear weapons can be very effective in curbing nationalistic and pro-war tendencies among both citizens and leaders of nuclear-armed states. MAD is effective only if all parties are keenly aware of the "Destruction" part of the deal.

I have seen this work first hand myself when India and Pakistan mobilized their militaries on a large scale a couple of times after the 1998 nuclear tests by both nations. A few articles that came out during that time about the effects of nuclear weapons decidedly served to cool off the fervor of several uber-patriotic people I knew.
That same attitude is why I kept pushing people to do one in Fortran. Then this showed up:

https://news.ycombinator.com/item?id=11938405

Now, we need a useful app in Unlambda that people actually paid for. Then, you show them the code and tutorials when they're interested in doing extensions. Observe, record, and share their reactions. (villainous laughter)

http://www.madore.org/~david/programs/unlambda/#intro
Aaaaaand this is why I don't jump on the latest frameworks anymore... I can almost hold my breath long enough for a framework to go out of style.

The first time I read about Jekyll was here, and now already something better has come along, my brain just gave me that tiny little mental high-five on my decision to no longer live on the bleeding edge
That's how languages evolve. Words that meant one very distinct thing come to mean something only partially like the original. People decry the misuse. And finally the new meaning becomes the one true meaning and the original sense is marked in dictionaries as "archaic."

For a word that's gone through that exact cycle, have a stare at "artificial," which was the adjective for "artifice," which at one time meant craftsmanship. When St. Paul's Cathedral was first shown to King Charles II, he praised it for being "very artificial" -- a compliment. [1]

In the meantime, I agree that it can be frustrating to see words apparently misused. But I think this is hardly the mark of an "idiot," as you put it.

[1] https://quoteinvestigator.com/2012/10/31/st-pauls-cathedral/
Huh, this is a really good question/idea.
and then smashing into a pothole. That is A LOT of heavy complicated unsprung mass.
"Global War on Terror"

Capitalized as if it's a movie title, is strangely unsettling to me.
> And while many tiger cubs run the gantlet and emerge as academic gladiators, on average, children subjected to high-pressure parenting actually tend to do worse in school.
Okay. My point stands.
I was fine with this article until he tried to bring all Asian Americans into it. Surprise surprise, but not all high-performing Asian Americans grew up under the caricature of Asian parenting the author presents throughout the article.
Ok, so an upcoming earnings call is not a filter, it's a buy signal/trigger.
There are alternatives to Tiger Parenting …

I had two friends at school and met exactly same situation visiting their families one day. We were given some homework to do...

Jewish family: Misha, you are so smart, why you cannot solve this exercise?

Russian family (same Tiger style): Vladimir, why you cannot solve this exercise, why you are so lazy?

I do remember that the comparison impressed me - parenthood is an art of creating proper motivations really.
Tesla Autopilot has an actual ‘Mad Max’ mode
How does a 10kt weapon in nyc make a deeper crater (50’ according to the article) than a 22kt weapon in New Mexico (5’).
I vehemently disagree for multiple reasons. I'll address them in order:

The first is that tiger parenting requires a large investment of a parent's time to be successful. For those that are absolutely poor and barely surviving they have little time nor energy to actively participate in their kid's schooling.

The second is the factor of luck which I firmly believe is far more important. My parents were the exact opposite of the parenting style in the OP because they couldn't be. The only reason why I managed to escape the cycle of poverty was due (un)lucky circumstances that allowed me to scrape by and survive through college. Families don't pull themselves out of poverty through adherence to education or work ethic. Not in America at least.

And finally there's also survivorship bias in play. We can say that tiger parenting is successful because of successful people being raised in that environment but we ignore the many people that committed suicide, burned out or otherwise didn't make it as a result of such intense stress. On average those exposed to this style tend to do worse.
$1400 a month for a senior (who may even have a paid off house) is pretty excellent considering most fast food workers are taking home $1400 a month and don't qualify for Medicare.
This guy is completely unethical. In addition to his famous 'Prison Experiment' he engaged in relations with one of his graduate students.

Psychology is full of hucksters like Zimbardo.
Simply having an open codebase is not enough to promote diversity in implementation. Sure, you can get an exact clone, but if there's a piece of the code you don't like or want to replace, it's going to take a large team and likely a few experts who worked on the original to get through it. And through all of that, your codebase is just falling behind what teams of hundreds of engineers are doing on the upstream of your fork.

If the major browser vendors today team up and decide to implement something people find hostile, say strict DRM, there's not much the world can do to stop them. It's just too much code to work through if you make a fork.
Elon Musk open sourced most of Tesla's patents for a freer innovation.
My experience with using light color as an information source says that's a bad idea. You can only reliably communicate maybe about eight or ten states with one light before you start getting into "is this yellow or orange, I can't decide".

So maybe "you'll just miss the next train if you leave right now" and "you'll catch it if you leave right now" could be augmented with a third state, "hey you'd better leave RIGHT NOW if you wanna catch the train". But a slow glide from red to green is going to have too many interim states.
There is a spectrum, of course. But at the end of the day, you have concrete choices to make. When picking classes for my five year old daughter's summer school, I can check the box for "Disney Princess" dancing or "Little Engineers."
The particular Nazi the Milgram Experiments are most associated with traditionally is Adolf Eichmann. Milgram's experiments were inspired by the trial of Adolf Eichmann, which began earlier that year (1961.) During that trial Adolf Eichmann infamously pleaded that he was merely following orders. He did not say the holocaust never happened, and he did not say he was unaware of it. He said that he was following orders.

The popular narrative of the Milgram experiments is that there exists such a psychological phenomenon in humans. That most humans follow orders, even orders they find deeply distressing. That's why the Milgram experiments shocked so many people; they were being told that if placed in the same position as Eichmann, they probably would have followed those same orders.

But we now know Eichmann's defense was bullshit, and a reexamination of the Milgram experiment results backs that up. People comply with orders when they agree with the motivation behind those orders; in the case of Eichmann the motivation behind the orders that he found agreeable was the wholesale slaughter of jews. In the case of the Milgram experiments, the motivation the teachers found agreeable was the advancement of science. An Amish man doubtlessly would have refused to comply in Milgram's experiments; and somebody opposed to the ideology of the Nazis would have refused to comply with the orders Eichmann received.
Easier still... in the US, many radio stations transmit the artist and song title that's currently being played, via a low-bitrate subcarrier encoding. (The proper name is "Radio Data System", IIRC.)

There were previously some FM to MP3 "ripping" tools that would use the RDS information to tag the resulting recordings -- I'm not sure of the status of them. But it could provide a good way to detect commercials, since most radio stations change to a generic station identification message when they break for commercials / banter. (Whether you'd also want to turn down for banter is another question.)
I'm not sure I get your point clearly, even now. Are you stating dst port could be used for other things? I'm honestly unclear how 'static' bits in TCP relate to IPv4.
you seem to have claimed that people immigrating from Asia move to NYC because it's cheap but at the same time you claim it's cheap because they are willing to live umpteen to a room, vs. literally any other city in the country where it's a fraction of the price per sq ft.

I am claiming that if one of the most populous cities in the country/world sees a high degree of poverty in a demographic it might be because that demographic has a high degree of poverty.
The USA and Russia certainly have the capability [1], both in terms of technology and in terms of being able to smuggle it in. There were secret caches hidden all over Europe by NATO and the USSR, and potentially Soviet caches on US soil, although officially none have been found.

But what would they have to gain by having a nuclear weapon in the wild, which is essentially controlled by whoever happens to have possession of it. There are a lot of checks and balances before a normal nuclear weapon can be armed and detonated, most of which you wouldn't be able to have in a backpack nuke. There's no political gain to be had by one of those weapons, if it was detonated it would be fairly obvious who's weapon it was. Conventional weapons have deniability.

The problem of reliably getting nuclear weapons onto a target has been largely solved. Between the nuclear triad and MIRV [2] warheads, mutually assured destruction has never been more assured.

[1] https://en.wikipedia.org/wiki/Special_Atomic_Demolition_Muni...

[2] https://en.wikipedia.org/wiki/Multiple_independently_targeta...
So do you get the drug for a rational price through your insurance company, or do you import it from abroad?

You are falling victim to corporate cronyism. I truly feel sorry for you :(
> [...] not giving the big red button to a guy who brags about the size of his big red button [...]

That's your answer. By no means are Trump voters illiterate rubes. Their median income exceeded Hillary voters. People need to be reminded the stakes.