skysight-inc/HackerNews huggingface dataset:
> CVE-2018-11235 reported and fixed more than 4 months ago. Flatpak VSCode, Android Studio and Sublime Text still use unpatched git version 2.9.3.

Wait, what? We explicitly do not ship a Flatpak version of Sublime Text, and no version of Sublime Text comes with git.

After such inaccurate information, I can’t help but question the rest of the article.
> imagine how much it would hurt them if they acknowledged they have been hacked

We don't even have to imagine much beyond the current pain its caused Supermicro. According to that article, the stock dropped 41% last Thursday from the original article and then another 15% today (the article says 27% today, but they made some gains since the article was published).
AI Algorithms, Data Structures, and Idioms in Prolog, Lisp, and Java, by George Luger, free from the author's personal page on Florida State uni, here:

https://www.cs.fsu.edu/~cap5605/Luger_0136070477_1.pdf

This is an excellent resource also for LISP (and Java!) and AI algorithms, particularly various search strategies.

I'd also recommend the standard Prolog textbtook, Prolog Programming for AI, by Ivan Bratko. You can most likely find an edition in most university libraries.

I've learned a lot from Adventure in Prolog, a Prolog tutorial on the Amzi! Prolog website (though I used a different Prolog to do the exercises, which is a very good sign of nice, basic and portable examples):

http://www.amzi.com/AdventureInProlog/advtop.php

Those are practical resources. On a more theoretical side, another commenter recommended Perreira & Shreiber, which I can't recommend enough. Also, for a more formal text on logic programming, with proofs and all, the classic reference is J. W. Lloyd, Foundations of Logic Programming. Again, you can probably find a copy in your friendly neighbourhood university library (or, er, google it for a very bad copy of dubious legitimacy, like).
It depends on your use case. If you sandbox tar (for example), you'd do it be removing all network access and a few fancy caps, but you'd leave the rw access to the whole system. (within its standard privileges) If you sandbox netcat, you'd do the opposite: remove all fs access (unless you care about pipes) and leave open networking.

There's nothing about the idea of a sandbox that requires a specific approach.
US Advanced Weaponry Is Easy to Hack, Even by Low-Skilled Attackers
Don Knuth has the right idea; he batches all tasks. However, we don't all have the luxury of working at our own pace.
> “Dieting may be the most helpful analogy here.”

Considering the massive flimflam industry around dieting, deceptive food company practices to make unhealthy food seem healthy, and the proliferation of ‘food deserts’ or parts of the country where finding healthy food at the grocery store (let alone a restaurant) is a challenge, dieting seems like the worst possible analogy.

Unless it is an analogy for how to create an industry to profit off of human weakness and struggle without actually solving the root issue. Then it is an excellent analogy.
> Snaps rely heavily on Ubuntu's specific flavor of AppArmor to be able to offer full confinement,

The AppArmor patches have been largely upstreamed by Canonical, and improvements continue to float upstream constantly. So claiming it's not being reviewed isn't accurate.

> * Canonical doesn't know how to work with SELinux at all, and doesn't want to learn how to

That's disingenuous. Canonical works with many parties, and has people working on LSM stacking for example precisely to support co-existence of the systems. We also had exchanges in the forum to discuss the implementation of actual backends in snapd to support it, but Canonical indeed won't pay for the cost of implementation until there's a reason to do it. That's business as usual and pretty straightforward.

> In addition, the majority of snaps are not sandboxed at all anyway, as they operate in "classic" confinement.

That's incorrect by a huge margin. I'm curious about where you could possibly have based that opinion on? Classic snaps require manual reviews, which need to be backed by public justification. You can see every single request floating by in the store category at https://forum.snapcraft.io. That means every snap people push without talking to anyone are not classic, and thus the vast majority.

> Finally, Canonical is the sole arbiter of snaps.

Well, yes, it has created the project and maintains it actively for years now. You're welcome as a contributor.

> Disclaimer: I'm a Linux app developer that grudgingly deals with both formats. I'd rather just keep using RPMs myself

And I work on snapd (and have also worked on RPM back then, so enjoy :).
I've had the same experience as you. The people behind the support desk have always been able to assist and find an answer for me. Granted to get them to jump on it quickly I usually have to use the "phone me now" option, but the quality has been the same regardless of how I've approached them.
I've never heard "amber" used as a modifier for "amber."

"Quick, bring me the amber amber, Amber!"

I didn't write the comment very clearly, but the petrels were a hint I was talking about language and usage, not simply objects in that part of the spectrum.

Ale is a notable omission, but the candidates dwindle.
That's fair, parent is post-hoc theorizing.

I have to hope that the people in charge of these things -do- care, and that it's simply difficult to get this right. However, given some of the things in the PDF, one has to wonder...
macOS does this via the open dialog — opening a directory gives an application full access to that directory
The economics prize in honor of Alfred P. Nobel...
Google has WAY more than 2 weeks worth of logs. When I was there having 90 days of live logs was the norm with very few exceptions. Anything older wasn't "live" but pretty easily accessible if you can get the resources approved.
I'm really curious now. How were you testing their understanding of overfitting? Like what was the setup/questions?
I think it is more unsustainable to build infrastructure for small towns sized 7000.

We should want more consolidation so as to spend less on infrastructure creation and maintenance. 7000 is too small.
Hardware gets cheaper and you can assume a small return on the money, I think. You could also just take it as a guess for 100 years of storage too.
For middle america I'm a bit out of my depth here, but on the east coast a lot of universities pay taxes voluntarily so they can just cease paying taxes altogether, it's pretty terrible and much of their payments end up being less obligations and more good will expressions... https://www.bostonglobe.com/metro/2017/08/18/city-asks-for-p...
> some studies show it causes brain damage

What? That can't be true, are you sure?
Honestly, I don’t know if anything can save little towns, at least most of them.

At this point it’s a question of which 5% of towns will consume the population of the remainder of their peers.
Listening to ambient music somehow seems to makes me seek other distractions less, allowing me to actually get started with or focuns on the task at hand.
I use flatpak on my system for the fact that packages can be had there I can't get through my package manager easily and officially. That's the only selling point!
If you live in most college towns you should know it goes beyond that.

A dumb example would be a video game store. College kids have a lot of time and unlike most old people might want to pick up some games. Sure, there’s Amazon but second hand stuff is cheaper.

On a different level, you have stuff like auto repair shops, grocery stores, even gas stations that get benefits from a student population in an area. We all gotta eat after all. Stuff like parks can get use as well

And if even 1% stay and start a business in the area afterwards that’s still something that likely wouldn’t exist otherwise because people tend to start businesses wherever they are.

There is a bit of a risk of simply feeding the students into the nearest large city but even then you’re looking at 4 years of student loan money spent on various consumables in the area.

The biggest worry is indeed for real estate pricing.... which is why it seems very reasonable to force schools to build appropriate housing for their students instead of just relying on local stock.
Break up Amazon before it does any more damage to America
Thank you. I tried to confirm before posting. This was my source:

https://www.enotes.com/homework-help/what-relationship-women...

I can't manage to copy and paste the text, but a portion of it indicates that it is still state law, though it is enforced less strictly than it once was and not applied to foreign women, and women still protest it.
Not intersted. Give me a freaking white listed callers only mode. Don't need cloud, google or anything complicated for that...
https://youtu.be/PsXFwy6gG_4
I can elaborate. If you encounter any problem with your Piexl phone you will have to interact with their customer support which is woefully under-equiped to support customers.

If you happen to fall off of their four state flow chart, you can expect extended calls with lots of words, but no action.

They will send you a refurbished phone, but ask you to secure delivery for the phone at the price of a new phone. They won't allow you to return your phone, they can't send you a new phone overnight, even if you offer to pay.

If they make a mistake in their system, they won't be able to fix it.

The entire customer support system feels like it was built for support reps that don't trust customers, by product managers that don't trust support.
If this intrigued anyone else, just a quick summary: 3-6 week interview process, no relocation assistance, no bonuses, no equity, citizenship requirement, oh and the kicker: drug testing.
Valid counter to the article's premise, and leads me to a dumb question: why haven't more colleges attempted to cut costs in recent years, as tuitions and student debt continue to spiral?
> I don't think it's the majority _per se_ (since Ubuntu Core can't run those), but most of the popular ones likely do.

No, that's also incorrect if you slice it by popularity. We don't have a public chart easily filtered by these aspects together, but just pick some random samples.

It's also easy to see that based on the low volume of classic snap requests in the forum, vs. the volume of actual snaps published and announced in the open.
At 30,000 students, UK is definitely not small.

Also, it’s a land grant university. Those are big, old, and typically have great endowments.
>There is no reason that these issues can't be ironed out going forward.

That's true in principle, but selinux still doesn't see that much adoption outside of the distro configured policies for typical server usecases. A lot of desktop apps run unconfined. So I think this is where openbsd's approach to stuff like this is more practical. They iterate and wait before rolling out features like pledge or unveil so that they know that 1) It can be made to work with at least 50 apps (read this is one of their slide decks) 2) They can tackle a complex enough application like chromium. Flatpak, selinux or any of the other security mechanisms are completely ineffective if users or developers are largely ignoring them.
Hmm, perhaps I've been a bit unfair. Looks like I will have to give Brave another shot soon! Thank you!
Heavy doses of atomoxetine, clonidine, mirtazapine and procrastination. WFM.
It's called a shielded RJ45 jack (you can also search for a shielded ethernet cable).
Apple doesn’t even have PMs (at least most of the sw and hw orgs). They are engineering driven. They have project managers who keep the trains running on time but have no product decision making power.
You are conflating different senses of "feeling". Our minds are not monolithic. We may have a deeper feeling that something must be done, but have a short term lethargic feeling pushing against doing that thing.
Your comment reminds me of the Underhanded C Contest. Some of the submissions are absolutely dirty, and it goes to show how feasible it is to slip in these kinds if bugs.

http://underhanded-c.org/
https://en.wikipedia.org/wiki/Great_Cannon
I think they were actually better when the engineers were really "running the place".

They could be a bit blind about some things -- and blindsided. But once you actually made your point, they'd do something about it. They actually cared. (Or, enough of them did, to make a difference.)

Now, we have a corporately curated behemoth.

Although, it is interesting that internal pressure still occasionally produces an appearance of change, such as publicly stepping back from death robots and Wintermuth off its meds.
California DMV may have registered noncitizens to vote
The academic ponzi scheme thing is overplayed. I'm a Phd Research Scientist at a good school. I'm not faculty, but I have a lot of freedom and I get to do research that is fulfilling. Yes, it's a pyramid (aren't all org charts?) and I'm not at the top, but I'm happy.
Trust me, nobody cares. The regular user doesn't go past "I can install Spotify in one click". It always were like that and it always will be like that. With more "normies" coming to Linux there will be more stuff like that. That is exactly why people were saying that there are no viruses on Linux only thanks to lower popularity.

And with all honesty - how many of us read script files when installing something from AUR?

But hey, nobody forces you to use it! You can always choose you distro repo or go DIY way.
In few years renewable power may become a better economic option
I almost never had to run a privileged container, and I avoid it whenever possible.

As far as I have seen, privileged container use is rare.
What lead you to the assumption that it isn't?
Never. Trust. A. Woman.

Period.

It ain't worth it.
Reinforcement Learning for Improving Agent Design
Yes, that's kind of true. You can get newer versions of things slightly easier. It can be major point if your distro is getting quite old (like RHEL or even xenial), but if you keep up with a 2 year cycle of distro updates like ubuntu LTS, you rarely hit that scenario.
Dear MBTA CTO, why isn't this on the MBTA website instead of Medium?
It's interesting how in tech people talk about such specific cultural issues as though they're inexorably related to outcomes. Sometimes it is, more often it's not. 'Culture' is always a lynchpin of success, but Google has classical company 'good culture' in droves. The things mentioned in the article aren't as important as we might instinctively think.

Google is a de-facto monopoly on search (ok, that's debatable, but there's no debate they 'own it' for now) with massive moats like Chrome and Android, vast datacentres, literal ownership of the brand i.e. 'to Google' is a colloquial verb in many languages.

They are going nowhere - not for a very long time.

They are 'dying' about as much as MS is dying ... meaning they are not really, they're just losing their lustre to 'us' types.

The only way Google will hurt, is the same way MS has hurt - meaning a fundamental shift in users behaviour or market architecture. MS started to hurt when the world went to the internet, and went mobile. That hurt their OS and Office solutions somewhat, but they've adapted and in $$$ terms, they're just fine. So Google will hurt when people stop searching (!) meaning, not anytime soon. Now - the change to mobile which is partly dominated by Apps presents a pretty big threat, but they seem to be managing it. That's the 'kind of change' that will hurt them.

Facebook on the other hands, has some existential trouble, but even they will likely be ok.

Twitter has a hardcore userbase in the press etc. and might wane, but likely aren't going anywhere for a while.

Snapchat ... could be in trouble.

Google is maturing into 'regular company' phase. They still have amazing momentum, massive cash, 'everyone' wants to work there, it's still a solid resume placeholder, they have talented Engineers - and the culture as far as doing stuff still works.

FYI - they were never good at UI, and their products have always been a little bit of a gaggle.

But search, their ads, maps, chrome, android, youtube ... those are formidable assets.

So yes, the 'Do No Evil' Google is gone, and we're now into the next phase.

They could possibly be overvalued as are many tech stocks, but they're going to be around for a very long while.
>Maybe SETI hasn't detected anything because generating a signal loud enough for us to detect is a stupendous amount of energy, and it's simply too much energy for a single planet civilization to justify using on a radio transmission that's going to travel at most a quarter of the way across their star system.

Plus even if you can do something doesn't mean you should

https://en.wikipedia.org/wiki/Fermi_paradox#It_is_dangerous_...
My understanding is that we still can't fully confine stuff using Electron (VSCode, Atom, Skype, etc.). Did that change recently?
If I remember correctly, they used to offer this at Microsoft. You could waive the benefits you didn't need and get some pay back.
That does not "pad the ROI". It lowers the ROI of the fund. It may launder some money from the fund into a VC's personal pockets, but that's not the same thing.
It's not racist to not want to drive away non-white and young people.
The overall economics of small mid-tier universities is getting drastically worse--a few exceptions notwithstanding.

I expect a lot more closures and consolidations as tuition competition increases and students become more hesitant to take on debt.
> docker uses user namespaces

Docker has support for user namespaces but it's off by default, and I've never actually seen someone use them (I'm sure people do, but the way the support was implemented is fairly half-baked in a variety of ways, for a variety of understandable but still disappointing reasons).

LXC/LXD's user namespace implementation actually privilege-separates different containers from each other (while also being able to "punch out" parts of the mapping so that you can share stuff between containers without needing to share the entire uid_map).

> user namespaces requiring privileges to use

Not always. See https://github.com/rootlesscontainers (a project I work on -- currently you can run Kubernetes as an unprivileged user with some caveats about multi-node setups but we're working on it) or LXC's unprivileged containers.

And in cases where you need to have multi-user mappings (which isn't necessary for most user applications because they wouldn't be able to setuid anyway!) you can just use "newuidmap" and "newgidmap".

In fact, bubblewrap has supported precisely this usecase and the use of user namespaces for a while. Of course, user namespaces wouldn't really help with protecting against home directory attacks -- if you're running as the same user (but in a user namespace) and you bind-mount the home directory then it can obviously write to said home directory.
Women can do whatever they want now with no accountability and no recourse. Opt out of the bullshit by not playing a game stacked against you (interacting with random people), otherwise it's playing Russian roulette; which is pure stupidity.
...also, in a ponzi scheme there is no product. I aim to produce useful, generalizable knowledge. That's what the NIH is paying for. A valuable product.
Because there’s no incentive to.

First, the market clearly does not reward cheap education. A lot of prospective students and their parents are enamored with pricey colleges either for the status or for the perceived value. This is probably a result of cultural expectations lagging behind actual reality by a few decades.

Second, all the intermediary parties have no incentives to control cost. Student debt cannot be discharged under bankruptcy, so why would the lenders ever say no to any debt? They don’t care that the college is overpriced by a factor of 10 and the student will never pay off their debt fully, they’ll still pay 6-11% interest for the rest of their lives, which is highly lucrative for the lender.
I grew up in one of these towns in the Midwest, and this is exactly what I fear for its future. The college tuition costs nearly as much as Harvard but the educational value is worse than that of a public university in many ways.
Nobody wants a packaging system that can't package existing apps not designed to be secure in a useful fashion.

In a traditional app packaged as a deb/rpm the developer releases the source which then must be packaged and made to work with each distribution/platform. If the app is malicious or is sold to someone/compromised by someone who is then you are 100% hosed.

In a flatpak not designed to be properly sandboxed you are in fact no worse off than the alternative deb/rpm situation save that the issue of packing for distribution has been made easier.

It's in fact probably extremely challenging to package all sorts of applications without giving the user the option to provide an individual app elevated permissions.

At best we are relying on the user to decide which app ought to get those permissions.

If you think people can't be trusted to do this then the logical solution is to rely on packagers to decide what belongs in the official repo and keep malicious content out.
What Bird CEO Travis VanderZanden Learned from Uber and the Ride-Hailing Wars
Sorry I assumed the pay would be equivalent between the regions for the same job at the same company. The 5% raise would just be a result of no state income tax.
I don't think you'll find this in a board that doesn't otherwise normally have lots of other buried components ... The added cost of that extra process (using buried components) is so way higher than normal and such a board is going to look noticeably different from a normal board ... I'm tempted to think that someone told the Bloomberg guys that it was possible and the took it that it had happened
>It seems to me that no one expects any war that would hurt the US any time soon, so it's an open season for fleecing the military budget for all it's worth.

If that was the whole story, the military budget would be plummeting as our representatives realized that they could also, and far more legitimately, take money away from the military to put in their pet projects.
That's definitely true! It's also good for smaller distros with smaller package managers. It's easier for a dev team to support just Flatpak than to bundle/petition for pacman, apt, yum, eopkg, and so on.

I'd greatly prefer 'native' packages though.
Have a look at AppV on Windows. It isn't great, but all I/O is redirected, so in your example, tar would think that it's writing to /home/voltagex but it might actually be writing to /run/sandbox/blah/home/voltagex - so if something ran rm -rf it'd only delete the sandboxed home.
Deep web still provides best hacking services as usual
WHO ARE WE?
We are a team of professional hackers from all over the world, who evolved from the shadows of dark web, a subset of deep web with hidden services, our main motive is to provide yio safe and secure professional hacking services :
contact our agent/officer on
DARKWEBOFF1@GMAIL.COM
for any of the services listed below or more
Instagram hacking
Twitter
Hotmail
Rediff mail
Yandex mail
Pinterest
Bloggerhacking
Youtube channel hacking
Wordpress hacking
Skype
Software
Penetration test
Database dumping
Credit fraud recovering
Windows hacking
Wifi password cracking
Credit score fix
Cryptocurrency theft
DDOS attacking
Ethical hacking learning
Doxing
Whatsapp hacking
CCTV hacking
iphone and icloud hacking
Phone hacking and tracing
Gaming and betting site hacking
I wrote some similar code one time that generated SQL which was manually reviewed. It generated a massive WHERE IN clause. Oracle only accepts 1000 values. So I fed it a list of thousands of values, and it chunked them into rows of N objects, and into larger chunks of 1000. Having some code to do that automatically would be quite nice.
Virtualised paths with specific access - i.e. VS Code would only see one path.