skysight-inc/HackerNews huggingface dataset:
Despite being a security critical component, systemd doesn't even seem to have a proper security announcement release process. For example, there was a remote code execution vuln discovered in their DHCP client in October (CVE-2018-15688).[1] The issue was fixed with a GitHub PR that failed to mention that the changes fix a remote exec vulnerability: https://github.com/systemd/systemd/pull/10518

They also have a rather informal release process. Their "release notes" are just a very long NEWS file[2] in the git repo, with notes of trivial and critical changes mishmashed together. And for some reason, to this date there is not a mention of the DHCP remote exec vuln fixed in the latest release.

I must say I don't feel too good about this project's attitude towards security. Compare this to e.g. Apache.

[1] https://www.theregister.co.uk/2018/10/26/systemd_dhcpv6_rce/

[2] https://github.com/systemd/systemd/blob/master/NEWS
Here's a discussion on the Unity forum: https://forum.unity.com/threads/recent-tos-update-blocks-the...
Paul Masson vineyards had a famous ad campaign with the tagline "we will sell no wine before its time." So it is with software. We now understand computer programming to be a craft in the order of coopering, blacksmithing or whitesmithing in times of yore. As such, we've learned how to master that craft.

First and foremost in the craft is continual iterative development and deployment. When features are complete they're deployed. Non-technical stakeholders determine the priorities of the features. Feature tests are written by the stakeholders prior to the development of the feature (BDD).

Developers then implement the feature. They create the actual programming artifacts (interfaces, modules, objects, functions, etc.) Tests are created for these artifacts prior to their creation (TDD). Now I know my artifacts are good and I know my features work properly - at least to the best of our understanding today. If that understanding changes over time then the feature tests change and the cycle repeats except now this time we have pre-existing artifacts we can use to more rapidly implement the changes.

It's that simple. This is the craft of software development today. The question I hear all the time from developers is "But isn't this painfully slow? You're spending all this time writing tests instead of actual code!" The answer to this question is NO, it's actually incredibly FAST!

Why?

Because you're gaining greater confidence in your programming artifacts as time goes on. You know they work. If you need to refactor something you know you can do it. This keeps your code flexible and pliable, ready to take on new changes. So what's changing? Your requirements! Your requirements aren't fixed up-front - they change as the business changes and as everyone's understanding of the problem space changes. If your code isn't flexible and pliable to handle that change then guess what? You're going to be spending A LOT of time reworking the code. And it won't be any more flexible and pliable than when you started. You'll have spent more time and money by the time you get to the completion of the project AND your code is still brittle.

That's been my experience anyway - and I've been at this since 1985.
Nope. 6 years ago real estate had already climbed steadily for many many years and people were calling for a crash.

Really not too different from what you hear in the news right now ;)
I made something similar, but the payload gets encrypted with the users ssh rsa key instead of pgp (that not many use):

./sshencdec.sh -p <(curl -sf "https://github.com/S2-.keys" | \

grep ssh-rsa | tail -n1) < plain-text-file.txt

It's just a simple bash script really, but it works, and almost everyone has a github account and an ssh key set up, so it works out of the box with most developers.

https://github.com/S2-/sshencdec
Indeed. Pity the culture is so... unfriendly? Rematches are basically non-existent - even in bullet! It's bizarre, and I have to assume it's going to limit the site's growth.
Anecdotal evidence: I remember how my 65 years old dad changed from a large-minded, world-traveling retired professor to an avid consumer of fake news in the span of fewer than two years.

Yes, it was a shock, but most of all I am mortified that this could happen to me as well when I get to his age.
More Americans in favor of AI than fear it
All hilarious mocking aside (although you should probably turn this into a SaaS somehow and get it in the cloud), I've been using a simple .txt file for journaling since i started first my professional software gig in 2014.

It has gone through multiple forms, once where i created a new file everyday, and it wasnt automated much. One day I realized I could be even MORE lazy and started automating a bit. Now i have one file, with a heading for each day. I have the vim command saved as an alias now 'journal'. It opens up the file, moves to the end, and enters insert mode :p

alias journal='vim "+normal Go" +startinsert /worklog/start_20160426'
Let's just pick one:

> The indictment of Concord Management: https://www.justice.gov/opa/press-release/file/1035562/downl.... - Discusses the efforts conducted to sow election disinformation, suppress voter turnout

Can you tell me on which page the proof is stated?
Systemd is a double edged sword. I started using FreeBSD in 1999, and Mandrake Linux in 2000ish. I switched to gentoo when it came out, because i like to tinker and see how things work (like or hate the distro it does make you learn a quite a bit).

Fast forward to 2018 and i manage around 500 Redhat servers here. About 150 are at RHEL7 (the others need to be upgraded). So learning systemd is a requirement, it is not going away. I like some points of it. I do like the jounrnalctl command and the ease of looking at logs, however being the hypocrite i am i despise the binary logs and non compatibility with most syslogging devices (i have had to explain lost logs during an audit with systemd and it was not pleasant).

From a end user standpoint systemd is great for my desktop. For the servers it is functional, server boot time does not matter to most administrators. On VM's both boot fast enough, on bare metal....some of our large servers take 5 to 7 minutes to post (thanks HP) so the OS taking 20 to 30 seconds longer to boot is not a big deal.

I follow the systemd mailing list to see what is going on, i think if the guys over there were not as abrasive in some of their answers things would be smoother, and more receptive to the needs of some of the users. I see a lot of features that are desktop specific and that seems to be where their development lies for the most part, desktops and servers are two different beasts.

I guess the infighting just sucks, i am not a fan of systemd simply because i like a simple OS with minimal features to accomplish my objectives, however it is here to stay and i am a Linux Admin so it is part of my job and i learned to use it and keep up with development.

I still use FreeBSD for all my home servers (except my docker swarm), old habits die hard.
I think we've arrived at that future. With languages like Crystal, Rust, Groovy, and Elixir, you can get some of the same powers that Ruby bestows upon you in other environments like a statically compiled binary, the JVM, or the Erlang runtime (with it's lovely OTP framework). I even see JavaScript taking on some Ruby-like characteristics these days.
Mortality, Medical Coding and the (Purported) Drop in Hospital Readmission Rates
Devuan is a Linux distribution that does not ship systemd by default.

You are comparing apples and oranges.
New ITU Standards Bring Broadband to Places as Remote as Mount Everest
People are more xenophobic in places where they see less immigrants.

Compare the Brexit heartlands of Essex and Kent to London.
Ah. So because the implementation has some bugs, then the concept is fundamentally flawed.

Got it.

r/iamverysmart
How We Optimized Storage and Performance of Apache Cassandra at Backblaze
I used to read the national enquirer (UFOs, Bigfoot!) religiously as a kid. I suspect there is something that appeals to people at certain stages in life. Most likely, as you get older/younger you desire stimulation. In mid-life, you're probably over-stimulated.
I tried Backslide for a recent presentation, but I'm not sure I can recommend it. Exporting things properly turned out to be quite hard.
Optics don't know about pixels. To a first approximation, they are continuous. Whatever discretization happens after that, it's not relevant to the optics in any way. A sharp lens can greatly outresolve a low-resolution sensor; the bottleneck is the sensor in that case. Conversely, a high-resolution sensor may not be of much use if the lens is soft - but in this case you can at least in theory use deconvolution to recover detail if you know a good approximation of the PSF of the lens. This is not uncommon when working with scientific instruments, actually, but pretty rare in the case of consumer photography equipment.
Not out of any love of Java, but out of a depth of experience (I started coding with Java at v1.0.1), I used to say the same thing about Java. My advice...keep learning new languages to give yourself a decent range of job prospects.
> averages Hide too much.

I had to read the article because of your comment.

You're wrong.

When competent researchers talk about salary/income they always do median because average doesn't account of skew like Bill Gates.

If you do a ctrl+f with mean or average you won't find it. But if you do ctrl+f and search for median you'll find it.
Creatine, Carnosine, D3, DHA, Heme-iron, Taurine. But it's not just about the nutrients, it's about the supply and the cost. Most people don't have access to the balanced assortment of grains, vegetables, and legumes you seem to enjoy. Without meat and dairy they would risk malnourishment.

We probably could move away from meat, if everyone was well off (and took supplements). But that's not the case. And I never said 100s of millions were acceptable, merely that a 50% portion reduction is a LOT better than nothing, and probably a lot more than a morality strategy will achieve.
For a lot of those 65+ they remember when an article that claimed:
'If you * then share this with 10 of your friends' would have cost them 10 quarters and taken several days of effort to comply.

They know the free postage won't last forever, so they'll use it while it lasts.
Hey, I'm another fan of serifs in monospaced fonts! Go Fonts reminds me of the Luxi Mono font I've used for years on RedHat/Fedora machines.

Nowadays I love and only use Iosevka Slab: https://github.com/be5invis/Iosevka (3rd and 4th panel in the topmost screenshot)
OP is a Clerks reference, by the way.
I am too young to have ever used tables for anything else than table data. I am almost 30 years old today and have worked as a dev my whole career.

We sure have made some progress!
OpenBSD people are most certainly not FSF or Debian fans...
But they at least have to make the effort to break into those systems. Presumably this takes more time/money than an NSL, and it possibly leads to detection of the vulnerabilities used in the hack.
I get rematches regularly. And probably 20% of my opponents will chat a little.
Many other commenters have expressed similar misgivings, but I'll respond to this top-rated one so that I don't pollute the thread.

First, thanks for your brutality. It's good to know that a service like this (which deals with such sensitive content) is treated suspiciously at first.

Second, a few commenters have shown that it may be possible to reduce the MitM aspect by pushing more work into the browser with a method that could also provide end to end encryption. We're going to look into this thoroughly because we thought it was impossible at first, but I'm also curious if that would change your mind at all about using the service. At the very least, it would improve our users' security, so we're still going to see if we can do it.

Third, I do want to emphasize that we encourage users to create multiple keys to use, so that they have lots of power over granting and revoking server access via those keys (kind of like a new proxy credit card in your example, I guess). There are lots of ways a service like Shellvault could accidentally encourage poor habits, and we're working very hard to encourage good ones instead.

Thanks!
.. Quickly Googles “Katamari Damacy“..
The complexity of Sysvinit is orders of magnitude less than that of systemd.
Stanford Open-Sources Neural Network Verification Project
For the Saturn V, they specifically chose the piece count of 1969 as a sort of Easter Egg referencing the year of the Moon landing.
An AWS team member mentioned to me on Twitter that the DocumentDB project at Amazon began more than two years ago. Mongo may or may not have known about it directly, but even if they didn’t, they had to expect it.

The difference between AGPLv3 and the new SSPL applies to all work Mongo releasaes going forward. As intended, that difference will make it difficult for AWS to maintain compatibility, which the article points out is limited from the get-go.
I knew it was a bad exploit when I saw stpcpy() being used in the code. Always use the “n” versions (eg stpncpy()) and measure your sizes!
Stay unplugged from social media and especially mainstream media and you’ll be just fine.
Is it backwards compatible with Ruby?
One interesting thing about this set of solutions is that many of the languages seem to use a pattern-matching approach (e.g. Elixir, F#, Rust, others, IIRC). As a result, having been reading about pattern-matching recently (in F# and OCaml), I was able to understand the gist of the solutions in those languages, although I did not know those languages well or even somewhat, in some cases. Of course, this is for FizzBuzz, for which the logic is easy, which makes it easy to make guesses about how the code works (for many languages at least).
Politics is religion nowadays as well.
I take it, that you've never had to work with html emails then? groans You lucky soul!
Jaguar Land Rover to slash 4,500 UK jobs
Did apple reinvent every Unix daemon under the sun as part of launchd? And did they also reinvent all the security problems while they were doing it?

The problem with systemd isn't necessarily how it handles system startup and daemon supervision (although I don't care for that), it's that it subsumes so many other things, and with no technical excellence.
This may be one of my favorite quotes ever. I also don't find it to be a compliment, even if it was intended that way.
Mongo was AGPL, not Apache 2. It seems unlikely Amazon was willing to integrate an AGPL code into AWS.
Really, a payment processor, an enterprise of questionable legality that apparently had invented a concept of lodging, that what it takes to changer the world these days? And I did specifically mention Twitter. Changing the world for the worse isn't something to be proud of.

And Docker, which is neither from the Valley, as it was mentioned here, nor of any consequence to anyone not involved in the industry? That's not changing the world. That's SV self-congratulatory bubble
Od(1)
I just watched a video about it yesterday: https://www.youtube.com/watch?v=iaqUl3I3y_Q
Peter Thiel: German 270 Syllabus
The Guardian are known for some excellent investigative journalism bad sadly even they can't seem to resist the temptation to put up a poorly researched opinion piece / rant or two occasionally to pander to their left-wing readership. That said, the Daily Mail is a gutter tabloid and among the worst of the worst.

I'd lean more towards the Guardian but I don't think I'd trust either outright.
"So, MongoDB got exactly what they asked for. It's just that, when they forced Amazon to make a choice, they didn't expect one of the options they gave them to be viable. They were wrong."

You're just talking narrowly about Amazon in this comment. What you said makes more sense if you broaden it to commercial users. They might have known FAANG companies, esp Amazon, would just ditch their software if they switched licenses. They might be targeting the companies that can't or won't build a MongoDB knockoff. The companies that will actually pay for their product. That's a huge market.
That chart is less about becoming a web developer and more about the author showing off their knowledge of the web developer tools space.
> a normal configuration could solve it

Could you explain what you mean by this? I get not everyone wants this, but just making SSH listen on port 443 doesn't give you access on a computer without an SSH client.
> I'd also like to pick up some "silver bullet", like Elm(if I got you right)

Nothing is a silver bullet. Never claimed it was.

> Anybody who does webdev knows that.

I am a web developer, and I disagree with you.

> Picking a language with nice "correctness guarantees", is not going to help you much.

That hasn't been my experience.

> Since then, many things have changed to the worse, imho

Exactly — it's your opinion. Removing surface area for runtime areas is a change for the better, in my opinion.

> building things a little bit more complex than counter apps

My businesses are more complex than counter apps.
It was a movement brought by an organized group of professionals who thought that the viral nature of the GPL kept business from taking advantage of the new commons. They created an organization to monitor use of the new term "Open Source," which would be a superset of the GPL, without the onerous-to-business requirement of sharing your changes.
Don't know about Harvard, but I interviewed people for admissions into Oxford CS. If anything, poor background would help you - while we all try to be as objective as possible, if anything we would cut you a bit more slack if you came from a poor background.

In this day and age, I would argue that access to education is actually nearly ubiquitous when it comes to STEM. Lack of encouragement/emphasis on education from parents and the rest of the social circle is a much bigger problem. That, and smart poor kids just don't apply, because they wrongly think they don't stand a chance.

Arguably, a smart kid growing up in a poor family, but with parents that put great emphasis on education, has an advantage over a rich kid - the rich kid is unlikely to have the same kind of drive to succeed.
"That's no moon. It's a space station."
/me googles...

It seems they made things "simpler" by replacing all tags with `div`.
Should be MINSWAN - Matz Is Nice So We Are Nice
The reason why democracy works is not that it generates the best decisions, it works because it makes the least amount of people unhappy.
Do a View Source on a HN page!
VMware requires approvals even for own-time projects. They don't put up artificial barriers in my experience; there's a very simple process for declaring outside projects and approval is quick as long as it's not viewed as competitive. I thought their approach seemed reasonable for a big company with a large IP portfolio.

It was not always this way--VMware has become much more open source friendly over the last few years.
I like the points about studying in this article but its overall point is trash. Ratings across different websites are not the same thing!

2000 lichess is actually more like 1800 chess.com. I would know because that is my playing strength on both and because reddit.com/r/chess has literally dozens of posts of people comparing their lichess and chess.com ratings (my impression is the average difference is ~200). That subreddit also has dozens of posts of people 'reaching 2000' on lichess. It corresponds to about 95th percentile on lichess blitz, just as 1800 corresponds to about 95th percentile on chess.com blitz. So literally anyone switching platforms would 'improve their rating'.
Biggest drop in US fertility rate in recent history
Charts like these are guaranteed to scare anyone trying to enter the web development field. A junior position requires much less than is shown there.
I just meant specifically for your call to action

> Maybe it's time for interested companies and expert stakeholders (FSF etc)

That the FSF likely would have no interest in participating in such an activity since it would betray their core principles (regardless of whether you or i feel that this principle is sound)
Gather all information from primary sources?

Sarcasm aside, I do agree that journals and other longer period periodicals are more reliable.
I don't agree on the UX, the interface is _terrible_ in many ways:

1. I can't even scroll the page horizontally on Chrome.

2. There are 2 menus with a completely different interface.

3. The Android mobile app gives you a completely different experience, and I think there is no lobby, so I often pick a match from Chrome and then switch to the app (and of course the "Open in Mobile App" button doesn't work for me).

4. In general I find the UI is very confusing:

4a. There are 3 places where to write something about a match: your personal notes (never used this, I guess the value proposition here is that your notes will be stored along the match, but I don't think almost anybody cares about notes about games played last year for instance), the chat (which works only between the current 2 players, and you can't access it from the analysis page) and the spectators chat (I suppose this has a purpose for highly spectated matches and live commentary, but I could also run a separate browser where I'm not logged in and read that too so it sounds useless to me).

4b. The match history at the bottom of the chessboard is useless to me 99% of the times, as it's completely empty.

4c. Often the same information is displayed in different parts of the page, I already mentioned the menu problem, but also when playing you can see some infos about the players both on the left and the right column. All these things complicate the UI.

To close on a positive note the feature I like the most of lichess is probably the analysis page, super useful and well done.
Is Coverity being run against systemd? Would it not have found these issues?
Surely you enjoy the irony of the move to microservices and isolation when merging so many functions into init ?
The desktop version of OneNote.

We've tried to use MediaWiki and other fancy solutions (inc. O365's SharePoint/online OneNote) and desktop OneNote is the only one that stuck. We have .one files for each major topic with sections and pages within them. It is kind of a "low tech" solution, and maybe that is why it works. It gets out of the way, easy to backup, no downtime, etc.

Although Microsoft keeps threatening to discontinue the desktop version of OneNote.
I installed (ubuntu) Linux recently on my new HP Spectre x360. Unfortunately, there was some issues still. My webcam didn't work at all. The touchpad was bad in comparison to Windows drivers and the graphics drivers sucked.

But overall it works much better today than like ~5 years ago. Got back to Windows and I am unsure if I will ever run linux on the desktop full time even if it is a distant dream and have been for long.

The only issue is that there is still a lot of issues on many laptops. Most desktops work great and it is easier to switch hardware parts.

On laptops, it seems that it's still a dice throw. I hope that changes in the future. Unfortunately, it is the chicken and the egg problem here and will most likely continue. Linux is a lot better than 5 years ago, but so is Windows and MacOS as well even if they both have stuff that sucks.

I used to believe that [current year] was the year of linux on desktop, but I no longer believe that mostly because of what makes linux so great, all the choices.
I’m pretty aghast at this move by Unity. They have made it clear they have a managed cloud hosting infrastructure in the works, but explicitly blocking others from providing it as a service strikes me as a “we really need this revenue and will do anything to protect it” move.

PlayFab is unmentioned but they will also be affected by this move as they offer a dedicated server hosting service among their offerings.

Even more frustrating is that Unity’s offering is not even in beta yet. Details have been sparse, though I expect to hear more at GDC this year.