skysight-inc/HackerNews huggingface dataset:
I would like something like this, but open source (my inspiration is codebox.io, which is dead). I might code it actually. My goal would be to have an easy editor, file manager and shell for Docker images that could be installed in one line of bash.
This algorithm browses Wikipedia to auto-generate textbooks
German Resident loses 2 months salary due to apartment search scam
Not at all a surprise.

The first time my dad used the Internet to look at used car ads on Craigslist, I found him trying to fight off a cascading series of popups (this was in the mid-2000s) that launched when he clicked the "You are our 1 millionth customer" ads.

Older people who are new to the Internet may simply think it's regulated like TV and Radio commercials are. Couple that with how easy it is to target these demographics using an FB/Twitter advertiser account, and how they make up big chunks of the voting bloc, and you have a recipe for disaster.
Your DOM builder library is also great for lower-level DOM manipulation. Thanks for your work, by the way.

https://github.com/raquo/scala-dom-builder/
Study says that damage to the prefrontal cortex in older adults can increase susceptibility to fraud and scams, which may be related to why older people share more fake news.

[source] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4971060/
Like other commenters, this study jives with my experience with older relatives. I mean 'forwards from grandma' has been a thing forever, right?

'Bill Gates will give a nickel every time this is read' (remember email chains?), 'naked women get shared, but this heroic child won't get a single like', 'Like and Share if you stand with politician X', etc etc.

Combine this with the targeted scamming of elderly from various Nigerian princes and jailed grandchildren, and there does seem to be a much greater degree of credulity with our current elderly generation. I think a more interesting study would be to figure out whether it's generational, a function of changing brain physiology as we age, or what.
Using Fourier Transforms to Multiply Numbers
I like this idea much better than I like word vectors.

Although word vectors are well-established, at the end of the day people want to classify documents, not classify word vectors.

Also note that: (1) Sentiment analysis is where BoW goes to die (e.g. "not good" is roughly equal to "bad") and (2) I have not seen so many "beyond BoW" tasks other than sentiment analysis that have been well documented.
I worked with both SysV init and updstart. Upstart was not too bad. SysV init was giant piles of bash-script, always slightly different from service to service and from distro to distro. Bash is a language which two decades after, working full time in Linux, I don't completely grasp. Just a few months back we got a client still stuck on SysV init, we ran this algorithm with him:

https://xkcd.com/2083/
It's been nurtured so long that it feels like nature.
Bezos gives everyone the middle finger. Doesn't matter if you're part of the massive open source stack they profit from or one of their workers unfairly paid trying to meet unfair workload demands or one of the 100s of countries, states and cities they relentlessly conspire to steal taxes from.

What's really funny about their not-mongodb as a service is they will inevitably roll over any piece of software third parties host on AWS too if they think it makes enough money. Your SaaS is just another project for some team waiting on their next. They have already done that for 10,000s of physical products on Amazon.com that were sold by third party vendors who became redundant via Amazon releasing similar products under their own brands.
It's very hard to find solid numbers, because these flags are introduced and popularized at different times. But I'll try to give you my best summary. Long shory short, these flags are considered essentially and most web browsers and distributions have already enabled them without problems.

Let's see...

-D_FORTIFY_SOURCE=2
-Wp,-D_GLIBCXX_ASSERTIONS

These two are considered very cheap. It enables some sanity checks for buffer overflow in glibc and glibc++, respectively. See https://access.redhat.com/blogs/766093/posts/3606481 and

-fstack-protector-strong

Also known as stack canary. The earliest version is simply called "-fstack-protector", but the coverage was bad (only "protects" <2% functions), there was also "-fstack-protector-full", adding checks to ALL functions, but the performance overhead is unacceptable. The "-strong" variant is an upgraded version, it uses a heuristic when determining if a function needs stack protectors, provides much better code coverage and a tradeoff between security and performance.

It's relatively expensive, but is considered essential to prevent attackers from smashing the stack, and is enabled in most web browser engines.

See https://lwn.net/Articles/584225/

-fstack-clash-protection stack clash protection

Introduced in GCC 8.0 after the Stack Clash attack was discovered, see https://securingsoftware.blogspot.com/2017/12/stack-clash-pr...

-fPIE -pie better ASLR protection

PIE is Position Independent-Executable, Address Space Layout Randomization needs it to achieve its full level of protection. It has been around for a long time, but only saw a mass adoption recently, possibly due to higher performance impact on 32-bit x86, but favorable on 64-bit systems.

Red Hat has a performance analysis.

* https://access.redhat.com/blogs/766093/posts/1975803

Arch Linux has also benchmarked its performance impact before deciding to enable it.

* https://github.com/pid1/test-sec-flags/wiki

-Wl,-z,noexecstack don't allow code on stack

It just disables the executable stack, no overhead. And normally the stack is NOT executable, unless under some special conditions like linking assembly code, due to bad default settings in GNU toolchains for historical reasons. This explicitly tells the linker: don't allow an executable stack, no matter what.

-Wl,-z,relro ELF hardening
-Wl,-z,now ELF hardening

It marks the GOT table as readonly, and force the system to resolve all function references to shared libraries at startup time, instead of runtime. It has some impact on startup time, but mostly negligible.

See https://blog.osiris.cyber.nyu.edu/exploitation%20mitigation%....
> My biggest problem with Stripe is that roughly 50% of transactions are declined!

Are you guys actually collecting all of the relevant information for an account, like billing info?

We've only had a single failed payment in the past year and it was an issue at the card's bank rather than Stripe.
Who hasn't used a flat bladed screwdriver to pry open a can of paint, scrape crud off of a car part, lever apart two things after removing the bolt, as a chisel and then turned it around and used the handle as a hammer. In some areas of life, not much has changed.
> "Whimsical inventiveness is the one thing that keeps me enjoying the art of programming."

A personality difference then. Reading clever code does nothing for me. I'm much happier digging around hulking layered codebases that may look ugly but do something valuable for the user.

I agree that the cuteness of a programming language is just a matter of taste and habit. I'm not going to pretend my criticism was anything deeper than an expression of why I personally dislike having to work in Ruby.
Don't tell him about launchd
Can we just ban/flag these comments already? They're so obviously false and their motivations aren't sincere. Political colorization of other people's choices because you don't like it, with a thin veil of political grandstanding masquerading as insight, on top of needless hyperbole is just unhelpful. Honestly, I get that you like systemd. I understand wanting to not talk about it anymore. But not wanting other people to be able to talk just because they disagree with you is ... not a compelling perspective.
That's what I did as well. But I also continue to use Slackware which doesn't have any current plans to move to SystemD.

It was the first Linux distro I ever used and I still love it to this day. I've used many different systems for work over the years but I've kept at least one Slackware laptop or desktop going since early 1995 when I first found a Slackware CDROM in the back of a book about learning Linux.

Although it gets new software, bug fixes and minor updates here and there it's remarkably similar today to what it was then. And I find it Just Works, I've had very little trouble with it over the years.

I think I like it too because it always felt like the most traditional Unix like distro I've ever used and also more BSD than System V which I also generally prefer.
Launchd is nowhere near as bad as systemd and doesn't suffer from the latter feature creep.
Fortunately they tend to be retired so there is less impact to their lives to go vote on a Tuesday in the middle of the work week. Wait. What? Ha!
The hands-on-keyboard SLA for a lot of on-calls is 30 minutes.

So in an “attack was detected, break all the glass” scenario, the difference between 10 and 70 minutes is sufficient to allow human operators to render the attack moot by offlining its target, while the attackers are still trying to break through API servers.

At both big corps I’ve been at, the incident response plan for an exfiltration attack on customer data was invalidate DB creds and take the system down ourselves.

Better to be out of service than lose custody of customer data.
The new rules of eating al desko
Criminals Demand $10M in Monero in Norwegian Kidnapping Case
I wonder if this study includes memes like that or only actual site links external to Facebook.

I have similar experiences with older loved ones I'm friend with on Facebook and it's rare they send links. But I think the rampant meme-sharing of misinformation/disinformation is much more prevalent.
Thanks a lot, great to hear!
This is an unpopular choice, but I have recently switched all my terminals to the Go Fonts[1], and I couldn't be happier. Those who say that only sans-serif fonts belong in a terminal have been lying to me this whole time.

[1] https://blog.golang.org/go-fonts
The author of this piece is Dave Thomas, who also wrote:

"I came across Ruby in 1998 because I was an avid reader of comp.lang.misc (ask your parents). I downloaded it, compiled it, and fell in love. As with any time you fall in love, it’s difficult to explain why. It just worked the way I work, and it had enough depth to keep me interested.

"Fast forward 15 years. All that time I’d been looking for something new that gave me the same feeling. Then I came across Elixir, a language by José Valim, that puts a humane, Ruby-like syntax on the Erlang VM."

So while he loves Ruby he's mostly moved on to Elixir, which he loves partly because of how it builds on the ideas in Ruby.
>Is there any realistic threat model under which the difference between 10 minutes and 70 minutes is the difference between "insecure" and "secure"?

How about an intrusion detection system that flags up a human response? 10 minutes is hardly any time at all to respond, an hour gives you a chance to roll out of bed.
IQ is highly hereditable and has a higher correlation with income than the 5% here.
Interesting choice you have there. Systemd is heavily influenced by launchd, the service manager that makes MacOS tick. They're very similar in design. IPC based, socket-activated, property-based, dependencies, parallel startup, unifying init and service management...

https://en.m.wikipedia.org/wiki/Launchd
Poor people aren't able to move just to switch school districts for their child's benefit...

Also, they had a nice single-family home with a yard in a suburban area.
Ruby's readability has been a huge plus for me, and I love working with Rails. I've only completed one Rails project, and I want to work with it again in the future.
I can see how this might seem convenient, but using this service would be a really bad idea. The vendor even seems to know this:

Sharing your public key is ok, but you should never
share your private key (from the file id_rsa) with
anyone. Instead, we've made it easy to create new
Shellvault-specific keypairs.

Unfortunately, this only means that Shellvault creates the private key itself. Which amounts to "sharing your private key".

The lack of an end-to-end encryption tunnel means that despite the vendor's best intentions, this service introduces a lot of points at which a malicious actor (or accidental misconfiguration) could compromise your session.

In short, there are multiple good, free, native, and local SSH clients and terminal emulators for every platform. Use those instead.
I remember a similar discussion on here about hedge funds. The goals of the ultra-rich investors are often very different than average people.

In a 401k investment account we try to find the best ways to get a return on investment and increase the value of assets. There's risk involved, but for many it's the best chance they have for a true retirement.

Ultra-rich, on the other hand, often go to their hedge fund manager with the simple goal of "can you make sure I'm never not rich." They aren't focused on the upside of their investments (though they probably at least want to keep up with inflation) -- they're concerned with the __downside__ and the risk of becoming 'not rich.'
Oh, so by "terminate the connection in the browser", you mean the service would connect via SSH to a server, start a separate socket server connected to a terminal, and then hand off the connection entirely to the browser? If not, could you explain what you mean?

If so, I can see some potential issues, but that's a really nice idea for how this could be improved, and I'll look into it more. Thanks (to you and jstanley both)!
Marker.io now supports GitLab
If you don't grasp bash after two decades of Linux experience, you should maybe question yourself as to why that is rather than blame bash. Maybe you never properly spent a few days fulltime trying to learn it?

I'd take bash scripts without hesitation over systemd any day of the week. I can debug bash with my eyes closed. Every single time I had to debug systemd, I wanted to kill myself.
I think you went from a 1 to a 10 real quick. No one is talking about slavery. Here in California there are armies of lawyers making sure immigrants are treated fairly and paid a minimum wage - especially in farm work.
And resulted in Devuan fork.

I have used systemd and currently am forced to use it in production. It works great until it doesnt.

There have been multiple times I have no idea what was wrong as it was faster to simply recreate the system from scratch and hope the same bug didnt happen again.
> It used to get accused of scaling poorly, but tell that to Github, Gitlab, and other large-scale sites with millions of users.

I've worked on one such large-scale enterprise-level web app, and it really does scale poorly in some areas, specifically database management. ActiveRecord tends to get extremely expensive when db's take on large amounts of records and complex relationships start forming between those large tables. You need VERY good software engineering practices and understanding of which choices will utterly kill you down the line in terms of performance when using this ORM, and it's hard to see those consequences at the outset due to the fact that Rails code is so easy to pick up and understand.
Can Deep Learning Model Perceptual Learning?
There were few programmers at that time, so few programmers could have potentially reach the market. Compare it with now when you just need to download an open source programming language and compile it on many platforms.
For they are underexcited.
NetData from CNCF:

https://github.com/netdata/netdata
I just nutted a little.
Make her crave you
First-look new science fiction novel: “Yael”
Also, politics aside, the younger generation has some sophistication about domain names (which are essentially their news sources) in general.

They know a domain that's been around vs. one like justice-freedom-eagle.usa that looks like a default wordpress template with stock clip art.

They may get their news from aggregators and live in their respective bubbles, but they're more likely to see through a shady looking site with headlines like "Pope endorses Trump" or "Hillary leads Trump away in handcuffs." As much as the respective sides want to believe those things.
>The tyranny of a stable paycheck.

In this case, it is the "tyranny" of a large paycheck and equity from the wealthiest public company in the world.
I don't want to be cynical. There is probably lots and lots of work being put in this project, but....

The business idea is basically this: hand me your credit card, I go to your favorite ATM, get some money and hand it to you. It is great service!

Yes, a great service for some, but why would I give the most sensible credentials I own to a third-party? SSH tries to avoid man-in-the-middle attack. This is a man-in-the-middle attack as a service.
The elderly are generally more susceptible to internet fraud. Last summer the New Yorker had this story about how an 85 year old was scammed out of her life savings:

My Mother and Her Scammer
https://www.newyorker.com/culture/personal-history/my-mother...
Not much of one... it can be first. It works totally fine offline and doesn't REQUIRE cloud. Even if you enable cloud support.
Unidecode is a projection into the ASCII plane, not your favourite language specific preferred transliteration of certain characters. As such, calling it "definitely [...] wrong" is somewhat overblown, in particular since the author of the library explicitly addresses it.
Unity Engine ToS change makes cloud-based SpatialOS games illegal
One liner side-channel attacks free/Java:

public static void main(String[] a) {
for(int n=0; n++<100;) System.out.println(new String[]{String.valueOf(n), "Fizz", "Buzz", "FizzBuzz"}[-n%3 >>> 31 ^1 | -n%5 >>> 30&2 ^ 2]);
}
Well, the fewer years of schooling they are likely to have received. (Full disclosure: 63 years old, two degrees.)
Designing Data-Intensive Applications by Martin Kleppmann. If you ever plan on working on systems with high availability, high throughput or high data volume requirements, this is the book to read. Great balance between practical and theoretical, best book on distributed systems IMO.
Where You Should Move to Make the Most Money: America’s Superstar Cities
Noted! I love BC, lived in Alberta a while— the Okanagan has been on the list for some time. Had no idea there were observatories there. I missed out on visiting the ones in Kona while I was there, so it's nice to know there are some accessible ones closer to home (though no cheaper of a flight from Toronto...)
The line for personal freedom is always where it infringes on the rights of others. Keeping your own wealth or passing it on per your own wishes after your death does not infringe on anyone else's rights. Taking someone else's wealth away from them infringes on their rights.
We are smarter than you. Trust us :)
Amazon was never using Mongo.

They used Dynamo, and their white paper on it predates Mongo. Amazon was always an Oracle shop and now have dropped that too.

My old company begged AWS for years for Mongo, looks like they finally got around to it.
That reminds me of the story when a reporter asked Gerald Cavendish Grosvenor (the Duke of Westminster) if he had any advice for young entrepreneurs and he replied “Make sure they have an ancestor who was a very close friend of William the Conqueror.”
https://www.nuweba.com/AWS-Lambda-in-a-VPC-will-soon-be-fast...
Step 1: Election day is a national holiday.
Check out Crystal - Its statically typed, compiled, and a near one to one implementation of Ruby. https://crystal-lang.org
Having spent Christmas back home, I've come to the conclusion that people over 65 should not have the right to vote.

You've had almost forty years of voting, you don't really have any future left, and your minds aren't what they used to be. Please stay out of it.
It might be, since the console mode still can display graphics, e.g. Tux or the distro logo on boot―afaik it's done via the framebuffer driver. So you'd need to hijack the console mode, draw characters using a TTF-capable library, and output the result to the framebuffer. Haven't heard of anything readymade in this vein, though.

The more pertinent question, however, is “why?”, if you could boot at least bare X and xterm instead.
Maybe I should have said there has to be a trusted intermediary. The underlying SSH protocol is secure from sniffing and man-in-the-middle attacks, so it's okay for there to be any number of untrusted intermediaries (like routers) between the client and host.

Hosting the trusted intermediary is the value proposition Shellvault is proposing, I would imagine. Of course, you could host the same thing yourself. This sort of "self host or pay us to host it" model is very prevalent nowadays.
The effects in all the movies back this up. Ships entering or exiting hyperspace don't just pop in and out (from a third person viewpoint) but actually shoot off or slam in very very quickly. Which infers there's ramp up and down sub-light speeds at each end of the hyperspace journey.

likewise, in the cockpit of the Falcon, you see the star trails extend as she makes the makes the jump to lightspeed, before the hyperspace tunnel effect kicks in.

As I'm typing this, I'm now actually wondering how 'lightspeed == hyperspace' in the SW universe?
>Truth is, excepting maybe Netflix, the rest of FAANG requires you to get approvals.

Is this really true? In my company (not FAANG, but a big one), you need approval only if what you do in your spare time has overlap with the work you are doing in your job. What the rest of the company is doing is immaterial.
If I'm not mistaken, ideal optics would focus a point source onto a single pixel. A blurred image would spread that point source over more pixels and a sharpening filter might be able to not only fix the blur, but locate the point source within the that single pixel. Yes? No?

I'm imagining this being similar to how adding the right kind of noise and oversampling can tease out smaller signals than one might think possible in a noise free sampling system.

Am I off base here?
No. Not really. http://jrnl.sh/ looks good too if you're starting from scratch.
On the other other hand, I’ve seen a lot of people thinking they can determine the truth by weighing various commentators against each other and deciding which seems more likely, which I’ve just found Isaac Asimov used in Foundation (1951!) to characterise attitudes of decline.

Not sure I’ve noticed a pattern, age or otherwise, with such attitudes.
I would say it worked until the world changed in such a way that old systems were entirely dismantled.

But even in previous eras that system of wealth preservation only worked when it worked. If the invading army was never expelled, your land could be lost. And carrying all those valuables around with you while fleeing, well I'm sure people still got robbed sometimes. So it wasn't a foolproof solution. But there were limited options, and maybe not a better options.

Even now, what's the solution for wealth preservation in times of upheaval and displacement? I have no idea. Right now most of us trust in the banking system to some degree and that's only good as long as the system stands. If it collapses we're all boned and might wish for a bit more art, gold, and land to fall back on.
I think that was poetic license on his part. Mobile SoCs and modems are scaling quite well on 7nm. The IO chip is already low enough power for desktop/server applications and is small enough for good yield. 7nm would just be more cost for no gain. And using 14nm allows AMD to meet the WSA. Otherwise they probably would have done a TSMC 16nm IO die and kept their entire supply chain in Asia.
Isn't the 'self-hosted' version of this application your local SSH client plus an admin VPN?

I think I would pay good money for that web client though, it looks very neat.
A server suddenly spiking full load for over an hour should raise alarms. It shows up even in the dumbest of 5 minute averaging charting tools.

A few minutes of high load can easily get overlooked.