skysight-inc/HackerNews huggingface dataset:
The core code behind kSplice/kGraft have been upstream since Linux 4.0 and both Red Hat and SUSE support it (in fact, many security patches are released this way). I believe that some less enterprise-y disros like Fedora and Ubuntu support it too.

The issue isn't whether it's supported, the problem is that live patching is limited in what it can patch (when functions are inlined it can become impossible to patch them and so on). So while a machine with 4 years uptime might be live patched there are some security issues that cannot be patched that way (for instance, the retpoline patches for Meltdown/Spectre require all function pointers to have different calling conventions and that requires a reboot).
Ask HN: Some good engineering blogs that go through the design process?
Are there any good engineering (company or community based) blogs that delve into the design process while building their systems/products?

I'd like to understand how teams compare tradeoffs, handle technical difficulties while designing systems for their products.
https://www.damninteresting.com/the-baader-meinhof-phenomeno...

edit: "The brain’s reward center actually stimulates us for successfully detecting patterns, hence their inflated value. In short, patterns are habit-forming. What we fail to notice is the hundreds or thousands of pieces of information which aren’t repeated, because they do not conform to an interesting pattern. "
Why the world’s busiest smartconcierge, Ivy, is a woman
Just curious as to how you think fire fighting services should be priced by the market?

I'm generally very conservative and against regulation, so no need to preach Adam smith to me (I actually read Wealth of Nations... not the synopsis). Though I will say, by ycombinator standards, I'm a centrist (way too left for the right, way too right for the left).
Arch is basically made for Linux experts, and the installation process is the barrier to entry, to prove your worth (or at least drive).

Fundamentally, installing Arch really isn't any different for us that install Debian or Fedora from scratch, from within another environment, without using the hand-holding installers. The only difference is using `pacman` instead of `apt` or `dnf`.
Taxing people has the same problem; trust founds, tax heavens...

Sales / VAT tax is not progressive and is unfair to poor people.
If you want portable apps just make one fully staticly compiled binary.

This is the worst of all worlds. No security updates for used libraries and no performance gain that comes with static linking.
Good job, HN.

You are completely, the fuck, out of touch.
Virginia Uber driver was Somali war criminal – jury
The Man Who Knew Infinity: A Life of the Genius Ramanujan by Robert Kanigel ; it's impossible to understand how he figured out the amazing things he did. His story is a tragedy.

Locke: A biography by Roger Woolhouse ; the father of classical liberalism in a time of upheaval in England, interactions with the king, banishment to Holland, promoted religious toleration

The Double Helix: James Watson; scientific discovery in 1950s Cambridge, the thrill of the race to be first, controversy with Rosalind Franklin

The Caro books on Lyndon Johnson; insight into the ugly guts of politics, what it takes to win & the course of mid-20th century American history

The Mark Levison book on the Beatles is amazing - the only volume he has finished takes ~700 pages to get to the release of their first single. Arguably the most important cultural phenomenon of the 20th century.

Andrew Hodge's biography of Alan Turing
Same for churches all around the world. Many people just go for duty, by habits or social pressure and no community is created.

The point is not to find a sure receipe for a community generation machine, but what are importants ingredients to have more chance of one.
He should open source the Core language and then license all the extra functionality in paid for libraries. That would at least make it more possible to opt out the paid for functions or if you would like to have it opt in later.
"We didn't abandon lobotomy because we realised it was barbaric"

Exactly the problem, right there.

Many thousands of people were lobotomized not because they had severe, untreatable illnesses, but just because they were inconvenient. In only slightly more barbaric times and places they would be slaughtered or starved, as happened quite recently in China, Russia, Cambodia, Mozambique, Guatemala, Germany, ...
> Isolating to separate kernels in separate VMs or better, separate physical hardware is always better than relying on Linux's privilege separation.

Sure, you can also do more. You can also air-gap your machines and sneaker-net everything that's needed, or if your server needs to send updates you can send UDP over a tx-only link (use an optical link and only connect the tx.)

But there's a cost-benefit analysis here. Discounting MDS is one thing, I actually agree with Intel's risk assessment on it, biased as they are. But generally installing security updates on an LTS disro is easy and painless; there's no real reason not to do it.

> All but my development servers could be run as root with no significantly greater risk.

Are we operating under a different definition of "risk" here? Running servers as root definitely increases risk. As root you can do much more persistent damage when an attack does happen, basically putting the machine in a state where the only solution is to wipe and install from scratch.
And now think what would happen to you if your Gmail account was locked. No recourse, no response except form mails saying "your account is banned because it's banned." No way to recover any other account using it as recovery mail. No way to access your records or email history. Maybe locked out of your phone too. You're boned.

That's what made me extract myself from Gmail. I created my new email address and forwarded my Gmail account to it, and then for every email coming to the Gmail address I updated the sender with my new address. It took me about six months before all my important mail was using my new address, but it actually wasn't that hard and I feel hugely less vulnerable to Google's whims.

Edit: At the same time I also started using a proper password manager, making me again much less vulnerable to losing an email account because I no longer rely on resetting passwords to get into my multifarious online accounts.
Your solution is (was?) to use your own email address (with your own domain) with email forwarding to your gmail address. This way you do not make your gmail address public, and can move frontends easily.

This does not solve the fact that your email archive is in gmail though.
I did it and it was worth it. I still dip into the gmail occasionally to see if I missed anything but it is essentially a spam email at this point.
Glass Enterprise Edition 2: faster and more helpful
I've been using a de-Googled Blackberry KeyOne. I adore the keyboard, and Blackberry is pretty low on apps with undisclosed and/or non-standard permissions[1]. Root's unavailable, but disabling everything down to, and including, Play Services, is good enough until the Librem 5 is available.

At this point I'm down to a minimum of apps from the yalP store (Firefox, Whatsapp, Signal, Wire, VLC), with everything else on F-Droid.

AndOSM is more than good enough for me; either it's right there within a search, or I find a website with an address, and add what was missing at my earliest convenience. It's not perfect, but data seems to be added faster than the world changes, suggesting Google will have to innovate or lose their lead in accuracy/completeness.

[1] http://eprints.networks.imdea.org/1959/1/An_Analysis_of_Pre-...
It took me 3 years and a few annoying lock outs and it was years ago. 2019 is probably even harder.
For once. Get a domain and a paid mail account with fast mail/Zoho/gsuite. Slowly transition to the new inbox by moving over the emails. It will take sometime, possibly months, and you might never be able to close the gmail inbox but it will be fine. You’ll never need to do such a transition in life again.
Slack does quite poorly on accessibility, so anyone using assistive measures from their operating system or separate application (voice instructed navigation, screen readers etc) will have a much harder than the average blog post or mailing list.
This is true. Though to be fair a brief Google does reveal some turnkey full disk encryption instructions noted by others. Just would be nice to have them on the wiki. Of course there's nothing stopping us adding those ourselves.
It's really not that hard. I'd used gmail since early 2000s and it took me one long afternoon a couple years ago to switch basically everything to fastmail. Probably helped that everything I cared about was already a record in keepass though.
frozenset is a really nice one for enforcing immutabolity :)
I haven't seen any overlap tbh, but maybe that's just because the low profile cases aren't publicized. The ones you hear from are usually aggressive, successful men who don't seem shy or socially awkward at all. They just show little care for others and do whatever they can get away with. That sounds very different from the incel community, and to conflate the too for rhetoric effect doesn't seem right to me.
Windows Server version 1903 now generally available
Short note on prefers-reduced-motion and puzzled (Windows) users
I was just as entrenched but am about a year into a gradual transition. Signed up with another email provider with an address @ a domain I own, transferred my entire mail history, forwarded all incoming gmail emails to new provider, updated all public facing contact @s to new address, switched mostly to open source email clients, all new accounts are made @ the new address, old ones stay @ the old one. It's not perfect and it's not trivial but it's 100% worth it.
Lawrence in Arabia by Scott Anderson
A mathematician's apology by G.H Hardy
My Struggle by Karl Ove Knausgaard
Genghis Khan and the Making of the Modern World by Jack Weatherford
Churchill: Walking with Destiny by Andrew Roberts
Lenin: The Man, the Dictator, and the Master of Terror by Victor Sebestyen
Hamilton by Ron Chernow
Well, bonds are incredibly macro-sensitive, so when the course of the world economy can be upturned by one Trump tweet (or whatever) then yeah, a super complicated model that you throw away and replace with a fudge factor sounds like about the right way to model it.
I enjoyed iWoz, the autobiography of Steve Wozniak about how Apple Inc. got started. A little known fact is that Woz still works for Apple doing promotional stuff for the company.
"To run an AppImage, simply:

Make it executable

$ chmod a+x Subsurface.AppImage

and run!

$ ./Subsurface.AppImage

That was easy, wasn't it?"

No. How about click/double click the app icon in your menu/desktop/the folder where you downloaded it into?
I think this is a little over the top. They're pushy about this because they want people to have an account recovery method so people can recover their account if necessary. It really is important to them for that reason. This is probably any online services' single biggest source of customer service headaches: people forgetting/losing their credentials and needing the account unlocked. This is a really problematic thing for companies to deal with because any "human" customer service solution is both expensive but more importantly, very vulnerable to social engineering attacks.
It's useful and practical for some applications (despite what the author says in the video) and has been on sale for decades. But if you use ratchets for the ratcheting, the variability isn't continuous but discrete (as he explains in the followup video you'll presumably watch soon) and if you use sprag clutches or something, the drive is friction-based.
We’re Going to the Moon to Stay
Did you read the joke before commenting?

If you did, did you think that you understood it fully?

If you didn't, what compelled you to comment? The way the punch-line was written?
It can be turned off in the BIOS (a change I made about 15 minutes after getting my XPS13, which I otherwise love).
I really enjoy Manjaro myself. I distro hop a bit but I always have Manjaro as a fallback since it's rock solid for me.

Using the architect installer it's also fast and trivial to make your own custom install that's as minimal or fully loaded as you like.
Taxes aren't just a means of revenue for the government, they're a means of incentivizing for various goals.

- Want a higher population? Give a deduction for children.
- Want citizens to switch to alternative energies? Give a deduction for solar panel roofs and electric cars.
- Want to reduce dependency on foreign oil? Give a deduction for new drilling operations.
- Want to create more jobs? Give a deduction for each employee.
- Want to create more housing? Give a deduction for real estate depreciation.
- Want to encourage new technologies? Give a deduction for R&D expenses.
V6.2.1 Release of PowerShell Core
I'm the same but using Vivaldi while I wait...
My first and only buy has a serious quality factory issue: two keys not working, screw under a third one, and God knows what within the laptop.
The shop I bought redirected me to Lenovo website for the exchange, three numbers later (two weren't working at all) I am waiting for a document from Lenovo then I can go back to the shop for the exchange. It might take 5 days or one month.
I am a bit unhappy. At least the warranty is cheap (yeah?)
Its obvious that he is doing incredible mental gymnastics to try and workaround the problem that this stupid internet drama was created by group of women hating on a girl because they dont like her (or want to 'cancel' her for some reason), and are using this poor bastard money and credibility as their weapon against her and everybody around her.
Practical AI 44: AI adoption in the enterprise
You are ignoring a secondary reasons for taxes. The primary reason is obviously to raise funds for public use. The secondary reason is to give the government more control over the economy. You are right, there are ways to drastically simplify tax law if we wanted to tax ever dollar at the exact same rate or had very clear marginal tax rate buckets. We don't do that because we want to incentivize certain actions. On a personal level, you get a tax break if you pay for your education, you get a tax break if you invest in your career, you get a tax break if you have children, you get a tax break if you earn your money through investments rather than through employment, etc. We don't necessarily do those things to be nice. We do those things because we believe they are good for the overall economy and it is beneficial for them to be incentivized.
One counterpoint to this is (back when I used Arch), I found Arch to be the fastest-to-install distro if you already knew how to do it.

No need to wait 2 minutes to boot a graphical installer that doesn't let you pick what packages you want (this is significant if you don't have Australian internet speeds), or forces you to set up your partitions in a certain way, and so on. You just partition your disk, pacstrap, chroot, run a few setup commands and reboot.

The last time I installed arch I had a working system in 15 minutes -- other distributions took 40 minutes to bootstrap and reboot so I could start configuring them (mostly because of how long it took to download the 3000 packages I didn't need).

Obviously there is a level of "it only takes 3 commands to install gentoo" here, but I personally long for the minimalism you get from Arch's no-bs installation.
I’m a little... confused, is this blog post informed by one data point and then extrapolates a set of conclusions / reasons / motives? I can understand the sentiments of the article and poster, but I am not convinced of the premises that Gmail always prepares affirmative responses, and I’d love to see more data on that point specifically.
> People in countries where middle names are normal also tend to make the assume that one of the syllables is a middle name.

Some Chinese do think of it that way.
Lol who would pay for an email service? No reason unless you want g suite bundle.
Good therapists offer what seem like obvious suggestions for practical accommodations that patients could have thought of if they were not impaired and distracted. Sometimes this amounts to just contradicting a thing the patient has always believed, without reason. "When you can't get it together to make dinner, you can get the same nutrition from the separate ingredients" has been a revelation to many.
Macbook Pro 2011 GPU Issue: Solved by Dosdude1
Widespread Sex Discrimination Found in College Scholarship Programs
This one's my favorite (although I haven't read the whole thing):

"This movement is designed to double the speed by gears of equal diameters and numbers of teeth—a result once generally supposed to be impossible. Six bevel-gears are employed..."

http://507movements.com/mm_226.html
Yes, I thought so too. But they kept saying that they are reviewing our application. Never gave us any concrete answer.
Great stuff to wake up to.

We've got five affected accounts.

So far the G-Suite experience has been underwhelming to say the least. Crap interface and less fine grained control over document access than even Google drive offers for free, gmail UI just plain sucks over IMAP and so on.

And now this. As much as there is to like about this email in terms of transparency it is also very interesting for what it does not say: Apparently they can't determine with certainty whether or not the accounts were accessed.

"legacy functionality that enabled customer Domain Admins to view password"

That functionality should have never existed to begin with.

"primarily impacted system generated or admin generated passwords intended for one-time use"

Note the weasel word 'primarily', either it did or it did not potentially affect all passwords.

"We have reviewed the login information for the account(s) and have found no evidence that the unhashed passwords were misused."

No evidence does not mean it did not happen, so there apparently is a chance that even if they did not find evidence that it did happen and that their audit trails for reviewing that log data are not such that they can guarantee that nobody had access to it or viewed it.

"an internal system that logged account signup information for diagnostic purposes, also inadvertently logged the administrator’s account password in our encrypted systems in an unhashed format."

This suggests some pretty major process failures, this change was apparently found after it had already been pushed to production without review or with a review that did not catch this pretty basic mistake.

Having the best security team in the world is great but if you then have stuff like this happening you have to wonder about the processes around deployment, which are just as important as having a great security team to begin with.

Damned if you do and damned if you don't, a small company is better off relying on the likes of Google for their secure storage of mail and documents, but at the same time that's also not perfect and apparently includes some random strangers potentially having access to all of that which is something that never happened to us in the last decade or so to the best of my knowledge.
I used to use gauite (and still do at work) but switched to fastmail for my private stuff, and it feels faster and better in every possible way, with the exception of not having google docs or equiv
Your comments in this thread have been egregious personal attack. I don't want to ban you again, but if you treat fellow users on this site this badly again—attacking someone over his grandmother, for heaven's sake—we'll have no choice.

Would you please review https://news.ycombinator.com/newsguidelines.html and take the spirit of this site to heart from now on? Note how they include: "Be kind."
I don't really know what you wrote, but considering that every other comment has been flagged, I'm pretty sure I would have liked it.

Welcome to hackernews!
When people cite the stock market as proof Trump's trade war isn't hurting average Americans, it's helpful to show them this chart.
Don't put all your eggs in the same basket.

I have my bank statements in an email account by a provider that is unlikely to ban people for questionable and unrelated offenses.

(You can totally get banned from Google's entire platform if you do something wrong on the Play store after e.g. being pressured to do so by your employer.)

Most of my private email communication (which has dwindled to a tiny number of messages per month) is on GMail.

I've also got a couple other addresses in addition to that.
I also have email addresses on my own domain, but I don't know if I'm going to keep that domain forever, as it costs a lot of money.
Why your business needs serverless
I was the PM on this feature (and these are my views not Googles, as per normal). The truth is actually much more banal. Most people are just really positive over email.

The model is trained to offer reply suggestions that have the highest chance of being accepted, from a large whitelist of the most common short replies. The whitelist contains many negative options. We're optimizing for click through rate. That's it. There's no editorial judgement, definitely not "‘no’ struck someone as too negative and they had to take it out."

We actually experimented with intentionally inserting more negative options to increase diversity. Doing this reliably causes a hit to our metrics.

Discovering this made me pretty happy about the world. Most people are generally pretty friendly to one another (at least over email!).
Right, the animation is wrong; power is 1:7 if the bottom pulley is fixed and the top is movable, while the animation shows the other way around, which makes it, as you say, 1:6.
Wasn't this internally called "GoogleSQL" - sorry was 2 years back, all I remember was switching one syntax to another, and certain things easier in previous syntax, but not well defined, and vice versa...
Not a problem if you can't buy Huawei products.
My thoughts exactly.

Also, I feel like in the (actual) Netflix originals, they also put a lot more effort into it. If you compare CW's 'Arrow' fight scenes vs something like Daredevil or Punisher. Arrow's fight scenes are boring. But Disney is also very PG so I don't expect Disney to have the same level of Marvel TV series on their service.

So for me, I would subscribe to both. But I have no reason to subscribe to Hulu (and its TERRIBLE interface), HBO, or any of the other services available.
It is a filter against rotting in chronic/toxic/boring things.
Too bad people are trying to kill this instinct and rape themselves instead of using it to their own benefit.
Arcadia was infinitely better imho. Proof is formulaic (didactic and on the nose on its moralizing theme) and propagates a number of stereotypes about mathematicians around mental health and the lone genius etc.
What about the lives that were ruined in the past and even today because of keeping the antiquated belief alive? Nobody supporting the church/belief seems to do anything for those misfortunate people. It would be nice if people just accepted relativity/determinism and gathered around discussing how their life is special; what they expect in the future with their goals & how they're getting there. Except a giant nope because people are narcissists that don't care about the abused.
Curious if this is tightly wedded to $GOPATH, which thankfully seems to be dying with Go modules.
So that might be why Beijing is called Peking in German... Although the (generally closer to original pronunciation) English romanizations of some Chinese names are becoming more common.
Cabinet and Furniture Making at NBSS
You miss 100% of the shots you don't take.
You need .desktop files in /use/share/apps
Come on, didn't you have a Dell Inspiron 8000? Those things were the Macbook Pro of the day, sexy and horrible with BSODS due to flexing motherboards and gorgeous 1600x1200 displays.
You can still do all of that with no corporate taxes. As every incentives you cited are on the individual taxes.