skysight-inc/HackerNews huggingface dataset:
This is all true.

If a web application has a vulnerability that allows arbitrary code execution then Docker is only a mild help.

BUT, it can help migrate a certain set of security problems. It is a very simple way to provide pretty good protection against file-traversal type vulnerabilities, even when combined with privilege escalation.

People shouldn't view Docker as a security "silver bullet". But at the same time it does provide an additional layer of security, and that layer can be useful.

The Docker people have a good post[1] about the Docker security model, and they list two future improvements they see as important:

"map the root user of a container to a non-root user of the Docker host, to mitigate the effects of a container-to-host privilege escalation;"

and

"allow the Docker daemon to run without root privileges, and delegate operations requiring those privileges to well-audited sub-processes, each with its own (very limited) scope: virtual network setup, filesystem management, etc."

I think most people would agree these are important goal.

[1] http://blog.docker.io/2013/08/containers-docker-how-secure-a...
Looks to be a great way to spread the word for this day of protest.

I cloned the github repo into a runnable; should make it easier to go through and try out changes to the script:

http://runnable.com/UvKyrkfQ1xg-AAAN
FB React is a good example because it's living more in the presentation layer. But Custom Elements offer some things that React doesn't (as far as I'm aware).

One is better encapsulation, another is a well defined styling system (although obviously this article shows that this is not a super simple problem to solve, I'm certain that a good way of doing this will be around before too long) --- finally, and the most important thing, is that it's just baked into the platform itself, so interop between different frameworks is less of a pain.

For instance, suppose you want to use a particular Ember component in your Angular app. You probably don't want to include the entire Ember environment, and you want it to play nicely with Angular's idea of data binding and local scopes. Can you even do this? If you can, how much effort does it take, and how much does it degrade the application?

So, we've got: interoperable components/widgets. Easily style-able widgets. Elements with some semantic purpose. Simplified documents. Reusable templates (which, once HTML imports are pref'd on by default, should be easily host-able on CDN hosts).

There are a lot of benefits to baking this into the platform, despite making the platform an even bigger, crazier mess than it already is. It should hopefully give us better (and better designed) tools to work with.

Granted, I'm not saying it's going to solve every (web) problem ever, nothing ever does.
Liquidity hacking: Solving the chicken-egg dilemma with marketplace startups
I wonder how they make the globe
Hi prawn, rightly or wrongly, we live by the "launch fast" maxim. Sure we had some test data, but a change this big was always going to be a huge leap of faith. So we needed to get it out to confirm previous findings before worrying too much about conversions.

On that note, the risk wasn't just a different format but everything that goes with real-time communications. Not just web sockets or whatever tech, but a real-time human marketplace. The previous format afforded us a lot of luxuries with regard to resource planning and "load balancing". Now with real-time, it's quite tricky. I suspect this is a challenge for Uber too.
I would write down all the details of the conversation including but not limited to who was there and what was said as soon as possible. Try be as unbiased and impartial as possible. Hopefully, your large tech company has an HR division that you can lodge a complaint to. Contact them and ask them what the process is. Take your written thoughts and convert them into a letter to the department.
Null Crew FTS hacks Comcast servers, post exploit and passwords
Google Glass Facial Recognition App Draws Senator Franken's Ire
Debit cards are terrible for this reason. And as I understand, chip-and-PIN models also start moving the security onto the consumer. Nice for merchants, crappy for consumers.
Behavioral change is hard. Spreadsheets are like PHP but worse: they're a good-enough solution aimed at the not only technologically illiterate and underserved (why use a spreadsheet if you've got access to a decent development tool ... oh, it's because you don't have the development tool, and you aren't allowed to obtain it), as well as the technophobic: those who don't see a spreadsheet as "programming" when in fact it actually is.

Spreadsheets are very easy to start and extend, but they reach levels of high technical debt quickly. And any of the various tools for addressing the challenges of spreadsheet error proliferation tend to require tools, skills, access, and/or permissions which the very development base of spreadsheets are unlikely to have.

On your site: provide a more appealing landing page:

• Light background, dark text. Always.

• TELL ME WHAT IT IS!!!

• Fix your stylesheet / page coding. Your "Spreadsheets formulas that build web applications" header is coded with 1) inline styles that 2) combine px and em dimensions and results in 3) lines which overlap. If I've got to pull out an element inspector just to read your site you're doing it wrong.

• Your "About" page doesn't tell me what Cell Master actually is or more importantly what it does and most importantly which of my problems it solves and how. As a senior level technical lead trying to find solutions for internal problems, I'm going to skip over that really fast. And the page remains difficult to read without 1) javascript and 2) Element Inspector deployed. Fix that.

What do I think? Not much.
That's not what I meant at all - there are plenty of other non-meat sources of protein, from cheese to nuts, depending on how vegan you are. Once again, what I'm taking issue with is the notion that because 8 units of grain are needed to provide 1 unit of beef, the units are nutritionally identical. Making weight for weight comparisons as above is what's a non-sequitur.
And after the lawsuits, you may see PR companies employed to make an issue out of this before a local/state election and pressure a government to makes changes suiting the 2004 buyer.
OK, so Bill had really modern thinking. I mean if you apply what he said to modern software design, it still stands mostly true.

So here's a question - given his understanding of team management, product design etc, how the hell did Microsoft go so wrong and end up today with constantly-rebranded products that does not appear to have one unified direction, but rather feel like it's been split to a billion different directions?

Did teams in MS get bigger? He did mention that it was important that in a team there were a few people that truly and fully understand the codebase. I wonder if that is even possible in any of MS products nowadays

Edit:

Some really great choice quotes:

>I like to think the whole program through at a design level before I sit down and write any of the code. And once I write the code, I like to go back and rewrite it entirely one time.The most important part of writing a program is designing the data structures. The second most important part is breaking the various code pieces down. Until you really get in there and write it out, you don’t have the keenest sense of what the common subroutines should be.
The really great programs I’ve written have all been ones that I have thought about for a huge amount of time before I ever wrote them

Bill is One of Us! I don't think I've ever read about him hacking before

> That refers to a program that molds itself to the user’s needs and the user’s interests over time. There are going to be more great word processors and spreadsheets, and we’ll use networking and graphics and new architectures

> Programmers just starting out today never had to squeeze, so it’s a little harder for them to get the right religion because they always think of resources as being immediately available. Ten years ago every programmer ran into resource limitations, so the older programmers are always thinking about those things.

I think we're still saying that today.

The interview was done in 1986, and he was talking about CDROMs which took off roughly 8 to 10 years after this interview (end of 3.1 and beginning of win95). They really did pursue the multimedia strategy well
Zimbra :(
Minimum Viable Piece of Crap
A screenshot of the whois output since it has been changed back now: https://pbs.twimg.com/media/Bfv1bFoCMAAlMmX.png
Just wondering about how you are doing or going to do your sandboxing for languages like c, c++, etc. If you are running arbitrary code from the user on the server, it could be risky I would imagine, so I am wondering what steps you take to make sure the user won't do anything nasty?
Out of curiosity, how many were there before?
The way iOS ratings work is both good and bad. If you get some unwarranted low ratings it's helpful to know that all you need to do is release a point release to push them behind the All Versions tab that few ever touch. Unfortunately this also gives incentive to postpone updates if the current reviews are good to avoid hiding those. And, of course, the way it works is easily abused.

Every review system can be gamed, but I think the best possible compromise is how Amazon reviews work. Being able to comment on a review can at least help mitigate bad reviews without requiring moderation labor on Apple's part. I personally always read the comments on Amazon reviews when doing product research.

As for prompting for ratings, I absolutely loathe those panels. I believe the request could be done more tastefully and inline with the actual content of the app without blocking everything with a modal alert. For example, in a game add the prompt to the pause screen or end of level screen and don't require its dismissal to resume play or move to the next level. Allow it to be ignored. Would this approach be as effective? I don't know. It'd be much less annoying though.
"There’s a lot of talk about how large software companies find it difficult to attract talented people who can produce great software, because these mavericks are so independent that they want to work on their own. "

Still appropriate today!
The NameTag app is actually really nifty. There's a good demo at http://www.youtube.com/watch?v=pVwBXr_nU9Q.
>You haven't seen this for what it truly is

Just... don't bother with me. I've been watching this since the first hype and you aren't anywhere near the first breathless comment I've read.
As the CTO of a cloud startup, I did exactly that.

Apart from the usual brain-teaser and whiteboard coding, we gave candidates 20 minutes to browse through a small database project in eclipse. Afterwards, I checked whether they could explain the data structure of that database.

The outcome of this test was a much better predictor for competence than any other technical test. I can whole-heartedly recommend it.
Also http://moveyourdomainday.net/.
But individuals have a part to play. Individuals contribute to cultural changes, which are really important when it comes to fighting climate change and hunger.[1] Being vegan or vegetarian, full-time or not, doesn't mean that you're not still a part of the problem. But I think it's fair to argue that it's a step in the right direction.

I do think that veg*ns being judgmental of others' diet is worse than doing nothing, because it alienates a movement that could potentially be very good for our planet.

[1][http://www.theguardian.com/environment/2010/jun/02/un-report...]
Guía PVP AION: Chanter
Yes, zoom is great in OS X. I admit I haven't tried it in Firefox, I will now.

Whenever I encounter a site that doesn't render properly with large fonts, I simply turn off the minimum font size in Firefox and use the OS X Accessibility keyboard shortcuts to zoom in. This works well, but it's annoying to have to keep switching around like that. E.g. it would be nice to have faster access to the Firefox submenu that controls minimum font size.
Beautifully Colored X-ray Photographs of Plants and Animals
I compared netflix streaming to amazon once and they seemed pretty much the same. I have netflix streaming and it seems like there's actually very little worth watching on it, have considered canceling a few times.
The fact that web developers will then need to worry about differing implementations across browsers and -- pray not -- across blink versions, on the other hand, is not hyperbole.

If it's ready to ship with nobody else agreeing on how it should work, please do everyone a favor and ship it with a prefix. If only as a courtesy to fellow developers who will need to deal with this mess. Nevermind that you don't want a prefix. Use one.

Better prefix hell than different implementations using the same syntax.
And that's why I only ever have used debit cards for banking, and never for purchases.
Everything I see on Twitter is a kind of ad.
And to think what Microsoft does today, with only 160 programmers and 100,722 salesmen.

Of course, 640k... I kid BillG.
I don't think the word "kata" by itself is masculine or aggressive but the site is called codeWARs, and they call signing up "enlisting" so ..
Datadog is rally a brilliant product, super simple to install the agent and great to measure in-app metrics through built in support for statsd. I'm curious to see what their next steps on the product level will be. On the company side they're in a busy market with New Relic and Splunk both seeming to have a much larger marketing budget, while Datadog has a better product from a technical perspective.
Ask HN: Which programming languages should my co-founder be great at?
I know, I should have learned how to code earlier! But Good news! I've started learning C++ recently, because I do agree with the saying that if you knew how to code, you would translate the vision of your idea/product better.

However, I have this kick ass idea and I need to launch soon, I plan to get a technical co-founder on board to work on the web development. I have to choose from a list I made and I am wondering which programming languages this guy has to be great at? Java script, Ruby and rails ... etc? Are there any criteria I should be paying attention to?

We'll need to develop a online platform that connects 2 customer segments (multi-sided platform).

Also, please do you have any tips or good cases practices on what I am about to do? (recruiting a co-founder)

Thanks a lot
Its one of those instincts, like when you realize there is no money in your wallet you still dig through it or hold it upside down and shake it. There was no rage involved, just disbelief, also since all I was looking for was a 16 digit code, there was also possibility it might have been in a fortune cookie styled paper.
Letter from Tidbit to Users about New Jersey Subpoena
Lobbyists will prevent that from happening. The corporations backing the fishing will have more cause, urgency and financing to run their own PR campaigns.

A few years ago, I spent a few days swimming off a boat around the South of Turkey. The ocean seemed pretty lifeless. Here in Australia, you will come across all sorts of fish in almost any sea situation. Over there, I think we only noticed 1-2 species and barely any of them even, and this was amongst bays and rocky areas that would be full of life here.

(The good part was swimming around without worrying about sharks though...)
Comcast customer surprised to learn new router is also public hotspot
That's how I used to think of Newegg too, but they've branched out way beyond computer parts.

It's a very similar evolution to Amazon itself, which of course used to be a book store.
Facebook android security fail
Yes, I have. I checked and rechecked the order multiple times, with another person. We were building a computer together.
"Sorry, I didn't mean to imply the insults would come from you."

Didn't think you did, I just was pointing out I intended none just as I failed to provide a reference for where to find a group / organization meeting your needs.

"Agree that labels aren't always the most helpful, but absent a better system, seeking ideas and kinship with those of similar political beliefs is still a good thing overall, IMHO."

Oh, I don't disagree with that, words act as banners to organize. It is just that labels seem to morph. Back in the day, writing a grant to the government that had certain words that worked 5 years before would be an auto reject. Its like fashion, except I have no clue how the words get drifted.

Currently, depending on company, I could go with the label "classically liberal capitalist" or "tea party republican". Of course, the problem with the later is the assumptions one makes based on what you've "heard" as opposed to what I and others actually believe. This seems to mirror your experience with "thinking libertarian is an oxymoron" insult for Libertarian.

The defense seems to be adding words or conditions that make people try to figure out the changed definition. I would bet you've heard the "I'm a little l libertarian". To which people go "uhm, explain that?!?".

Words come out and sometimes back into fashion. Opponents of a belief heap added (mostly untrue generally derogatory) meaning on a word until the definition changes. Then people get tired of defending that word and pick a new one to define them. I know its happened with Occupy and the Tea Party.
The Schrödinger's cat is a deliberately absurd argument anyway, and it's widely misunderstood as a serious argument.

The quantum effects will collapse when there are any macroscopic effects: there has to be a detector that will trigger the hammer that breaks the poison.
> Generating audio samples via JS is an escape hatch, the same way rasterizing to a raw framebuffer is an escape hatch.

But that escape hatch is where all the interesting innovation happens! It's great that canvas exists, and it's much more widely used than WebGL is, because it's more flexible and depends on less legacy cruft. You don't have to use it, but I do, and I'd like a "canvas for audio" too.

To make matters worse, the Web Audio stuff is much less flexible than OpenGL. You can at least write more or less arbitrary graphics code in OpenGL: it's not just an API for playing movie clips filtered through a set of predefined MovieFilter nodes. You can generate textures procedurally, program shaders, render arbitrary meshes with arbitrary lighting, do all kinds of stuff. If this were still the era of the fixed-function OpenGL 1.0 pipeline, it'd be another story, but today's OpenGL at least is a plausible candidate for a fully general programmable graphics pipeline.

Web Audio seems targeted more at just being an audio player with a fixed chain of filter/effect nodes, not a fully programmable audio pipeline. How are you going to do real procedural music on the web, something more like what you can do in Puredata or SuperCollider or even Processing, without being able to write to something resembling an audio sink? Apple cares about stuff like Logic Express, yes, but that isn't a programmable synth or capable of procedural music; while I care about is the web becoming a usable procedural-music platform. One alternative is to do DSP in JS; another is to require you to write DSP code in a domain-specific language, like how you hand off shaders to WebGL. But Web Audio does the first badly and the 2nd not at all!

> Audio is a solved problem outside JS

Yeah, and the way it's solved is that outside JS, you can just write a synth that outputs to the soundcard...
A study of disk sanitization practices
Compelling art by a medical x-ray physicist. Enjoy.
As an aside, "suburban moms" and indeed almost all individual investors should not be buying individual stocks. Buy index funds.
maybe it's time for them to start acquiring companies so they can make money...

hmmm.. time to fire up the code!
Show HN: iOS Popup Help Annotations
"No Silver Bullet" reminds me of the physicists at turn of century claiming that Newtonian physics held all of the answers. He blames the issues in software engineering on bad programmers, instead of questioning his field. His narrow minded, defeatist arguments fail to recognize the full potential of computer science. I don't buy his argument that Java or JavaScript have eliminated most of the accidental complexity in programming. It's like Von Neumann claiming, “I don’t see why anybody would need anything other than machine code.

Computer Science is still in its infancy. We haven't reached the full potential of Von Neumann architecture, let alone the dozens of non-Von Neumann systems that have been largely ignored by academia. Recent advances in neuroscience may open up a whole new model for information processing, such as IBM's SyNAPSE project.[1] Have you watched Bret Victor's, "The Future of Programming"?[2] He does a wonderful job of countering many of Fred Brooks's points.

[1] https://www.research.ibm.com/cognitive-computing/neurosynapt...

[2] http://worrydream.com/dbx/
So this means we're effectively all paying 1.2% extra (indirectly through retailer's credit card fees) to accept these fraud losses. But you have to add to that some amount for overhead of dealing with fraud reports, and the expense of required security practices in order to be PCI compliant, which is entirely a result of the plain-text nature of credit cards. It probably results in 1.5-2% extra to all purchases, entirely hidden to consumers.

And, from your own citation, on average, 10% of Americans are victims of credit card fraud and 7% of debit card fraud - this probably results in about 16% of Americans total if you assume both groups are random samples of the population.

If you've ever dealt with credit card fraud, you'd know that it's an ordeal that can be a huge pain in the ass. It can take many hours of your own time, and time from your card issuer. The cost isn't just directly financial, it's the overhead that comes as a result of the fraud.

I am certain that if given the choice, nearly everyone would take a 1.5% discount on all of their purchases if they had to do two-factor authentication on all of them in exchange.
Beats Music CEO On Why Delegating Is The Secret To Success
Looks like they're using a custom D3 build.
User Acquisition, from the Trenches
I never had Netflix so I can't give a honest comparison but I believe Netflix has their own exclusive shows and their library is atleast 10 times bigger than Amazon's.[1]

http://bgr.com/2012/04/13/amazon-netflix-said-to-be-inflatin...
If you privatize in this case, you basically say "I only care about the short term". End of story.
> like when you realize there is no money in your wallet you still dig through it or hold it upside down and shake it

huh. ive never done that.
From the HN submission guidelines: Please submit the original source. If a blog post reports on something they found on another site, submit the latter.

...especially given that the original story was posted on HN only a few minutes before. Please don't recycle blogspam.
Systems were waaaaay smaller, in that time, and the idea that one might even talk about invariants was foreign to many.

Also, we don't have hardware that is functional all the way down (no pun intended, but it is somewhat unavoidable), so even a purely functional world must be built on something else. That better not be a ball-of-mud.