skysight-inc/HackerNews huggingface dataset:
The problem is that (Libre|Open)SSL doesn't use /dev/urandom directly and instead implements a CSPRNG in user-space (seeded from /dev/urandom). And then you need to be careful to reseed the CSPRNG after fork or you'll generate the same random number that the other process did.

You could mix in the parent's PID too, but that would only delay the problem (you'd need more layers of fork before triggering the shared-state bug again).

Why can't LibreSSL just open /dev/urandom once, on first call to RAND_poll/RAND_bytes/some-other-init-function, etc. and then always read from it directly. If that first open fails then you return an error from RAND_poll/RAND_bytes.
The history and architecture of Selenium WebDriver
Adding a custom context menu item to Outlook 2013
For example, the spam problem would be solved.

Facebook and Google use phone numbers for proof of individuality. However, you can still buy accounts for spamming etc. Apparently, it does not work.

It might work well enough for social networks, because one account is not worth that much. However, if one account gets guaranteed basic income the incentives are much larger.
The list is organized by a public institution, but the review teams (that actually put things on the list) are 75% non-government people. There's an appeals process, its use is opt-in.

See http://www.bundespruefstelle.de/bpjm/Service/english.html

Their over-reaction to the unveiled list stems from their (decades-old) fear that "the index" might become kind of a shopping list to minors.
Nest and Samsung launch Thread, a wireless mesh standard for the smart home
Neat! If you don't live in China, you should be able to buy them from the usual places like Aliexpress and eBay for a slight markup. Looks like there's a handful of people reselling them. (Some stuff doesn't make it over but the more consumer-oriented stuff usually does.)
I saw some sexy contents, will you delete them?
why

(edit: wtf. minus three? For me asking why you would automate ratings in a dating app?)
Annotation pdfs would be great. It's a feature we'd love to implement for viewerjs, easy pdf viewer for in js, too. http://viewerjs.org.
In the first post Redis + asynchronous replication + (an alpha version of) Sentinel were found to lose writes during partitions. This is an obvious result of asynchronous replication + failover, since this is, technically, an eventually consistent system where the merge function is picking a single timeline when there are divergences. Redis was improved since then by adding heuristics to practically lose less writes, but basically this was an expected result that nobody can change.

In the second blog post I proposed, just for an argument of a different discussion, a strongly consistent system where basically you have God coordinating the failover, and every write replicated N times. This is something that's not even worth to test, since it is obvious that a system like that is linearizable, however it was still tested, and since it was obviously flawless per definition, the flaw was found, very surprising, in something that violates any CP system, that is, serving reads directly without any agreement. Later Aphyr in this article (http://aphyr.com/posts/316-call-me-maybe-etcd-and-consul) pointed to reading from a possible stale leader as a flaw, while in its implementation in the previous article he setup the things in order to explicitly read from nodes directly.

In both the instances I can't see how this translates to me not understanding stuff. That said, distributed systems are all about details, and while I'll try hard to do my best, I can still end with something buggy. I try to improve my knowledge every day and I understand I'm not an expert in the field and that I need to learn, test my designs, make them publish in the hope that other people will analyze them, and so forth. However I believe I'm not the only one that needs to perform this learning process, especially if you want to point at random articles on the web as evidence of my failure, you also need to have a solid understanding of the basic principles.
This.

Ex IBS sufferer here.

Fixed it myself after 3 years of hell from doctors who quite clearly were a) short of any realistic knowledge on the matter and b) quite clearly using me as an experimental subject for everything the drug company was pushing at the time.

Worked out how to reset it myself: just drank water for the best part of two weeks and low end carbs (bran flakes with water on) and nothing else. Felt like crap for about 4 days then started to improve. After my butt stopped wrenching daily, I introduced normal foods back one at a time over the space of 3 months, ending with meat and heavy carbs.

I got these steps from a microbiologist rather than a doctor.

That worked for me wonderfully.
Based on Cammi Pham's story[0] it sounds like auto-liking profiles en masse is not all it's cracked up to be. Summarizing her post (and probably forgetting a detail or two), you end up with tons of worthless results you don't really want, and you're so inundated with "connections" - messages from other eager people - that you can't get through them quickly enough to get to the good ones before they get sick of waiting and block you.

Neat mini-project, but it might be more interesting to see what kind of cool stuff you can do with Tinder beyond this.

0: http://www.cammipham.com/tinder-hack/ (and incredibly not posted to HN as far as I can tell)
A ticketing system sounds like a great idea. Or integration with an ordering system for ecommerce.
Whoa, opened the site to a bunch of obvious nsfw stuff. Maybe there should be an option to filter this?
because boobs
This really needs NSFW tagging. Right now, the "latest public documents" is full of hentai. Doesn't mean that people will actually do that, but at least giving uploaders an option wouldn't hurt.
Does tmux integrate with itself? That is, does this solve the problem of needing different prefix keys when nesting tmux sessions (whether using iTerm2, or using a terminal emulator that doesn't itself integrate with tmux)?
What they desperately try to prevent (since about forever) is that the index becomes a "shopping list" among minors.

The offline index was effective while being locked up in their office or other places where age controls can be ensured: publishers and stores mostly try to avoid the fines that they get for advertising index-material "to the youth" (ie. outside adult-only areas).

The online index needs to be installed to routers to be effective and thus have to leave the BPjM's control. That's why they veiled it, and why they're now so furious that the descrambled list is available on the net (and in the news, too).
I don't see the problem with "clones". No one ever cries clone outside of the industry. Pepsi isnt considered a coke clone. Reebok isn't a nike clone. And so on.

So as long the "clone" isn't impersonating "the real thing", so what? Being first to market doesn't mean no one can compete with you. Competition is the whole point.
Redis + asynchronous replication + failover is a given distributed system (eventual consistency + merge function being picking a single timeline, so it has very limited write safety during certain partitions). When you use N Redis instances as a building block for a distributed system, you don't incur in the limitations of Redis asynchronous replication + failover model. As written in the article the queue system I'm designing uses N independent Redis instances.
Yeah, I just ran into the same problem ! Opened the site at work and had to close asap !
It's definitively a small luxury item, but can't really argue with anyone's spending habits.

More relevant, "cups of coffee" is not a good unit of measurement and can be misleading. Just say the number and trust that people can cope.

Other offenders: Measuring distance in "cars lined up from here to the moon", expressing data in "Libraries of Congress", or expressing cost in $/day instead of $/month or $/year.
"Project Adam"? Second Impact, anyone?
I think that governments will sooner or later start taxing work of robots to redirect the resources into social safety nets.
Tinder's a dating application where you swipe left or right to declare your interest in the candidate. If there's mutual interest you can communicate with the other person.

Depending on how starved you are, you might find yourself swiping in one direction way more often than otherwise, thus automating it kinda makes sense, but obviously defeats the point of Tinder (especially if everyone would start to use this script)
Pretty sure this is the episode: http://www.thisamericanlife.org/radio-archives/episode/461/t...
Xplain – Explaining X11 with an interactive X11 browser implementation
One of the most important things you learn when you're launching a startup is that the product has to match the market, and the market is never "everyone". You don't have that sort of marketing reach on a startup budget. Startups can get the word out through social media (people the founders know), people the founders and investors network with, through startup and early-adopter technology news (TC, HN, BetaList, ProductHunt, etc), through advertising if they have a budget for it, and, for a lucky few, through mainstream news if they're clever.

Social, networks and tech news are all going to be 'iPhone heavy', and although that is changing, it's still enough to make iOS a sensible choice to market to first.

TL;DR The fact that the Android market is bigger is irrelevant if you can't reach that segment of the market with your contacts and/or a very limited marketing budget.
Same here. But then again we're not the clients. We're just 'using' the technology Sribd provides their clients I suppose.
http://www.bundespruefstelle.de/bpjm/Service/english.html is not very secret.

The list is also opt-in, so the US equivalent would be an option on your TV to have it blur nipples or drown out certain four letter words.
That's likely for female profiles, but the situation is usually reversed for men. Liking everything means that the smaller number of women that swipe right on your profile will instantly match, and then you can decide to reply or not.
It is not a given that the process that runs LibreSSL at some point after the chroot happens will have CAP_SYS_CHROOT/root.

Also, it doesn't solve the issue, as /dev/urandom will also be unaccessible temporarily if you run out of file handles.
The issue is not that they believe /dev/urandom to be bad, but that it flat out isn't guaranteed to be available: If you're chroot'ed, chances are you won't have read access (or see) /dev/urandom. Furthermore, if you've run out of file handles (maybe intentionally - because someone figures they can try to DOS you to attack the PRNG), it is not a given you'll be able to open it even if it's visible.

LibreSSL tries /dev/urandom first, then falls back on a deprecated sysctl() interface, then tries it's own "last resort fallback".
The Cult of Richard Feynman (2001)
Access to /dev is DOS'able in many situations by exhausting file descriptor / open files limits.
There's a shortage because employers don't want to pay enough. Hence employees take advantage of the free market for their labour and go to places which pay more (competition at work!).
"In order for SocialCoin to work, we need to figure out a way to create a decentralized ID system that doesn’t rely on government ... This is currently an unsolved problem ... The user would set an appointment with 3-5 agents individually and each agent would scan the user’s irises in person to verify that they are a real human"

This has to be satire
> (often) need some form of high availability

I'd guess that, in reality, many don't really need high availability. I mean, it's not going to hurt if they have it, but if it comes at a cost of not doing other things with their limited resources, it may not be the best thing to be doing.

BTW, it's Tcl, not TCL!
It seems to be working, given the number of articles I've seen about this issue so far.
Yeah but technically in the protocol it's just one number, we show it as 4 numbers because it's easier for humans to manipulate
Well package management is not as good on OSX, though.
Well it's not XFCE that makes a difference since the benchmark shows it's the latest kernel that drives the performance increase.
That's from the perspective of an attractive young lady. A male, let alone an unattractive one, will have much higher chances of getting any response at all with the en masse approach.
Henry. Thanks for taking the time to debate me on this. I appreciate your civility.

> (Subjugation and mistreatment of blacks by whites is and was a huge problem, but it is not causing the crime problem, and it is not helping anyone to pretend that it is).

Centuries of subjugation and mistreatment has led to a socio-economic underclass. This is _fact_. There is plenty of documentation. Even though things are getting better the fact remains that this is the cause of the crime problem.

Rather than attribute the obvious source to the problem you have said:

1) That black on white crime is racially motivated, "get whitey". You can't just say that, you can't just trot out unsubstantiated claims. I just don't believe that's true.

2) That if only blacks got their act together in the way other races have that they'd improve their lot.

3) That there are poor people or underclasses in other societies and they don't carry on the way blacks in the US do.

Or words to that effect.

For me that is not pattern matching, that _is_ prejudicial thinking. And you accuse blacks of racism! You state implicitly and explicitly that it is because of their race that the crime rates are higher and that the urban decay is worse than other places at other times. That is prejudicial thinking and we can leave morality out of it. My concern in analysing the language and the logic that you use is if you are using the same standards for every group of people. I clearly see that you are not. That means you are exhibiting bias, that your thinking is prejudicial. You've learnt this, you need to unlearn it. I know it's not easy to confront that which is within us that is biased and prejudicial but there you go.

Tell you what. You point me towards the stats and the literature (not the anecdotes!) that have led you to these conclusions and we'll explore this topic together.
That's actually correct - it requires a gargantuan amount to "buy" an election (double the spending for 1% more of the vote, or something along those lines).

But politicians are a simple and superstitious folk, and they do care a lot about fund raising. And in a 50:50 fight, they'll do almost anything for an edge.

Also, while a politician might be in a safe seat, they'll gain a lot of brownie points (e.g. a promotion) if they can funnel some funds to someone in a marginal seat.
Am I right in thinking that the tmux integration won't work if you use mosh? (iTerm2 -> mosh -> tmux)
Yes - he should integrate all external data as WikiData and add articles referencing the wikidata entries.

And if the external botanic data is updated he should update the wiki data ... and not only the less-structured articles.
That assumes that first process after the chroot knows how to receive and pass on that filedescriptor to the process that will eventually use libressl, which is not a given.
Gartner’s top 6 technologies CIOs must not ignore to lead digital transformation
Getting started with Azure Service Bus Event Hubs (IoT)
as someone else pointed out, the portal seems to be hosted on the squink it self. so the portal is jut a way to access the squinkk like u access ur linksys router
الان نتيجة الثانوية العامة 2014 اون لاين برقم الجلوس
Thus spake the Master Programmer:

"After three days without programming, life becomes
meaningless."

Sounds like the Master Programmer has never worked at a company
that crunched you for 80 hour weeks, for weeks.

8.4

Hardware met Software on the road to Changtse. Software said:
"You are Yin and I am Yang. If we travel together, we will become
famous and earn vast sums of money." And so they set forth
together, thinking to conquer the world.

Presently, they met Firmware, who was dressed in tattered rags
and hobbled along propped on a thorny stick. Firmware said to
them: "The Tao lies beyond Yin and Yang. It is silent and still
as a pool of water. It does not seek fame; therefore, nobody
knows its presence. It does not seek fortune, for it is complete
within itself. It exists beyond space and time."

Software and Hardware, ashamed, returned to their homes.

I don't understand this one. Apple seems like the
embodiment of hardware and software earning vast sums of money. It's worked out well for them.

Maybe they're saying that firmware is an important design consideration that requires careful attention.
Confessions of an ex-developer
Back in the day the original iTerm had support for alternate encodings, e.g. iso8859-7. This must have been like, 2006.
Sorry but that's just an idiotic assertion.

Closed source proprietary crypto, you just don't know who wrote it, who audited it and who backdoored it and who knows of any flaws in it.

Open source crypto, it's there. Go read the source. Anyone can and it's open for audit.

There aren't enough eyeballs I agree but there are infinitely more trustworthy people looking at it than closed source.
Stop The 3 Bad Habits in Web Development in Your Startup
Monotype Acquires FontShop International
There are many potential cases where LibreSSL won't be initialized until after a chroot, by a program with no special rights running inside the chroot, that is entirely unable to open /dev/urandom or create a device node, so this is not a solution.
Yeah, gaming it seems unavoidable. It cannot be a blind study. You can't help but notice how many hours you work, don't you?

You need a pretty long term experiment, so the 30 hour group gets the chance to settle in their new rhythm, and you need a control group that doesn't know they're the control group, presumably from a different city that happens to have very similar productivity.
> Sounds like the Master Programmer has never worked at a company that crunched you for 80 hour weeks, for weeks.

Nor has the master programmer worked for a company populated by utter morons who leave a large minefield in every task where all one-day estimates turn into one week ones the moment you start sharpening your tools...

(that's reality in corporate land)

Too bad I'm sitting here reading HN and playing my piano for a bit between emails...
World’s First Thorium Reactor Designed
Except that I'm sure there is lots of black-on-black crime as well.

In short, there is lots of black crime.

Why?

Because of the shitty socio-economic position they find themselves in due to centuries of subjugation, institutional and social mistreatment. And that happened because of their race. In that way it's a racial issue. White racism. Blacks were for a long time not even classed as human, which is a classic dehumanizing tactic used to view the other as an object to be used rather than respected.

Comparing black crime in the USA to the Israeli occupation of Palestinian territory or to the Belgian initiated ethnic violence in Rwanda is wrong-headed and very prejudicial thinking.
And yet, there are probably still jobs there...
Of course you can…

System Prefs > Keyboard > Shortcuts > Mission Control > Switch to Desktop #
Letter to UK Prime Minister on the Data Retention and Investigatory Powers Bill
Being able to call it from inside a chroot, or within a syscall-based sandbox (like SECCOMP_FILTER).
For me, it's just:

> Deep tmux integration. iTerm2 can speak directly to tmux and display its virtual windows as native windows or tabs, making tmux much easier to navigate.

I actually prefer Terminal.app otherwise, but the tmux integration is so good it's worth it just for that.
redis is not embedded -- you need to run a server.
If I work 4*10, I barely get to see my son anymore. I wouldn't mind slightly shorter days; we already sometimes struggle with who has to pick him up. Technically my wife should do it, because she goes to work much earlier than I do (I bring, she picks up), but sometimes she has late meetings on the other side of the country, whereas I work on cycle distance from home.
> Access to /dev is DOS'able in many situations by exhausting file descriptor / open files limits.

That's why you open /dev/urandom in advance of performing operations that require randomness. If that open fails, you don't go on to perform the operation that requires randomness.
Line Submit IPO Application to Tokyo Exchange
I think the short answer is that the maze will look very different. It's very possible that the verts of the maze would be in exactly the same position, since that's a regular pattern. But the maze walls will be extremely random.

Maybe the best way to get a feel for it is to take a look at this page of maze generators: http://weblog.jamisbuck.org/2011/2/7/maze-generation-algorit...
If we're citing names, I'd like to point out that lmdb seems much much better than leveldb:

http://symas.com/mdb/

They compared it against all the "similar" dbs (embedded, key-value) and it turns out to be the best in benchmarks.
tmux doesn't help you in this scenario, because the tmux process is lost during a system reboot. I concur with the parent - Terminal.App's ability to restore the previous sessions output after a system crash (which on my macbook Air ranges from daily to weekly - FTDI USB Drivers and Display Port cable being to the two major reason) really make me appreciate that feature.
The Smartest Man in Europe Sees a New Industrial Revolution
Agree. Session restoration is really great. I would go further, though. I use `source` for virtualenv and it would be awesome if terminal could restore that as well.
> (though to be fair, it's really easy to stay logged in to Google services)

Not particularly easy for the three-in-four Internet users who don't have any form of Google account, though...
Wondering How To Make Money Online? Try These Ideas Today
I agree, partly. The problem is that LibreSSL needs to decide what to do. The comments in the file outline why they believe they have few options: They are concerned about aborting, because of potentially unsafe core files (consider if someone lets you execute a suid process in a chroot that has access to read SSL keys you should not have access to, and you can cause it to dump a core file that you can read simply by DOS'ing access to /dev/urandom), and lack of other safe ways of reporting failure.

Couple that with the fact that whether or not the /dev/ is set up correctly is a distraction: You have no guarantee that you will be able to open and read any file, as they can not guarantee that there's nothing available on the server that can't easily be used to hit file descriptor limits for a suitable process or open file limits for the entire system.

So this problem is there regardless of whether or not you're willing to demand a correctly configured /dev.
"Sounds like the Master Programmer has never worked at a company that crunched you for 80 hour weeks, for weeks" - I guess Master Programmer is smart enough to avoid such workplaces.
Not to forget: Master Foo Discourses on the Graphical User Interface http://catb.org/esr/writings/unix-koans/gui-programmer.html
Do we have something similar in GNU/Linux?
Why would it be different for men?
How to find work as a freelance web developer
paulrov (sibling to this comment): you seem to be hellbanned.
Even if you have opened it, you have no guarantee that the file descriptor has not been closed since. Yes, that would be stupid of the user of the library, but many security lapses happens because people makes stupid assumptions. Code to close all file descriptors on fork for example is fairly common, so you can not safely assume that the file descriptor remains valid.