skysight-inc/HackerNews huggingface dataset:
> looping over all file descriptors and closing them on fork() is a common pattern for applications where you want to ensure you don't have resource leaks (whether for capacity or security).

Any application that does that is broken. Please stop trying to bring up this behavior as something a library needs to support. It isn't. If application try to close all file descriptors, then go on to do real work, plenty of things other than LibreSSL will break.

Would you go around calling munmap on random addresses and expect your application to keep working? Would you write a library that tried to guard against this behavior?

> if you have a safe way of returning errors in all code paths, but as the comments points out, they believe they don't.

That's an internal LibreSSL problem. There's nothing stopping the LibreSSL team from implementing the correct plumbing for telling callers errors about errors. AFAICT, there is no sequence of valid OpenSSL API calls such that the library needs entropy, but at no point in this sequence of calls can indicate failure.

The problems you highlight are not things libraries should try to work around. They're systemic issues. Libraries calling raise(SIGKILL) because their authors don't believe systems have sufficiently secured their core file generation is absurd and only makes the problem worse because it makes overall system operation less predictable. (Imagine a poor system administrator trying to figure out why his programs occasionally commit suicide with no log message or core file.)

These are not problems that require system-level fixes. They're problems that require changes from LibreSSL.
Successful Show HN's: Aggregating the Stats
Have you tried fasting?
Reminds me of the time plane spotters ended up in jail in Greece for taking pictures at an airport.

http://news.bbc.co.uk/2/hi/uk_news/1697862.stm
I go for the opposite approach. The less I know about the person before we first meet IRL the better. Makes dates more fun.

And [surprisingly?] more likely to end in somebody's bed.
Previous discussion: https://news.ycombinator.com/item?id=8028255
You were talking about keeping things to ourselves and "geek" knowledge.
Man who doesn't participate tells everyone who does about their experiences.

This is just a modern version of "Why don't you go out and do something less boring instead"

My problem with VR headsets, which I have owned, is neckache. Someone could probably do well inventing a HANS device for them.
> You can absolutely rely on internal file descriptors not being closed.

I've explained several times why you can't. The program that closes all file descriptors may be broken, but the big problem is that as long as the library has no safe way of reporting this to the caller without breaking the OpenSSL API, they are faced with either breaking a ton of applications or finding an alternative. And they've explained why this is not an alternative (in the copious comments in the soure):

> The correct response to EBADF on a read of an internal file descriptor is to call abort.

They have no control over whether or not this will result in an insecurely written core file that can leak data, and this is a common problem. If the person building the library knows that the environment it will be used in does not have that problem, it's one define to disable the homegrown entropy.

> The "close all file descriptors" operation is most common before exec.

I've seen it in plenty of code that did not go on to exec, to e.g. drop privileges for portion of the code.
Why are they colored? Genuinely interested - not an x-ray expert by any means.
Considering this is a book still in print, this is especially blatant copyright violation. It is a very good book, though.

https://en.wikipedia.org/wiki/The_Tao_of_Programming
Gaza conflict also escalates on social media
its also missing another semicolon

https://gist.github.com/than2/26bf8c79052acc2804bd

here, i fixed it and disabled the logging and added a counter
When my part of Amsterdam was built (1) all houses were provided with a phoneline (about 6 different providers), Cable (sadly only 1 provider) and Fiber (about 5 providers).

(1)http://en.wikipedia.org/wiki/IJburg
I think these stubs have the benefit of reducing the barrier to entry for future contributors. If I search for something and find a stub, I can easily throw in even one sentence, and the article is incrementally improved. Whereas if there's no article, I am much less inclined to make a new one.
The source explains why the developers does not see aborting as acceptable: It opens a huge security hole on systems where core files are insufficiently secured. On systems that are properly secured, it's a single define to cause it to fail hard when it can't use either /dev/urandom or sysctl().
> Yeah, I think the models need to be recent terrorist attacks

Bruce Schneier disagrees: https://www.schneier.com/essays/archives/2005/09/terrorists_...
Introducing Hailo Exec
One problem I have with this is that its a massive security hole. Where does the output get stored? If its in an encrypted file, okay .. but if not: deal breaker.
Would love to meet up with you too. Yemyat(at)nexlabs(dot)co.
https://pdf.yt/tos -- You might want to get a lawyer to check if there are any pitfalls when using tongue-in-cheek terms of service and whether you wouldn't need to require people to accept ToS in a more nagging way.
How to apply with a PhD that is 'on hold'
I have completed both BSc and MSc at very renowned universities of my field. I started a PhD-program, but decided to drop out after a year, as this specific program didn't suit me as well as I thought (poor due diligence on my side here...)
I still intend to complete a PhD at a different university, but first I want to get three-four years of experience, when there is a good opportunity.
How would your approach be in selling this in a CV and job application? What would be a recruiters' PoV on this issue? Is it acceptable to start, recognize a dead-end, and turn around? How can one emphasize that it wasn't a 'drop out', but rather 'decided to leave'?

I'm 26, and have 2 years experience through internships in several market-leading companies (within this highly specific field, too) with outstanding recommendations.

Thanks!
It's not even "over qualified". Part of being a PhD is (generally) picking some narrow, well defined niche in the field and devoting yourself to it for a couple of years. Unfortunately, that can leave you woefully under qualified at anything in the field other than that niche.

See: http://matt.might.net/articles/phd-school-in-pictures/
I signed up, logged in from the front page and it directed me to https://geekli.st/micro/create which is 404'ing.
So if you are using OSM data, why not non-US cities as well?
A photograph would have more colors and not be able to see the exact shape of the LEDs (which are all colored).
You go on actual dates with women you meet from Tinder? Edit: It's an electronic meat market... c'mon. Don't make it too hard. Just say you have Netflix = done.
With Bright Benches, London Shows Off Its Love Of Books
There is actually a buy this button below each picture, which allows you to order prints of various sizes.
Rather than the deeper zoom the OP suggested, I would suggest a link to a full-screen lightbox of the map image. On a 1080p monitor, the map box only takes up 20% of the screen real estate.
YC's Rocketrip raises $3M
Brand New Music::: Kelly Pepper – Koh Samui
I'd add another SMS API to that list:

http://www.clockworksms.com/
> the map is still useful for seeing the directional trend.

Isn't that also true of the original map, though?

It's not at all clear to me that your visualization is an improvement on the original. The center has moved from Scandinavia to Spain, and I can see why Scandinavia wasn't a great center, but I don't see why Spain is better. Meanwhile, your visualization depends on the projection used, which seems highly nonintuitive.

(If you go from the USA to China by the shortest distance, you go near the north pole. Calling the north pole the average of the two places may seem strange, but calling any other place the average is even stranger.)
My commentary to verse 8.4 is as follows:

To make a hard distinction between hardware and software, and thinking that all problems can be solved by using strictly one or the other, is a mistake. Master Joel wrote¹ that all abstractions are leaky, and so it is with any working system – any system needs to be a meld between hardware and software, where neither can keep its identity wholly intact. (Writers of) Firmware know this well. Therefore, the Tao cannot exist in either hardware or software, purely by themselves.

1) http://www.joelonsoftware.com/articles/LeakyAbstractions.htm...
I can recommend Adminer as well, it's just a single PHP file. The GUI is minimalistic but intuitive and very fast. The best part is probably the support for 8 database systems (MySQL, PostgreSQL, SQLite, MS SQL, Oracle, SimpleDB, Elasticsearch, MongoDB) and 30+ localizations, so you can use the same GUI for all your databases. Although probably not all drivers support all the features, as far as I know SQLite, Postgres and MySQL are essentially 100% covered (Don't know about others, since I don't use them).
Here's a few surprising ones:

> GLASSBACK: Technique of getting a targets IP address by pretending to be a spammer and ringing them. Target does not need to answer.

What? Sounds like a bad TV show quote.

> MINIATURE HERO: Active skype capability. Provision of real time call records (SkypeOut and SkypetoSkype) and bidirectional instant messaging. Also contact lists.

One assumes this requires Microsoft's cooperation, right?

> SILVER SPECTOR: Allows batch Nmap scanning over Tor.

Interestingly enough, I'd expect this on the "other side's" arsenal. Would this be in order to scan hidden services, or to hide the origin?

On the other hand, a lot of this stuff looks to be entirely.. manual/low-tech?

> UNDERPASS: Change outcome of online polls (previously known as NUBILO).

> BOMB BAY: is the capacity to increase website hits/rankings.

> GATEWAY: Ability to artificially increase traffic to a website.

> GESTATOR: amplification of a given message, normally video, on popular multimedia websites (Youtube).

These could mean a number of things, but to me it comes off as either a basic botnet, or a government-funded Mechanical Turk account. For instance, "change outcome of online polls" could sound like they have access to every single online polling software around - or simply, they get bots/users to click on the option they want to win.
I couldn't get the Triggers to work with terminal-notifier[1]. Bug? Or something to do with terminal-notifier?

[1]: https://github.com/alloy/terminal-notifier
Note that the article calls out two entirely separate issues:

1) The PRNG wrapper apparently depends on the pid to "detect" if there's been a fork, and so the PRNG seed will remain the same in grandparent and grandchild if you double-fork and manage to get the same pid. This may or may not be a problem - whether or not you can induce enough forks to manage to get the right pid will depend on application. This is not dependent on

2) If both /dev/urandom and sysctl() is unavailable, it falls back on generating its own entropy using a convoluted loop and lots of sources. There's all kinds of ways that can be nasty, but that relies on enough factors that just getting the same pid would be insufficient in and of itself (but it may very well reduce the entropy).
I thought they built it but scrapped it after discovering the predictions weren't very good.
Undergrad here, what's the best way to keep up with new papers in a field (e.g. distributed computing or machine learning)? What sources/methods are good for making the most of your reading time?
> I've explained several times why you can't

OpenSSL is crufty in part because it's full of workarounds for ancient, crufty code. LibreSSL shouldn't repeat that mistake. LibreSSL does have ways to report allocation failure errors to callers. It shouldn't even try to work around problems arising from applications corrupting the state of components that happen to share the same process. That task is hopeless and leads to code paths that are very difficult to analyze and test. You're more likely to create an exploitable bug by trying to cope with corruption than actually solve a problem --- and closing file descriptors other components own is definitely a form of corruption.

> [LibreSSL has] no control over whether or not [abort] will result in an insecurely written core file

The security of core files simply isn't LibreSSL's business. The mere presence of LibreSSL in a process does not indicate that a process contains sensitive information. LibreSSL has no right to replace system logic for abort diagnostics. If the developers believe that abort() shouldn't write core files for all programs or some programs or some programs in certain states, they should implement that behavior on their own systems. They shouldn't try to make that decision for other systems. LibreSSL's behavior here is not only harmful, but insufficient, as the library can't do anything about other calls to abort, or actual crashes, in the same process.

> I've seen it in plenty of code that did not go on to exec, to e.g. drop privileges for portion of the code.

Please name a program that acts this way.
The fact that this is a thing, and represents a general "strategy" when using Tinder, means to me that Tinder has failed.
Hacking the Interview: 7 Recommendations from Industrial Psychology
Show HN: Awkward – Watch and record blurred video confessions on iPhone
Jesus man, what else will people think of? Going on dates with people from an photo A/B testing site? Wow.
Why isn't it appropriate for an encyclopaedia?

For example, the 1910 Encyclopaedia Britannica's complete entry for "denim" is "(an abbreviation of the serge de Nimes), the name originally given to a kind of serge. It is now applies to a stout twilled cloth made in various colours, usually of cotton, and used for overalls, &c."

The entry for "Gimli" is "In Scandinavian mythology, the great hall of heaven whither the righteous will go to spend eternity."

It's not hard to find more examples. But I don't think people considered the EB less of an encyclopaedia for its use of one-sentence descriptors.

The heart of the matter is that there's precious little difference between a dictionary and an encyclopedia. Indeed, the EB's full name is "The Encyclopædia Britannica: a Dictionary of Arts, Sciences, Literature and General Information"

To double check that it's not limited to the EB, I looked in Harmsworth's Universal encyclopedia. The entry for "fulcrum" is "(Lat. fulcrum, a prop) Fixed point in the mechanical system of a lever about which the lever can rotate. See Lever." The entry for "gumboil" is "Small abscess on the gum arising in most cases from decay at the root of a tooth."

See http://menvall.wordpress.com/2010/09/14/on-wikipedias-attemp... for an analysis of the distinction between the two, and the conclusion that "everything that is included in a dictionary also can be included in an encyclopedia, whereas all that is included in an encyclopedia either can or can’t be included in a dictionary. This relation is, however, completely misunderstood by some editors of Wikipedia."

(Had you written that it wasn't appropriate for Wikipedia, than that's a different issue. I speak now only of the broad category of "encyclopedia".)

Triple-checking, the entry for "gumboil" in Wikipedia (at http://en.wikipedia.org/wiki/Gumboil) redirects to "Intraoral dental sinus". The complete entry is two sentences long:

> Intraoral dental sinus (also termed a parulis and commonly, a gumboil) is an oral lesion characterized by a soft erythematous papule (red spot) that develops on the alveolar process in association with a non-vital tooth and accompanying dental abscess.[1] A parulis is made up of inflamed granulation tissue.

By your definition, this "(almost) one-sentence" article should be removed from WP, no?
7 of the best new programming innovations
> I don't remember whether it was like that out of the box, or whether I had to configure that when I switched from gnu screen.

It's worth checking your config file out.

And I'm not sure how to answer your question because the way iterm integrates with tmux is that it allows you to create split panes with their own bash sessions. If you want to run tmux in those sessions, it would be tmux running in that pane, but textually instead of graphically. Here's a screenshot to make things more clear: http://i.imgur.com/0hmw62I.png

cmd-D would just create another pane to the left.
Isn't that like the whole point of the app?
Ask HN: Similar industry to the software industry?
I'm very curious on your opinion on what's the closest industry to software industry (in terms of practices, behaviour, organization, stereotypes etc)
From a Dev to a Recruiter
What if the random numbers are needed not by the daemon that chroots itself, but by a separate program that gets exec()'d within the chroot?
I have never used Tinder, but if I understand it correctly men and women must mutually "like" each other before messaging, but what happens in practice is that men like almost every female profile?

Why not just drop the pretence and build an app which allows women to message men, but not vice versa?
here is a direct download link: https://pdf.yt/d/sNzrFSvFUyjGJbob
"Simple text based messaging over TCP" doesn't sound too different from serving http.
Skyrocketed productivity with Tmux
> I’ve talked to lots of Android and iOS teams, and they say if they implement the same app on both platforms, the development time is roughly the same, and testing on Android is mostly a non-issue, as you can do it on your computer in emulators.

Interesting. I've heard just the opposite, in fact: that iOS is significantly faster to develop on and that testing is a nightmare that must be done manually on-device. I would have liked the author to back this claim up with more than just anecdotes.
I live in dark world of cold steel and dungeons. One have to hack and slash bugs not go easy on those. So this Tao thing is not for me, I am the crusher of users. Behold as I wield their skulls! I only have to hide from manager when I'm posting on HN instead of slashing another bug. :)
Star Guides Wilderness
When your process forks, you end up with two processes with identical state. One or the other will need to reseed or the two processes are going to generate the exact same random stream.
What I watch when programming
Also, there tend to be many more men seeking women profiles than women seeking men so the men have to work harder to stand out.
Can someone clarify two things please?

Firstly, bare metal here means this stack can create an img with an executable that will be run with nothing more the uboot? I.e. No OS, no kernel, not even a Rust runtime (hence, presumably, no std in the example)?

Secondly, can anyone recommend a good reference to get a handle on platform trees? I first came across them on my beagle bone. My understanding it was mostly because Linus got fed up of hundreds of patches for each and every ARM board.
Moving the BBC's video encoding to the cloud, one year on
I think the opposite is the case.

There is a big bunch of people who thing gays are bad or blacks or jews or people who don't believe in their god.

The war on drugs also made many people "evil" in the eye of those who don't did drugs, but most of them just were a bunch of spaced-out-hippies.
I tried to use it with terminal-notifier[1], but couldn't get it to work :( Would've been awesome though. (Notifications after build completes, etc.)

[1]: https://github.com/alloy/terminal-notifier
There is lots of competition in this space. The obvious contender is the Beaglebone which has "real" Ethernet (among many other things).
Thanks. And really interesting site / idea. I've seen some before, but none quite as good.
I was surprised the article didn't mention IBM's Watson project (the Jeopardy game-show winning "AI" bot) and I assumed IBM would be farther along in actual commercialization in "outside" domains. Google and others appear to focus on using AI techniques for their core business (though Google's "core" is very diffuse).

This article (January 2014) implies IBM's having trouble with applying Watson for profit: http://www.zdnet.com/ibm-forms-watson-business-group-will-co...
> If you look at this graph, in less than 12 months, Android will dominate in this final metric.

I can't really see that in the graph, and anyhow you can't really predict what's going to happen from previous performance or trends. I'm not saying it won't happen, but I don't see it as inevitable.
How did the Twitter account Fifndhs predict the world cup results ahead of time?
It seems surprising that by the outbreak of WW1, the economic centre of gravity was hovering to the west of Greece. In other words, all of the European imperial powers scrambling over Africa and the New World still produced less combined output than Asia, Oceania, the Middle East and eastern parts of Europe and Africa.
1. Good, working fullscreen support on multiple monitors.

2. Problems with displaying my favorite font, ProggyClean, in Terminal.app.
You can disable it system wide. But it also works on a per-app basis: if you don't want the UI state restored, then just quit the app with Cmd+Option+Q (instead of the regular Cmd+Q) and OS X will not save the application state.
Explains why 99% never starts a discussion, got a bit bored of it after a week.
Email, it's not so bad
There are a bunch of sex-date-sites on the web, where guys have to pay if they want to message women and women can message them for free.

Maybe the women who use Tinder want to be 100% sure "he" liked them?
I'm thrilled to hear that I'm not the only one! My MBA always crashes after I remove a Cisco console cable...
I had trouble using it.

It appears that once you've created a tmux session you need to manually add tmux commands in a dialogue box.
Former Plancast CEO talks about lessons he learned from the project
Why we’ve failed at the Lean Principles
Cliffs of War – Side-scrolling Strategy Game for iOS (FREE)
Instagram is a counter-example though.
> No.

open+read+close + all the mess associated with exhausting file descriptors > getentropy

fairly obvious, isn't it?
On average that makes sense, but it breaks badly for some critical cases such as very attractive men. If those users are driven away then the application becomes less attractive to women.
If you like this, you should check out this Flickr account with x-rays of videogame consoles and controllers: https://secure.flickr.com/photos/ravanderende/sets/721575943....
ITerm is great. It really is. But I wish more time was spent on optimizations. People these days seem to forget that terminals are often used for displaying huge amounts of rapidly scrolling text and that speed is of paramount importance.

To put this in perspective, my computer has two CPUs with 4 cores each, 24GB RAM, a graphics card with 1600 Stream Processing Units (engine running at 850MHz) and 1GB of RAM, and yet it scrolls text in a terminal slower than my 386 machine 20 years ago.
Ask HN: How to fix recruiting from your known groups?
I got a call yesterday from a friend asking me if I am available for work. I was not and I ended up calling some of my developer friends to ask them if they are available to take on the tasks. They were not, but they said they will ask around. I find this problem often and I am amazed that no one fixed it. I do not always know when my friends are available for work or if they look for someone to help them with tasks and just looking at their Linkedin profile doesn't always mention this.
So how to make this process easier? Is there an app that lets you share between your groups that you are looking for a developer or that you are available for work ( does not include searching for people you don't know or not in your area).