skysight-inc/HackerNews huggingface dataset:
Imagine yourself a linux lab operator at a university somewhere and TrueCrypt is installed in the lab computers for students to use to access their TrueCrypt volumes.Most students will expect to have access to TrueCrypt,the GUI application as that is how most people use TrueCrypt.

Now,how exactly can you set up TrueCrypt so that a student could not use it to get root shell as i specified?.

Simple answer,you cant.

Yes,TrueCrypt gives you an option to pass the "nosuid" option.But thats like having a system that requires a password but gives you an option to not provide it with the default behavior being the option of not providing it.

The student who will sit on that computer lab with a TrueCrypt GUI window open will be the one who gets to decide if they want to set the option or not and with the option being off by default,the student will just execute the exploit without changing anything.

I should also say that i am mhogomchungu,the founder of zuluCrypt[1] that does block device encryption and also general purpose mounting with zuluMount,a tool that ships with zuluCrypt and hence i have looked at this problem very closely and for years now and i have closely followed how other FOSS projects reason with problems associated with mount command usage and their implementations to work around the problems.There are also other bunch or wrongs that TrueCrypt is doing and i know this from looking at how things are implemented "from inside" and not how they appear from outside.

Somebody using zuluCrypt to gain root shell and i will take full responsibility for it,somebody use udisks to get root shell access and i will place responsibility fully on udisks and i am fairly certain they will do the same.

[1] https://code.google.com/p/zulucrypt/
I think this is fantastic advice.

As someone who has spent an embarrassing amount of time on various independent education, one of the key things I've taken from it is just how efficient text books are. Not only can you read more quickly than people can speak, but it's also active by nature. I've often found my attention wandering during videos, but it's just not possible to read without putting in a minimum amount of focus. It's also a lot easier to modulate your reading speed based on how easy material is for you than it is to do the same during a lecture video.

Some general thoughts on MOOCs:

Coursera and edX tend to be great for small, self-contained topics and the automated graders for programming assignments is great as well. The forums are also useful, though not ideal (since there are no practice questions students can get help with that don't fall under the honor code).

Where modern MOOCs really fall down is prerequisites. It's surprisingly difficult to do something like structure an entire CS degree from Coursera classes. Though many classes are taught by famous CS professors, they are from different institutions that break material into courses in different ways. Worse still a lot of the classes are either watered-down or shortened or both.

MIT's Open Courseware archives are actually a lot better for this. There are no certificates, and no credentials, but nearly all the material is freely available. The one biggest inefficiency though, is all the time spent in the lectures. At least they can be played back at a higher speed, but the lectures really do take a lot more time and cover less than the textbooks. For courses that have good textbooks, I think the best approach is to skip the lectures except in portions where you feel like you need more review.

Finally Khan Academy is fantastic for answering specific, mechanical questions (e.g. how to calculate eigen values), but a bit light on material. I'd use it as a supplement for the other resources.
In response to the Rolling Stone article:

Patrick's job was to probe corporate networks for vulnerabilities to a malware attack known as a "sequel injection," which overwhelms the victim's system with meaningless commands until the system gives up and defaults to using the malicious code.

Sequel injection, huh? :P
No to be a bastard, but I disagree. The design is really off-putting. It instantly made me bounce off the site. If design isn't an early concern, just go for something boring/popular/obvious. Lobste.rs isn't going to get too many compliments for its design, but it also won't get many demerits either.

I say change the colors and don't do it in three columns. That's just my opinion. The site might be awesome, but really, the design made me bounce.
A Decade Late and Millions Short
Great recommendations, some people might also find this interesting as a general guideline to "Data science" http://nirvacana.com/thoughts/becoming-a-data-scientist/

[edit] scroll down and look at the map.
This is a false dichotomy. Just because a comment isn't just blatantly hating on something doesn't mean it's civil and constructive. Likewise, a comment doesn't have to be a "hugbox" to be civil and constructive either.

If your argument is more about questioning the "civil" component, then that's fair, but communicating in a way that obfuscates your message by eliciting negative emotions/reactions in your intended recipient isn't exactly efficient either. We all function better with a clear head.
>Did you learn to program in school or teach yourself?
School, I had a few credits to fill out my Econ degree and thought the CS intro classes would be interesting.

>Did you do unpaid work to establish yourself?
Nope, but I did work for pennies. $11.50/hr writing code at my first job, and then later $1000 for an Android app with another $500 to port it to IOs.

>Roughly how long did it take you from day 1 of learning to day 1 of being paid?
Six months.

>What was your first gig?
Working on campus making Salesforce magic happen. I graduated recently and now work as a Salesforce/Java/web-backend developer.

As idealized as being self-taught might be I think there's a lot of value in getting your base knowledge in the classroom. Data Structures and Algorithms especially is a great course to learn with a professional as a resource.
That's pretty cool, and roughly what I saw in my emulator - maybe my fumbling actually did it right :) And very much agreed, Realm is pretty impressive, and micro-benchmarks like this aren't all that useful.

Have you set up a pull request / issue by any chance? It paints Realm in a bit worse of a light, but hopefully they'll merge it in and update the site.
The water represents corporate resources and the hand represents the employee. When the employee is removed, other resources back fill to compensate. No need to delude oneself into thinking one is indispensable. The world moves forward whether one is at work or on vacation -- the only question is: what is the benefit and for whom?
If you have trouble with anxiety and depression you should consider getting treatment.

The natural thing to do is get exercise. You should get the equivalent of at least an hour a day of intense cardio. Military organizations make soldiers do it because it helps them cope with the stress of being in a war zone, which is worse than whatever you are experiencing.

Another thing to do is to get into a "support group" of some kind. This isn't necessarily formal, but if you want to become an internet entrepreneurs you should be regularly meeting with developers, hustlers, or anybody who can help you get perspective.

Finally there are the SSRIs and related drugs. These actually work when used properly. Used properly means your doc intelligently selects one for you, you keep in touch with your doc to make sure you get the right dose, and if it doesn't work, you get something else.

Try these things BEFORE you quit because your SaaS business may increase your stress level even more.
Doesn't keeping that "sniffing" make the system fundamentally insecure. Considering someone could bring a NFC chip nearby your device that redirects to a url extension that pulls a malicious script?
I also have an external display but I actually prefer just the (11") air. Because with less on the screen it lets me focus better. Very personal though. But it works well for me.
Why does he have to? He lived before the yuppie offered to pay for it, so he could refuse and eat the damn lobster. All the market has done is given him an extra option.
Show HN: Skilleo – Prove and learn coding skills
I went to a 6-month programming school.

I had a business degree and was working in an oldschool industry.
The programming school guaranteed a job offer, I received 3 job offers. I started working one week after finishing school. I work as a ruby/node/frontend developer.

the program was called gschool(http://gschool.it). it was ran by Jeff Casimir of Jumpstartlab and Turing School (http://Turing.io)
I think, implementing such a proof in Agda would be a great way to learn it.
- Self taught, my school's idea of "Computer Studies" was to teach you how to use WordPerfect, and a few other DOS based office apps.

- Everything I did before my first coding job was done purely for myself.

- 1997 to 2000 if I want to only count "Web development" as my core skill. I've been playing around with code since 1990, trying to mix art with code on Amiga.

- First gig was in the adult industry designing and maintaining sites.

Brief Timeline for those interested:

1997 - Playing around with Netscape Navigator Gold and GeoCities. Purely HTML based sites with some use of 3rd party CGI tools (Matt's Script Archive... I think).

1999 - Touched on ASP but I didn't like the taste.

2000 - Since everything didn't burn to the ground, I started to develop using Perl and flat-file databases.

2001 - Upgraded to PHP/MySQL. Expanded further into JS/CSS as well. Also started using Rackspace as my main host with a FreeBSD machine.

2003 - Career change to advertising, regretted it every day. The lies and screwing of customers. Was primarily splash pages with some functionality.

2006 - Went back to the Adult side of the tracks. Learned more about server management. Dabbled in C at the same time as I was making modifications to Kannel.

2009 - Left the Adult industry for a more retail position. Switched from FreeBSD to Ubuntu as my primary deploy OS. Expanded into scaling architecture as well as picking up a few extra languages along the way (Obj-C, Python etc).
Exactly. How fb privately moderates manually and can delete entire posts without question or reversal, falls through cracks.

Facebook needs to determine a way to score and moderate without annihilating individual writers selectively.

Even just cause it frequently has mistakes. We don't need to recreate jail statistics with guilt and innocence so pronounced by secret individual actions. We can record it.
Recht and Candes may champion approaches like compressed sensing, while Carlsson and Coifman align themselves more with the topological approach, but fundamentally, these two methods are complementary rather than competitive.

Minor nitpick, but I think the article (and this quote in particular) might be mischaracterizing the difference. Every form of manifold learning relies first and foremost on the ability to compute some kind of low-dimensional embedding that preserves structure, for which Compressed Sensing --and its more recent generalizations: see for instance the work of Wakin et al [1]-- clarifies the conditions and transformations that make them feasible.

[1] http://papers.nips.cc/paper/3191-random-projections-for-mani...
As you'll note, they went back on these changes and the final (currently draft) SHA-3 in the FIPS-202 draft is Keccak pretty much as it was entered. They've proposed using the Keccak team's own Sakura padding - which is a pretty simple padding, also ready for use with tree-hashes.

See also: http://keccak.noekeon.org/a_concrete_proposal.html

I have no security concerns with the proposed SHA-3 drop-ins.

I am not entirely satisfied with the SHAKE XOF functions, as they didn't specify SHAKE512(M,d) = KECCAK[1024](M || 1111, d) but instead the weaker SHAKE256 and SHAKE128. Those functions won't have a problem now, but I don't think they hold up to post-quantum well enough for use with, say, Merkle signatures.

As usual, they strongly favour hardware implementations; that's internal culture at work, there.

Software performance of SHA-3 is unfortunately not very good. The other finalists like BLAKE (or its faster successor BLAKE2), or Skein, are much more viable software contenders (and make excellent tree hashes), and no-one's particularly rushing towards SHA-3 anyway as except for the length-extension attack common to all Damgård-Merkle hashes, the SHA-2 functions seem okay for now (except for the not-entirely-undeserved stigma of having come from the NSA - that said, I don't think they're 'enabled' in any way).

Bigger problems exist than our hash algorithms, but it's good to have a few good ones under our belts for the future.
You should definitely leave the title as-is. It's the name of the paper. I'd bet they know what we're referring to and are using the name tongue in cheek anyway.
Do you think that extrinsic, material goals get in the way of the intrinsic goal of creation? (I do)
"We weren't asking them to sign an NDA"

Huh? We didn't require those discussions to be closed up in an NDA. We were just trying to do right by our partner, who wanted to negotiate the EFF / OpenWireless endorsement, neither of which they seemed to keen to give, so we walked away.
I snagged the same machine + the 256GB SSD upgrade two weeks ago and am quite pleased (I spend the bulk of my day in Meteor). Coming from a 15" MBP I was a bit nervous about screen real estate, but the 13" is plenty. One side benefit I didn't expect was the portability of the thing got me away from the desk more (moving around is a good thing imho). So...damn...light!
Is that a jQuery modal in TYOOL 2014?
The author is the president of the American Enterprise Insititute. AEI's board are the CEO's of ExxonMobil, Dow Chemical etc. Including the CEO of Enron until he was ousted. They are bankrolled by Ford, GE, Chrysler, AT&T etc.

What is his message to us?

"when money becomes an end in itself, it can bring misery"..."People who rate materialistic goals like wealth as top personal priorities are significantly likelier to be more anxious, more depressed"..."the moral snares of materialism"..."it requires a deep skepticism of our own basic desires"

The majority shareholders of the companies bankrolling his institute own the lion's share of this country's stocks, bonds and other assets, and are continually at war with the workers in the company's they own so that a larger lion's share of money coming in goes to profits and not wages.

So of course in this zero-sum game, the parasitical side is going to tell the workers, the wealth creating side, that they should not be too concerned with money, that wealth isn't everything, that uneasy lay the head that wears the crown, and all this other nonsense. They used to have priests and reverends dress up these ideas with superstitious mumbo-jumbo, but nowadays more people are smart enough to see through that BS ( although he does talk about "Saint" Paul, the Dalai Lama, Buddha, the Love of God ).

This crook is so full of hubris, he wants to lecture me on how to live a better life - that being that I should ask for a smaller piece of the pie that I work to create, and perhaps instead dwell on "the strength to love others - [...] God", the thoughts of "Saint" Paul and other nonsense.

Why doesn't he tell his contributors to stop employing psychologists and Madison Avenue to try to figure out how best to create conspicuous consumption so that people will buy the commodities they're pumping out. The advertising business is one of the biggest forces out there trying to tell people life is more enjoyable if certain commodities are purchased, and he is at the center of that world. He likes quoting the bible? Try Matthew 7:

"Why beholdest thou the mote that is in thy brother's eye, but considerest not the beam that is in thine own eye? Or how wilt thou say to thy brother, Let me pull out the mote out of thine eye; and, behold, a beam is in thine own eye? Thou hypocrite, first cast out the beam out of thine own eye; and then shalt thou see clearly to cast out the mote out of thy brother's eye."
Reading all of your comments, you guys should feel lucky of living in technologically advanced countries, specifically the US and the Bay Area in particular, that offer such opportunities in IT employment.

Here in Spain is totally another story. The startup scene is essentially non-existent, so if you're worth your salt you only have one option: moving, either to one of the bigger cities (like Madrid or Barcelona) or abroad. If you wish to stay, get prepared to spend the rest of your life in a big-ass, old fashioned business like Sadiel where you'll be coding Java boilerplate code for the rest of your life.
What happens when a $35,000 Tesla arrives?
A couple of the operation's participants came forward back in 2005.[1]

Apparently this took place in Mexico City.

[1]: http://www.freerepublic.com/focus/f-news/1532478/posts
No, this is the Melbourne Shuffle (Zombie edition) https://www.youtube.com/watch?v=GQgMSl0ucTE#t=158
Working all night and skipping vacation to work may indicate that you think your work is indispensable. The bucket of water shows you that the mark you leave may not be as big as you think.
Resource Management and Control: A Straw Proposal for Linux
Yet, to "build a better society" is a just euphemism for "build a better government." Empirically, governments organize themselves just as corporations: cult-like, soulless gangs which exist to enrich the wealthy elites and treat humanity as just "collateral damage." In fact, government invented the term of art.

The relative advantage of corporations, however, is one can choose to quit. Or choose to not buy their product. No one "has to have" an ipad or other such nonsense. No such option exists with regards to government. Voting has negligible effect and emmigration can only offer a least-worst improvement.
It's an OS X package manager. Indeed, it is comparable to Aptitude.

Edit: My app recommendation is Spectacle (a window manager) http://spectacleapp.com/
Several older languages—including Pascal and the Algol languages—will use the := operator for all assignment, on the grounds that assignment is a fundamentally asymmetric operation. In the ML family of languages, there are immutable definitions and mutable reference cells, and different operators for each:

(* multiple bindings, so the inner x shadows the
* outer x---indeed, this code would give you a
* warning about the unused outer x *)
let x = 5 in
let x = 6 in x
(* y is a mutable reference cell being modified *)
let y = ref 5 in
y := 6; y

Haskell makes a distinction between name-binding and name-binding-with-possible-side-effect, but still reserves = to mean signify an immutable definition and not assignment:

-- this defines x to be one more than itself---which
-- causes an infinite loop of additions when x is used
let x = x + 1 in x
-- a different assignment operator is used in a context
-- in which side-effects might occur, and can be
-- interspersed with non-side-effectful bindings:
do { x <- readInt -- does IO
; let y = 1 -- doesn't do IO
; return (x + y)
}
Yup.

An administrator of a Facebook page can hide a comment made on that page to all but the commenter himself and his friends. The other comments that the author saw disappear were most likely hidden while he was logging in/out. No conspiracy, just a spineless Facebook Pages feature.
Seriously, yes.

I bought the cheapest Air I could get (4 gig, 13 inch) and its been a dream. In the end my logic really was that, If what I'm creating (for the web) doesn't perform fantastically on this laptop, then its not worth shipping out.

So no regrets here.
where does he say that specifically? He refers to statisticians helping to do further analysis on the data, but I don't see where they showed that the main claim (that the test is predictive of success in the course) is refuted by statisticians.
Awesome! Totally will get.
Learned to code as a child, took 10 years off in my twenties to pursue degrees in philosophy and literature, decided not to become a professor and took up making media in a variety of capacities, pivoted my media creation business into just making websites, enjoyed programming (and playing with new techniques) so much that at some point the only jobs I would take were freelance programming of various kinds.

My first real paid "programming" gig was for a low-rent web shop that crapped out websites for insurance agents.

So, maybe 25 years from day 1 to getting paid.
Neat perspective. I'll have to wait to compare it to my existing laptop (15.6 inches).
Awesome! That's exactly what I wanted to hear.
Failing a 'dream bard' like you mention a fairly good alternative is a laptop (scraptop) with a broken screen. It may need to be fairly high end, e.g. many Lenovo models I've seen (even X series) have two m-PCI slots available for Wifi.
Greenspun's Tenth Rule, is the one you're thinking of :)
Do you still use google products?
Heck, if you'll post a general format for creating a timeline, I'd be happy to ofill one out ;)
Awesome! My current computer is a BEAST (in terms of size - definitely not power), so portability will be pretty new to me.
You can get paid even with just basic knowledge. I'm teaching my girlfriend javascript, and she just got paid for building someone a wordpress site. No code involved, hosted at wordpress.com, that's just one end of the huge spectrum of skill levels you can get paid at in IT.

That said, if you want to become a craftsman and build quality software that people can depend on, definitely hone your skills by doing unpaid work. But definitely don't do it for people who make money off your work, it's plain unnecessary. There's literally thousands of open source projects that could use even the most basic of programmers.

You can do this even if you have a full time job or study at a university (which I can also recommend). Just take 1 or 2 hours a few nights a week. Spend this time checking out their source code and running their test suite. If you've managed that you're already half way done. Next step is picking an easy sounding bug from their tracker and see what causes it. If it's easy to fix, fix it and send them a pull request. When they accept, you've got the "contributed to open source project XXXX" credential that will almost certainly aid you in getting a job.

All really good programmers I know got good by either contributing to open source projects, or starting their own projects. Developer skill really just is experience, and being independent in a project is just the best way of gaining experience.
I taught myself Borland Pascal and wrote some toy programs. Then went to the local photocopy store and offered to write a login program so that people wouldn't cheat on their reported hours when they checked off the computers, and print off a receipt. The manager accepted my terms of $50. Then he hired me.

(It was DOS, so quite simple.)
I bought Air (2013 model) 13" 256Gb and 4gigs of RAM. Using following iTerm2, Photoshop, Safari (occasionally Chrome when some web videos are not working on safari because of flash).

I own 24" monitor but i used it only couple times with macbook, for me 13" is perfect size. I do rails, php and some web design and macbook air is just perfect for it.

Btw being able to take you laptop outside and not have to worry for power is just awesome.
It didn't make any sense to me to replace a reasonable hash algorithm with one that was, in a technical and eventually (given Grover & Brassard) a practical sense, worse.

Keccak's software performance was not top of the pack; c=2n would still not have beaten Skein or BLAKE, let alone BLAKE2.

Prudence dictated standardising the parameters that had actually been analysed, rather than changing them after the race was won.
Blake2 is better and much faster anyway:

https://blake2.net/
> sentient robots

Stopped reading there. There may be some kernel of truth in there, but trying to get it from a writer with literally zero integrity is pointless.