skysight-inc/HackerNews huggingface dataset:
http://blog.docker.com/2014/06/docker-container-breakout-pro...

But nothing is stopping you from creating a binary and running it as root that perhaps mounts those filesystems, or sends ioctls / badness to the kernel.

I'm just shooting from the hip here and might be wrong, but I'm almost certain devices aren't namespaced. If you were to mknod a block device with the right major / minor numbers as the host's sda/sdb/etc, what would stop you from mounting the host's root filesystem and making changes?

Granted the "work around" is to drop the privileges of the containers as much as possible, use sVirt (via SELinux), drop as many capabilities as possible, don't run untrusted containers, etc. But this isn't a theoretical security problem, it is a real big attack surface.

Edit:

http://www.projectatomic.io/blog/2014/09/yet-another-reason-...
I don't think that would work (bacteria living the colon can not necessarily survive all the way through the digestive tract). What is an accepted form of gut biome therapy is a stool transplant:

http://en.wikipedia.org/wiki/Fecal_bacteriotherapy
I agree that prison reform seems unlikely but I would put this in terms of the entrenched interest of guards, law enforcement and all the beneficiaries of the War On Drugs. Prison gangs are subordinate players in this game but certainly they are the monsters that the Drug War overall has successfully conjured up.
I'm not bashing apt vs you can't even trust the package manager on the most widespread distro*

Please don't change the story like this, then insult the people you're talking to by denigrating them ('hive mind', 'immature', 'fake win', 'bandwagon', 'college naifs'). The people responding to you are not just trying to 'win' 'fake internet points', they're trying to counter FUD being spread around package security.

You speak of people being immature, but your whole paragraph there is a sniffy, passive-aggressive swipe.
why downvote? encrypted passwords aren't important?
The search and finding of this tomb would make a great story/movie.

Let's just hope they don't cast Nick Cage as the lead actor!
But presumably that happens some time down the road long after you have made your decision. Either that, or said secrets are published and heard about by an audience which are tuned to hear about interesting things quickly, who may also be what you're after.
Thanks! All fixed.
Ok - this is something I have experimented with before. Making root beer the traditional way is possible at home, as is buying or harvesting sassafras.

Sassafras tastes and smells very much like root beer, as you would expect, except "more". That is the best way I can describe it. It has a flavor profile that is more complete than what you get in standard root beers. As the above article states, it is pretty difficult to get a satisfactory extract from it. The smell of the root/bark is great, but the concentration/taste of the brewed liquid is very difficult to gauge. It requires significant amounts of sugar to make it taste "like root beer".

To get around the challenges with Safrole, the root beer industry turned first to Wintergreen, which is a very similar flavor profile, and it is wintergreen,or artificial wintergreen that makes up the bulk of modern day commercial root beers. Boutique makers also include vanilla, cinnamon, ginger, and other botanicals to get a flavor they want, but Wintergreen is the key to modern root beer. Many online recipes include many of these ingredients too. I've never had much luck with them.

I've made some of these myself before, and always had an exceptional difficulty getting the flavors to be concentrated enough to even approach the commercial stuff - perhaps my ingredients or methods were sub-par. I always wanted to get a mixture that I could make strong enough without making it too sweet. The difficulty there is that it is hard to make any mixture strong enough to mix with carbonated water, or, it is hard to carbonate by fermentation without adding significant amounts of sugar.(over time, I've made probably 10 attempts at this, and bought several hundred dollars worth of ingredients/equipment. I've had much better luck with real beer.)

Finally, as a caveat, do not attempt to eat or cook with any wintergreen oil, or wintergreen essential oil. It is almost pure Methyl Salicylate - According to wikipedia, 1 fl oz of wintergreen oil is equivalent to taking 55g of aspirin, equivalent to 171 adult sized tablets. http://en.wikipedia.org/wiki/Wintergreen
OpenVZ is very widely deployed and manages to do this safely.
It's an effective strategy from the employer's side, but what about the applicant who is asked to spend hours on some test for every job he/she applies for? Are you paying these applicants for the time they spend jumping through these hoops?

And if your "technical grilling" fails to identify strong candidates, you're obviously asking the wrong questions or, at the very least, not asking the right ones.
These are great suggestions. Also comforting to know that I'm not the only one who needs to go through these slowly.

Since you've been so selective with books, what do you recommend?
Google in Space? Startup Disruption Reaches the Final Frontier
Elixir seems only syntactically different, to me (with a few nifty feature additions). Erlang is a syntax for BEAM more than anything.

What makes Elixir easier to learn for OO programmers?
Ex Red Hat CTO Installs Self as Google Cloud Boss
I am thinking about switching to iPhone 6 after using my Nexus 4 for two years only because of poor battery of Nexus 4.

Unlike some other iOS users' and ex-Android users' claims, I never experienced any significant lags or bugs in the new Android OSes on Nexus 4. I had some issues with WIFI on beta Jelly Bean, but that was a beta release for a reason. The so called scrolling problem on Android never happened to me at all.

I find that gripes people have with Android are the one that's overblown out of proportion. They probably used Android years ago back in 2.X days, and still have a bad taste from it.

Newer Androids are so much better than 2.X days, I would urge iOS users to try them out.
Have you taken a look at Akka (with Scala)? You sacrifice code hot-swapping and I think little else, but you get JVM performance and one of the most extensible non-Lisp and safe non-Haskell languages in existence.
I was extremely high on buying a 3D printer, and then I read this post: http://chopmeister.blogspot.com/2014/08/sifting-through-feat...

I think I'm going to wait a while before buying.
New Apple devices include default kill switch
The industry takeaway should be to try to isolate the bacteria that play the secondary part in the glucose resistance, then put ANOTHER additive in the drinks to kill that bacteria, then sell a more expensive NEW zero calorie drink?

People like sweet. Let's make sweet safe.
At the end of every iteration (of something involving this loop which I can't precisely recall now) the program checks whether it is running under debug mode (essentially makes a PTRACE call and reads its output, the OP also talks about it) If this is the case, it makes a jump to random address, so even if you are just neatly watching the program run under debug mode, you weren't going to achieve anything.

Could you change the jmp into a nop? That should let you attach in debug mode.
https://tuts4you.com/

The lena151 tutorials are especially good:

https://tuts4you.com/download.php?list.17
If you sign up on the email form on the front page of cleverdeck.com, I will send something out when we launch an Android version. But that means you'll also be spammed when we launch new languages for iOS. Not ideal - I'll try to add a separate signup somewhere tomorrow.
Or Akka with Java
I totally get what you mean. Even though I think the graphics in 4-6 are simply gorgeous, and 5 is probably my favourite of the whole series (hard to say why, I wanted to say because it's in space, but then realized they're all in space, maybe it was the big red robot).

However, there is something that just feels right in 1-3.
I find the Anki software to be perfect for my purposes of spaced repetition learning. I've invested a lot of time in creating my decks. Because I don't want to recreate those decks again, is there anyway to import those decks I've already created onto CleverDeck?
A nice simple test that I like to give as a first-wave elimination:

Have a computer setup and running (all properly configured). Pull the network cable out of the jack a little bit (so it looks like it's plugged in but isn't).
Ask the person being interviewed to show me an IP being used by microsoft or google. (so ping/dig/nslookup/etc)

Let the person know that (a) the computer is in working condition (i.e. no drivers are missing) (b) the network works (i.e cables are good, switch is good, DHCP is enabled, etc.)
(c) tell them that this is a test to determine their troubleshooting skills

It is always disappointing to see how few ever open a term/cmd window (depending on the OS). 90% of participants just try to open a web-browser and type in "what is the IP address of google"
Of course the traveling salesman problem is combinatorial optimization, and of course Uber, Lyft, Sidecar, etc. have such problems, as has long been the case for dial a ride.

And, for the case of trips regularly planned, e.g., using one car to get the same several people to work each day, would have a deterministic problem. Of course, part of the problem would be which people shared which car.

Otherwise there is something of a probabilistic problem where the driver gets a travel request at some random time for some random origin and destination and has to decide what to do, e.g., accept the offer or not and how to fit the offer in with what else he is doing.

Might be a lot of work, but might save some money and/or give better service to the customers.

At one time, my Ph.D. advisor wanted me to work on dial a ride scheduling. But I already had a problem I'd made good progress on and used that for my dissertation instead! One reason: For the problem I used, I could claim to have a solution that was optimal in a quite strong sense, but for dial a ride any solution would be only a big mess probabilistically, some big mess that was just heuristic, and that could be evaluated only empirically. Bummer.

Now, I also have another problem! So, anyone who wants to work on combinatorial optimization and hope to get interest from Uber, Lyft, Sidecar, etc. -- go for it!
I would rather spend hours on some test than be judged on a whiteboard problem, or any other problem which has nothing to do with programming on an actual computer that has an internet connection.
Nobody puts a gun to applicant's head and forces him to take a test, so...
Business is not for people to have jobs but to make profit.
YQL has been falling apart for years now. Sometimes it's down for me for over 48 hours.
Wow, that would be a great case study over at bootstrappers.io ... Would love to read about your bootstrapping / lifestyle business experiences.
Unfortunately, HN doesn't have an edit function for comments. ;)
I believe it was also the part of the key.
Templates Suck, Here's Our Lean Startup Template
Startups allow buy cleaning services with Bitcoin in Brazil
Yeah, but the reasons for choosing Java over Scala are mostly organizational. If your organization can tolerate Erlang it can tolerate Scala.
Will this allow me to remotely handle FTP transfers from say a server to my laptop while I am at work? Sometimes I would like to have control of transmit from my phone
Using vector images in Xcode 6
Microsoft degrades email experience if you connect through gmail
Little Thing Called Life
Airbnb will begin collecting occupancy taxes in San Francisco next month
Great work and great idea!
Not right now - I'm sorry. If Anki is perfect for you and you've made all your decks, that's great! Keep using it! If you ever decide to learn another language, we'll be here with a bunch of content ready for you :)
How to Memorize a Speech [Infographic]
I'm a mechanical engineer and I use 3D printing for countless things at work and occasionally in my own life but unless you are making things at home at least once a month it doesn't make sense to have your own and I think that is what the OP is saying. The idea of a "household" 3D printer doesn't appeal to him because like most consumers they don't want to make things they just want to buy them.

If you think of the 3D printer more like a tablesaw and less like a microwave the market shrinks but the use case becomes much more clear.
I think it's largely a cultural objection, and one I feel is pretty valid. I would hate to see Emacs turned into a javascript playground.
Have fun mixing colors with HTML5
Yelp pays $450,000 to settle FTC suit over collecting children's data
FWIW, Turkish is not an Indo-European language. It's an Altaic language [1] like Mongolian, Japanese, Korean, etc. Though, it looks like one because Ataturk (founder of Turkey) converted the Turkish alphabet from Arabic script to Latin script when the new republic was found.

[1] http://en.wikipedia.org/wiki/Altaic_languages
But his can't tolerate Erlang, that's why he used Go.
What Storehouse for iPhone Teaches Us About the Future of Mobile Design
Selfie-Gif Applications for Android and iOS
Show HN: A game made out of tweets
Guide: Writing Testable Code [pdf]
Here in central PA you can easily find a sassafras trees in the surrounding woods. I brew root beer occasionally but prefer making Ginger beer as I like it's peppery flavor.
Author here. Curious what others have learned from the latest iOS8 apps!
At this point, for a new iOS developer, would it make sense committing entirely to Swift training?
i gave a livecoding talk that builds up to cursors at QCon NYC 2014 - it is not yet public but i can send you a private link if you email me
This harks a lot to Bad Science by Ben Goldacre, which is a great read. There are plenty of examples of governments making knee jerk reactions to scientific press. And even more of tabloids and other media outlets going crazy after they misinterpret papers.

On the other hand, if you've never tried 'real' root beer and you love the commercial stuff, is it a problem? One argument, albeit not valid here, would be that chemicals are chemicals regardless of whether they come from a plant or a laboratory. It may also be the case that the commercial stuff simply tastes better because they've had longer to play around with the formula.
It was entirely focused on Social Media Platforms. Now, while I don't expect a high schooler to be checking the performance of their stocks, it does highlight something I've thought for a while about social media (and maybe why I don't 'get it') --

It seems entirely designed to keep the high school experience of constantly worrying about what everyone else is doing and thinks about you front and center through the rest of your life. It's like choosing to never move past the most horrible parts of school.
How much force can you put on the brackets and or strain measuring device?
That seems to imply that the problem is in the Scheme/Elisp interface, not in Guile's execution of pure Elisp.
If it's no relevance to the job, you're only testing that they share your interests.
Do you think those south American root beers I buy at my little latin market contain Safrole?
They certainly taste different than US root beer.
Metrics Required for Series A
I had almost deciphered the entire thing on my own, before I found that translation sign in the hidden area in ep.3.

IIRC the only one I missed was the character for 'Z', which I simply hadn't encountered on any sign so far.
Funny, I feel the same way about the new Moto X. I think the larger screen was a mistake, and Motorola would have been better served to update the existing 4.7" phone and release a 5.5" or larger separate device.

I will be very interested to see if Apple continues having 4", 4.7", and 5.5" phones in its line-up over the next few years. It seems like a natural spread that covers a good number of different use cases.
Great Idea... May be using a moving background as the banner image might add the necessary zing to the website.. Movement also kind of denotes activity.
The fact that Facebook, Airbnb, and Dropbox came out of other places suggests there isn't anything inherently special about Stanford, except that there's a lot of talent there.

I think the question comes down to, does the school give the unfair advantage or does the school attract smart people that are more likely to accomplish something great. I think its already accepted that there is a correlation.

There's a correlation, but rich kids can also buy their way into schools like Stanford: http://www.paulgraham.com/hs.html

-----------

It's dangerous to design your life around getting into college, because the people you have to impress to get into college are not a very discerning audience. At most colleges, it's not the professors who decide whether you get in, but admissions officers, and they are nowhere near as smart. They're the NCOs of the intellectual world. They can't tell how smart you are. The mere existence of prep schools is proof of that.

Few parents would pay so much for their kids to go to a school that didn't improve their admissions prospects. Prep schools openly say this is one of their aims. But what that means, if you stop to think about it, is that they can hack the admissions process: that they can take the very same kid and make him seem a more appealing candidate than he would if he went to the local public school. [6]

[6] I don't mean to imply that the only function of prep schools is to trick admissions officers. They also generally provide a better education. But try this thought experiment: suppose prep schools supplied the same superior education but had a tiny (.001) negative effect on college admissions. How many parents would still send their kids to them?

It might also be argued that kids who went to prep schools, because they've learned more, are better college candidates. But this seems empirically false. What you learn in even the best high school is rounding error compared to what you learn in college. Public school kids arrive at college with a slight disadvantage, but they start to pull ahead in the sophomore year.

(I'm not saying public school kids are smarter than preppies, just that they are within any given college. That follows necessarily if you agree prep schools improve kids' admissions prospects.)

-----------

I'm going to go with "unfair advantage," but there are a lot of smart people there too.
10$, the developer in me is glad that other indie companies take such a move and don't participate in the race to the bottom of app pricings.
What this link has to do with the book?
You could also attack the VM:

http://www.cvedetails.com/vulnerability-list/vendor_id-93/pr...
The long murky road of the loan Indie writer
That's not skin color changing based on climate, that's just colonialism.
Reality disagrees with you good sir:

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=openvz
That is actually part of the problem -- until the patents run out for e-ink, we won't see these advanced applications.
Presumably this could be extended to include, say, average flight costs and other modes of transport so you could work out the an optimally fast and cheap way to travel around the world?
I have no plan at the moment.
"Not everyone has internet and not everyone has a credit card or debit card to buy online."

This seems to boil down to people who are removed from the modern economic system are unable to participate in the modern economic system.

Another way to look at it is we strongly segregate by income, so its quite possible retail will live for a little longer in poor urban areas, although it will be doomed in the 'burbs and is already kinda doomed in rural areas.

"Some people might even like holding something before buying it"

I admit you're partially correct, my short list of "fresh produce" probably needs clothing stores and plant nurseries/garden stores. And some crafts, when I go to the woodworking store I pick thru the aisles finding just the right piece of wood for the job. Fine art, hand made as opposed to mass produced posters or whatever, is probably something best purchased in person.
Wait so will this allow me to download music to my phone from my ahem cloud server?

edit: e.g. circumventing plugging my phone into my computer, launching itunes, etc.
Could you change the jmp into a nop, then xor every nth byte of the program with jmp xor nop, where n = whatever offset the jmp was at in the key? The result should be a valid decryption.
NB I haven't read the article; I try to keep it tech related at work.

NB I'm male, white, 31 years old, born poor, raised isolated, computers brought me out of poverty, and people--specifically women--brought me out of isolation.

Geeks are my original people, my first clan. I believed that The (dial up, text based) Internet was the great equalizer--that it was a medium which made it impossible to see race or sex or creed or weight or shape, that each entity could only be judge by its character, choice of moniker, and actions. The people you'd fall in love with were the ones that would create amazing things and share them... Remember?

Ok, I've set the stage, now I've gotta ask...

I gotta ask the people who say that women are different from men: are you trolling? Was there some great internet convention that I missed at which it was agreed by consensus to all act like idiots for a few years for some greater good?

Seriously, what am I missing?

You do know that women are people, right? Like, half the people, 3.5 billion women.

[Update: Thus far the responses have indicated that I probably haven't asked the right question. In my country, the question as to whether or not a given entity "is a person" is an important, well known, well discussed question and the answer always carries a great number of implications. Pardon me, I'll try to improve the question, but it's unlikely that I'll make any progress on the timescale of days. These things are hard.]

[Update: I should not have said "the people who say that men and women are different" when I meant to say "the people who use 'men and women are different' as a euphemism for something more insidious".]
I remember fravia and +orc back in the day... I think he passed away, but there are still archives online: http://www.woodmann.com/fravia/

I spent hours starring at softice & winice, and learning x86 asm
If sosh.com could expand to cities more quickly, they could easily take this market; however, I do think you have an edge in that the list is curated by the host. Either way, really cool product :)
Well, email is the primary threat distribution medium right now. So If a security engineer do not show scepticism about an unsigned, unencrypted email from an unverified source, I get picky.

Looking from probability perspective, yes you are right, this is a low threat vector.

Also I consider working root in a vm an issue because security 101 lesson 1 is "avoid privileged accounts as much as possible". Why not work in a unprivileged shell account and use sudo whenever needed? VMs are not bullet proof and they can leak memory, can make host machine unstable or even crash it. There are hardly any poc's out there but VM's may be exploited to switch context to host machine. Aside from these low probable threats, while working with unknown originated binaries, losing your whole work is a big probability. In this case it would not matter if you are inside a vm or not. VM's can be recovered but lost time can not be.
The technical grilling was the thing that the people with apparently-strong CVs weren't passing.

Your objection is a fair one, but having come into the company through the process I describe I am fond of how it let me (a) show that I could actually do the stuff I claimed to be able to (b) show my thought processes and how I would deal with having received a box in this condition. So I was quite pleased to do it as a candidate. Certainly less of a waste of time than a clashing interview.
Oh man, now you've triggered my OCD and I feel pedantic.

https://www.freebsdfoundation.org/
s/would/should/ :/