skysight-inc/HackerNews huggingface dataset:
This article is predicated on the assumption that an attacker goes from zero access to full root within 10 seconds. While there are vectors which have allowed such rapid escalation, they're less common now than historically thanks to Linux's security looking more like an onion rather than just a binary state (root or user).

Also the author picks apart a quote, but if the assumptions in the previous paragraph is taken at face value (that an attack can have sup-10 second root with automated attacks on the logs), then even remote logging isn't a secure vector as they often aren't sent instantly so an attacker could intercept or alter them.

However I suggest that such a scenario is uncommon. Most attackers have to start outside and fight their way in which will generate plenty of logs for either external logging or FSS.

> It seems to me that systemd now also wants to play the role as some crude intrusion detection system.

FSS isn't a "intrusion detection system." It is an attempt to make logs immutable, nothing more. The nice thing about FSS is that it can be coupled with an actual IDS and the IDS can look for attempts at altering the FSS.

> If the systemd author would just have implemented sending log events to an external log server, that would have been way more useful security-wise, I think.

It isn't a binary choice. They can implement FSS and remote logging. Also it is open source so you yourself can contribute external logging.
Will Microsoft Open Source Internet Explorer?
Will Microsoft open source Internet Explorer ?
You've never met people whose stated opinion did not match their behavior? I find that rather normal.
This is just a matter of scale. Sure you might be a "10x" developer, and such a developer does provide a tremendous amount of value to an organization. But if you are such an effective manager as to raise the value of a team of engineers significantly, then you are going to generally provide more value to the company than a single rockstar engineer. Of course there are outliers (IE Carmack) but generally skilled technical management scales better than skilled individual technical talent.
Yup. A lot of businesses today will try to avoid going responsive thinking that they are not a technology company. Many media companies will bring up that excuse. But the reality is that it's far cheaper and strategically better.
Are we still confused about OS vs window manager?
Wouldn't be a bad idea.
> Your post is self-contradicting. You tell people not to use PC-BSD if they "want to know how stuff works". You then complain that to get a desktop working on plain old FreeBSD... you have to actually configure it... and know how it works.

Actually ... you're absolutely right. Sorry about that.

I guess a better way of putting it is that Debian is the upstream, and FreeBSD is the upstream, and that's what I was comparing. I'd personally feel a bit uneasy using PC-BSD, like I do with Ubuntu. But that's my hang up. It is a trade-off though. Things like the consolekit.pkla file I'd rather have done for me (there's only one way it should ever be done), things like font rendering I'm happy to know how to do myself now (in case I want to tweak things.)

But yes, for anyone looking to try FreeBSD on the desktop, definitely look into PC-BSD, as it may solve a lot of the complexities I discussed.
This is a really cool idea!

I wish that they had spent a little more time examining non-turbulent images; really, once the analysis software is written, I'd expect to see all of van Gogh's work piped through it, and a handful of other paintings, both impressionist and not, all graded on turbulence.

I'd like to see an actual numerical comparison to the gaussians, rather than letting us guess at "yeah, that one looks pretty close".

One non-turbulent image for comparison (classified as non-turbulent "as it can be seen") is not really enough.

And there's no link to the code! When are researchers going to understand that they haven't exposed their process to review until they've given reviewers access to the code?
There's a big, very important difference - the quantum state can display non-classical correlations beyond what the classical coin model can describe.

We can see this by considering two electrons in an entangled spin state - say, one is spin up, and the other is spin down, but the entangled state means you don't know which is which, only that Alice and Bob will get consistent answers when they measure the spin in the vertical direction. At this point, everything maps fine to the two-half-coins idea, all we know is that they have opposite spins.

What's different in the quantum case is that Alice and Bob could instead decide to measure the spin in the left/right direction. Following the rules of quantum mechanics, a given spin up or down state has an undetermined spin left/right state, so when you measure the spin in the left/right direction it has exactly 50% chance of being each one.

If the original states were really just like the coin halves, this new measurement would be simply uncorrelated between Alice and Bob - they'd start with different states (up or down), but the left/right measurement would destroy that information and they'd both get a random answer because the individual elecrons end up with an individually random left/right spin direction.

The reality is actually different; if we do the measurement maths on the quantum state rather than assuming it's predetermined like the coins, it turns out the left/right spin is still entangled. That means that when Alice and Bob measure the spin in the left/right direction, they'll always find that one of them gets left and the other gets right. This would not be possible if the quantum states were predetermined like the coins.

So, the coins analogy is not a bad way to understand some of the basics of what you expect, but it absolutely is not a fully accurate description of what's going on. Maybe you already knew that, but I wanted to be clear that there's very much more to entanglement, because this is the source of several common misconceptions.

(Of course quantum teleportation is a further thing again, but the extra non-classical mathematics of entanglement are still important, it's not just coin halves.)
Get ready for tommorow's amazing race!.
you can also use it to seal a vagina shut?
Thank you, I've been trying to figure out what the actual problem was for a while and was not having any luck.

For those who haven't experienced this: it's really painful. Your entire desktop becomes completely unresponsive for 5-10 full seconds while a picture very slowly loads.
Coincidently websites already bother you to install their apps if you use a mobile device to browse the web.
> It quotes the author of systemd to prove that the claim is made, but it does not give a link or say from where the quote was taken (so we don’t know the context or age of it, i.e. we don’t know it is still relevant).

I'm critical of the article also, but they in fact did. If you click the "Forward Secure Sealing (FSS)" it takes you to a G+ page with the quote on it from Lennart Poettering on Aug 20, 2012.
I really don't think GAE is comparable to AWS in that way. GAE offers "platform as a service," where the actual infrastructure (e.g. configuring actual servers, virtual or otherwise) is abstracted away from you as a customer. A more fair comparison would be Google Compute Engine, which is an "infrastructure as a service" product like AWS.
> When Renshaw peddled his altitude-suicide theory around the mountain states in 2008, he faced prickly reception. Renshaw heard that Utah's governor at the time, Jon Huntsman, was disgusted that the state would fund the anti-Utah research. Huntsman's staff did not respond to a request for comment.

You've got to be kidding me. Whether or not Renshaw's theory pans out, it's "disgusting" to me that a governor would hide research just because it interferes with the economy, rather than considering the well-being of his state's inhabitants.

If I was a politician and there was research indicating something was (or might be) causing medical problems, I would increase funding to figure out what's going on and look for solutions. The laws of physics don't respect political correctness; you can't just shove them under the rug if it hurts your state's tourism.
Great article. You can choose MVP that is ideal for you.
> Low-oxygen air messes up serotonin / dopamine levels

Phrased this way, I'm pretty sure—anecdotally—that at least the converse of that is true, so I would certainly believe a correlation.

I tend to get migraines when in rooms with low-quality/"stuffy" (i.e. low-oxygen, high CO2) air, for example cars with the windows up and vents off. Oddly, deep breathing or purposefully hyperventilating does nothing to alleviate this, so it's probably more a "judgement" by my brain of the air quality than any physiological necessity.

It used to happen only rarely, but when I began taking dopamine agonists, it now happens far more often. It also doesn't seem to happen if I'm dozing off in a room that happens to be stuffy. So, it feels like my brain has a bar for air-quality, below which it will get rather upset at me—and that that bar goes higher the more awake+stimulated it is.

I could believe, if this is a Regular Human Thing, that some bio-feedback mechanism on top of this would then lead people who live in chronically low-air-quality environments to produce fewer of the neurotransmitters that put them in awake+stimulated states, and more of the ones that put them in dreary/dozing/hibernating states.
Is there a human vs bot comparison?
This was added in 2012.
I don't know why you presume all these things but no, that's not how it was or how I feel.
The language covering these "entrepreneurs" is pretty broad. No doubt this will end up being a euphemism for cheap labor.
The worst part of FreeBSD is the license.
Did you also find that when searching for "underage lesbian sluts"?
I knew about Guided Access, but I forgot it allowed you to disable specific regions of the screen. Thanks for the reminder.
I'm having a hard time finding information if it's possible to deploy vNext projects to hosted IIS. Can anyone help with that?
Although this one is not yet on the market, here's a summary of some competing products: http://productresearchgear.com/wp-content/uploads/PRgRatings...

A couple are based on minerals (zeolite and kaolin), and intriguingly, a couple are based on chitosan (the material in shellfish and insect exoskeletons). In general, the consensus is that modern hemostatic compounds are amazing at stopping blood flow, but limited in use to life-threatening situations due to the difficulty of removing from the wound after treatment.

It will be interesting to see how this new one compares.
developing drivers is expensive. it makes sense to take a kernel and develop a in-house drivers for a more or less fixed set of hardware. less so to test thousands of apps on thousands possible hw configurations for very limited customer base. it's a ROI thing.
Docker has a ton of momentum right now, which should play into this comparison (as it doesn't run on FreeBSD).
> The problem in UO was that there were far too many wolves in relation to the number of sheep and things got out of hand

Yup, that's unfortunate but I still prefer that to games where basically everyone is sheep. Also, I had sheep characters as well as wolves where I was the victim so I don't think it was as black and white.
That's true. You could standardise on JSON with comments removed by JSMin... The underlying data would still be standard.
Qt 5/QML is implemented as an OpenGL-based scene graph and is tightly integrated with OpenGL.
It always seemed to me that habitable caves would be fairly scarce.
People have been riding skateboards/longboards without brakes for many years now. Plan "B" is often a good set of pads.

http://www.youtube.com/watch?v=b9yL5usLFgY
You mean the article or the feature?
The article is dated by 22/11/2014.
The feature may have been added a few months/years ago, but the point still stands about systemd showing signs of feature creep. Note also the DNS resolver issue[0]

[0] - http://seclists.org/oss-sec/2014/q4/592
Made a tracking pixel application in about 90 mins. Thoughts?
Ah interesting, thanks for the pointer.

https://freedesktop.org/patch/23215/
I usually find it frustrating when a phone site doesn't let me see what the desktop site does. If there's content only for one form-factor, load it with AJAX.
Silicon Valley Could Offer a Public Bus Commute That's Quicker Than Driving
> These Just Worked for me. My only real annoyance with Xfce is that it's unresponsive to mouse clicks for the first few seconds after starting.

Under a regular user account? I even added my user to wheel and operator, and no go. I've helped a few people on forums.freebsd.org set up this pkla file, too.

> There are quarterly port branches now to give people more of a choice

The quarterly branches are definitely a step in the right direction, but still not really what I want. I want patches for Heartbleed and Shellshock, but without any software version number bumps. I know their team is much smaller so it's just not feasible, but it's definitely something that would be greatly appreciated.

> I just wish it were more actively maintained and kept at least vaguely in-sync with upstream.

Definitely. Is OpenBSD's MP-safe yet? I believe that's partly related to why FreeBSD's has ALTQ disabled (but it's hard to find good information on why that choice was made.)
Totally agree with you!

The problem though is getting rid of the desktop would not go down well with the majority. you'd need a way of proving that you can still make multi tasking painless. Currently a desktop environment means I can resize and arrange windows to allow me to work with multiple apps.

One idea is have some sort intelligent system for deciding how much screen real estate is needed for each app and how they can be grouped and arranged into sensible workspaces.
The problem with these products is in 3-4 years it will not be sold anymore.
That's an awesome anecdote. I remember a guy with low ping wiping out my entire guild. We were running around getting slaughtered with our guild leader shouting to stay calm and regroup but it was a massacre. There were also some really famous warriors who could turn a battle later when factions were introduced (the game had already lost most of the fun but faction war was a fun feature).
The default shell in freebsd is probably still sh, which does not have tab completion

/bin/sh in 10.x has tab completion.
I saw something on Facebook being shared about this...they took a piece of meat and ran a tube of blood through it, then applied this gel and the bleeding stopped within seconds. It was like watching an infomercial, except this time it's real. Although it was a video, the title of it was in Japanese and I can't find it anymore. :(
It was not stated that that was the source of the quote, and the link was not given anywhere near the quote, but I guess you are right that there was a link…

So this quote is from Aug 20, 2012. Has Lennart’s opinion of this changed during the more than two years that have passed since? Does the documentation of systemd make this guarantee? Did the documentation ever make the claim that FSS is an complete replacement for remote logging?

Now that I think about it, and have the context of the quote, I think that I (and the blog post author) maybe misunderstood Lennart. FSS is not a complete replacement for remote logging, but: Among other things, remote logging used to be the only way to get immutable logs. If this was your only reason for using remote logging, then FSS is a viable replacement.

EDIT: Now that I can actually read what Andrew Wyatt wrote and how he wrote it, I can see why he was blocked. He was condescending and vague on details, and (according to Lennart) Andrew had a habit of doing that. The comments to the blog post actually cover what I wrote in my previous paragraph, so there is no excuse to dig this up now, two years later, and deliberately misunderstand it in order to gain points with the systemd haters. This is FUD.
cp --reflink
You can also install and use the Linux version of Oracle Java on FreeBSD. The FreeBSD Foundation and Oracle also started a project to build/distribute binary packages of OpenJDK for FreeBSD this year.
> OpenBSD is about very gradual evolution, not revolution.

To make a concrete example, look at ifconfig and ip (from iproute2 I guess?) on Linux. ifconfig was used to be the one tool to rule them all, everybody knew it, everybody used it. At some point somebody decided they need a new tool, so now there are two, and the other is said to be deprecated. The fun thing is that ifconfig still mostly works, and you find lots of documentation/tutorials/wikis telling you to use it. But at some point you might bump into some really weird issue which turns out to be because the tool you're using is.. well, deprecated. I did have such a problem myself (related to IPv6, years ago) and it wasn't much fun, because the tool looked like it's got support for the thing I was trying to do, but it would just silently and weirdly fail...

In the OpenBSD land, a network interface is a network interface. You use ifconfig. IPv6 or not. Wireless or not. The same tool everybody knew has been evolved to support the new stuff. The developers are careful about needlessly changing the user facing part of a tool in a way that would require him to re-learn it or another tool. Of course, sometimes changes are inevitable, and these changes are usually documented in the upgrade guide (and the page which documents changes to the -current branch). So there are few surprises.

Sometimes the underlying tool might change entirely to another implementation, yet the user facing parts are made for most part finger-compatible with the old tool. For example, mandoc(1) has replaced historical tools like man(1), apropos(1), etc. And sendmail has been replaced by smtpd, but smtpd still provides newaliases and makemap.

So they don't push shiny new poorly tested tools and tell everyone to relearn everything all the time because shiny new features (and the old tool was cranky and nobody wanted to fix it).
Yes. Here's a video[0] of the winner in 2014 StarCraft AI Competition against one of the better human player.

More can be found at their official website[1] under Media/Files tab.

[0] https://www.youtube.com/watch?v=DQI1wyRmeUQ

[1] http://webdocs.cs.ualberta.ca/~cdavid/starcraftaicomp/
My advice is to ignore comments that don't explicitly mention Texas. How enforcable a non-compete is locale specific. A quick Google search for something like "Texas non compete enforceable" indicates that they are partially enforcable, where-as in California they basically are not, and in Massachusetts the current situation is murky due to the recently passed non-compete reform bill.

If you need specifics, and don't care to spend a few days reading up on the current situation in Texas with regards to non-compete law, then talk to someone, whos job it is to know specifics on non-compete law (commonly called lawyers).
Facebook's surprise on developer console
One of my favorite employment law blogs - "Screw You Guys, I'm Going Home" (written by a lawyer) - has a number of articles on NCAs:

http://employeeatty.blogspot.com/search/label/noncompete%20a...

Reading this will give you a good idea of how complex these issues they are, how much the law varies from state to state, etc. - all good reasons to follow the advice of all the others in this thread who have recommended consulting a lawyer (who specializes in Texas employment law).
How stable is FreeBSD on AWS

Very. You're more likely to run into problems running FreeBSD on physical hardware, in fact, because (a) a wider range of hardware means more potentially weird drivers, and (b) Amazon does a better job of weeding out flaky hardware than Joe's Dedicated Server Shop.
Right, but at least as far as I know, currently a window manager trying to do compositing in Linux has to fight with X11 to achieve that, because it was not really designed to support that use case. Which is why Wayland is getting traction I guess.
QuickJump – new chrome extension for productive web developers
Indeed, I didn't move Tarsnap over to FreeBSD/EC2 for a couple of years because the platform wasn't stable yet. But it definitely is stable now.
... in 16 adults.
Do you think the choice to compare FreeBSD to a particular distro, Debian -- indicates that the difference between FreeBSD and Debian is about the same as between Debian and other distros? Is FreeBSD essentially just like another distr (even though it's actually a separate OS, it's similar enough?)
I think that explains why languages like JavaScript will have many functions that return Promises and Go doesn't need that kind of API. Often in JavaScript, there will only be one reader for the result of a function call, but you'll use a Promise anyway since there are no threads.

But there are cases where you really want multiple readers. For example, on a cache miss, you want a single goroutine to do the work to fill the cache, but there may be multiple goroutines waiting on the result. In this case it might seem natural to model the cache internally as a map from keys to futures, even if it's not exposed?
They are both free *nix, so they are very similar. BSD prefers the simpler versions of many of the common command line tools where the Linuxes prefer the GNU tools which tend to have more features. There will also be other small tech differences that will come into play in special cases, like ZFS being nice for fileservers.

Other than the basic tech there are 2 important differences. First is the that there is one FreeBSD but there are hundreds of distributions of Linux. And among them you'll find much larger differences than between FreeBSD and the popular Linux dists.

The other big difference is simply derived from the fact that Linux is more popular. It will tend to have better drivers, have more bugs worked out of the software, etc., just like any other free software out there. FreeBSDs conservative nature towards its core software more than mitigates this, but for all the peripheral software it will matter.
There's also a large repository of software that isn't switching. "Won" implies the war is over; that Qt has earned a monopoly on Linux (or at least the de facto standard) but that's not the case here. At least not yet, maybe in a few years - though I can't see that either personally.

Maybe I'm just being pedantic, but "won" seems a little too optimistic. Particularly on a platform that's famed for it choice / fragmentation (depending on which side of the fence you sit hehe).
To those downvoting: it's a reference to a META tag that Olin put in the HTML:

<meta name="keywords" content="Scheme, programming language, list processing, SRFI, underage lesbian sluts">
The NC GOP legislated against recognizing studies on sea level rise. http://www.reuters.com/article/2012/07/03/us-usa-northcaroli...
I personally love Inbox on my phone, but hate it on my laptop. I don't like how everything is so spaced out and personally don't find it easy on the eyes or matching my workflow at all. In fact, I've been trying to do as much of my email-related tasks as possible on my phone these past three weeks because of it, because Inbox itself is fantastic.