skysight-inc/HackerNews huggingface dataset:
The use of SHA-2-224 is kinda weird.

Based on a quick skim:

* no kdf on the password, just SHA-2-224(password)

* uses the same key and iv (which always starts as 0) in both directions

* uses CFB mode without a MAC, which has malleability issues (IIRC you can flip bits in a ciphertext block, and the same bits will be flipped in the plaintext, but the rest of the stream will be garbage).

* the authentication used is pretty sketchy (the key is fixed at 16 bytes and PW_LEN 15, so ljust shouldn't be doing anything):

if tmp_data[:len(self.key)].ljust(PW_LEN,'0') != self.key.ljust(PW_LEN, '0'):
log.msg("Remote unauthorized", logLevel=logging.INFO)

Reminds me of this: https://www.cs.auckland.ac.nz/~pgut001/pubs/linux_vpn.txt
It's easy to point to examples when we construe art (as she does here) as including all forms of creative writing or storytelling. Just one example is work by many literary scholars on the 18th century novel as helping create a new sense of interiority and private life (i.e., reading a novel alone replaced gathering around a fire to hear a story). Or, going back much further, Alexander the Great's obsession with the Iliad would surely count as significant for world history.
While she may speak with the authority of having written "The Dispossessed" (which is wonderfully good), her words seem to mostly be about Amazon.

In that regard I think her comments miss the mark ("corporate fatwa" being the biggest silliness).
I doubt it's intentional. Most common validation regexs that your average web dev would use tend to reject the + character.
I'm always curious what goes into a decision to sell at all in a situation like this.

$336 million raised, sold for $15 million

Is there actually a good reason to bother to do that?

Whatever the case, this is one that'll be referred to with the market bubble of 2012-2014 (along with perhaps Twitter's former $48 billion market cap, Zynga's $15b valuation, the insanity that surrounded Groupon and its $20b valuation, and so on).
The difference with entangled particles is that you produce them, don't look at them, and ship them out of the lab. Both particles are initially quantum mechanically identical, in a superposition state, which becomes definite only upon measurement.

The coin analogy supports a hidden variable theory, in that the measurement uncertainty isn't due to a fundamental limitation of nature but to the experimenter's lack of knowledge about the system. If that analogy was correct, one could simply send a piece of paper with the result of the measurement along with Alice OR Bob's "entangled" particle and make Alive OR Bob verify the assertion by taking a measurement.

But then, that's not entanglement. Coin flips obey classical probability laws. Quantum mechanical particles don't. Coin flip probabilities don't interfere.
Only if you want to be able to unstar from the app, with the app doing it via the API. I'd much rather give it read-only public access and not be able to unstar from it.
Did you know that the CIA was one of the early investors in 1Password?

Not seriously, but I'm just saying. If you are really concerned about security I have a hard time understanding this concept.
The last time I visited the States I forgot that I had a half eaten tuna sandwhch that I'd bought in the departure lounge in Bangkok. I was detained for an hour and threatened with fines and jail time! An sweet elderly woman from Hong Kong was sitting next to me because she had forgotten that she had the equivilant of three dollars in loose change in the bottom of her purse which she hadn't declared. She couldn't speak any english and customs didn't even try to find a translator, they kept shouting at her at high speed with his hand on the baton on his belt as if he was going to pull it out and strike her. She was in tears. I tried to translate the best I could in my broken Cantonese in between trying to figure out what they had against tuna sandwiches. It was almost surrealistic. Customs in Mainland China, who are not the most enduring bunch of people on their best day were still orders of magnitude more polite and civil than what I saw that day.

Last night I was in a bar in Phnom Penh and an American yelled at me because I didn't agree instantly that America was the greatest country on earth. I have nothing against America, I grew up there, and there are a lot of very decent kind people there. But I don't live there, and after a long string of incidents like the one with customs I can't honestly say that America is the greatest country on earth. There are places which are better and places that are much much worse. I've lived in both.

My guess is that the guy yelling at me had something against tuna sandwiches as well....
Again, I have to handle errors like:

You cannot save this document with extension “.hs” at the end of the name. The required extension is “.(null)”.
Perhaps the real root cause of upheaval such as pervasive discontent correlates with occurrences of revolutionary art. Perhaps the art then acts as an amplifier or accelerator of the discontent, creating a feedback loop. Clearly it helps when the "art" is easily distributed and widely understood (printing press, literacy).
And why not RHEL/CentOS and/or Fedora? I'm sure you have your reasons, but I find it odd you didn't even bother to mention it, when it's a rather large part of the market.
I was kind of confused when the article mentioned Tetris getting its first big break outside of the Soviet Union in 1990 at CES. That can't possibly be accurate. I mean, it came out in 1989 for both NES and Game Boy.
Hi, i am new at machine learning with some basics of the field. I would highly appreciate if you kindly explain in simplest term about the working principle of your paper.
In what way do they miss the mark? I have immense respect for both Ursula K. Le Guin's work and her ideology. Her comments seem pretty sensible to me.
Isn't entanglement, more like you take the coins to opposite ends of the universe, and then by flipping one and observing the result, you know what the result will be when the other one is flipped? The whole point of entanglement is that the state of the entangled particles isn't determined yet, until observed, which is not the case with the coin example.

http://en.wikipedia.org/wiki/Bell%27s_theorem
I would speculate that it's to at least salvage something. I read that their recent burn rate was as high as $14m / month and of course they are in no position to raise a further round.
I heard her make remarks in a similar vein at the Washington State Book Awards in 2006: http://jakeseliger.com/2006/10/28/le-guin-at-the-seattle-pub... .

Incidentally, though, I think this no longer true: "Developing written material to suit sales strategies in order to maximize corporate profit and advertising revenue is not quite the same thing as responsible book publishing or authorship."

It's now easier than ever for writers to answer to no one but readers; the Internet in general and Amazon in particular are tremendous open platforms that let writers decide what to publish without the need for a conventional publisher.

See further http://www.vox.com/2014/10/22/7016827/amazon-hachette-monopo... .
it was tested enough to ship in redhat enterprise linux 7.
I wrote up a blog post a couple of months ago, full of pointers to useful resources for getting started with Open Source. Instead of repeating what I said there, I'll just share the link:

http://fogbeam.blogspot.com/2014/08/starting-points-for-lear...

I think you'll find (some|a lot|all) of that stuff useful.
I think you and many other are misunderstanding the point of these articles.

They are NOT about designing user interfaces. They are NOT about how to architect some infrastructure.

They are about how to paint these things so they look pretty when you present them to people.
Lavish Perks Spawn New Job Category
I'm pretty sure it's Greg KH who's running kdbus these days [0]. At least, he's the one who submitted the patch to lkml [1].

[0] https://github.com/gregkh/kdbus
[1] https://lkml.org/lkml/2014/10/29/854
Wow. First time my mouse lagged on a webpage. My computer is avareage or above average.

I closed the page immediately as it is unusable.
My impression is that a very small number of people (core maintainers) actually drive adoption of technologies - persuade them & you have altered the cruise ship.

For me, I plan to stay as far away from systemd as I can; it's an abomination of software design.
Well, that's not surprising, because you clearly haven't even read the documentation. Or you'd know how to spell it.
Most people aren't worried about being secure from the CIA, we're worried about being secure from random criminals at the airport or the cafe. If the CIA wants you, they can just kidnap you and lock you away anyway.
You mean this Kay Sievers? http://www.theregister.co.uk/2014/04/05/torvalds_sievers_dus... - It's basically the buddy of Lennart at Red Hat - at least that is my impression from far away..

systemd may be nice but it's coming from Redhat and cgroups are changed due to because systemd folks wanted it that way as far as I followed that debate...
>The last frontier after that is package format convergence, and Lennart has said repeatedly he intends to use the systemd monoculture to push a common package format, which is a really good thing for me.

Great, so now instead of adopting a package system system with a solid theoretical foundation like Nix or guix, we're going to dump all dependencies into fat binaries and more or less end up with the solution the NeXT people came up with in the 90s. Such progress.

EDIT:

Not to mention that Lennart's proposed package system[1] would depend on btrfs-specific features, adding even more code coupling.

[1]http://0pointer.net/blog/revisiting-how-we-put-together-linu...
I think a big factor to this is the mindset of the culture - if it's a "We're in this together" culture, I'm sure the CEO wouldn't mind.

The question then becomes, is it a secretary/manager/ceo complaining about things 'not being fair' or is it simply that no one was ever asked and IT ended up making a decision on their own?
Sometimes decisions left unspoken end up causing a kind of solidification by accident.

I find the biggest cause is that IT ends up being silo'd off (or being an MSP/corporate branch) so they aren't in touch with the workplace's culture and assume its one of petty ego.

Another factor can be that many of these decisions are looked through the eyes of the company's stock and that causes a sort of myopia regarding short-term costs vs long term gain.

Both of these end up being nasty feedback cycles and can be impossible to break once it becomes status quo.
Well, in fairness, I did have a RH chap tell me to my face several weeks ago that Linux needs to replicate the Windows registry model and stop using the /etc text file approach. So I have a certain sympathy for the idea of Red Hat conspiracy (what is a company anyway but a conspiracy to produce work & products for hire?).
> The fact that the article says that Solaris is the 'best of breed stack right now'

That well-known paragon of SysV systems 8)
Ask HN: What do your teams look like?
For example, my workplace (ecommerce) uses product teams with this structure:

* 2 developers

* 1 quality assurance

* 1 business analyst

* 1 project manager

* 1 product manager

What's your current structure and what would you change if you could?
I've cancelled many service signups due to private repo access, too.
> ...apparently when Gentoo developers tried integrating OpenRC they ran into too many bugs.

You are certainly no expert on this.

I've been using Gentoo since 1.4... back in 2003, maybe 2004. I vaguely remember when Stable Gentoo was switched to OpenRC, which happened in mid 2011. Unstable Gentoo (which I ran -and still run- on my laptop) switched to OpenRC much earlier [but that date I cannot remember].

What the first topic in the blog post that you linked to is really saying is:

"We Gnome developers still claim that recent Gnomes don't require systemd. We stand by this assertion. Recent Gnomes only require init and system management daemons that behave exactly like systemd in pretty much every aspect; they don't actually require you to have systemd installed.

It's a pity that developers don't want to spend time re-working their init and system management software to be systemd clones. If they did, then the world would finally understand why we Gnome developers continue to assert that Gnome doesn't require systemd."
Video is up: https://www.youtube.com/watch?v=Et9Nf-rsALk
As a followup, two days later, Adam Corolla's site only has ~30,000 bits tipped. Around $10. For 2 days as a sitewide (micro)button banner ad.
After a long enough period of time, this can solidify as the more frustrated developers leave and all you have left are developers who are happy slogging through inefficient processes.

Anthropology of corporate cultures is fascinating: http://www.daedtech.com/how-developers-stop-learning-rise-of...
"So you're the little woman who wrote the book that started this great war."

Supposedly Abraham Lincoln said this to Harriet Beecher Stowe in reference to her book, Uncle Tom's Cabin, which is often credited for changing the North's attitude towards slavery.
I am very happy with my Gentoo system and OpenRC - it works extremely well. Modulo jokes about "burn-in test OS". :)
I'll give them a pass if they end up using an older product that gets turned from an LGPL into an AGPL license so that the developer can change it from a free (speech+beer) into a free (speech) version.
No idea about this specific case, but the assumption of liabilities may or may not be involved. There are also some ethical considerations about keeping jobs in a going concern (however minimal), and some PR considerations about liquidation, etc. It wouldn't be out of order for a company with $300MM in funraising to have $15mm in misc. liabilities.
It would be nice to at least have the option of not providing access to public repos. Actually, I suspect most people wouldn't mind not being able to manage private starred repos so perhaps all it takes is a simple change of the permissions being asked for.

I understand there are some R/W issues with the GH permission model, but I don't think there's any problems with separating access to public and private repos.
From what I've read, the rub is that you don't know which side of the coin the current one is until you observe it, and only at the exact time of observation does the other coin assume the other state.

Apparently, the point at which you observe the one coin is called the collapse of the wave function, and we have ways of directly measuring that the collapse doesn't happen until one of the particles is observed. (But it's never been too clear to me how that's possible... if observing a particle collapses the wave function, how do we observe when the collapse happens, without first observing the particle?)
The "art of words" has certainly effected huge social change. This is self-evident if you include political commentary and philosophy (Common Sense, Wealth of Nations, Federalist Papers, Communist Manifesto, etc.). If you restrict it to fiction, a common example is 1906 novel The Jungle by Upton Sinclair.

If you're talking about art like paintings, plays, music, etc., I don't have any examples off the top of my head. However, I think it's a truism that art is often the first/only safe place to criticize the powerful. I don't know if that's really art effecting change as much as art giving a voice to underlying forces for change.
> Unix won because the only commercially viable and well supported alternative was Windows,

Unix didn't beat Windows. Unix beat VMS and LISP machines and AS/400 and various other minicomputer operating systems. In fact, if we're talking about mainline commercial Unixes, NT started beating the shit out of them in the late 90s - if Unix lovers hadn't had the free ixen (Linux, BSDs) to fall back on it would be a sad state of affairs indeed.
I appreciate the response, but I don't follow the argument.

>All of these incompatible forks need to down-integrate the change and work around the little tweaks they've added. You have a mess.

Is that really better than having a mess without any demarcation of the software? Either way people are going to make a change. Your way involves no disincentive to making quick fix that just your team needs. Modularized codebases means that before submitting that PR or forking, you're forced to consider how this will affect everyone who uses the library.

I understand your point about modularizing codebases causing more friction between teams. That's quite insightful and I haven't considered that. However, I think that gets down to a cultural issue of what do you value more, clean code that is easier to comprehend, or fostering geniality between teams.
Then contact the people that run cargo.io and see if they are sympathetic and what options exist in the circumstances. Setting a sane standard of "no, you can't fuck up everybody that has depended on your public package" is a good thing.
As someone who's never personally raised any VC, but has been in the startup space for a while...I thought they did a really good job on making things easily to understand as an introduction to VC. I also liked their insights into the value of advisors, investors, and board members, and particularly, what requests are considered legitimate/illegitimate.

You can check out my top quotes from the lecture summarized here: https://medium.com/@RajenSanghvi/59-quotes-from-kirsty-natho...
Awesomeness and Usefulness for Web Developers #12
I recently made a decision to shutdown the startup I co-founded 3 years ago. Brutal. Now, I am catching my breath to figure out what I want to do next. You?
The department has no chance to avoid paying that $100, but they do have a chance to avoid paying the $50.
If there were a couple of competing alternatives to manage your cgroups, sysadmins might not be so peeved. We're used to installing an alternative syslog daemon or cron daemon rather easily. But it's systemd or the highway, in the 3 or 4 most popular distros.

About udev, Linus has had multiple serious complaints about udev maintainership since GregKH passed it to Kay. Don't you recall the async firmware loading issue...
> People who aren't extremely familiar with how the Linux init system works and whose job doesn't include keeping the servers stable don't see why the neckbeards are up in arms about systemd

Hi, I'm a sysadmin who's fed up with neckbeards (most of who apparently don't know much and refuse to learn) claiming to speak for all sysadmins on this topic.

> large risk and little reward.

It's four years old, and claiming "large risk and little reward" is like listening to someone claim that moving from sendmail to postfix would be a disaster.
No. Rebuilding the entire userspace set of services to be a systemd cluster is not nice. It's essentially redoing the traditional Linux approach, which has worked relatively well for years. There are a number of things that could be split out and made more modular - c.f., uselessd for a more in-depth analysis.

To be clear, I'm not claiming that SysV init is The Best Way. Shell scripts are not the Happiest Place. But I am claiming that systemd is a crummy and overbearing replacement.
CEO “It’s not that hard to build a $100 million revenue e-commerce business, but how do you scale ... "

er, yep that's not good.
Tangentially, given how often supporters of Assange have mentioned or hypothesized how "obvious" it is that political pressure was brought to bear on these women to make the accusations -

1) how is it that there was sufficient pressure to make that happen, but now there's (supposedly) not - see downstream comment about the BBC vs unreferenced quotes; and
2) I wonder how likely it is that supporters of Assange might have brought their own pressure to bear to attempt to dissuade these women to drop charges, regardless of merit?
Sculptor Offers Another Clue in 24-Year-Old Mystery at C.I.A
The Security of Cryptocurrency Protocols
Kudos for choosing simplicity where possible.

Developers who really like a name could always add something such as using "moz-foo" instead of just "foo".

I've been surprised with how few name collision problems I've had on Python's Pypi. If "z-foo" module is more usable than an unmaintained "foo" module, everybody recommends and uses "z-foo" without a second thought.
Here's a though: try remembering you don't speak for "sysadmins", you speak for yourself.
I don't think a company like Google will tolerate the hyperbuggy software of xamarin, xamarin just pushes new features with ever fixing anything.
Today in Mobile: Samsung, Jolla Tab and RelativeWave
One thing that needs further investigation is the degree to which distros adopted systemd because they'd rather not maintain patches for udev, logind, KDE, GNOME, Wayland, etc. to keep them decoupled.

I have a hunch that for !RedHat, the motivation to switch comes just as much from not having to fight upstream (if not more so) than from systemd's relative merits. After all, there are plenty of different init systems, but only one of them is coupled to the rest of userspace to a significant degree.

Also, I wouldn't write off Solaris zones :) They're pretty powerful--in some ways, more so than LXC is today (syscall translation comes to mind).
oh, it's amazing, isn't it. really excellent TV. i remember when i watched it a couple of years ago i was blown away with how watchable it was, considering how old it is. i was kind of expecting to be disappointed.
I think he speaks for sysadmins. If you are using cgroups at the moment you can write scripts for them. It's a mounted filesystem. The change forces you to use systemd for cgroups as only systemd is able to write to cgroups. The argument is: If you don't like systemd implement an alternative that does this for you. Some for kdbus and udev, netlink...

The article is right - it's not Linux as we know it anymore for better or worse.
Got a link to this consumer OS whose implementation is mathematically proven secure?
my guess is that you're looking at general "light boxes" (for photo shoots). Look on amazon for "happy lamps".

http://www.amazon.com/Verilux-VT01WW1-HappyLight-Compact-Ene...
> Freebsd has jails which is a much more baked technology and implementation than LXC

Disagree!

1. FreeBSD has nothing like cgroups or namespaces. You can't apply cpu or memory limits to a whole jail, only individual processes in that jail.

2. it is early days for virtual network cards and ethernet bridging and jails: you have to recompile kernel to add VIMAGE.
http://thorstenball.com/blog/2014/11/20/unicorn-unix-magic-t...

is also a current story on HN.

Just an example of how powerful that simple 70's Unix is. Allows features that appear "magical" to thorsten, anyway.

Windows? Wasn't really even an option... until 20 years later. And, of course, Unix really isn't that good, either. But, before you ignore it, please come to feature parity, at least.
Counting gross fares as revenue is about as honest as Groupon counting customer receipts as revenue. We all know how that worked out.
> (e.g. faster boot times and removal of the nasty nest of shell scripts)

OpenRC does this quite nicely. Gentoo has been using it as the default init since at least 2011.
All the more comic, given that they have so many employees now it's not like you're going to cash out in any IPO.

"Why'd you go work for Uber?"

"Oh, they make a ton of money."

"Do you?"

"Well, I mean, it's, uh..."
"I'm young. I'm healthy. Why do I need a job for?" -Raising Arizona. But for real. Get training to get a tech job in the medical field.
No, minimum wage is based in where work is performed. There was an NPR report not long ago about a shopping mall that sits in two towns -- there is a significant wage delta in each side of the mall!