skysight-inc/HackerNews huggingface dataset:
Let's be real here. If Docker was 'just' an open source project, it would move at 50% of the pace and security issues like this would still not be solved. It's crazy to assume that if it were an open source project it would somehow get the core right faster or not expand on its ambitions.

If it were just an open source project, it could focus on nothing, because Solomon would be working on something else that would actually pay his bills.

It's just a young project with a huge interaction surface, they're trying to please a lot of people in a very small amount of time. No reason to panic, just wait for it to get finished.

Also, Docker is an extracted product just like Rails is, and it's not really a framework so I don't think DHH's argument really applies here.
Which, if you put the pieces together, clarifies that the purpose of new Docker features is to lasso in fragmentation and make sure you're going to buy their vCenter/vSphere rather than any alternative.

This also clarifies why things like Rocket are the biggest existential threat facing Docker Inc., and why the mud is being slung.
Rather than the source of the light shining directly into your eyes (iPad), in the Kindle paperwhite the light is directed onto the page, where it is diffused.

Check out the "light guide" description here:

http://www.nytimes.com/interactive/2012/12/26/technology/lig...
Is Sony Hack Really 'The Worst' in U.S. History, as CEO Claims?
Consider talking to the company about it. If they're doing well, (and aren't concerned you might leave) they might be interested in buying the options back.
What's the benefit of injecting JavaScript into the page when it comes to scraping?
woot! No way! You can tweet like so '[deeeedghgo---o---o--] #MMODM' from your Twitter account and still be able to play it!
I would like to read this book but the O'Reilly website eBook + Print combo deal is not available until next year.. Does anyone know how I can order both and get the early access ebook now and then the print book when it's ready?
Reminds me of debian and ubuntu's requirement that apt-get is run under root. There is simple ways to get apt-get to run on non-root, but it require giving permission to non-root account to modify important package signature files. But, they're not as bad as docker. It's becoming norm for these US/Silicon companies to give very bad integrity on data.
Good idea! Thanks, it'll feel more intuitive.
Very good article. I must admit, the more I read about Thiel, the less I like him.

It's unclear to me why they think that SV is more meritocratic than anything else. Sports still seems much more meritocratic than SV. Any industry that depends so much on getting funding hardly seems like it would be especially meritocratic -- at least at first blush.
I noticed that they didn't specify a limit on the payload mass too.

Wikipedia says the entire family of Angara are to launch between "3,800 and 24,500 kg into low Earth orbit". There isn't a definite listing of the GEO orbit capacity, but we know it's going to be a fraction of the mass to LEO.

It seems the Falcon Heavy will have more capacity to GTO.
I completely agree. My wife and I would love and absolutely use something like this. If the service is passively checking for lower rates then I should only pay if it is successful at doing so.
Show HN: Tinder for Baby Names – Babyname App
Read your purchase agreement, employment contract, articles of incorporation, buy/sell agreement etc. It is common for the circumstances for the transfer of shares to be established to handle this sort of situation because founders don't want just anyone owning shares. If something is unclear, consult an attorney.

One common way of handling these situations is for the founders or the company or other employees to purchase the shares. A loan with the shares as collateral is another possibility.

Keep in mind that selling shares may be viewed as a lack of faith in the company [likewise if the founders are not interested in reacquiring your shares.

Good luck.
No I bet there are 3 Sony hacks in the top 5!!!!
IMHO, that seems like a bad idea. Two thoughts (these are only very overly generalized opinions, biology is a little bit complicated):

1) You might not get them all, and the ones that survive might transfer the traits of antibiotic survival and pathogenic-ability (if present) to the new population.

2) You would need to ensure that your hyper-specific diet contains the right mixture of microbes, say, you would need to avoid irradiated food, and a bunch of other things. "Bad microbes" coming into an empty gut seems to me like a bad thing.
understood and agree... just thought I would ask the crew of folks on HN since there's gotta be channels all these smart folks hang out on!
Front page of NYT? Must be a slow news day...
Interesting collection of stories, though.
I think a good governance model comes from Mozilla; where you have a Org with the open source core binded to it, which owns a Corp that are free to do some monetization efforts to help the Org to be financially healthy and keep moving.

The core managed at the Org will have less marketing bubble-words, lies and hype, so we keep trusting their goals and mission, while the corp can do whatever they want to achieve their distinct goals.
my firefox (latest beta) says :

"The buffer passed to decodeAudioData contains invalid content which cannot be decoded successfully"

and produces no sound on win 7 64 bit. chrome works flawlessly.
I've not suggested there should be any abundance of rights - merely that the direction of history points towards being more inclusive of other conscious species in our definition of "who deserves humane treatment".

As I say in my article - this used to apply only to male citizens... then it grew to include people at the bottom of the social ladder (slaves), people of different colours, religions, etc, and progressively more and more different people. It's only natural that this progression will continue and include entities who are not human.

If we ever meet an extra-terrestrial intelligence, I sure hope they have followed this progress to its natural conclusion, and include all life in their circle of "things deserving of respect".
Haha amen to #8
You don't have to - I just played through a game of 10 guesses, and HN is still 2-3 back clicks away
Why 2015 will be a pivotal year for HTML5
Web Audio API issues with your Firefox I guess! Thanks for reporting, we'll look more into that!
Show HN: The keyboard that writes Christmas wishes for you
OneRNG: Open Source Hardware Random Number Generator
Jet engine are actually less efficient than piston engines.
This bit stands out to me as prescient:

>The idea, though, that improved technology is going to solve the problems that the technology has caused seems to me to be a bit quixotic. I understand that there’s a certain amount of hope about the Internet democratizing people and activating them. The fact of the matter is that it seems to me if you’ve still got a nation of people sitting in front of screens interacting with images rather than each other, feeling lonely and so needing more and more images, you’re going to have the same basic problem. And the better the images get, the more tempting it’s going to be to interact with images rather than other people, and I think the emptier it’s going to get. That’s just a suspicion and just my own opinion.
Deleting Secret Data with Public Verifiability [pdf]
That title is a bit misleading.

I read this yesterday; it's pretty jumbled. It's an article that jumps around a bit describing how a couple of the people from the Stanford Class of '94, specifically David Sacks and Jessica DiLullo Herrin, made a lot of money using the internet.

It doesn't really get into the reasons there are fewer female than male entrepreneurs from that class, at least not with any depth, and then it concludes by saying that people from that class are getting into internet startups now.
Oh great, I've been wondering where I could get my hands on this stuff.
President Obama 'Learned to Code' Using Method Patented by Microsoft in 1998
It's quite easy to bypass cache without explicit flush. Most caches are 4-way or 8-way: just hit 4 or 8 addresses sharing the same cache line, and you got your original data evicted from cache.
well, those are two different things, aren't they? the direction is pretty clear.

On everything else I'm on the fence but so far the 'batteries included, but swappable' motto has been respected: everything new they have done/announced lately is not in Docker core but rather an external project (think: Swarm, Machine, Compose) that uses the public APIs
Top open source in business stories of 2014
I wish the author had not omitted this crucial paragraph in the announcement he quotes:

Note that this feature is still work in progress:
for now, if an official image is corrupted or tampered with,
Docker will issue a warning but will not prevent it from
running. And non-official images are not verified either.
This will change in future versions as we harden the code
and iron out the inevitable usability quirks. Until then,
please don’t rely on this feature for serious security, just yet.

So, we've made it pretty clear from the start that we're working on ways to make image distribution more secure, but are not claiming that it's more secure yet.
> It describes as dystopian society in future Britain in which intelligence and merit have become the central tenet of society, replacing previous divisions of social class and creating a society stratified between a merited power holding elite and a disenfranchised underclass of the less merited

Actually, there are echoes of what he is railing about in the modern 99/1%, destruction of middle class society.
They address all of these in the paper. It takes ~180,000 "hammered" reads to trigger. The problem is even the least-privileged code can do it because it's just reading without using the cache - a perfectly valid thing that must be allowed for multi-threaded code to even work correctly.

Secondly, the DRAM makers don't currently provide enough information to reliably know what neighbors to refresh. I suppose they could have used their guesses to test on the FPGA rig but given the rest of the paper I'm reasonably satisfied that they have correctly identified the problem and that their solution would work.
You may like to read and search the questions on stackoverflow. They have a lot of C++11 and C++14 questions and code examples and many of the contributors are very experienced with C++.

http://stackoverflow.com/tags/c%2b%2b11/info
http://stackoverflow.com/tags/c%2b%2b14/info

I use C++ almost daily. I love it. I've used it for many years now. Having said that, I try to avoid the newer standards unless I absolutely must use them.

Don't get me wrong. The new features are great. I love nullptr, fixed width integers, to_string, stol, etc. but I sometimes work in environments with very old compilers that don't offer these features. And when the only code you have is written for C++11 or newer, it can take a great deal of time and effort to make your code work on the older systems.

Also, if what you need is in the standard, then don't use any external libraries. There are a lot of great libraries out there (Boost, Crypto++, etc.), but they add complexity and build dependencies and can cause all sorts of support issues. If you add Boost only because you need to parse arguments, then you're really causing yourself and developers who come after you more trouble than it's worth. So every time you think you need an external library, think twice and talk it over with other, more experienced developers.

When I need more features than the older standard provides, I'll use a newer standard, but I strive to only use the exact features I need (don't go wild and convert your entire code to C++11). And as a very last resort, I'll use an external library (but only a mature, widely used one) when I cannot easily write what I need with std C++.

Hope this helps. And whatever you decide, I'm sure you'll enjoy working with C++.
“DONT DO DRUGS” – Luigi
We use hydrazine in US rocketry, too. As nasty as the stuff is, if I were still in the missile business, I'd use it. It's a strong, well-proven technology.
The entire model looks to me like it never had even the most superficial security analysis done. It's like a smorgasbord of insecure decisions:

* the false sense of security from putting signatures in the manifests then ignoring them

* loading signing certs via the network with no provision for pinning

* happily loading untrusted/unsigned images by default (npm, rubygems, installtools, etc. also do this but why repeat their awful design mistake?)

* running basically everything as root (because why deal with all those messy permissions?)

My sysadmin Spidey-sense has been tingling at the rate of change in the Docker ecosystem since it went from "interesting POC" to "we think it's production ready" in a shockingly short period of time. Things like this sadly confirm that initial pessimistic view.
We Can Conclusively Confirm North Korea Was Not Behind #Sony Hack
This seems like fairly standard procedure to be honest, I'm not entirely sure what the issue is here...?

Especially given quotes such as "To the extent that Twitter has previously suspended the accounts of users publishing the Stolen Information, SPE and its employees are sincerely grateful to you"
Thanks, that makes sense. One other question: what is "excess power from the engine" and how is it possible (2nd law) that using it to recharge the batteries is better than using it to move the plane directly?
https://github.com/vincenthz/hs-tls

You should be able to exploit this quite easily if what you said is true, right?
Thank you! You can create your own room and jam with friends!
The business model is the same. We are selling cloud services via Docker Hub, in addition to training and support.

All the new features are pure open design, they only exist because users are asking for them and people are sending patches.
This is why I hate marketing. Unfortunately, it works.

(dang it, I just added some bad press)
Why do articles like this always divide it by gender and never combine gender and race? There are more Asian women featured in this article and probably included in the class than black (and potentially hispanic) men, despite the fact that the population of black men is and was in 1994 larger than Asian women.
You gain access to the page's own DOM and JavaScript, which lets you call the site's functions to fetch data if it helps you. You can also code your scraper with the same techniques you use when building a page: jQuery, CSS selectors, etc - basically all the good interfaces that have been developed over the past 20 years are available to your scraping code.
The Congo's Forgotten Colonial Getaway
Personal Transparency
Should SONY's response been DMCA takedown notices? Does DMCA cover unpublished copyrighted work? If the DMCA applies to trade secrets and personal email, it seems like Twitter would be legally in the clear and particular users would be liable.
Agreed. I was referring to the rocket/systemd remarks. There were some pretty big docker hate going on when rocket's announcement was posted here on HN. Most of that hate was because docker was getting into the orchestration business.
My wife works with disabled children many of whom are autistic. Our son has Asperger's Syndrome and so is mildly affected by Autism. As a result, we have a lot of experience with interacting with people with Autism. Unfortunately you do also get to hear a lot of inaccurate rubbish, (e.g. from "Autism Speaks").

This app does look useful however. However I don't think that people with autism necessarily find it "difficult" to maintain eye contact, they just don't appreciate its requirement in order to interact with others.

For those that do find it genuinely difficult then I suspect this may be down to it adding yet more information for them to deal with.

The best description I have ever heard of for autism is to imagine you are a postbox, and people are posting letters for you to read. This is fine as long as the rate of such letters isn't too great. Once information starts getting posted too fast, stuffing letters in faster than they can be processed, then those with autism throw them all in the air and essentially "shut down".

This may well also explain the intense "focus" that autistic people may have for things that interest them - they just discard everything else that is not relevant to what they are focussing on.
The legality may also depend on the type of data being collected. For example, it is likely safer to scrape Yelp to gather public facts like business locations and phone numbers versus if the data is "copyrightable" like customer reviews. Both, however, would violate Yelp's TOS. See: http://streetfightmag.com/2013/03/04/legal-battles-erupt-ove...
A lightweight C++ library for deep learning with GPU acceleration
What if instead of scraping, customers use the JS injection features for spamming?

How are you approaching the liability issues involved, given that potentially anyone can sign up, create workloads of varying levels of evil, and without you necessarily vetting your customers?

I'm genuinely curious, not ranting.
Alfreda Frances Bikowsky - https://firstlook.org/theintercept/2014/12/19/senior-cia-off... . I heard it on last Friday's 'Democracy Now'.
Show HN: Soundbounce OS X beta (Spotify Premium required)
More info available at http://soundbounce.org/
Rust doesn't hide data races. It prevents them.

Even the Linux kernel has very, very few intentional data races. Most of them rely on undefined behavior and Linus has complained before about kernel code breaking when GCC actually tries to exploit that behavior. In those rare cases, it is perfectly reasonable to use unsafe code, along with copious comments explaining why it's safe.

You may want to read this article: https://software.intel.com/en-us/blogs/2013/01/06/benign-dat...
Antibiotics don't wipe out all the bacteria, just some of them. Its a bit of a problem because if some are effected less by the antibiotic, you can change the balance when the bacteria populations bounce back. The bacteria that are there do set up shop and don't like others crowding in.

We don't really enough enough about what should be the optimal mix of bacteria to make someone healthy.

They do "fecal" transplants to help people get back bacteria that are missing.

There was a graduate student talk (an hour) about some of this stuff last spring. slide decked linked to the right.

http://sitn.hms.harvard.edu/seminars/2014/in-the-loop-with-p...
Is there any place I can read more about the technical side of this. I would love to know how you achieve these rates.
Disabled dog runs for the first time thanks to 3D-printed legs
I agree, there are problems all around. I was responsible for getting docker adopted on a fairly small (but a number of moving parts) software project. It has been somewhat painful.
People who learn C++ this way tend to miss stuff out, I think - there are a lot of thing that you can just muddle your way though without really understanding.

I'm sure there are some people that think this will be OK; after all, lots of people say you don't really have to understand templates unless you're writing a library (and so on). But I don't think it will be OK. There was very little in C++98 (that I knew well, at the time) that it was OK not to know; unless you knew all of it, pretty much, you couldn't really use any of it safely. (This is how Scott Meyers makes his living.) I can't imagine C++11 will be any different; I might not know it well, but I do note that it has many of the same people behind it.
> So if you manage to keep tabs on the industry through your colleagues and you're excited about what you're working on at work, then the personal projects are much less important, but you need to demonstrate that.

I disagree. If passion is an important quality to you, then, as the interviewer, you need to ask questions that reveal whether or not the candidate has that quality. It's absurd to ask about personal projects as a proxy for asking "are you passionate about programming" and then to expect the candidate to guess your true intentions and answer accordingly.
Regardless of the development model, the correct ordering of implementing a feature like signature verification remains the same.

1. Write code to verify signatures.

2. Write code to print "The image you are pulling has been verified."
Have you written a post-mortem on using j2objc? I've tried it for some utility classes and it was frustrating, so I'm curious to hear what your experience was.
That Old PlayStation Can Aid Science
> So, we've made it pretty clear from the start that we're working on ways to make image distribution more secure, but are not claiming that it's more secure yet

That very clearly makes Docker not secure from it's inception through today currently. That was/is the point of the article.

> but are not claiming that it's more secure yet.

What does "more secure" mean... it's either not secure or is secure.

> This pipeline is performant but completely insecure. Untrusted input should not be processed before verifying its signature. Unfortunately Docker processes images three times before checksum verification is supposed to occur.

> However, despite Docker’s claims, image checksums are never actually checked.

Things like this are by design and at the core of how Docker does what it does. Docker clearly was not built with security considerations in mind.

> Docker exacerbates this situation by running xz as root. This means that if there is a single vulnerability in xz, a call to docker pull could result in the complete compromise of your entire system.

The security implications go on and on.
Jet engines weight to output power ratio is why they are used for big planes
It's not as though this is the only question by which the interviewee will be appraised. This is one more tool in the kit alongside asking about previous projects, interesting classes, career goals, overcoming tough situations, etc.

Whether or not questions like these are effective, the point of them is to engage with someone in a way that illustrates how they tackle complex, loosely defined issues: the majority of engineering problems in a nutshell. In most modern tech companies, good communication and not being afraid to ask questions are absolutely essential. Someone who will take an incomplete list of requirements and draw up an entirely incomplete product without questions or discussion is as much a liability as someone who takes the requirements and does nothing, paralyzed by indecision and not knowing what to do.
And oftentimes, candidates aren't perfect but you're going to hire them anyway. Going through this process can illustrate how you would expect to interact with the candidate and where the initial rough spots will be as the candidate begins working with the team.

From another point of view, candidates are usually more than prepared to talk about anything on their resume. In some cases, this is equivalent to listening to someone give a prepared speech. Asking them free-form questions like the above can be a good way to understand how the candidate reacts in situations where they aren't fully prepared. For some positions this is irrelevant, but for others it's incredibly important to have some measure of poise and thoughtfulness when engaging with someone who doesn't necessarily agree with everything you say and is questioning your thought process.

In short, these kinds of questions aren't primarily testing your design and programming abilities, but your ability to communicate and reason with another person in a technical context.
I imagine the outcome depends heavily on the personality of the founders. I'm sure that for some, having a few million the bank will give them the peace of mind to focus on the business. And for others, having a few million the bank will be a reason to party. Perhaps this will simply require additional (and different?) diligence when "investing in founders not ideas".