skysight-inc/HackerNews huggingface dataset:
Yeah, that's also an interesting point: in order to use Docker, the host user must have (effective) root capabilities on the host.

That ensures that any container-to-outside-user exploit can also turn into a container-to-root exploit.

If you have an X11 socket, then you can inject keystrokes to launch a new docker process that runs `rm -rf /`.

If you have write access to ~/.gnupg, as in the Mutt example, then you can edit ~/.gnupg/gpg.conf to set `exec-path ~/.gnupg/pwned`, so that keyserver helpers are looked up in that path, and then create an executable in that directory that runs docker to run `rm -rf /`. So the next time someone runs `gpg --search-keys` on the host....

Sandboxing applications is hard. There's a reason the only good UNIX sandboxes in general use are on iOS and Android, because they had no backwards-compatibility constraints, and even those sandboxes aren't perfect.
If you don't mind, please write to me (email in my profile) and let me know what it was we discussed. I have no memory of this and I relatively rarely hear back from people on HN where I have replied in public discussion about health things.

Thanks!
I assume reading John Moses Browning (PBUH) patents would be enough to actually re-create the 1911 and Hi-Power and thus essentially all modern semiautomatics, with a basic level of machine shop skill.

OTOH, if you were trying to recreate firearms in a "world has ended" situation, an open bolt SMG like the Sten would probably be your first choice.

Firearms, especially pistols, would be pretty far down on the list of technologies I'd want to recreate -- irrigation, communication, and direct production technologies seem a lot more important.
I think you misunderstand how unreliable using AppleScript is :)

To sum up the linked project, the app.js is actually capable of launching a new chat with an intended recipient through use of private frameworks, so I'm not completely lost in the sauce
> what often happens is that U.S. workers, as is the case at Edison, must train their visa-holding replacements if they want a severance package.

> Edison said it is in full compliance with immigration law, "and is not hiring H-1B visa workers to replace displaced employees."

Because they hired the H-1Bs first, so they could be trained. But now they have too many employees, so someone has to be let go. Who should it be, who should it be ...
Sure, people often cite their irrefutable evidence that homeopathy helped them. It doesn't make crank ideas any less crank.
A platform with 80% of mobile installations has developers who don't understand object lifecycles
Got it.
Bringing Much-Needed Sanity to the Vaccine Debate
Isn't this illegal? I thought gender discrimination was. Can you imagine a male-only conference?
Yes, it sounds great for teaching an introductory class, trying to keep things as lightweight as possible if students want to work on it on their own machines.
For atom.io you can opt out of google analytics 3 steps in the preferences tree. you cant up out of update call backs. on sublimetext i haven't found where you can opt out of call backs.
I'd really like for that to happen (compiling to a standalone binary is one of the reasons I picked Rust), but I have no idea how to go about doing it...
Yes, but as I own my domain name and run my own email, the smtp server I use is mine. You could try looking up google's SMTP server and try it to see if it would work (it should):

nslookup -q=mx google.com
...
google.com mail exchanger = 10 aspmx.l.google.com.
google.com mail exchanger = 20 alt1.aspmx.l.google.com.
google.com mail exchanger = 30 alt2.aspmx.l.google.com.
google.com mail exchanger = 40 alt3.aspmx.l.google.com.
google.com mail exchanger = 50 alt4.aspmx.l.google.com.
Perhaps not unreadable but definitely way overly complex. I'd be much more happy with the 2-4 line solution that is obvious and move on to another question or work on then optimizing that for performance time or memory size.
I am using vagrant-proxyconf, but what it can do on https is very limited. http://wiki.squid-cache.org/Features/HTTPS. That's exactly why I build this.
The SNES was definitely more sophisticated than the Genesis in terms of video - total color palette is 32678 colors vs 512. Makes sense as it was released 2 years later.
Wait what ?

If it is what I think it is, that would mean extracting energy from the water's movement, movement that most likely has been created via pumping. So... moving energy from pumping back to energy, with most likely a big loss in the process. Anyone to explain me what I didn't get ?
I hate that the isolation of containers gets oversold as a security feature because there is real value in what you might call "configuration isolation".

Often, I am reluctant to run something not because of a trust issue but a complexity issue. I run a heavily customized environment. I will often be burned by an application---for example---creating a symlink that under "normal" circumstances is perfectly copacetic but all but destroys some carefully crafted aspect of my environment. Similarly, isolation that is not up to the task of stopping evil is often more than adequate for stopping stupid (e.g., the recent "Steam deletes your home directory" issue). How often have you updated your system only to have one or two apps misbehave? With what jessfraz presents here, yum and apt become tools you can apply selectively. There are real non-security benefits to be had.

I realize that part of the oversell is the nature of hype but I can't help but feel that a---perhaps---equal part is that talking about these kinds of benefits is a more subtle and nuanced conversation.
I first heard of cTrix from the gamewave podcast, episode 51.

http://www.gamewavepodcast.com/episodes.html

His live performance of "Come along" is quite impressive. The "Viva Amiga" film that is sampled hasn't been released yet.
At 27, this guy quit a $500,000 job at BlackBerry to launch a cool startup
Text and images can easily be tampered with to exploit. In fact, that's a common malware vector. If you have reason to not trust your files, then it's fairly black and white.
He doesn't hire horses suitable for labour, blames them for getting tangled while also boasting of his cowboy experience, and complains bitterly of the risk that he might have to spend time tending to them if they get injured. This guy is an asshole. I hope he chokes on his gold.
> It will always take the same (relative) amount of power to escape earth velocity.

Not really, most of the energy in a rocket launch is used to push the rocket fuel higher so it can be burnt to push the remaining rocket fuel higher.

If we could build a space elevator then the energy used to get a mass into space would be considerably lower since electric motors are much more efficient at lifting loads than rocket engines (and that assumes a mechanical method of lifting not some kind of mag lift system).
"Writes unreadable code."

Code is meant to be executed first, read second.

Programmer A's reply was a terse, when Programmer B commented on some piece of code they couldn't understand. 'I can't read it, what does this do?'

Code and its readability wasn't the problem.
Ironically, doesn't Homebrew build everything from source? So in that case it would end up installing the Rust compiler before building the application... What you want is a binary download, it seems.
I'd actually love to see this done on a Genesis. The Genesis had an FM Synthesizer in it's sound chip, made by Yamaha.

The Super Nintendo has a distinctive and pleasant sound that I like, but only outputs a 32khz signal.

I really like projects like these using old sound chips as instruments.
Game:Ref – The world's first hardware anti-cheat device
At New York Private Schools, Challenging White Privilege from the Inside
Nice!! I was unaware of this. Great effort, and fun chip tunes.
iOS 8.1.3 jailbreak with taig iOS 8.2 details – iOS jailbreakiOS jailbreak
The site is being crushed under the heavy load. I love it when sites are live like this, but it is trickier to keep them performant under load.
exa can certainly handle a million files. Try running "exa -lRT ~" and watch it produce a tree view of your entire home directory!

However, by 'handle', I actually mean 'run without crashing'... if you run that command, it'll be several minutes before it produces any output. exa aligns its output into a tabular format with every column having the same length, which means it actually has to stat and examine every file in the list before it's able to output the first line. This is annoying, but (as far as I know) unavoidable.
Take a look at Mikko Minonen's excellent open source Detour and Recast libraries:

https://github.com/memononen/recastnavigation

He does automatic graph construction from dense data. Recast can generate this dense data automatically by populating a graph at voxel centers based on the level geometry, but it can also accept a tile-grid at that point.

It is a terrific system, and if you want to learn about how robust pathfinding should be done in games, you can do much worse that find out how it works.
I think this is actually most interesting as a demonstration of Cargo's support for "features" (http://doc.crates.io/manifest.html#the-%5Bfeatures%5D-sectio...), which is a concept I haven't encountered in other package managers before. Is it something that Cargo inherited from Bundler?
The metadata in the file says 2004:
CreationDate (D:20041122195023)
I wonder if the earth would be tidally locked without having bumped into the moon at some point.
What do we know today that we didn't know back then that makes these optimizations possible?
I wonder if it's a good thing or a bad thing that I've never considered, even for a moment, replacing a tool like ls. My first reaction was that it's hubris to think "ls isn't good enough for me, I'll make something better." A bit more reflection has almost convinced me that it's a very good thing that people are always thinking and working on ways to improve things, even something that's taken for granted.

On a tangential note, I learned something new and thought that a few other folks might find this of interest: In the screenshots, we see a file with the name "Licence", which to my American eye looked like a typo. On further investigation I found out that "In British English, Canadian English, Irish English, Australian English, and New Zealand English the noun is spelt licence and the verb is license."[0]

[0] https://en.wiktionary.org/wiki/licence
Show HN: Live-Edit JavaScript Modules in Chrome
I'll love Mitch Murder forever for recreating the totally rad music from the classic Mr. T self-help video "Be Somebody or Be Somebody's Fool".

https://www.youtube.com/watch?v=WWRbf-mUsyU
The fact that quantum mechanics limits the information density of a field is a feature not a bug. Giving absolute numbers of position and momentum makes physicists pretty uncomfortable.
Related to this idea is the "Jump Point Search" algorithm, an optimization of A* which does this sort of straight-line optimization for exactly this use case.

http://zerowidth.com/2013/05/05/jump-point-search-explained....
Continue on in the story:

> Adria: "Maybe he’s to blame for complaining that he got fired. Maybe he secretly seeded the hate groups. Right?"

Um, no? With zero evidence, it's rather a big thing to accuse someone of.

She goes on:

> Adria replied that she was happy to hear that Hank “wasn’t active in driving their interests to mount the raid attack”, but that she held him responsible for it anyway.

So she accuses him. Then is told he didn't do anything. She persists in blaming him anyways. Apparently he's just guilty, full stop, no matter what he did?

Giving her a profit motive was actually intended as a compliment. As in, there's no way anyone can actually think it's fair or two same to blame someone for someone else's actions when there's no evidence it was their fault. Therefore, instead of just becoming another Lindsay Stone and painting over a past mistake, why not go all out, admit no fault, and gain followers that way? At least that makes sense.

The alternative is to actually believe she thinks it's fair to blame you if someone else acts on their own accord, but in your "favor". That's pretty horrific.

And I say that this incident, hurts equality, because the initiating episode isn't something that anyone should take seriously. Then, after all this abuse is piled on her, the same guy who made a joke is held responsible for an Internet mob. That distracts from the real problem, doesn't it?

(And as a "disclaimer", no one is excusing /b/, and it's stupid (and just weird) to 'shop porn pics and death threats. It draws attention away from the individual suffering.

But like groups that riot over cartoons, I don't think anyone expects to be talking to or convincing people taking part in the riot, right? What's an actual, useful, response, to the abuse Adria got? Does anyone support it? Does anyone think it's effective? Suppose I wanted to teach trolls a lesson or stand against them, how would I do that?)
It seems awesome, specially the --tree option.
I would love to try it, but

Download and install Rust Nightly for your platform.
Install libgit2 and cmake using your favourite package
management system (or pass --no-default-features to the
next step)
Run git clone https://github.com/ogham/exa.git to download
the latest version of exa.
Run cargo build in the new directory to compile exa.
Move the resulting target/exa executable into a directory
in your $PATH, or add an alias for it in your shell.
I wouldn't quite go that far with the patents. I just looked at the 1911 patent, and it basically describes a dimensionally parameterized 1911 (which is in itself really cool). Parts and lengths are given in qualitative terms.

For a 1911 design for example, the actual patent and patent drawings would not quite be enough give you the dimensions nor location of the swinging link. It would take either quite a bit of tinkering, or sitting around and mathing (or both) to figure it out. Certainly not impossible, but I think the effort required goes a bit beyond your intention when you said 'basic level of machine shop skill'.

If you were stuck in your position, an optimist in human nature would pick something like a break-open shotgun. Not useless for self defense, but really useful for hunting - which you presumably would have to do for a bit while bootstrapping civilization again. If you weren't so optimistic... oh ya, totally an open bolt SMG.
I never understood that either (and I love guns). However, they are different things, and you do run into situations where imprecise language is confusing. If you want to load you clip with your clip, for example. Loading you magazine with your clip, on the other hand, is immediately clear. "Grab a few clips of ammo" has a distinctly different meaning than "Grab a few magazines of ammo" in some contexts.

But honestly, I think it has more to do with ham-fisted and ignorant attempts by lawmakers to ban guns. The amount of technical illiteracy that litters gun laws is frustrating in the extreme to people who have to actually comply with those laws. Clip/magazine snobbery is just a way of venting that frustration.
In Germany, there is an engineering bible that contains /everything/ on over 1500 pages and is regularly updated since 150 years.

That book alone would give any civilization a running start into the 21st century.

Here's the table of contents: http://www.springer.com/cda/content/document/cda_downloaddoc...

- Advanced Mathematics and Statistics

- Physics

- Chemistry

- Materials and Materials Processing

- Mechanics

- Thermodynamics

- Electronics

- Measurement Theory

- Control Theory

- Informatics

- Design and Development in Engineering

- Manufacturing

- Management

- Standardisation

- Law

- Patents
And her tweet only said "not cool". If there was mortal danger, you'd think there'd be a bit more of a warning.
Talents gets you very little, handwork can get you a lot farther.
i'm not sure i get your point. are you trying to suggest that chemical engineering cannot be self-taught? or that self-taught chemical engineers cannot get work? either point seems suspect.

"No one teaches themselves to build nuclear reactors, and no one is going to get a job in that field as an autodidact unless they have already worked in a closely related field."

can you substantiate either of these claims?
Intro to GLSL for 2D Games
Thanks for the kind words! It is indeed a tough market to crack. Doing our best. Thanks again for the support.
You would think so but if investors discriminate against female founders, It doesn't really matter if women are capable.

Also even as investor perceptions change, Women are still under represented in the startup circle and as with any other under represented demographic I don't see any problem with holding events that inspire/educate them to start a company.
1911's are by modern standards sloppy, inaccurate and unreliable unless you put huge amounts of effort into maintaining precise tolerances. Modern designs (Glock, et al.) have far fewer components, and much less trouble with the tolerance stack ups that plague the 1911.

That said, it's a hell of a design to still be in use 100+ years later.
Shameless plug for my financial independence analysis app, designed for projecting the future instead of tracking the past: http://thume.ca/stashline

Would combo well with this app.
Though it's not a package manager, configure scripts have had this for a while -- e.g. ./configure --no-git. Still, it's certainly cool to have it built into Cargo!
Shark Tank View on Venture Investing with Coffee Meets Bagel
Presumably Portland's reservoirs are located somewhere uphill (in the Cascades even?) so this would be exploiting a natural gradient.
Take it from one active pro se to another, lawyers (and their clients) will always perpetuate the myth that lawyers are needed to navigate the seas of law and commerce, in order to justify the money earned by/spent on them.

Canada recently did a rather robust housecleaning on pro se litigant tactics. Meads v. Meads , amongst all the humor, provides examples of how to obtain remedy as a pro se, even if you fall into one of the vexatious litigant traps they mention.
From the article: "The LucidPipe™ Power System uses the gravity-fed flow of water inside a PWB pipeline to spin four 42” turbines that are now producing electricity for Portland General Electric (PGE) customers under a 20-year power purchase agreement (PPA) with the utility"

No pumping required.
Ha! Fido.ca lists roaming data at over $6 per KB. I asked a rep and confirmed on my contract.

So at 4G, that's about, what, $10,000-$30,000 per second?
Turn off data roaming.
I think that only 10% of English speakers think trans-Women are actually women. However that 10% are disproportionately powerful, so they are able to control how the word is used in the media, in the workplace, and in educational institutions. If they stopped doing this, usage would revert to its original pretty much instantaneously.
Have you tried applying on AngelList? I'm just asking because I just got an offer yesterday (yay!) for a full stack position even though I had no prior experience in either back or front end.

I recommend you try to apply to start ups because usually you'll have an easier time if you have the smarts but not the skills. Also I don't think you mentioned whether you were getting interviews or not, but if you are then I really recommend improving on the areas that you don't do well on.

Finally, while I also feel like I don't get much from LinkedIn, I also noticed that when I apply to a company they often check my LinkedIn profile, so I would suggest you put any work you need into it.

And of course.. do some cool projects that you can show other people! I remember reading a post on here from a week or two ago about how there are no good web fuzzing tools? To be honest I'm not really in the know about security but try and see if there's something that would be useful to make, simplifying as necessary so that you can start it on your own.
I have not yet looked into the code but if it's using glibc and corresponding getdents code path with suboptimal buffers, it most probably will be slower then ls.

more information about the getdents buffer issue:
https://www.olark.com/developers-corner/you-can-list-a-direc...

Again, beware before downvoting me to oblivion I have not yet looked into the code.
People who are hung up on ingredients being "natural" drive me nuts. I'm 100% for rigorous product testing to ensure safety, but if an ingredient is safe and allows the creation of higher quality food, it shouldn't matter it is natural or not. Cars, the internet and modern medicine aren't "natural" either...

There are literally tons of people who will ridicule anti-vaccination nuts, then turn around and insist all food be "natural", completely oblivious to the hypocrisy.
But I'd imagine that if a society were starting over there would still be a lot to be learned, even with whatever guides were left behind. These animations could serve as a starting point for engineers to work from, discovering problems and solutions along the way. As far as sheer information density goes, I think these get a large amount done even if there is much left out.
There are many of us who are just as lucky. Judges have a duty to assist pro se's in most jurisdictions, in order to ensure a fair trial, and are known to take great steps in assisting them.

Lucky he lived in a jurisdiction with fair courts. Nothing more.
The candidate did not "optimize it for performance time or memory size".

I love how the candidate integrates a lot of ES6 features and even basic algorithms into this. I would kill for candidates like this when I interview. It doesn't only show that they keep updated in the field which is important on its own - it shows that they understand the fundamentals.

When I'm interviewing I _am_ interested in seeing this in a candidate. At the end of the day the candidate _did_ solve the problem.
Was this guy affiliated with HTP? They were notorious for the ColdFusion exploit, for hacking Linode, and for hacking DARPA (or something like that).

Edit: Some Googling turned up a pastebin result [1]. Also relevant are [2] and [3].

[1]: http://pastebin.com/d0ni33Hx

[2]: http://krebsonsecurity.com/tag/zeekill/

[3]: https://encyclopediadramatica.se/Zeekill
That would be great. Do you know any efficient way of finding these positions in SF? I just searched the handful of European companies I know of and they don't have any listings in SF.

Also I don't necessarily need as much vacation as Europeans get, just a few weeks a year that I'm actually encouraged to use would be fine.
He did so much physical construction of electronics that I assumed they meant he was a "real" engineer.
I guess he meant Android application developers, not the people who wrote Dalvik.
It's the classic Goebbels Defense: "I just wrote some speeches. I didn't kill any Jews.".
Not at this point as it's still very much a work in progress and I'd like to clean it up before opening up the source. Localisation is on the list of things to do :)
That all just takes a couple minutes.
It's easy enough to calculate: Do you need more than an equivalent amount of paper burned into energy, to make that paper.

The answer is no, paper mills power themself from trimmings from paper making. They use much less than the mass of paper they produce.

Making paper does not take very much energy. The energy used in cutting and preparing wood is not that much when compared to the amount of wood produced.

So yes, turning wood into paper is carbon negative (in a way, technically it's the growing of the tree).