skysight-inc/HackerNews huggingface dataset:
> So, if someone finds a vulnerability in Docker software and roots a process, your filesystem is safe?

You could make the same argument about a vulnerability in the OS itself. There's nothing magic about kernel code that gives it extra protection here. :)

In fact, I'd argue that the most probable attack against Docker would already be via a vulnerability in the OS. Docker uses a lot of kernel-level technologies, like cgroups. Beyond that, the most likely way to escape a Docker sandbox would be by finding a buggy syscall, since these weren't always designed with containers in mind.

This presentation is a good overview of Docker's attack surface: http://www.slideshare.net/jpetazzo/linux-containers-lxc-dock...

> Each process, even an OS one, gets its own little filesystem, and connects to a limited set of interfaces explicitly permitted by the user (and that can be audited by the user).

That would be an interesting research project, at the very least. You'd probably have to rewrite much of userspace, since it breaks many of the assumptions the current generation of system tools rely on.
Location: Lahore, Pakistan
Remote: Yes

Willing to relocate: Yes

Technologies: iOS ( Objective C and Swift ), C#, Python, Git Javascript, NodeJs, C, C++, Digital Ocean, MySql, CoreData, Firebase, Parse etc

Résumé/CV: http://resume.fahadmansoor.me

Email: fahadmansoor dot ali at gmail dot com
Unison was the first thing I tried after moving away from DropBox. The main problem I had with it was that both machines involved in the syncing had to be running which made moving from laptop to desktop not as seamless as I would have liked. Still the syncing process was flawless. I had better results using Seafile, http://seafile.com/en/home/, their free account was sufficient for my needs and worked great. You can self-host if you are worried about keeping control of your files.
I don't know. I'm actually more interested in what it receives/sends.
No. They are not the same and shouldn't be. Rather they should communicate with each other. That is vim shouldn't have its own window functionality but instead detect that it runs within a terminal multiplexer and instruct it to create a new window. When I find the time I will try to experiment with this design in vis.

https://github.com/martanne/vis

As for the copy mode, in my opinion the multiplexer should use the editor as a filter (which requires that the editor uses stderr for its regular output). The whole scroll back buffer is piped to the editor and whatever the editor writes to stdout is kept around in a copy buffer.

That is the way it is implemented in the latest dvtm releases.

http://www.brain-dump.org/projects/dvtm/
Chrome displays if the browser is 64bit in its about box, but for Firefox that information is a bit harder to find out.

It's in about:buildconfig
Nice! I hadn't heard of Unison.
This might be shallow, inaccurate and sensationlist in tone, but it is inherently alarming.

Getting a list of files from the good old /Torrents directory that everyone has, but pretends they dont can be incriminating enough to raise some very serious privacy issues. They can explain this any way they want, but Dropbox certainly has no business accessing any files outside of its config and its sync folders.
Did I seriously just read a cry for "disrupting the combat aircraft market"? How about disrupting the tobacco business? Disrupting human traffic? Exaggerations aside, not everything is about making (or saving) money. I sure as hell don't want military weapons to become the latest startup trend.
I had another comment downvoted and invisibanned for suggesting that yahoo is basically an SEO spamhouse now. Look at their landing page in the uk at least. Right now it is articles about people's sex lives, adverts for makeup, adverts and viral videos
FYI - they do certificate pinning for their clients and won't let you proxy the HTTPS connections, last I checked.

I'm not saying this as cause for alarm. Obviously if they were sending the files you could measure the volume of traffic if nothing else.

Make a completely random non-compressible file that's of an arbitrarily significant size (say 1M+) and see if that amount of traffic goes out to them.

I do think Dropbox is watching for filesystem events outside of the locations users specify, but I see zero evidence they're uploading information about the files / the files themselves so far.
Vulkan – Graphics and computing belong together
I just had a quick look at dropbox with ProcMon, and I learned that

1) when I created a new text file on my desktop, it was not read by Dropbox
2) when I created a new text file in my dropbox folder, it was immideately read by Dropbox
3) I have to find some sync tool that doesn't feel the need to enumerate my network interfaces 3 times every second, when nothing is actually changing.
Breaking News from India
Why don't they just ask the NSA for a print-out? I bet they have it all on file!
Yes, because you cannot even access the filesytem directly.

Applications only get the data handle for specific files, after being authorized to do so.
I really hope this is not going to turn into a flame / paranoia fest. So here's my cool-headed, although speculative, answer:

* GSoC has had a tendency to rotate open source projects. Lots of new projects seem to have been added, and some others will have to go.
* In general this year there seem to be a lot of science (bioinformatics, geospatial, etc) projects, more than before, and that may be due to a changing focus.
* The Mozilla foundation is not a small organisation and could afford for internships themselves, in fact I believe they did just that in the last few years.
The correct approach is as outlined in the "alternate approach" section. For complex queries you need to POSTS a query resource at a dedicated endpoint. You can then later GET a search result using the query resource.
I copied a file in C:\ and saw Dropbox access it a few moments later, followed by network activity:

http://cl.ly/image/443Y1S092g1R
I'm not sure if this is because of some sort of rivalry, but from what I see many of the organisations that have been regularly selected have been rejected, although some of the golden ones like KDE, Fedora made it.

I don't think it would be for rivalry, it maybe just that they wanted focus more on getting more contributors to the new organisations that really need exposure and contributors. Also if it was rivalry would easily do it elsewhere and probably not at GSoC.
I'm curious - why is this downvoted?
Why Is This Man Still in Jail?
Ah, my bad, I misunderstood. Thanks for clarifying!
Just some more information:
Dropbox does not read the file outside the dropbox folder.
It does, however, 'QueryBasicFileInformation' and and 'QueryDirectory' when I create a file on my desktop.

I'm guessing this has to do with the explorer extension.
I lost track of the whole discussion and only do Android occasionally as hobby, but I think SD card access had some security changes as of 4.4.
So they don't want to do the work. However, if someone sends a pull request, would they reject it?
An Epic Life at Epic Games
A superbowl ad is not going to inspire the people you want to start working on advanced aircraft. The people you want are already working on advanced aircraft or are trying to get into the advanced aircraft business. You need people that know what they're doing, not the "dang that's cool" crowd.
Quite possibly: http://www.nbcnews.com/science/space/there-life-ceres-dwarf-...
Ask HN: Why is HN Search not working?
Has anyone also experienced difficulties in using the HN Search?
PuTTY 0.64 is released
Maybe

sed -i 's/old certificate/new certificate/g' /usr/bin/dropbox

Used to work in some software.

EDIT: Matasano has a nice guide for bypassing OpenSSL cert pinning (for iOS apps, but the techniques should be more broadly applicable): http://chargen.matasano.com/chargen/2015/1/6/bypassing-opens...
Have you heard/tried Bittorrent sync? It's P2P, doesn't put your files on their server. Very fast for transferring locally between your phone and computer for example. You have to keep your computer running if you want your files accesible anytime though.
Dropbox 'syncs' all your files on the same partition
Yes and no memory management. Self management can be scary.
"Oh, no, I must have put Denmark by mistake."
Also I vomit a bit in my mouth every time I read C++ code base.
Same story, only found out much later in life (around 40).

The thing is, now I can easily get by on 4 to 6 hours of sleep, and unless I'm truly physically and mentally exhausted I'm not even able to sleep for 8 hours because I'll be wide awake after 6 hours, tops.

I have no idea whether that is my natural sleep pattern, or just because I've spent decades "training" myself to get by on less sleep because of the apnea.
I totally agree. However, there seems to be very few jobs for F# and I'd love to write use it on a daily basis.

I've taken the advice of F# For Fun and Profit (http://fsharpforfunandprofit.com/series/low-risk-ways-to-use...) and started writing various tools in F#.
The only real reason is cost of living. If you build it yourself you could omit half a dozen middle men who make money from real estate as well as potentially local taxes, planning regulations you dont agree with, etc. You could then pass this on in part as higher wages.
Senior Scala Developer
Fyber is searching for Senior Scala Developer. Want to join us? Check our career web-page and apply!

http://hire.jobvite.com/CompanyJobs/Careers.aspx?k=Apply&c=qoN9VfwZ&j=o8jPZfwZ&s=hackernews

We are looking forward to meeting you!
You don't need the subscription to work with the engine, its a GitHub repository you can just locally clone.
Ask HN: No time to maintain our project, what do to?
We are 3, and “MySeeen” is our first project and startup. We have built it from nothing since 2 years, but with a goal: Making an app you just have to open to get a movie you will have fun watching.

It could be achieved easily by making a social app allowing you to get movies information (length, casting, posters, …), to share about the movies you have seen or want to see and rate them to finally correctly advice a movie for anyone.

MySeeen is available on iOS and Windows Phone. (Info here: http://www.myseeenapp.com)

Unfortunately, after 1 great year in the company, as full time job, without knowing how to earn money and how to enhance our baby, we needed money and slowly stopped maintaining our project. Now we haven’t touched the code for 1 year because we all have started a new life and don’t have the time to maintain it.

We have a good amount of users, and it still growing daily by a good number of people. We don’t want to turn our back to our users, so we have decided to maintain (up and running) the back-end as long as we can, but we need to shut down the company because we still have fees to pay (bank, government, etc…). We post here to get people’s advices, potential users, current or former start-up fans, coders, CEO’s, what would you do if you were us?
Try Bittorrent sync, it matches all your conditions
There's occasions when this "anti-pattern" pays dividends. While these aren't ncurses specifically, examples of the this paradigm include:

* pagers (eg more and less). Handy if you want to navigate large blocks of text

* browsers (eg lynx and elinks). Handy for quick spot checks on headless servers and want formatting preserved (which rules out curl and wget)

* text editors (eg vi/m, nano and emacs). I shouldn't even need to explain the requirement for these, but a few examples are included in the next bullet point:

* anything that uses $EDITOR (eg visudo and crontab -e). While you can edit these files without vim (et al) and still use these tools to check your edits before committing them, it is considerably more work for something that's otherwise really very easy

* some monitoring tools (top et al). Though I will grant you that there are other (sometimes better) ways to probe this information. But let's not begrudge a sysadmins prerogative to be lazy ;)

* REPLs, (eg RDBMS SQL command lines (mysql, pgsql, etc), Python, etc). You could probably argue against the "need" for many imperative / functional REPLs, but database command lines are extremely useful.

* some interactive package managers (eg aptitude, yaourt) which are useful if you have bespoke queries (eg you don't know the name of a package you wish to install so you need to combine repository searches with install requests). It's also worth noting that even apt-get will occasionally jump into an interactive mode (eg using ncurses for requesting mysql passwords or prompted installs when doing distribution upgrades.

This is by no means a conclusive list, and certainly more detailed than I think your comment perhaps deserves.
> Back in the day, writing cross-platform code meant knowing the ins-and-outs of each platform you wanted to support and coding specifically for each one.

If you mean C and C++ POSIX behavior, yes.

If you mean native languages with rich runtimes like Ada and Modula-2, not really.

Finally Go doesn't get rid of OS specific stuff like pathnames, security, ...
One can hack Windows HTTPS libs (or OpenSSL, whatever it is) inside Dropbox process and read unencrypted buffers from memory. Standard and well-documented APIs are easy to locate and hook, especially in dynamic libraries.
This is the first comment in this discussion I've seen that is actually interesting and might provide an explanation.

The Dropbox file status symbols are a -big hack-. Up until OS X 10.10, for instance, the file browsing interface didn't provide per-file badging at the OS API level. So they literally had to patch the running Finder process to do this.

I wouldn't be surprised to learn something similar is going on with Windows Explorer.
I disagree with the common belief of planned obsolescence.

In the industry the cheapest thing to make is plastic injection molding. By far. Like 50 to 100 times cheaper than the alternatives at scale.

Melting plastic at 200 Celsius is so much easier than melting metal at over 700 Celsius(over 1000 for steels) with all the contractions and problems this creates.

Any manufacturer could use metal in their products or create a plastic version at half(or 1/3) the price.

Most people just buy the cheaper alternative. Then they rant about planned obsolescence when the thing breaks soon(but over the warranty period).

But the reality is that thanks to plastic molding we get incredible cheap products, like a USD60 vacuum cleaner, when in the past it was more like today USD1000 for one when it was made with metal parts that lasted decades.

We want it all, cheaper and better. But having all is not possible(yet).
I have a feeling this was caught in a voting ring to be demoted from the HN frontpage so fast.
I had a long debate on multiple forums recently regarding the almost uselessness of OpenGL in presence of something like OpenCL, especially when OpenGL does its job (as a graphics library) in a very crappy manner by trying to be part-framework, part-library, and not doing either properly, and making the life of a graphics programmer a living hell, who has to code 80% of the graphics pipeline by hand or using third party matrix libraries anyway. I realized this very strongly when I considered doing graphics using OpenGL but with a photorealistic renderer like a path tracer.

Currently the only reason for OpenGL over GPU being inevitable is that GPU vendors don't provide access to "non-GPGPU" parts (like TMU, ROP) directly to OpenCL (or CUDA), which is clearly a matter of design rather then technicality.

Unsurprisingly, people were offended or upset (you either don't use OpenGL, or you end up defending it against criticism, subconsciously, because you have invested so much time learning it).

I hope something good comes out of this initiative.
Plyr – A simple HTML5 media player
Senior Android Developer
Fyber is searching for Senior Android Developer. Want to join us? Check our career web-page and apply!

http://hire.jobvite.com/CompanyJobs/Careers.aspx?k=Apply&c=qoN9VfwZ&j=ox9IZfw7&s=hackernews

We are looking forward to meeting you!
And being sold as library only language on Visual Studio tooling, but I when I look around the enterprise environments I work on, I do get the point why Microsoft tries to push it that way.
I think this is completely PR - they want to create buzz and excitement in the public for the "hot new spy plane" such that its politically impossible for congress to cancel the program/cut the budget.
You'll have that problem with anything you don't run yourself so that seems like an unfair complaint. Can't this sync desktop <-> server and laptop <> server?
I would guess that this has to do with Mozilla taking Yahoo/Yandex/Baidu as the primary search engines in Firefox in relative countries[1]... But I'm no insider so I can't tell you anything for certain.

[1] https://blog.mozilla.org/blog/2014/11/19/promoting-choice-an...
You're also targeting future engineers. If you can make a highschool kid get into aeronautical engineering who otherwise wouldn't have, that's a strategic win. Younger people are very much in the "dang that's cool" crowd.

Look at most of the modern military commercials. They very much appeal to young people who grew up playing Call of Duty and whatnot.
He has a tool that checks for accesses on specific kinds of files and he uses that and a few specially crafted files to see what happens. That tool might even influence other processes for all we know.

How does a security researcher not know about procmon? another user here did a test and found no problems.
I take the point, but suppose you were a school after 30 boxes to run in a computer drop in room in the café?

One quote from the company and a definite (back to base) guarantee would be more acceptable to accountant than lots of small transactions on ebay/local suppliers.
There are nations that have the outdated ideas of winning wars and not stimulating the economy ... for them the ideas of mass produced drones built at BOM, with some stolen IP from US are tempting.
Reusing one's functionality is amazing, but not always the best solution.

The example you gave is exactly this: imagine if your web-browser would create new windows instead of tabs. Why? Well, it would just let OS manage the tabs, afterall that is the main functionality of the Operating System.

Hardly everyone wants their vim to create a bunch of tmux windows messing up their workflow: constantly changing IDs of tmux windows; slow navigation between vim files as user now has to open ID 15 (tmux); mixed order... Oh that sounds as bad as seeing all your open websites in Meta/Alt+Tab.

So please, do not speak for everyone with arguments "vim shouldn't have its own window functionality".
A hardware R/W switch on the components like the ones on floppy disks should do the trick.
The OP is referring to real vs perceived (manufactured) threats, but you know that.
Supporting Schools in Africa with Google's Security Efforts
Without looking at the code, I'd guess these two issues are actually just symptoms of the same problem. It will be down to the way you're shell executing your commands.

Python isn't my strongest language, but there will be other ways to launch an external process while forwarding STDERR / STDOUT streams in real time. Maybe instead of forking a shell, run the command as a process. You can still execute from within a shell using -c flag, eg

$ bash -c 'export a=$(echo "hello world"); echo $a'
hello world
$ echo $a # demonstrates that the envs aren't passed backwards

$

If you do this then you need to be careful about your quotes / escaping. But it would still be less work than reinventing a Bash script parser.
I recently learned about Sancus [0]. It provides a way to protect an application from the operating system. It requires hardware support though. So not available in any mainstream hardware right now. It also allows very secure DRM.

[0] https://www.usenix.org/conference/usenixsecurity13/technical...
The final thing to remember is that their stores look like shit. There's a tumbler about one near me being the worst Tescos on Earth, a truly frightening point. The way to play this investment is sell while they are about to spend loads of cash for a few years sorting out their stores and then just as this investment picks up you buy back in. Tescos still has lots of potential to be the default UK supermarket again.
Absolutely love this. So useful for me as I use Codeship a lot.
They could look for bitcoin wallet files, thats what typical malware does nowadays. Could theorethically only takes the infection of one computer to strike it rich.
> OCaml can compile to native.

F# as well, via mono -aot, NGEN and the upcoming .NET Native toolchain.

> But I am sure the researchers in France and elsewhere would bring true multithreading / multicore support to OCaml sooner rather than later.

This is being worked on. "OCaml 2014: Multicore OCaml"

https://www.youtube.com/watch?v=FzmQTC_X5R4

https://ocaml.org/meetings/ocaml/2014/ocaml2014_1.pdf
Well what do you expect when you have a monopoly in the PC market? I also don't see anyone recommending AMD chips around here.
Kim Dotcom Dubbed a “Fugitive” So the US Can Keep His Money
snowden warned us not to use dropbox.
Apple, Google poaching settlement appears headed for approval
Argh, I kept reading "SignalR 2.0". This post was so confusing...
>Don't like it? Don't work for Yahoo. It really is as simple as that

Not so simple. First, jumping jobs for a lot of people is difficult. Second, it also set a trend in the industry. HP soon after started a program to make people come into the office.
A book suggestion for anyone who would like to read more: "Ninety percent of everything"

http://www.amazon.co.uk/Ninety-Percent-Everything-Shipping-I...
Eon was another good book which investigated this possibility of an alien rock orbiting earth.
Seafile is really easy to self-host nowadays, basically extract and run: http://manual.seafile.com/deploy/using_sqlite.html
Of course it is not because of any rivalry as it used to accept Twitter which is their Google plus rival.
Is e.g. indie music sustainable? IMHO the madness will just go on, fueled by new generations.
Rails API authentication with devise_token_auth
I think even twitter in not in the list this time.
Using hapi.js with Socket.io
Direct access to the GPU...is that done in some kind of sandbox at least? How do Mantle/Metal/DX12 do it?
And go back to what has been the norm in the 50s. I have a few books from my grand father, by Eugène Aisberg: "La radio, mais c'est très simple", and the equivalent one for analog televisions. They explain the basic working principles of (analog, tube-based) radios ans TVs and how to repair them. The hardware was simpler and easier to fix back then.
The law is mostly about customer information. You'll still be able to buy cheap things if you want, but you'll know for how long it's repairable, hopefully long after the warranty period.
I noticed the very significant working group members at the bottom of the page. If that is nearly as good as it looks, I'm very hopeful.

Here is the press release: https://www.khronos.org/news/press/khronos-reveals-vulkan-ap...

It seems Valve will work hard on it:

“Industry standard APIs like Vulkan are a critical part of enabling developers to bring the best possible experience to customers on multiple platforms,” said Valve’s Gabe Newell. “Valve and the other Khronos members are working hard to ensure that this high-performance graphics interface is made available as widely as possible and we view it as a critical component of SteamOS and future Valve games.”

Technical previews will be shown at GDC this week.
Open-plan offices, panic attacks, all in the game
Thank you easyd. That was a good read :)
I've spent 15 years working on OpenGL, but I'd kick it to the kerb in a heartbeat.

AMD and NVIDIA are free to implement Vulkan on Windows and Linux, but the problem is that we will probably be stuck with OpenGL 4.0 on Mac OS X for the foreseeable future.