skysight-inc/HackerNews huggingface dataset:
Microsoft opposes backdoors but not some process that is very similar that allows "legitimate legal requests" to be fulfilled ...
Agreed, and it's bad for would-be competitors because they can't identify weaknesses in incumbents, and can't argue for their alternative being better as there are no data in the public sphere, not to mention leaving small retail investors out in the cold.

PS Great username.
Really interesting.

Mid-2003 is when I started at Microsoft. Though: out in MSN, not where the action was. :)

Has Moore's Law really broken down that severely 'lately'? I'm reminded of one of Kurzweil's books that shows 'Moore's Law' holding since before digital computers. But - the book shows - zoomed in, the trend line is actually a succession of periods of fairly rapid growth followed by stagnation. (Obviously though one question is how cherry-picked the underlying data was...)

Edit: The book was The Singularity is Near.
Rethinking the agency model
Hopefully this puts an end to this nonsense. Seems like she was passed up for promotion because she was not the best candidate, let's all move on. Honestly isn't she the CEO of reddit? It seems like she should be focusing her energy on that, and building value, instead of trying to extract money from KP.
I've been coding in Python for many years and I can count on one hand the number of times that this has actually caused me any problems.
Ask HN: Where do I start in a potential transition to DevOps?
Howdy! I keep hearing this damned buzzword, "DevOps," everywhere I turn, and it happens to come at a time in which I'm looking to refocus my career anyway, so I'm looking for some feedback and advice.

I own a very small software firm (1 subcontractor, a few clients, $120k-ish revenue), but I've quickly fallen "behind the curve" on the latest and greatest languages, platforms, and standards - I got busy with existing code bases, then spent more and more time on the business relationship side of things, then realized I was way behind when I started looking for more work.

It's okay, though, because I don't like contract software development anyway. I want to move to a two-fold situation. I want:

1) A "productized" service offering or two to build sustainable revenue and,
2) To develop and sell my expertise as a pure consultant in some field.

I have thoughts on how to approach #1, but I'm looking for that field in which I can shine for #2.

I love people, and I enjoy process, but I am an absolute neophyte when it comes to CI, testing, etc. (I know what Jenkins is... does that count?).

Where do I start? Any thoughts from people already working in the field?

----------------

Way TL;DR:

I am a contract software developer looking to move into DevOps consulting, but I have no experience at all in CI or testing, much less automated testing. Where do I start?

Thanks!
Your example doesn't make much sense because Hurd is the servers. The microkernel component itself is GNU Mach.

Shipping an embedded appliance with a microkernel and proprietary servers again makes no sense, because it's akin to rewriting userspace from scratch on top of the base VMM, schedulers and disk I/O. Just for a TV set top?
There have been wildly successful microkernels. One of Xen's greatest successes was demonstrating that to encourage widespread adoption of a microkernel, you rebrand it as a hypervisor. More recently, some people have started running software directly under Xen without a full OS, including language runtimes, all without ever calling it a microkernel.
Can you please clarify? I've seen WebDWARF mentioned twice now, but when I Google, I get a bunch of results about a shareware clone of Dreamweaver.
But isn't basically always the tradeoff - if you want security ,you play by the rules of the company who built it ? is there even a theoretical way out of this ?
Just needs someone to step up and one day it might be listed here: http://learncodethehardway.org
I'd have to know a little more about your setup to be sure, but Pachyderm (pachyderm.io) might be a viable option. Full disclosure, I'm one of the founders. The biggest advantage you'd get from our system is that you can continue using all of those python and bash scripts to analyze your data in a distributed fashion instead of having to learn/use SQL. If it looks like Pachyderm might be a good fit, feel free to email me joey@pachyderm.io
It's not just distribution, it's regulation, tariffs, customs agreements that prevent or heavily restrict food imports and allow prices to remain high or low in certain areas.
I'm amazed that I'm reading in the same article talking about faults in limestone and "underground trapping of carbon dioxide emitted by power stations".

The water we're pumping down there isn't the only water deep in the earth. Water + C02 = carbonic acid, commonly known to dissolve limestone (frequently the cause of sinkholes when it happens near the surface). Am I the only one who thinks pumping enormous amounts of C02 deep into the ground (where it's going to come into contact with water and limestone) is a really, really bad idea?

Outside of that, very interesting article. Fantastic that they have access to a fault via an old military installation!
So long as the wasm blob can be read as Rust by a third party.

If it's a one-way Rust source -> wasm transformation, even a Rust user might have a hard time following what wasm spits out.
> * the fact that many of the dinosaurs had feathers

And the fact that chickens are actually coming from Dinosaurs.
apache solr or elasticsearch
Not too much! If you want an opinion on a specific link feel free to email us at hn@ycombinator.com. I have a feeling your repost would be fine but we can confirm that for you.
Microkernels are the wave of the future and always will be.
Microkernels and hypervisors are not the same thing.
Where/how do the proprietary servers come in for a kernel that doesn't want to allow them (and therefore would go through no special effort to make them possible)?

Remember that the reason you can link against glibc is because it's LGPL and not GPL. The LGPL was created for a reason. There's also a reason why when the decision was made to release Java under the GPL, Sun explicitly added a linking exception. It's because that isn't something you just automatically get for free.
As a marketeer that has worked big telco, I guarantee you legal signed off that definition. A marketing department will propose content and then EVERYTHING will go via legal for approval. Legal taking responsibility is entirely appropriate. Marketing are there to make ideas that sell, legal are there to make sure all ideas are within the rules.
I'm trying not to hijack the thread with my own advertisement.

But also, the title isn't finalized.
> Very little of what is actually needed to reproduce an experiment goes into academic papers.

This is also an issue where investigators apply custom software to complex systems. Getting source code can be nontrivial, and documentation is often inadequate. And there may be bugs that were avoided rather than patched.
Would it be imprudent to point out that the late stage rounds aren't being done by VCs?
Thanks for the reply – it sounds like you're definitely hitting the areas I care about.

One quick thought: I was at USENIX the year that ZFS was announced and one thing which was very popular was when the Sun team talked about how much random testing they'd done with billions of runs exercising the major features with simulated failures, memory corruption, etc. so they could stress-test the detection and recovery mechanisms:

https://blogs.oracle.com/bill/entry/zfs_and_the_all_singing

You could see a lot of sysadmins nodding their heads as they described each class of failure mode and how they were trying to simulate it.

These days I'd probably toss in something like running afl-fuzz against your storage code, too.
Tactical Nuclear Ambiguity: Mushroom Clouds, Flashes, and Bangs
What's the difference between Xen and a microkernel? They both manage memory, do CPU scheduling, provide efficient message-passing, protect "processes" running underneath them from each other, and leave almost everything else to the "processes" running underneath them.
But it is a reason to be skeptical. Further, in recent months and years, we've learned the peer review system is completely broken.

Until it's been reproduced and validated by a few outside - and hopefully disinterested - third parties, we shouldn't accept it as fact but as a theory that could be replaced.
Even their lowest level of premium support is pretty good. I think the higher levels have phone support.
I was recently working on a case and I need a definition of software library. Couldn't find one anywhere. So many of the basics of programming are undefined it makes arguing about programming incredibly difficult -- see every discussion of what a functional language is or strong vs weak typing.
Some of the things you've mentioned here you actually can test for even on closed-source implementations. It's pretty easy to trace the activity of the app to see if it creates temporary files or does network activity so you can you investigate that stuff.

As for the other things, like using the rng properly and whatnot, no, you can't really check that stuff. But your implication here is that open-source apps can be trusted because you can verify that stuff, and I don't buy that. Unless you yourself are a crypto expert that's qualified to carry out such an audit, and you have the spare time / inclination to perform a full audit of the app, then there's no reason why it being open-source should make it any more trustworthy. Perhaps if some independent trustworthy third party performed the audit you could then decide to trust it, but closed-source apps can still be audited, it just requires the help of the app developer to do so.

And of course even if the app is audited (whether open- or closed-source), that audit will only really verify the particular version that was audited. Future changes may introduce vulnerabilities again, so unless someone qualified to do so is constantly auditing all future changes, then you can't really trust it anymore, since your trust model is that the source needs to be independently verified to be trusted.

On other hand, if your trust model is that you determine whether you trust the people involved to get it right, then it doesn't matter if the app is open- or closed-source, as long as it's developed by the right people. Granted, it can be hard to determine whether someone can be trusted to get it right without independent audits, but speaking personally, I take tptacek's "I feel like they know what they're doing" recommendation as carrying a fair amount of weight. I certainly would welcome an independent audit of 1Password, but I recognize that I can't really expect a closed-source software vendor to hand the source of their flagship application to a 3rd party.

(if it isn't clear, I'm a happy user of 1Password)
> What's the difference between Xen and a microkernel?

Xen allows full OSes to be guests and run on top of it. Microkernels only allow servers to run on top of it, and those servers have to be purpose-written and cannot meaningfully be ported.

Xen doesn't provide hardware abstraction and is fully invisible (except to the extent it advertises itself); microkernels are neither.

Paravirtualization (what you did before VT-x and similar) was an oddity, and blurs these lines a tiny bit, but the distinction is fairly clear otherwise.
What WebAssembly means for the industry
When choosing between immediate profitability or faster growth, the smart decision is typically faster growth, as that leads to much greater profits down the road.

Remember when the HN crowd thought that Facebook could never be profitable because they were making the same tradeoff?
Biomedical engineering Bachelor degrees frequently have poor job outcomes, they are a few different subjects combined into one degree which leaves little room for depth. My understanding is medical device companies would actually prefer to hire electrical, computer, or mechanical engineering degree holders at the undergraduate level. You also don't qualify for engineering positions in the aforementioned engineering fields either.
Yahoo Japan Invests in Monk’s Hill Ventures’ Fund for Southeast Asia
Sorry, I might be missing something here, but would there be any tangible differences between the service provider having access to a secondary key vs them having access to the primary key if both can be used to access your data?

I'm honestly interested because I'm building a distributed system where only the user has the decryption key, and I've always just assumed that password recovery is a lost cause in such systems.
Here is some reading material from gmaxwell: https://bitcointalk.org/index.php?topic=144471.msg9764161#ms...
It's completely ridiculous to send a memo to any significant fraction of the employees of a 60+k person company and not make plans for it being the top story in tomorrow's news.
"Pao, who has said she would appeal, has offered to drop her case for $2.7 million, Kleiner Perkins said in a court filing earlier this month."
Does anyone know the backstory on $11?
Reddit is a "microblogging company"?
Isn't this dependent upon the microkernel's license? Wouldn't it be possible to use an open-source license which also explicitly forces servers which use it to also be covered under the same license?

Something akin to to affero gpl?
Better lock the fire exits so they don't take unauthorized breaks.
Related, over 10k people has petitioned for her to step down from her position at reddit:

https://www.change.org/p/ellen-k-pao-step-down-as-ceo-of-red...
T-Mobile UK (now largely assimilated by the EE mothership) comprehensively denied the existence of an 18-hours-a-day 4mbps throttle placed on its unlimited plans [1] for several years before getting in trouble with the regulators. As far as I'm aware they weren't even punished, which is a shame given how blatantly deceptive their practices were.

This strikes me as a reasonable fine. Well done FCC.

[1] http://www.techradar.com/news/phone-and-communications/mobil...
> if you'd like to support my ongoing Creative Commons writing, please consider buying me a virtual beer.

In the spirit of the article's talk about financialization, I wonder if there's yet a way to buy the author virtual beer options?
Kleiner Perkins offered her $1M not to appeal.
Ask HN: Career trajectory? I'm terrible
hi, hn.

I know I posted before...but I feel like my situation is the same or worse. I'm trying, I really am.

I keep trying and failing. I am sincerely worried that my career as a software engineer is over, if it even began. This is the end. All I wanted to do is get really good at this and build things but no one wants to hire me. I try to get good on my own but I know that I don't know what I don't know. I keep trying to do stuff on my own but all I do is fail. If I never quit and never win, what do I do?

I don't know what I'm doing wrong. How do 'normal' people do this? They graduate school, get a job doing this, and then get better after years of practice? Did I take the wrong jobs? What did I do to so colossally fuck things up so no one wants me?

I'm terrible. I'm shit. I'm in the wrong field. I feel like eating a bullet would make the world a better place. I'll never understand. I give up.
but...whatever happened to es6? ;)
Sorry, just to be clear, I don't see anything wrong at all with raiding the best ideas from older languages. It's actually awesome: it means those ideas get used. I'm genuinely just amused at the cycle.
Any possibility for consideration of composable continuations as a WebAssembly language feature, e.g. shift/reset in Racket?

See: Adding Delimited and Composable Control
to a Production Programming Environment

https://www.cs.utah.edu/plt/publications/icfp07-fyff.pdf
> Well in 2006 when those ads were first being shown, XP was still the newest version of Windows and it had no privilege separation

That's probably false. Windows introduced this feature in Windows 2000 (from 1999) and you could define a "normal" user and a "power" user. Only when you needed to install something would you run as the power-user.

This all worked inside the same desktop session.

That maybe only 1% of the users (the "paranoid" ones) used it, doesn't mean it wasn't there.
> Next YC deal: Here's $120k for 7% of your company. Also, welcome to the club! People have heard of us! You now have social permission to tap the resources of several hundred companies, some of which are worth billions of dollars. You're a mortal lock on raising a round subsequent to Demo Day at a valuation which will make angels weep while happily investing. You have preferential access to every connection which matters in Silicon Valley, including top-tier VC firms, a pool of interested employees, potential acquirers, and vendors who you need good relations with. Comes with one free TechCrunch article, too!

Sigh.

YC has a lot of cachet and no doubt opens certain doors, but founders should never drink too much Kool-Aid. For all of the wonderful things YC provides, the success of YC startups basically follows the same power law distribution you see across the Valley and no founder should delude himself or herself that being part of a "club" guarantees success in today's market.

Just look at the experience of the founder of Dating Ring (YC Winter 2014)[1]:

And so we focused on growth. For a year, my cofounders and I worked 100-hour weeks, all major holidays and weekends. We gave up social lives and had one of the most impressive graphs at the crazy 78-company Demo Day YC hosted – 60% MoM revenue growth, with 25k in revenue for March.

We had more press and name recognition than any other company there, and my pitch was named as one of the top 8 by TechCrunch.

Out of the 500 investors there, only one invested.

[1] http://advice.datingring.com/fundraising-while-female/
but AT&T isn't in trouble for enforcing QoS, they're in trouble for throttling connections down to dial-up speed after a usage cap.

Even when read in the most beneficial light, no way can the word "unlimited" be interpreted to mean such a thing.

But the FCC Specifically said that companies have the right to employ reasonable network management. 56Kbit/s on the same network others are getting 30Mbit/s is not reasonable by anyone's stretch of the imagination.
Apparently, it just did.
If the cost of work is $229k, and the reward is $276k, then why is there a $47k difference? Making the defendants whole?
Some feedback if you're the creator:

Don't put an upper limit on password length. Also, if you're going to have password requirements tell me what they are before I try to submit.

> No upcoming events right now.

Thanks

If you don't have a critical mass yet, why not offer a single entry on the homepage that asks for location and if there is an event near me, tell me to signup, if not ask for an email address, then send me an email when there is actually an event near me instead of making me go though the signup process to find that out. I'd bet you'd get a lot more email addresses that way, and a lot less ill will.
Would appreciate an aggregated thread at the end, with common problems / solutions / general advice at the end. :)
It's clearly about ethics in link sharing.
Not related at all.

That's related to Reddit drama and Reddit drama alone.
What do you want to say?

Should everybody just pick the money and run? Without knowing the details of the case and the reasoning of the people, it also could be possible that this woman was not looking for the money, but righteousness.

And no, I am not convinced (without knowing any details), that because the judgement was against her, that this is justness. (I have seen so many unjust judgments in my own country that where based on the fact, that one side had the better lawyers or better experts they hired)

Jurisdiction in human hands can always be an approximation of justness.
> Xen allows full OSes to be guests and run on top of it. Microkernels only allow servers to run on top of it, and those servers have to be purpose-written and cannot meaningfully be ported.

L4 is an archetypal microkernel, and people often run full OSes or other ported software under it, including Linux.

> Xen doesn't provide hardware abstraction and is fully invisible (except to the extent it advertises itself); microkernels are neither.

Microkernels typically don't abstract any hardware other than CPU and memory; any other drivers would run under the microkernel.

And Xen is only "invisible" if you run full hardware virtualization and no paravirtualized drivers.

> Paravirtualization (what you did before VT-x and similar)

People still use "paravirtualization" today; see the "virtio" drivers typically used with KVM.
How is that related to her lawsuit? It seems completely unrelated to me.

In any case, 10k "people" (it's easy to game these things) is just a drop in the bucket of reddit's userbase.
Go Amy! Turtles all the way down.
"As a tool for grassroots action, a network of like-minded people bound together — as long as they have tools to interact and do things — can be incredibly powerful,” he said."

Spamming Internet users to vote for a candidate is nothing new. I find it a little disgusting that many of these technology companies seem to have no problems announcing that they are essentially indirectly lobbyist groups for specific political candidates.

We have big problems when big oil is getting government money, but when sites like Facebook (which have more power in terms of changing public opinion) allow the Obama administration to spam its users:

http://www.breitbart.com/big-government/2012/10/03/obama-to-...

Another Facebook example:

http://nation.foxnews.com/2014/10/20/facebook-marks-yahoo-st...

I guarantee that if a Republican were to do the same thing, accounts would be shutdown within 24 hours.

The danger of using a social network to change democracy is that it often times leads to mob justice and a court of public opinion.

Our society is actually going back in terms of government and it's scary.
That's the case for most taxi drivers in general in Vietnam & China. One family member/friend gets the taxi license and lends the car out while he's sleeping/drinking.

It's a little rare to actually see the same person driving as is in the official picture in the cab. But then again, the cab is used 24/7 for maximum efficiency...
That we basically know bugger all about nutrition.

http://blog.dilbert.com/post/109880240641/sciences-biggest-f...
This is what 21(decimal)PB looks like in terms of Backblaze storage pods:

https://www.backblaze.com/blog/why-now-is-the-time-for-backb...
I disagree wholeheartedly. You're only one person! Put your effort and talents into the single job you really want to be working on at that moment. Stop trying to optimize for the most money... Optimize for happiness.
Thank you very much for writing this out. I'm in this exact position at the moment (including the 24/7 anxiety) and this is real eye-opener. Time to make some changes.
Greens to challenge government site-blocking regime in the Senate
I have noticed a similar trend. However, I wonder if there's more to this trend than meets the eye. I know for these examples (especially Kyle Russell, Colleen Taylor, Ryan Lawer) a big part of it is the network they have with founders and investors. Since a big part of their job is to write about startups they have a broad knowledge of the tech scene and seem to be extremely good at filtering out the noise.