dice

My wife has T1D and uses a continuous glucose monitor from Dexcom to keep track of her levels.

The current state of the technology is probably best described as "finicky": the sensor skin patch needs to be replaced every week or two, at which point it's much less accurate for a couple days. It also needs calibration inputs from a finger prick at least every 12 hours. In general if the sensor is reporting a high or low condition her first action is to double-check with a finger prick. More often than not the sensor is simply wrong.

With all that said, it's better to have the sensor than not. She is able to use an app [0] to track her glucose levels over both the short term and long term trends. She's been able to use that data to make dietary decisions which allow her to keep her glucose within range and she had very good A1c levels (5.4, vs a goal of "under 7" for many diabetics) at her last checkup.

I think the long term data collection ability means that a more connected sensor (as opposed to the linked tattoo) will continue to be beneficial for diabetics. The next steps in the useful technological development will be to integrate with insulin pumps (this technology is already in trials) and to integrate with diet tracking data e.g. from MyFitnessPal to assist with meal decisions.

0: https://github.com/StephenBlackWasAlreadyTaken/xDrip

The other benefit is that users can send to the list without the (possibly huge) administrative burden of getting a full and complete list of public keys for all subscribers. A similar setup is used for e.g. the (linux-)distros lists[0] at openwall for discussing embargoed security issues.

0: http://oss-security.openwall.org/wiki/mailing-lists/distros

There isn't anything on that exam that didn't get covered in my undergrad Physics program. From the title I thought it was an exam for entering a Mathematics graduate program rather than a Mathematics test for graduate programs, so I was surprised that the questions were so "straightforward".

>Is there any way to tell the OOM killer which program to kill first?

From TFA:

>Without swap, the system will call the OOM when the memory is exhausted. You can prioritize which processes get killed first in configuring oom_adj_score.

The linked solution document is only available to registered RH users, though, and the name is actually oom_score_adj and not oom_adj_score.

`man 5 proc` has details, but tl;dr is set /proc/<pid>/oom_score_adj to -1000 to make a process OOM-killer-invincible.

>I have a system for building RPMs of CPAN modules and their dependencies automatically.

I would be interested in this: is it open source?

Hm, yes in the case where there's only one layover it does say where and for how long. It doesn't show you that detail for 2+ layovers, and it doesn't show you what the length of the legs are or the local arrival/depature times on the comparison screen.

>I almost never use anything other google flights when searching for a ticket. The UI is just so much better and easier to use than the ridiculous bloated crap that most travel sites are

Funny, I was just thinking of how dissapointing the Google UI was: it took me three clicks and two page loads to see where and for how long a layover was. Have you tried Hipmunk[0]? Their interface for flight listings is the best I've ever used.

0: https://www.hipmunk.com

Right, OP was asking why having physical access to a "normal" machine means pwnage: cold boot is one of those ways. The ORWL page describes how they mitigate that.

The key isn't in your head: you know the passphrase used to decrypt the key which is then kept in system memory. Techniques like the cold boot attack[0] or row hammer[1] can be used to retrieve the key and access your data. In the case of non-hardware-TPM secured encryption schemes the kernel or bootloader which must remain unencrypted for the system to boot can be backdoored to record the passphrase and/or the key.

0: https://en.wikipedia.org/wiki/Cold_boot_attack

1: https://en.wikipedia.org/wiki/Row_hammer

>what is an "Old Millenial"?

Someone currently in their early-to-mid 30s. End of Gen X, beginning of Millennials.

A regex is one big implicit AND already. The OR is an exception to the normal rule.

/(abc|def)(123|456)/

You can read that as "(abc OR def) AND (123 OR 456)". The string "abc789" wouldn't match, for instance.

This can become problematic if you're using an SSH agent and have 4+ keys loaded into it. The problem is that your agent will step through keys to try auth with, but most OpenSSH servers will reject keys after 3 failed attempts. This means that you also need to keep an up-to-date entry in ~/.ssh/config as to which key to use with which system.

With the addition of "amazing router" in the title I was expecting some modern iteration of the 500 mile email [1] story.

[1] http://www.ibiblio.org/harris/500milemail.html

>Single-threaded sequential 1KB writes for a total of 4GB, without even oflag=sync? Bonnie++? Sorry, but these are not "good benchmarks to run" at all. They're garbage. People who know storage would never suggest these.

As a non-storage person: what should I be using instead of dd and bonnie++?

>For desktop Linux, SELinux is indeed difficult to use on a day-to-day basis. To the point that there's no way I'd consider using it.

It's on by default in Fedora, has been for years. Most people never even know it's there.

The targeted policies and functionality booleans in CentOS are really nice. I took the same step with finally buckling down and actually using SELinux for version 6 and there was definitely a learning cliff, but just like anything else after you've used it for a while it's all old hat.

You may have seen it already, but the CentOS SELinux HOWTO was very useful for me in learning how to interact with it: https://wiki.centos.org/HowTos/SELinux

>Turns out that doing crazy shit like letting users have their html files in ~/public_html/ requires a lot of SELinux configuration

You should just be able to `setsebool httpd_enable_homedirs on`. What trouble did you run in to?

>procmail touching user directories?

This works by default for me in in C6 and C7: I'm using it on a number of production systems. The ~/.procmailrc should have type procmail_home_t but procmail itself can create/modify/delete files in the user's home dir.

>spamassassin?

Again, should just work. You may need to `setsebool spamassassin_can_network on` depending on configuration.

>a tool which tells you what new rules are needed

That would be nice. My usual process if I'm in a situation that needs custom rules is to:

    echo '' >/var/log/audit/audit.log # (it would be better to rotate it here, but you get the idea)
    setenforce 0
    # Do whatever I want to be able to do...
    setenforce 1
    sealert -a /var/log/audit/audit.log

Also this is privilege escalation within the DomU (guest), it does not break out into the Dom0 (hypervisor).

It looks like he'll do one of those next, though. The last paragraph in TFA:

> A future blog post will talk about a guest-to-host escape, with a working exploit. Stay tuned!

The initial release of Phoenix was in 2002. Many long-time Netscape/Mozilla users (myself included) switched very early on.

There's a two year minimum that you must hold the home to qualify for the exclusion. So it's not "every time" it appreciates, but it is "once every two years".

https://www.irs.gov/publications/p523/ar02.html#en_US_2015_p...

It's present in my netstat, from `net-tools 2.10-alpha`. Man page says it's shorthand for `--protocol=inet` (as opposed to `inet6`) which shows only IPv4 sockets.

>Since these tunables are not dynamically adjustable, we manually patched the running process to avoid sleeping in this case.

Holy crap. You wrote a jump into an active process' memory space?

>Although my opinion is "not a strong correlation between the two", and that certainly seems to be supported by the supplied data.

That position is supported by the first analysis, but not the other two. The three analyses provide three different conclusions: no correlation, correlation with increased homicide, correlation with decreased homicide.

I am using "reliability" in the sense of RAS[0]. An HA datastore which erroneously ACK's writes has lowered reliability, as there are known cases where it gives incorrect outputs.

0: https://en.wikipedia.org/wiki/Reliability,_availability_and_...

>Redis is really reliable (in my experience at least)

Redis has been demonstrated[0][1] to lose data under network partitions. This is particularly concerning when discussing the type of partial failure that GitHub reported.

0: https://aphyr.com/posts/283-jepsen-redis

1: https://aphyr.com/posts/307-jepsen-redis-redux

You used to be able to underflow the score in MS Solitaire by repeatedly dealing new hands (would subtract 52 points or so). I believe that, in Win95 at least, the score was a 16 bit signed variable so you could underflow it with a mere 1261 deals! I wonder if the modern one is 64 bits, and if you can still underflow it...

>Android with per-app permissions controlled by user (e.g., user can enable/disable access to location data for particular apps). This could be a fork of Android or maybe there is security software that could be installed, such as on a rooted phone.

This is a built-in feature in Marshmallow [0].

[0]: http://www.greenbot.com/article/2990078/android/how-to-toggl...

Funny, I switched from a rolling release distro to Fedora around 2006, having gotten sufficiently annoyed with the lack of wide scale integration testing. I like that there's a Fedora "image" that gets tested as a whole, and every 6 months it gets updated to the latest and greatest (after more testing).

It is something being worked on, though [0]. Extremely difficult does not equate to impossible :)

0: http://arxiv.org/abs/1504.03966

I was super excited when I started reading this article, I thought they were talking about a direct measurement of the CNB.

Right now, the CMB is as far back as we can see in time. That radiation originates from a time when the Universe was around 380,000 years old. The CNB originates from when the Universe was two seconds old. A direct measurement of it would be an astounding achievement and would give us many new insights into how the Universe formed.

I was sad to see that the link to the domain generator was broken. The new one on the home page is a div that's generated server-side.

I hope you don't mind that I wrote a quick one-liner to see if you're still detecting bots...

    @bobmail.info
    @zippymail.info
    @thisisnotmyrealemail.com
    @spamhereplease.com
    @safetymail.info
    @suremail.info
    @mailinator2.com
    @spamherelots.com
    @mailinator2.com
    @spamhereplease.com
    @spamherelots.com
    @spamherelots.com
    @mailinator.net
    @mailinator.net
    @mailinator2.com
    @mailinator.net
    @mailinator.net
    @mailinator2.com
    @mailinator.net
    ...

Yup :)

I didn't see any "evil" insertions, though...