ffk

Docker provides the local execution environment. Not sure how compatible it is with the entire dotcloud PaaS they are releasing though.

https://github.com/dotcloud/docker

That came from Mike Christie. Information was included in the user_talk page where he says 16 out of 19 students plagiarized. That works out to about 84% of known editors from that class.

http://en.wikipedia.org/w/index.php?title=User_talk:WoodSnak...

I agree, I suspect the best way to be caught is for the malicious team member to tell someone who turns them in. Most likely it doesn't ever go noticed. Also, it's fortunate that the information received by the security teams typically has a relatively small window of opportunity to perform the exploit.

Those are some good observations. Most likely they have given the information to Debian security. With something like this, there is a degree of trust that is maintained. The Debian security team has access to other zero-days on a regular basis, so ideally they aren't compromised. It wouldn't surprise me if AB tests were performed on security experts on a regular basis. E.g. two exploits discovered, one sent to half the team, the other sent to the other half. After a log(n) number of iterations, potential leaks are exposed.

Diving further though, at what level do you say you trust the system though? Do you trust your compilers to not inject malicious code? (see http://c2.com/cgi/wiki?TheKenThompsonHack) Do you trust peripheral devices? It's very easy to install a physical key logger into a system. Do you trust your chipsets? Compromised chipsets exist and can be used against you. (http://blogs.scientificamerican.com/observations/2011/07/11/...)

It's a tough situation to deal with. This is part of the reason layered security solutions are typically employed. Even if one system has a zero-day, ideally multiple layers should increase the overall complexity of triggering it. One of those layers are security teams and blackout periods where information is not released to the general public, even if they aren't always effective.

A few things going on here,

1. According to Business Insider (BI), PayPal is using Fuel from Mirantis to manage its OpenStack deployment.

2. BI also announced that Fuel was released on March 25 under the Apache 2.0 License. However, the fuel website points to a form that appears to give free access to fuel under a creative commons attribution, noncommercial, share alike license, with additional licensing options available from Mirantis.

3. To top it all off, the CEO of Mirantis contacted BI and said the information about PayPal migrating over was incorrect and based off of second-hand knowledge (as seen on the update in the bottom).

4. BI also spoke to paypal who stated they are diversifying their VM infrastructure to "enable choice and agility", not replacing VMware.

So, based on all this, it sounds like what really happened is PayPal decided to implement OpenStack to allow for a more diverse internal set of tools to develop infrastructure. A miscommunication occurred somewhere, which resulted in the BI and Forbes story.

http://www.businessinsider.com/a-dangerous-sign-for-vmware-p...

https://fuel.mirantis.com/

Thanks, that definitely explains what it was. Article was different, same topic, same title.

Also, if there is a list of banned sites, is there a place to see what these list of sites are so we can avoid submitting them?

The term you may be looking for is oligopoly - http://en.wikipedia.org/wiki/Oligopoly

Selenium solves a different problem. With selenium, you record user actions, and verify properties about the state of the site.

The record/playback feature is designed to make a copy of the content you look at during a session, allowing you to retrieve it offline at a later time by revisiting the page (or making equivalent HTTP calls).

Interestingly, if you use both together, you can design a offline-mode reader for hacker news for use on the train or other disconnected environments. Or, combine selenium and playback mode to create kick ass demos that are less likely to fail on weak wifi networks. :)

This is probably a practical application of what we saw earlier with the star wars traceroute.

Trace 216.81.59.173 to see the effect if you haven't seen it already.

I've recruited (as an engineer) at a previous version of this before, really enjoyed it.

Candidates set up their own booths, and company reps walk around speaking to candidates. This allows candidates to show you more than just hand you a resume and answer a less meaningful 30 second "aptitude" question on the fly.

At their booth, they set up projects they have worked on, websites they have designed, robots they created, machine learning projects, etc... You get to see what the candidates are interested in, ask them interesting questions, and get to see the candidates at (hopefully) their best.

If you're looking for a job, make sure you bring example work you have done, this will allow you to show off your skills and get others excited about your skill set.

This article makes it sounds like he is applying a microkernel with user space modules to multi-processor systems.

New scientist article on this has better info. Data and instructions are packaged together, are passed around, and executed with a pseudo-random timer offsetting a unit of work to avoid a single thread over consuming resources. They also want to apply machine learning to have certain error conditions self repair through auto code manipulation.

Here's a much better article on the topic:

http://www.newscientist.com/article/mg21729045.400-the-compu...

You'll be pleased to know you haven't missed your chance yet!

I used to see Michal the Milkman trucks driving around near down town Palo Alto a few blocks away from where Steve Jobs used to live!

http://www.michalthemilkman.com/Moo/Home.html

I hope Udacity sets up a portfolio of games created by students of this course. It would help support the efficacy of courses like this, and provide the students with more potential hiring opportunities than a completion certificate alone.

According to my version, Hacker News also invented currency inflation to increase the value of investments in flourine (which is undoubtedly a stealth startup in the latest YC batch)

pg org, we demand answers! ;)

I suppose the term "wrong" I used is not the best, based on what I mentioned. Perhaps "undefined" is better. :)

Here's one example, in order, w/incremental compiling enabled in Java:

Class A contains public static final String x = "x"

Class B contains public static final String y = A.x

Class A modified, A.x = B.y

Result: A.x and B.y = "x"

clean and compile, no code changes

Result: A.x and B.y = null

The reason this occurs is because information is lost during compile. The compiler optimizes the references away and doesn't fix them w/incremental an compile. This occurs in both sbt referencing javac and the eclipse incremental compiler in Eclipse IDE.

While this is contrived, the main point is that more complex interactions occur where these references may not be updated properly and you may end up with behavior you were not expecting due to these optimizations. Interestingly, I think the problem can be solved if the compiler were to keep incremental metadata explicitly stating where these dependencies exist. This certainly is the case with eclipse, where the IDE knows about the link, but still produces behavior that is dependent on compile order and not on the code change itself.

Just make sure you don't ever use incremental compiling to build production jars. There are some edge conditions that exist in both scala and java that cause wrong behaviour to occur. It has to do with information lost when the compile occurs. A full clean and compile produces correct results.

In all seriousness though, I do agree with this with the exception that the IDE needs to make room for the application you're writing. If it can use an extra core to provide smarter autocompletion or discover potential bugs, I'm all for it.

Have you tried emacs? ;)

At the least, she is vocal about FISA.

https://twitter.com/cbracy/status/285064199699300352

I didn't read this as the author giving up. She isn't offering solutions at this point but is asking for increased dialog in hopes of seeding action.

Quote from author:

"I also realize I’m not offering any solutions. But I really can’t think of a better place than right here to start working on some. More to come soon on what shape that actually takes."

For those of us who live in the SF bay region/SV, we do have a say in what goes on here. We start by discussing the problems we see. We brainstorm ideas about how we can change the status quo. We self-organize and begin to enact the changes we want to see. Isn't this what innovation is about and what SV is famous for?

I can definitely see that. A creative opportunity for fun or profit. :)

A few ideas come to mind... In no order of importance.

* Obscure and unused functionality complicating the device? (What do you get when you combine a microwave and a computer? A computer! [thnx Alan Cooper])

* Patents on the physical interface forcing competitors to use different designs (covered in article)

* Physical interfaces different to differentiate themselves from competitors

* Marketing scheme to make a device look more powerful than last year's model by following modern trends (usually towards more complexity)

* Actual innovations in microwave UI design (does sometime happen)

I'm sure I missed some. Anyone want to point out more?

Other restrictions besides bandwidth exist. For example, DPI requires more CPU and memory, which are some of the major constraints of networking equipment, especially when the equipment resides at the edge (borders) of a Tier 1 ISP.

He has pre-written material that someone else is posting on his behalf. He claims to have up to a year of blog posts written up on the event of his capture.

It looks like a translation we can hear occurs around 8:10. Is anyone able to verify the correctness of the speech? (Also, remembering it's a demo and it has probably been tested multiple times for that phrase).

The captcha is nearly impossible to read. Can you switch to a more human parseable version?

Yea, my first encounter was in Ender's Game. :)

This reminds me of the Ansible, a communication device allowing instant or near instant faster-than-light communication. It is seen in many science fiction works and often justified as quantum entanglement in practice.

https://en.wikipedia.org/wiki/Ansible