skysight-inc/HackerNews huggingface dataset:
Grinding your teeth is pretty bad for your teeth too, not just your muscles. You might want to talk to your dentist about this. They should be able to get you a custom-fit mouth guard to wear at night to try and counter this (though it's not cheap).
How hard is it to not be depressed and anxious? Just don't mope so much, and 80% of depression and anxiety disorders would go away.
- Socrates - (wikipedia) Perhaps the most interesting facet of this is Socrates' reliance on what the Greeks called his "daimōnic sign", an averting (ἀποτρεπτικός apotreptikos) inner voice Socrates heard only when he was about to make a mistake. It was this sign that prevented Socrates from entering into politics. In the Phaedrus, we are told Socrates considered this to be a form of "divine madness", the sort of insanity that is a gift from the gods and gives us poetry, mysticism, love, and even philosophy itself. Alternately, the sign is often taken to be what we would call "intuition"; however, Socrates' characterization of the phenomenon as daimōnic may suggest that its origin is divine, mysterious, and independent of his own thoughts. Today, such a voice would be classified under the Diagnostic and Statistical Manual of Mental Disorders as a command hallucination.
Don’t Drop Out
I don't see the point actually. If one figures out the password from the hash its going to work on all servers anyway...
Tests end up needing logic, and so Cucumber ends up splitting the flow of a test between two files in different languages.

I should probably have complained about HTML templating that allows a template to call into functions (or have logic in it itself), that's a bigger and clearer example of the problem.

I think the underlying principle here is that the more powerful languages need to be outermost. Having a powerful language call into a weak language to do something that needs to happen safely works well. Having a weak language call into a powerful language just results in a worst of both worlds - all of the danger but less of the power.
I'm not certain that I'd agree with you about this comment. Which rule does it break? The poster believes this technology already exists and started a relevant discussion about the pros and cons of the existing implementations. I don't think you could consider "Lol" so offensive that the post should disappear.
Interesting - I regularly hear music before falling asleep. I'm always sad that I never have the wherewithal to hum it into my phone.
Don't forget the stupid new keyboard :(
Isn't this exactly what net neutrality is fighting?
I prefer well written, well working, well documented and packaged software that solve problems, not tcl scripts or any other shell scripts that is very difficult to maintain.

shadowd/shadowc is exactly the tool that generates X different salted hashes and distributes it to remote sites, as you described. It embeds to any infrastructure almost painlessly.
With their reputation - I'd say that should be the default expectation, unless proven otherwise.

See https://en.wikipedia.org/wiki/Embrace,_extend_and_extinguish
Considering the huge risk someone would be putting many others in by attempting to construct and run a fission facility, I'm not sure anyone should be "free" to do so.
This is good, but I don't get what "Odin" is in this context (e.g. not the Germanic deity).
So far the biggest advantage of web IDE for me was ability to bypass corporate firewall.

What most web IDEs still get wrong is version control. I want to work on live code and then push it to version control. I do not want another copy of code that I have to push to server and version control.
Nope. Attacker can figure out "some" password (e.g. will find collision for specific salt+hash), that will be valid only for the server it already has access too, so it's not the big deal.

All other nodes will have different salt+hash pairs, so brute-forced password will be not valid for them.
I think it's in the beginning of Operating Manual For Spaceship Earth by R. Buckminster Fuller, where he says that he determined that he could predict advances around 25 years out and still be reasonably accurate. After that, no bet. But people would still tell him he was a century ahead of his time. Anyway, same idea.
0-day documentary by vpro [video]
> The good news is Havok technology may be integrated into DirectX

It would be nowhere good news, since it will make it exclusive to MS platforms only.
Does it have IPv6 address?
Most of these are pretty insane and don't reflect an improvement in utility of any existing technology in any meaningful way, or if they do then they seem to defy a pretty basic understanding of physics. Who made these predictions? I feel like I could come up with a much better prediction for 2115 than have been made here about 2000, but I've also got a better understanding of technology than the general population.

Since I'm criticizing the predictions made by others, I might as well throw my predictions for 2115 out there as well:

- Oil industry will still exist, but in a very limited fashion and will be highly regulated.

- Oil will mostly be replaced by advanced battery, solar, and fusion energy. Batteries will be designed to be more durable and longer lasting to cope with the pollutive nature of disposable batteries.

- Air travel will be less common due to increased counter-terrorism measures that no one asked for.

- Ground based travel and transport will be mostly automated due to its massive success in reducing accidents while at the same time increasing vehicle speed substantially (automation has allowed for better coordination between vehicles, eliminating traffic jams and slow drivers)

- Improvements in energy tech have also improved travel distances between charges, further incentivizing land based travel, which is now considered more safe than air travel.

- Greater divide in socioeconomic statuses - the middle class is almost non-existent, however living conditions for the lower class have also improved as a result of automation and increased government aid.

- Automation is everywhere. Transportation, food services, factories. Most blue collar jobs now revolve around maintaining and creating automata, while white collar jobs remain a human task, however, work in those jobs relies heavily on computers and robotic assistance.

- Drones patrol the skies performing all sorts of tasks. The night sky in the will look similar to a busy highway at night.

- We've cracked certain functions of the human brain. Gaining knowledge on a subject is now based on what your interest is, not your mental ability. Schools still exist, but their focus is on enabling children to discover their passion. Some find it earlier than others, and once you do you can opt to become an expert in that field.

- Death will be a choice for those with money - albeit you won't get to choose to keep your body. We're capable of repairing large portions of the human body with synthetic parts, however we haven't solved aging. Death will either be final, or you can choose to be synthesized into a virtual world - however those alternative endings are commercial and require a paid subscription to maintain.

- Wealthier people are generally more beautiful thanks to advancements in gene editing.

- Tension caused by war is increasing as the US continues to automate its war efforts.

I could go on for a while, but I think most of the things here aren't too outlandish. At the very least most of them would be possible if you have money. Just my two cents though. I'm interested to hear what others think.
I think Google is on the right track with assuming that there is no perimeter and it will only be a matter of time before every company of any decent size/budget will follow suit (maybe within the next 3-7 years). The network security architecture that can best be described as a hard shell with a squishy inside has been proven time and again to be dangerously full of assumptions.
Generate Massive Targeted Traffic from Facebook
I guess attacker can find a collision to hash (using bruteforce), not real password (because real password should be very strong)
I doubt MS changed much when it comes to gaming. They still push their lock-in and didn't even join Vulkan working group (which is all about collaborative industry effort). So anything gaming related that they buy is a reason to worry.
Can somebody explain what project fifo actually does? Even after spending a bit of time on their web site, I can't tell what problem it's meant to solve, or what appropriate use cases might be.

Is it in the same general work-scheduling space as mesos? Kubernetes?
Do we need to list the countless times they embraced something before using it to lock us all in to their own platform?
Outside limits already exist. The entire scandal is that they cheated their way past those limits.

I mean, you're right that CSR is basically a marketing expense, but I still don't see how getting rid of it would fix anything here.
I must be missing something, then: if you take input password A and salt/hash it individually for each server, and the attacker finds the valid input password A via brute force on one, why wouldn't it work on all of them? They aren't brute-forcing to find the salt or the hash, they're brute forcing input password A.
Bluebird makes debugging easy with long stack traces [1], and unhandled rejection detection [2]. Without the unhandled rejection detection, it's easy to get burned by forgetting to handle a rejection case, or use `.done()`.

[1] https://github.com/petkaantonov/bluebird/blob/master/API.md#...
[2] https://github.com/petkaantonov/bluebird/blob/master/API.md#...
Pattern 1 is called "crash-only software" https://www.usenix.org/conference/hotos-ix/crash-only-softwa... https://en.wikipedia.org/wiki/Crash-only_software
He linked a TON of projects that have been shut down. The logic of your message seems to be "they only shut down things that aren't popular, therefore you should feel fine using this really niche product that will never expand beyond a small group of developers."

And for the record, I did use iGoogle. And there were plenty of people who used Wave, Reader, Code, and Labs.
> As VPCs become the mandatory methodology for AWS, it's increasingly annoying just to set up the bare minimum you need to get a capable shell inside your environment. Even experienced AWS users have trouble getting VPCs right given the state of the current documentation.

Please. Even for an advanced VPC configuration, you're looking at 1-2 hours tops for setup. If you want point and click, go to Digital Ocean. Complex tools are always going to have a learning curve.
"We should not seek revenge on those who have committed crimes against us, or reply to their crimes with other crimes. We should reflect that by the law of karma, they are in danger of lowly and miserable lives to come, and that our duty to them, as to every being, is to help them to rise towards Nirvana, rather than let them sink to lower levels of rebirth." — the Dalai Lama
Parking spaces could be tranformed to roads. And streets or even whole cities alloted to Robo Cars only and then used much more efficiently.
I didn't find it offensive, but it did come across as childish and ignorant, and therefore I stopped reading at that first word. Opening a discussion by laughing in the face of the other person (or group of people in this case) reeks of ignorance, even if the person doing so is actually an expert.
Now be honest, who else was doing the calculations to see how many P200's you'd need to build a jetpack?
I don't know, I thought he did a remarkably good job of looking at the existing trends (automation, motorisation, flight) and figuring out what they might be useful for with continued development.
Actually, as the wikipedia entry mentions, one can argue that Method 2 is the correct one: it is the only one respecting reasonable translation and scale invariance constraints.
It's a (pretty great!) cloud orchestration software. Think OpenStack, CloudStack, SDC or an open-source AWS.
>rescue password which can be entered via IPMI or by physically attaching to the server.

If it's an emergency you can reboot into a single user/recovery/rescue state and reset it. No need to increase the attack surface just for that.

>Also, `sudo` password (which is also handled by /etc/shadow) is a good measure on production servers and should be set somehow.

I agree about a sudo password being a good idea, but if we're talking about the "right" way I'd say a authentication directory backend of some sort would be better suited for that.
Thanks for the link, great talk!
I know what you mean! I sort-of understand why people don't make this clear when they're stating the problem, but I really don't understand the vast majority of people who don't explain it clearly when they're stating the answer to the problem. They'll go on for paragraphs, when they could have just said, "Monty only chooses doors without cars, so by choosing a door he gave you more information."
https://www.academia.edu/15399080/Hearing_Voices_in_differen...
> Something can have no negative effects and still be wrong.

But we have to be careful, because the tendency is to say that common variations (those we are accustomed to) are "right" and uncommon variations (those that surprise us) are "wrong", even when there's no sensible categorical difference between them.
There's some discussion of companies that hold monopolies in free markets here: http://www.fool.com/investing/general/2012/04/18/for-monopol.... Basically, small companies with strong brands in slow-growing, niche industries. There's nothing really assuring their monopoly except that it's not worth trying to compete with them.

Regarding tech, the best example I can think of is TI and graphing calculators. They don't have a monopoly but they have a strong grasp on a niche industry - it's far from commoditized. I'm sure a company could create a clone, but I don't know if it would be worth the effort for such a small amount of revenue.
I think a LDAP/LDAP+Kerberos backend is more secure for user accounts but I'd agree that the root password doesn't belong in it. But personally I think disabling the root account (like OS X or Ubuntu) makes the most security sense. You can always get into the account in single user mode.
That's a really good point. I think of earlier incarnations of Microsoft the same way.

Bill Gates' stated Vision decades ago was "a computer on every desktop" and he helped (led?) us there to the point where we now take it for granted. The sheer audaciousness of the original Vision is amazing considering the cost, size, etc of what computers were then. Whatever the (often valid) criticism is today, they helped define and expand our industry in a way that shouldn't be overlooked.

Not many companies hope to do that, let alone accomplish it.
It isn't explained in the README; but why is this approach better than a tried, tested and secure LDAP setup with SSH Keys?

I understand LDAP can be quite obtuse to configure (particularly after OpenLDAP dropped config files), but once you get it working it is rock solid.
Sure, but it's a touchy subject because people can be deprived of their liberty, held in hospital against their will, taken to that hospital by police sometimes, and medicated against their will.

There's a push from people who hear voices but who are not distressed or controlled by those voices to medicate as little as possible. It's a reasonable request, especially because we don't know a huge amount about hearing voices.
Ask HN: Looking for hacking games.
I am looking for scripts/apps that are built insecurely on purpose, a kind of hacking playground so to speak with various types of vulnerabilities. Any recommendations?
"or any other company"

Any other company? You've named three. Truth is enterprise grade companies that serve the business market and don't give their products away for free or participate in a race to the bottom typically don't do this type of thing to the degree that google does. Perhaps the companies that do (including parts of msft) are those that deal with developers or consumers which apparently are more likely to not complain to much (other than to whine online) when they get the shaft. The stereotype, unfortunately, is true. At least that is what I have found.

Also, and this is important, there is the benign neglect phase where they simply keep the product minimally working but don't spend any time to improve it (like google voice).
Things are going to come to a head sooner rather than later. People are more and more talking about how bloated and slow web pages have become. Now we have ad blocking thrown into the mix.

Consumers are tired of big, slow web sites with intrusive ads (non-intrusive, people seem to be more ok with).

Web pages need to go on a diet. Lighten the size of the frameworks. Don't use so many hi-res images (and heck, what ever happened to text only pages!? They can be gorgeous too!). Use more sensible advertising. Just generally optimize the size and speed of the web page.
> It saves resources. But it's also economically efficient, which is the main reason societies do it.

I don't really think I agree that economic reasons are the only reasons to recycle. Some things like green house gas emissions are economic externalities that we should take into account even though they don't directly affect the economic bottom line.

From that logic if recycling was ever proven to not be economically efficient, then we should stop doing it. I think the article was basically saying that in many ways it isn't economically efficient.

> Landfills are completely dysfunctional in every way.

Not sure if I agree with that. In the USA, we have a lot of extra space. After a certain number of years, the landfill can be covered and the land itself reused. Seems just like another form of recycling.
SHA1/SHA256 certificate switching with HAProxy
The Sketchy World of Fake Bike Gear
Cool Download's – PLR – Software
An example of "you don't know what you don't know". I.e. the digital revolution was impossible to predict, as it was impossible to imagine; "digital" is not an apparent extension of anything familiar to an inhabitant of 1900.

That said, I've seen versions of this article many times before, and it has always felt a bit like blog-spam, since they all just link to the source images and add (un)funny captions.
If the poster wants to be taken seriously, that's his or her choice. But however ignorant and childish it is, it's still something someone could say "in a face-to-face conversation" as per the rules.

I'm not arguing this was a nice thing to say, I'm arguing it shouldn't disappear. We have the power to downvote people when they say things that don't fit in the community but pass a very basic civility guideline. Comments that aren't substantive should disappear. Comments potentially with some meat but offensively presented should just be downvoted, in my opinion.
Seriously, I can't imagine this scenario in real life without ssh-keys.
I guess, you didn't address any single issue I mentioned. I don't see, why it's far more effective, secure and stable to have proposed stack as the single source of truth. Given the example, that we do not have LDAP stack already integrated into dev/ops process, it's seems like an overblow for me to integrate it from scratch because of it's massive configuration, maintenance and ugly design.

The right way to do for me is simplicity and using tools, that offers solution for small problems; using overcomplicated bloatware doesn't seems to be right way to do, especially now, when we have that rapid growth in software development.

I would ship /etc/hosts if there will be major performance impact of doing millions of DNS queries across network under high load. It depends on the concrete case.
But on the other hand Bill Gates and Microsoft were blindsided by the Internet.
The Archaeology of Software
Samsung Patent Reveals an In-Depth Glass Project
Bicycles on the Information Super Highway
The Matasano Crypto Challenges might be of interest:

https://news.ycombinator.com/item?id=8166064
That is not a really wise strategy. LDAP is fine for general user accounts when you need to give access to employees on some shared hosts. For production hosts, you often don't want a SPOF such as LDAP for accounts. And I promise you this, the day your LDAP or network will go down, if you don't have at least a single local user to ssh with, you'll regret it.
I like to characterize is as unpredictability being the real harm. If you don't behave as expected, everyone around you will have to react at short notice, and that disturbs the flow. And those disturbances cascade, because laminar traffic flow is highly unstable.
CSR in my opinion is a scam by default. A company's job is to maximize shareholder value by doing what it is supposed to do the best. Whatever money the company puts into CSR is essentially taken away from the share holders.
They're also (?) using Euphoria: https://en.wikipedia.org/wiki/Euphoria_(software)

I remember this being made a semi-big deal when IV was coming out.

Are they using both, for different parts of physics simulation?
Another option is to use something like my CFNBuilder[0] to generate AWS CloudFormation templates. It should allow you to create a VPC (with a Bastion box, DNS proxy, NAT instance, etc.) with just a couple of keystrokes. VPCs don't have to be scary. :)

[0] https://github.com/rnhurt/CFNBuilder
The Greeks were all about bringing in other gods tho, like Cybele.
Indeed. Also, it may sound brutal but even if all the responsible evaded the hard punishment that came upon the company, the next time someone would think about pulling such a stunt off, he'd be opposed by the rest. You just need to make the consequences hard enough to bubble up the ladder and ruin the day for someone at the top.
http://pwnadventure.com/

https://www.hackthissite.org/
Another question is how much bandwidth do you get for free? Could I run a torrent tracker on it or SSH tunnel video streams?
He's using -webkit-font-smoothing: antialiased; With this sort of font it looks terribad. You see this way to often. I've been guilty of it by proxy when another dev comes in and applies this style to the <body>
> manually setting same password is not the way to go

Agreed, if you have something like dish installed, something like

dish "echo root:password | chpasswd"

should do the trick to everything dish knows about.

This is a simplification, but the general idea isn't too far off. If you don't know why its a simplification, then doing it this exact way is probably a bad idea.
Those were paintings made for cigar boxes. Of course they are not supposed to be accurate. They are jokes, visions of the future in the same way that Idiocracy is a vision of the future. (Okay, that might be a sensitive topic for some, since there actually are people who do take that movie seriously for some weird reason, including believing its basic premise to have any basis in reality.)

Of course Idiocracy reflects some of the beliefs about how we think the future might be, but in the service of creating a fantastical, entertaining and funny picture the image of the future it draws is also deliberately grotesque and weird and as much about the present as it is about what we belief the future to be.

I don’t think those paintings are all the different. They should not be taking as a really serious attempt to predict the future, I think.
Not sure what type of hacking you want to do. Reverse engineering? traffic inspection? exploit buffer overflow?

Here is a list of CTFs that might interest you:

http://captf.com/practice-ctf/
Or they will collude, as they probably did with the emissions testing. There's no way GM and Toyota saw VW's numbers and just blindly believed they were plausible. They were probably scared of calling VW out because it would bring an industry-wide crackdown, which it is. Now things are going to be more expensive for all auto manufacturers.
"He is a model of what success currently looks like in Silicon Valley – young, white and male, with all the confidence, opportunity and connections that an expensive education can provide"

Just when I thought I was reading a good Guardian article.