skysight-inc/HackerNews huggingface dataset:
Funny story, I erroneously threw `UseRoaming no` on my server config and freaked the fuck out when I couldn't get into via SSH.

Six rescue sessions later, I figured out it shouldn't have been there ...

In the future, I'm definitely going to read documentation & test config files (sshd -t -f /path/to/sshd_config, in this case)

EDIT: Moral of the story, I am not a smart person sometimes.
> Funds usually appear in bulk the next business day after settlement.

That's not a confirmation, that's you temporarily being loaned the funds; confirmation is when charge back is no longer possible and you actually for sure have the funds.
but you were also granted 100,00 more stock because you didn't care what TechCrunch said. $9.6M isn't bad for 4 years of hard work

Why stop at 100k stock? What if you were granted 1M shares? That's worth $96M, 10x more!
Not enough. 500B would be more accurate.
How GM Beat Tesla to the First Truly Mass-Market Electric Car
I agree with the sentiment. I don't think there's a solution in focusing your rumination inwards - in my case it's a good way to feel more anxious.

But I do have a bit of learned rationality in me, in the form of "I know I will commit error x in the future, therefore..." So rather than try to become a master of self-control, I make moves to arrange the world around me so that there are safeguards, the error is insubstantial, and I end up on the happy path automatically 90% of the time.

Similarly, I focus personal development on going "from strength to strength" rather than on shoring up weak areas. If I start from the models I know and keep extending them out more and more, I will get to the things I was overlooking, eventually. One thing I am doing now is using Streak Club [0] to develop a single habit over a long period of time, that I would ordinarily excuse myself from.

[0] https://streak.club/
Can someone express this as a percentage of the claims themselves? The $5B figure is meaningless without knowing the size of Goldman's loot.
Up to now they were telling anyone who wanted to ship directly to FBA warehouse to use Samuel Shapiro and Co., Inc.

I still have a stack of paperwork from them back when I was considering shipping some items by container from Japan.
It was a startup, so we have like a gazillion cumulative hours of experience being sued, going to court etc, over exactly such silly and needless documents.
Let's just go through the docs and bring it all out.

>"We are pleased to have reached an agreement in principle to resolve these matters," said Lloyd C. Blankfein...

All you really need to know.
You're being down-voted but I was about to say the same thing (minus the bullshit part). They do seem like an evolved version of the same old New Age philosophy, which is an evolved version of the age old Eastern mysticism, which is technically all religion in traditional sense. Whatever.
Intel Software Guard Extensions – Memory Encryption Engine
Newly discovered supernova most powerful explosion ever seen
Synology are adding Btrfs support in the next version of their OS, for what that's worth.
got similar feedback on reddit too
https://www.reddit.com/r/arduino/comments/40w7et/philips_hue...

I can see how people can get worked up over this. Here's what I replied over there:

Thanks for pointing that out. I agree that from a technical standpoint this is not the same as a Philips Hue bulb or light strip. If you look at it from a users point of view, all Philips Hue is a lamp that you control the Brightness and Hue of. This gives you that functionality.
No Zigbee protocol.
True, but in the context of HomeKit/HAP-NodeJS, does it matter how the bridge talks to the light? I might as well be using 433MHz transceivers, nRFs, or directly controlling the Raspberry Pi's GPIOs. For that matter, ZigBee would be doable too, but I don't know enough about the protocol to see it's benefits.
No smart mesh network where each device extends your coverage.
True, but a mesh network can be implemented with ESP8266. But if my whole house has WiFi, I don't see the point.
No possible compatibility with either Phillips' Hue bridge, Hue remotes, or any other kind of Hue hardware (like Phillips' Hue+Ambilight TV's).
Actually, using the Philips Hue shim in Homebridge, I believe it should be possible to make it compatible to Hue bridge.
My motivation behind making this was to prove that with ESP8266 based projects, you don't need to have a clunky web UI or a custom app. This lamp can be controlled with any app that support HomeKit. Philips Hue was just the most similar commercial product I could think of.
Btw, HAP-nodeJS can be completely eliminated here by using nRF51/52 BTLE chips. They can emulate the HomeKit API and control the NeoPixels both in one chip, so no bridge necessary!
For context, that's about 3 months' profits. Not nothing, but not much compared to the damage they caused.
I do think you're missing something. The comment took the form of wishing someone well, but no one who primarily wished to express that would express it that way.
Spend a few months here in Los Angeles -- heck, just try driving anywhere on any given Thursday -- and you'll appreciate what a productivity-sapping, infuriating, stress-inducing, risky, ever-worsening nightmare the daily commute can be. My drive home tonight was a pleasant, breezy, 45-minute cruise covering 2 freaking miles of road, in which I was nearly hit at least twice -- once by a crazed/enraged driver who flipped an erratic u-turn from one busy lane into my lane going the opposite direction; and once by a driver who decided that a red light was just a suggestion. These are not uncommon occurrences. And they are happening a lot more frequently. At times I feel like Han Solo navigating an asteroid field.

As for me? I'll trust the future to swarms of interconnected, cross-communicating AI cars over a random, haphazard swarm of humans any day of the week. The cars can think and operate together. We just think about ourselves. We can't possibly take all of the data on the road into account as well as connected cars will eventually be able to. I don't know what they can do right this second, but I am very optimistic about what they'll be able to do in the not-too-distant future.
I was skeptical about the claims of competitive compression, but in a handful of experiments it looks like farbfeld+bzip2 got slightly better compression than png (after running through pngcrush). Decoding took an unfortunate number of milliseconds, though.

(Give it a try! The tools are right there in the git repo, and quite easy to use.)
Also, I find it strange they felt so strongly about the whole thing that they created an account just to comment.
And open themselves up to a lawsuit? Nope. Just keep pretending like it's obvious. Even though we've had blue-tinted screens for decades and no one came up with a similar feature.
Apart from bandwidth limitation: the Chinese miners presumably make and value their profit in traditional money, by converting mining rewards. (If nothing else, they need to pay for the mining operation somehow.) A fall of the value of Bitcoin in traditional currency, e.g. due to a lack of market confidence, impacts their profits very directly. Miners, typically, don't want to hold Bitcoin positions themselves.

So they are incentivized to be extremely risk-averse to anything that could affect the Bitcoin exchange rate, and will only be excited about code changes when not changing would be clearly worse.
maybe write a `Dear "Dear 'Dear Github'"` letter"?
Why do you want GitHub to solve the (very) specific problems of issue and defect tracking?

They make a facility available as a nicety, but if your project has legitimate Global impact, you should be looking at (or bootstrapping) a counterpart.

Don't have the revenue for JIRA? Apply for the Free license.

Don't have the stomach for Bugzilla? Turn out a Node/Go alternative.

Don't have the business alignment with Clearquest or Rally? Lower your expectations to suit your Free (as in beer) SCM tool.
Republican Debates: Bad for the New York Times, but Good for the Economy
>for the simple fact that the "specification" for the Bitcoin protocol was "whatever Satoshi's client does"

Fully agreed. The largest failure of the so-called "developers" (pretenders after Satoshi) of Bitcoin have failed to concentrate their efforts on understanding and specifying Satoshi's code.

The original Satoshi bitcoin implementation is a mess of Boost-y C++ that was clearly written by a bright guy who was steeped in mediocre C++ programming (probably on Windows). Studying the code and writing a proper specification is job number one. Adding random new features onto Bitcoin without first understanding the codebase is simply juvenile.
I am running Kubernetes on CoreOS in production. Have been very happy with the setup. Kubernetes docs and community are excellent.
$.106 and free weekends.
This comment breaks the HN guidelines. Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html
For one example, see the Android kernel for Qualcomm HSIC baseband interface (baseband-qct-mdm-hsic.c)

https://git.sphere.ly/Lloir/android_kernel_htc_evitareul/tre...

The way manufacturers "mitigate" baseband to main CPU compromise is by using a protocol that allows no initiation from the peripheral device (baseband). It can only talk to the main CPU via a serial-like protocol, not access its memory directly.

Other routes, such as side channel leakage or possible flaws in the main CPU software that interpret messages received from the baseband are still a potential source of problems, but there is no such DMA capability in the HSIC protocol.

It is valid to have general distrust and annoyance with the spy agencies for their actions to create backdoors. But there is no technical basis for this article's claims, and the author should retract them.
7 Ways to Be Extra Good to Your Subscribers
What are you paying for that though? My point was people compared cheap VPSs to more expensive managed services and don't take into account the automation they're missing out on.
They made 8 bil in 2014 fiscal year. That's 5/8 of their profit. It might not make up for what they did, but its a big fine.
>> They're based on 409A valuations which are usually much, much lower.

Mostly in cases where common stock is much, much less valuable than preferred stock.
While this isn't trivial as far as settlement dollar figures are concerned, I can't help but think it represents a small fraction of Goldman's ill-gotten gains.

They've had eight years to literally make bank on the proceeds.
I believe GitHub translates :+1: into a thumbs-up icon, so you'd probably want to limit your filter so it only applies to non-contributors.

But still, yeah, it would be fairly trivial to require posts to be more than +1, or to display a warning when anyone starts a post with :+1:
Invoking a generalization about "the HN crowd" as a rhetorical device in an argument isn't really legit. You're as much part of that "crowd" as anyone, and such generalizations are mostly just bias (https://news.ycombinator.com/item?id=10889615), which explains why the comments that diss the community routinely contradict each other.
Apologies for the mistake, but I'm quite familiar with Bitcoin (and also have a financial stake in this matter). You can see my past comments here on the subject (many of which, regrettably, also contain the capitalized C)

Not just directing this at you as numerous people have pointed this out, but it seems awfully pedantic to quibble over my capitalization of a letter than to address the substance of the point which is that the technical issue here is quite fixable and that the political will to fix it is not impossible.
As a quick refresher, these guys sold CDOs that they knew weren't priced correctly, obfuscated the mispricing, and then profited on short positions against the securities. Took 7 years to settle for being straight up crooks. Still the Wild West out there.
> Are you saying none of these problems could be solved by putting a team of professionals on it? For example, maybe six PR and marketing people working full time for four years couldn't make a dent in #1?

The elite colleges say anyone who gets in will be given affordable tuition, but they must have long known that their applicants come from specific socio-economic groups and therefore they are missing top applicants outside those groups. Why haven't they done much about it? (I can only guess.) Note that it must weaken their student body to miss so many top students.

Issue #1 has received a bunch of broader public attention recently (NY Times articles, etc.), so perhaps that has energized a response; I don't follow it closely enough to know.

I also know that solving #1 without solving #2 results only in a lot of dropouts. I happen to know someone at a good university that mentors a group of students from other backgrounds; the university has developed a detailed program to try to keep them in school.

Finally, I have read that Amherst, many years ago, decided that they would actually make an effort to admit a socio-economically (or maybe just economically; I don't know the details) diverse student body, with great success. That is true public service by an institution.
Stars can also be ported over. You could even go one step further and create star similar to reddit's "gold". A "gold" star would contribute to the development of the project.
I used Internet Explorer on SunOS for testing Applets on Windows and Unix.
The problem with your analysis here is assuming that these right holders aren't licensing their content in these countries. And sometimes that is true. In those cases, it's a sort of no-harm no-foul situation. If the person can't pay, no revenue was lost.

But a lot of the time they are making it available, but Netflix just isn't the company who bought it.

It is netflix's job to go and spend teh money to get content licenses for countries where they are selling their service.
Awesome. I've managed to get a consistent meditation habit built using streaks. My longest chain was a little over 100 days straight!
You're right it's pretty challenging but 27+ months and 300+ engineers challenging? I would have suspected to take half the time which makes me wonder what their architecture originally looked like and what they've been doing for so long.
Made a scene from Pirates of Silicon Valley jump into my mind:

https://www.youtube.com/watch?v=yG4DvM0wxdk

"90 hours a week and loving it. Like the T-Shirt? I'm going to give it to my people. Some of them work even more than 90
hours a week." (Steve Jobs depiction)

Woz says it's the only accurate one about Jobs and company. So, whether those words or not, I can only assume jobs worked his people to death to achieve Apple's success. Other things are consistent with that. Then, I hear they're "joining" f.lux to help their mission of improving sleep or whatever. Haha...
We would love your thoughts on ZenHub.io [1] - fully integrated issue tracking, +1, estimates, burndown charts, kanban boards, even a personal todo list - a lot of the features asked for here, right within the GitHub interface and presented a lot more cleanly than competing products.

Disclosure: I work on ZenHub :)

[1] https://www.zenhub.io
They have a better story about firmware than other devices, but they're still running Linux and GNU software, which often has remotely exploitable vulnerabilities. Just today OpenSSH (which is neither Linux nor GNU but which you would obviously use on your FSF laptop) announced an extraordinarily serious remotely exploitable vulnerability. That's presumably not the last vulnerability of that severity in an operating system you install today onto your FSF laptop.

It's not obvious that FDE will totally mitigate hard drive firmware attacks because your boot loader and kernel are likely running from an unauthenticated partition (for instance, most Linux-based systems with LUKS today have all of /boot on a separate non-LUKS partition, and something like a GRUB boot sector too). If the hard drive understood how to recognize the kernel in /boot, it could inject a vulnerability into it. In a few presentations a couple of years ago, I walked through a real example of how a single bit flip in a binary can introduce (or re-introduce) a fencepost error that can compromise security, because the opcodes for extremely similar yet different conditional branches often differ by a single bit. One form of the conditional branch like jump-if-less may be the correct invariant, while another form like jump-if-less-or-equal may be the exploitable erroneous form of the same loop.

I'm not knocking people's work on trying to get a handle on what firmware is running on their devices; I think that work is great. The trouble is that attackers are looking for exploits and persistence in every layer of the system, so you won't get a silver bullet against all attacks by shoring up one aspect.

Good stuff on this: Halvar Flake's "Why Johnny Can't Tell if He is Compromised", and Joanna Rutkowska's recent CCC presentation on persistent state.
Generating Ideas at Apple
Big-Project Engineers Have to Deal with Too Much Red Tape
How about this:

"Two Goldman traders, Michael Swenson and Josh Birnbaum, are credited with being responsible for the firm's large profits during the crisis.[18][19] The pair, members of Goldman's structured products group in New York, made a profit of $4 billion by "betting" on a collapse in the sub-prime market, and shorting mortgage-related securities."[1]

Two tradesmen made this in less than one year. I wouldn't be surprised if it's an order of magnitude less that the whole firm made through the whole period of the crisis.

[1]: https://en.wikipedia.org/wiki/Goldman_Sachs#Actions_in_the_2...
Ok, it sounds like your issue is not really a legal one. No reasonable company sues an ex-employee for telling someone else that they have quit.

There must be some bad blood here, or some underlying issue that is causing your ex-employer to freak out. Worry about that. If your ex-boss is some crazy paranoid, that's the problem right there. No amount of legal argument will make a difference.
Kind of like freight elevator operators. Utterly pointless trade I discovered while living in New York the last year. You can't bring boxes in through the lobby, only use the union operated freight elevator between designated hours.
At the very least, we could try to create standard conventions for vendors like github to adopt
Bitbucket is really far behind.

You can't search the code inside a repository, and the back and forward buttons on the browser don't even work correctly. Can't view a single file history either and it is probably missing a lot more.
I still get a few emails a year from Trac instances where there is no support for unsubscribing emails
Even more, Toyota recently went back to it a bit by opening a plant where the work is done by people instead of machines. Got significant improvements in a short-time from worker innovation. Concept still works.
It looks like you fished the awk file out - I found http://cowlark.com/mercat/com.awk.txt linked directly on that page, which, at 1610 total lines (1518 SLOC counting commented-out code), sounds like exactly what you're referring to.

As for fforth.... your signoff at the end of the comments sums it up much better than anything I could say.

# No evil was harmed in the making of this file. Probably.

This thing is absolutely awesome... a self-modifying tri-language source file, implementing Forth in just 22KB (or 34KB on x64). Very nice.

Now to go read the, um,

panic: unrecognised word: help

...documentation? :P

It actually happens that I've recently become really interested in Forth implementations and systems, so discovering this is especially cool... and on that note, what sources would you recommend I study to get an overview of Forth history and development? I've read enough historical anecdotes to understand there are conflicting opinions (as always), but nothing thus far has shown the evolution of the language itself, how ANS became a thing, and so forth.

PS. clang-3.7 -Os is the winner on i386, gcc-5.3 -Os on x64. tcc-0.9.26, interestingly, comes second on both (26KB and 36KB respectively). (Using Slackware-current.)

PPS. Your site's About section might want to know the Antix website seems to have been taken over by a spam system.
We need to consider that the potential for abuse on the part of the government is also great. When the car communicates with roadside electronics, you can easily be tracked, your car can be told where you can and cannot go, and (if you do not comply with state) your vehicle may not be driveable at all.
Play Cornered
I think we should be talking about 'uranushots' rather than moonshot because 1. the moon is close and now relatively ho-hum while uranus is in another category altogether; 2. For these things to happen a little good luck is required.
This is correct. The problem in this example is not the pendrive, but the automatic selection of device drivers based on the PC OS 100% trusting physical access.

An easy way to see this is recompile the USB keyboard driver to ignore keyboard descriptors with a particular address or vendor ID. If you do this, the pendrive can't do anything because USB is host-controlled, as implemented by the OS. Without the OS initiating a conversation with the pendrive and saying "ok, I'll configure you as a keyboard and interpret responses from you as keystrokes", it can't happen.

As you point out, the main CPU on a phone does not implement HID autoconfig on the internal baseband bus.
> At that size how can any employee have enough information to make a good decision as to what role in the organization needs filling right now?

It's not necessarily about finding what roles need to be filled in the whole organization. It's more about doing what needs to be done in your department. If something needs to be done in another department, you point out the problem and they decide how to fix it.

> or that a role that is filled needs to be filled by someone else as the person currently doing it is suboptimal and doesn't realize it

I think Holacracy is actually better at solving this problem than traditional management. If a role isn't being fulfilled well, it's everyone's job to bring that up at a department meeting so the group can decide how to fix the problem.

> It all makes perfect sense and a small organization, but how could it ever work at the scale of something like Zappos?

I have no idea. I hope they make it work. It sounds better than the status quo.
The Scientific Way to Cut a Cake
You could open a pull request on the list itself.
Academic cancer centers need to focus on improving clinical outcomes, not just basic research. That cancer centers are associated with primary research institutions universities is largely a compromise between with the NIH and the NCI when the national cancer act was implemented. Tenure is based on basic research publications and on not clinical trials. So therapies are not optimized.
Silicon Valley tech firms exacerbating income inequality, World Bank warns
Wouldn't that risk turning a government anti-EV, since they would be addicted to the revenue from fuel?