skysight-inc/HackerNews huggingface dataset:
Ask HN: How to audit all permissions for people in Active Directory
I work as a developer in a .NET shop and I was asked to audit all users permissions (permissions directly granted to the user and via groups ...) in Active Directory. I tried to do it with PowerShell but that seem to be very difficult to do and after doing some research that approach is not recommended. I am stuck on this issue and I am new to Active Directory security. I need to do it on the cheap as we cannot buy commercial software. The directory is old and contains over 10000 users. I am considering writing my own .NET application but that might take at least a couple of months to write (i.e. I need to figure out how the security works in Active Directory and how to get all the permissions etc.).
Any suggestions on what is the best way to approach this issue?
Thank you for your responses in advance.
LINE Messenger Releases Public Bot API
I feel like it's misleading of them to say that a computer painted the picture. That makes it sound like all works of Rembrandt have been fed into a Machine Learning algorithm and finally the computer spit out this piece.

After having watched the YouTube video, I fell like actually the picture was more or less photoshopped together from existing Rembrandt paintings. The role of the algorithms was "only" to generate the most average / representative of his works.
In California (and in Colorado before legalization) dispensary customers are overwhelmingly recreational users, given recommendation letters from "specialists" who issue them with no medical exam. Their "demonstrated medical needs" would never pass muster with a, say, Kaiser doctor.

The dispensary business won't collapse because they are not competing with pharmacies. Though it will be fun to watch the insurance companies push back when pot is prescribed for whiplash, colorblindness, and genital herpes.
https://apps.evozi.com/apk-downloader/?id=com.reddit.frontpa...
Their new website is open-source and updated frequently:

https://github.com/reddit/reddit-mobile
I'll ride along in someone's autonomous race taxi. I think we could get Sonoma on board for some hot laps!
> virtually impossible to vacate a tenant

It should be virtually impossible for a landlord to do this. A landlord should be able to vacate a rental, perhaps, but not the tenant. :)
It might reduce turnover, but what your arguing is that taxes replace rent as a forcing function for making people on fixed incomes move. That wouldn't increase housing, just displace lower income people more.
The Post-Ownership Society
For those wondering why mahyarm is asking when there's already an iOS app... http://i.imgur.com/Dq6xcWT.png
Much of modern control theory is equivalent to machine learning. "Adaptive feedforward control" is a form of machine learning. So is "automatic system identification". Back in the 1990s, before machine learning had really got going, I thought that adaptive feedforward control was a path to AI. In a sense it was, but it took a lot of mathematical development in other fields to get it there.

Feedforward control is unusual. In feedback control, you look at the error and try to zero it out. Usually, there's some lag in the system, which leads to undershoot, overshoot, oscillation, and all the usual problems of feedback systems. Maxwell (yes, that Maxwell) figured all this out in 1868, and his little paper "On Governors" defined linear control theory for a century.[1]

Feedforward control, though, is about measuring disturbance inputs, predicting what's going to happen, and adjusting controllable inputs so that the error remains near zero. An example is a heating system with an input for outside temperature as well as inside temperature. When the outside gets cold, the heating plant will be cranked up in advance of the inside getting cold. This is essential if the system being controlled has a lot of lag, like a big building's heating system.

Adaptive feedforward control is automatically identifying how the inputs affect the outputs by watching everything for a while. It's thus a form of machine learning. For the heating system example, a good controller might learn that a 10 degree drop outside means a 5 degree drop inside 1 hour later. It might also learn that the heating hot water temperature rises at 30 degrees an hour when the boiler is at full power. Such info can be used to decide to crank up the boiler half an hour after the outside temperature drops, so heating water will be available just when it's needed. This is a basic form of machine learning.

One big difference from the machine learning community is that controls people demand error bounds on their control algorithms. So the machine learning techniques used tend to be the ones ameninable to error analysis. Support vector machines, yes; deep neural nets, not so much.

[1] https://commons.wikimedia.org/wiki/File%3AOn_Governors.pdf
Hillary Clinton’s MetroCard Adventure: Swipe. Wince. Repeat
Even if you fix the grammar problem, it doesn't address the real issue: supply. Turnover of rentals doesn't increase supply. The core of the article is about needing more inventory.
Things actually worked out okay. We had a sit down and amicably decided to wind things down.
So I guess it hit me hard, but really was not a big deal to my investor.
> Individual property owners sell/move on average every 7 years.

Really, on average? Just SF, or Bay Area overall?
(Not that this effort is intended to do so, but)...

Guessing without wrecks, autonomous racing would likely never become mainstream.
Could you please clarify whether your business will actually be manufacturing this new shampoo, or whether you'll just be distributing a product that's already being manufactured by someone else?

- If you're manufacturing it, why would you only be selling it by subscription? If it's really a superior product, you could be selling it through thousands of retail outlets (and benefit from economies of scale from manufacturing it in higher quantities).

- If you're distributing someone else's product, what are the barriers to entry that would prevent anyone else from competing with you? (E.g., do you have an exclusive distribution agreement with the manufacturer?)
That's pretty variable - the person I knew who lived in a mobile home had one that he'd inherited from his mother. I think the lot rent was not too far from what I'd previously been paying for a pretty nice apartment which really kind of sucks since all he was getting for that was a cement slab with some utility hookups.

The other problem he had was that because he owned the mobile home, to get out of the whole situation he had to either find someone to buy it (and take over the space or move it) or he had to get it out of the space himself. The residual value of a 20+ year old mobile home is really pretty low if it hasn't been kept up well, but I think he eventually sold it off to someone for a small amount of money just to avoid having to fix it up enough to be moved.
The Reality of Breaking into Startups
Right behind you on this.

Industry as a whole needs to come together to support this. OCP should add open CPU architectures as well into the mix.

OCP is great but there is no supply chain to support it at a reasonable cost.
At best, this article is amateur hour for WordFence. It's focused on the topmost layers of the OSI model in an ecosystem requiring attention at all layers, from the wire -> up. Don't sell your product as anything more than consumer grade snake oil.

At the top, whether WordPress is secure or not has zero impact on a properly designed network. If a company is dumb enough to use WordPress on internal hosts, they have bigger problems. Add to this, that a properly designed network should have mitigated the chance that a web server be compromised and at least segregate the network and provide access control to sensitive data.

In short, the network was doomed regardless if WordFence was in place or not and it's damned irresponsible for WordFence to suggest they could protect clients from the kind of attack which played out here.

WordFence are a typical WordPress development company, in that they're web developers first, security / network experts when they need to make a sale.... It's consumer grade crap, which is why this article needs to be treated as such.

I should also mention that just because a web server has an outside IP in the same subnet as the mail server pool, doesn't mean it's on the same physical network. It could be on it's own completely separate physical network or segmented via vlans with full access controls in place. If you understood network security you would know how NAT works.

These guys got hacked because they failed on every level of network best practice or even the fundamentals. Taking advantage of this to sell a product which is equally as naive, is as I said, irresponsible if not negligent.
Don't know wrt the OP, but I think people problems are much more difficult to remedy than problems rooted in technology.
Slow travel - you will always have a reason to go out.
According to this article http://www.tomsguide.com/us/heart-rate-monitor,review-2885.h..., several consumer products are accurate to within 1 beat of an EKG.
The Iceberg
Quantity Theory of Innovation
Newton's recipe for alchemists' mercury rediscovered
Jeff Bezos’ letter to shareholders
But there were bad droughts that year that affected food prices world wide, and it wasn't just Egypt that was affected.
If you're interviewing for a job for you, treat it as though you are interviewing them. Do they ask good questions? How do they respond to yours? Are you having a conversation more than an 'interview'? Ask them to describe the ideal employee- the answer might surprise you. Trust your gut instincts. If something seems "off", run.

If you're interviewing people for a job you're filling, focus on getting them to do a small test project and bring it in for the on-site. I've done this for years, never had someone say no. Worst that happens, they're too busy and back out. Fine, no worries. Works well for developers, release managers, program managers, technical writers, etc. Basically you want to be sure that they can solve problems. Memorized knowledge of facts has almost no value (to me) these days; things are changing way too fast for that to matter in the long run. Never understood why the Google's, Microsoft's, ask the goofy questions like "why are manhole covers round?". To me, the hires that are a joy to work with are adaptable, learn things pretty fast, take pride in what they create, show leadership by helping others in their group, and are dependable.
Chinese startups take on Silicon Valley
> Though it will be fun to watch the insurance companies push back when pot is prescribed for whiplash, colorblindness, and genital herpes.

Luckily, the price will be so low, even after-tax, that you won't need insurance to fund your cannabis consumption.
I'd like to know the inverse. I accepted my current job because I really liked and respected my boss (and still do) - enough that it obscured how dysfunctional and mediocre the company was in general. I even turned down another offer with more responsibility at another (name brand) place because their hiring manager was such a dud by comparison.

I'm looking again to escape my current abyss but am just so paranoid that I'll end up in another mess due to simply liking my boss & coworkers during interviewing.
Finally. Horray. Knew when AB was being bought. They were doing something
[In Nepali] C++ Programming – Pt.2 – Variables
They said they incorporated the height map from the original.

How did they obtain them? Do museums/galleries/owners let scientists or engineers study the layers of paint of the physical paintings?
> a tension emerges in Florentine, and indeed in European, historiography between economic historians and the work of social and political historians

This reminds me of the competing narratives from economists versus anthropologists mentioned in Debt: The First 5000 years [0]. In it, the author argues that the economists' narrative is really a creation-myth (or perhaps an evolution-myth) for modern capitalism, rather than an accurate view of the different strategies humans have used in different circumstances.

[0]: http://www.amazon.com/Debt-The-First-000-Years/dp/1612191290
The loophole is a sublet where the person subletting (this is probably illegally) assumes the financial and personal risk.
But why are people upset at others who've made a good investment 10, 20, 50 years ago. That's like telling you you have to either use your savings you haven't touched in x years or give the money to someone else to use it.
FrootVPN: Equal VPN Service Privileges
This looks cool. I've never used webpack, but this seems like a good place to start.

I'm a bit confused about the choice of package inclusions though. Waypoints.js and scrollTo.js both feel like pretty opinionated choices. That is, it seems like you have a particular idea in mind for the UI based on the inclusion of those packages, but the UI is empty.

I think the inclusion of a (not overly complex) UI that makes interesting use of the packages you included would help this project get a lot of traction, in that it would more viscerally demonstrate that the user can go from nothing to a pretty decent website in ~10 seconds.
I love IntelliJ, but it makes a lot of sense for Google to make their own branded IDE for Android development. Android applications are written in Java, but they also have a specific structure and conventions, build and deploy stories, distinct debugging and sdks, etc. Not to mention Google can build great Android layout editors, lint checkers, and other integrations such as the 2.0 flagship feature, Instant Run.

Yes, of course you can build Android with standard IntelliJ, but for making Android development more accessible AS is a great direction. Trying to get the old Ant + Eclipse + random tools in the sdk work together was very challenging, and - at least thus far - AS has been tracking IntelliJ pretty closely so I don't feel out of place. Not to mention IntelliJ doesn't have to be tied to the (very large) community of Android developers; Jetbrains can continue building their product to be more of a neutral all-around (fantastic) development environment.
It's also used on some rockets and guided bombs, which is where I first heard about it. It leads to rougher trajectories but it's a more reliable control surface since you only need to handle zero or full deflection on a given fin.
Ya, that is a real problem with just eliminating it. I think there are probably ways of working around that problem, but they may be messy.

I don't think just giving shareholders a credit is sufficient though. Fundamentally the problem with the corporate income tax is that it takes away productive capital from companies - capital they could be using to hire more people, invest in R&D, etc.

The reason we have a corporate income tax is that people think corporations = wealthy, and they want to tax the wealthy more. This is a fine goal, but it'd be better served by doing just that: taxing the wealthy more, rather than taking what would have been productive capital away from private enterprises.
The financial industry (as a whole) is very very far from having its Napster moment.

The industry has gotten much tighter regulated since the GFC giving the incumbents an even stronger grip on their position.

And the specific low-cost index funds, the article is dealing with, have been around for decades now. I really don't think the headline is called for.
https://news.ycombinator.com/item?id=11433839
"As someone who is on the side of actively managing money, I see this as a strong positive. The more passive money there is sloshing around the more arb opportunities there are!"

In the medium term active and passive management will eventually reach equilibrium. Passive funds cannot perform price discovery as well and rely on active funds to do this. However the ability of computers to discover prices will eventually exceed that of humans not possessing insider knowledge. My money is, literally, with the computers.
On mobile and in most of the world where fast internet isn't ubiquitous, cutting down on the size of your page can make your users' experience much better. It's hard to do that when your dependencies get bigger.
Applying OCR Technology for Receipt Recognition
They do if you want an interface that's similar but scaled up. Alien Blue for iPad was different though in that you had multiple columns open at once, which probably did require more dev time to handle. I'm thinking they wanted a more tailored experience for iPad and didn't have time to design/implement it. Too bad though.
Oscar Insurance is a healthcare startup using technology, data & design to change the way people find and access care. We are disrupting the healthcare industry by putting people first, not business and cost. www.hioscar.com We're currently hiring for a variety of Full-time/Onsite roles here in our New York City location.

Software Engineer: Data https://www.hioscar.com/about/jobs/16268?gh_jid=16268

Software Engineer: iOS https://www.hioscar.com/about/jobs/52063?gh_jid=52063

Software Engineer: Android https://www.hioscar.com/about/jobs/13585?gh_jid=13585

Software Engineer:Platform: https://www.hioscar.com/about/jobs/13633?gh_jid=13633

IT Engineer: https://www.hioscar.com/about/jobs/32248?gh_jid=32248

Software Engineer: Product: https://www.hioscar.com/about/jobs/13586?gh_jid=13586

Site Reliability Engineer: https://www.hioscar.com/about/jobs/13255?gh_jid=13255

Oscar was valued at $2.7 billion following a $400 million investment by Fidelity. http://www.forbes.com/sites/stevenbertoni/2016/02/22/oscar-h....

Check out our Engineering Blog for updates on new projects: http://dna.hioscar.com

If you have any questions please contact Erin: erin@hioscar.com
I said 7 to round up, but lmgtfy: http://www.mymovingreviews.com/move/how-often-and-why-americ...

Which claims 5 year average nationwide in the US.
to add to that, get the Indomie brand, they add extra vitamins and nutrients, I believe it's because Indomie is consumed practically by everyone in Indonesia, the govt mandated them to be healthier (this is based off of memory years ago).
Braking is also used to control weight distribution before cornering, shifting weight to the front wheels to allow for a sharper turn. Optimization occurs when the centrifugal force's direction is counter balanced by the friction of the tires, which varies with acceleration and braking. Optimal lines depend on the shape of the turn, but max braking always occurring right before the apex and shifts to high acc after. Really though, its max brake/acc without slipping not just 1/0. Traction control/abs simplify the situation at the racer input level, allowing optimal strategy to approach 1/0 by functioning as a micro instance of the bang bang strategy. The abs/tcs is 1/0 due to optimization, not simplicity, since a variable input would not allow the wheels to return to a rolling state anymore quickly.
Ctrl-f'ed for "limestone", not disappointed :)

More info in "The Siege of Miami": http://www.newyorker.com/magazine/2015/12/21/the-siege-of-mi...

> I asked everyone I met in South Florida who seemed at all concerned about sea-level rise the same question: What could be done? More than a quarter of the Netherlands is below sea level and those areas are home to millions of people, so low-elevation living is certainly possible. But the geology of South Florida is peculiarly intractable. Building a dike on porous limestone is like putting a fence on top of a tunnel: it alters the route of travel, but not necessarily the amount.
Operationally speaking the single most important thing you should be doing is collecting application and system logs and having them easily accessible and usable (and check your backups every now and again). I say this with respect to the value you gain in comparison to the relatively small costs. You're being your own worst enemy if you aren't staying on top of error logs.

The OSS solutions are mature and simple to setup. And it isn't something you need to get absolutely correct with 100% uptime. If you're an "average" company, a single server running Logstash+ES+Kibana is probably good enough. There's only two ways you can do this wrong: not doing it at all, or forwarding non-actionable items (which creates a low signal-to-noise and people will just ignore it).

After that comes metrics (system and application), which is important, but not as trivial to setup.

Quickly looking at LogZoom, I think the more forwarding options we have, the better. They make it very clear that, unlike Logstash, this doesn't help structure data. On one hand, I don't think that's a big deal. Again, if you're only writing out actionable items, and if you're staying on top of it, almost anything that moves data from your app/servers onto ES+Kibana (or whatever) is going to be good enough.

On the flip side, adding structure to the logs can help as you grow. Grouping/filtering by servers, locations, types (app vs system), versions...is pertty important. I like LogStash, I actually think it's fun to configure (the grok patterns) and it helps you reason about what you're logging and what you're hoping to get from those logs.
You could likely even use an Android emulator.
I live in NYC and barely use the subway at all.
That's a good way to put it. Wonder then if most fund managers fundamentally don't believe that they can beat the market. They say they can for marketing purposes, but their fee structure indicates they can't.

What about this, a mutual fund that users don't really care about what industry it goes into (as long as it is legal) and then the manager decides? In reality are grandma and grampa really deeply insistent that their money should go into mail order businesses so to speak or are they more interested into getting a certain return and would rather have a fund manager "professional" decide? I see the second choice as more plausable somehow.
It’s an Approach, Not a Process – Prototyping: From UX to Front End
Keyboard as a trackpad
What would be the reason for a tech company to have its offices in the city center though?
Any plans to add Javascript as a language?
Not really evident from 95% of the pictures there though, they look like tall square bars in most.

Had to scroll a bit down to find this one, that shows it nicely:
https://duckystravels.files.wordpress.com/2012/02/giants-cau...
That goes without saying....

I took it as a statement of "someone new to the framework, can quickly rewrite their old code" if they came from Angular.

Which is an important metric.

When I converted a Backbone app to Angular, it took 3x as long simply because of the amount of ceremony and process that I had to go through to do things the idiomatic Angular way.

React on the other hand, as a view layer, is so dead simple that you can internalize its workings within hours of study. The complexity with React comes with everything else---Redux, React-Router, GraphQL, CSS in React, etc.

None of that stuff is defined as part of the React framework itself, but that's the only way you can make a "fair comparison" to Angular which is a full-stack framework.