skysight-inc/HackerNews huggingface dataset:
Here's some more details about the state of security of her private server [0]:

>Outlook Web Access, or OWA, was running on port 80 without SSL (unencrypted)

>Remote Desktop Protocol, port 3389, was exposed through the DMZ (open to anyone on the internet.) This, at the time it was being used, was open to critical vulnerabilities that would allow for remote execution of code.

>VNC Remote Desktop, port 5900, was also exposed through the DMZ.

>SSL VPN used a self-signed certificate. This isn't inherently bad, but left them open for "spearphishing" attacks, which have already been confirmed to be received by Hillary Clinton and her staff

It's also interesting how they responded to attacks on the server [1]:

>Here is the section from page 41 of the report which references an “attack”:

> On January 9, 2011, the non-Departmental advisor to President Clinton who provided technical support to the Clinton email system notified the Secretary’s Deputy Chief of Staff for Operations that he had to shut down the server because he believed “someone was trying to hack us and while they did not get in i didnt [sic] want to let them have the chance to.” Later that day, the advisor again wrote to the Deputy Chief of Staff for Operations, “We were attacked again so I shut [the server] down for a few min.” On January 10, the Deputy Chief of Staff for Operations emailed the Chief of Staff and the Deputy Chief of Staff for Planning and instructed them not to email the Secretary “anything sensitive” and stated that she could “explain more in person.”

[0] https://np.reddit.com/r/politics/comments/4j2r94/judicial_wa...

[1] http://lawnewz.com/high-profile/clinton-tech-says-private-em...
my mistake.. sorry for the dupe
We can expect to see a movie made about this within 2 years.
Actually you negotiate salary in the interview proccess. You also negotionate salary increases in performance reviews.

I worked in IT with women who were paid as much as I was or even higher. They got offered supervisor and management promotions but I never was offered that.

From my experience women got paid as much as I and other men were paid and they even got promoted to supervisor and manager positions.

As far as VP and CEOs go women are paid less for some reason. That skews the average salaries in the executive jobs.
> We have collectively decided that the cost/benefit is not worth it.

I don't think the decision has been conscious.

More importantly the costs and benefits haven't been amortised over the life (and impact) of those decisions. Or, if you will, it hasn't been worth it yet. Unfortunately at the point where we can properly assess the enormous cost of these decisions, the opportunity will be long gone.
Seattle's Sound Transit 3 Board Proposes Earlier Light Rail Buildout Timelines
Please contact us: https://qotoqot.com/contact/
Brains in jars?!?
Even Cloudflare doesn't use their own CA, but they have a relationship with Comodo; at least, from what I can tell on services I use with Cloudflare.

If they just need to issue lots of certificates, or make it easy for client devices to get certificates, or even for their own cloud services, they could use LetsEncrypt.

There are very few use cases where having your own CA is necessary, and for a company like Blue Coat, those reasons seem primarily nefarious.
Depends if you class lobbying as a grand nefarious plot or not. I suspect there's likely to be financial reasons for the private email server in this case.
Donald Trump’s Energy Plan: More Fossil Fuels and Fewer Rules
To me, I can't think of a single other operating system that works this way, even Windows. But I'm sure the pro-systemd supporters will "correct" my thinking.

Windows has stopped all the programs I had ran when I log out for as long as I remember.
>The goal of hiring diversity is to reach Proportional Representation; you want your workforce to resemble the demographics of the nation as a whole.

What about when that is reached, or is nearly reached? What's the medium term end goal? Long term end goal? I think here is where people disagree even more than the means to get there.

>Whether this is true or not, or how much it's true, is not that relevant. It certainly can't hurt.

It can lead to distrust, skepticism, disrespect, worse communication. All sorts of negative things.

If we include ideology in the general diversity conversation, and class, rather than primarily gender and race, I'd respect the intention much more.
1. Provide a better 1st party image hosting experience free of ads and clutter.

2. Block other image hosts from your service forcing people to use yours.

3. Introduce ads.

4. Profit!!!
The emails themselves sent from Clinton's server were unencrypted for several months, so unencrypted printing is just more of the same.

There's no reasonable question anymore that laws on handling classified data were broken, the only question is will charges actually be brought?
It can be used for a lot of things. GPG (even over NFC), U2F, 2FA,
Looks interesting! I have to ask: is it OS X native or is it some JavaScript thing?
Really nicely written and easy to read. Low on opinions high in facts. A++ will read again
Interesting, I've always heard you're supposed to stay in one place to make it easier to be found. (So you don't wander off to a place that was already searched.)
> Seems odd to me mate, there are things that being white certainly doesn't buy, it's not a ticket to middle-class.

Perhaps not.

But there are things that being white does grant you:

1. Police won't hassle you for driving a nice car.

2. Police won't hassle you for walking in a nice neighborhood.

3. People won't report you as "suspicious looking" for wearing a hoodie and walking in a neighborhood.

4. Police won't be as likely to use force to resolve a situation.

5. People will be less likely to have negative assumptions about your career, your intelligence, and your capabilities.

//

Being white is not a ticket to success, but it's not a hindrance either. That's the difference.
If you had to guess what the net loss for Facebook at IPO was, what would you say? More or less than Twilio?
This kind of thing is why a visual marker - orange reflector tape, sidewalk chalk, whatever - should be a part of any serious hiker's kit. Going off trail at all? Leave a nice obvious path back to it.
I really love how well this works with Cider though, for Clojure projects. It even lets you jump to the definition of Java or Clojure files that live outside your current project, e.g. in third party libraries or even the Java standard library. Why, just today I jumped to the definition of java.time.Month because I had never actually seen a real live Java enum before. (Sure enough, it's defined with the keyword `enum`. Neat!) Cider has become essential to my Clojure workflow at work.
The Federal Circuit isn't the Ninth Circuit, and that's really the whole problem. The Federal Circuit is the special-purpose patent appeals court. For a case like this where they were hearing the appeal because there were patent claims, they are supposed to treat the non-patent issues in the manner of the local circuit (9th).

The Federal Circuit has a history of ruling in favor of broader intellectual property rights and being periodically reined in by the Supreme Court. They do it for patents, and when Oracle uses a losing patent claim to get copyright issues before the Federal Circuit, they rule for expanding copyright. If Oracle hadn't included patent claims, the appeal would have gone before the Ninth Circuit and probably lost. The Federal Circuit did a farcical job of applying Ninth Circuit copyright precedent, especially in contrast to the thorough job Alsup did.
Actually, there is: https://en.wikipedia.org/wiki/Setcontext

A library I personally recommend, which supports several platforms and back-ends: http://byuu.org/library/libco/
>> Most of these problems simply didn't exist or were not nearly as severe with previous revision control systems

They generally don't exist with Git, either, if you limit yourself to the same set of features and capabilities that other revision control systems have.

Take Microsoft Team Foundation version control for example. All of the "problems" with Git disappear if you use a workflow that gives you the same features as TFVC and have the same expectations (especially around history): collaborate around a single shared repo instance, push every commit when it's made, and allow fast-forward merges only. Conflict? Rebase locally.

Personally, I think a good idea for a Git tutorial would be to recreate the workflow of another version control product into Git in order to introduce some of the new ideas in a familiar war.
I've been using Rescuetime for the last 8 years or so, and I will be purchasing this in the next few weeks to see if it will work as a replacement. From what I can see, it shouldn't be a problem. Congratulations on shipping!
I wonder how many others feel so uncomfortable visiting Gawker that they'll debate whether to click this link.

I did click it, and read the letter in its entirety. I found it utterly unconvincing: a last-ditch moral appeal from someone with absolutely no moral credibility.
Market sizes isn't the same as societal benefit.

I'm arguing that copyright-supported creative effort overall produces and distributes significantly more and significantly better works than creative effort supported in other ways.

If that doesn't imply societal benefit to you, what does?
One could argue whether an API is a creative work however. Are you copyrighting the syntax or the semantics? If it is the semantics, then you are essentially copyrighting a mathematical entity (a type declaration). Are we allowed to copyright mathematics at this point?

Forever unto me, the tuple (Int, Int) shall be mine.
They are in the process of adopting it and emailing all their users to signup for CT.
That used to be the case, but they're not that easy to impose these days. Abuses have been so blatant, and treaties written in such poor manner, that public opinion and media are now "critical by default" of any new treaty. This is particularly true in Europe.
I read the Jacobs link. (Actually, had already read it before. It's interesting, thanks.)

It's straight-forward to get a healthy enough economy to provide full employment. (Not `easy', because things are seldom easy in politics.) We even know how to afford a social safety net at the same time.

To not keep you in suspense:
- tell the central bank to keep nominal GDP level on a stable growth path
- untax labour and capital, put all tax burden on land (whose supply is perfectly inelastic)
- use the tax to finance public infrastructure and a social safety net

If you are feeling like it add:

- remove most red tape from the labour market (the part that prevents hiring and firing; keep OSHA and the like)

http://www.economist.com/blogs/freeexchange/2011/10/monetary...

http://www.economist.com/news/leaders/21647614-poor-land-use...

(Not that the Economist is the best source for everything, but they write short pieces to the point.)
That's the most believable version I've heard so far by a long shot.
Probably the "trail" wasn't marked every inch like a sidewalk. But had blazes every so often so hard to return to.
Can you write service/unit files for irc clients like irssi, or one-shot file transfers like rsync or wget?

This is crazytown.

Edit: I guess I should take the massive amount of downvotes to mean that it is in fact not crazytown to write service and unit files for one-off downloads or backgrounded TTY clients, and anyone asking for more information on this does not deserve a reply. Ok.
What I don't understand about this: Why didn't Google/Android use Java under the Open Source license under which it has been provided. Wouldn't that have saved all the trouble?
> this can be solved in the long run by forks and standardisation.

I keep hearing this refrain, but the reality of the situation right now is that Systemd (and the other processes under the same development umbrella) are moving too quickly and are too complex for any fork to ever have a realistic chance.

Does there exist a group of people outside of RedHat who understand the internals of the whole thing well enough to even chance a fork?
To be fair, Debian Jessie is not exactly the most stunning of Debian releases over the past decade either. Between the missing and ancient packages we ended up having to move to CentOS 7 w/ epel+elrepo.
That's an interesting question. I can't think of one off the top of my head. You should try http://english.stackexchange.com/

Questions like this are pretty common there.

As an added bonus, Peter Shor (famous for Shor's algorithm) just might answer your question.
Damn this is good. I'll be buying.
But so what? It's impossible to write a 3D game in anything and get 60 fps with certainty. If the McAfee Disk Bandwidth Consumer decides to kick in, you may take a penalty on disk access. If the system specs are slightly lower than you planned for, you don't get your guaranteed 60 fps. If the GPU overheats and underclocks, you don't get 60fps.

It's not that hard to write something in Go where you pay two milliseconds every 5 minutes or something, or less than that. Again, let me reiterate, 10ms per sweep is the max, not the min. Plus it sounds like people think that Go somehow guarantees that you're going to pay this on every frame or something, rather than potentially separated by seconds or minutes.

As I said, Go probably isn't my first choice for a game anyhow, but people are grossly overstating how bad it is. Games may be high performance, but they also do things like run huge swathes of the game on a relatively slow scripting language like Lua or some Lisp variant or something. It's not like the network servers that are Go's core design motivation are completely insensitive to performance or latency either.

(Plus to be honest I reject the premise that all games must be 60 fps on the grounds that they already aren't. I already disclaimed AAA vs. Indie. But it's still not a bad discussion.)
Other very serious concerns:

1. Was it running RAID? If so, what level? Better not be RAID 5. Horrible write speed.

2. Let's REALLY dig into the DNS. What about reverse lookups and CNAMEs.

3. Any idea what the screensaver was? I'll reserve judgement until I have some confirmation.

4. NIC driver version: Hearing that she just ran a generic MS driver for the Intel dual network card. Unbelievable.
I always use huge passwords, do you think using an easier to remember ~10 digits password will be secure enough if I use 2FA?

Or there is another attack vector that I'm not aware of?

I imagine if somebody steal my password I would get notified (Gmail) and could easily switch to a new one, no damage done.
The Facebook newsfeed is the tabloid of our day
Repetitive? No. Low-level? Yes, it certainly can be. Engineering a working application by shuttling data between a bunch of pre-written libraries can produce a satisfying result, and it's usually the smart way to design something.

Personally, I enjoy the process of building a clean abstraction more than using someone else's abstraction. If there's a system that doesn't have a mouse driver, then developing one sounds like it could be fairly interesting.
The Clintons are famously close to Hollywood and have been quite bad for anti-copyright causes. One word: DMCA.
Apple Looks to Debut Siri SDK at WWDC, Developing Amazon Echo Competitor
I'm unclear about what you're saying. Are you saying it is OK for them to MITM traffic to https://google.com on their network by issuing a google.com cert? That is definitely not OK. If they only issue certs for domains that belong to themselves or their customers, that is OK.
Did you somehow misconstrue my post as an argument that she should not be paid?
A normal car with normal cruise control does not keep itself in a lane. Nor does it adjust for the speed of other cars. All it does is make your speed a constant; you still have to steer and initiate any and all braking or overtaking maneuvers.
It looks like it was published two days ago, if you google the headline. It's totally stupid that Inc. doesn't give the article a time stamp...
Yes, this! Too many entrepreneurs are building things people like to use, instead of things people need.

What if there was a committee of experts -- leaders in the field -- who decided what startups got investment? They could truly weigh the cost-benefit analysis.

Of course, it would only work if there were some enforcement mechanism. So unauthorized coding would need to be outlawed. At least you couldn't spend any money on it.

We'd have to pick the right experts, too. That shouldn't be too hard, we could start right here on HN! Lots of smart people. The free market is so random, amoral, and inefficient. Obviously a group of well-educated, experienced software engineers could allocate labor way more efficiently.

This can't fail. When we get the pesky market out of the way, the sky's the limit! Progress together! History marches on!
Here are some of my pics (sorry couldn't edit the original post after work):

http://imgur.com/a/Tsg40
I don't think I understand how dangerous these forests must be.

It seems extraordinary that someone can step off the trail like this and get so lost so near to where they need to be.

It also seems extraordinary that a hiker of her age, carrying as little kit as she was, decided to do this alone.
I wonder if the debian folks feel regrets about settling with systemd.
Does systemd socket activation offer any advantages over xinetd?
My problem with taxes is that once the net amount for my consultant fee has been raised to include 42% income tax and then 19% of VAT on top of that, I feel ashamed for charging so much money for work I love to do.

Need to get over that soon. I heard writing is therapeutic.
Depending on what you are working on, this sort of "cleanup in 5 minutes" task might be impossible. There are lots of reasons you might need to go a longer time between working code than the length of time you want to go with no backup or save point.
Any time in the last 10 years I setup an independent email server it had horrible deliverability rates. I wonder how they worked around that. Getting your server whitelisted with all the major providers is a major hassle.
Can I float a conceptual conversion by you? I'm a pathologist (I look at human brain regularly and interact with neurologists, neurosurgeons, and neuropathologists) and my undergrad is in physics. I like your general representation. Here's my conversion:

Let's start with a large matrix operation, something a deep neural net neuron would do. Let's imagine that matrix is a sheet with colored dots instead of numbers.

We don't care so much about the order of the rows, but the direction of the columns holds some meaning. So we can connect the top of the matrix to the bottom, like a tube. Now the left side isn't exactly a beginning, and the right side isn't exactly the end, but there's this sort of polarity.

These ends of our tube (which was a sheet) are rings, and those rings can be reduced to points, something like Grothendieck's point with a different perspective at every direction (or in this case, many directions, one direction per row). But the left point and the right point are still different.

Now I have a polarized bag.

Like a neuron.

I could be silly and imagine the gates and channels on the neuron surfaces could be mapped to elements in the matrix like those colored dots, but I rather doubt the analogy extends quite that far...

And neurons don't absorb many giant tensors and emit one giant tensor. But they do receive their signals at many different points on the surface. So there is this spatial element to it. And there are many different kinds of signals (electrical, neurochemical, all the way to simple biochemical, like glucose). So there's this complexity that an inbound tensor would represent nicely. And they do in fact emit a single signal sent to many neighbors.

Anyway, that's my personal matrix-to-neuron conversion.

Is that sensical?
The pattern described by the OP can reasonably be described as under prescribing the antibiotics. Rather than following the recommended schedule which may last longer than the person feels sick, the mother was only giving enough to treat the immediate symptoms. The prescription is to give more!
Printer firmware and drivers are the worst. I've integrated with a software package that supplies its own printer drivers because the manufactures can't make a driver that will actually work well.

They constantly screw up the most basic of things. A good test of a network printer is to set it offline, send 20 print jobs to it (a test page is fine), then set it back online. Way too many printers will not print out all 20 print jobs, despite reporting success for all of them (This is true even of $30k printers).
They're different problems, but the the feelgood intent with large, unintended consequences is what I'm referring to, rather than the contexts themselves.

I totally think that we should be using what we've learned from employment gender/racial issues to help out mental health problems. Not saying we shouldn't. I'm suggesting that the conversation should be much broader to address it at the level of empathy, without resorting to ego compartmentalization. If the empathy problems can be fixed, I highly suspect that everything else will fall in line.

As bold of a statement as that is, it matches my experience where simply telling someone "I have bipolar" increases communicative empathy. That's almost never an option though, since the subject is taboo enough that mentioning it has negative consequences.

Why should we wait until gender issues are "fixed" to try to address that taboo?
He still seems like a sociopath. Taking money to poison communities does not glorify it.
Looks like I missed the part where someone else was making money off her reporting and refusing to pay her, do you happen to have a link?
Do you have any sources for that?

The story I keep hearing is that she had this set up to make FOIA requests more difficult/impossible to fulfil.

The really out there stuff is that this was to hide any cash-for-favors exchanges that happened with relation to The Clinton Foundation.
This is a fantastic idea, although they'd need to have several carriers to make it feasible (what if someone uses t-mobile instead of verizon?
So you don't think it's a problem if their ads say "whites only"? Or if they only advertise to white people? Or are you thinking "nobody would say whites only" and just totally unaware of the many ways that language and targeting can affect who applies to a job, sometimes skewing the pool of applicants in unintended ways? A nice, nobody-meant-it way to bias your candidate pool: only hire people who know an existing employee. White Americans mostly know white Americans.
And you don't need 80% of the stuff in the article to start off either, this is a VERY in depth walkthrough...
“Yea, what I do is not really that valuable. I’m good with 70 cents on the dollar, no problem. And to that sister in the workforce how actually needs the other 30 cents, yea, well, boys will be boys. This is how the world is.”

What hogwash. How can anybody who buys into that seventy cents nonsense be taken seriously?
And those slipups should open her to prosecution under the Espionage Act.

A number of security professionals (I mean security in the government, Information Assurance sense) have told me that if they or I were to do anything like what Secretary Clinton did, we would be liable to be prosecuted.
I just don't believe that Hillary Clinton could not get an email account on a government email server and that somehow having exchange at her house with no controls was the last option she had. I can't think of a scenario where a server at her house is better than almost any other option.
I don't disagree with you, but I also don't see what your comment has to do with mine.
>Europe doesn't have the sort of ingrained racism that exists in the United States.

Who's throwing bananas at their black soccer players?