skysight-inc/HackerNews huggingface dataset:
Can we stop talking about the init scripts? systemd does that well, we all got it. I personally was not overwhelmed when having to use it but it's step forward from sysv init scripts - no one sane doubts that.

All the recent talk about systemd is about the other components that replace certain basic userland compoments.

logind for sessions changed the default to kill background tasks on logout, now it's about the implementation of the dns resolver that comes with systemd. There are other implementations that replace cron, ntpd, syslog...etc.pp.
All of this has a dependency on glibc and uses dbus.

This has nothing to do with init scripts. This is an attempt to improve on the status quo of userland tools close to the OS. systemd appears to provide some minimal userland that comes with a Linux kernel and aims to be a userland API. I personally think this is a bad idea but I kind of see the point why you might want to do this.

The IMHO absolutely warranted criticism for some of these replacements is that they are not better designed, that they create new dependencies and complicate things without reason and there is a tendency to create some systemd specific API that userland has to implement - breaking compatibility with other POSIX systems - something that was hard to do even before systemd.

So it's not about init scripts - it's about revamping essential userland tools in a way that's badly designed according to some.

Personally I hold no grudge against this but I'm not keen on using this or having to deal with this as a sysadmin. It's a undocumented black box once you have run into problems and you are busy reading C code or capturing dbus calls. I have usually better things to do.

And for the initscripts - you could have done this with runit/s6 and mkdir with cgroups in 2008 if you wanted. You could have used setsid before that. This was deprecated and now systemd (or something else that implements the kernel API) is the whole mananger of cgroups.

I personally think the systemd way is not the right direction to take as it's horrible inflexible and will bite Linux but I can understand why you might disagree here strongly.
Reminded me a bit about the modern DRAM issue, i.e., row hammer -- although the details are of course different -- https://en.wikipedia.org/wiki/Row_hammer
Up until about two weeks ago, I thought people were being unreasonably whinny about the changes in Windows 10.

This was before I noticed that Candy Crush Saga silently installed itself on my Windows 10 machine. Not only that but it was listed as a running application in the Task Manager. Think about it: the system is silently installing & running third party apps without your consent (!) and there's no option to control that behavior. (This is not me having hallucinations, see [1] for other reports of that behavior).

I don't know why it took that long but it seriously compromised any trust I had with the company.

[1] https://www.google.ie/search?rls=en&q=windows+10+candy+crush...
Not a nail in the coffin by any means. Simply a poorly architected infrastructure.
Billionaires back new shipping data quant fund
Err, dependence? Maybe a preference, sure, but how are any humans dependent on cows' milk?
You do, however, need e.g. an init that knows what to do about orphaned processes, or the above is not reliable. It also does not provide any ability to guarantee that process remains running without something other than the typical init, nor to ensure logging is done properly, or enforce resource limits.

To provide the features "just" the init replacement part of systemd provides isn't even possible with most other inits, no matter how you write your script.
> If you have the criminal energy to steal that data you might as well use it.

No no no. Any self-respecting criminal will not gain directly from a break-in, but rather sell the goods on to someone with a credible laundering story (or at least someone who will put further space between him and the goods).
I have used EDS Lite in the past. the lite version does not allow to mount the container though.
https://play.google.com/store/apps/details?id=com.sovworks.e...
The difference is that "we're in a simulation" is still a natural, as opposed to a supernatural, explanation.

We can come up with ways to test whether or not we're in a simulation. If the tests return positive we can come up with ways to study the rules outside of the simulation. If it's natural then we can work with it.
That is the run-of-the-mill set of issues I've had with any Windows upgrade, and something I'd be willing to dismiss as teething problems: usually not MS's fault but the OEM's (especially drivers and shovelware); plus the HW requirements didn't go up so dramatically, compared to W7.

The "spy on everything" and "you MUST have cloud" attitude are actual OS issues, I agree.
Manjaro Linux 16.06 released
Glad you like the idea. Yes, it would of been hard to build without javascript. But if you use android you can get the app :)
https://www.gnu.org/proprietary/malware-microsoft.en.html
You could set up a box at home to route through.
As soon as I saw the password I wondered if Mark was left-handed.

Turns out I was spot on: a bit of googling revealed he was.
> Almost as surprising is the 24,309 times that ‘marina’ is found as a password here

It's a common name, apparently the English speakers traditionally translated Greek name Μαρίνα (Marina) to "Margaret."
Mikrotik router as OpenVPN Client
I totally understand Microsoft's position - it absolutely requires its user base to move to Windows 10, and has been severely punished by having a user base stuck on versions going all the way back to XP.

I wish my punishment for writing some software and issuing a few updates for security defects was also measured in billions of dollars.
Seconded, i find this plausible, but need to see a source.
There have, or are going to be, a few actually:

1. Startup U (https://en.wikipedia.org/wiki/Startup_U) Was a show about Draper University and their incubator program.

2. Jason Calacanis is working on a reality series now, just not sure when it is to be released. (http://calacanis.com/2016/02/29/why-im-doing-a-reality-show/)

3. BravoTV had Start-ups Silicon Valley (http://www.bravotv.com/start-ups-silicon-valley)

As the other comment pointed out though there are problems with doing a startup reality show. In order for it to "sell" and be worth the production time, there needs to be a level of drama that is added to the show or "instigated" by the director/producers. The other big problem is that 80% of the show would be just watching people code or sit in meetings. Finally, as a viewer you would want an underdog that prevails or at least one startup that becomes a unicorn. There is no way to predict this from the start for sure.

Jason has stated his desire to keep it authenticate, so we will see.
Fewer and Faster
Any word made to embody an ideal quickly won't.
Instead of idiot questions like FizzBuzz maybe recruiters should be asking about password storage best practices instead
Can you completely and permanently decline an update you don't want on Windows 10 Pro?
Our Blockchain Consulting Methodology
He doesn't make it free, he makes ad money. You are the product in his mindset, and that should lead to an impasse to ever using his software for security purposes. Any user seeking security and Dominick Reichi have competing interests.
For those in NYC:

http://genspace.org/
The baffling thing to me is that this is already discharged debt - "out of statute medical debt from Texas", "medical debt they no longer had to pay" - and how on earth is it legal to try and collect that?
I've never heard of that. I've been testing Office 2016 in preparation to deploy it over the summer. I've had roughly 20 users on it and not one of them has been forced to use a Microsoft login. We don't use Office 365, could that have something to do with it?
Mixtapes from the Demoscene
> You thinking is limited to fancy laptops and not considering enterprise servers.

All of the servers I manage except for a few legacy ones are SSDs by now, for the simple reason that they are cheaper to operate at this point:

They consume less energy, and while their price per GB is high, their IOPS per GB is high enough that we can get away with far fewer replicas of each item of data and still get good enough performance.

I can't afford not to use SSDs in every new server we provision.

Not using SSDs in your servers today means you're behind the curve except in certain niches where performance doesn't matter but sheer storage volume does. That too is set to change within the next couple of years with current rates of cost reductions.
For medical doctors, having a degree just means you get to spend years in a residency training program under supervision. SEs also have internships, but they usually want someone they don't need to train from 'scratch'.
Spoiler in the title.
Former NASA Chief Develops Brain-Like Chips
> Need a working parallel port? Too bad!

Can you elaborate? I have Windows 10 and my parallel port is working just dandy.
Video Streaming Methodology
I had to hide the whole notification system because I kept getting office ads as notifications. I have never had anything like that in a mobile OS.
I would structure my suggestions like this. In the `_buildSuggestionElement` method check the type, set a colour from some list you have, or set a class and change the colour in your css.

interface ISuggestion {
name: string;
count: number;
element?: HTMLElement;
type?: string;
}
"Requires explicit consent" my ass. Perhaps "well, we should require explicit consent, but what would happen, for example, if a bug went through the QA unnoticed and upgraded the boxes anyway?" (Highly hypothetical: my bet is still on incompetence)
You don't even have to decline the Windows 10 upgrade in Pro. You can simply not approve it and it won't be installed.
It's still debt, it's not as if the money is not owed it's just debt that has no legal repercussions for not paying. From my understanding at least.

So really he saved them from harassing phone calls, not really the money itself.
Looks like it's being sold for 1 BTC [1]. Screen Shot:

https://www.instagram.com/p/BGUE5H2yqa_/

[1] http://trdealmgn4uvm42g.onion/listing/3716
Firefox might be an unfortunate example. Mozilla also started trying to push major UI changes and features users didn't want, and look at the chart of their market share since then.
Confession: I don't care about data
It's impossible to keep your house burglarproof, too, but I still lock my door.
You're right, in fact I'd argue that checked exceptions are a very good idea. A checked exception is java's way to say: Here is a side effect, take care of it. The problem is that it can't be enforced consequently, partially because Java allows objects to be null. Otherwise checked exceptions would be akin to monads.
Now see https://news.ycombinator.com/item?id=11814419 .
> Nah, Windows is a trash OS and it seems like the only people who use it are people who are forced to because of program compatibility.

I was on linux for 10+ years, and I switched to Windows after they released 10 because I was truly happy with it after trying the tech preview. The program compatibility is just a bonus. Almost all of my family uses Windows over OS X because they can't stand the weird ass intentionally hobbled UI of OSX.
It depends on what the use case is and tradeoffs with budget, space and time.

For real-time reporting and analytics, we've gone with in-memory databases.

However, for more detailed analytics, we work with Hadoop and we also build our own data warehouse to summarize transactional data.
My point was that there certainly were better solutions than systemd! It's about core philosophy of systemd that's wrong.
The Top 3 JavaScript Mistakes You’re Making Right Now (and How to Fix Them)
It depends on your goal. For privacy, a self-hosted VPN is a nightmare. To prevent sniffing and/or modification of content, a self-hosted VPN is great (your VPS company is less likely to target VPN traffic than a dedicated VPN provider).

I think a reputable VPN provider offers the better tradeoff, but there are legitimate reasons for self-hosting a VPN.
I concur with the other commenters... I've been syncing with dropbox for years now and never had a conflict. I guess it helps I tend not to leave it open/running on multiple machines. Open it, use it, close it.
Disks are more expensive for most server use today than SSDs. You can't just look at cost per GB. You need to look at cost to process per GB, and then the vastly increased IOPS and transfer rates provided by SSDs makes them cheaper for most applications where data is regularly accessed at this point.

There are niches, such as long term archival, backups, etc. where disks may still be competitive, but even those are rapidly being eroded.

For things like web servers or database servers, I'll never provision another machine without SSDs.
What would you need it for, in the age of LibreOffice? (For ticking a checkbox that explicitly says "MS Office", I get it.) MS Office is a fine collection of extremely powerful tools (I have yet to see any tool with the power and flexibility of MS Access), but an overkill for 90% of users.
Man this stuff gets me pumped up. I've always wanted to be a farmer, but it never made economical sense to pursue. I've been dabbling (more than just dabbling...) with hydroponics, LEDs and automation for grows. Within the next 3-5 years I'll probably be able to finally pursue this dream with all these advancements. Love it! Can't wait!
Machine Learning: A Simple Neural Network
German Police Arrests User Who Bought Weed on Silk Road
The modularity of systemd-the-monster is greatly overrated. The "basic software engineering principles" you are talking about are not about tightly-coupled interdependent in and out ball of mud with no documented protocols and APIs.

Things get political that very second back then when systemd crowd started pushing their agenda to the masses using strategies like gentle push.
Out of interest: What is the correct way to sell your stock in your company? What made the way that the founder of InfoSpace did it illegal?
Slight correction, but it doesn't take away from your overall comment: On Windows 10 installs that Candy Crush "app" is actually a silently bundled advertisement/link to manually installing the game. The point about insidiously injecting unwanted data into your computer still stands, but this is a minor difference.
Prompt Users to Rate Your NativeScript Android and iOS App
Any good alternatives for NoScript?
Anyone knows a CEO who used "cube" as a password? I wonder why the top of the extremely competent people can be so sloppy sometimes. I'll suggest that's what you get when you found a startup straight after uni: You don't understand what it's like to jump through employment hoops.
You do have a point. I do have a male friend who is also facing a similar situation. When I commented I was emotional since it was more recent and while she was demoted without regards to performance the dude promoted 3 white guys he brought in. ಠ_ಠ
It's not a strong argument against Yubikey. I don't reject a product based on whether its vendor hasn't open sourced all of its hard earned work.
The scary part is that it is bundled with Tor browser!

The author really is shady. There are plenty of alternatives around.
Does the number 0211 after it hold any significance?
Why everyone forgot firefox sync? Why waste time with clipboard+1password+dropbox?
Learning TS itself takes minutes. Probably -seconds- if you're familiar with Java/C#.

The real learning curve is in the edge cases, of which there are plenty. Fighting with a 3rd party lib with incorrect type defs, dealing with cases common to JS that are hard to properly type (such as certain functional constructs), dealing with things missing from the TS compiler that are present in ES6/babel, etc.

Those things are quickly going away and may eventually be a non-ssue, but as of today, they're very real. That's in contract with languages that have the type system baked in from the get go, where it wouldn't be an issue.
Plot StackOverflow question count over time by tag
MMA Fighter Throw Hadouken and Win
Many banks and credit card companies offer a service that lets you generate a one-time-use credit card number.
Usually, people suggest uMatrix. But it's a lot more than just NoScript and probably takes longer to make it work the way you want. In general, it gives you total control what your browser is doing.
Nothing prevented people from forking udev if they didn't want to take systemd.
I'll chime in with some personal research -- not all plants need 100% full sun. You can quickly argue that you have waste at the plant level if you're dedicating "open air" to a plant that doesn't need it. First plant that comes to mind is Kale. Doesn't need full sun, but likes being "open." Stacking the plants vertically allow you to control the sun and better disperse it more evenly. There may be waste, but there's also a lot of waste that occurs naturally.
You're forgetting the vast energy provided free to a regular farm by sunlight. Average daily solar energy falling on each square meter of the Earth is 6 kWh [1].

You're right that irrigation is a significant energy cost: for example [2], irrigating 135 acres in Nebraska will use 50,000 kWh over the course of one season.

But an acre has 4046 square meters. Based on the global average, that same 135 acres will collect 3,277,260 kWh of solar energy over the course of a single day. That's the energy an indoor farm has to consume from power stations, just for lighting.

Optimizing spectrum can cut the lighting energy in half, and other measures like packing plants more tightly can help, but even if you reduce it by 90% it still dwarfs the energy expense of regular farms.

It may be a reasonable expense for particular crops that don't want full sun anyway, but energy usage isn't likely to ever be an advantage for indoor farms. An acceptable disadvantage in certain cases, maybe.

[1] https://en.wikipedia.org/wiki/Solar_irradiance#Earth

[2] http://www.loup.com/docs/energysvc/energywise/EW-Tip-Irrigat...
Maybe "value" wasn't the right word. I would hope that these types of things would fail because the users would give up clicking through 20 pages of ads but the fact that "respected" outlets like Forbes still do it suggests otherwise.
Be Happier by Knowing Your Future Self
Amazing the post and no comments here have mentioned the Tor Project.

https://www.torproject.org/
Aswesome :)

"Finally, this phenomenon hinges on the exact timing of the RAS signal at the nanosecond level, and on many machines the critical situation simply doesn't occur. The timing (and thus the probability of a crash) depends on factors such as temperature, VIC revision, parasitic capacitance and resistance of the traces on the motherboard, power supply ripple and interference with other parts of the machine such as the phase of the colour carrier with respect to the dotclock. The latter is assigned randomly at power-on, by the way, which could be the reason why a power-cycle sometimes helps."
https://github.com/tmux/tmux/issues/428#issuecomment-2221953...
Digital signage and ATMs? I think the Windows Embedded line is built specifically with these in mind (of course there are non-Windows options as well); hacking and slashing through the desktop Windows would bite you in such use cases :)
I've asked these questions in interviews and a lot of programmers seem to know the basics (what a hash is), but seem to fall short when it comes to things like what a salt is, modern storage techniques (bcrypt, scrypt, PBKDF2) and how rainbow attacks can be used to crack hashes.

It's a bit tricky to fail someone in an interview because they don't know security. I think the better way to handle security in a company is to hire a programmer that knows it and teaches it to other programmers during code reviews.
Interesting opportunity on American Express
If the debt collectors somehow manage to trick the debtors into acknowledging the debt, the debt clock is reset & it goes back on to your credit report.
Tesla Model S Drivetrain spun up on the bench
I don't need to go to North Korea, but I'd certainly like to visit my family in Russia again.
judging from that 'gram shot, it looks like VK didn't bother actually deleting user profiles (a lá Ashley Madison). Will be interesting to see the fallout from this, if confirmed.
Excuse me, but if there is a "weird ass intentionally hobbled UI" then that's the windows UI. ms was never able to create a proper DE.
‘So Who Wants to Fuck a Robot?’ (Jacob Appelbaum at Kink.com 2007)
Royal Navy warships used the Amiga software WxWatch
Who can we compare Hillary with? That's the question.
Thanks for the correction! I was in panic mode when I found that app listed in the Task Manager, I really thought my computer had been compromised and I uninstalled that app right away without actually looking at it. Glad to know it's 'only' an ad and not arbitrary code.

But as you point out, it's still an obvious violation of trust...
A lot of people regualary take their laptop through American airport security, where there are multiple reported cases of laptops being messed with.

Regarding hibernation/locking: many people leave laptops unatteded in more risky situations than at home and at the office. As a trivial example, imagine somebody going around a university library, infecting any unatteded laptop with a virus.
What constitutes acknowledgement?
Well...how about "our HW vendor has been promising WinX drivers for some months now, but for now, supported OSes end at Win 8.1"? Is MS still in the best position to decide "eh never mind, it's not like you are actually using that very specific piece of hardware - off to WinX you go"?

In other words, "I am not capable of deciding" does not translate into "therefore everyone gets force-fed the upgrade (because of course they're not capable of deciding, either)."
The scenario is simply: you perform some action on one service and then some entity has the right (or might) to demand from you the private key with which that action was performed, but not "give us everything you have."

The equivalent when the scenario is an attack, and not a legal game: some entity manages to hack your computer with which you access the service A and on which you have only the private key for A, but not your another computer with which you access the service B, with the another key.

Separate keys: just your access to the service A is compromised, one key: all accesses are compromised at once.
Yeah, I'm currently taking a computer security class for master students and we spend quite some time on passwords. Made me think that this should be in an obligatory course for bachelor students (or some stripped down version that teaches the basics).

It's mind-boggling how many well-known companies stored passwords badly.
It could be that the current method (i.e. human solves it by making a decision for each item) could be proved to give an optimal solution. However, if that is not the case, the hardest part will be to get the right model.

There are very competitive open source solvers for LP with 10ˆ5 or even 10ˆ6 variables/constraints (https://projects.coin-or.org/Clp), so the true limit here is formulating the model correctly. There are various optimization modeling languages out there, also in the open-source arena.

As for getting the model right, some trial-and-error approach should work: 1) if the solution violates a constraint you hadn't thought of, just add it to the formulation and re-solve; 2) if the solution is too conservative, then there might be a constraint that's too restrictive (you can check which constraints are active, i.e. restricting, at the optimal solution you found), so just eliminate it or relax it.
62 Years at the Same Company? How One Man Did It
The teenager who smuggled computers through the Iron Curtain