skysight-inc/HackerNews huggingface dataset:
Show HN: Chrome extension to help Gmail users stay focussed
Show HN: Algolia Places, OpenStreetMap data in our index
Why don't they disable root logins with password period and only allow SSH key authentication?

Also if you put a passphase on your SSH key does that mean you have to enter it every time you want to SSH to the server (in order to unlock the key) or does it stay cached on most SSH clients (ssh on mac terminal, putty on windows, etc).

Isn't watching failed logins kind of useless? I think it is more important to see what successful logins were made.
Fact-checking claims made by both sides in UK BRexit debate
So there are 10 magazines from 1910s, 20 from 1920s and 40 from 1930s. How would you arrange them so that I can recognize the log curve?
Yeah the community focuses more on the 9-5 line of business apps. It moves slower but for different reasons. Honestly I haven't looked back. I like being able to push the new boundaries
Well, for me it's not usually work, but it's still "work". It's fixing faucets, and trimming bushes, and cleaning out rain gutters, and keeping cars maintained. Much of a weekend is what I need to do, not what I want to do.
Nope, WhatsApp were given a different license. Unlike ChatSecure, who until this most recent change, were locked out from iOS.
Hmmm ... why does root need a password? `sudo su`
You raise a completely fair point, and conceptually I agree with you.

Again, this entire example rests on the assumption that bots DO exist, which it sounds like they do based on everyone's comments so far.

The point I want to drive home is that there is a segment of the population doing business online and, for better or worse, including FB as part of their ad strategy. FB knows this and makes the entire ad BUYING process cheap and easy, knowing FULL well that these ad buyers are going to receive crap for engagement.

Before confirming my purchase, if FB gave me a warning saying something along the lines of "based on your targeting and how much you're paying for this ad, about 10% of your engagement will be from real people," then at the very least FB has both acknowledged the risk and done something to manage my expectations. Perhaps we wouldn't even been having this exchange.

But, FB doesn't. They keep quiet about this, allowing the farms to exist to make it seem as those unsuspecting business owners are actually getting what they paid for. That's the scam in all of this.
Business Analysis: building better stakeholder relations through prototyping
It would be useful to discuss what prevents the server from being rooted without a trace during the 10 minutes it takes to execute these steps.
> it takes 15 minutes to go 10 miles

Said no one who lives in suburban Boston, ever.
Only in SV could Elizabeth Holmes lose $4.5B she never had to begin with
And for anyone expecting shorter working hours to lead to the apocalypse: They should consider that France, the canonical UK example of "too strict" working time restrictions, for the vast majority of the last 50 years or so have had a higher GDP per capita than the UK (their GDP per capita was lower for a few recent years, but then they overtook again).
It's kind of a shame that ZFS hasn't seen better adoption, and that btrfs has been pretty stagnant, and that in general next generation file systems are mostly still-born. It would be nice to see some improvements in this area as 10tb hdd's are eminent, and data management is important.

However, it's worth noting that RAID, especially in software on systems without ECC ram is less than ideal. Beyond this is the overhead of managing larger filesystems with ZFS. The DIY raid servers that support it have had some troublesome issues that I've experienced first hand.

It's likely a lot of these advantages have been displaced by the discontinuation of Apple's server projects as well as other fears. By similar note, I've always been somewhat surprised that NTFS hasn't been more popular for external media, as it's a pretty good fit there.

In the end, software at this level has been held back significantly by the patent hornets nest that exists in the world today. I truly hope that we can see some reform in this space, but with the likes of TPP and similar treaty negotiations around the world today, that is pretty unlikely. Eventually some countries will have to strike out, break these bad treaties and reign in IP law. The vast majority of software is undeserving of patent protection. Just as software really shouldn't have copyright law that lasts for decades. It's a shame all around.
Agreed - it is a bit long. But if you want to set something up from top to bottom it may be worth it. Cool - I saw the link to Github as well, looks like there is code to do much of what the article outlines. Awesome.
Didn't know that - thanks for the information. Was it wear against the side of the casing that led to the issues then?
Can somebody help me out with this question: The default config for unattended-upgrades seems to not enable reboot even if a reboot would be required to activate the upgrades.
Wouldn't that had made quite a few important upgrades in the last years effectless if they server did never get rebooted?
OP's point (and it's valid) is that the author covers the regularization term but does not explain the task aside from the following throwaway line:

> "The goal is to find the model that minimzes (sp) this loss function."

Unless we're overloading the word "model" -- which is only going to confuse your intended audience -- this statement is incorrect. We're actually searching for the parameterization \alpha of the model that minimizes the loss function.
Nodechef real time search and analytics as a service
One of them worked on the 'Be File System'... that's interesting
https://en.wikipedia.org/wiki/Dominic_Giampaolo
I'm looking at it as a search problem. I don't care about the likelihood of a randomly generated program with correct syntax being correctly typed because people don't program that way. But rather this: let's take a correct program of size N (N nodes in the syntax tree) and insert a single error into it and give the modified program to someone to find the error (without giving them the original, of course). If it's a type error, it can be found by searching the space of N nodes. If it can be any defect whatsoever, the search space is the entire state space of the program emanating from all combinations of all possible inputs.
> While some racists certainly existed, the vast, vast majority of individuals who moved from the cities to the suburbs neither knew nor cared about any racism that was going on.

The people moving may or may not have known (though I think you seriously understate the degree to which they did), but what is more important is that the people designing and executing the policies (including those of banks and those of governments) which shaped the suburbs definitely and deliberately were not only aware of but actively applying race-based discrimination in so doing.
Not Even Close: The State of Computer Security - James Mickens
In fact I do. And also in the crowded open plan office I work in. Maybe I just have a claustraphobia problem ;)
In other words, Americans are correctly assessing their institutions, which is why confidence in them is low...
What sort of transition-related problems could arise when making the switch from REST to GraphQL?
I mean without any boiler plate whatsoever. Just "we can't determine what the type of some term x is, so let it be anything and check it at run time when it is used in a way that requires it to be of some specific type(s)".
If you put a passphrase on your ssh key you only have to enter it when you initially add it to your ssh-agent.
> We don't even have a password for our root user. We'll want to select something random and complex.

So you're taking something secure by default -- no password means no login allowed, and making it less secure. And if you have hundreds of these servers, you'll need to rotate them whenever someone on the team leaves. This is painful.

Simple solution: leave root password blank, don't forget your sudo password. If you can't get in, use grub or a liveCD. Or tie auth to ldap or kerberos so you _can't_ forget. This is one area where Windows has a distinct advantage: AD more or less requires admins to think at the level of network of servers, and provides a baseline set of services always present.
https://developer.apple.com/videos/play/wwdc2016/102/

You can find all the videos from WWDC 2016 some time after the session is done. I usually check the next day. They have the videos for several previous WWDCs up as well.
It seems that COW filesystems in general are better for use with SSDs... iirc, SSDs themselves do similar things as part of their wear leveling algorithms anyway. It seems to me that it's time to break some of this down. With solid state storage reaching levels close to RAM in terms of latency, I think eventually they'll come together, and that's where it will get really interesting.

On the flip side, with spinning storage approaching 10tb drives, the need for enhanced filesystems for RAID arrays with those beasts are needed as well.

In general, we really need some patent releases from those companies strangling filesystem advancements (namely Oracle and MS).
I built a webapp that finds/sorts/previews video game news by number of views
More specifically, I meant iOS Safari, which seems to lag wildly behind Desktop Safari. Plus, iOS Safari has a much bigger userbase than Desktop Safari, which you see in the "Usage Relative" views on caniuse.com.

That said, it was also a dumb joke. :) I do not recommend adding banners saying "This site is not supported on iOS Safari". Imagine how many users you would anger doing that.
Don't forget!
https://news.ycombinator.com/item?id=11909908
We declare that the splendor of the world has been enriched by a new beauty: the beauty of speed. A racing automobile with its bonnet adorned with great tubes like serpents with explosive breath ... a roaring motor car which seems to run on machine-gun fire, is more beautiful than the Victory of Samothrace. -- The Futurist Manifesto, 1908 [1]

It didn't turn out well.
http://bactra.org/T4PM/futurist-manifesto.html
Based on the BOM at https://github.com/NextThingCo/DIP-HDMI-PCB/blob/master/v1.0..., you've got a Chrontel CH7035B HDMI interface chip, a serial EEPROM (probably used for EDID/HDCP key storage), and a LDO power supply for those chips. That definitely counts for the additional cost.
A colleague of mine actually patented this technique: http://www.google.com/patents/US8538038
What if it is a VPS?
> And deep below, computers work under a model that's anything but functional (assembly language is basically a big mutable state machine).

Acutally, deep below a computer is a massive asynchronous electronic circuit. Your "big mutable state machine" is an abstraction, just like any other.
Yes. You should still keep your eye out on patches. If a big vulnerability gets patched requiring a reboot, you'll want to attend to the upgrades yourself.
Nothing will require any humans at that point. But an economy can still form. Read "Down and Out in the Magic Kingdom": https://en.m.wikipedia.org/wiki/Down_and_Out_in_the_Magic_Ki...
Curve25519 is very well tested too. Not as well tested as RSA, granted, but it has actually survived the testing, while RSA has several known problems.

Overall, creating an RSA implementation is a minefield. There is a big number of issues you must avoid, while Curve25519 doesn't suffer from most of them.
Basically my database will always be 2X?

Curious but given that WhatApp recently encrypts messaging end-to-end, does this mean that even they can't view the information? Does this mean WhatsApp would have no way of detecting if it's application is being used for organizing illegal activity?
> TBH I have never seen a big C++ code base I liked.

In what languages have you seen a big code base that you liked? Just curious.
It's awesome that this is just an "oh well" rather than the huge disaster it would have been with any past reusable system. It would be better if it had worked, but I love how they've set it up so that their program can tolerate failures like this.
For protecting against brute-force login attempts, I use sshguard [1]

I really think this should be installed by default on distros like Ubuntu.

[1] http://www.sshguard.net/
Technically you don't need the root password, you can always password recovery if you have access to the box. And how exactly did you lock yourself out of every account with sudo? Of course there's always "messed up my ldap or general network settings, can't log in to fix them". There's nothing wrong with setting your root password to a random string and throwing it away, after verifying your sudo works, I guess.

I will admit to being lazy, and with full automation its faster to spawn a new virtual image and let ansible run its course than to do root password recovery where you boot and tell the bootloader to make the init system /bin/sh and hand edit /etc/shadow and /etc/passwd and then reboot again, etc etc. I mean I can set up a new image almost as fast as I can reboot an old image, and I set up images a lot more often than I do password recovery, so...

Scrap the ssh commentary and set up ssh company wide as per stribika plus or minus local modifications:

https://stribika.github.io/2015/01/04/secure-secure-shell.ht...

"On large scale, you'll be better off with a full automated setup using something like Ansible"

At ANY scale you're better off, unless you're experimenting or time isn't money. It'll take longer to add the time to document and test what you're doing by hand than to convince ansible to do it for you. If you don't document or test you're just doomed, so its not like you can avoid that effort. With automation this is like "first two minutes on a server" not ten.

Some people like to drop a .forward in root's homedir sending mail to your sysadmin mailing list or yourself. I THINK but might be wrong that if you do that you don't have to tell logwatch whom to email to, it'll go to root then forward to the right people. More than logwatch assumes root@something.whatever exists as an email address.

You're missing setting up your centralized rsyslog or local equivalent, your munin/nagios/zabbix or local equivalent... I still configure zabbix by hand because I'm old fashioned but its possible to automate that.

NTP is also missing. You can make Kerberos a very sad faced puppy if time isn't synced. And its easy to set up to point to local trusted servers.

(Note, a post that's nothing but complaining still means the linked article is at least 99.9% correct, it is a nicely written wide ranging TODO list)
> If you stack books horizontally on shelves by year it would form the textbook exponential curve. If you stack them vertically on the floor it makes the textbook log curve.

It seems to me you have that exactly backwards:

If you stack books horizontally on shelves, which each shelf corresponding to a same-size range of years (e.g., a shelf per decade), with earlier periods on lower shelves, it would form a quantized approximation of the textbook logarithmic curve.

If you stack books vertically on the floor in similar periods with earlier periods on the left, it would form a quantized approximation of the textbook exponential curve.
McDonalds really isn't that bad. Looking at the nutritional info, 540 calories for a big mac, 230 for fries (770 calories), which is easy to fit into a 2000 calorie/day meal plan. Of course you are shot if you start ordering sodas and icecream, but at the very least this is a comparable meal to what you might normally eat. Sodium is the only major concern, I think.
Binary client. Uhm. Yeah... nope.
Wasn't StartSSL (haha. SSL) the CA that also offered to create the key on your behalf?
Sketchy!
50% smug developer snobbery and 50% truth. As much as I hate to admit it, it is easy to be mediocre in the legacy webforms world of .NET and a lot of places are stuck in that world. To some degree that speaks to the success of ASP.NET allowing decent programmers to double as mediocre web developers. I was one for a long time and am still one some days.

I think the MVC, Entity Framework, Web Api world of .Net is as good or better than anything else out there and a 'good' developer in that world is just as accomplished as a 'good' developer in the Django or Rails world.

I would also argue that it has proven much more challenging to maintain and extend legacy .Net applications than it was to work on a clean, solid, and in many ways more complicated Django/Postres/Ubuntu stack. Keeping a beat up winforms,webforms,soap driven SOA legacy stack straight takes a decent amount of patience.
Thanks for this info, I know Adafruit is overpriced, but had no idea where to go about doing it myself.

Why do both drivers have this warning? What would make it not work with an HDMI adapter, and is there any way to somehow use this with an HDMI output?

> Just to make sure this is very clear, this adapter will NOT work with HDMI connectors, will NOT work with HDMI to DisplayPort adapters (passive or active)
I used to work for a price comparison website in the UK. After a big redesign which took them from being a horrendous mess to "glitzy web-2.0 style" (this was 2006) their conversion rates went down.

They did some user research, and a lot of users said they trusted the site less after the redesign, because it now looked more like a typical advertising business.
Software Assessment, the First Step to Modernization
Or Sufjan Steven's The BQE!

https://vimeo.com/100146540
In the US town where I live, which is admittedly more exurban/rural than suburban, I pay for my own septic system, trash, water, etc. Houses that were hooked up to sewer in another part of town a number of years back had to pay for that. No, in the US, you don't typically pay for public roads although people certainly pay for upkeep when they are on private roads as some are. (I'm off a state highway and have to handle the upkeep of my long private driveway.)

Personally, I'm no particular fan of traditional suburbs. But I'm also unconvinced that it's even desirable to especially encourage urban living--especially if, in practice, that means encouraging living in a few specific walkable cities. Presumably urban living in this context doesn't mean Las Vegas.
For this and a hundred other things, I prefer to use a git home directory.
I agree that religious fervor of any kind is unhealthy... However evidence will always crowd out the possibility of "religious fervor". Biologists are just as open to changing their model as Physicists are they just need a reason to do so. All evidence points to evolution. You can find it in the geologic record as well as markers in every living organism's DNA. Speaking of DNA... evolution predicted its existence and mechanisms well before its discovery. Im not sure where your confusion stems from... religious fervor perhaps?
Why does he need to explain why he sold Linkedin to Microsoft?
Thanks for chiming in.

What were the expectations you took away from my post?

"cannot expect an even distribution across the demographics"
- I mentioned that if there were even a modicum of distribution. I was driving home the idea that 1) if we assume a tiny level of distribution across the three geographies, then I should see something from JP and KR. But, that didn't happen; and 2) if targeting multiple geos is, in fact, ineffective, then the option to target multiple geos shouldn't even been an option if FB really wanted people to be successful with their ads. Furthermore, I actually DID target a single geo, and even THAT didn't work.

"You aren't paying enough to saturate all channel"
- NOW you've gotten to one of the main cruxes of my post. As I wrote on the post an in a few replies below.

The point I want to drive home is that there is a segment of the population doing business online and, for better or worse, including FB as part of their ad strategy. FB knows this and makes the entire ad process CHEAP and EASY, knowing full well that these ad buyers are going to receive crap for engagement. FB makes it so easy for new FB page owners to believe that they can drop $5 here and $10 there to promote anything--a post, their page, and even their website. I gather that FB WANTS these page owners to pay these small amounts 30 times to play trial-and-error, even though doing so still only puts these page owners 1) up against larger budgets, and 2) in front of garbage accounts that are only cleaned up once a year in FB's annual sweep.

If it's a matter of paying enough, then why bother encouraging people to pay $5 here and $10 there to promote knowing that it'll be a waste?
Out of curiosity, how does it compare to fail2ban?
A minimum viable video codec for students
Was about to say the same:

"MessageUs is not yet available in your country.
Input your phone number and we’ll let you know once it’s ready."

So I am none the wiser. Was genuinely curious as well.
On that basis of that test it sounds like you could not prove that chimps and and gorillas were different species?
So many people get some of the most basic security wrong. It is great to see people trying to educate instead of just pointing out issues. Thanks for this work.
RNN for discrete structured prediction tasks often use a technique called beam search during decoding (see for example papers on neural MT), which is about as close as you can get to a true Viterbi when you don't have independence assumptions. The CTC mentioned above is also a special type of "reductionist" dynamic programming which uses some awesome and clever stuff to remain backproppable. It only works for monotonic alignments (input larger than desired output).
As it is with all of us. But I refuse to do work work over the weekend, as I wish were the norm in this industry.

But if someone complains they have too much work over the weekend.... well they should do less work then. Use the time for what it is designed for!
Hey, thanks for your great comment.
How it would be to live in Colombia today? And what's the main difference between Carthagena, Medellin, etc?
So how do you write the type "forall a. a -> a -> a" in TLA?
Thanks for this article - very clear, well-motivated, and concise. I'm saving this for myself and others.
This has Thunderbolt 3 with 40Gbps output, so once the external chassis start coming out you can use an external GTX 1080 with this.
Not the OP, but in C I've liked Linux well enough (though it's not perfect), and PostgreSQL and SQLite are supposed to be examples of very well structured code.
Great work! With such high per-agent pricing tiers on mainstream platforms such as osTicket and ZenDesk, this looks like a great alternative for startups and small teams :)
Seriously: it's a ton of money (9x revenues in 2015), in cash, for a company that is still losing money year after year, whose user base is not very active and whose user growth has all but stalled.
> And how exactly did you lock yourself out of every account with sudo?

A single typo in /etc/sudoers or any /etc/sudoers.d file will lock you out of all sudo usage. visudo helps with that, but a single mistake (including in a sudoers.d file installed by a configuration management system or package) will lock you out.
I would suggest that good .NET developers (like any other language, etc.) are the ones that aren't constantly looking for a 'new technology' to move into, and instead get on with writing quality software / solving the problem at hand.
> Isn't watching failed logins kind of useless? I think it is more important to see what successful logins were made.

Are you talking about Fail2Ban? I'm not an expert but my guess is that it's defense in depth. Rate limiting failed logins is useful in the case where you messed up somewhere else and have a service/login that is vulnerable to password guessing.

I would imagine that auditing successful logins is definitely useful but was left out of the guide for brevity.
Sure, but so what, the point is that those are arbitrary human labels.

I certainly wouldn't go around expecting them to make a baby based on what I've said, I just phrased things the way I did to try to emphasize the above point.