skysight-inc/HackerNews huggingface dataset:
xiaomi phone is capable to block mobile data (and wifi) on app level. Say, gmail can access data on wifi only, chrome on mobile only and whatsapp on both mobile and wifi. It's a finer control than disabling background data.

Before xiaomi, I used asus and it eats mobile data like crazy with no control other than airplane mode.

bonus is that xiami has finer permission control too on app level. I can disallow whatsapp to access my contact and camera, for example. whatsapp can still function; however, it shows phone numbers instead of names in chats.

so even though xiaomi is cheaper, it's more powerful to use. definitely great user experience, easily beats any, more expensive android devices i ever use: motorolla, asus, samsung, etc
Everyone needs to decide on their priorities in life. If you want political influence (or at least the illusion of political influence) you can have it for a pretty modest price.

If you want real political influence of the sort that will actually let you move the needle on something like net neutrality then you need to be writing much bigger checks. $1k will buy you half an hour on the phone will a congressman who will pretend to listen to you. But to actually influence policy you need budgets in the 6-7 digits because you have to repeat the process across many dozens of congressmen and senators.
Leaving a Unicorn for Good
If it suffers from the the problems you mentioned, then consider getting it replaced. I've had a razer blade for 3 years now and never had issues related to build quality. The only problems I faced was getting the drivers for certain Linux distros.
Dropbox steps up to business users with AdminX, plans device management
I have a Silicon Valley loan that is at a rate probably near cost for the lending institution. I did put real money down though.

The big requirement for this loan was for me to move most of my banking to the institution, and to keep a minimum amount of assets with them. I generally like the institution, so the move hasn't been terrible.

So not only are they making interest on the loan, they also have my other business. I'm not super-high wealth (but I do pretty well), but my banking does make them money.
>They are still much better than the alternative (password reuse).

I'm not sure if it is, bugs like that are a serious threat. Personally I use the same (long) password for every website, except one of the characters which I replace by the website's first letter. One could think of similar, more sophisticated schemes of password reuse that yield a slightly different password for each website.

It would be even better if websites started using a public key authentication system, though.
Real estate is a local competition among capital. As long as you have a lot of reasonably wealthy people in the area, prices will stay very high.

I don't see the Silicon Valley startup machine quitting anytime soon.
This FBI Hostage Negotiation Tactic Makes You a Better Leader
Clojure spec screencast: Testing
I'm no fan myself, but please don't make HN worse because you don't like a software feature.
I'm about to the point that I may just start flagging all NYT/Forbes/WSJ articles.
Why did you switch from LastPass to 1Password?

I recently started using LastPass after years of reusing the same uncrackable password: !p@ssword123
Thank you for making my point for me.

Here in the US, we're not constrained by fuel shortages, and we don't have to make ourselves beholden to a potentially hostile foreign state in order to take advantage of the AP-1000 design. We also have the world's broadest and deepest reservoir of institutional knowledge on the subject of nuclear power - a technology invented in the United States, and which we have arguably developed to the greatest extent of any nation on Earth, even if we have thus far chosen not to reap the full benefits of our efforts.

You're right that we aren't building out modern nuclear technology as well as we could be. But we aren't facing the same structural limitations China is, and we therefore do not face a similar choice between unpalatable options. The deficit we face is merely one of will - that is, we're not building out new nuclear because we can't, but rather because the very same people who inveigh most strongly against ignoring AGW have an ideological and frankly emotional objection to modern nuclear infrastructure, an objection which arises entirely from industrial accidents which occurred with technology now half a century old, and from which the industry has learned.

To be quite clear, I have significant concerns of my own with how new nuclear is likely to be implemented. Specifically, as I've stated in this forum and others, the existence of a profit motive around the operation and safety management of nuclear reactors is in my opinion a substantial risk. That risk is, however, susceptible of mitigation or elimination by quite realistic measures, and even if left completely as is, collapses into negligibility alongside the risks posed by either continuing to ignore AGW, or building a response that relies entirely on ill-tested, seasonally variable, and enormously inefficient power generation methods to supply life-critical baseload power.
Came here to mention this exact thing -- you don't even have to be an attending, my wife and I have this loan through a different company, and she is still a resident. We had banks fighting over our mortgage. No money down, no PMI, and they portfolio the loan instead of selling it right away like a standard mortgage. We live in a Detroit suburb.
Because gut issues have been implicated in a whole lot of common maladies, but the precise nature of the interactions of gut bacteria and their human hosts has yet to be determined, making it very intellectually intriguing. Especially for those of us with chronic conditions that are finally starting to see treatment success with carefully targeted probiotics or fecal transplants.
True story: I was at a fundraiser in SF in about 2009, and over the course of the evening I found myself chatting about Twitter on two different occasions: once with Bill Maris of Google Ventures, and once with Joi Ito.

Bill and I were actually talking about what kind of investments GV was looking to make. He stressed that GV was looking to invest in businesses that were actually good businesses. As a counterexample, he brought up Twitter, which at the time he considered to be a "good investment" (said with a grin and a wink) but not a "good business". I had one of those feelings that you get when somebody really smart just shared with you The Truth.

Later I found myself in a conversation with Joi, I think as part of a group and not one-on-one, and Joi was talking about Twitter's lack of revenue. Joi was an early stage investor in Twitter, and he was telling us something to the effect of, "once we have all these users, we're going to bring everyone to the table and figure out how to monetize and what we can charge for."

Over the years I've thought a lot about Bill's distinction between a "good investment" and a "good business", and about Joi's "users first, money later" optimism. I always felt like Bill would be proven right in the long-term, and I think at this point he sorta has been.

Ultimately, though, either approach to investing can work -- but if you're gonna do the Joi thing, you gotta know when to get out of the trade. (I have no idea if/when Joi got out... just stating a general principle.)
That is what I thought.

Annoucing the new electric semi truck, but not plans to build it. That seems to be a pretty thing way to claim the first "electric semi truck".
There's a big spectrum in-between an essay that took two days to write and a tweet. Hacker News is a good example of messages that are long enough to say something useful and short enough to not require any commitment by the reader.

I dislike the way the article uses the word "violence". Nothing that happens on Twitter is violent. The definition of violence right from a Google search for "define:violence" is

behavior involving physical force intended to hurt, damage, or kill someone or something

Nonetheless, the author articulates the reasons I do not use Twitter myself. The amount of drama that site creates seems, to a non-user, to be far in excess of the amount of insight it generates. I have never heard of a really great conversation or unique, insightful idea emerging on Twitter. I have heard, a lot, about idiotic fights that escalate into real world problems. I agree that the 140 character limit is the cause of such problems.
To be fair, in Spain, failing to pay a mortgage will mean not just losing the house, but pretty much anything else you own. A cousin of mine, very well off, bought a summer house, which quickly lost a lot of its value. In the US, she could have said screw it! and let the bank have the house, but Spain being Spain, she'd have to pay the difference between the house's market value and the remainder of the mortgage.

That's one of the reasons that in Spain you have such amazing mortgage rates compared to the US: The banks are taking less risk.
Introducing AdminX: New ways to securely manage collaboration at scale
It's reaching the point of absolute absurdity. Check out the forecast price on this listing: http://www.zillow.com/homedetails/811-Arlington-Ave-Oakland-...

I hadn't looked at zillow in a couple years, I can't believe how insane it's gotten. $800k for a century old 2 bedroom home on a rough stretch of MLK boulevard in Oakland.
It's there. Change the "position" drop-down to engineering manager. There's a small bump in pay.
I agree with the individuals who say that you need to rebuild your server. You really have no idea what they've done while they were logged in or how long they had access. So take the time to be sure a replacement build is secure and then cut over.

By the way, unauthorized access to a computer is a crime in every jurisdiction that I'm familiar with. It is not advisable to "test" someone else's computer and then provide them with proof that you accessed it in an unauthorized way.

If you communicate with the person and think that they deserve some sort of reward, that's your business. It is a nice thing to tell a neighbor that their door is unlocked -- but it's illegal to step inside the door and take a look around.
What I use is tinc to create a kind of a private subnet between all my docker hosts and then only listen with internal dockers on internal ips, ufw rules don't apply to docker networks, docker messes with the iptables directly.
This is insane. Medical Licensure was just starting to take form in the early 19th century. I wonder if Liston had anything to do with it.

A notable 19th century surgeon ... Robert Liston ... is
the only surgeon to have achieved a 300% mortality rate
as a result of an operation ... the patient, his
assistant (who lost a finger while holding the patient
down) and an observer died. The first two from
infection of their wounds and the observer from fright,
believing he had been cut when really it was only his
coat that had been cut.
Conservatives are ok with freedom of speech, 'safe zones' are invented by progressives.
PRO 5000s AI Trading Software Review THE TRUTH
LG Display invests $1.75B for flexible OLED demand
Everybody should think they are the best? Isn't that how we got into this into the first place?
And hope you never have to change a password.
> But if you can't handle insults, it is not anyone's job to prevent them.

Care to explain the ethical viewpoint that's led you to this conclusion?

The problem isn't "insults" and the solution isn't "handling them". The problem is social dynamics that create disrespect and dehumanization towards certain people. The dynamics and their consequences are real regardless of how the victims "handle" them.
Ask HN: Who's using XMPP?
What companies are using XMPP as a message bus, for instant messaging, push notifications, microservices, IoT, etc. and what does the rest of their messaging stack look like?
Completely true. We're losing the meaning of words because people want to sensationalize their points.

Speech can be hateful, harmful, hurtful, etc., but it is not violent. Speech can incite violence, but it is still not actually violence.

We see this all of the time when people want to resort to hyperbole -- "misgendering a trans person is violence!"

It doesn't further your case, it's just using a cheap rhetorical trick.
If i had a supply of lidocaine i'd be sore tempted to dig out some superficial lumps (lipoma). There's one which removed would probably provide a decent void for some nifty implant.
The elites in terms of expenditure-driven political influence are people whose expenditures far exceed the legal limit on direct donations (because they'll do that for more than one candidate in a cycle, plus giving money to entities like the party congressional/senate campaign committees, and the party national committees, and politically active interest groups, interest group PACs, and candidate- and issue-focused SuperPACs, and, in some cases, carefully structuring transactions to give goods and services directly to candidates and office holders while skirting bribery and corruption laws.)
Most cloud providers have hourly billing (if not smaller). So you can spin up some instances of what you want to try and will only be billed a small amount.

For Google Cloud, a compute engine f1-micro instance is only $4.09/month. Standing it up for only 24 hours is $0.19.

As well, both Amazon and Google have budgets you can set on your account that can notify you if you go over some thresholds you setup. This can help prevent you from spending too much money.
given that the mods have multiple times said that paywalled articles are ok, don't expect that to do much
It'd be kind of cool if you tried to improve your skill level, too. That is something you can do.
I tried doing this and just wound up with a bunch of garbage content from interesting people who's opinions I respect at a rate of hundreds of garbage posts per day.

Then I uninstalled. I just don't get it. Maybe I just like crap people or something.
> No, it doesn't secure you against the above attack. If they can use an XSS to get full access to the server and get the SSH key, then hardening SSH does pretty much nothing, they just whitelist their IP and continue accessing the server.

Someone else suggested that and my reply was that if they already have access to remotely execute code as root then they can easily gain root shell access with much less effort than having to do the above workarounds to enable the systems default OpenSSH server (and there are plentiful other ways to execute remote shells without needing SSH)

> Sure, hardening SSH is always a good idea, but until we actually understand how the SSH access was obtained, we don't know that it fixes the immediate problem.

Since you agree that hardening SSH is a good idea, then it doesn't matter how the attacker gained access to SSH, you'd recommend they review the security of their SSH server regardless. So your latter statement becomes irrelevant to the former statement.

> It absolutely is negative to give people information that persuades them their problem has been solved when it hasn't been solved.

I never once suggested this would fix their problems. In fact my language was very clear that my advice would harden against SSH attacks, specifically. However they have asked for next steps and while other people have rightfully focused on the forensics side of the investigation, I have complimented their advice with tips on hardening SSH. One recommendation doesn't have to override another :)

> I don't see any reason for you to take my post personally. It's not an attack on you, it's just pointing out that we need more understanding of the problem to actually solve it. Don't shoot the messenger.

The server is compromised thus it's already too late to "solve". However that doesn't mean people cannot offer advice on hardening against potential future attacks on new or existing infrastructure in conjunction with analyzing the point of attack on the compromised (and hopefully now isolated) equipment.

The snarky tone of my replies are because you have not offered tips that take precedence over my own recommendations, which if you had then I would have taken your criticisms seriously. But as it stands you're currently just disagreeing for the sake of disagreeing. Which is something I see far too often online and often just from people who want to seem knowledgeable but without imparting any actual knowledge and thus mitigate the risk of themselves looking stupid. Which is also why so many experienced individuals tire of contributing to public forums.

You say my advice doesn't solve the OP issues, well neither do your posts. So what was the point in posting them? I just see it as an odd kind of cyclic logic.
As one of the Dokku maintainers, I'd like to congratulate the flynn developers on a 1.0 release. Getting everything polished to a state where you can say "this is stable" is really hard, and they've done a fine job with Flynn.
It might be more charitable to assume their intent wasn't to mischaracterize.
It's worth nothing that John's thoughts here are no doubt heavily influenced by his experiences on twitter during the LamdaConf/Moldbug incident.
As with many of Trump's bloviating, off the cuff statements, this one bares no resemblance of reason or logic. First he encourages the anthropomorphised "Russia" to hack into a private server and interfere in the US elections, presumably for his benefit. In the next breadth he states that doing so would be incredibly disrespectful to the president.

Every time you think nothing Trump says can shock you...
I've done the exact same thing - not worth it. I self-treated for years. It was usually quite painful and frequently led to infection (which always healed itself after a couple weeks). Best thing I ever did was finally go to the GP and get it surgically taken care of. 30mins in the doctors office, less pain that treating it myself, and it's never come back. Saying all this my health care doesn't cost me anything but even if I had to pay, in hindsight, I would.
HN is public and anonymous and mostly manages to not suffer this problem, due to the heavy manual labour of the moderators and a whole lot of selection bias in its userbase.

To a slightly lesser extent, Slashdot has also licked that problem: for any story that attracts enough comments (more than 300) the top rated ones are often pretty good and the worthless ones start auto-collapsed. Even though Slashdot gets a lot of jip these days, some of it deserved, I've still spent many enjoyable hours reading some of the top rated comments there. Especially nice is the fact that upvotes must have an adjective attached, which gently nudges users into certain kinds of behaviour. For instance it's the only site I've encountered where people often post extremely funny comments despite the serious topics. The moderation system there encourages that sort of behaviour.
> It has constantly puzzled my why people are sleep deprived. why?

Age, anxiety, work-load, sleeping conditions, habits, physical health - to name the more obvious reasons.

Is that really such a puzzle?
The Air has not been refreshed in quite some time - that is his point. He cannot buy a new MacBook Air, because they have not made one in a while.
While content scripts (in the extension world, meaning scripts running in the context of a content page) shares the DOM with the untrusted page, it does not share the JavaScript wrapper layer around that DOM. This is extra confusing because the global object is a (JavaScript wrapper around a) DOM object.

The untrusted script can override its own view of createElement, but not the extension's view.
Test setup and teardown in Rust without a framework
> To me it is simple. Every single life is important.

Except, apparently, the life of your torture victim. This comment is a disgraceful defence of barbaric practices.
Yeah, it's time to ask for a raise or look for a new job that pays you your market rate.
The part about different kinds of content that get shared reminds me of this CGP Grey video that talks about what causes us to share things: https://www.youtube.com/watch?v=rE3j_RHkqJc
System and method for generating a relationship network - K Franks, CA Myers, RM Podowski - US Patent 7,987,191, 2011 - http://www.google.com/patents/US7987191
The new elites are in tech, but they're not the rank and file. Making even $250k/yr may be top-5% for income and give you breathing room to make a few investments, but it will never make you wealthy. That's lifetime earnings of about $10m before taxes, so you likely wouldn't get to fuck-you money ever, let alone with time to use it.

There's a very serious discontinuity somewhere around the $1m/year mark where you get to the point that you don't have to work for the rest of your life while you're still young. There's another huge difference between that and the guys worth $100m+ who can have whatever they want, including financing insane research and construction projects, not just the normal comfortable middle-class lifestyle, and never run out of money.

Putting those people in the same group as your average software engineer for socioeconomic purposes is ridiculous. Sure, I might have more in common with Zuckerberg than with a coal miner, but only just, and that's not saying much.
> Are they turning around and selling the note to Fannie or Ginnie Mae?

No, they're well beyond the conforming loan limits, even in "high-cost areas".

https://en.wikipedia.org/wiki/Conforming_loan

As I work through this thread, I'm wondering how the banks are structuring the liability (additional assets of the borrower are exposed?), or whether a new set of bagholders has been found (the taxpayers last time, hopefully not again.)
Yeah, why didn't they make twitter more like Blogger, Wordpress, Tumblr, LiveJournal, Medium, MySpace, or Facebook?
They only send the multi factor auth request when you first login to your account in the browser (and then every 30 days). Once you are logged in, autofilling works exactly the same.
That's so embarrassing how they can remove any account. People do so many things to make their followers on twitter but if we start getting ban like this, I'm no more on twitter from now.
Americans would have problems with this for 3 reasons:

1. You're cutting in the line. Most people wont say anything if you do it in person, but I can guarantee you they're thinking about saying something, and in their cars something to the effect of "this is why motorcyclists get themselves killed."

2. You're creating a traffic jam because now there are 3 vehicles and 2 lanes. This is especially problematic when there are multiple bikes that have "filtered."

3. Usually (almost always) the people that do this are riding sport bikes, and sport bikes have a bad reputation in this country for riding recklessly and dangerously. You'll never see someone on a Harley doing this, for example.

This is not common, but here's a recent example in my area of what happens when a motorcycle gets under someone's skin:

http://www.tampabay.com/news/publicsafety/accidents/fhp-driv...
Also, just because we're on Hacker News, it doesn't mean every reader is equipped to audit code for security vulnerabilities.

Presumably that's the job of a professional security developer that might reasonably be expected to have checked their own similar product for this vulnerability...
Look up Advogato and their trust metrics.
Just tweet tagging would do the trick. Probably tweets are too short to auto-tag, but medium manages to do it for longer form content.
Your "algorithm" is far less secure than using unique secure passwords through a PW manager. If someone got access to 2 (maybe 1) of your passwords, they would have all your passwords.
Link is dead... Taken down? Did transparency throw feces at the impeller?
"attack our government", so treason
Yeah, that's a good point. UWP could go the same way as Silverlight- especially if everyone one decides to just ignore it. Already, two of the technologies related UWP are almost dead (WinRT and Windows mobile 10)