skysight-inc/HackerNews huggingface dataset:
> There's not much insightful advice to be given

Except some semblance of an idea of where to find a security expert. Even if it's a slight remix of "where to find ryanlol", that's plenty more insight and guidance. :)

(It probably seems obvious to you, but most people don't know where to find one.)
Does anyone have an opinion self reported salary websites like glass door? Do they skew high or low? What about other online salary websites?
I wonder if the plane had a small backup generator of some type in case they had total power loss over water, or was there a chase plane?
You should never calculate stock options, or bonuses into your base salary, ever. I don't care what anyone says. Bonuses, and stocks are exactly that. Bonuses and stocks. They are great when they are way up, and shitty when they are way down. For the first time in fifteen years, I didn't get a bonus, and the stock price is way down. Never, ever, let someone hiring you convince you otherwise. They tried this when I got hired, and I held out, until my base pay was something reasonable.
But, this is predicated on the suggestion that UWP will kill Steam or is meant to be a walled garden. Even though, people including Tim Sweeney are WELL AWARE (he was notified about it, and responded) that the new version of Windows 10 on August 2nd (literally in less than a week) specifically adds more features to make third party install of UWP apps easier. You'll be able to just double click APPX files to install them, they'll have icons and properties visible in the UI. Microsoft has stated multiple times they intend UWP to be the safer, more secure, way to write apps going forwards, but that they will be workable with third party stores and installation methods.
Why does this make particularly more sense for trucks than cars? Just because trucks don't need to have a down time for sleeping like a car with a single owner does?
But that's not what Tim said. What Tim said was is that Microsoft, over time, is going to start damaging Steam's current functionality by locking down the Win32 API. Which, given how many Win32 API apps are cash cows for Microsoft or Microsoft's major partners (Adobe, for instance), it's ridiculous to think that Microsoft is going to start tampering with those APIs just to cut off Steam. Even if you believe Microsoft is evil, they're not cartoon villains from Captain Planet, they're not evil for evil's sake, they act according to what they believe is their self-interest. They're not about to start tampering with things their core business relies upon in order to benefit their barely-break-even games business.
Ya, but it runs Windows....YUK
Alternatively, Apple could not use grey-on-grey color schemes.
If the mayor of NYC has his way, that could happen. But unfortunately Albany (the capital of NY) will override it.

See the attempts by NYC to set up congestion pricing but Albany won't allow it happen.[1]

Personally I think other cities will start this first such as London, LA, Paris, etc.

[1] https://en.wikipedia.org/wiki/Congestion_pricing_in_New_York...
Nuclear costs more than wind without subsidies making it a non starter. We are still wasting a lot of money on nuclear R&D in the misplaced hope of changing this, but the underlying economics are still terrible.

In terms of change, we have dramatically cut back on CO2 production vs. predictions from even 10 years ago. So we are making progress.
QuickTime didn't need Microsoft's help. Apple didn't update it aside from security fixes for almost eight years.

As an aside do you have any actual evidence that Microsoft made QuickTime more unstable on Windows? Or is that just supposition?

PS - OS 9, like Windows 9x, lacked protected memory. So I have no doubt that a leak or other error in IE for Mac could cause the OS to crash. I hardly think that's really solid proof, just more proof that operating systems without memory protection are inherently a bad idea.
That's what I'm planning on at this point. The part below the CI stuff in this article basically captures what I want to do: http://chrisstump.online/2016/03/17/continuous-deployment-do...

I just wish there were more resources for small-medium docker deployments online. It seems like Rancher could help in this situation, but even that is pretty heavy for small deployments.
While you are here, can you confirm whether a similar regex vulnerability does not affect 1Password?
So a startup with 100k total funding got messaged a major company crushing bug. What should they offer for such a big find, 50k? Half their runway?

It's not that rewards should be small for big finds, but if you are legit poor, you have limits on what you can do.
drool––A New Kind of Lightweight Markup Languages
If it's not anthropogenic, then no big deal this is a regular cyclical warm period that the Earth goes through naturally.

Your conclusion doesn't follow. Just because man didn't create it [1] doesn't mean that it's necessarily cyclical. The earth has changed in many ways in its lifetime. Some of those changes are indeed parts of cycles. Other changes are strictly one-way.

[1] hypothetically; I'm not actually making that claim, just following that line of argument
There can't be an honest discussion about climate change that doesn't start with nuclear power.

The non-western world deserves to get to live as well as it possibly can. And telling poor African countries that if they build another coal plant they put their world loans in jeopardy is criminal. Subsidizing a few solar or wind plants doesn't even begin to impact electrical needs across the poorer parts of the world. Yet we'd rather people died today by the millions from preventable higher mortality rates due to poverty, than allow the developing world unfettered access to coal.

There's a reason many Asian countries have told the rest of the world off and started building nuclear plants as fast as they can.
You are operating under the delusion that Microsoft needs to follow its own rules.
Step 1:
Try to get in contact with the person and see if he/she is willing to help you share details on entering your systems. Thank this person and see if you can provide a reward.

Step 2:
Next step is setting up new systems, and start from scratch. Install the systems, start with basic system hardening and up-to-date software packages. Use https://github.com/CISOfy/lynis to validate your configuration.

Do not have any interaction or data exchange with the old (compromised) systems.

Step 3:
Save all running systems to learn from the event. See if you can find the main cause why this happened.

Step 4:
Learn about security, hire someone on your team with security knowledge.

Step 5:
Do regular (technical) audits.
Thales and PSA press release about automotive cybersecurity
Why the most frequent user experience conceptions don't hold true
In part Five: '...If it's init system is systemd, oh well...'.
what's wrong with systemd?
Windows power management is no where near as good as OSX, but that's always going to be an issue with horizontally integrated systems. However Windows PM is light years ahead of Linux.
What is this data based on? From my own experience, living on Vancouver Island, temperatures this summer have been much cooler than in recent years. This summer has been almost exactly average in temp, compared to above average for the last few years.

Looking at accuweather's data (www.accuweather.com, search for a city, then click 'month'), virtually everywhere in the US has been pretty much bang on the average temps for June and July.
Apple Watch VS Moto 360 (customer perception)
Why would you have and production system exposing SSH to the public?

If you must, at least do these steps:

- Disable password SSH login
- Install root kit scanner, like rkhunter and check if your networked systems are infected. s/he might gained access to other instances in your infra.
- Use port scanning on all your instances and check if there is any suspecious rpc port is open that you are not familiar wtih.
- Enable unattended security upgrades.
- Check for the vulnerabilities listings for your internet facing services, like nginx, apache, HAproxy, etc..
- forward all your syslog logs to remote system so the attacker can't cleanup her/her traces after establishing the attack.
- enable automatic blockers like fail2ban.
What do you mean? Autotype is available in KeepassX.
Any suggestion is welcome
Deployment by pull requests
> I mean how can you defend the point of burnout and depression as a status symbol?

I've always explained it away with the majority's staggering ignorance of mental health. Hanlon's razor calling.
Then this new sense would be an 8th sense.
I dislike Windows but I dislike OSX even more, so software is indifferent for me, seeing as I will be installing Linux anyway. I suspect there are many people who think like me.
Compression by shared resource
Hello Hacker News,

I would really like to get some input from the HN community on this topic I've been researching.

It's a bit of a legend/vague story, but I'm trying to find out whether there's any truth to it.

In short: Dutch electronics technician Jan Sloot (1945-1999) supposedly invented an incredible compression technique that could potentially change the digital landscape. Investors like Tom Perkins and Dutch billionaire Marcel Boekhoorn were interested in signing a deal.

There's a lot of mystery around the actual technology but what I could find was this:

Link: jansloot.telcomsoft.nl/Sources-1/More/CaptainCosmos/Not_Compression.htm

An article by a fan website that discusses the technology a little bit. Atleast, their interpretation of what the technolgy was.

What the article claims in summary is this: if there's a (e.g.) 4 GB shared 'magic dictionary' that exists on both clients and the only data that is transmitted is references to parts of this dictionary, massive file size reduction can be achieved if the purpose is transmitting/distributing the data to many parties (e.g. video streaming services like YouTube).

An analogy given is this: a PDF document which references fonts instead of embedding them, hence reducing the file size of the file that's transmitted.

What I would like to know from you is whether there's any potential in the above system for file size reduction and/or whether something like this already exists today? Perhaps executed in a similar fashion by other companies?

Perhaps some of these concepts are used in modern compression libraries like .7z, I'm not too familiar with those so I can't tell.

Long story short, I'm not experienced enough to judge the technology described but I'm curious to know your thoughts on the matter.

Kind regards,
Rick Lamers
Seems like they pay very poorly for experience and skills
How do you deal with sites that don't accept the passwords generated by salty?
Funnily enough I was thinking exactly the opposite about 'anthropogenic climate change' when I was writing that comment. To me, it is a technocratic phrase with little political or emotional resonance. I used it just to be clear what point I was making, and would much rather get rid of the jargon if I could maintain clarity.

I strongly disagree that whether or not climate change is human-caused is unimportant. How can you have a consensus on the solution without consensus on the problem?

A lot people who don't think humans are responsible will take the position that change is natural, therefore okay. Or, they will attribute change to other factors which would call for other solutions. If you don't think climate change is driven by the human-caused increases in greenhouse gas concentrations which we have seen, why would you try to tackle natural climate change through altering the concentrations of those gases?
5 Tips If You Want to Learn to Code
"You mean like, with a cloth or something?"
Microsoft absolutely wants everyone to leave Win32 behind going forward. Because Win32 is old and holds their platform back. UWP apps work on multiple architectures, hardware formats, etc. But since UWP isn't a walled garden, this is okay, it's just... the new way for apps to be built on Windows. And obviously, Microsoft being Microsoft, legacy Win32 support will be around for a ridiculously long time.

This is the company that still provides monthly updates for Windows Vista.
"Thank this person and see if you can provide a reward"

This should be:

"Thank this person and provide a reward"

Looking at all the other steps you'll have to go through to remedy the situation, this is the least of your costs. (Provided they cooperate and are not malicious)
So you don't believe there are blackhats out there? Because somebody has to be breaching online services and it's rather unlikely it's a godly entity doing that.

Felonies exist and people still commit them. Should they? God no. But people with a lower moral code exist and they can be flipped to do "good work" if there's enough money for them (and I think you should get more money in general for your important work anyway). I find the notion of your profession only consisting of good people highly offending to the rest of the world.
That GIF animation is wrong. The Sun and Jupiter are not repelled by one another. The Sun is tugged towards Jupiter, not away from it.
Marissa Mayer’s Payday
I switched myself and my family to use 1Password Family. Been very happy with it. Syncs across all user and devices (except IE lol)
Corporatecreditscool.com
It could also be <name>-san, <name>-kun, or <name>-chan.
As an end-consumer, probably not that much you can do to impact it (besides being carbon conscious and living accordingly), but as a creator/maker there are tons of things you can do.

The problem with media in my case is, that it leaves me paralyzed towards action more than it motivates me.

OT (sorry): cconcepts, is there any way to reach you via email? I have a question about one of your posts, but you don't have an email address in your profile
URL constructor looks great! Just wish it was stable. I normally don't have to worry about IE very much anymore anyways.
No, exactly -- at their peril.
These statements seem to be at odds with one another...

> It's hardware and software working together to make the experience.

> Linux on this machine would be awesome.
Get professional help.
Bounties aren't just monetary motivation - they show that the company understands security and responsible disclosure. For example, I've found pretty bad flaws in some white label web-based CCTV DVR software (privilege escalation and session hijacking). I went to the company website and couldn't even find a technical support contact. Given there's no bug bounty or other evidence they take security seriously, I don't want to risk sending this to the wrong person and receiving legal threats etc so it will remain undisclosed.
Why? Then you would have 1 experimental solar plane that uses 0 fossil fuels anywhere it the supply chain.

It's not necessary to make everything use 100% renewable but rather solve some big problems that'll make a difference in reducing green house gases. Solving only 1% of a problem by reducing it to 0 means global disaster.
> - Insulate your property to reduce energy use

I'm evaluating how to improve this small, isolated facet. Foamed glass blocks and sheets are really great insulation, but are currently prohibitively expensive for working and middle class to acquire in massive quantities (sufficient to reach and even exceed PassivHaus standards). However, if one is willing to accept lower efficiency end-product (made up for with thicker walls), extremely long, labor-intensive manufacturing times, and gradually add to insulation over years, it looks like it is feasible to build a backyard concentrated solar power kiln (only about 1,300 degrees C required, so not too many heliostats) and make one's own foamed glass insulation.

A minor benefit is the process requires a small amount of carbon, so while coal dust is usually specified, it might be possible to turn this process into a very minor carbon sink using other sources of solar-thermal-powered manufactured carbon.

You also need a machine that crushes glass into chunks, and can also crush into a powdery form called cullet. Make those solar electric-powered, and you have a process that can easily last a generation or two, making highly useful insulation the entire time there is plentiful sunshine out of your neighborhood's glass waste stream.

Aesthetically though, this kind of insulating is a difficult sell to mainstream developed world sensibilities: you need 2-3 feet thick walls and ceilings filled with this insulation, and about 10 feet in the sub-slab or pier foundation, to reach the American equivalent of R-90 all-around, for example. PassivHaus requires a lot less, but they are evaluating on net economic benefit across 30 years max while I don't mind a multi-generation payback if the result is an energy footprint that is in the single digit percentages of even "green" houses today.
Most road noise is from the tyres though, modern IC engines are pretty quiet.
Getting Started with Protractor and Cucumber
> I cannot trust Lenovo being competent at what they do after superfish

That was not on the business line. I.e. it did not impact thinkpads, which is what people usually buy on HN anyway.
Nonsense and wisdom are so well balanced in this piece that I can't decide whether this is a joke or not.
So I currently work at Microsoft as a researcher and I was recently forced into doing a UWP app/prototype because it has the best inking support that hasn't been back ported to WPF. I had to give up a lot to use it however: the DLR doesn't JIT in UWP, which I was using heavily, while compile times are slow when debugging (seconds rather than the typical tens/hundreds of milliseconds), atrocious when deploying (an hour for a small app). But as a benefit, I can deploy to UWP-only devices like SurfaceHub, which was pretty sweet!

Sad that we have to make gut wrenching choices these days, even within Microsoft's own platforms. But elsewhere as well, e.g. go with JavaScript to accept third party code and deploy on web or go iOS native to get access multiple shared memory threads (which I know how to use) for an app I've been thinking about.
I am also have an extremely negative feelings for OSX. As a Linux and Windows user it is just frustration for me all the time.

Plus I have the magic touch of making every Mac to crash while I am trying to get a contracted job done on the customers location. It is seriously so frustrating. (Mostly it is video/music production related)
How useful are the different styles and the highlighting in this tutorial?
I have developed a new type of blog that allows different presentation styles and includes a source code highlighting feature. If you could find the time to take a look at a 60 second Hello World example at http://lishman.io/angular-2-hello-world, and then answer three short questions at https://goo.gl/IuLhhg, it would help me a great deal. Thanks. (see comments for links)
Weather Forecasts, Internet Drones and Presidential Memes
Truck engines?

Probably depends on the speed as well.
I disagree. While it might be difficult to calculate the value of stock options and bonuses, they are part of your compensation for working at the company. If the company gives you a car for free use, it's also a compensation. At least the tax office in the country I live taxes the car as a part of an income.
No. In many contexts, feminism attacks equal opportunity and opts for equal ratios instead.
My point is, at some point you have to assume that the easiest way of all this happening is that either DNC or Hillary's staff is rotten from the top. At this point it seems to be a pattern to me.
Everyone I know with a Xiaomi is on an ancient version of Android and their phones are largely considered disposable. They might do the monthly security updates (all Android OEMs should be doing this) but that's very different than keeping up proper OS updates.

Considering how cheap the Nexus line is, I'm not sure why people even both with the super-budget phones. You get a lackluster experience, few if any OS updates, worse everything, etc just to save $75 or so. A Nexus can last you years compared re-buying a new budget junker annually.

I really wish the mobile market and buyers could mature to the point where we start talking about environmental responsibility here. We shouldn't have to buy phones this frequently and filling up landfills with this stuff. My Nexus is getting old and is still fine. My laptop is at least 6 years old and after an SSD transplant, runs like a a top.
Rewards should always be in accordance with made-up words IMHO.
Here are the links.

Example - http://lishman.io/angular-2-hello-world

Questions - https://goo.gl/IuLhhg
It's a perception win, as their diesels produce a lot of soot (not so much anymore, with the DPF and urea injection, but .. perception).

They need a lot of torque to accelerate (err, "gain momentum") away from lights, and the instant torque of an electric motor is especially well suited for this.

The downside is that the heavy battery pack takes away cargo carrying capacity. Trucks are weight-limited to reduce damage to roads.
Ever heard of the southern hemisphere?
Off topic, but have you tried Gnome 3? I personally can't stand it, but a lot of my friends who use macOS love it, to the point of saying it's on par with the macOS desktop environment.
Linux and rise of Ransomware
There's nothing wrong with allowing one app to install another, but the key is, if you can't leave the sandbox, you request the OS do it for you. Android apps are sandboxed, and can install other apps, but you get an OS interstitial asking if you want to do it.

Similarly, a UWP app could conceivably be allowed to trigger the install of another UWP app, but it would pop-up a Windows box, not unlike a UAC elevation prompt, showing the app name, publisher if properly signed, and requesting the user permission to go forward with the install.
"The more she listens" part is likely why we can listen to an album once and dislike it and then on a second, third and fourth listen develop an increasing appreciation for it until it potentially becomes a favorite album. I always found that phenomenon strange, but your comment is an interesting theory for why that happens.
This is a dubious assertion. Best is fundamentally a subjective metric. Code is only the best for a given set of criteria. What's best code for rapid development isn't best for maintainability. Sometimes you have to break maintainability for speed bottlenecks. Saying there's a best way to code something is a very contextual claim.
Considering the sheer number of fake reviews on Glassdoor, I'm not inclined to trust them with anything, including salary numbers.
It's not about trust it's about information gathering the goal is 2 fold

1. figure out the intentions of the individual

2. quickly finding and fixing the affected system

To be clear it doesn't matter if the information is true or false because if it's true you can find evidence on the system to confirm it and if it's false it could still prove useful.

You can nuke it from orbit later that could take hours or even days depending on how much stuff you have on it plus if the entry-point was trough the new app you just created nuking it won't fix the issue.

The moment you put the app on the new server you opened yourself up to get hacked again.

We all know a constantly updated system with nothing happening on it is incredibly hard to hack vs a system that has a lot of things happening on it the more things you're doing on a server the higher the attack surface plus it's a small company we're talking about here so they probably want to keep costs down by doing everything on as few servers as possible.
Whaa... I must be doing something wrong, because I'm in Dallas with 14 years of total engineering experience and 8 years of software engineering experience but have yet to break $93k.
I'm a LastPass user but not really in love with it. If I were to switch, which is best and WHY? I need it to support chrome and Android.