skysight-inc/HackerNews huggingface dataset:
There is a reason why they call it the bleeding edge. It's up to you to evaluate the technology to see if it fits within your infrastructure. Calling docker out and saying it's broken when its a free product seems to be miss guided.
We've solved the multi device issue at Wire (wire.com). Causes some challenges - larger payload, not super fast performance in browsers once you hit certain level of connections and messages, but very, very usable.

wire.com/privacy for security whitepaper.
I did not edit that part IIRC, I try not to edit anything substantially that I post online.

As far as NetApp v. Sun, it was very unfortunate. I could rant for days about how crappy the business reasons were for NetApp going after Sun (zomg coraid!).

I use your quote about Oracle being a lawn mower from your usenix presentation all the time. Thank you for your reply.
HLN cancels Dr. Drew show – Aug. 25, 2016
That's not true. The patents grant in GPLv3 or other licenses (like APL) only holds if you're actually using that project in your work. So either you fork the GPLv3 project, and comply with a compatible license, or you don't have a patents grant.

This is basically why Google could be sued by Oracle, because Dalvik and their class library based on Apache Harmony were not a fork of OpenJDK.

Of course I cannot speak for Signal's protocol. Maybe it has no traps. I'm just commenting on that license. It's a strong license that makes some demands: good fit open source but bad for Google.
That's terrible logic. Imagine if Google just decided to delete people's email randomly in Gmail ... because free.
Illumina and Oxford Nanopore Settle Patent Infringement Lawsuit
I'm inclined to believe the claim that "unlimited vacation" was originally a way to get around having to compensate employees for unused vacation days when they leave the organization.
Why this can be faster than GNU parallel?
What the radio connection does to the pacemaker probably does.
Yes this is exactly it. High deductible health plans are succeeding in making prices more transparent and letting the markets work as a check on healthcare costs.

What Mylan is trying to do is a bit sneaky -- mollifying the high deductible complainers by giving them a coupon they can use but I believe in the long run it will backfire since it will drive more people to high deductible plans.

low deductible health insurance plans dont make much sense b/c no one has an incentive to save money. by having people share in more of the costs (up to a certain level) I think you get market forces to help keep prices in check
Flying Parrot's Disco Drone: An Enormous Amount of Almost-Affordable Fun
Clinton used BleachBit to wipe email server
More likely the hacker would rather use it to steal your identity and f. you over very, very hard. Much more lucrative than spoofing with a "known-good" account, right? So you'd really, really better trust those hackers you're selling to.
The Fixing-JSON Conversation
What CPUs do you have in your box?

In most modern systems the rate at which the CPU can compress data is many, many times faster than the disk can write data. In general compression greatly increases write speeds because less disk IO is needed. The vast majority of benchmarks show that to be the case too.

TL:DR, if you notice a performance decrease after enabling compression, something is wrong with your NAS/SAN.

That said, if you are just storing large encrypted files on your ZFS then compression isn't needed.
I will never stop being infuriated by responses like this from companies - how many more megaleaks have to happen before they realize that they need to embrace white hats, not ban their accounts, not sue them, not swat them / have them arrested, not silence them.

Great find / writeup.
> no conclusions should be drawn from a single study period

I didn't see the point in pointing out the obvious - I thought that's as annoying as on reddit's /r/science the inevitable single-sentence comment "correlation is not causation" for no reason whatsoever (i.e. when nobody made that claim). I pointed out the age threshold because there was a comment (of only 6 or 7 total at that point) that attempted to draw the conclusion that older people are doing worse.
Are you paying for the service?
I haven't played enough with Docker Swarm to run into any of these issues, but Rancher (www.rancher.com) does all of this, and more, very well. I am not affiliated with them - just a happy user and contributor of github issues.
Great article! I'm saddened by DO's response and further wronging a white hat by banning you.

Let's remember Linode offers 2x the RAM.
Sorry, I was trying to point out that you can have it both ways. As pixelcort suggested, do a one-time upgrade of all (weak) hashes to newScheme(oldScheme(password). But then as users login, you can upgrade them to just newScheme(password). No need to force a reset just because people haven't logged in recently.

I'm familiar with Django, and they happen to have some nice docs on both parts of the process: bulk upgrade to stronger scheme by wrapping [1] and individual upgrade on login [2]. But the technique isn't unique to Django.

[1]: https://docs.djangoproject.com/en/1.10/topics/auth/passwords...
[2]: https://docs.djangoproject.com/en/1.10/topics/auth/passwords...
Thanks, and great question. During our exploration of the first box we popped, we noticed that most of the services on the host had their code and configuration in /usr/inversoft (or /usr/local/inversoft, I can't remember which exactly). So when we got our shell on the app server, that was the first place we looked, and luckily it didn't take long to find a config file containing Passport credentials.
You don't have to find facebook useful or like it to be coerced into using it. If your friends and family organise everything by facebook because they find it useful, you have to use it or you'll miss out. Much like if you don't use gmail and hate it, google still have enough of your mail to put you in prison because at least half the people you're emailing do use it.

It's like opting out of electricity - pretty theoretical. So we regulate it so it doesn't f. us over too badly. This is what needs to happen here.
It's triggering full page refresh on removing devices for me, but not on removing old web sessions.
And, sure, a 50% graduation rate at a state college is a big problem that should be investigated as well. But it's definitely not true that "all of the state colleges" have this problem, whereas it (as least seems to be) ubiquitous among for-profit schools.
Here's hoping that Woz pops in at the invocation of his name!

https://news.ycombinator.com/threads?id=stevewoz

(I'm referencing this memorable AskFilter thread: http://ask.metafilter.com/47835/Woz-More-like-Was-am-I-rite#...)
A closed source project can license other closed source technologies, can maintain trade secrets, set its own roadmap and not expend energy on open source community politics. For Intel this means technical decisions about their compiler about can align with future chip technologies and be tuned around undisclosed aspects of a chip's design.

GPL for GCC would make that difficult and LLVM already has an 800 pound gorilla of a corporate backing.
Now You Can Watch All of the Ray Bradbury Theater Anthology Series Online
Not necessarily. If you start thinking about p2p versus centralized retrieval methods, leaking your access pattern directly to Wikipedia might be nicer than leaking that access pattern to friends who have a personal interest in you.

(FWIW I think this post is an exercise in pouring gasoline on flamebait).
Youtube playlist at [1]

[1] "The Ray Bradbury Theater (Complete In HD)" [ https://www.youtube.com/playlist?list=PLZ-I2mQwNX770oKuqj7KN... ]
The problem with using sales records for LVT is the central concept of LVT is that it's based on unimproved value, and actual sales of land usually include improvements and separating out there unimproved value is non-trivial and hard to validate.
I wonder how Moxie feels about being used in what looks to be a pretty spectacular privacy bait-and-switch.
She doesn't say that most money has been going to the laws. She says they have expended resources on lobbying for those laws without specifying how much.

The CNN video that plays at this links says their margins were 9% in 2007 when the bought the drug and 55% in 2014.

http://money.cnn.com/2016/08/25/investing/epipen-cost-ceo-lo...

Any business with 55% margin is a nice business to be in.

It's also kind of scandalous that they've designed a method to reach around the insurance companies. I don't think drug companies should be allowed to offer consumers rebates that make them more likely to utilize their insurance. When they start from a high price, it's an accounting trick that doesn't cost the company anything. If a company so strongly believes they've miss-priced their product, they can simply reduce the price.
this post raises questions:

Was there a realization into how legitimate users may be affected by this action? Was there a plan to remove those domains from their account after making and disclosing their proof of concept?

Why not stop at 10 or 20, and then alert DO to the findings?

20 thousand was unnecessary.
Linked FTA: "However, a source with direct knowledge of the situation has now responded to Light Reading about the report by saying these claims of drastic job cuts at Google Fiber are false."
(emphasis mine)

http://www.lightreading.com/gigabit/gigabit-cities/google-fi...
Honestly, this is not a problem at all.
Wow, you could have simply given a gist or your opinion on the matter rather than posting a plethora of links.
What did Google miss in attempting to drive the Fiber program.

Reading some of the executives from other companies, they were surprised by their price points after installation. Frontier / Verizon FiOS had just gone through a country wide installation, was there no one to poach for knowledge?

Or was it another play by Google to get some sort of bureaucratic favor or other item.
I also received this email, even though I changed my password this February since my laptop was stolen... Strange
Climbing is different. As Hemingway put it, "There are only three sports: bullfighting, motor racing, and mountaineering; all the rest are merely games."

Many performance-enhancing drugs are really bad for you; that is the rationale for banning doping in mere games, while permitting fancy shoes and other expensive performance-enhancing technologies. It doesn't work for mountaineering, because the sport itself is really, really bad for you, to the extent that death is a normal and accepted part of it. It would be obscene to enforce the rules of your game on other people when that posed a risk to their lives. They get to make their own rules, because the mountains are theirs as much as yours.

This is also why climbers are ambivalent about competition. Matching what the other kids are doing is a big part of what motivates many climbers to try harder things. On the other hand, if two climbers start one-upping each other, they had better stop before one of them gets killed, because no pissing contest is worth dying for. Few do.

I'm one of the exceptions, but that lesson involved so much luck that it made the front page of every newspaper in the country.
TO: ANY DIGITAL-OCEAN USER,

This is an absolutely terrible response from DO. If I had anything hosted here, I'd move away ASAP. Seriously, do it.
This doesn't help my impression of Digital Ocean at all (even if I am a paying customer currently). A few years ago you could impersonate Digital Ocean staff on their support pages with no effort. They grabbed the username from your email, so whatever you put in front of the @ becamse your username on the forums, visible to everyone. And the avatar came from one of those email->avatar services where you can sign up and set it to anything. So when I signed up with a username like digitalocean@mydomain.com, I ended up being called "digitalocean" on the support forums, and if I had wanted I could just change the avatar to the Digital Ocean logo and impersonate DO or anyone else.

I tried reporting it but got pretty much the same answer as this guy (though I did not get banned). Luckily they fixed it like a year later.

Great write-up, and interesting problem! I wonder if more hosting providers are vulnerable to the same problem.
For Firefox:

user_pref("image.animation_mode", "once");
> Smallpox is inherently dangerous.

I think the equivalent (or much worse, actually) for exploits is something that is self replicating and disruptive. For example, a bug in the BGP routing protocol (or a certain percentage of the common implementations) that propagates bogus routes and disrupts some or all traffic for affected systems and spreads. Something that disrupted a large enough chunk of global traffic would not only be horrendous in its own right, but would also make dissemination of any fix quite problematic.

Then again, I assume it's probably good practice to somewhat lock down how BGP functions in your routers (if that makes sense. I'm not that familiar with it), but a certain incident from last year[1] leads me to believe that's either not possible, hard to do, or people just don't do it.

1: http://www.bgpmon.net/massive-route-leak-cause-internet-slow...
If your db has already been breached, it's too late to upgrade security on those hashes, true.

But if you're trying to proactively strengthen your password hashes to make them more resistant in case of a future breach, this lets you do that with no inconvenience to your users.
It's the generic Adrenaclick that is $140. If I have it right, there's 2 companies making the generic.
> (UPDATE users SET password=null WHERE hashing_scheme='old')

Except you did this while the world was on fire, late on a Friday night, after a few beers, with management screaming down the phone. And you didn't check to make sure it didn't allow anyone to log into all effected users accounts with a null/empty password. Oooops...

(Been there, done that, made similarly stupid mistakes...)
Well, that's disappointing. Maybe if they'd done more installs and less PR...

Webpass is only for multi-unit buildings with rooftop line of sight to a Webpass node. They put a directional antenna on the roof. Webpass needs a 30-unit building built after 1995 before they will pay for the install, although they'll do a 10-unit building if paid. But if you're in a large multi-unit building in a big city, there's probably already some kind of network connection. (Probably Comcast, though.)

Maybe Sonic can buy up the remnants of Google's fiber operation. Sonic is plugging away in SF, wiring the Richmond and Sunset districts with gigabit fiber. Next, the Castro.
This works, but if you've previously leaked a copy of the old hashes, then old passwords which are still in use are still only as secure as the old hashing mechanism. They won't be running old hashes against Dropbox's live service, they'll be dropping guessed passwords against Dropbox's live service. It doesn't matter if that password is now secured by bcrypt-with-a-hefty-cost-factor wrapped around MD5, improving its security versus being done in just MD5 -- if the password is right then the attacker will get through.
I think it's because it acquired webpass and has more people than it needs.

But I am very surprised about less than expected subscriber growth. But what do they expect when they're only in small cities and are unable to get into big cities, where the potential for growth is much higher?
Free and broken are not mutually exclusive.
> please take it slow and make Docker great again!

Perhaps they should create some sort of firewall? I mean, the network packets coming through... they bring malware... they're spam... and some, I assume, are good traffic.
If Slack's desktop client was written in efficient C++ using platform specific UI framworks it would likely be one to two orders of magnitude more efficient across all important metrics. Unfortunately the desktop app is basically an entire web browser instance running JavaScript code.

I can see the appeal, however. Write once run anywhere is a hell of a drug.
Top 5 Rarest Weather Phenomenon
Our planet Earth is a source of endless mystery and wonder. With all of modern science and technology at our disposal, we have come closer to understanding many strange, mysterious and beautiful weather phenomena that occurs in different parts of the world. Following are some examples of such phenomena.

1. Sun Dogs

These optical phenomenon are visible as a pair of bright spots appearing on both sides horizontally to the sun. They belong to the halo family of weather phenomena, and are caused by the interaction of sunlight against ice crystals present in cloud formations. There appearance is in the form of two coloured patches of light on either side of the sun. They can be observed from every country, and more most easily noticeable when the sun gets close to the horizon. Interestingly, sun dogs are formed on several other planets in different shapes and sizes depending on atmospheric content and distance from the sun.

And More visit page and send me about your feedback how many Weather Phenomenon will not good for world.

http://www.sci-fy.com/top-5-rarest-weather-phenomenon/
Linode also does not verify domain ownership before you add a domain to their DNS. And they also use the same nameservers for all accounts. So I think they're in the same boat as DO as far as this "vulnerability" is concerned.

I'm a long-time Linode customer and use them for all servers that run important services. I use DO for the less important stuff. But Linode has had a not-so-stellar record of data breaches.
Travel Back in Time with the Master of Photo Colorization
I'm a little confused about the point here.
Security researchers often hunt down bugs that are deemed esoteric or state-actor only.
Security researchers are often the sort of people who would do things like stalking.
Therefore we need security researchers to find security flaws so other security researchers can't use them?

If that is the point, it seems to humanize the problem space in a different sort of way. Security researchers are people, too. Some are "good", some are "bad", but most people are in between. But instead of framing your work on targeted individual attacks as a journalist being targeted by a state-level actor, realize that there are other researchers out there with your same very specific set of skills which would allow him/her to target someone of their own choosing. In this example, perhaps the researcher is vindictively stalking an ex.

Outside of that, though, I can't help but think that there is a much more interesting and broader point about the humanity that is affected by the work you do in both security and privacy. If you consider people who are not as skilled, but still as vindictive, malicious tweets from fake accounts multiple times per day is pretty bad. Couples that share passwords can end up really enabling this vindictive behavior. (gasp who would ever share passwords to something private like that? Perhaps an abusive partner demands access to email and hangs onto a recovery key.)
You don't get Gmail ads when you're using Gmail?
I feel that your argument only makes sense if one player controls a majority of the market, so that the majority of sales stolen by the new restaurant come from the same owner's existing restaurants. It's not enough to just own a handful of nearby buildings, you actually have to dominate several blocks. And decide to keep a bunch of that valuable real estate empty instead of converting it to condos.

Here are some possible explanations:

1) Deliberate price-fixing behavior from a majority cartel of owners. A lot of these buildings are owned by publicly-traded REITs. This would be a pretty big conspiracy.

2) Price stickiness. Prices have not caught up to reduced demand. Accepting a lower rent means losing. A version of this is the reason given in the article.
Judge in Stanford rape case asks for move to civil cases
Many more than are being born or have been born in any year in decades, I fear.
For those curious about his recordings, search "Rudy Van Gelder" on Spotify or similar - there are many remastered tracks tagged as his. Definitely worth a listen.
>I guess one important feature ZFS has is that it supports L2ARC / ARC caching for SSD Acceleration.

Which can massively accelerate small file load times. Using this on a VM pool greatly speeds things up.

>Also ZFS has compression which can drastically reduce data usage.

Which in some virtual environments decreased our data usage by 50 times or more.

Windows storage spaces suck balls on speed. Using it in the Microsoft recommend methods to avoid data loss or corruption make it even slower.

Oh, and just throwing files on ReFS and using it directly with services and such is a great way to get weird issues if you don't understand the filesystem are different.

>while ZFS volumes are locked to a specific size

Specific number of disks. You increase the disks size and you can grow you raid.
"> First impressions are everything.
They're not."

They definitely are - it's part of human psychology, and it happens to those of us even aware of the fact.

We start making judgements quickly. It's the way we work.

It takes a lot of self-awareness, and usually methodology to overcome it.
Wonder what else might be vulnerable to this... CloudFlare seems like it may, they only have a handful of nameservers in any case.

Sort of hard to call it a vulnerability on DO's part though - more of an issue with the admins. I think most DNS services operate in this way, really, route53 may be the exception, not the rule.
That's better for the _next_ time your site is breached and you newScheme hashes get exposed.

Doesn't help if $attacker has a list of breached oldScheme(password) hashes, and can crack useful numbers of passwords from you old weak oldScheme hash. They can still log into migrated accounts if they can reverse oldScheme into the characters of password.

If you're preemptively upgrading your password hashing aglo with the assumption that you have not (yet) been breached, that works (if your assumption is good). Once the oldScheme hashes are out there though, it's too late.
Why, when the author realised this was likely to be possible, didn't they get in touch with DO? Or try with a domain they knew was OK to use? Or at least just try with one domain.

They took almost twenty thousand, sent all the requests to their own server and logged them.

That's surely not your first step.
10 Promising Scientists Who Died Mysteriously
They are zealous, bold and have a pechancy for unearthing the most insidious information within their spheres of influence. While many scientists have gone on to invent new discoveries that have changed the world for good, some of the brilliant minds have had their lives cut short by suspect occurrences. Here are 10 promising scientists who suffered untimely deaths.

1. Shane Todd (June 2012)

Shane was an American scientist contracted by Institute for Micro Electronics in Singapore. While he was initially contracted to research on semiconductor amplifying devices, investigations established that he was increasingly being pressurised to work on projects that could compromise the security of his mother country. He opted to resign but was found hanging in a bathroom in his hotel on the last day of work at IMES. While investigators classified the death as suicide, there were strong pointers that it was all a homicide.

2. Dr Massoud Ali Mohammadi (January 2010)

Iran’s Nuclear projects has claimed many lives in the recent past. According to reports, over seven high profile nuclear scientists have died in unclear circumstances in the last five years. One such scientist was Dr. Ali Mohammadi who died when a when a booby-trapped automobile exploded near his car. His death brought to the fore a complex ‘Triangle of Wickedness’ that was characterised by accusations and counter accusations between foreign forces and local political regimes.

Are you Know those Scientists? and what this happen with him please send me your feedback for read full Information visit Here:

http://www.sci-fy.com/10-promising-scientists-died-mysteriously/