skysight-inc/HackerNews huggingface dataset:
NAS4Free and FreeNAS are just relabeled FreeBSD with GUI stuff pasted on. FreeBSD doesn't have /dev/disk/by_{id,label,partuuid,path,uuid}. It's its biggest failing IMO. Their /dev/diskid is NOT what it sounds like.

That said, ZFS pools under FreeBSD and derivatives, just as under linux, are imported from info stored on the drives themselves. They should be able to reboot after scrambling the cables. It would take more nerve, or craziness, than I've got to PROVE that using any pools I care about.

However, I have completely screwed a ZFS replace command in FreeBSD following a bad drive in a RAID-Z3 pool. It dutifully replaced a perfectly good drive with my new drive. But no harm was done to the pool. After it finished, I ran another zfs replace, replacing the bad drive with the "mistake" old drive. It all worked!

ZFS is so brilliant, be careful or it will put your eyes out :-)
Sonar.js – A Framework for Scanning and Exploiting Internal Hosts with a Webpage
One would hope your hashing scheme involves a salt and maybe even a work factor, and when you start including all the parameters, it's not so simple as A(B(C(P))).
But going to physical processes could change the asymptotic cost by adding new primitives.

There is the Computational Complexity-Theoretic Church–Turing Thesis, which hypothesis that any physical model of computation can be efficiently (eg. in polynomial time) be simulated by a turing machine. This has never been proven, but it has led to correct physical predictions so far.

We also have have demonstrated polynomial improvement that can be had by moving away of a turing machine. For example, the use of random access memory offers an asymptotic improvement for many algorithms relative to the linear access memory used by a turing machine. Additionally, Grover's algorithm allows an exponential speed up in a wide range of problems on a quantom computer; and neither of these approaches requires shifting the savingns onto some other resource.
The new swarm mode is great when it works, but it is monster to debug. It takes care of so many things that it is nearly impossible to pin point what component isn't working.

The issues I have encountered with swarm mode:

* Some containers could not use hostnames to connect to other containers.

* Sometimes, in a 3 node swarm, containers on A could be reached from B, but not from C.

* After every reboot these issues could be fixed or start occurring.

* It automatically adds firewall rules for every service you port map to be exposed to the internet, without warning

In the end I switched to nomad, it isn't perfect either but at least it is consistent.
Investors short medical biz – then reveal bugs
It's an issue of credibility.

I'd much rather pay for something that works than get something for free that doesn't.
The Schoolboy Error
That's interesting. I give The Information the benefit of the doubt because of its established cred. But Light Reading, which I haven't read before, seems to at least be the kind of industry trade pub that would have useful contacts. The lack of non-official response seems strange, as according to the original report, this alleged action was initiated one month ago:

> But that’s only part of the story. Last month, Alphabet CEO Larry Page ordered Google Fiber’s chief, Craig Barratt, to halve the size of the Google Fiber team to 500 people, said the second person close to Alphabet. (The Google Fiber unit is now known as Access.)
> I feel like so many places put emphasis on abstract knowledge and technical ability and leave out so many other traits that are good.

I don't disagree, but personally I would rather work with a competent (or brilliant) asshole than an incompetent nice person.
Fair point, my relucatance to stop was mainly due to companies usually disreguarding reports unless I have strong proof. Stopping short of the full scope would've left it up to speculation as to the full amount of vulnerable domains.

It was my plan to delete the domains (or at least null route them so others couldn't take them over with more malicious intent). However my account was banned before I could do so.
I like the title on the original article, "Alphabet to Cut Google Fiber Staff In Half". Makes me wonder if I get to keep one arm and one leg, or if I will have to learn to walk on my hands instead.
Alright, I understand now. A bit hard to figure that out from your original comment though, but thank you for clarifying!

I'm curious about using two different algorithms for hashing at the same time would affect entropy. It could be that the original plain-text password has better entropy than the SHA1 hash (if that was your old hashing scheme) of the original password has.
See my response below and the logs were secure removed shortly after (as stated in the blog post).
I am looking more and more about using the Apcera Platform. They have everything I need in a container management platform for free: https://www.apcera.com/community-edition
So...we've trusted Google with robotics, fibre and RSS. There, they failed. Sometimes understandably, sometimes less so.

We continue to trust them with the monetisation of content, i.e. advertising, email and search.

Is this fine? If society's necessities fall in the shade of the government's "immortality umbrella," are we okay with email sitting alongside paint manufacturing? Or is the real problem that ISPs don't fail often enough?
It nothing about that. The main point is the whole community bitching a moaning about software that in all intent and purposes is given away free without any contribution by the users. The source code of Docker is open source so why doesn't the guy go in there and contribute his time and or his own money to support the project that to him is so vital?

No doubt the guys working on Docker are super smart guys, though they too have bill's to pay and lives to live. So if you want to see Docker improve how about contributing back and or supporting their efforts with extra funding. Maybe they will have the funds to bring on more full time developers to hunt those obscure bugs or add those features that everyone wants?

Discussing and putting down the developer with article titles such as 'Sad state of docker' to me shows self entitled the community around these projects are.
> A private XMPP or IRC server is a much better option.

the slack servers probably get a lot more security attention than your private XMPP or IRC server that probably sees a few minutes a year of attention from some engineer to run "apt-get dist-upgrade" or something.
I should leave the most reliable host I had to date because someone was messing around with things he shouldn't be?

DO knows people can do this, but they don't want people to do it.

Remembering 2 recurring DNS servers is easier for bulk management than a bunch of different ones.

You don't test services like that, it can negatively affect other users.

Response wasn't perfect but it was reasonable.
Ever tried screaming into a deep dark well?
Slack group administrators can see edit history. That's not relevant, we're talking about what end users see.
I've long wanted to try the 50g, but haven't been able to forgive HP for ignoring longstanding bugs in the 35s and for outsourcing the design of the RPN calculators that they were rightfully renowned for. I ended up replacing my 35s with the "open source" WP 34s, which is based on the HP 30b calculator platform:
https://sourceforge.net/projects/wp34s/
Though there are so many
Though there are so many benefits there is a word of caution especially for women. Overconsumption can be harmful because if there is a rise in the level of acid in the membranes of the red blood cells there is an increased risk of getting breast cancer. A hectic lifestyle improper rest and inappropriate diet contribute in affecting the human body in a negative way.
http://www.dermayouth.org/cla-safflower-oil
Actually we do pay for "free".

Why do you think "free" is used as a marketing strategy? Obviously there is a monetary benefit somewhere - or anyone attempting a "free" or even just a "low(er) price" strategy must be doing wrong. An example is Uber, which has just generated yet another billion dollar loss headline.

Apart from the data collection model, what it does is it removes the incentive of others to enter that market and possibly create something better.

And on an individual level, something can have a cost merely by existing - because I have top choose. And if I choose wrong I end up worse than where I could be.

Imagine I was an evil guy from a Disney movie. My next project to annoy people might be to create an app that seems to work - but has a lot of very annoying flaws. However, I never mention the flaws (of course not), instead I go all out on my marketing and make a lot of claims to get people to use my evil software. I then sit back and with an evil laugh enjoy the frustration that I created a million times - the (Disney-level) evil scheme succeeded. I wasted lots of people's time; I may also have sabotaged other (non-evil) projects by taking users away from them, and I managed to raise the world-wide frustration level.
We should also stop allowing all colleges (including public ones) to graze on the huge loans that their students get. If there were not endless federal loans, public schools wouldn't be able to endlessly raise their tuition.
In Books on Donald Trump, Consistent Portraits of a High-Decibel Narcissist
http://www.dermayouth.org/cla-safflower-oil
Doesn't the licence plate database include the make and model?
BBN Lisp and its successor Interlisp, popular in the 1960s and 70s, had a persistent data store that was more closely integrated with the running Lisp image than typical general-purpose file systems (slide 41 in [1])

The proposed (but apparently un-implemented) LispOS [2] was to have a single-level store where objects in the running Lisp image would be transparently checkpointed to disk, with no conventional file system.

[1] http://www.international-lisp-conference.org/2005/media/bake...

[2] https://github.com/robert-strandh/LispOS/blob/master/Documen..., also chap-checkpointing.tex
React patterns
> Have not changed their password since mid-2012

I changed my password since then, still received the email, mmmm
Test262 is a JavaScript Sideshow
Anyone with an interest in jazz has already got at least one of his records.
Swarm Mode is "great". Assuming you've never heard of or used Kubernetes. In which case, Docker Swarm is too little, and a year+ too late.

As for marketing, it does seem a bit funny that a product would announce "deep integration with underlying infrastructure" for a cloud provider when they haven't written a single line of (public) code to actually support that cloud provider.

The fun thing is this arguably critical blog post praises features in "swarm mode" that have long been present in Kubernetes/Mesos/Nomad: [labels/constraints].

There could be a lot written about the fact that Docker ships "Swarm Mode" as stable in 1.12 despite virtually everyone's actual first-hand experiences. I would argue that if "Swarm Mode" were not shipped inside of Docker 1.12 and didn't benefit from riding along with the normal `docker` package, few would be talking about it.
5 Tips for Modernizing Your Contact Center
Is there a link to get the code?
iowatch is a nice simple alternative.
Domains can only be added if they are not in another account, so he added only domains which were previously deleted but still pointed to DO nameservers (hence almost certainly not being used).

And if DO was really concerned about the damage then they would have removed the added A records, but they didn't, they banned the author and continued to let all traffic go to his server.
Both FreeNAS and NAS4Free are nothing more than FreeBSD with some GUI stuff pasted on. I am comfortable using ssh and [ba]sh, so I couldn't care less about the GUI. I just use the real thing: FreeBSD.
Yeah, Docker has a lot of catching up to do. They bragged a lot lately about how Swarm is faster than K8s but you really can not compare the two when you look at features and stability of k8s.
Exactly. If I make a claim, you don't have to pay me to earn the right to dispute that claim. "Here's a lamp. It's magic." "Uhh...It doesn't appear to actually be magic. It's not even a decent lamp." "How dare you say it's not magic? I didn't charge you for it!"
How to Write a Persuasive Job Posting (With These 7-Steps)
"connect to Wi-Fi - Confused. The phone connects to WiFi, WeChat uses the phone's WiFi connection"

In some restaurants, you have to scan their printed WeChat QR code and follow their official account, before the wifi will connect. I'm not sure how it works, but I've used it a couple of times, and it was a smooth process.

"open an online store - Not done. Do you mean use the microblog function to advertise wares; that's common? various middleware linking to escro services etc?"

You can build a store as an HTML5 app, embedded within a channel. The store will get access to identity and payments via WeChat's APIs. There are also sellers that use their regular account. They publish new items in their 'Moments' feed, which anyone connected o them can browse. If you want to buy, you send them a message with your address, and send them a person-to-person payment via WeChat payments.

"WeChat has achieved a critical mass surpassing even QQ (they're made by the same company)."

I remember there being a very smooth migration process. When I started using WeChat, I was quickly able to add my existing QQ contacts. So I just stopped using QQ.

"Office circle"

Yup. I'm in a few of those informal groups with colleagues. Also there's a group for people that live in our apartment block.

"International calls - Video call a colleague in Singapore? Use WeChat and office WiFi."

Yup. If one of you is in China, then WeChat quality might be better than FaceTime.

"Stickers"

I use these pretty often. I used to think sticker were just for young people.
> Response wasn't perfect but it was reasonable

I'm sorry, "We aware that we make it easy for about 20k domains to be directed to a malicious host, but we're not going to do anything about it" is reasonable?

But of course, it's because Matt "was messing around with things he shouldn't be". It's all solved - we just need everyone to stop doing things that DO "don't want people to do".
"real estate agents use it to post apartments etc."

Real estate agents in China use WeChat that way, too.
There is also proper fiber, not just the LOS wireless. They use both depending on building/area.
Now, as for email? Yes, email is important, but the root of control in email is DNS; the whole system is setup so that it's cheap and easy to own a second-level domain. Do that. If you own your own second level domain and you host it with google, it's easy enough to move it elsewhere if google shuts down their email. If you host your email on a second level domain you don't control? you are at the mercy of the owner of that domain, be that owner profit-seeking or not.

Personally, I think the domain system is actually pretty good right now. If you want a domain more officially controled by the government, you can get a .us second-level domain, if you are from the same country as I am, for rather less than a dollar a month.

That, and read up on the registrar/registry setup. Your email, at least the parts of your email I couldn't re-create over the course of a lazy afternoon with some open-source software, really does have some heavy government involvement.
If you're investing for the long term, 'you're crazy'
I've printed a Raspberry Pi NES Case with my 3D printer. Most FDM printers will print in similar quality, and I'm not sure if he has done any post-processing on the finished prints.

Looking at the author's Thingiverse page, he says he has a CTC Bizer which looks like a MakerBot Replicator Dual clone.
I doubt Australianess is a factor but then IANAS I Am Not A Scientist.
Except a (theoretical?) attacker isn't going to stick with the things they're "meant" to do.

I'd much rather know about this vulnerability via a researcher than when a high profile company loses control of their accounts / domains.
So discussing earlier personal computers is equivalent to the absurdity of inflatable sheep. Brilliant commentary.
Your story is so similar to those I've both experienced and watched play out over and over again...

> Seems well intentioned but... a bit bureaucratic.

QLD government tech investment in a nutshell, really.
Sophisticated, persistent mobile attack against high-value targets on iOS
"do most Chinese actually spend upto 30% of their smartphone time within the super-app"

Yes. I'm not Chinese, but live in China. 80% of my smartphone time is in:

- Gmail

- Yarn (an HN reader)

- WeChat

- Uber

Most Chinese people don't read HN, or use email for non-work purposes. You can hail a car in WeChat, so they don't need the Uber app, either.
Not that I don't believe you, but you already lost white hat status in this case the moment you log traffic on 20k domains. Just do an attack on another domain you own is white hat, 20k domains is not.
I cannot wait on Matrix protocol, I just hope it will be used.
FTA

> The Facebook family of companies will still receive and use this information for other purposes such as improving infrastructure and delivery systems, understanding how our services or theirs are used, securing systems, and fighting spam, abuse, or infringement activities.

So you can't not share.
Bureaucratic favor was basically the whole plan, if you look at their spats with AT&T and their lobbying with various local governments. In Austin, for example, they wanted access to AT&T poles at rates only available to telecoms, but they didn't want to have to register as a telecom, which would subject them to additional regulation. (Regulations that their competitors like AT&T and Comcast have to follow.)

http://arstechnica.com/tech-policy/2013/12/why-att-says-it-c...
Given these two extremes .. maybe. But more common seems to be "a brilliant asshole" vs "a competent nice person" and then I would never take the brilliant one. I have seen the effect of just one toxic person on a team and it wasn't pretty. Such people can quickly demoralize everyone around them and bring product development in (small) companies to a halt.
Both docker containers and bhyve VMs.
All for profit schools are pretty terrible. I am assuming this is true of for profit prisons as well. Having to choose among different terrible choices doesn't seem like a solution.
Psh, no Prime delivery?
Extra funding? Because $100 million isn't enough?
So weird how they announced a big build out in San Jose and then backed out very soon after.
So you are saying that a new major software release that is less than a month old still has some bugs? I am shocked. Shocked! Well, not that shocked.

If you can't take the bleeding part of bleeding edge, wait for things to mature before using them. Bitching and whining that they didn't create a perfect product out the gate only belittles the hard work it took to get a new product out the door.

This is how software releases work in the real world!
> Important details are no longer privy to 1 or 2 individuals on the team

Sure they are, they just split-off into direct messages between themselves and return to the main channel to present the result of their discussion. Or don't even do that.

Information-hoarding needs a cultural fix, not a technical solution. In my experience it usually occurs in companies with a blame-culture, so people confide between themselves and keep some information undisclosed as 'insurance'.
Disclaimer: I work at AWS, but on a product which does not compete with Docker or its orchestration tools in any way shape or form. My opinions are my own.

I wouldn't even limit this to just the swarm feature. We've been running Docker in production for a year, using it in dev environments a year before that, and we've had major problems nearly every release. We had to upgrade directly from Docker 1.7 to 1.11 because every release in between was too unstable or had glaring performance regressions. We ended up running a custom build and backporting features which were worth the risk.

Speaking of 1.12, my heart sank when I saw the announcement. Native swarm adds a huge level of complexity to an already unstable piece of software. Dockercon this year was just a spectacle to shove these new tools down everyone's throats and really made it feel like they saw the container parts of Docker as "complete." One of the keynote slides literally read "No one cares about containers." I get the feeling we'll be running 1.11 for quite some time...
How i could've hacked multiple Facebook accounts
25 years of Linux
Cisco’s Reorganization and Network Transformation: Do They Fit?
https://news.ycombinator.com/item?id=12360137
The Altair is pretty widely regarded as the first 'real' home computer. It's perfectly poised on that dividing line between "hobby electronics" and "consumer product".
Some bugs are ok and expected like you said but major functionality issues that make the new feature useless should be addressed prior to a release and huge marketing efforts.
Can we please have a less definitive title? This is rumor/clickbait masquerading as established fact.
Sample-of-size-1 statistics time (from which nothing can be learned, just for fun)?

I (freelancer) once had a software-making client that employed me for a month do contribute a special component to their big project. When I arrived the big boss himself received me and showed me around - and when it came to showing me where and with whom I actually worked he apologized profusely before he even started.

Apparently I had to work with the one (and only) guy who sat alone in his office. But he was the guy who had written the specs that I had to write the code for, and he had room since all offices were designed for at least 2 people. The apologies were because that was the most difficult person in the entire company to work with, by a margin, but he was too good so they just kept him in his cell...

Well, I wasn't daunted at all actually. Turned out that yes, he was difficult socially. For example, there was a woman who came in to ask him something (it was rare anyone talked to him while I was there), and in an audibly annoyed tone he pointed out that he had already sent her that exact information 5 days earlier in document XYZ on page N, headline "3.2 foobar" (yes, to that detail, without looking anything up).

He also was really, rally good. The specs he had written, several hundred pages in three documents, were near perfect. I didn't have to ask a single question at any time, he had thought of every detail.

I myself also had no trouble talking to him, I had fun with the other people that I visited in their offices (who repeatedly told me pitied me for having to share an office with that guy), but also with my room mate. Because of the surrounding highly unusual circumstances this still is one of my most memorable (and completely positive) freelancer jobs.
Mind-controlled nanobots could release drugs inside your brain
https://blog.docker.com/2016/08/software-security-docker-con...
I think its a bit naive to believe that a 1+ million worth exploit will remain a secret until the patch is shipped, at which point it is worth exactly nothing. There are so many way that the exploit will trickle down to more people until reach mass use.

To mention a few ways: The buyer might want to recover the purchasing price by reselling. If its a government agency, they might want to establish credential with future sellers. Reverse engineers have a 1+ million dollars incentive, and they have a much smaller window to sell it before it becomes worthless.

Its like piracy. First its the group with so called FTP access. During that period of time, maybe a release is worth X amount of dollars, but whats the chance that it remains there and never reach a mass audience?