skysight-inc/HackerNews huggingface dataset:
> Use kerberos auth with LDAP

Do you know of a good guide for how to set this up on Linux? Or a good book that covers the topic? I've looked into this before and it's seemed to be an absolute jungle. I'd like to explore setting this up at my company but don't know where to start.

I'd be looking for something that's comparably easy to understand and employ as Facebook's recent post about SSH with certificates: https://code.facebook.com/posts/365787980419535/scalable-and...

What's the best straightforward way to set up LDAP, Kerberos, etc from scratch?
MIT, you know I love you guys. I have a tremendous amount of respect for you and your work, and you haven't yet eroded the good will you got for helping to revolutionize computing on multiple occaisions, and also for establishing Switzerland, and thus being responsible to some degree for Hacker culture, and a whole other wide variety of important work, and the Lisp languages (including Scheme) as we know them to today.

However, if you talk about how you've made significant advances to the state of the art in a field, and talk about a really cool project you made with this advance, and you do not tell us how you did it and link the git repo, than I don't care. Software is a collaborative effort. If you don't tell us how you got a result, or only give general overviews, then we have to re-discover it, re-implement it, and/or re-solve all the problems you solved. if you've made advances and do not disclose them in detail, than you are holding us back. and if your implementation is encumbered, write one that isn't, and give us it.

Either way, if anyone claims to have made amazing advances in a certain field, the first question you should be asking is, "where's your code."
Why would you purposefully try to fail at a proficiency test?

E.g., you change your mind about joining the military. You can't resign or run away, so your best option might be to convince them that you're more trouble than you're worth.

In other words, if you actively want everyone around you to think you're an incompetent fool, then deliberately washing out of boot camp is the sort of thing you might try. I don't see why it wouldn't work. Refusing to accept the training would get you court-martialed, but you can't charge someone with just being a lousy shot, can you?
That's why short lived certs are better then just private keys - even if the key is stolen, the system can cut off the access by not issuing the renewed certificate. This makes private key itself to be irrelevant, in fact it can be generated as well once a day for example.
Thank you. Look, this is not a place for video editors (in specific), i.e. you're literally on a startup forum. I don't know if you have any experience with startups other than via Shark Tank, but after reviewing after you've written I've come to the conclusion that your calling the show a lie is completely unwarranted, and informed more by your prior experience e.g. "We edited it so that he never came back down and that she was calling her daughter's name... as if they were up there naked or something... That is where the "lie" is most evident." -- but you did not give any examples of anything nearly that bad as regards the deals.

You may not know this, but in normal negotiations with startups, there are many, many meetings involved over a very long period of time. So many deals fall through that there had to be a Handshake protocol invented just to keep VC's to their word - https://www.ycombinator.com/handshake/

"Silicon valley runs on handshake deals." Yeah, due dilligence gets done afterward, not on the spot! Of course all pitches are rehearsed very, very heavily. I mean these are actual businesses that were built for a decade at times, you know?

I think you go way too far writing "with just enough truth to keep 'suspension of disbelief' aloft." These are real businesses that continue whether or not anyone ever films them again. They're actual deals. A lie would be if these businesses (and their sales numbers, etc) were fabricated out of thin air and did not actually exist. Example: Silicon Valley, the show, like Pied Piper. If Pied Piper were presented as reality, and its numbers shown as reality, without even so much as existing - that would be a lie.

The most telling is that you call Mark Cuban, who is by no means a celebrity first and investor second, a "talent". He's not some actor playing a role on Shark Tank.

So I simply am not on board with your original comment that I replied to - it goes too far.

You should have simply said that the interactions were heavily edited, and represent deals that continue after the part that is aired.

A lie would be if an actor were playing the character invented for the "talents" you mentioned, but these people did not exist in real life, were not really business people at all, let alone actual investors investing in startups with real deals, or if the businesses were fabricated.

So after reviewing what you've written I would suggest that you tone it down a bit. I had skype conversations with the businesses shown. My conversations had a startup on the other side - I wasn't talking with some character, like Homer Simpson. They also matched what I saw on screen (more or less, of course, heavily edited.)

These are businesses first, and short shark tank segments only incidentally. They're not lies or fabrications.
It wouldn't be election year without a healthy dose of fear! Gotta convince voters to place it safe.

As far as I'm aware we've got China, Russia, ISIS/Muslims, and "Immigrants"/Mexicans so far. Plus internal tension over things like BLM and the election itself.
This objection is weak. Generate a unique key pair on the client. De-authorize it when you're done or just delete it.

If your argument is that your client is untrusted, then typing in your password is a lot more risky than generating a fresh key pair.
Uber is not in the self-driving car business. They aren't in competition with car companies. They don't really have any competition now. I doubt that is going to change.
Well you can always keep your keys in a removable drive rather than on persistent storage in your client device.

If you can't trust your client device, you probably have bigger issues with either method - for instance, can you trust that the client is not logging all keystrokes?
Which is why you generate your private key with a passphrase (which is used exclusively client side in an ssh client) and only store it on HDD, flash or SSD that uses full disk encryption.
I think a good heuristic is, is it your business?

I'd try really hard to avoid implementing address verification. Unless i worked at UPS or FedEx.

I'd try really hard to avoid implementing spellcheck. Unless i worked on Word.

If it's a core to survival thing, yeah, you should probably roll your own. If you can't beat OSS state of the art, well, you've got a problem.

The other heuristic i think is generally good, go for a couple of big dependencies over a whole bunch of small dependencies. Coping with the interaction between 3 huge libraries is so much easier than 100 tiny libraries.
Definitely don't get an MBA if you're not actually interested in learning the material covered by the program.

I also didn't get a pay raise, and I didn't use the connections I made, but learning the material was extremely helpful: market forces, positioning, statistics/analysis, strategy. I still skim email newsletters I get from McKinsey & Co. / Wharton a few times a week, and HBR has some incredibly good articles every now and again.

Source: C++ developer with MBA in marketing.
Glad you like the site! It makes enough that I can keep investing in improvements, while support my family comfortably and saving for a rainy day.
Hi, thanks for the comment. Yes, I grew up in SE Asia and moved to US at the age of 23. Did you find some sentence structure unusual or was it lack of article use that gave you hint ?
Plain resume, hands down. Whenever I see something that is supposed to be "enhanced" I just assume they are trying to get my attention away from the actual contents of the resume itself.
The graphic isn't presented to compare stocks with the alternatives of cash/bond yields. I think the major service done here is setting a realistic expectation for the returns you might see in your lifetime. It's especially relevant for people who's major investing periods have/will occur in the 2000-2020 timeframe of sluggish growth and ultra-low yield. The Jeremy Siegel '8%' number is a really dangerous number to set your expectations on when saving. If you do, you might be 20 years in and well outside the bounds of a timeframe where compound interest can help you live the retirement you were aiming for before you realize your mistake.
Edward Albee has died
Well, you are talking about a gap of 14 years: the site's been reorganised since then, but all the content is still there.
I don't think id would be successful with licensing in modern times without seriously changing their focus away from game development. Sure there is a great legacy of building games on id tech, but a modern game engine that is flexible enough to build a wide variety of game types and support different team sizes and platforms is difficult to build. For example, I seriously doubt idtech currently runs on any mobile platforms.

Most AAA game engines are good at making a game or a subset of games, and I imagine idtech 6 is great at making Doom, and by association pretty good at making first person shooters, but its not really possible to make a mobile match 3, 2D visual novel, or MOBA with it without heavily modifying C++ source. If you look at the HN discussion around Crytek open source, and peer into the source code, you'll have a good idea of the reality of many in house engines. In practice this is an advantage for AAA teams with strong engineers, because you can out compete people using licensed engines using features targeted for your game, but it makes it hard to do wide licenses to small teams that don't want to just make simple mods for your game.
Neat! Thanks for the awesome explanation!
Consider the scenario in which your computer is stolen (and might not ever be returned, so whether the attacker installs a keylogger is irrelevant):

The fact that a private key file exists suggests that the user is very likely to be using SSH regularly.

The fact that an SSH client exists is far less informational (there's one by default on most Linuxes and Mac OS).

If I only ever use password authentication with SSH and don't save anything else, not even server keys, the attacker has far less information. That might be important in some scenarios, especially related to anonymity.
Justin I think you are conflating a couple issues here:

1). OSS critiques should be more polite

2). People are stupid for not doing due diligence

First, I agree criticism should be constructive. Yet there is nothing wrong with 100 people saying here they don't like React Router and in fact such feedback is crucial for the authors and the community. Maybe you agree; but ironically the tone of your post seemed have a bit of the scorn and derision that you are asking people to avoid.

Secondly, it's already obvious people are responsible for their own projects. The motivation for stating the obvious seems to be to emphasize people should seek to blame themselves before criticizing others. Wrong. These things are orthogonal - Regardless of one's due diligence, it's perfectly acceptable, indeed beneficial, to critique OSS, when done in a productive way.
> I have yet to see any add that is of any value what so ever from the main site.

Do you ever see value in _any_ ads from _any_ site? I very rarely do, but apparently it works because the whole internet is run on ads.
I'm glad you like it but I don't follow how you infer dollar cost averaging from this. There's no statistical advantage to dollar cost averaging over lump sum investing (actually the opposite due to the median return beating inflation). I'd argue the main benefit is a realistic expectation and understanding of the range of returns to help you plan better.
> Now, this isn't to say an investment is safe because it's accountable and transparent

Troll somewhere else bro. You add nothing to the discussion. Write a fortune cookie or something.
smart cards cost like $15
> I've gotten to where I only install stuff via npm when I'm on a free connection; I normally work on mobile broadband, which is very expensive

You could always use this:

https://www.npmjs.com/package/npm-proxy-cache

It caches the package listings and the packages that you download. It will act as a pass through that with a limited TTL on the cache, but there is an option to fallback to the cache if you can't connect to upstream.

Granted, you have to have already installed something for it to work as an offline cache.

Also, part of the problem with all those files is that npm allows packages to installed pinned dependency versions. If package-a requires lodash 2.x and package-b requires lodash 3.x, then both will be installed within the respective package's directory. For example let's dive into the node_modules/ in one of my projects.

$ ls node_modules/**/lodash.js
node_modules/cordova-lib/node_modules/lodash/chain/lodash.js
node_modules/findup-sync/node_modules/lodash/dist/lodash.js
node_modules/findup-sync/node_modules/lodash/lodash.js
node_modules/globule/node_modules/lodash/dist/lodash.js
node_modules/grunt-contrib-less/node_modules/lodash/dist/lodash.js
node_modules/grunt-contrib-less/node_modules/lodash/lodash.js
node_modules/grunt-contrib-watch/node_modules/lodash/dist/lodash.js
node_modules/grunt-contrib-watch/node_modules/lodash/lodash.js
node_modules/grunt-curl/node_modules/lodash/dist/lodash.js
node_modules/grunt-curl/node_modules/lodash/lodash.js
node_modules/grunt-legacy-log-utils/node_modules/lodash/dist/lodash.js
node_modules/grunt-legacy-log-utils/node_modules/lodash/lodash.js
node_modules/grunt-legacy-log/node_modules/lodash/dist/lodash.js
node_modules/grunt-legacy-log/node_modules/lodash/lodash.js
node_modules/grunt-legacy-util/node_modules/lodash/lodash.js
node_modules/grunt-ng-constant/node_modules/lodash/dist/lodash.js
node_modules/grunt-ng-constant/node_modules/lodash/lodash.js
node_modules/grunt-protractor-runner/node_modules/lodash/lodash.js
node_modules/grunt/node_modules/lodash/lodash.js
node_modules/jshint/node_modules/lodash/chain/lodash.js
node_modules/lodash/chain/lodash.js
node_modules/phantomjs-prebuilt/node_modules/lodash/lodash.js
node_modules/preprocess/node_modules/lodash/lodash.js
node_modules/protractor/node_modules/lodash/lodash.js

That's 24 copies of lodash.js installed that could all be a unique version of lodash used only by said module.
Bachelor instead of Bachelors

"Last question is, "....
The Sea Star and Urchin Die-Off You’ve Never Heard of (2015)
Maybe people like this:

https://motherboard.vice.com/read/this-rural-community-is-bu...
Spot on. Except the "force other players out" since there really aren't any other players.
Primitive Technology: Barrel Tiled Shed
So, articles where the needs of the many outweigh the needs of the few.
iPhone 8 - Full screen display. Dual cameras on the smaller device. Wireless charging. This is why they removed it this generation. It paves the way for the next generation and gets any controversy out of the way.
Yeah it's a pretty bad sign for your company when even the founder is like "this kinda sucks, I'm going to a better company that actually makes money."
Cyborgs are desirable because they solve the "control problem" of AGI. Essentially, if you create a superintelligent AI, how do you make sure it doesn't outwit you and all other humans in order to do terrible things? There aren't any plausible methods that I'm aware of to accomplish that goal. So you sidestep it by not making any AI that's more intelligent than humans. Unfortunately there also aren't good ways to make sure that no one makes AI that's more intelligent than humans (plus arguably superintelligent AI could be an extremely good thing if it doesn't turn into Skynet). So the remaining obvious option is increasing human intelligence at the same time as we improve AI -- or even better, merge humans and AI together.
Would love to move out to San Diego since I have close relatives in that area. I have job prospects in the LA and Bay areas. Took a few (phone / Skype / Google Hangouts) interviews with a couple employers in those areas and all of them went very well. I am on the east coast (glad they settled for remote interviews so far) and both the companies want me to fly out to meet now.

Thought I'd post here in case anyone's hiring. I'd rather live in / near San Diego and be close to family. Love it there.

I work remotely and there's the possibility for me to move while staying at my current job. I am looking to change jobs if I get a better offer since my cost of living will increase when I move to San Diego.

If you have any comments or are looking for experienced (7+ yrs) software engineers please get in touch. Using a throaway account because I don't want my employer to know that I'm looking for a job.
More like: "On Not Reading This Article".
Résumé is like raising children: they are plenty of people with definitive advices about the perfect way to do it, all of them being contradictory.
He currently faces no charges in the US. There is no one for him to surrender to. It would be nice for him to surrender to British officials, so he could be extradited to the one country where there are currently charges against him.
hadley, I love your book, and I learn a lot from your preferences in R packages. Now is there a general source for determining the "best" packages for various tasks?

CRAN has task views, but they are long lists and don't clearly show popularity or feature matrices. There are just so many options.

Im thinking something like https://djangopackages.org , for example see https://djangopackages.org/grids/g/commenting/
As the person who wrote the top comment in the thread that you link to, I will admit: You are right for the most part. The choice to use an unproven library is my fault as it was my choice and it is also my responsibility to deal with the consequences and costs of the instability. This is why I will be removing React Router from my project as soon as I can find a stable and suitable replacement.

Recognizing the responsibility for your own actions does not preclude you from being frustrated and at times outright angry at the outcomes of those actions. In this case I (wrongly) assumed that after a 1.0 release the library would be relatively stable and have been repeatedly duped into believing that this time the major version release would be the stable one. I don't really see anywhere that people were issuing an outcry for V4, so I am still confused as to why it was so urgent to release it. It wasn't perfect but it was fine. Unfortunately in my frustration and confusion I chose to write a very strongly worded comment that apparently some people did not like.

> To be clear: developers that release libraries and then iterate the API in public do not deserve personal scorn for doing so

I have never gotten the impression that react-router was someone's personal library, rather it is a community project that is maintained by notable members of the javascript community and it is my belief that delivering half-baked stuff to the people who counted on them, and who they led to believe could count on them, is not a fair thing to do. I don't believe it is unreasonable to be frustrated with fickle leadership from people who stepped up to lead the project. If they can't deal with the criticism or don't have the time/effort/inclination/whatever to lead in a way that is agreeable to most of the community then perhaps someone else could lead. When projects have thousands of stars on github, making rapid successions of breaking changes throws all of those people for a loop.

If you do in fact view the repo as your personal project and want to make huge changes all the time, like every 6 months, I don't think that the version with thousands of stars is really the place to do that. Why not just do it on your own where it isn't going to affect so many people.

Note: Neither this, nor my original comment should be taken as personal attacks on the maintainers although I am aware that both are probably over stated. I'm sure they are all extremely talented developers and kind people.
Learn How to Code More Productive in Less Time
This has been my experience with Unity as well. You can spin something up super fast but actually tightening the screws and getting every little last bug out and getting all the little interactions between gameobjects working just right takes a really long time simply due to quirks and bugs that require odd workarounds.

Unity is a wonderful prototyping tool but using it for production can be painful. That said I build engines for work so in my free time I like to just make games and using Unity for that purpose is refreshing and fun because the games I make in my spare time are simple enough that they rarely hit any limitations of the engine.
If your computer is stolen and you don't have full disk encryption, a leaked private key is probably far from the only problem.
Private key stored in a passworded file on an encrypted disk, plus a key fob as second factor.

Pretty hard to get better security.
In the mid 2000's, we were incentivized to call anything remotely possibly nanotechnology related "nano-XYZ". It lead to demonstrably better government grant success.

The behavior isn't even limited to tech startups.