skysight-inc/HackerNews huggingface dataset:
Actually certificates can be used with openssh as well:

https://news.ycombinator.com/item?id=12518902

I'm not sure this isn't too "lazy" for some tastes, however.
openntpd is a nice hacky workaround, but not a clean solution. However they hindered adoption by requiring libressl to build this feature.

But roughtime does much more than openntpd: It lets you get the time from multiple servers and gives you cryptographic proof in case one of them tries to lie to you. That's a much tougher security guarantee.
"piece of crap" really isn't fair. It powered many Ubuntu releases and Red hat 6. I liked upstart.
If the attacker knows you use KeePass (or notices the KBDX file) then it's easy enough for them to grab all of the relevant info at the same time they grab your KBDX. There's no need to "lie around on a box waiting".
Pardon my ignorance but what's to stop them from impersonating your authentication app, too?
Pretty much. This move decreases Amazon's buying power with them so they can just raise rates accordingly.
I have 34 tabs open in a tab group which only has blogs, about 30 for Mozilla and GNOME projects, 17 for my minor project, 14 for reddit, imgur and chan, 23 for placements interview and coding stuff plus a lot of miscellaneous stuff puts the total at 143 tabs with ONLY 1.5GB of RAM and almost idle CPU (2 to 3%). I exported the bookmarks and opened them all on chrome and it died!!!
All well and good, but why should the world trust China with that role?
There's no reason not to. The `authorized_keys` file on a host does exactly that. Whether a specific service does the same is down to that service.
Maybe, since NY state has 3x the area, 2.5x the population as Switzerland.

It seems crazy to lump Mississippi and North Dakota in the same basket as NYC
True, upstart wasn't good. It's existence rebukes the claim that systemd won because it was the only replacement for sysv.
Photo Enhancement Using Computer Science and Artificial Intelligence
> You refuse to look, and thus have clarity. Dude that is not a good argument.

What? Should I have to know everything about systemd to comment on one specific part of it? I don't know about alternative init systems either, all I wrote is that for service management: systemd >> SysV.

> What is not uniform about the previous service handling implementation in debian?

I can't tell you since I don't use Debian. I can tell you that in Ubuntu there are lots of inconsistencies. Like different service scripts respond differently to the help command.

Even the "status" commands output varies between scripts.

This means there is no way to introspect a service to know if it supports things like the "restart" command or if "stop" and then "start" should be used instead. This also means that making a robust GUI tool for handling services becomes hard/impossible.
The issue has a bug report on the systemd repo on Github: https://github.com/systemd/systemd/issues/4234
I think you're right. Time to get out of this rut.
What are you gonna do about it if someone makes a comparison of the economies of US states to the economies of countries?

Like https://en.wikipedia.org/wiki/Comparison_between_U.S._states... for instance.

Your phrasing is as if the popularity of the per country comparison makes it impossible to discuss any other comparison. But that's not the case.
It's nice to hear that you have the choice of not running systemd.

All production ready Linux distros (RedHat (and by extension CentOS), SuSE and Debian) are all running systemd and as a systems administrator for a large company I _must_ adopt it, I don't have a choice.
Teleport is actually a Golang library, and that's how it's used internally at Gravitational, where session recording can be turned on or off [1] based on a use case.

The pre-built teleport daemon as you see in `tool` directory does not have a config switch for turning recording off yet, we should add it.

[1] https://github.com/gravitational/teleport/blob/master/lib/se...
No, the science behind feeling mental clarity after extended fasting.

Unfortunately, everything I could think to Google just returned a bunch of grandiose pseudoscience.
The states in the US may vary, but so do regions in Spain and other countries. And the differences are often way bigger than between any pair of states.

It would be more unfair to compare separate US states with European countries. While US states share a common fate, the same can't be said about say Germany and Greece even though they are both in the EU.
Technical security at financials, especially in application code and especially in application code that is closer to infrastructure than to line-of-business or retail, is very bad.

But the business processes that are driven by that infrastructure tends to be surprisingly manual and/or reversible, and, for reasons having little to do with technical security, is heavily audited.

I think unless you're the online equivalent of the robbery crew from Heat, if you SQLI your way into a bank (or trading firm or exchange) and try to move large volumes of cash directly, what's really going to happen is you're going to end up in prison before you get a spendable dollar.

This is a better conversation over beer than on HN. There's definitely stuff you can do! But I don't think financial firms are low-hanging fruit.
Fair enough. Though to prove that their tech is better is definitely a data access issue. I obviously wish them luck but some ex-Twitter employees doesn't sound like a very leveraged team to be better at health data acquisition or data science. Unlike Twitter or Facebook, being good at science requires acquired knowledge. So even starting a bio PhD as one of the guy's did, the strength of their competitors and the carcasses of people before wouldn't give me any confidence to throw any amount of money let alone $45M at this thing.
Not sure if you confused my comment with someone else's. I never said it wasn't complicated, I said it's a joke, for exactly the reasons you mention among others.
Can we please just have one OS we use in data centers and servers whose features and development is guided by professionals, not rubes? I'm so sick of people telling me I'm not the target user or some variant thereof. Linux is not OSX or Windows, and not swayed by arguments of the form "most people don't are about that". I do. They should. And the fact that they don't shouldn't result in crappy operating systems.
Asian Lesbians Shock and Fuck Blonde
Your argument is flawed, doctors prescribe lots of things that aren't good for you because for that person, they're better than the alternative, chemo for example. That something is done by doctors does not make it good.

> but the rest of the details are finally getting fleshed out and accepted by mainstream science.

Uh, no, mainstream science is the only one doing the fleshing out; you're implication that they're behind and only now accepting what diet science already knows is anti-intellectual bunk. If it isn't mainstream science, it isn't science.
This is true for computational science applications. A voxel in an MRI-scan is indeed not a little cube, but a data-point. Same for sampling 2D images (e.g. photography).

In modern pixel/voxel art, however, the whole point is that they are in fact little squares and cubes. Otherwise you don't get the aesthetic this style is aiming for.

It should be noted for historical accuracy, that the origins of pixel art were displayed on relatively blurry CRT screens, and your pixels didn't actually look like little squares either, more like glowy blobs. That's a different point than the cited paper is making, however, which is about the sampling theorem where pixels and voxels are basically data points (that can be interpolated in various ways).

On the other hand, when I played 16 colour 320x200 games like Commander Keen and Duke Nukem (2D) in the 90s on a VGA CRT monitor, the pixels definitely looked like little squares, not blobs.

Edit: maybe I should mention the oldschool ANSI art as well (BBS/demoscene), which were made with various coloured ASCII-blocks, and there the "pixels" were in fact quite obviously little blocks (and sometimes other characters but that's more ASCII-art than ANSI).
> I certainly wouldn't want all my account access messages going to a lost phone …

Wouldn't that be solved by a fail-deadly setup where your phone is automatically wiped unless you perform a specific action?
FIRE HANDS MAGIC TRICK
Anybody else wishing they would set up shop in the Scandinavian countries so poor people there could earn money off their affiliate program as well?
If the issue with systemd is deemed to be the backing culture, instead of specific code, writing patches isn't going to work. Instead you need to change hearts and minds. Blog posts work better for that (then again, if you are arguing, you've lost).
Recommendations for a free and/or OSS help desk software
Having looked at the commercial options and the price matrices we would prefer a free/OSS solution. I have found Helpy (MIT license) but am wondering if there are any others?

This whole space seems ripe for a "Trello-like disruption" to be honest!
That resize to mobile form factor at the end of the gif!

Made me watch it twice. I'll be checking Antetype out for that alone.
This is what "correct" rendering looks like on my screen: http://m.imgur.com/q2BtHnc
Great, except what if I ordered something for a specific date because, you know, I needed it for that specific date? An extra month of Prime isn't going to help me there.
This is a bit naive. If you've ran a production system with any decent traffic and never needed to SSH into machines, congrats. I haven't and I don't know anyone who has. You might need to go in for anything from auditing to troubleshooting, even if it's rare.

PS: How is your automated provisioning system reaching your cluster if not by SSH?
Using Google’s cloud networking products: a guide to all the guides
Renewables depend on oil. You can't make renewables with renewables energy, because their overall EROI is insufficient to both maintain the current standard of life, and make them. The other issue is mobility, oil has the best volume/energy content ratio of all energy sources we know (except uranium). Renewables can only make electricity and you need about 10x the same battery volume (and weight) to move a vehicle, compared to oil. Unfourtunately for all of us, fosil fuels are here to stay for a while, until they run out. Or until the economy crashes. Or until climate change kicks in real bad.
A comparison of various time series databases
The Ultimate Insider Guide to Italy
> Octal becomes convenient whenever you have a bunch of 3-bit fields.

Only when the bit offsets of the fields are multiples of 3 (for example a 3-bit field does not go from bit 1 to 4).
I (being the kernel documentation maintainer) have already seen an increase in activity around the docs as a result of the change - it makes things far more accessible.

It's also not really correct to say there's not much documentation. We have quite a bit if you look at it, especially if you count the 55,000 kerneldoc comments in the source itself. The quality of some of it and the organization of all of it is another matter...but we're working on that.
Easy to understand summary from a BFF (Big F* Fanboy)

Seriously it must be priceless for Elon to have people like this on board with his dream. Which fingers crossed becomes a reality.
So You Want to Start a Startup? Read This First
The problem is, a keyboard adds to the device cost quite a bit. And most people, despite saying they want a keyboard, are not willing to pay above and beyond for it. They want the same price point they're already at. So that means cutting costs elsewhere.
If anything, population size matters way more when picking out the cream of the crop than the averages. I think the point being made is less about the Olympics specifically and more that it makes little sense to divide up the US economy by state when the US is very clearly one single country.
US tech salaries still seem to be disproportionately higher than elsewhere, so perhaps places like Seattle, Austin, D.C., Raleigh NC, St. Louis.
Honestly, someone should have time for that, it's part of the problem... I go out of my way to comment on as many PRs as I can, because I'll catch things that will become problems later far more than other peers who just click approve.

The same can be said for security guys... they spend their day needing to work as well, and seeing a bunch of smaller things fly by is just as valid as a big audit periodically. It's easier to catch a lot of things before they become big as well...

There are plenty of times I'll comment (Okay, letting this through, but in the future revise to do it this way), sometimes I'll push back, but not always, that's what the review process is for. I'm just suggesting multiple approvers for PR, where one is someone who is security minded.

It's funny how many issues I'll see from other systems where someone does something per the spec, that has a flaw because they were completely compliant. Someone crafts an exploit, and I'm interested because I'd usually be more pragmatic in implementation. Last year there was a huff about JWT allowing cert overrides in some frameworks, as they don't ensure the origin cert matches a whitelist... when I'd implemented JWT, I only checked against our whitelist and ignored the property.

Sometimes security guys will see things and think of things in a way others won't... for me, one thing I often catch that others don't are potential points for DDOS target viability. Some of that comes from using node, where you do NOT want to constrain your main event loop thread. Others don't think about putting limits on JSON size, or compute heavy tasks, etc.

And, frankly, I'm tired of fixing related bugs to patterns that were broken from the start.... turtles all the way down, but the turtles are eating all the errors.
Admittedly, it's been quite some time since I last worked on a Mac. Think 10.6.8 era.

It could also have been a borked install as well. But I'm sitting in front of a Win10 install on a Surface 4 Pro, and it can't auto-sink audio.
Pakistan Russia Joint Military Exercise
it can be with the process timeout weirdness, where init used to be 'fire and forget' so if something didn't respond it would carry on systemd actually depends on the output so will sleep for 180seconds or so.

But honestly, even an extra 30s booting a server is nothing, I don't give a shit about boot times on my servers.. I care about what order my services are started in- my servers should be 100% reproducable otherwise you could have bugs that never get found except in 1% of cases.

And since it's turtles all the way down 1% of one system can be a lot of problems in a 2,000,000 server architecture.

So "Fast boot" in the way systemd achieves it is not beneficial for me.
This completely. If I order from Amazon and it shows them handing it to USPS, I email/call right away because odds are I will not get the package.

I complained to the postmaster multiple times. Although, as a typical gov. employee, he just laughed and said we do what we want, it is your neighborhoods problem. Eventually the whole neighborhood got together and made some changes happen. It is still not perfect, but better.
Some would say "the process of sorting" is sorting.
The best area I'm familiar with is Research Triangle Park (RTP). Above average salaries and relatively low cost of living. There's a growing food scene, people are active and it's at the beginning of a cultural renewal imo. Of course, being in NC comes with some problems due to the legacy of racism that exists in some pockets of society (pretty easy to avoid, you'll know it when you see it), but I loved growing up there.
OK, I get the argument.

But is there no validity to the idea that a species has not meaningfully changed in many years? I've heard this idea that modern sharks are closer (in physiology) than human to our common ancestor. If I want to think about the common ancestor, I should think about a shark, not a human. I get that modern sharks are different than ancient sharks, but doesn't the idea of "living fossil" help me understand how much another species has changed over some time period?
I don’t know what to think. I live in Miami, and packages ALWAYS have been delivered here, on time. I’ve been buying from them for five years, two and a half of those as a Prime customer, so it’s clear the are not real differences besides delivery times.

Maybe it’s the state you live in? They have never given anything to my neighbours when no one was at home during delivery, they always tried next day, call or leave a form to schedule next delivery time so someone DOES receive the package.
Strictly this is not necessarily relevant. You can easily roll that table hit into another db hit you were already making. Can't do that with services.
You'd have to know who to impersonate, successfully impersonate them (i.e. good luck trying to impersonate DeWayne Jamal Jones as an Ukrainian) and where (and on what date) they are supposed to vote, and for all that work you have affected all of one vote.
That does save a lot of money :-) The trick is managing the rate of change and the risk of disruption. If you manage it to no risk you end up changing too slowly, if you manage it to close to the risk you end up with unexpected downtime and other customer impacting events. Understanding where you are between no risk and certain doom really only comes with experience.
PulseAudio took ages to get to a stable and reliable state. There are still warts (try and make your machine act as a bluetooth audio receiver. It's horribly ugly.)

systemd wasn't reliable or fit for purpose for servers when it got shoehorned in to everything.

When it comes to production servers you need stable and reliable. Not new and shiny. You're ideally rarely having anything happen on the server other than "run this software"
"[Secure NTP] But that's what NTP should have been, 15 years ago—it just allows the network to be untrusted. We aim higher these days"..... So the infra/servers cannot be trusted.. THIS is the real takeaway.
Does that mean we can kill angular 1.x because it encourages points of disconnect, undiscoverable code, too much pfm (pure fucking magic) and failure?
Can you clarify if this was just typical UPS/Fedex deliveries through Amazon or Amazon Courier service?
Direct SSH access can be an invaluable tool for debugging production issues. It is great to be able to SSH in and check the tcp dump, view the running processes in detail, attach gdb and get a memory dump. These types of tasks will never go away. We have great leaps in orchestrating remote application management but when you get down to issues at the bottom of your stack you'll always need to directly access the machine. I like to tell my developers that "the stack goes all the way down". A bug in Linux networking or even a CPU error is still a bug.
Getting OTR to work on mIRC
With a more developed domestic market, China wouldn't be an "economic dependent" of USA. As it stands now, however? I think it really is.
2FA is supposed to be 2-factor authentication: a password and a phone number. If you allow the phone number to reset the password, it becomes 1-factor authentication.
One of my favorite albums of all time. I would be really weirded out if that was the building I went to work in every day. It's a pretty dark and melancholy album. I only like listening to it or thinking about it when embracing that mood. :)
Canonical tried with Upstart but failed.
I'm an INTJ who had learned to play the extrovert ... I'm over 50 now but still getting (technically) stronger. My ability to pull all-nighters and to participate in protracted death-marches has declined but now I'm smart enough to avoid those situations.
USPS is the only carrier that has claimed to deliver a package on the correct day, then actually deliver the next day.--My 2 cent anecdote.
Fair enough - I can definitely see how auditing on a non-technical level would "do the trick".

I'll definitely take you up on that beer ;). hubblefisher at gee mayl.
It's not "a joke", though: it's a very competitive country in many ways. Facile comparisons of one or two aspects don't do the subject justice.
I originally posted this is as a reply to someone who commented about learning programming well before college on the article, but I think it could spark an interesting discussion here, so I'll paste it:

"I'm self-taught and started at 11. I'll start college next year. Would you be so kind as to provide some advice to someone who is in a similar position to you a few years ago?

It all started out as a center of interest among others, but grown into a passion, and today I know that I will work on software development. I've gained some experience along the way - worked on real-world, revenue-generating projects for relatives, read through a lot of technical books, and learned varying amounts of Python, Ruby, C, C++, JavaScript (client- and server-side), and Rust. As well as some HTML and CSS. I learned how to use the command line, how to administrate a UNIX system, the basics of information security (just enough not to make overly stupid mistakes as a developer), among (many) other less important things.

Python was my first 'real' programming experience. I 'know' C, but I wouldn't trust myself to write production software in C without a lot more experience. I can read C code, but writing a sizable amount of _correct_ C is not an easy endeavor. I wrote a few production utilities in Ruby and recently started to dabble in Rails. I got interested in game development and read a lot on the matter, so I just _had_ to learn C++. I did for about four months before learning JavaScript seriously. I learned to use JS client-side, and server-side with Node.js, which I used to sell Steam trading bots for peanuts. More recently, I learned Rust, which has been my most pleasant experience so far (static type checking, memory safety, close to the hardware with C-level performance? Sign me in!), and the language in which I've invested the most. I contribute to open-source projects whenever I can, hung out a lot on the #rust IRC channel and on the /r/rust subreddit for some time, and used the language to write a few small production utilities (a few kLOC).

I like to think that this is a great track record for a 16-year-old. However, my perception of my own skill level is what I'd describe as unstable. Sometimes I'll read through some particularly technical HN threads and feel like a pretentious idiot who knows no more than the bare basics. At other times I'll read stories about college graduates and 'professional' programmers with 5 years of experience who cannot seem _much_ less skilled than me, and I'll feel like I don't even need to go to college.

So I turn to you. Enlighten me. What new things will college teach me? How should I approach it?

Here's my GitHub profile in case you want to take a look: https://github.com/yberreby/ "
I'd say say that transport electrification is going to be more directly responsible for reducing oil demand. It's very important to the climate that electric vehicles get charged with low-emissions sources, but the petrostates are equally in trouble whether people are driving EVs charged with wind power or coal power.

It's hard to tell when electrification is going to kick into high gear. Projections for numbers of EVs sold ten years from now vary widely. I'll say that if oil did go back over $100/barrel that would provide an incredible tail wind for PHEV and BEV adoption in the US. Cars last 20+ years but buyers are oddly sensitive to recent pump prices.
While it is very important to avoid Turing completeness in some areas such as anything going over a network, daemon start needs flexibility for non-standard use cases.

Limiting startup scripts wouldn't protect against much anyway, because it would only defer problems into the daemon you are starting up.