skysight-inc/HackerNews huggingface dataset:
>Give users the ability to sign up and pay you money.

Agree with this. Years ago I ended up in a situation where I had 10's of thousands of people using our "beta, not for serious use" service for free. I didn't want to charge money because I figured that only made sense if the product was finished and up to the standard I'd want (it wasn't). People would email every day asking if they could pay something.

Not so smart...
If I remember correctly, it's in Nightly behind a feature flag, not Beta.
I may not be an apple fanboy, but I admit, I really miss Jobs, and his commitment to quality. Apple has just been minting money and forgot all about its core values.
Why is it any more fringe than, say, hoping for an ARM laptop?
> It's impossible to get many benefits like WIC, rent assistance, heating assistance, etc if you are married

Well, more accurately, it's more difficult if you are married to someone who had income because it affects the means test. Of course, for many of those you can't get them unless you identify and secure a child support order against the parent of your children, and then that child support is also treated as income in the means test for the program, so just staying unmarried (with it without cohabiting) doesn't actually solve the problem.
This is near Windows-95 levels of bad - at the very least you need to already be logged in
Depending on who you ask, they don't do it frequently enough.

It also differs a lot by police district, circumstances, and news outlet while the no-naming rule is held up relatively consistently.
Another user suggested it may have to do with Apple’s new file system: https://news.ycombinator.com/item?id=15801643
Updated. I was unable to reproduce on another machine as a standard user, but it appears to be related to it being a fresh install of High Sierra, not an upgraded install with old disabled root user entries.
Interesting choice, wonder why they didnt go with Apache Apollo which is supposed to be the successor to ActiveMQ, or newer systems like RocketMQ or Apache Pulsar.
You don't, I think that's fair.

Everyone comes from a different background and sometimes the people around you don't "Grow up", so you never learn it yourself without discovering a new book that gives you this insight. I guess that was the case for me, and just wanted to share my thoughts with others.
I use firefox/rust every day. Thanks for the one of the most interesting language!
Really looking forward to checking this out.
One of my favorite quotes is attributed to the stoic Epictetus:

If anyone tells you that such a person speaks ill of you,
don’t make excuses about what is said of you, but answer:
“He does not know my other faults,
else he would not have mentioned only these.”
#whyidontupgrade

Until Apple forces me to with a required xCode update for the newest iOS SDK...>.>
You should look at the total difficulty including BTC and BCH https://fork.lol/pow/hashrate which appears to be relatively flat. New capacity coming on line is probably bottlenecked on Bitmain who more or less has a monopoly on ASICs.
Cue "incorrect elevation of privileges" joke.

sudo laugh

edit: spelling
It's certainly a valid hypothesis. And stronger (any?) evidence for possible life on Mars or Venus would possibly support this.

With a sample size of 1, and loose record-keeping from ~4B years ago, it's hard to tell, but we don't really know if it took life 1 day or 500M years to evolve once it was chemically/geologically viable. We do know that life was very primitive for > 1B years (not even eukaryotic, let alone multicellular).

We also know that space isn't teaming with little biologically active spores from other worlds (unless it is and the government is covering it up, of course), which suggests that in the vastness of space, life doesn't really hitch rides on asteroids or comets and colonize the galaxy accidentally. And if some beings were doing this on purpose, why not send more advanced life forms or robots?
RISC-V benefits is mostly an open source license that is free of patents. I think the biggest reason for it is academic... there needs to be an open platform for academic research. I'm sure it is next to impossible for an average university to do that on ARM or x86 architecture.
Anecdotal but I started noticing a decline in quality after Steve Jobs died.
If you set a root password, this bug still works, it seems to reset the root password.

Edit: I was partly wrong. The bug still works if you disable root afterwards, then it reenables and resets it.
Respectfully disagree. "User cannot log in as root if root user is disabled" is absolutely a test case that should be written regardless of previously seeing the bug.
That sounds interesting. Do you have more info on that? A source perhaps?
Frank Abagnale (catch me if you can)
Yeah exactly. I would say this is very informative comment but sadly gets downvoted:

>>Smaller designs, easier to license designs, simpler and more attractive ISA extension mechanisms, no royalties, no license negotiation periods, no incremental cost to adding more cores of different designs.
Take this for the anecdata that it is. I interviewed at Apple, referred by old Microsoft friends that worked there. As I was trying to get a feel for things before the interview, I asked about the software testing. I was told, "don't expect what you're used to at Microsoft". The reference there is from when Microsoft often had more testers on a team than devs (ah, the good ol' days). The summary of what I was told by friends, and the questions I asked during the interview, is that testers at Apple aren't the testers that Microsoft used to have. Microsoft had testers working in MS Research, researching ways to better test software. Apple, from the impressions I got, is doing good to have testers than can write "hello, world". This was from the app side of things, not OS; I don't know if it's any different on the OS side.

But since I don't work there, I have no good inside info. But just from gut feel, I don't think my anecdata is too far off the mark. Based just on the bugs made public, I just don't get the impression that there are testers at Apple whose sole reason for being there is to tear into a piece of software and break it. There was a bug a few weeks ago posted to HN that I commented on. I don't have a link without digging through my comments, but it was something along the lines of "how could a tester not find this in five minutes of exploratory testing?" This bug is similar. It would take more than five minutes, but were this my area to test I'd pick at it once in a while when I had a few minutes. As I pick at it, I wouldn't expect to find anything, but I've got a minute between builds, so instead of randomly clicking Facebook I'll randomly click this dialog. What did the dev forget? What weird state was not accounted for? Some kind of state overflow if I click the button enough times? Shove some Unicode in there, that didn't find anything; meh, maybe I ought to move o...hey, wait a minute. Did that thing just log me in as root?

But my gut says that Apple doesn't employ a lot of testers like that.
I tested this by logging in as root at a preference pane then attempting to connect via ssh and screen sharing (both enabled) using root with no password. It did not work.

Not sure if you'd get different results after logging in as root at the login screen...
There's still going to be child support for sure but after the kid starts going to school she will be expected to get a job, if able, and if she remarries then generally you won't have to pay alimony anymore.
Parent may be saying that 100k is a reasonable per-clueful-person cost pretty much anywhere. I'm in the middle of the USA and I wouldn't expect to hire a competent engineer for less than $100k.
Wait, so you can gamble at a restaurant?
I consider it a failure of journalism editing. Pamela (the author of groklaw) earnestly believed that her communications were being monitored and read by American intelligence services, which was a rational conclusion to draw from the prevailing news stories in The Guardian, The Washington Post, and The New York Times.

She was so disillusioned with the perceived trampling of 4th amendment rights that she stopped posting to her blog and moved her email to Lavabit.

Such was the breathless nature of the reporting, that the editors and ombudsmen didn't consider that the reporting drew conclusions and made unfounded allegations based off of slide decks. Other countries' government secrets being taken through computers == "they monitor everything."

Now with the benefit of the Shadow Brokers leaks, we see that the NSA is severely constrained by manpower, processes, and software bugs. It's practically a joke compared to its perceived might in 2013.

I hope that she returns to writing, but I understand if she still feels privacy concerns with the internet.
Yeah a time schedule or a really long and cumbersome unlock password for social media and web browser would really help. But then you need that recipe for dinner and you think "this is stupid, I'm an adult, I can handle this" and you remove it.
It's funny that you say these things with such confidence when you're demonstrably wrong (ie, 3) by simply looking at the Pale Moon update logs and the 'Defense in Depth' "fixes" for vulnerabilities that don't exist in PM but do in FF which are changed anyway just to be sure. http://www.palemoon.org/releasenotes.shtml
Does it work if you set the root password and try again?
https://en.wikipedia.org/wiki/Luka_Magnotta
A Webpack loader that generates WebAssembly using Docker
Apparently there is no macOS bug bounty: https://twitter.com/i0n1c/status/935608248027303936
Care to explain the comment about Apple? I can think of a few companies (DJI, for example) that try to screw over security researchers, but big IT companies usually don't go on the list.
Forbidden files show Dog has sex with White Men in the Anus
We'll see if 52 ESR reaches end-of-life before webextensions acquire the needed functionality to do the ports.
That's a fair point - there isn't really a major difference in that case.

Thinking back, I remember using the MDI mIRC and having an active channel in its own window. The rest of the channels and lists were inside the mIRC application. I then had my chat up with whatever document I was working on.

The thing from that kind of setup that is hard to come to today is a simple way to designate some windows a less important than others. The important ones get into the task manager/dock. The unimportant ones are grouped with other similar windows.

I can't think of a major desktop that I've used that lets you do that. It seems to be all or nothing. I've seen docky and some KDE plasmoids get kind of close.
Okay, so you don't agree with it. And it may not be a facet of net neutrality, but it certainly is analogous. I've paid for a general purpose computing device, and I've paid for a connection to the Internet. Why should anyone besides me choose what I can run on that device? Blocking apps because they compete with services a provider sells translates pretty clearly across to blocking websites because they compete with services a provider sells.
It helps that the ISA is supported in more places, even if for awareness alone. Compare where ARM was 10 years ago, where it was 5 years ago, and now we're discussing having competitive alternatives to Intel and AMD in servers.

As new developments seem to happen at an accelerated pace, RISC-V should also see more accelerated adoption. It won't take 30 years to get get to where ARM is today. Maybe only 10, or less.
It did. But didn't have security tied to the fs.
I really hope there's an extra zero in your 40000.
Between closing and opening, yes.
Ask HN: Best books you read in 2017?
It can't be exploited remotely. Only by someone sitting at your computer.
go to about:config and set browser.zoom.full to true
this will cause the whole page to get zoomed.
Perhaps they don't want to announce to the world that their SAAS is in trouble.
Letting the development team know first is nice to the development team, but not so nice to the users (especially not-nice if there's a workaround, which there is in this case.)

My personal policy: If there's a workaround or mitigation, then full disclosure is more responsible. If there isn't then report to developers and CERT or similar. Never report only to developers, always have a deadline for full disclosure, and always have a third-party (CERT, Project Zero, etc) to disclose if you come under legal fire.
Bitlove.org now features WebTorrent (BitTorrent over WebRTC) playback
TownCrier is actually pretty interesting, it's leveraging Intel SGX to verify requests
Who is going to bet some future Mr. Robot episode would feature it?
Net Neutrality is a necessary good and ISP content throttling is certainly part of the problem. That said, he makes an extremely valid point here. If the argument is that a few key monopoly-like players dictate what content we can access then the major online advertising companies are just as much a part of the problem as throttling ISPs.
If posts involving domain-specific jargon were not permitted on HN, this would be a very barren place.
I know the theory, but practically there's a huge difference between that type of physical access and "the victim left the room to go to the bathroom for 2 minutes" type of physical access
"you can have CPS called on you" doesn't imply a direct relationship between the reporter and CPS. The end result is the what matters.
"Responsible Disclosure" is a term rejected by the industry as a loaded phrase that favors vendors, instead preferring the term Coordinated Disclosure. Even so, reasonable professionals still disagree that this is the best option, in a debate that has existed for decades, so it's by no means settled as the "proper" way.
I am looking forward to seeing some ME demos from the art scene ...
Click the Play triangle to the right of the green download buttons. Requires browsers with WebRTC support (Firefox or Chrome) and it's only enabled for MIME types that might stream into a <video> element.
1.0.0 remoteStorage.js release
>>Correct, I was talking about the hacking tool.

Oh, thank goodness! My faith in ycomb hackers is restored!

Now, I'm off to go work on my reading comprehension skills...
Can you talk about how to correctly disable the root account if someone did try it?
Don't forget the Disk Utility password disclosure! https://www.macrumors.com/2017/10/05/macos-high-sierra-disk-...
Oh! Here are some lies for you: https://www.cnbc.com/2014/05/28/cnbc-exclusive-cnbc-transcri...

> ROBERTS: FIRST OF ALL, BOTH IN VIDEO AND IN BROADBAND WE DON'T COMPETE WITH TIME WARNER. WE HAVE TO START WITH THAT VERY FUNDAMENTAL POINT. THEY'RE IN NY. WE'RE IN PHILADELPHIA. THEY'RE IN L.A., WE'RE IN SAN FRANCISCO. YOU CAN'T BUY A COMCAST IN NEW YORK, CAN'T BUY A TIME WARNER IN PHILADELPHIA. SO THERE'S NO REDUCTION IN COMPETITION.

Is that by chance? I wonder.

Here's a map of competition: https://consumerist.com/2014/03/07/heres-what-lack-of-broadb...

Here's the Department of Commerce's study on competition [PDF]: http://esa.doc.gov/sites/default/files/competition-among-us-...

> The typical person also has the option of
choosing between three mobile broadband
service providers at 10 Mbps. At even higher
speeds, however, the number of providers
drops off dramatically. For example, only 37
percent of the population had a choice of two
or more providers at speeds of 25 Mbps or
greater; only 9 percent had three or more
choices. Moreover, four out of ten Americans
did not live where very-high-speed broadband
service – 100 Mbps or greater – is available. Of
those with access to broadband at this speed
level, only 8 percent had access to two or more
providers; 1 percent had access to three or
more. Only 3 percent of the population had 1
Gbps or greater available; none had two or
more ISPs at that speed.

And no, satellite and wireless do not count as competition in broadband. Sorry. Wireless is expensive, comes with very small data caps (unless you're lucky enough to be grandfathered into old data plans), and there are NN exceptions in wireless (e.g. TMobile). Satellite comes with low bandwidth, higher latency, and higher costs.

Plus, according to the study, YOU'RE the one with inaccuracies. "For example, only 37
percent of the population had a choice of two
or more providers at speeds of 25 Mbps or
greater" 37% of the population is not a majority. If you have updated stats, please link them.

The ideal here is to have 3+ for 98% of the country, with options such as: municipal broadband, Comcast, Google Fiber, and Grande/Sonic/other regional options.
Cue
> others can remotely & silently access the system as root.

They already can:

https://gfycat.com/gifs/detail/sentimentalnaiveantelopegroun...
We need more distinct platforms that have specific area experience and engineering behind these. "Web" is driven by advertisement specialists and vendors, what else to say.
Specifically their Freedom products [0], which are multicore, 1GHz+ CPUs, with support for standard interfaces like PCIe 3.0, USB 3.0, GbE, DDR3/4.... and ship with Linux support.

Not about to disrupt Intel, AMD, or ARM in the laptop/desktop/server space just yet, but relatively high performance, modern RISC-V SoCs are definitely out there.

[0] https://www.sifive.com/products/freedom/
"RISC" is a terrible name for anything related to computing
How many more people now know about this vulnerability cause of this knuckle-head tweeting it? At least 100k impressions? Now think of how many more "bad guys" have access to this hack that are going to abuse it.
My parents used to swipe critical computer parts from my machine as punishment, to take it away. Things like power cords, keyboards -- little stuff that cripples the computer. But I had spares for days, stuffed in a little box in the back of my closet :)
#3 is a weird one to take issue with. Unless by “demonstrably wrong” you mean “objectively right”? You can’t backport a patch from a fork for a feature that doesn’t exist in that fork. You can make your own patch. XUL ones can come from ESR… except when you don’t fork ESR. Oops! A fork has to be able to maintain the browser as well or better than the Firefox community does right now, and again, I don’t trust any of the fork teams to do that.

You’re also misrepresenting what “Defense in Depth” changelog entries in Pale Moon mean. For two of the five on the current page: CVE-2017-7809 was fixed by Firefox; NPAPI plugins aren’t supported anymore. The other three aren’t specific and don’t link to an issue tracker or patch, so it’s hard to say.
ARM laptops already exist BTW using smartphone SoCs. The R&D has already been done and paid for.

A RISC-V server or desktop processor would have to be created essentially from scratch.
Can't reproduce on El Cap.
The main difference between the current mark-and-sweep garbage
collector and the SpiderMonkey garbage collector is that the latter is
a copying garbage collector and precise, meaning that objects may
change address during GC and that only typed values, not memory
locations that might or might not be, must be trace

Out of all the types of gc out there going to a copying gc seems not very compelling. Mark and sweep is not bad at all (well understood, straight forward to implement), and you don't have to worry about double dereferencing pointers (ie some implementations of Cheneys, I don't know if spidermonkey refercences are indirect pointers to one of two buffers).
Interesting that they relate this to linear logic. Of the various sub-structural logics I'm pretty sure ordered logic (no exchange) is much more similar to stack machines than linear logic (no contraction or weakening but still exchange).
> We didn’t want to teach ourselves how to find money-losing customers

This!!!

Coming from the travel business. I remember this vividly.

You acquire a customer that is not loyal to your product even for 3 seconds for 1$ and you make 0.8$ out of that customer.

Building a customer acquisition strategy that will work in the long run and will make you money is such a key realization.

Even if it takes you longer and seems like you are moving slower, you should not be tempted.

At one point, we saw a 200% increase in users over the course of two weeks due to some "growth hacks". Those ended up just costing money in server and engineering costs. None of the customers actually stuck with the product for the long run.
But throwing it on twitter doesn't stop you from using the DMCA, and having the DMCA used against you doesn't stop you from posting it on Twitter as counter-measure (which might make the company retract the use of DMCA to avoid publicity about suing "messengers"). If you're afraid of DMCA, keep your mouth shut and stay away from the US.

The DMCA is a disgusting and absurd set of laws that can always make me angry. Its existence alone proves very much how big companies can rule with money, placing capitalism over democracy.
Yes I do; and the F500 Cs I know use it for both purposes. There's somewhat of a code of honor between F500-level execs that anything said in private stays private; you need to be able to have frank backchannel conversations without worrying about antitrust or regulatory problems. Most common is when a communication is rather innocent, but taken out of context or worded in the wrong way it could look very bad.
I'll agree that Snow Leopard is the high water-mark.
I'm having a hard time understanding how this could happen too.

It would have to be that looking up the root account enabled it, maybe users go dormant or something, and this was a way to readd them? then once it was enabled it defaulted to a blank password, but you would think that it needs sudo to enable root in the first place.
Do you have any insight on the "after age 4-5"?

My youngest is nearly 2 and can hold his own on a parking field, at a playpark, in a woodland, digging in the garden, etc.. Seems early 20th Century kids would be out there at an earlier age, certainly working class kids.
No, root is root and has always been there. It's the super user account and cannot be removed, I think, from any modern unix like os (well, you can rename it to whatever you want in linux but UID 0 will always be there). The difference might be that if you do log in for the first time you will have lots of stuff on /private/var/root (talking from memory but it was something like that in OSX) and lots of preferences will be set, maybe even a /Users/root folder
I hope that the SSH server, which is disabled by default, will also handle root login in a sensible way, but given the size of the f* up, I'm not so sure.

Really bad stuff
Should I be using the RedirectRoute widget when I want to redirect to a login page? I want to check a user object to see if the user is logged in, I would like to bind the url to the login and redirect. I am using AWS Cognito hosted UI so I can't slip it into an iframe. Any suggestions would be most appreciated.

Thanks
Well in your case it seems likely that they just went with another photo rather than pay $250.
Why would a wholly-owned subsidiary that has no commercial products need a Business Intelligence arm? Of course Waymo doesn't have anything like that.

"shady stuff" != "competitive intelligence team"
As a fellow pedant who has complained about tech lingo before ('legacy' always makes my skin crawl a bit), what's wrong with 'bootstrapping'? The term has a fairly rich history in computing.

https://en.wikipedia.org/wiki/Bootstrapping#Computing
If the probabilities are such that it's feasible that we're the first/most advanced life in the universe, then (given our planets comparably young age) it's exceedingly likely that we're the only life in the observable universe.

It would be plausible for us to be alone, and it would be plausible for us to be one of the less advanced lifeforms among many, but it would be quite surprising if we'd to be the most advanced civilization among many; since many/most of them would have gotten a significant head start.