skysight-inc/HackerNews huggingface dataset:
Oh god, seriously what happened to apple? They are the richest company in the world and the quality of their software has kept declining every year.
Right now there is no computer system that I can wholeheartedly recommend to non technical people... :(
Uh I tested redisabling the root account and it reenabled the flaw. You have to keep the root account enabled.
And not just downvoted but flagged... Anyways yeah, I tried Ubuntu out and the Amazon icon is there and isn't easily removed. Plus Unbuntu has auto-on telemetry or crash reporting as far as I understand.
That's interesting. Uber has marketed its service as a public good because it covered undeserved areas.
Uhg, ok I forgot some people don't know the code. The old adage is "On your first day as the new sysadmin, change all the root passwords". The idea is that a SECURE root is good, possibly better than no root (which is sort of a hack in itself). There are best practices for root passwords. Things like length, composition (no dict words), disabled for remote access, and care in who is allowed to have it.

Simply pretending root does not exist is a rather new idea and is not best practice. It's only for convenience.
Plain and simple: No!

Except when there is public interest, say politicians committing crimes, etc.
Questions for the Bitcoin community
Python to Rust – Reference Guide for the Pythonista Becoming a Rustacean
If you sell locks and those locks can be opened by pulling on them twice, the reasonnable course of action is to make that fact known to every buyer ASAP, not tell you privately and wait for you to maybe issue a recall.
Internet Comment Etiquette: “Net Neutrality”
Skull and Bones – The dark history of an impenetrable secret society
Which comes back to another point I made in this thread: there should have been responsible disclosure of the issue.
Right, but I think the point is that those free users are not a good analog for paying users. The things you learn from those free users will not help you figure out how to serve customers who will actually pay something for your service.
Idk why u say “designed to protect the guilty under the guise of protecting the innocent”.. it clearly does both. It does protect the innocent. That is a fact! It also does protect the guilty! Both are true. It makes it harder to have a strong view when you must acknowledge both facts I suppose
XULRunner was a great piece of tech!

> (It's the platform that Firefox was initially built on, I don't know how much of it is still there now)

Looks like it was completely removed in this bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1221724

Although I suppose some form of it is used in Firefox now (although I imagine XUL will get removed some time after XBL has been replaced with WebComponents).
LastPass have open-sourced their client, IIRC
Root can absolutely be disabled. OS X normally runs rootless. This vulnerability actually both gives access AND enables that disabled root account in one action. From that point on, root is active with no password regardless of how you authenticate whereas the initial issue is only on password GUI screens.
I agree, Agile and Scrum are not the same. Agile is a framework, Scrum and Kanban are two ways of adapting this framework.

On your point about story points: I am not too fussy with story points, velocity etc, based on Agile guide, we need to have Sprints in Scrum and the team should complete the tasks that it committed for a specific Sprint.

So how does the team know which one is too small or too big when adding requirements to the Sprint during Sprint planning meeting? The team needs to have a way to estimate requirements and make sure it wont commit to a long list of tasks without acknowledging their sizes. To achieve that we need to use story points, T-shirt sizing or any other method to estimate requirements, right?

Please let me know how was your experience of estimating requirements and adding them to your Sprints? and which approach would you use if you were in our situation?
"Wish for" != "what is good for you"
How to Hire a Director of ABM: Tips for Confidently Making This Critical Hir
I'd also add "no aspect of a game (or other piece of software) exists in a vacuum." 90% of the changes to the camera control were directly linked with changes to gameplay and user interface, which were only arrived at by iterating on the game as a whole rather than just the camera aspect. The whole article would have worked just as well if it were titled "How To Make A Game Fun".
>This is no where near the main usefulness of Bitcoin though, which IMHO are: its extremely divisible, portable, efficient and has cheap transaction costs. Its also by far the most free in terms of your ability to enter into a transaction with anyone the world over, regardless of what a particular government thinks about that transaction.

Those were/are all the main uses for gold for much of human history. Bitcoin has improved on or has potential to improve on those, but its relative volatility puts gold to shame.

>The history of Gold as a medium of exchange and store of value has virtually no bearing on whether or not you should invest in it in 2017...There are arguments to be made for Gold but they are in its utility in modern industry, etc.

I would argue the history of gold is the only reason to invest in it. It is extremely overvalued compared to its industrial and commercial uses. However its history shows it is a decent diversification vehicle to protect against loss of value of fiat currencies. This applies to the doomsday scenarios you alluded to in your comment as well as the less drastic economic downturns.
You've been violating the guidelines a lot. Could you please take a look and stop?

https://news.ycombinator.com/newsguidelines.html
Why would you want to do that? Are you running on a severely memory-restricted machine?
Not so much. I spent a chunk of 2009-2010 hanging around with British bitcoin enthusiasts. It was predicated on greater fools then and it still is.
I increasingly feel left out of life because I don't contort my entire life around watching "the latest thing". It's becoming an increasingly sober realization that the world around me is becoming increasingly monocultural because _everyone is watching the same things_ and that it is a culture of which I am not a part.

I don't lament this, really. It's my choice. I'm just wondering if it's an observation that can only be made when you're not scrambling to watch the latest season of Game of Thrones (which I have never seen).
Wow I didn't believe this at first, so I dug more. AWIS requires the root key of an AWS account. I found a forum that does suggest creating a new account solely for AWIS.

https://forums.aws.amazon.com/thread.jspa?threadID=126537

Still I'm surprised they would suggest sending the root key to your account over http. Even if it is just the id and not secret it still seems like something you want to keep secure. I don't use my root key for services. I create new accounts and IAM roles.
There's no point to a decentralized database like a blockchain when you run it from a handful of centralized chokepoints which are easily censored or pressured by political actors. You may as well just use a SQL database that everyone syncs up periodically. Bankcoins like Ripple are pointless.

People buy treasury bills when they care more about return OF capital than return ON capital. Bitcoin and gold are also solid assets in this regard, particularly because they are bearer assets that don't represent a liability or promise-to-pay by some third party.
See https://news.ycombinator.com/item?id=15802113
Isn't this like saying Uber can't compete with taxi companies because the old model is proven to work? I'm not able to tell you whether it's true or not, but the claim here is that Bitcoin removes a lot of the friction in illicit markets, so that you don't need to be a Colombian Don to sell cocaine.
Right, that's why there's usually no need to bother with Tor.
We ban accounts that continue to post like this, so could you please re-read the guidelines and stop?

https://news.ycombinator.com/newsguidelines.html
No... I immediately set a root password, if this had not been posted I would be far more at risk.
> efficient and has cheap transaction costs

I've heard differently.

Vice: One Bitcoin Transaction Now Uses as Much Energy as Your House in a Week

https://motherboard.vice.com/en_us/article/ywbbpm/bitcoin-mi...

Average transaction fees have gone up substantially.

https://bitinfocharts.com/comparison/bitcoin-transactionfees...
FYI...that's currently forwarding to a very NSFW image.
Isn't this incorrect? The developer edition appears to be built from the beta version. You get some alternate switches turned on, such as extensions no longer required to be signed & other stuff, but none of it is specifically new.
> Simply pretending root does not exist is a rather new idea and is not best practice. It's only for convenience.

Says who? Sure, it's convenient not to have to worry about choosing a secure password for your root account, but why is it "sort of a hack in itself"?
Sure! I think that's especially true of Javascript.

I would just caution people against doing direct comparisons of unit test suites between Ruby/Python and Go projects, because a lot of Ruby/Python testing really just mitigates deficiencies in those languages, and those deficiencies have created a sort of culture of exuberant, creative testing that isn't present in other languages.

Tests are good! Everything should have tests.
EteSync – Secure and journaled sync for Android, now with self-hosting support
Attack Surface Discovery Using Passive Data Sets
Yeah I've noticed this myself - I'm on the fence as to whether this is actually disabling the account or simply creating that impression (it does show as disabled in Directory Utility after you perform this command).

My hope in recommending people disable this way is that with the additional scrutiny on this subsystem, accounts disabled this way will remain genuinely disabled in a future update. Either way this doesn't seem to reintroduce the bug.

... but the whole thing is a mess overall.
Now that is well written!

Current price of bitcoin is ~9.9k total supply is well over 17 million. lets call it 10k and 20 million. We're sitting at ~ 0.2 trillion. For that you could buy paypal, square, moneygram and Western Union and still have plenty left over.

That's fairly surprising. Bitcoin alone is within striking distance of the market cap of visa.
Maybe you personally are at less risk, but the population as a whole is at greater risk.
Why not? If Fedex wants to be stupid and charge Netflix exorbitant fees while giving stuff to Blockbuster for free why should we stop them?
Jay-Z, Kaepernick and the disturbing story of the rapper sent back to prison
> In my work, I have never discarded outlier values.

This is great to hear, hope everyone follows this.

> I have never seen a computer systems paper which used them. I don't know if most readers would be able to intuit meaning from them.

That's rather unfortunate, is it not ? Current practice is broken. So should one not strive to fix it and introduce the community to better tools, champion better tools. I am aware I am being harsh here but, correctness be damned, lets follow the crowd does not show the community in stellar light. If trimmed mean is too exotic, even median and inter-quantile distance would be fine.

> My claim is not that mean and standard deviation is the best way to characterize computer systems performance data, but that for my work, it's better than mean and a confidence interval.

I have two comments to make (i) Its not the case that mean and std are mostly OK but rather suboptimal. I would be fine with that. The thing is these can be horribly wrong and unrepresentative. Seemingly innocuous looking distributions have infinite variance. Since you use a lot of Gaussian based tools, you would be familiar with a t-test and the t-distribution. The variance of a t-distribution with 2 degrees of freedom is infinite, any finite number one reports for the std would be wrong by an infinite order of magnitude.

> it's better than mean and a confidence interval.

(ii) I am having trouble with this one. Assuming that confidence intervals have been computed using the Gaussian assumption, width of the confidence interval would be a scaled up version of the standard deviation, nothing fundamentally different. Instead of std, you get, say, 3x of std. When they are bad, both are equally bad.

I am not against the use of Gaussian, sometimes it is very reasonable, but if correctness is a goal, then it needs to be demonstrated that it is not a wrong thing to use. There are standard techniques to verify that using Gaussian based stats would be fine.

I would be sympathetic if it was the case that we don't know how to handle departures from Gaussian, or it is very expensive to handle that. Neither of these are true, and haven't been true since the 80s. in fact earlier.
Add support for your car to Comma.ai Openpilot
Half of HN are libertarian chuds these days, so it's not exactly a surprise.
Nice ideas but for the love of god what is up with the syntax resulting in lines with nothing but an indented semi-colon?

Pleeeease reconsider this. You may not think it matters but people make terrible language choices every day on such basis.
only the investment grade CDOs of longer terms
false dilemma

try to enjoy yourself
Closed disclosure is responsible disclosure. Moving past the terminology, I am an Apple user as well, I am pretty satisfied with how quickly Apple resolves issues.

Now if every person started disclosing vulnerabilities via twitter without giving the company turn around time to resolve the issue based on their dissatisfaction with Apple based on standards they came up with personally, I don’t think it is nice or fair.
> Those silly new-age-tech guys don't understand how the game works, and think that the constitution has any place in our "Democracy".

What part of Pai's actions go against the constitution? Unilateral actions by the executive can also unilaterally be undone by the executive.

More durable change rests with congress or the courts.
I wonder if the cards found were inspired by the novel
this has been recommended to me quite often by my girlfriend. i should really get to it.
I agree, a lot of chatbot projects seem to be built because of the hype + the team also gets to dabble with some "AI/ML." I think there are very few conversational agents or chatbots today that people use regularly, and of those I honestly don't think many people enjoy using them.
Personal news anchor – Futuristic Alarm v2.0 (Android)
In addition to this, there is a known effect of surge pricing that routes demand from poorer areas to wealthier areas. I can't find the paper right now, but IIRC it was 2015.
I can imagine a technology that aggressively defends its own openness, partly based on AI. E.g. any attempt to constrain it causes it to go full-on Chaos Monkey and start breaking things - a technology that enforces liberty on the society using it.

Sounds a bit dystopian perhaps but hey, maybe we deserve it.
>This is no where near the main usefulness of Bitcoin though, which IMHO are: its extremely divisible, portable, efficient and has cheap transaction costs. Its also by far the most free in terms of your ability to enter into a transaction with anyone the world over, regardless of what a particular government thinks about that transaction.

This is exactly whats wrong with bitcoin and people who like it. Its certainly very arguable whether its efficient and cheap compared to whats already commonplace but putting that aside... you think tax evasion and tax fraud are features inherent in bit coin.

You can smuggle cash, gold and goods to any country you want and skip out on the taxes and regulations. That's not some futuristic innovation.
Thanks for the tip about tridactyl, I've only seen Saka Key so far in this space.
The last High Sierra update will have less bugs than the next major release too, so I don't think that's really relevant.
Details Kill a husband to his wife and suicide of witnesses and neighbors
There was already business domain specific terms for all of the many things people regard as bootstrapping. In this case it seems like it is a mildly successful agency already earning enough to pay 4 people, realising they could make more money a different way. Maybe this is just business, jargonphiles might call it 'pivoting'. Seems a world away from someone else 'bootstrapping' without 2 dimes to rub together from their garage. Or indeed the truth of many more of these stories that read like 'I made a good bit of money at my old job so took a year off and started a saas business with significant sums of my own cash'. Maybe I'm just bitter.

I guess one thing people might want to bear in mind if they are not in the US, you may find senior finance people in the UK, for instance, totally bemused by this term if you find you want to stop bootstrapping and look for funding.
The great thing about this is that we can click on a link and go to the original page.
I've heard many people say this, and it seemed sensible enough at first. But on further thought, I sincerely can't make sense of it.

Dollars are just green pieces of paper. We accept them for goods and services because... everyone ELSE agrees to accept them for goods and services. It's circular.

How is the might of the US military relevant here? If you lived in South Korea, would you accept the South Korean won, or would you refuse your salary because their military is too weak compared to the United States? I would take my salary in South Korean won because all of my neighbors and strangers will take it in exchange for goods and services. Circular.

The circular argument that cryptocurrency has value has turned into a self-reinforcing cascade. Ironically, because of network effects, the more users and speculators there are in Bitcoin, the more utility it actually has, because others will accept it as money. This - and the human tendency toward envious imitative buying - causes the price to rise even further.

Cryptocurrencies are easier to secure and transfer than gold, which we only think has "value" because it's shiny and rare. Yet gold is worth $8 trillion. Why not crypto?

(caveat: Bitcoin could fall precipitously in the short, medium, or long term. My argument is that cryptocurrency - Bitcoin, Ethereum, or something else - will be more valuable than gold in 10 years or so.)
Under arrest is still just a suspect. Names shouldn't be released before conviction.

I know the US custom draws from the fear of secret courts, but I'm not in the least convinced it's worth the current price of defaming suspects.
A calculator bug is hardly in the same ballpark.
From my simplistic understanding even in the risc programming class I took in 2001. Risc became a cisc one instruction at a time
The politics of the Linux desktop
I Hope so. I am thinking of going to gcp for some time especially because of gke.
Oh, this is a Show HN for the "https://lite.website/<actual_website>" shortcut.
> I don't know of an anywhere-near-ideally functioning democracy in the world

Democracies need to be running at a small scale. Check out the swiss:

https://www.youtube.com/watch?v=dSLs5G4SPP4&t=64s

Of read up on "democratic confederalism" (now used in the north of Syria):

https://www.youtube.com/watch?v=gqfoJvD0Ifg

> I mean just think about it. who's in the best position to influence the will of a large amount of people?

With lobbying you do not even have to go by the people, you simply pay-to-play in politics. That's just legalized corruption, thus anti-democratic.

> Recently I've started to think that democracy is never the steady state of any government, it's just a stepping stone to democratic republics and then to oligarchy.

That's an obvious progression if the democracy is highly centralized and lobbyable (or otherwise corrupt).

> technological advances are the only things that seem to truly shake things up

Currently tech it largely "bought", and thus used in the advantage of the capital-heavy. Nature and labor are totally subservient to capital in the current system. A well functioning democracy can turn that around, but they seems to be increasingly less functioning.
Plus hydrogen peroxide is not that stable in acidic condition (i.e. your stomach) and your body is fully of peroxidases that catalytically breakdown peroxides quite quickly.
I hope Google/Alphabet end up owning Uber after this trial. Then they can shut it down.
I wonder what kind of effort would be required to port it to node/V8? IIRC XULRunner's main handicap was relying on Moz's older-gen JS engine
> A compiler team already wrote a shader compiler to run high-end graphics jobs on its chips.

All major shader ISAs today are RISCé (no new VLIWs, that I'm aware), and this sentence seems to prove that RISC-V is a viable (base) ISA for shader cores.

> Ditzel designed server processors at the former Sun Microsystems and startup Transmeta before doing a relatively short stint at Intel.

The CEO of Esperanto Technologies worked at a company which built a product on Dynamic Binary Translation from x86. Can anyone guess what else might be cooking in that compiler team? :- )

I mused earlier today that I'd like to put a RISC-V SBC in an old ThinkPad chassis.

Maybe ET-Minion is GPU-like enough to stand in for a GPU on a workstation, and maybe ET-Maxion would make a good host CPU for that. Set the voltages and frequencies right, and you might be able to put them both in a 2011-era laptop, built to supply and dissipate 35W of load at times.

Just a thought.
Throne.ai – Live sports prediction contests for data scientists
macOS QA Engineer Job in Santa Clara, CA
People invest in USD? What does that mean? Currency speculators might arbitrage USD if they think the exchange rate is inaccurate but nobody holds USD because they think the value will go up long term. Holding fiat currency means you lose money constantly due to inflation.
Agreed, braces seem a better fit here
> I still think you have to give authors and artists a way to make money from their works

I understand the sentiment but..why. Why is it necessary. Art and science advanced on its own long before copyright enforcement of any kind.

True there are things that are particularly benefited from copyright. But they do so at the expense of something else. It diverts labor to things that later require law enforcement to protect.
Low Power Arduino Uno
Bad news: I tried the exploit in my macOS Sierra installation and it didn't seem to work. However, the passwd entry on the output of your first command IS A LONE ASTERISK.

However I still can't login as root. This leads me to believe this behavior has always been there, and maybe the login methods just didn't allow an empty password.
The game is amazing.
The thing about, say, cropland is that you can't take it with you. If the area where you own that cropland suffers from political instability or a government that decides to confiscate it for whatever reason, that land investment is effectively worthless. I believe it was fairly common for some religious and ethnic minority groups to keep some of their wealth in gold exactly because they could carry that with them if they were forced to flee.
Cloud brokerage? The key is that they don't just wrap Amazon, but rather multiple cloud providers, and offer some degree of abstraction to enable multi-cloud architectures.
Scalefastr: Bare Metal Cloud Hosting of Elasticsearch and Cassandra
When did you last test? For me, using Firefox 59, there's a "Duplicate Tab" entry when I right-click on a tab.

Also, I know for a fact that you've been able to Ctrl+drag to duplicate a tab in Firefox for years and years now, because I do it every week. :)