skysight-inc/HackerNews huggingface dataset:
There is a school of though in economics that believes that in the current ~20 years economy, there is a recession every 7 years (roughly 2008, 2001, 1994).

This school of thought thinks that a recession right now is due and some people think that it is already cooking. I think the value of cryptos (BTC, BCH, ETH, etc) will be pushed up when these recessions happen.

The value of Gold went up in 2011 due to several factors. EU instability because of Greece was part of that. There was also some USA instability that caused some further grow in Gold price (I don't recall precisely which came first, US or Greece issues).
> Once you enable root access - by 'testing' this - others can remotely & silently access the system as root.

That's not accurate. The user appears to be there either way, but attempting to log in to a machine remotely using 'root' and no password does not work - even after doing the preference pane thing...
'grueling' is key. Since I don't do any 'real' work I need to go to the gym pretty regularly to keep my mind / body sane.
"With" as in "nearby" or "with" as in "interacting with"?
Apple has always had QA issues, the difference now is that they’re increasingly tested by the users, hackers, etc.
That’s mighty puritanical thinking. When a family works their ass off to be denied financial aid and pay full freight for highly inflated university tuition, that’s not what I would call “taking responsibility” that’s just being taken.

College financial aid is just another policy in the pile of progressive taxation and needs-based benefit programs which conspire to enact a near 100% effective marginal tax rate on the middle class.
How good is Haxe? What are its issues, pros/cons? I am looking for something similar; Kotlin was one choice though after today I am not sure about it anymore, so what do other frameworks offer?
To do vulnerability/pen testing, you’ll want to use a purpose built AMI to spin up an instance in a VPC and emit its data to an external C/C system. PrivateLink isn’t built to poke a hole and reach into a VPC.
from time to time i lose firefox extensions because they are not updated anymore; with firefox 57 i am losing my beloved fireftp, which is still available on waterfox... but there's no way i would get rid of firefox, even for fireftp
It is a conflation and if Pai doesn't get this, then he has no business having the job he has.

I think he does get it though and this is a tactic that might work for him.

I think it's worth making a distinction over regulating the internet vs regulating ISPs. The internet should be unregulated but ISPs should be regulated. ISPs provide a telecom service while companies like Twitter provide an information service. They aren't the same thing at all and we shouldn't let telecom companies pick the winning info service companies.
That only detects enabled root users, which is a start but may include innocent people who have set a root password to protect their machines.
There's a lot of wishful thinking involved in this. It's like Linux on the desktop: doable but very much a fringe thing.
Landed ~5 days ago:

https://hg.mozilla.org/mozilla-central/rev/db56323cd08f
If you lose physical control over the machine, all bets are off because an attacker can modify the hardware to do nefarious things.
It really feels like the only thing that made Apple to be less prone to hacking and malware (and therefore more secure) than other OS is the lack of scrutiny by hackers and malware authors. This is a front door open kind of problem.
While reading this, my mac just prompted me to Upgrade to High Sierra. I think I'll hold off...
This will be a fun fix.

They'll not only have to patch the vulnerability but they'll also have to disable all of the root accounts that were inadvertently enabled. What a mess.
I become more and more convinced that Mozilla could have saved themselves a lot of pain by giving FF57 a completely new name and version number, rather than suggest it is a continuation of the venerable Firefox lineage.
Security though obscurity is no security at all. Don't you think the people living around the chemical weapons should be informed too so they can take precautions to protect themselves?
These policies go two ways. Companies need to be able to delete data eventually, but they also need to make sure that employees are not deleting data on their own in order to hide illegal activity. Having a retention policy of X months then cuts both ways. If you delete data before 18 months, well that looks awfully suspicious.
You should read up on SiFive.
> Its not just Apple though. Microsoft had the similar problems in the past. Edge did not support silverlight causing people to move to other browser. It was strange to see Microsoft's own software not supported by Microsoft.

In my personal experience Windows has been much better than MacOS for me. I've been using Windows 7 for the last year at work and I'm having significantly less problems with Windows then MacOS. But Windows and MacOS both give me more problems then a FreeBSD or Linux box ever has.
Michael Arrington Has a New $100M Hedge Fund That Will Be Valued in XRP
I use Keybase, Signal, even Snapchat daily. I wonder if a lawyer could pervert that into ‘shady’ behavior.
How can one of the most wealthy companies on the planet, that every single software engineer would kill to work for, manage to have a bug like this?

Maybe they need to re-think their hiring process, because clearly something is not working as it should.
I guess this will be nice for industry, which may pass the savings along to the consumer, but as far as having auditable hardware that you have some control over, I don't see how this is any better than the ARM SoCs we already have--unless you're going to roll your own system on an FPGA.

That, and I'm kind of disappointed everyone has drunk the RISC kool-aid. I think a lot of RISC "performance" has more to do with compilers catering to the least common denominator than anything else. If you had a language/compiler that took better advantage of a stack architecture, or even a CISC architecture, the performance would probably be just as good if not better.

I was particularly impressed by Baker's old paper[0] on stack architectures in service of his Linear Lisp idea.

[0] http://home.pipeline.com/~hbaker1/ForthStack.html
Last mile sharing was nice. You could get DSL from SWB, Earthlink, or whomever.
Silverlight was EOL'd five years ago.
So, I'm in agreement, but I'm not sure how to get from here to there. I think I'd rather a stopgap solution than one that would put me in a bad spot for the next decade+ while deep infrastructure issues are addressed.

What I really wish is that Internet was just another boring utility like electric or gas.
I'm getting conflicting information from NASA on this.

According to the first link (PDF, sorry), waste is disposed of in re-entry craft.

But according to the second link, it's ejected to burn up in the atmosphere.

https://www.nasa.gov/sites/default/files/files/issrdc_2013-0...

https://www.nasa.gov/mission_pages/station/research/news/inf...
Does not work via ssh or screen sharing based on my testing here. Seems to require physical access to the machine.
It means essentially “open source,” its just that this time the source code is in a hardware definition language.
iTunes had QA problems for more than 10 years, only the early versions were really solid. I am not sure that it is a recent problem.
Get post I was enlightened
I introduced Qt because it is an example of a high-quality, full-system framework that you can chose to live in. I did not mean to imply that SDL used Qt, but I can see how it reads that way.

When I was following Handmade Hero, some of the fanbase were maintaining a linux version of the project in SDL, and moving them forward at the same pace as Casey's project.

> It also does more stuff for you, like loading
> fonts, images, sounds, etc... and again, in
> a crossplatform manner.

I found it to be awkward for audio. When you pick a library, it can steer the direction of your software. You can end up having to do things the library-way instead of the you-way. As a general rule, the more the library does for you, the more likely this is to happen.

This is going back a bit, but I remember SDL media having background threads. If you let SDL draw you into a multithreaded approach, you would lose tuning options you might need later, because you would not be able to reason cache behaviour.

> If you don't like a specific part of SDL or
> whatever project, find an alternative project

Through your forceful words, here and elsewhere, I get the impression that you think that this is the "one true approach". But I think there is a respectable alternative: suck up the native-integration cost in order to forgo the dependency cost. Bedrock against the system where it is non-horrific to do so, in order to own your codebase. I don't think a hacker should have to apologise for choosing that approach.
But it's how full disclosure works which is more responsible then coordinated disclosure.
Yes, but the most secure thing to do at this point _is_ to recreate the bug and then set a password for the root user.

Otherwise the hole is still there for others to exploit.
Presentation slides: http://innovation.wdc.com/downloads/RISC-V-Presentation.pdf

Presentation brief slides: http://innovation.wdc.com/downloads/RISC-V-Presentation-Brie...
Think of Hart vs Cohle as an analogy to shame vs guilt cultures.

One particular scene I recalled when reading this article was the punishment Hart exacted on the two boys he caught with his daughter. Contrast that to his behavior towards the young women he cheated on his wife with, which is reminiscent of the honor culture described here.

Another scene he saw he a woman he was having an affair with seeing another man and proceeded to assault him in her own apartment. Again very reminiscent of the honor culture. We can see how Hart is unable to comprehend the moral inconsistency of his actions.

Contrast with Cohle, who feels deep guilt over the loss of his daughter and does not engage in any infidelity over the course of the series. (Besides the incident with Maggie, however it was something she goaded him into and he was single at the time.)
Well, sorry, but on the top of my mind, I have a client that uses 10.96.0.0/16 and another that uses the whole 172.16 subnet...

I don't really see how I'm setting up for these kinds of problems as these devices only talk to my infra, but I'm on the other way avoiding a lot of problems.
That's how you get the clicks bro.
"Twitter Is Bigger Threat to Open Net Than ISPs"

So he admits ISPs are a threat?
Show HN: Rsync Client.app: a drag-drop GUI for rsync
Facebook is using AI to try to prevent suicide
> 1 + 2 + 3

https://www.macrumors.com/2017/10/24/ios-11-calculator-anima...
> Anyone got any inside scoop?

I have a feeling that anyone who does would get fired for commenting here about it.
You could let them know about the vulnerability and wait until it's been patched before commenting, with some timeout where if they don't patch in a reasonable amount of time you announce it anyway.
I run as a standard user and was able to reproduce the bug.
Really liked the way that Meetup was venturing into branded meetups and pages. So if I wanted to hunt down a specific community, I could do that fairly easily.
There are two ways to achieve that... either Bitcoin increases value or your "$" decreases value... I mean,

1 Bitcoin equals 10,775,501.53 South Korean Won
i dont mean to sound snarky, but i thought this was just 'growing up'.
He spoke for an extended period, and this was one argument among many. Arguably, when Pai was speaking about Twitter, he was talking not about the net neutrality issue, but about threats to free speech on the web. (That is, he was making a response to arguments from net-neutrality advocates that net-neut enables a freer and more open forum for political debate on the web.)

To be honest, if I look back at my last 20 years on the internet, I have seen more colorable censorship from the Reddits/Googles/Twitters of the world than from the various satellite cos, ISPs, telcos, quagmiric microwave relay companies, and mobile phone networks I've used to get on the internet.

Disclosure: I am on bd of Lincoln Network, which put together the event in D.C. where Pai spoke.
I'm going back to Windows after a 10 year hiatus. Mac has definitely declined.
<on-the-clock>Do you mind opening a support ticket for this with VMware? You can't be the only person seeing this, and it'd be great for us to check for this specifically when dealing with mystery-meat "bad perf in XYZ VM" bugs.</on-the-clock>
I used to go to my friend's house when I was 8. It was through the woods, across the railroad tracks, and about 2 miles down a fairly busy residential road with no sidewalks. By 13 I went anywhere I wanted. Even on the city bus or whatever.

Most of my life the rule was "be home by dinner" (6pm)

Also I stayed home alone and watched my little sister after about age 11. I had a single father.

My friends and I also played with explosives--we got into one buddy's father's black powder stash--but the only casualties were one guy's eyebrows. And his pride, once his mother noticed.
Amazon MQ – Managed Message Broker Service for ActiveMQ
AWS AppSync tech lead here. If you'd like to request access, please go to https://pages.awscloud.com/awsappsyncpreview.html
The original plan was for the Servo project was to develop a new browser engine separate from Gecko, similar to the original Mozilla transition. An alpha-quality browser with Servo as an engine was originally a 2015 goal, and the active goal tracking this was removed from the roadmap in 2016:

https://github.com/servo/servo/wiki/Roadmap/_compare/47f490b...

As someone who was involved with Servo during that time period, I was disappointed at the time that it was quite obviously not going to happen. However, looking at what has happened since then, the change of focus towards Firefox integration was definitely a good move.
AWS ReInvent 2017 is going right now in Las Vegas, the number of attendees is about 40000, and I'm wondering how many laptops can be attacked using this technique. The `root` user stays in the system, so one just need to create it and open SSH quickly, and later they can do whatever they please.
"responsible disclosure" isn't some morally unassailable high ground, but companies like apple sure want you to believe it is.
What's the legit use of infrared contact lenses? I gather Johnson and Johnson makes them.
This logic is so flawed, it's a bit scary he has the platform to voice it.
No, it doesn't work for remote login.
Wasn't that how they initially found out about uber stealing their trade secret? When the LADAR manufacturer accidentally emailed Google instead of Uber?
Also common thread in these situations was that the women were denied agency by Hart in his interactions with them.
> If Pai gets his way, ISPs will be in a great position to cement Twitter and Facebook's monopoly with preferential treatment and free subsidized internet plans.

IANAL, but I wonder if this would open the door for anti-trust lawsuits by a future administration.
This guy is twisting arguments to spew a talking point favorable to his agenda
> They have just released the most awfull iOS upgrade for a
> long time, and now this. Something's messed up, and they
> better fix it soon.

I keep seeing this written after each major iOS release sinc at least iOS 7.
I'd be shocked, WebRender is still not default in nightly, and I'd expect that before it was turned on for beta/DE.
Almost all the Ajit Pai stories these days appear to be Astroturfing. They are cleverly manipulating the masses of voting population, which doesn't think like most folks here at HN, into believing that this is a great thing for them.

Astroturf and manipulation of media messages | Sharyl Attkisson | TEDx University of Nevada => https://www.youtube.com/watch?v=-bYAQ-ZZtEU
Yes, this mod behavior is pretty astonishing. microcolonel's comment is getting downvoted as well for no apparent reason.

I guess there are RISC-V haters...? Good grief.
> Apple just uses it.

Apple "just uses LLVM" in the same way Apple "just uses Webkit".

Apple hired Chris Lattner back in 2005, just as he completed his PhD. At the time, LLVM could just barely compile Qt4[0] (the result didn't quite actually work yet) and was still hosted on CVS.

Lattner had to make LLVM production-ready (rather than a research project), add a bunch of major features, start a C/C++/ObjC frontend (Clang) and create a team of LLVM developers in the company.

Apple shipped their first bits of LLVM-based tooling in Leopard in 2007.

[0] https://web.archive.org/web/20111004073001/http://lists.trol...
I used to have a friend with a masters in biochemistry. Once he tested a glowstick and determined that the components were completely nontoxic. (He couldn't vouch for all glowsticks, don't try this at home.)

He put each liquid component in a test tube and went out for beers. He poured one tube in a buddy's beer when he wasn't looking, and another in his next beer. Then he went in the restroom and unscrewed the lightbulb.
What!? No <blink> tags? :)

I was way guilty of that on my first site circa '96
How is your list any more remarkable than life starting on Earth in the first place?

What’s the probability of adding water and heat to a planet then waiting a few billion years for life? I hope we can send some probes to Saturns moons and find out. Even Mars could have a trace of life in the dirt.
There is a security working group. If you are concerned about this I highly recommend joining the foundation as an individual (or getting your employer to join), and asking to be put on that WG.

It’s a critically important question and it requires active grassroots involvement to make sure that we don’t end up with a mere clone of ME, or worse a “better ME.”
I think it is safe to assume that complexity is highly correlated with number of lines of code. And with complexity grows bugs.

On the surface, this particular exploit on macOS seems to be caused by a totally unrelated subsystem (security vs. GUI).
I wouldn't think they'd care about the geography of it - a good tip is a good tip, and they want to encourage responsible disclosure.
> I find one of the most effective ways to do more with less is to ignore work after work

It's a shame that the concept of "having a life" as we pejoratively said in the 90s seems to have been forgotten.
Great question. So sorry for the confusion- I only used jQuery UI as an example, but perhaps it wasn't the best one. I'm trying to create a UI component library in vanilla JS/CSS that can be extended for use in React.

So I'm looking to create something very similar to Material Design, a vanilla JS/CSS library (https://material.io/components/web/), which is extended and used in Material UI, a React component library (http://www.material-ui.com/).

I guess I'm essentially asking: if I were to build Material Design, knowing full well I'd use it later to create something like Material UI, are there any recommendations out there for building the vanilla lib to make sure I don't shoot myself in the foot integrating that vanilla lib into the React lib?
Yeah. When the talking points are seldom based on actual facts, it's called Astroturfing. https://www.youtube.com/watch?v=-bYAQ-ZZtEU
No it does not. I tested this rather carefully, and both ssh and screen sharing do not allow the user root with no password.
Hey Spotify, where's your QAs? Are they on vacation?
Red herring. Twitter will never have the power to throttle competing websites. This is completely unrelated.
Ask HN: What's a good learning path for particles FX?
For people working with particles for visual effects: do you have a recommended learning path for it?

There are very different areas (like working with particles on After Effects vs particles on Unity with added interactions) and at this point I'm curious to know about any path in general, so any help is appreciated.
Net Neutrality doesn't "ensure that it's possible for twitter et al to be overthrown by an upstart who gets a level playing field wrt Internet traffic." Twitter/FB/Google don't need ISP's to build barriers to entry, they already have networks effects.

At best it takes away a rather unlikely method of reducing competition for twitter.

IMO, its more likely the ISP's try to extort cash from the web monopolies than accept cash to quash their competitors.

If Twitter really paid ISP's to block competitive services they'd get anti-trust sued into oblivion.
Enable the root account and set a (obviously, strong) password for it. Keep calm and carry on.
I've experienced lots of issues wiht IOS and High Sierra as well. Apple definitely reduced their software quality since IOS 11.
That's fair, and you know the impact better than I!
ISPs are a threat to net neutrality. Large social networks are a threat to society in others ways (censoring, monitoring, "bubbles", no rights what so ever).

I hate his guts, but while his interpretation of the Twitter problem is wrong (its not about net neutrality/open web), considering Twitter to be a problem in a general sense is not wrong.
Well, if they don't then this is a clear indication of the improvements possible with closed-source software.

At least if it'd been open, maybe someone could have diffed it …
I don't have access to a vulnerable machine -- just going by comments in the other HN thread.

root account is 'there' all the time, yes. This process enables the account proper (rather than just sudo). Evidently some remote mechanisms using root work after the account is enabled.
You can also try the Pomotodo app that is a combination of Pomodoro and Todo lists. The twist is you focus on the task in indivisible time slots which I feel really helps you stay focused. This isn't a checklist technically, more like a task list for getting the work done but it works really well for me.
Everything ends in tears when managers mix up targets/estimates with commitments
It seems apple's software has been trending down in quality since Snow Leopard.
From the headline, I would guess WD is putting a user accessible CPU in each of their disk drives, idea being that if you have a CPU living close to the drive, then e.g. map+reduce workloads can be more efficiently executed. Instead of going with ARM or Intel, I guess the CPU's are using some less famous architecture called RISC-V.

Then I read the article, and the article is so full of buzzwords and genericisms that after reading the whole thing, I don't know if this guess is correct.
> I have seen more colorable censorship from the Reddits/Googles/Twitters of the world

Obligatory XKCD: https://xkcd.com/1357/

(Yes, I'm aware that it's not that simple an issue.)
This strikes me as what Google should've done instead of AMP. (Google, can you please delete AMP now?)

I'm presuming Chrome-flavored browsers will do this at the site author's own URL, and the lite.website workaround is just so you can force-preview it. Assuming that's true, it repeats the general concept that: This is what Google should've done instead of promoting AMP.
In this very subthread, we have seasoned HNers, all of whom I've agreed with over the years of reading comments from all 3 of you. I believe you all have a sound grasp of logic, and I think there is some common ground you could all agree on. It does worry me that you all aren't having a productive discussion, and are seemingly talking past each other.

If such reasonable and knowledgeable people (as evidenced by HN history) are unwilling to drill down and establish an agreed set of fact and principles, what hope do we have at a national level?
Sure, but that has nothing to do with making a living or basic income so I fail to see the point of discussing that particular crime.

When I said "Crime is caused more by envy", I was not making an absolute statement about all kinds of crime.