skysight-inc/HackerNews huggingface dataset:
It seems to me that the biggest problem highlighted by the link in parent is backwards compatibility of authentication metchanisms. OSX seems to support typical /etc/passwd hashed-user-credential authentication. However, it tries to "upgrade" that authentication mode to "shadowhash or securetoken", which appear to be two new auth schemes integrated with Open Directory.

All of those things might be fine, on their own.

However, the biggest issue is that there are now more than one primary way to get authenticated on the system. This is likely true because network accounts need to be supported in addition to local ones (I.e. apple accounts, LDAP accounts, etc.). However, my (admittedly uneducated) impression is that the systems for handling those accounts are totally separate--the part of the auth system that is swappable between shadowhash/old-school-passwd/etc. is . . . basically the whole auth system.

I'm sure that's a very quick and easy way to write authentication code, and it also preserves backwards compatibility of users doing the old method, but it seems inherently prone to more issues (even if you don't make screw-ups as obvious as this one). You have more auth stacks (and thus code) to debug in total, to say nothing of code that migrates credentials between different auth stacks.

Preserving backwards compatibility is important, to be sure, but only sometimes. This seems like a case where things would have been easily mitigated if Apple had done something like "everyone must sign in with their Apple account, now, as the sole authenticating credential for this operating system" during some OS upgrade (or "/etc/passwd no longer works; all these systems have been refactored to use a single central credential database in Keychain Services, update any code that cares since it's being aggressively deprecated", though that would probably have been both harder to implement and harder to sell to the user/developer-base). However, I'm far from an expert here, so maybe the "just expand on the existing UNIX local auth system" option is less-infeasible than it seems (linux ditched this too for network accounts, though, which doesn't give me confidence).

Either way, an old-auth-system removal like that would have crippled some of my workflows/code, and others', but it also would have allowed Apple (if they followed it up with a dead-systems-removal pass) to remove many of the then-redundant authentication systems in OSX.

TL;DR Linus isn't always right, backwards/userland compatibility shouldn't always be held paramount, especially when you're developing parallel systems for something as critical as authentication. Sometimes the pain caused by deprecation is worth the removal of a security risk.
Anyone has a good filter list to share?
>the stock market will probably be there, just not necessarily the individual stocks you are currently invested in

Part of the beauty of index investing - names can rotate in and out of your benchmark based on whatever criteria the index uses (e.g. market value) but you're not bound to a company that drops from the index (you are, however, exposed between the time it becomes ineligible and the next rebalance).
I hacked something in an hour once, and made a program that would recognize the song that was playing and played the video clip of that song from YouTube in sync:

https://www.youtube.com/watch?v=K6FxfZH_ZK4

The phone in that video is just playing a song, it doesn't have any connection to the computer at all.
"I’ve also always been suspicious of privatization schemes. That’s because I tend to think that when a service is for profit rather than for the public’s benefit, all sorts of perverse incentives arise."

Holy crap, how can anyone take this piece seriously with this zinger in the opening paragraph.

Neither private nor public are by themselves a panacea. Everything has trade-offs. This kind of polemic is not contributing to any kind of rational discourse.
Don't free and open source licenses apply only during redistribution of the software? Unless it is licensed with the Affero GPL, just connecting to a service does not require its source code to be available. That is assuming Amazon modifies the software. If they don't, then there's nothing to argue.

Are they making money with software they didn't build? Yes, but so are we.
I prefer listening to a familiar podcast to fall asleep. It's easier to do while lying down in bed and I can do it with my eyes closed, unlike TV/Netflix. The lack of visual stimulation is nice, at least for me.
A few reasons we haven't left eventbrite for our own woocommerce or other based platform for ticketing (the events calendar pro plugin has some for wordpress): check-ins for events. None of the other solutions have as streamlined of a system or as many simple embeddable integrations for the ticket sales.
Can Employee Ownership Hold Back a Tsunami of Small Business Closures?
Quantum simulators wield control over more than 50 qubits
This is the biggest problem I've faced. I can't put down Senior SE despite holding the title (which is verified by calling the company) because the technical skill expectations fluctuate MADLY across geographical areas and companies.

If you are moving from a low-skill tech area to a high-skill tech area, there's been a lot of wasted time discussing how I moved from a more "primitive" state in the US to a more "modern" one (not my words, but said directly to my face).

But I'm left holding the bag since I left that other company. And staying out of the workforce to get involved locally and learn new skills is its own risk.
I understand the article is more about feeding in mass.

However, how hard is it to eat healthy?

I don't understand why people have trouble here. It is fairly simple concept we can apply logic to:

if food is prepackaged:

if food has ingredients you can't pronounce:

bad for you

else:

probably bad for you

else:

good for you

Do I eat salads everyday? No. I get my chickens from a local farm up the road, killed the day I buy them. I fry them up with collard greens on the side. The collard greens are made from the pig I bought from the same farm and had slaughtered - its understand collard greens are made with bacon slow cooking all day.

Does everyone have access to these farms? No. Though you can still buy quality food at the super-market.

I look at people's carts, and its full of soda, chips, frozen food, Starbucks coffee cans etc... Literally none of the food requires any type of cooking - heating in the oven or microwave does not equate to cooking. Plus this stuff is not cheap, chips are $3, soda is $3 - 5 a 12 pack etc... Drink whole milk at $2 a gallon or brew ice tea at $0.50 a gallon. Buy popcorn kernels at $8 a bag (expensive from local farmer, $3-4 is more likely), melt Kerrygold butter pour over top and add salt.

If you do not know how to cook I recommend starting with 'The Essentials of Italian Cooking' by Marcella Hazan. You can make sauce and pasta (not required) from scratch in under an hour. Inexpensive, fair better tasting and healthy. Most recipes are simple and teaches you how to cook - Italian cooking at least.
> Has anybody else experienced something similar? Are we not doing SCRUM right? If so what could we change about how we practice SCRUM?

Not much to add except I've been in a similar situation and it just sucked all the fun and productivity out of coding for me. I was told what order tasks had to be done in even when it was obviously going to create merge conflicts with other developers, wasn't allowed to do a quick refactor as I went as that had to be added as a new task, had very little influence over what was to be implemented even though I had a better understanding of the risks involved as I understood the code etc.

Maybe it works when some developers need more hand holding to keep focused but I prefer being given higher level tasks, a deadline and just being left to get on with things.
A psychology professor once said to me that throughout history our theories of the mind tend to analogize the dominant research paradigm of the time. At one time it was chemistry, then physics, and now it's computer science.

I write that because it suggests that our theories of mind depend our own perspectives to a great degree - perhaps in their conclusions, or in how we describe them, or in our choice of research. (I wish I could remember the chemistry or physics analogies ATM.)
I'd love to see a write up, there are some that are well known to be lost, and plenty of stories of lost bitcoin. I'd love to a hard amount for the first and some estimates for the second.
Cells with lab-made DNA produce a new kind of protein, a ‘holy grail’
It's a database that's designed to store relationships between objects instead of just facts. It has efficient methods of following long chains of associations. So think of how you store tree structures in a relational database—there are a lot of different ways of doing it, and they're all frustrating. Storing trees is something graph databases do naturally.
I already feel like my social media and news sources are an echo chamber, especially after Brexit and Trump. I don't think its a bad thing to check out different opinions. Hell I even agree with some of the stuff there (though there is a lot more that I disagree with). It certainly helps me see the logic behind positions that I don't agree with / understand.
Then, promptly find that one nightclub in your city that forbids photos and video... you hopefully have one, and its probably a better time. :)
As per the other commenter, Cayley provides a graph data model on top of an existing storage layer.

However, when we get to manage the storage layer (Bolt, Level -- that's being generalized into local-KVs in the next release) we get to build our own indexes for better data management and performance. But there's no reason we can't hand that job off either -- hence supporting multiple (remote) backends. For the local stuff, though, at some point, Bolt is just a very good BTree implementation.
Lisp languages aren't really growing. The most hyped lisp style language is Clojure and even it isn't growing. Here's a Google trends comparison of Clojure, Clojurescript, List, Racket, and Scheme:

https://trends.google.com/trends/explore?date=2007-01-01%202...

Things aren't looking so hot for ML style languages like F#, Ocaml, and Haskell either:

https://trends.google.com/trends/explore?date=all&q=%2Fm%2F0...

The only functional programming language that is showing any real growth is Scala, but that is also modest compared to the ones that are already much bigger or growing much faster:

https://stackoverflow.blog/2017/09/06/incredible-growth-pyth...

Where functional programming is growing is in existing large OO languages. All of them now have lambdas. Most have mature immutable and composable data structure libraries. And other functional style syntaxes like pattern matching are being introduced in many of them.
Snap's game is changing from getting people in the door to keeping them inside. No longer do they need that network effect to get people in the door -- they've escaped orbit. In fact, they're probably discovering that what worked for getting people in is also driving people out, and they've probably got someone with too much influence that is unwilling to accept that churn.

Yes, they can change their design for retention; do not expect it to work.
Deep Neural Network Predicts When Patients Will Die
I don't think empty password on root is the issue here; enabling root when the user did not intend to and did not have permission to is. Isn't empty password for root a default state for systems where direct root login is not enabled? And isn't enabling root with no password the intended behavior when booting into Single User Mode?
Saw this on the Windows 10 subreddit and got a sad chuckle out of it: https://i.redd.it/dvzzftkyzyiz.png

They definitely have a more modern design language going, but they're not exactly consistent about it.
I wish the specs for the buttons were open so we could see a bunch of different devices out there. Or are they already open...?
Are these salaries reasonable? The data for Jr. Eng. suggest that only 12% of Jr. Engs. make less than $100K/yr.
Considering you can speculate on market volatility, Bitcoin doesn't seem way out of bounds.
Most drones would likely be carrying low-value items. The risk would probably not be worth it. Each time you try to nab a drone, you are exposing yourself to the risk of being arrested and prosecuted. If security is a huge concern, keep shipping high-value items by people. Program the drones to fly in unpredictable patterns, etc.
I don't think it is intended to be an in-memory upgrade but rather move the hash on disk into shadow with a new hash method. The only way to change the hash method is to create a new hash from the provided password after verifying that it matches the previous hash.

The if statement seems designed to make sure that the password matches the currently stored password before doing anything, so the question is why does it not do that. Either the function returns that it does match for some reason or the return value is tested incorrectly. Currently the article doesn't say but maybe at some point the author will track that down :).

Then the question is why it happened, which would be easier to speculate on knowing what precisely is wrong.
The Story Behind “anyone can login as root” Tweet
it's all part of the fun
Hard to say in 2017 :/

I'm of the opinion that the US is irretrievably lost in the hole of plutocracy / oligarchy. Recall during the election Donald Trump bragging he can buy politicians [1].

I'm finding "hero politicians" to be less and less common, and dare they raise their head, the establishment usually does everything in their power to mow the lawn. See - Bernie Sanders, alongside a couple other rare US Federal politicans, an actual good egg that appears to not be bought and paid for by corporate lobbyists.

There's lots of people trying to paint in black in white how obvious it is you can pay a politician to pass laws to protect you - we can go on for hours about Big Telecom minging about in local jurisdictions to prevent new providers, Big Oil essentially preventing a nuclear revolution in the USA, etc, but this site[2] paints a pretty clear picture in my opinion: Given that a corporation is expected to generate profit on dollars spent, why would BlueCross BlueShield and UnitedHealthcare be dumping money onto politicians? What reason could there possibly be other than to protect their profits?

I dunno man, other people are better than espousing the problem of money in politics than me, I just am cynical as hell after seeing time and time again obviously anti-WeThePeople votes bought for mere thousands.

So, to answer your question, in my un-professional opinion, the reason these hearings are good is they can inform the media and general public. They can get something on the record. We still reference hearings from decades ago - and can use that to apply pressure. "Senator, weren't you in x hearing, why then did you not do anything about y?" It can also inform the select few Hero politicians who can actually do good work for us with this new information - they're busy as fuck and this is one hell of a way to get data to them.

Ancillaries include giving new ammunition to Word Wars - various politicians can use buzzlines from the hearing to further their own goal, which might help us, might not, god only knows.

So my opinion, I'm glad these happen, but I think afterwards it'd be cool if people like Troy Hunt used their position to drum up donations to buy a couple of the politicians in the hearing, or at the very least throw more money at Twitter so that the Comcast and BroadBandForAmerica lobbyist propaganda promoted tweets can be buried under pro-WeThePeople material.

[1](https://www.washingtonpost.com/politics/trump-bragged-that-h...)

[2](https://www.opensecrets.org/lobby/issuesum.php?id=HCR&year=2...)
The water sitting around in the pipes is likely colder, so it might be more than just psychological 'coldness'.

On the other hand, this brings my tap water closer to drinkability in the winter, so it's not all bad!
Why "Neptune"? Having a hard time riddling that name out.
Are these salaries reasonable? The data suggests that for jr. eng., only 12% of them make less than $100K/yr.
It's strange to have something like photoshop essentially rot from the inside out. It may go down as a legendary slow train wreck of software engineering.
It is not "shorting"..
Nice, thanks. I haven't heard of this one.

My issue with Photoshop is that lately it's been really laggy with no resolution in sight after hours of trial and error. It came out of no where but now it takes 10 seconds to draw a 5 inch line with a stylus.

I'm not an artist but I do a fair bit of image editing.
Everyone is talking about WikiTribune here as if they are certain what it is, but the article really hasn't answered any of the biggest questions (how it is determined which articles are given precedence over less important ones, how easy it will be to edit an article, whether users will be investigating actively or compiling information from other sources, etc).

_It might be totally different from what any of us are envisioning at this point._
Nice. How did you recognize the song? Cross correlation or fingerprinting? How big was your song database?
Most writers for online establishments have quotas of multiple articles/day, these days. Don't blame the writer.
I understand your options are limited until AWS adds first-class PHP support but there are still plenty of superior ways you could arrange this. You're running the PHP CLI as opposed to using a persistent process daemon and speaking to it over one of the other SAPIs (e.g. FastCGI). You're also completely defeating the inherent async properties of NodeJS too by launching a synchronous PHP process, and you're completely missing the benefit of "pre-warming" servers. Only the NodeJS aspect gets to pre-warm but a PHP process must launch from cold for every single request.

340ms is not a good response time at all. You need to elevate your expectations.
Actually GPL allows you to keep your source code as long as you don’t ship the software and only allows users to use it over the network. (The full truth is a bit more nuanced.)

The newer AGPL closes this loophole.

And yes: except for Linux and the GNU tools I guess most companies stick with Apache, BSD, Eclipse and MIT licensed software.
My first two languages didn't include object orientation (QBASIC, and badly-taught "C++" that was essentially C with iostreams). From experience, OOP's an easy paradigm to learn later. Early on, you're learning functions, loops, variables, breaking problems into pieces, how to hold a useful amount of the program in your mind at once, etc.

BASIC would've been better with better explanation of how some of the keywords worked with memory segmentation. The "C++" would've been better if they actually stuck with teaching us plain C.
More true at Amazon. Amazon actually has a salary cap, and everything else is stock. Amazon pays towards a "target total comp" number, which includes vesting RSU's. They do not do bonuses.
CryptoStartup Zeus Exchange uses Chinese tech to transform shares via blockchain
More details coming tomorrow including a $29.99 at&t button. Comes with 3 years of battery.
I'm not actually confusing anything, and I don't see where your definition of "Moral evil" is coming from.I don't see why the right to self-harm is immoral. Tattoos and piercings are self-mutilation. I agree on the risk of population genetics and think that sterilization should be required before even attempting such a procedure, but that's because you're risking the well being of others, not self.
> Presumably Microsoft and Google and IBM have similar cloud offerings.

Yes, IBM has a similar product [1] along with a suite of APIs all under the "cognitive" umbrella[2].

Same [3] for Microsoft [4].

[1] https://www.ibm.com/watson/services/natural-language-classif...
[2] https://www.ibm.com/watson/developercloud/doc/index.html
[3] https://azure.microsoft.com/en-us/services/cognitive-service...
[4] https://azure.microsoft.com/en-us/services/cognitive-service...
Striking works when your employer is the one instituting harmful policies. In this case I don't think it would help the students at all.
"first party mouse and keyboard data isn't a privacy concern"

If that data can be used to infer anything about me, it certainly is a privacy concern for me.

I think of it like going to a library and instead of freely browsing through the books without being watched, instead being spied on and every book I look at and even where my gaze travels through each book's pages being monitored.

This is a paranoid's nightmare level of surveillance, and that's what we're gradually being weaned in to accepting. It certainly is a major privacy concern for me.

Ideally, the internet would have been built in such a way as to allow fully private and anonymous use, as it's really nobody's business but your own what you look at, what you're interested in, or what you read.

We've helped build the internet in to a spy's paradise, and it's really sad.
I work for Google.. Sorry to hear that your experience was poor but thanks for the candid feedback!

Is the equivalent to CloudFormation on GCP supposed to be Deployment Manager? Would you mind elaborating what could have been done better?

I work closely with them so I can at least relay the feedback. If it's easy enough maybe I'll even get to help since I am interested in working on that project =D
The most important question is the algorithm to determine what is important - since anyone can participate in WikiTribune at any level, it must be an algorithm that sets what is important. Most algorithms for this are subject to both political bias and "surprise" bias (how surprising an event is, even if it's not important in the grand scheme of things).
Or perhaps it's because the AWS re:INVENT 2017 conference is happening now and people are submitting the news as it is announced?
i.e. startups value compensation in number of power ball tickets they issue to engineers. The number of tickets is capped at 10.
This is tough. I would suggest looking through Github for some basic algotrading bot repos. This will give you a real basic foundation for strategy. Besides that, the way I learned my strategies was to sit, for hours, in front of GDAX and watch trading like television, and make all my trades manually, taking notes (incidentally, I picked up this learning method by teaching myself networking by sitting and watching tcpdump and later Ethereal/Wireshark). Once I'd developed a fairly straightforward trading strategy, I implemented it. From there, it was just iterative until I had something I felt could trade unsupervised. I still am fairly OCD about checking in on it when it's trading lots of money. Your strategy will change in interesting ways as you scale up the amount you are trading: Being an invisible small fish is pretty easy, but once you start having an effect on the price -- even in small ways, like some kind of "less small fish" -- you'll find that it also affects other traders (read: bots). Manipulating other bots is what a significant proportion of cryptocurrency trading strategies seems to be a fairly popular thing to do.
Or, "Why Public Disclosure Beats 'Responsible' Disclosure (at Least Sometimes)"
Exactly, testing the UI may be hard, but whatever API that UI is calling is amazingly horribly broken.