skysight-inc/HackerNews huggingface dataset:
In addition to this, Mozilla is hardly the size as Microsoft or Google. A more commercially focused version of Mozilla would probably have dedicated their resources elsewhere.
That's a good point. My mother is 80 (in a few months) and it's all about life expectancy. Her mother lived to 95. She is in good health. Should she assume the best or worst case? The choice she makes will greatly effect her lifestyle.

Hard problem.
The problem with that analogy is that the probability that the "bad guys" already know about this vulnerability is vastly higher than the probability that thieves know about how well some random house in the neighborhood is secured.
https://en.wikipedia.org/wiki/Fermi_paradox#Intelligent_alie...
Ah nothing like being down voted for trying to help
These are the contents of the file, after converting them from binary plist to plain xml: https://gist.github.com/shoghicp/2b529b54b9d70daf192b68e3564...
Indeed, if you do call the cops they should be able to send someone to speak to the children to check they're OK, make sure they've not absconded or something, rather than making an incident out of it.
Yeah, confirmed it myself too. Enable root with a strong password works though.
You can also get cheating devices [1] where the edges of all the cards are printed with IR barcodes, then a special camera (concealed in a modified phone or car key fob) can tell you upcoming cards by looking at the edge of the deck.

Of course, you need to convince people to play with your deck of cards first, so you can't just walk into a casino with these things.

[1] https://www.elie.net/blog/security/fuller-house-exposing-hig...
Indeed, discovering this bug wouldn't take any security skill (I imagine it could be harmful since you might skip really dumb stuff like this) and could easily happen by accident. Responsible disclosure is standard for security researchers but I don't think this person was one, and it's not very fair to blame him for not doing it right.
Right, it's a massive assumption, although luckily one I believe to be true in my particular case.

As far as mobility goes though, I figure networking / "who you know" is always the easiest way to get a job - during or outside of recession. Point being, I don't think for most established folks it's worth relocating geographically, so we're talking about moving to somewhere nearby, at a cheaper monthly cost... Which is significantly harder if you owe more on your mortgage than your house is now worth, I guess.

Moral of the story for me here seems to be "don't buy a house that you can only barely afford", instead of "never buy a house". I'm happy living in a house at half the monthly rate I can afford, at the cost of not living in a mansion during the good times.
That this would be the prevailing understanding is exactly why a bug like this would live in the wild at all. There are plenty of other orgs out there who would have paid big money for this.
Sorry. It's such an awesome description though.
Because I don't want an ISP to decide how much to charge one service or the other, which ones should be blocked or not blocked, and which services to promote or not promote. They have a monopoly, and a conflict of interest when it comes to services they own (partly or whole).

Plus, ISPs can and do charge similar to UPS/Fedex. If you want a higher level of service, faster speed, better hardware, etc. you can pay an ISP for a business package, fiber, etc. That's similar to UPS charging for Overnight Air, 2 day, etc. But UPS can't say "Oh you're Spotify, I'll charge you more to deliver your mail." And there's also the fact that UPS, Fedex, USPS, and DHL all compete with each other, whereas ISPs have literally agreed not to compete with each other and have set up regional monopolies.
When the recovery partition got corrupted on my teenage niece's nonfunctional Win10 laptop, I fixed her computer by installing Ubuntu Mate. She's been using it for over a year now and loves it.
If a teen girl likes her Linux desktop, then things are doing pretty well.
Facebook has over 2.7 billion monthly active users [0], that's roughly over a quarter of the world's population [1]. Sure, there are fake and duplicate accounts among those, but it's still quite an impressive number and I struggle to think of anything else which has had similar reach and influence in human history.

Add to that the fact that many Facebook users don't even realize they are using the Internet, as to them Facebook is pretty much the whole Internet [2] and I fear the future might be somewhat dystopian.

[0] https://zephoria.com/top-15-valuable-facebook-statistics/

[1] http://www.worldometers.info/world-population/

[2] https://qz.com/333313/milliions-of-facebook-users-have-no-id...
Does this just mean LLVM? Because it's weird to describe it as "Apple's", Apple just uses it.
The HN title is wrong. This reportedly affects High Sierra, not Sierra.
I think the level of industry enthusiasm for RISC-V is so palpable, in part, because the messaging from day one has been unequivocally: RISC-V will be the standard ISA for every form factor, in every market.

Can't wait to put a RISC-V SBC in my ThinkPad X220 chassis. :- )
Any type of leak can contribute to this bacteria. Maybe there is some benign bacteria that was stuck on the outside from earth that will thrive in such environment
100% agreed.
Stylo is now enabled in Firefox for Android's Nightly builds. You can install Nightly from the Google Play Store to see if Stylo makes a difference for the animation problems.

https://play.google.com/store/apps/details?id=org.mozilla.fe...
I think "get it right" here is "have it work at all", not "get it fast".
It's not local if you have Remote Desktop enabled. Works over that too. From there you can enable ssh and all bets are off.
To fix this with a workaround open Terminal.app and run the command "sudo passwd" to set a password. Can't believe this is happening.
> It's been a long, difficult, wandering struggle to find a country willing to accept me for 3 years so I can get enough work experience.

Your home country?

> Work experience requirements are a veiled age limit. This is persecution of younger generations.

Hardly. It just means that someone has to have demonstrated their ability, not just acquired a piece of paper.
Isn't deleted for me.
Maybe NSA asked for an easy access. Apple is generally good at making things simple for users.
You can set a firmware password to prevent this.
Source? I've heard of iPhone vulnerabilities getting high six figures from Apple (for root access via sms). Why wouldn't Apple pay for something like this?
I like the idea behind RISC-V's open architecture but I had a question. Does it do or even try to do anything about the cloud of uncertainty surrounding Intel ME and the AMD equivalent in x86?
Still the policy makes it <date of litigation hold> minus X months, rather than everything since the creation of the company.
Wow my comment was gravely misinterpreted it seems. I was asking if Alsup could fine Uber for their bad behavior. Normally a judge would throw a person in jail for contempt but you can't do that with a corporation. You can be held in contempt regardless of the outcome of the trial- i.e., even if Uber isn't found guilty would/could Alsup still fine them for slowing the trial down?

The part that seems to have been misinterpreted was the extra comment about Waymo.
I was trying to head off the eventual comment where someone said that Waymo hadn't played 100% fairly either (it's possible, they have lawyers too). I'm not saying that Waymo is bad, I was just trying to head off someone bringing up some sort of "both sides are doing it, so why not fine both sides" argument.
I really disagree - this needs to be reported as much as possible publicly to create a huge thunderstorm of negative publicity for Apple.

This isn't the first extremely serious and dumb High Sierra password bug this year [1] [2], and unless Apple is severely hurt by it, so they're forced to change, it won't be the last. High Sierra is full of bugs and seemingly not just annoying bugs, but also security bugs.

Let's hope Apple gets sued for the damage they'll cause by including this bug in High Sierra so they make sure that next release of macOS won't be another bug filled mess.

[1] https://arstechnica.com/information-technology/2017/09/passw...

[2] https://www.macrumors.com/2017/10/05/macos-high-sierra-disk-...
Success is pretty foreign to me but I can definitely conclude that tech stack hasn't affected my rate of failure.
Does anybody have any info on how much Apple would've been likely to pay for a responsible disclosure in this case, given the scope and severity of the issue?

I'm just curious how much of a payday this guy missed out on by not disclosing responsibly.
> identity of the woman

Suspects are rarely named in Germany. Privacy and all that.
> Being smart does not necessarily make you more equipped than "dumb" (and highly motivated) people, but it does give you a decent head start.

This is absurd. Of course if you are smart, you are far better equipped. Your line of thinking promotes the idea that "anyone can work hard and achieve their dreams." We both know this is not true.
Where is Joe Random's obligation to responsibly disclose?

To whom does he owe that obligation? Apple? The public? Both? Why?
I haven't upgraded to High Sierra yet and this doesn't happen on my install atm. Does adding a password to the root user stop this vulnerability? If it does then that seems way better than disabling the account until this is fixed.
Black Box, Red Disk: How Top Secret NSA and Army Data Leaked Online
Ancient virus found hibernating in the human genome
OBVIOUSLY, if you aren't copying something AT ALL, then you can't be infringing on copyright!

I mean, okay, there's bizarro legal arguments, but their use of "obviously" is as simple as saying "it doesn't need to be stated that lending a physical book to a friend does not involve copying the book".

The fact that first-sale stuff and the DMCA itself and all sorts of weird legal issues (e.g. about plagiarism) are tied into copyright law doesn't mean that this stuff is sensible. The "obvious" part is that the core concept of copyright has, in a logical intellectual (not necessarily legal) fashion NOTHING to do with playing the same disc on two different continents. It's a fine enough use of "obviously", and they don't mean it from a legal standpoint. If you were an editor of the article, you could probably have convinced them to change the sentence to say "…obviously not a copying issue…" instead of "copyright infringement" or some other nuanced edit. This is nothing more than being super picky about the exact wording in one sentence.

> I refuse to accept that the subject of a recent split decision in the Supreme Court can fairly be defined as "obvious"

While that may be a fine enough guideline, there certainly can be judges, even on the SCOTUS, who argue against what is "obvious". But again, the sentence you object to wasn't a legal brief, it was just an attempt to express the OBVIOUS lunacy in the DVD example having anything to do with copying / copyright.

Reductio ad absurdem: if a law is passed saying that it shall be considered "homicide" if a fiction author describes a murder in a book, it would still be perfectly sensible to say, "that is obviously not homicide".

Point is: the law can be "obviously" wrong. The only weird part of their sentence is that "copyright infringement" is a legal wording, and they were using it to refer to the concept rather than the legal interpretation.
You may say so, but really the level of incompetence of not setting a password for a root account is pretty high. The fact that someone reported it in a way you don't agree with shouldn't distract you from the fact that this highlights a serious oversight.

The main question that should be asked is, how did this get overlooked? How is it that your average website has better password security than the OS of one of the richest tech companies in the world?

To be fair to Apple, Microsoft had similar issues back in the 1990s. Perhaps it takes a string of security blunders for some tech companies to take security seriously.
No I think gains this year are dominated by tyres, but that's neither here nor there - my point is that painting F1 as this anti-climate-change group is odd. As others have pointed out F1 car emissions are ridiculously low on the list of causes of climate change, but my point is more that F1 has pushed efficiency and alternate technology at the expense of a lot of pushback from fans. Of the criticisms one can make of F1 in particular, it's a pretty silly one.
This is called the fallacy of relative privation. All of the above sucks and that doesn't excuse Windows' behavior.
Audible has a Daily Deal on Meditations for $1.95.

https://www.audible.com/pd/Classics/Meditations-Audiobook/B0...
Ask HN: Are there any people living in USA without insurance?
Writing Landing Page Copy
> Well, it's been in development for at least 7 years, without any product until the url parser appeared.

This is inaccurate, the URL parser never was and still isn't in a released Firefox.

The first Rust in a released firefox was the mp4 metadata code.

It's worth noting that in those 7 years Servo advanced a lot, which meant that the Stylo project didn't have to rewrite a style system, just take an existing one and polish it. (This is still a lot of work, but not as much)
That was most definitely not the point I was trying to make, nor was it the question I asked.
Why is this so far down the front page? Are people flagging it for some reason?
So ppl in US are stuck with comcast for eternity ? Also curious what's stopping them from charging $500/month for internet.
God damn fucking loud autoplay audio warning. Motherfuckers.
I know you're already getting a torrent of anecdotes right now, but I really think it's important not to sweep this under the rug. I have a co-worker who lives in a nice suburban neighborhood and had CPS called on him because his child was allowed to play in the park across the street from his house unsupervised. His child was interviewed by a social worker, his house was searched for drugs, the contents of his fridge were evaluated, and he had to go to court. In my state, it only takes one person to call, and once that person calls, an investigation is legally required, regardless of how spurious.
I still can't believe more people complain about this being publicly disclosed than this being possible in the first place. No one is obligated to know the procedures on InfoSec 0-days and follow those steps.
okay someone tell me if i missed anything uber has done...

* trying to dredge up dirt on journalist for being negative towards the company.

* kalanik denies that an incident involving a uber driver choking a passenger ever happened.

* kalanik boasting that he should have called the company "boober" from all the women he gets

* offering customers rides with "hot chicks" in france.

* having a "god view" that employees used to spy on exes, politicians and celebrities. they paid a measly $20k fine and supposedly continue to still allow employees to use god view.

* kalanik took people out to a escort bar in south korea (on company dime)

* created a greyball program, to try and avoid authorities from getting a ride and hide their wrong doings from city officials

* had a high level uber executive go into india and get the medical records of a rape victim and held onto those records for no good reason. oh yeah he also showed those records to kalanik and another executive and wasn't fired on the spot for it. they literally didn't fire him after their initial "cleaning up" of the company until news outlets started sniffing around

* ignored california's dmv and started putting self-driving cars onto the road, one of which decided to run a red light. then tried to pass off the issue as, "human error"

* paid off hackers to delete user data. did not notify proper authorities

* sexual harassment / toxic workplace issues

---------
and now
---------

* withholding evidence from a trial

* using ephemeral messages so they dont leave a paper trail

* allegedly denied areas from service by redlining them
wow.. Github is useful. This will get him on a GOP ticket or in someones cabinet pronto
I got some injected several time when I was a kid (for angiography). As a kid, the fun part was peeing fluorescent liquid (little I knew...).
Did Windows98 even have administrator role? I mean FAT file systems don't even have file ownership right?
Responsible Disclosure is widely regarded as a good practice in these situations. Blame isn't the key issue - fixing the problem quickly and safely is. Widespread disclosure before Apple have even a chance to respond in a timely fashion is inherently unsafe.

You would hope the self-described twitter bio "Agile Software Craftsman" might have thought about this a little before tweeting.

> https://en.wikipedia.org/wiki/Responsible_disclosure
I don't think it necessarily addresses that concern, but Machine mode might be the right place to address the concerns which ME addresses on a RISC-V machine; which means that it's at least more likely that it'll be programmable on whatever machine you're looking at.

Just a thought though, it could really go any way. The nice thing though, is that you'll have more than two vendors, which means that the niche of PSP/ME paranoids may be large enough to address for a smaller designer, or through a limited run of licensed design (like SiFive's).
Maybe he didn't know about the proper procedures to handle a security vulnerability. You wouldn't have to be a security researcher to discover this bug, and I don't see any indication that he is one.
> In fact, in my experience it's not even usually possible to read material before the lecture because students are only given at best a vague idea of what specifically is coming next.

Really? That has not been my experience.

Every class I have taught had a detailed syllabus with chapter and page assignments. Generally, they were spot on until the class started getting behind.

For English classes, which book you need to have read is always listed.

Which classes would you be referring to?
Uber's network of drivers is way of providing transportation services.

They provide a particular type of transportation services, just like the cable company provides a particular type of information service. The cable company can have a monopoly even though you can still read a newspaper for information.

I understand what they are doing, i.e., their strategy. That's not the question. The question is whether or not it is or it should be legal. I honestly don't know the answer to this but there is absolutely no question they are using their size to smash their competition. They could use an alternative strategy, like the rest of us do, such as start with a smaller size and grow demand 'organically' by having a better experience than the bus, taxi, and lyft. But they have a lot of financial muscle and they are using it, for better or worse, to demolish the competition that is in place and intimidate those who are considering it. My guess is that it'll be pretty effective if they can pull it off.
My bad, I may be crossing some wires and thinking of certain trains.
Exactly early versions of Windows XP had this: They removed the Administrator user from their graphical login splash but when booted in rescue mode ("Safe mode") you could just type in "Administrator" with no password and were in. On Win98, you could just cancel the login.
You can simply set a root password with "sudo passwd" to close the hole.
By the numbers, kids see more parents nowadays, though.
One thing I've been wondering is that Stylo and Webrender can parallelize CSS and Paint, respectively, but I haven't seen any mention in Project Quantum (the project to integrate Servo components into Firefox/Gecko) of any component to parallelize layout, which is probably the biggest bottleneck on the web at the moment.

Is parallel layout something which can only be done through a full rewrite, hence with Servo, and bringing Servo up to full web compatibility, or can this be handled through the Project Quantum process, of hiving off components from Servo into Firefox?
I really like the new Fox. I’ve tried switching over completely but I think it’s causing some random BSODs on my Latitude E5570. The laptop does have a second Nvidia graphics card, for which there is no driver installed. ( don’t ask :) I’m perfectly fine with the onboard Intel and I much prefer the extra hours of battery life)
These companies have completely different operating systems, network ACLs, software update policies and subsystems that affect certain mechanical features.

By your logic, we should not fly any modern commercial or military aircraft or spacecraft, live within a certain radius of any power or hazardous chemical plant, place any dependency on any first world country's health care network, including life support, or invest in any company or stock.

Like most things in life it comes down to a security/convenience risk/benefit compromise.
Get it now and let it sit. Why would you wait until the market crashes?
Your analogy makes no sense. He's just as vulnerable as you are.
HJWYDK: The Journal Our Community Has Been Awaiting
from the only top-level comment on that video:

> That isn't a login screen for Windows 98, it's a login for Microsoft Networking (which the box shows). If you had any shared mapped drives, network privileges, etc they wouldn't work if you cancelled. If you had multiple profiles set up, you wouldn't get those either. Win98 wasn't intended to have password security.﻿
Yes, the phone has a nifty slot, and the phone detects when the stylus is removed and turns the screen on, a nice touch. Also, I think the touchscreen response might have been tuned for the stylus -- I'm not sure it will work as well with other phones (an Android music player I have doesn't detect the stylus at all).

There are other features, like a button on the stylus that the phone can detect a press of, and a small cursor that appears on the screen when the stylus is near but not touching it, but these are less important. Still, I think it's fair to say that the stylus is more useful when integrated into the design.
This is CLEARLY clickbait. Why is this on the front page of HN? It is currently ranked #7!!

Article tldr: There's bacteria on the outside of the ISS. We've found some before and this isn't new. BUT THIS TIME IT MIGHT BE ALIEN!!! Why? Well... because it COULD be.
or which students show the most potential for post-college success by the college's metrics

I think this is what they're doing, and it's really hard to do that for a 17 or 18 year old kid beyond grades, test scores, and extra-curriculars. What would you suggest?
Quack!!!
I use Waterfox every day. Mozilla may want Firefox to be a Chrome clone, but I still use my 'old fashioned' extensions and don't need new (pardon the pun) chrome all over the place.
I cannot reproduce this on Sierra or El Cap
If you urgently want Apple to fix something, you do not file quiet bug reports. Apple only responds reliably to PR storms.

This vulnerability is ridiculous, unacceptable, and braindead to execute.
Not if I use FileVault, surely?
I haven't been following the RISC-V story too closely, possibly because I didn't want to get my hopes up only to be dashed. From the article, it sounds like these cores will be developed solely for use in data storage. Can someone with more knowledge tell whether this will help provide the kind of production volume needed to make consumer products (like laptops and desktops) more likely to be viable? Are general purpose chips likely to be one result of the development of RISC-V, or have I missed something fundamental?
https://www.forbes.com/sites/bridaineparnell/2015/09/15/poop...
https://forum.freeadvice.com/juvenile-law-90/mooning-sexual-...
Doesn't work for me either on 10.12.6.
Yup, I had buddies that had camera system companies. The last recession wiped them out. I'm unsure about physical security companies.
On giving Tuesday, buy a VPS and give to open source