skysight-inc/HackerNews huggingface dataset:
> They borrowed Apple’s C++ compiler backend, which lets Rust match C++ in speed without reimplementing decades of platform-specific code generation optimizations.

This was a pretty smart move by the Rust team, and this gave them a rock solid platform to go cross-platform. In words of Newton, "If I have seen further it is by standing on the shoulders of giants". Kudos team Rust, and let's hope they eat C++'s lunch soon.
if you disable the root account you can log in again without a password, even when you set one.
What parts of FF 57 are written in Rust? Just Stylo?

Edit: I don't intend for this to sound like I'm complaining, just interested.
It took 3 tries for me and then it worked.
None of which invalidates my points, which was with regards to corporate competition.

It furthers the whole concept of DRM, but as a standard open to any party, thus not really damaging competition on the scale of companies like Netflix, that if anything helps the next company to come along and wish to replicate the Netflix streaming experience, because Netflix "has" to share that baseline DRM standard with them (otherwise W3C wouldn't have endorsed it and browsers wouldn't support it).

Yes, DRM is used to abusively undermine the legal rights of users, but that doesn't stop competition for those users, and supposedly in a fair market the least abusive company you'd hope might be able to market a better value proposition. A DRM standard doesn't stop companies from being less abusive and using that as competitive leverage, even if it arguably furthers, or at least favors, the baseline amount of abusive behavior amongst that corporate ecosystem.
This makes sense. I would much rather have less and more positive interactions with my parents than more or more stressful ones. Some people seem to have a "my parent was never around" complex but that usually seems to involve some combination of 1. Parent completely absent, not home at night, not reliable or away for extended periods working or 2. Parent missing key, meaningful events like the "dance recital" trope or 3. Parent outsources parenting to nanny and doesn't really monitor outcomes. If you are there for the important things, when you say you will be, and home for dinner (present, not just emailing on your phone) as often as you can be, that seems to matter more than working part time or other modern and progressive interpretations of being an engaged parent and with your kids.
I mean, I only tried 15 times, I don't know if that counts as "several" but this doesn't work for me.

It looks to me like my root user is disabled.

When I type "root" into the username field and click unlock (in System Preferences > Users & Groups) "root" is replaced with my username and the dialog shakes... I have to type root in each time, but it never unlocks. 10.13.1

Edit: trying it after logging out keeps "root" in the username field, but never logs me in... tried 20+ times
> I’m curious what you mean by “not well-ordered”?

Just that researchers aren't better/smarter/etc. than engineers and vice versa. They are different jobs, both essential in their own way, both difficult in their own way.

> Sorry for the misunderstanding.

No worries! :)
Once you disable the root account you can log in without a password again :/
I used Waterfox long time ago, as a fast 64bit alternative to Firefox (although never noticed a significant speed difference). Now I think the only reason I'd still use it is because add-ons such as Vimperator, but I already switched to the less powerful Vim-fx.

I love the idea that projects such as this one or Pale Moon exist, but I find it hard for me to use them as a regular user, apart from sentimental reasons.
I think Mark Cuban also said he keeps a lot of his money as cash for buying opportunies.
The bug enables the root user, so leaving it disabled won't save you. Set a password for root, then you should be good to go.
There is also Gotenna [1] and numerous projects mentioned on Wikipedia mesh networking pages [2, 3]

This would be a perfect application for "Shadow Dance" - a long shot project to create futuristic festivals inside the shadow path of total solar eclipses including multimillion person human chains (see the technical proposal - particuarly page 7 - [4]). The idea came too late for the August eclipse but our group is planning and hoping for the Mexico US Canada eclipse in 2024 - (the website and the proposal is in the process of being rewritten accordngly)

1 https://en.wikipedia.org/wiki/GoTenna
2 https://en.wikipedia.org/wiki/Mesh_networking
3 https://en.wikipedia.org/wiki/Wireless_mesh_network
4 https://drive.google.com/file/d/0B5eQ1ipl4xCDQVF6ajVNalg3Wjg...
Yeh, except for the millions of MacOS users out there, like my parents who don't read Twitter, or HN or any of the other sites people think that everyone stays up on. They are the targets.
And 30 seconds later, we will have remote hacks for the card printers.
Valid point, and something I considered initially. However we've a security startup – the likelihood hood of us getting a huge wave of visitors, the hug of death, is highly unlikely. Our landing page is static & anything remotely intensive requires an account. We are more likely to be hit by a DDoS, which I would hate to consume by upscaling servers and burning any potential profits we have.

Additionally, I have multiple alerts setup for any signs of downtime, so that any deployment can be invoked as soon as possible.

However, I completely understand your perspective, and if this was a different type of startup or industry, I would probably implement it the way you mentioned.
SPtech
Ask HN: Does your iPhone's hotspot stay on?
So while back for Thanksgiving I have noticed that my dad's hot spot was always on. Him having an iPhone. I told him so he opened up his settings and it said off. But as soon as he'd open his settings I'd be disconnected. Then as soon as he left the settings and went to the home screen I could reconnect and it'd give him the little blue notification. After playing around with this for about ten minutes it stopped reproducing.

We were using his iPhone and his macbook. Has this glitch happened to anyone else?
Until this is fixed it's probably better to use Directory Utility to enable root with a strong password.

/System/Library/CoreServices/Applications/Directory Utility.app

Edit > Change Root Password
That's not how responsible disclosure works.
I am extremely doubtful of this future. A big part of the reason we are considering soft robots today is safety, that if the robot hits a human it won't hurt them. If we can make robots smart enough that they never hit humans this is no longer a problem. Another reason is making things compliant so that we can grip objects because we have yet to figure out grasping. If we solve grasping, we no longer need compliant grippers.

In addition, pneumatics which this work focused on, are probably not the future. Pneumatics are not that efficient, are noisy, and are limited by the compressibility of air. The compressibility of air limits how fast these devices can actuate, their stiffness, and even how efficient pneumatic systems can get. Efficiency alone might be enough to encourage future robot makers to use something else.

Stiffness is another compelling argument against both pneumatic robots and soft robots. The max rate at which a robot can do stuff and react to things is dictated by its resonant frequency and mass. Sure we can make our robot very light, but we aren't going to be able to change the mass of things we desire the robot to manipulate. So it is still desirable to have robots with higher stiffness.

Really, a number of different technologies could make this obsolete within 50 years. For example, electric artificial muscles, slightly better rotary electric actuators along with rapid robotic assembly enabling stuff to have huge number of moving parts, or even advanced nanotechnology.
> Also, if all of your income comes from dividends, you have to be able to handle considerable volatility, even across the whole market. At least 2x. That's not acceptable as a basic income scheme. People will starve.

Good point -- but if this became a significant problem, then one could imagine purchasing a hedging service to smooth out the peaks and troughs. That would have to be considered when fleshing out this portion of the OP:

> We’d also need to figure out rules about transferability and borrowing against this equity.
The root user is disabled on macOS by default.

Apparently trying to use it the admin prompt enables (creates?) the root user with an empty password. It does not seem to disable the root account afterwards, either.

Current workaround is enabling the root user [0] and change the password:

$ sudo -s passwd

0: https://support.apple.com/en-us/HT204012#enable
Yep. If you keep it enabled and set a good password then you should be OK. I think.
Good thing I haven't updated yet. I wonder how many machines are vulnerable?
Was able to reproduce on my machine. macOS High Sierra 10.13 (17A405)

This is incredible.
To workaround this before Apple have had a chance to patch it(thanks @lemiorhan), it seems you can:

- Open Directory Utility (/System/Library/CoreServices/Applications/Directory Utility.app)

- Authenticate with the lock icon

- From the Edit menu you can enable the root user and set a proper password (it would already be enabled if you had tried out the exploit)

Having that root user enabled isn't great overall, so it would be best to set a reminder to disable it using the same Directory Utility app once the security hole is patched.
Mono? https://www.healthline.com/health/mononucleosis
Exactly my thoughts. I remember this, I think even early versions of WinXP had this feature.
By default no as most people expect things to keep running when they lock their laptop.

There is a setting to immediately destroy the key when the laptop sleeps. It might be outdated but [1] should give you a starting point for setting it up.

[1] http://mattwashchuk.com/articles/2016/01/08/maximizing-filev...
Still... you really need a directional detector to make use of this.
Weak memory isn't related to weak pointers. What you're referring to is actually pretty easy to deal with (well, not easy, it's pretty tedious to prove in most of the individual cases, but it's not conceptually difficult). Weak memory refers to atomic operations with weak consistency (like relaxed, release-acquire, and perhaps most confoundingly consume). Modeling them along with lifetimes and ownership tracking requires a fairly sophisticated language model with lots of intermediate tokens and ghost state, which would be a tremendous burden to include in a programming language. Fortunately, it looks like most features of safe Rust extend straightforwardly to weak memory models, but that isn't always the case for unsafe Rust.
Ill give you that the latest version of office is an improvement you can go beyond 56K rows in excel now! but its still not as good as the real thing.
They are doing A/B tests on something like that, right?
Finally! Nice to see some innovation on the Windows desktop (although, as others have noticed, MS moved only after Apple added per-app tabs first).

I like that it (seemingly) can group related documents from different applications - like I can switch between vi and a command line in tmux with Ctrl+a,a. Why couldn't I do the same with graphical applications?

Interestingly, the GNOME 2 human interface guidelines recommended way back that you shouldn't use tabs in your application, because it was expected that the window manager will "soon" get native tabs.
Is http://hckrnews.com/ buckling from the tremendous traffic this issue generates?
Mine is currently enabled and since i've set a password, the bug seems to be gone. I can't authenticate by just typing root anymore.
Apple doesn't pay bounties for this sort of report, even if direct to their team. They have a private bounty program, for a select few.
I believe hitting "cancel" was enough. https://www.youtube.com/watch?v=DE5PRW-AR7Q

Also reminds me of https://youtu.be/BVL8_ne4WZo?t=19s
FocusTime lets you block sites and mobile notifications at pre-scheduled times
We’re getting it. We’re just not agreeing with you. One does not have to be a libertarian (and I’m not) to understand libertarianism (and I do).
https://techcrunch.com/2013/08/20/groklaw-shuts-down-as-the-...

https://www.csoonline.com/article/2133906/privacy/groklaw-sh...

http://www.zdnet.com/article/privacy-concerns-cause-pj-to-cl...
I use org-mode, of course. But more specifically, I wrote this little extension called org-journal [1], which auto-creates one org-file per day, is searchable, integrates with the Emacs calendar, and crucially, carries TODO items from the previous day to the current day.

This way, all my research notes, and my diary, and completed projects stays in the journal, but pending or ongoing tasks travel with me through time until they are done.

[1]: https://github.com/bastibe/org-journal
Is it likely it's just an error due to the discoverer not being immersed in the Infosec space? "Don't disclose a 0-day publicly" is good 'common' sense, but only among the 'common' of people who are steeped in security issues and the ramifications of publicizing them.
Well, it's been in development for at least 7 years, without any product until the url parser appeared. That's far greater of an investment with no return than I've seen at any software enterprise outside of Google X, Microsoft Research, and Intel's various funding efforts, and each of those arguably have had more projects cut off before they return than they have had projects that succeeded in generating some return.

Enterprises tend to invest in <5 year projects, I've noted, and 5 years is a hell of a long time for an extended investment.
Only if I hit the lock button twice -- once locks, twice gives the horn beep as a "confirmation" (Ford seems to have really figured it out on this car model). But I can hear the mechanical lock activate from just hitting it once. Oh, and the door also has two buttons, one for lock, the other unlock. Never seen a car door with only one button that toggles.

This is one of those cases where I wish all products had open firmware, so that you can install a best-of-breed user interface on all cars (not to mention, have my car fob also work on multiple cars from different manufactures, and also on the my house door lock).
There must be some kind of scale 1-10 of how serious the issue is. This one goes up to 11 as hilarious, not sure if proper reporting ethics apply here anymore.
Stylo is the biggest and most significant thing; there are some smaller bits (a media parser, and something else?) included before 57.
This was what I exactly predicted one year ago. Risk-V ISA is coming for all of them{x86,arm,mips}.

And this is very smart move by WD to jump into Risk-V wagon.

Update: Why do people downvote? I honestly don’t understand.
Rebuking Uber Lawyers, Judge Delays Trade Secrets Trial
While this true, please keep in mind that rebooting your Mac into single user mode also allows anybody to login as root
How do they support the rationale that rent-seeking is enabled by "regulatory restrictions" and not the near-impossibility of competing with a pile of capital several orders of magnitude larger than yours?
And a lot more expensive in a bang for buck way.
I get it, I really do, but it's not like he was complaining about a bad Uber driver. Disclosure in this way has real-world impacts up to and including harming people and we shouldn't ever consider it as something which is remotely acceptable. Is it acceptable to publicly disclose that an airport has a self-destruct switch which can be accessed near the NW mens bathroom? No. You contact someone who can fix the problem, then publicly disclose.
It's gratifying to see how successfully the same organization has learned from the debacle that was the rewrite from Netscape 4 to Mozilla in the first place. That time, they didn't release for years, losing market share and ceding the web to Internet Explorer for the next decade. Joel Spolsky wrote multiple articles[1][2] pointing out their folly.

This time, their "multiple-moonshot effort" is paying off big-time because they're doing it incrementally. Kudos!

[1] https://www.joelonsoftware.com/2000/04/06/things-you-should-...

[2] https://www.joelonsoftware.com/2000/11/20/netscape-goes-bonk...
Especially not good is Apple likely won't fix it in El Cap. They'll tell all of us to upgrade. I don't want that buggy HS mess.
"Oh man who snuck in and welded the thing shut and buried it under 5 feet of concrete? What are the odds?"
Why Europa? Why would you want to introduce a foreign bacteria that could potentially wipe out any possible life there? Why is spreading life important?
Stylo is new in Firefox 57, but Mozilla has shipped other Rust code in earlier Firefox versions:

https://wiki.mozilla.org/Oxidation#Rust_components_in_Firefo...

Completed:

MP4 metadata parser (Firefox 48)
Replace uconv with encoding-rs (Firefox 56)
U2F HID backend (Firefox 57)

In progress:

URL parser
WebM demuxer
WebRender (from Servo)
Audio remoting for Linux
SDP parsing in WebRTC (aiming for Firefox 59)
Linebreaking with xi-unicode
Optimizing WebVM compiler backend: cretonne
Apple has a serious software quality problem. Last night I was helping a friend with their computer. Safari couldn't even render apples website correctly. Nor could Safari connect to any site with HTTPS. Installed FireFox and HTTPS sites worked and apples's site renders. But the submit button on their developer site is broken[1]. Mail on my Mom's fully updated laptop crashes every time it's opened. Once I reported a bug in ptrace like 4 years ago and no response yet. Also the archive utility fails often to extract tar files that the tar command has no problem extracting at all. Quicktime can't play most videos, etc, etc. And now shipping an operating system with a root account with no password by default.

Come on Apple you have a quarter trillion dollars in the bank why don't you spend some on improving your software.

[1]: https://forums.developer.apple.com/thread/60763
The fear is not of bugs killing people. The fear is of bugs allowing people to kill people.

If ISIS was able to hack a major fleet through one such bug, do you think for a single moment they wouldn't make use of it to kill many people?
As opposed to all the American spy... analytics companies?
Can't repro on a 2012 retina MBP running 10.13.1, attempting the original repro and others suggested here. Until the wife walks away from hers, it's the only machine I have available. I'm curious as to the difference, given the high number of repros.
If you leave keys in other people's doors all over the neighbourhood, I damn well have a rigtht, and possibly an obligation, to make it publicly known that such a thing is taking place. So that everyone may take their own precautions.
This is comical at this point. I have no idea how such vulnerable software makes it to production.

It is really ironic that a company, making billions of dollars and branding itself as the leaders of quality, stability and so on, to have this kind of vulnerability.

I have truly lost faith in Apple.
Cape Film Releases Today: “Sarah Niemand and the Women of Buffelsjag”
... And means that others can utilize this to cause damage.

The idea of responsible disclosure is to minimize harm for you, the user. Not to minimize bad publicity.
> Contabulo is Coming Soon

> We’re currently working hard on getting Contabulo ready and hope to launch a beta in the very near future.

That's probably killing you. My advice would be to get rid of that immediately.

It sounds like in general you need to reprioritize and refocus. You use the words "SaaS product," "project," "creative outlet," and "this thing" to describe your efforts thus far. "Things" don't make money, businesses do. You need to stop being an engineer building a product and start building a business if you actually intend to generate income from this endeavor. To that end, I suggest a few immediate actions:

- Give users the ability to sign up and pay you money. If users can't pay you, you'll never make a dime. Stop worrying about architecture or feature development or closed betas and focus 100% on attracting and retaining high-quality customers. Don't do any further development beyond bug fixes until you have paying customers and can articulate why additional features will drive growth.

- Consider offering a free trial to get "testers" instead of a beta (but don't call them that). The free trial will allow you to collect feedback from real customers without establishing an ongoing expectation of free or reduced cost that can kill long-term revenue. In general, startups price too low. Read a few articles like https://www.joelonsoftware.com/2004/12/15/camels-and-rubber-... and https://www.sequoiacap.com/article/pricing-your-product/

- Spend a lot more time & effort on your branding/marketing. In particular, your site currently shows two screenshots that look quite similar to Trello + photo attachments, and has a bland tagline of "Organize. Collaborate. Get stuff done." Differentiate yourself from potential competitors and clearly communicate value. Also, minor nit but there's no reason a static landing page should show a loading bar before revealing the content. That alone is going to cost you real $$$ in page bounces.
A classic example would be Erlang, which was developed at Ericsson for use in telephone exchanges.
How Many Decimals of Pi Do We Really Need? (2016)
Major MacOS High Sierra Bug Allows Full Admin Access Without Password
Astonishing OS X bug lets anyone log into a High Sierra machine
> without giving too much away

I don't really understand this attitude. Why are you keeping this a secret? Aren't you trying to sell your app/service? That seems hard if you're not willing to tell people what it is/does.
WeWork buys Meetup for $200M
But someone at Apple got their bonus for shipping the animated poop icon in time for this release.
> For example, register allocation is a tedious process that bedeviled assembly programmers, whereas higher-level languages like C++ handle it automatically and get it right every single time.

Ideal register allocation is NP-complete, so a compiler can't get it right every single time.

I'm not sure how good in practice modern compilers are at this, but would be curious to know if there's some asm writers who can actually consistently outperform them.
So what if your OS calls its maker with anonymized data telling them what parts are being used and what parts are causing issues?

Name one big, successful project which doesn’t do this.
Main thread: https://news.ycombinator.com/item?id=15800676
Install a program like Fiddler and watch the call-homes roll in. It's truly amazing how many request are made while the computer is ostensibly doing nothing.
Wrong. This is Apple -- not the homeowners -- leaving everyone's key in everyone's door without them knowing.
I would add that the the client was not in fact protected. Netflix might be protected from legal action, but the reputation damage here all accrues to Netflix.
You can read the post at the top of groklaw.net still, in case that ever changes (unlikely) here is a perma link [0]

Basically the author decided that she would rather disconnect from the internet than be spied on.

[0] http://www.groklaw.net/article.php?story=20130818120421175
> the employer is very interesting...

Then go apply direct to the employer firm or better still find a way to network and get referred in.

Frankly, a US company using an off-shore, low-cost resource for recruiting is a red flag.
Who needs security when we have animoji!
I'd advice to have at least a brief look at MATE, since its whole point is to maintain the Gnome 2 feel. They're also receiving truckloads of money, so there's lots of manpower behind, but the most interesting thing is that they took the opposite direction of Gnome 3 - they're giving a lot of flexibility to the users (see all the panel options at https://ubuntu-mate.org/blog/ubuntu-mate-artful-final-releas...).
To this point, Elixir is just an OTP Application that gets started by the BEAM.
though, I can't remember what thread it was in, I saw this happen yesterday too.