skysight-inc/HackerNews huggingface dataset:
While this will undoubtedly make a lot of people's lives easier, I'm a bit hesitant to use SAML just yet.

SAML is still relatively new, isn't very widely used (AFAICT), and I'm not sure how much security research has been done on the topic thus far.

To illustrate, just a few weeks ago there was "a new attack vector discovered that ... enables an attacker to create a ... forged SAML 'authentication object', and authenticate across every service that uses SAML 2.0 protocol ..." [0].

> In a golden SAML attack, attackers can gain access to any application that supports SAML authentication (e.g. Azure, AWS, vSphere, etc.) with any privileges they desire and be any user on the targeted application (even one that is non-existent in the application in some cases).

Vulnerabilities like this one really do give up the proverbial "keys to the kingdom" and provide an attacker with pretty much everything they need to really ruin your day.

Now, this particular attack isn't real practical as it requires things like the "token-signing private key". You don't need domain admin although you do need access to the ADFS account and if an attacker has access to that, well, you're probably already screwed (or well on your way). The point is that SAML is still shiny and new and there will almost certainly be additional flaws found in the future -- flaws which may very well compromise you completely.

It's certainly a nice solution to a big problem and, as I said, will make a lot of people's lives easier. I'm just not yet ready to trust it 100%.

Edit: To prevent a dozen more "2005!?" comments, I mentioned this in a reply:

> True, but it's still relatively new to most people, similar to how IPv6 has been around for a few decades but is still "new" to many.

The spec has been around for a while. Common deployments -- outside of AWS, MS, RH, etc., haven't (unless I've just been unaware of them).

[0]: https://www.cyberark.com/threat-research-blog/golden-saml-ne...
When I last needed something similar, I wrote it like

not command test -f $dest
if or command test $src -nt $dest
# do something
end

It saves on the begin ... end, but is confusing to look at. Nested conditions are really not very ergonomic in fish.
He can easily find this out by creating a single account
Why do the routers involve themselves at the transport layer? Can't they just route IP packets and leave the transport alone?

Firewalls -- whose firewalls are we talking about here? If a client (say, home user) tries to initiate an SCTP connection to a server somewhere, what step will fail?
Tesla? No different then PPA rooftop offerings. Also sidesteps bondholder claims if you go straight to customers.
The base iMac Pro configuration is 32 Gigs RAM, and 1 TB SSD.

The cheapest 5K iMac with that configuration costs $3,100.

Try harder to make your arguments coherent.
Unfortunately TermKit is effectively dead, with the last commit being almost 6 years ago - https://github.com/unconed/TermKit
There’s little real impetus to change widely-used protocols. Job security, product/support sales and developer “consumerism” novelty aren’t valid reasons, but often get pushed with spurious “reasons” to fulfill agendas, despite their cost.

The only demonstrable needs are bugfixes and significant advances because inventing and imposing complexity in all implementations or damaging backwards compatibility are insanely costly in terms of retooling, redeployment, customer interruptions, advertising, learning curve, interop bugs and attack surfaces.
Related: xonsh (http://xonsh.org)

It's a Python-based shell that attempts to be somewhat bash-compatible (for ease of use over, e.g., IPython). Instead of making a new scripting language (fish), go all in.

Pros: scripting is amazing.
( while True: ls ~ )
Cons: can be a bit slow (because Python interpreter).
Flask 101: Getting Started
It's true fish is generally more verbose, as it has less magical syntax. fish is also missing some niceties like `set -e` and `set -x` which we would like to add, but the main focus is interactive use.

Happily the begin/ends in ifs are no longer necessary:

if not command test -f $dest
or command test $src -nt $dest
# stuff
end

In this particular case, you can simplify it further with test's operators:

if command [ ! -f $dest -o $src -nt $dest ]
#stuff
end

which is comparable in length to bash, though other cases will certainly be longer.
You are right. There is an impassable abyss. I will never agree with anyone who believes that good error messages, analysis tools, or debuggers are not worth having.
Rethinking Web Browsers and Bookmarking
What he's saying is that Amazon's retail customer/orders/invoices databases run on Oracle databases. And the finance department is using Oracle Financials. (source: worked at Amazon, long time ago though).
Their goal was to produce chips. Then the America Invents Act was signed and they were forced to become much more patent-focused in the short term or forever abandon any hope of patent protection for their works.
Same thing for St. Thomas or St. John. Its not like these places are coaling stations in a Mahan Navy, so what is the value here?
most general purpose calculator in one place
Manfred taught me mathematical logic back in the mid 90s. It was only much later browsing functional programming topics that I discovered his language and that he had passed away.

RIP.
Webpack is a dependency-wrangler. If you're using it as a task-runner like Gulp, you may not need it at all.

Personally I use then together - Gulp runs the tasks, one of which is bundling, which gets done by webpack. Of the two gulp was way harder to get working, for me at least.
So somebody else would have found the stolen gun on the sidewalk.
> … clearly they now also should be using similar techniques to stop people from sending email about drug paraphernalia, and they should stop people from sending email with hate speech, and they should stop sending email about terrorism. They also should, of course, stop people from sending email about software piracy, or sending email about services designed to undermine copyright like SciHub, or sending email advertising "obscene" pornography.

Those things are all forms of content. Phishing is a form of fraud. Cloudflare is preventing criminals from using their infrastructure to do actual crime, as opposed to blocking content that someone might consider criminal in itself.
By wanting to learn Angular you're definitely riding against the ecosystem, as shown in the post, see: http://stateofjs.com/2017/front-end/results and note that most do not want to use it/or have used it and would not use it again. (Myself I am in the would not use it again camp). What makes you interested in Angular as opposed to other front end frameworks?
You realize non US citizens are still people, right?
The best way to break the internet has already been done. It was when the CEO of CloudFlare proved that he had the ability to remove a site from the internet, simply because he didn't like it. When he did a lot of people applauded it by saying "but they are Nazis" - which is true - but isn't a defense of what he did.

Net Neutrality is dead - either by the FCC mandating it, or by Silicon Valley choosing which viewpoints are "allowed" within their walled gardens, which are quickly taking up more and more of the internet.
UFC 219 test run for AI-inspired glove sensors approved
Προβλέψεις στοίχημα στις εμβόλιμες αγωνιστικές
This is my belief too. I think if you can buy and hold for the next 5 years or so, massive volatility doesn't affect you. Volatility affects the day traders and the like.

To draw a parallel to the stock market is not appropriate, but those who bought into MSFT or AMZN even during the peak of the dot com bubble have nothing to regret today.
Mayor Garcetti has been very soft on the homeless and refused to enforce laws targeted at these encampments:

http://www.latimes.com/local/lanow/la-me-ln-garcetti-homeles...
> major tech companies

The shoestring startups are the ones that will be hurt, not deep pocketed tech
companies.

Major tech companies already live in an environment of parasites that sue them daily like non-practicing entities + patent infringements. This will just become another "fee" they pay.

Plus, Ajit Pai has already been seated as FCC commissioner. He already has a Republican majority on the commission. It's basically a foregone conclusion and lobbying Congress now is too little too late. If tech companies with clout were going to do this, they would have done it years ago.
> You take a Redshift workload and you run it on Oracle, it’s 15 times faster.

I thought no one could run Oracle benchmarks because they were against the TOS. Oh wait, Ellison can... I'm pretty sure his benchmarks are not really unbiased.
TP-Link firmware sends six DNS requests and one NTP query every 5 seconds
BTC will supplement gold for value storage and will hit a $5T market cap in a few years IMO. It certainly has utility for storing and moving value. Don't underestimate that.
The real reason behind the LTC run (theory)
I have been following the crypto space closely for the past few months.

Why did LTC and ETH pop today? People are saying it's because they are on Coinbase and cheaper coins - which might very well be true and potential catalyst. But there is another theory of how it all started:

Bitfinex, one of the biggest exchanges in terms of volume, created a crypto currency called USD Tether tokens - a currency that supposedly is pinned to the US Dollar and backed by fiat. This USDT is the trading pair (instead of USD) against BTC, ETH, LTC et al -- as a way to trade faster and get in/out of positions more easily.

Bitfinex has recently been accused (by twitter user @bitfinexed amongst others) to have lost their fiat banking partner several months ago, covered it up while being unsuccessful in finding a new one, and in the meantime been printing and wash trading USDTether tokens on multiple exchanges to drive up the price of bitcoin to cover their losses.

When these news started to create FUD in the crypto space last week, people wanted to get the hell off the exchange as fast as possible.

Now, coincidentally, as the CryptoKitten game was clogging up the ETH network and BTC being clogged by the massive influx of new users, withdrawal in those currencies would take days or hours.

So people started to post on Reddit and advising people to convert all holdings to LTC if they wanted to get it off Bitfinex, since the LTC network was working properly and transactions only took a few minutes.

Now combine this with some marketing appearances by the LTC founder on CNBC, and people started to chase the bull run.

I got lucky and had some LTC today simply because I didn't want my holdings to turn into ashes if Bitfinex would go down in a Mt. Gox like fire.

If these news about Bitfinex turns out to be true, the Bitcoin bubble might pop sooner than later.
What does Idaho provide? Rhode Island? What about the other states and territories that aren't the GDP powerhouses California, Texas, and New York?

They're U.S. citizens and have constitutional rights, so the economic value of their existence doesn't matter.
You're a smart guy, solve it.
The Ripple coffee art printer better watch out, scientists are getting closer to 3D printing the “perfect” latte. ;)
It's also depriving the inventors of their return for their excellent invention and the quantity of R&D that went into making it.
You might want to double check those facts. There are probably billions of SAML users.

Any significant O365 implementation is using SAML. Any SaaS that allows enterprise login is using SAML. If you do business with Spectrum, you are using SAML when you login. If you interact with most government agencies, you are using SAML.

That’s not to say that it does not have risk, but adoption is not an issue!
>What story is that? Google didn't return anything.

I'm not able to find a definitive source, but it could be the following, which I have also heard from a retired BT employee:

"It's common practice in England to ring a telephone by sending extra voltage across one side of the two wire circuit and ground (earth in England). When the subscriber answers the phone, it switches to the
two wire circuit for the conversation. This method allows two parties on the same line to be signaled without disturbing each other.

Anyway, an elderly lady with several pets called to say that her telephone failed to ring when her friends called; and that on the few occasions when it did ring her dog always barked first. The telephone repairman proceeded to the scene, curious to see this psychic dog.

He climbed a nearby telephone pole, hooked in his test set, and dialed the subscriber's house. The phone didn't ring. He tried again. The dog barked loudly, followed by a ringing telephone.

Climbing down from the pole, the telephone repairman found:

a. The dog was tied to the telephone system's ground post via an iron chain and collar.

b. The dog was receiving 90 volts of signaling current.

c. After several such jolts, the dog would start barking and urinating on the ground.

d. The wet ground now completed the circuit and the phone would ring."
But wouldn't that use case be best solved by your router, giving priority to some kind of traffic instead of other? (most routers come with QoS, which is exactly that)

Why is it better to give all the power to the ISP? You're losing your ability to choose if what you need isn't included in a pack.
Switzerland Is Prepared for Civilizational Collapse – Marginal REVOLUTION
I'm surprised that the article doesn't mention purple, a color that isn't part of the visible spectrum. It's a mixture of blue and red.
The text has pretty bad contrast.
The Universal Health Network of hospitals in Ontario have recently started using an online portal as well - the interface is a little intuitive but it's so much better than the alternative
I thought it was to bring the monitor to eye level.
Right. The people behind it also wanted to create a "Hill Street Blues" for scifi. They also combined "Lord of the Rings", with each episode being a chapter. This explains Garabaldi's drinking problems, the head doctor getting addicted to drugs, Z'ha'dum, the Rangers, and the ancient races going beyond the galactic rim leaving the younger races to develop.
Here's my rather crude understanding of what QC can do (please feel free to comment if this is correct): Let's say you have a problem that requires examining 2^N different possibilities. So the brute force solution would have O(2^N) runtime. QC can potentially help to solve this problem in O(2^(sqrt(N))) time instead. This can make a world of difference. For example, if N=1024 and examining each possibility took 1 nanosecond, it would still exceed the time far far more than age of universe. With QC with 1024 qubits, it would take 1 microsecond to solve it.
Swartz had multiple channels of activism[1]. His participation in galvanizing the public against SOPA was to further a free and open internet.

[1] https://en.wikipedia.org/wiki/Aaron_Swartz#Activism
Not gonna be all that lean with all the build tools and whatnot. And isn't all that practical without package management.

Linux kernel + busybox + few unit scripts == lean

But, you know, to each their own -- don't get me wrong, I really enjoyed tinkering with LFS back in the day.
They were interested/excited by it, but didn't fully get it. The internet was just then replacing walled gardens like aol and prodigy.

Most people used dial-up for many years, and that sort of piggy-backed on the common-carrier status of the landline phone companies. So there was plenty of competition there. Cable internet providers were new around that time, and competing with cheap and good-enough dial-up and roughly-equivalent DSL (which could deliver service from a third party, somewhat like dial-up, e.g. earthlink). So the idea of only having one fast-enough option for internet in your town was novel.

Further, there were far fewer paid online services. So there wasn't an ecosystem to support partnership/promotions/schemes like today.
So what? Do you know how many times disdain and lack of care for 'flyover states' has gone unanswered?
Sounds like a special remote video collab for YouTuber Bjørn in Norway to don racecar protective gear and try to break an X using Autopilot.
While there are a thousand reasons to hate SAML, your concerns are not accurate.

1. I guess "relatively new" is a vague term, but SAML v2.0 (the current version) was standardised in March 2005 - it's now 12.5 years old, I don't call that new.

2. SAML is very widely used in certain segments. Every SSO product supports SAML, including cloud vendors like Azure, Google and now AWS, and also specialist vendors like Okta and OneLogin. Within the dreaded "enterprise" space, SAML is absolutely the #1 SSO technology in play.

3. The golden SAML attack is a load of crap. It basically says "If you can get the private keys of an identity provider, then you can impersonate that identity provider". Yes, SAML relies on the confidentiality of the signing keys. That "attack" is the equivalent of saying Linux security is broken because if you have the root password you can modify any file.
Just me or is the layout messed up on iPhone? Can't see left half of routines.
Fair points.

After thinking about this more, I find myself agreeing that in terms of beginner friendliness, the combination of incredible name confusion and the relative paucity of use cases where it’s necessary make the staging area an interesting area for significant change in the git defaults.
Last I checked, access to electrical power was not a constitutional right, so I'm not sure why you are bringing that up.
Thank you so much, I wasn't aware that the pre-print was on Arxiv.

PS the web abstract link (as opposed to the pdf link above) is https://arxiv.org/abs/1708.03530
That's hilarious.

Lame SJWs
> what net neutrality was about

It is the idea that an ISP should not treat different data differently. Their job — what I am paying for — is to deliver data I transmit to the Internet, as efficiently as possible.

The only strong-ish argument that I've heard against net-neutrality is that "why shouldn't the ISPs be able to sell off the limited resource of bandwidth to the highest bidder? Does not offering higher-paying individuals result in a more efficient allocation of the resource? I would argue, no, because:

1. Most people don't have a choice about their ISP, and their ISP knows this. Most Americans have a single broadband Internet provider, that's it. The ISP has no competition to encourage setting a fair market price, because no fair market exists. (I think I would be much more inclined on most of these points if ISPs were not local monopolies.)

2. Allowing the ISP to price discriminate (by charging upstream content producers more for getting out of the slow lane) creates a barrier to new entrants to the market. One of the great things about the Internet today is that if someone invents, say, the next YouTube, Google, or Wikipedia, it is essentially on equal footing w/ the other services that exist today. Forcing new services that may be bandwidth intensive to pay up help lock in the established big players who can outbid the smaller fish. This is particularly dangerous in the example that an ISP could sell access to only a subset of the Internet: imagine a package that only allows access to Google, FB, and a handful of other sites. Competitors are now cut off from those customers. (This is not theoretical, either; there are examples of exactly this happening abroad.)

3. ISPs have repeatedly demonstrated that they would like to offer competing products to those offered by non-ISPs, and will abuse their monopolistic position to promote those products. (By offering them at higher speeds, not counting them towards data caps, etc.)

4. The incentives created by content producers paying for bandwidth are perverse: the ISP would get money, but would be disinclined to reinvest that in the local infrastructure. Doing so would increase the available supply of bandwidth, decreasing the price that it would fetch. American's ISP offerings already lag behind the rest of the world, in some cases, by an order of magnitude. This would not help.
Puerto Rico's government debt was in crisis before the hurricane hit: outstanding bond debt of $70 billion ($12,000 per capita); very high poverty rate; and 10+% unemployment.

Maybe they could try to become a new Hong Kong in the Caribbean Sea. Rule of law, deregulation, free markets even for power production and distribution. Tourism is a small part of their economy, and never a solid, prosperous plan.
SAML 2.0 was finalized in 2005, right? Not saying that means it doesn't have attack vectors, but "relatively new"?
That doesn't mean that we should roll over when we are losing the few protections we do have
OkCupid does away with open messaging between users
I wonder how much correlated the pay/framework data is? A lot of orgs I know using Vue.js moved to it from jquery -- so I suppose a lot of people using Vue.js might use in the same way, for just a bit of dynamic functionality. React seems to be more popular as a full front end solution, as opposed to just adding a few dynamic effects.
New? 2.0 was ratified in 2005. It's very widely adopted in enterprises. All the big SSO vendors (onelogin, okta, auth0) suppprt it.
I take it you are just going to skip all the news articles on the iPhone 6? The trash can doesn’t have an integrated display and has a rather large hole to vent, it’s a different beast from the iMac line. Using it as an example is as valid as using the G4. This is the biggest CPU in an Apple thin form factor machine, and I think it is pretty wise to be nervous.
What about people who bought pets.com or webvan stock, or any number of countless stocks which soon became worthless?
Sort of. Violet is on the blue end of the spectrum and a lot of people would classify it as purple. Magenta is the one that only exists as a composite.
شركة شفط بيارات بابها0508162253 اتصل الآن – شركة ركن الضحى للنظافة والصيانة
Except the author gave 4 or 5 great tips on how to achieve the goal of getting featured.
I mean, being rich is by far the most important factor for success followed by having rich friends.
How do you think the title is technically stupid?
It appears to describe exactly what is happening in this instance.
Okay, apparently they've removed that option then.

It still shows up for me but I'm on 62.0.3202.89 (haven't restarted recently).
I lost my Moneros, where can I find them? (Solved)
There is an acknowledgment at the bottom:

> Featured image credit: Altarpiece, No. 1, Group X, Altarpieces by Hilma af Klint. Public domain via Wikimedia Commons.
> Wrong, 2 links:

One link more:

https://www.youtube.com/watch?v=2T0OUIW89II
5 year old feature request [0].

[0] https://github.com/fish-shell/fish-shell/issues/438
> ...A bubble, Galbraith observed ...

Counterpoint: Galbraith confidently called the US stock market a "classic bubble" in April, 1999. At that time, the Dow Jones was at 10,494. Today it's at 24,504.

Looking back with 20/20 hindsight, it now looks like Galbraith was wrong.

Source: https://www.theguardian.com/business/1999/apr/18/observerbus...

> Assets need to be productive in order to be true investments

Counterpoint: Maybe assets need to be useful to have value. Land, copper, the balance on a Walmart gift card and my World of Warcraft gold don't produce anything, but they're useful, so they have value.
I'm not sure I understand your point? If I feel confused, that's a real physical thing. Sure we say emotions are in my mind but my mind is part of my whole body which is a physical thing we can touch and dissect (if not yet fully understand).

Similarly my understanding and perception of the colours I see comes from a real physical body that has accumulated a lot of sensory input and experiences and uses that to interpret new sensory input.

I can't explain to you how I experience the colour blue but I don't need to grapple with metaphysics to explain, in principle, why I might experience it that way.
Bitcoin Future on Nasdaq, considerations and precautions from an expert