skysight-inc/HackerNews huggingface dataset:
> How robust are your routines for removing accounts when unused?

For our main corporate server list (about 1000 servers and 50 users), disable account in ldap and password authentication no longer works (so they lose sudo). Takes about 5 minutes to replicate I believe. If they have a .ssh key they can still log on until the local account is disabled, which runs daily.

The 100 or so servers outside the corporate walled garden, with 10 users, simply have to wait for a day for the account to be disabled - or run a bash script from rundeck to kick it off earlier. The CRL cache-time on their client certs is longer than that in any case so it's not top priority. I last did this 3 weeks ago. We didn't want central authentication for non-walled-garden machines as there's a good chance many of them may be used offline, both via ssh and local access.

It's far easier and less error prone than having to change credentials and authorized_keys for generic accounts everytime someone leaves. You've also got the benefit of knowing who's logging in to each server, as I assume your auth.log is also fired off to syslog.

How do you prevent an ex-employee logging in without a generic account, other than changing credentials and authorized keys? I'm assuming it was a mutual termination and you don't need to worry about backdoors (because if you do, you're screwed regardless)

But forget nefarious purposes -- if you have a problem on a machine and you see that "admin" was logged on at the time the problem started, how do you know who "admin" was so you can work on the fix?
> Yeah, but what exactly IS the benefit? The business doesn't die if something really bad happens? Is that really important though?

I mean the way management gets on me when we have outages, you'd think that was a significant priority?
It's not just synthetic, as in designed from whole cloth: it is a set of instructions designed for a synthetic system.

A computer "brain" does not operate remotely like a human brain. Therefore, the languages must be fundamentally different.

We apply syntactic sugar as a coping mechanism but the ultimate language is nothing like a human language.
Microsoft Announces SQL Notebooks for SQL Server and PostgreSQL
they did
This is probably not something a lot of people will agree with, but my two cents. The issue is autonomy and consent. If people are really owner of their own data they should be able to do whatever they want with it. They should be able to sell it. They should be able to exchange it for services.

You can use WiFi for free. Why should that be frowned upon? It's your choice. We do not live in a nanny state. What should be clear is what kind of transaction you're in. What kind of data is collected. The deal should be transparent.

You can't say that this data is valuable on one hand but forbid people to trade it on the other hand. Definitely not just with an argument based on autonomy.
This. Exercising has made all the difference. I'm more alert which leads to productivity. Used to be a night owl and barely got anything done in the day. Also, I now stop coding after say 10pm even on personal stuff, I make notes and pick it up the next day. That buggy block of code you churned out at 2am will be detrimental in the long run and your health isn't worth it.
I doubt most government legislators would be aware of this sort of thing (the components, libraries, and platforms that make up a given government entity's web presence).
Not sure what the meaning of your comment is. The Stab Trim cutout switches have been in the 737, in the same place aft of the flap selector, since the original 737. These were not a new feature related to the MCAS system.
It's not that bad. Just carry a cable around if you're concerned. You can usually go through a 6hour flight on a single charge watching a movie.
I haven't seen any setups like you describe, but if you want to build a framework for comparing confidence intervals that use case would be possible.
I'm mystified when articles like this come out. Even new developers know not to store passwords in plain text. Popular web frameworks like Laravel have password hashing built-in, preventing even bad developers from making this mistake. I cannot even conceive of how a such an insecure system gets built. Can we simply assume that this behaviour is intentional (and, perhaps, even devious)? Or is there some logical explanation for such poor design?
It should be available for those who really want to view it.
Soviet Concept Cars
Presumably it's just a forum for validation. If sharing your success with your peers doesn't get you off you can forgo the email, but you might lose some exposure.
Yes, that's probably the best justification for a high school curriculum that includes some number of years of foreign language. If classroom high school language isn't supplemented with more immersive or day-to-day use, you're probably not going to get to the point where you can write, speak, understand the language comfortably.

I had 4 years of high school French and I was even relatively good at it, albeit not quite top of class. Today, I'm more comfortable in a French-speaking country than someone who knows no French at all, but my skill level is really pretty low.
Passwords aren't monetizable, that's why.

...or are they?
Man Tests Tesla Autopilot by Trying to Run over His Wife
How do we go from 'could have' to 'did'?
Would you please stop it with the flamebait on divisive topics? The account was an obvious troll. If you want to help combat that kind of thing, why not flag the comment? Other users did, which (a) killed it, and then (b) brought it to our attention so we could ban it. That's how to contribute positively in a case like this. Taking HN threads further into flamewar and political rhetoric is exactly what the guidelines ask you not to do.

https://news.ycombinator.com/newsguidelines.html
Building Search Inside Unity with Algolia
I'm talking the classroom cart[1], so no, we don't have to buy new anything other than the iPads. If you are in a school setting and you are managing iPads lose, then you really need to get a cart. Just the theft deterrence is worth it.

1) here is one example https://ipadcarts.com/univault-charging-cart/ (although the one we bought had the power backplane installed already)
Intel, DOE team for nation's fastest computer
I always remind myself that it's not an if-and-only-if with this argument: since there could always be another rule that is satisfied to make that fact true, it can't be iff.
There may be reason to believe that depressed people are more realistic about certain things, but it doesn't follow that being realistic causes depression or that only depressed people are realistic.
I feel like teaching coding is a waste of resources, for several reasons: there's a glut of material readily available for individual study; what's taught will be largely irrelevant when the student graduates; and importantly, it will likely be poorly taught. Good CS teachers can probably get jobs paying 3x as much, so only the most dedicated will stick with teaching.

My opinions are probably biased because I had an otherwise good teacher who was just poorly trained, and it was a huge setback for me. I really enjoyed programming, until I took a course in high school. This lead me to pursuing chemistry in college until I learned to program again on my own (after which, I flipped to CS).

I think it would be better to add discrete logic to math courses. That way, students learn the fundamentals that they can apply independently, or in college.
Will do. We had to institute an exponential backoff, to stop from being too annoying. However, we're seeing ~80 of the tasks assigned get completed AND there are power task creators that create a whole lot of tasks. It seems to be a good tool for type A personalities to manage those around them - but, it's still early.
Most countries don't, but some do; USA is one of them.
That's interesting. I hadn't heard of this before. The evidence is pretty well set out in Kathleen Tobin's "The Reduction of Urban Vulnerability: Revisiting 1950s American Suburbanization as Civil Defence."

https://www.oftwominds.com/blogjuly10/Cold.War.Urban.Vulnera...

The vast majority of proposals are from before 1956 -- i.e. before the Soviets demonstrated their own high-yield thermonuclear weapons. The degree of decentralization required to mitigate against the multi-megaton bombs of the later 1950s would have been truly staggering.
> Anyone can inspect them and deploy them on their own

That's what I don't get from reading this thread. Like you said, Kerberos does have its uses outside enterprise deployments, and if you want authenticated/encrypted NFS for whatever reason it's really one of your only options.
Some Humans Can Sense Earth’s Magnetic Field, Fascinating Experiment Suggests
Yeah, that's what I mean. It feels like it's just forcing everyone to increase the amount of time they spend on self-promotion (even if it's theoretically "optional").
I use 10% Ketamine topical cream for nerve pain. It's the business. Irritating it isn't covered by insurance as the research is favorable.
Director of Engineering, Ranking and Machine Learning (M/F/D)
HomeToGo is the world's largest vacation rental search engine, helping millions of users around the world book their dream vacation in over 200 countries. Behind our product is a talented team of 150+ employees dedicated to helping people find the perfect vacation rental, whether it’s a cozy cabin in Colorado or a dog-friendly beach house in Ibiza.

Your role
As our Director of Engineering, Ranking and Machine Learning (m/f/d), you’ll define the technical vision and mentor engineering teams to build engineering systems that constitute the core of HomeToGo’s user experience and its business model: Search Ranking, Recommender systems, and Distributed Machine Learning systems. Your work will help 10M+ monthly users from 20 different markets find the best possible accommodations for their individual travel needs. You will work with a very agile tech team, making releases multiple times per day while maintaining 99.99% availability and high product quality.

You will:
Hire, mentor, and develop teams of highly-skilled engineers focused on search, recommender-systems, and distributed machine learning infrastructure.
Help to devise and execute our machine-learning-driven product strategy and communicate and align with main stakeholders within the organization.
Ensure that best-in-class technologies are used for each business problem and improve technical processes.
What you'll bring
You’ve built distributed computing systems that work at scale (10M+ monthly users) and rely on machine learning models to operate.
You’re knowledgeable about the technical architecture of search engines.
You’re great at growing and mentoring high-performance engineering teams and mentoring engineers and engineering leads.
You’re open to periodic short-duration travel: our tech team is located in Lithuania (1-hour flight from Berlin, where our business team is located) and we encourage face-to-face discussions when this helps move projects on faster.
I have a lightphone I, it is not really a phone. Aside from having a unreadable screen & keypad when in daylight, it is less functional than mobiles in 1996 were. No contacts, no messages, just a phone and a poor one at that. A bit too dumb if you ask me :P
Please how can I hack WiFi with Linux
repeat for new languages
Using an LTE Apple Watch exclusively will address all time management concerns while still allowing you to do things like order an uber and stream music.
Data Scientist – Machine Learning (M/F/D)
E4X was far more powerful than JSX. JSX is just a nice syntax for object construction. E4X could additionally query XML (think XPath but different) not to mention support for XML namespaces, etc.

I agree with the rest though.
> I just found it a bit bizarre.

Put another way: lots of government projects are a cooperation of public and private interests. Highways contain billboards, for instance.

I don't have a problem with these types of projects, provided they don't turn into pure corporate giveaways of public money. I really think PBS has struck a good balance.
CSHTML5 for C# Web Development Goes Open Source
What! I surrender. Are people really not eating fruit because of the carbs? Oh my. It's fruit! One of the healthiest snacks you can have!
The password is stored in plaintext since they could read it via Kibana but I'm guessing you mean that their identity system which they use to store users store credentials in plain text.

To that I say meh: Could just as well be that they decided to log all Http request to troubleshoot some issue without realizing the security implications. The article even says it was a rolling list of passwords which further indicates loggimg since you probably don't store trace logs forever.
Without some means of call-screening, telemarketing is making this all but untenable in the US.

Oterwise, agreed.
This is declaration by fiat. Do you have pointers to back this up?

Web searches are much more equivocal. Many pro Boeing but not all. Observations that by type and training and flexibility an a330 fleet with a mix of ranges can suit.

Emirates has made big orders.
Is there a way to figure out where the 737Max is still being flown? I ask selfishly as I have a flight on Norwegian Air Argentina coming up and according to their seat map I appear to be on a 737 Max8, but there is no indication about the actual metal being flown for their flights, as far as I can tell.

Norwegian suspended its use of the 737 Max8 for their main airline, but I haven’t seen anything about their use on their subsidiary airlines.
Datalog always terminates because there is no way to derive new atoms.
Although it's not curable, there are a lot of good, cheap treatments available, and many people can go long periods of time with no symptoms.

Consider the line from the Wikipedia page:

"Worldwide rates of either HSV-1 or HSV-2 are between 60% and 95% in adults."

If infection rates are that high, it's probably not that big of a deal for most people.
IDK if those are SV VCs but I applaud their effort nonetheless.
new Sesame Street episodes are exclusive to HBO for six months[1], after which they become available on PBS.

I went with nine, based on Wikipedia. Not having kids, I don't know which is correct.

why should a child care if he/she is six months behind?

Because children have friends, and they talk to them, and no parent wants to have their kid be the one left out.
That explosion was close enough that there would be basically no chance to react between the actual explosion and the shock wave.
My state allows you to alternatively get a 50k bond in exchange for mandatory insurance. Not sure how many states allow that, but the poor could not afford a spare 50k to save 2-3k a year in insurance. Also, I would think the bond could collect interest.
I really enjoyed that aspect too. I was an intern a few years ago, and at the end of my internship I sent out a 'shipped' email, with lots of positive feedback. It's easy to feel ignored as an intern, but Stripe at the time felt very cohesive.

In reply to foldr's comment, yes, they were totally optional (I can't imagine it's changed).
Just my two cents: learning by "experience" works, but is extremely inefficient, and you don't always get the feedback of your work. You always learn by experience, but you do as much as you can to learn to avoid making mistakes in practice. Compare it to learning to drive: Yes, you learn driving by experience, but you still need driving lessons to avoid getting in accidents.

You can try to learn on your own by reading, but if you want to make serious progeaa, you need a teacher, it's as simple as that.
I was looking into this exact problem last year. I couldn't find a reasonable solution, so I had to take extraordinary steps instead -- I'm building my own phone.

There is literally no phone on the market (that I can find) that is acceptable to me anymore.
“This means 24 hours worth of human speech can be transcribed in 25 seconds.”

With this kind of performance, can’t a large body of video or audio (e.g podcasts) be transcribed then manually corrected to improve the model?
Source, pls. Where and when did he say that?
Our non-data scientists are eager to steal this so they have a chance to beat our data scientists. Someone asked me how to install Python to run this.

XD
Check and see if your local PBS station has implemented Passport. Passport is a streaming service specific to PBS and there is no tax aside from the $60 or more annual donation to your local station. Public media needs your help.
I have done that for years and never dropped an ipad. But there is a secret: pick a hard ipad cover that only folds at the edge of the ipad, like a book. Then you can stick your finger between the cover and the ipad and hold it like that:

https://imgur.com/n22Ce1p

https://imgur.com/De9VBCx

This way, you can hold it with one hand, you don't need to apply pressure to hold the ipad, it is not tiring on your hands, and it is extremely stable. The cover I use I believe is this one:

https://www.amazon.co.uk/Invision-Superior-Features-Magnetic...

Otherwise the ipad is splash proof, but I wouldn't bet on it being waterproof. And wet hands aren't too much of a problem from a touch point of view, but they leave drops that obstruct the display so you kind of want to have a towel around somewhere.
Why aren't premiums better correlated to risk? It seems like that would be an obvious competitive advantage for an insurance company, if other insurera are mispricing risk.
Kibana's a monitoring system, so the article makes it sound like the passwords were ingested into logs on their way to presumably sit hashed at rest for the systems that they were intended for.

Which means there are really three red flags: internal tools deployed to the public internet, internal tools without any user access control, and allowing passwords to hit the logging infrastructure.
Show HN: WinSpd – create “SCSI disks” as user mode processes on Windows
I was shocked when I saw what looked to me like Cloudflare was helping websites represent a website as being served over HTTPS and then actually communicating with the website owners servers via HTTP.
Depending on the size of the pot that might be about right. The problem I have with the studies referenced is that they wildly overestimated MSG intake and their threshold effect was at a level similar to eating one of those heaping tablespoons of MSG by itself with no food. I'm sure MSG produces some noticeable effect at some point but those studies make it seem like the threshold they found was consistent with the amount you could plausibly eat in a normal meal seasoned with MSG.
The energy of an object is (1/2)mv^2. Doubling velocity quadruples the kinetic energy.
Open a terminal on linux and type `sudo rm -rf /`. Make sure you only use really important computers with hard to restore data. It works better that way.
It is grounded worldwide
https://twitter.com/joepie91/status/1102888957510107136?s=19

Check this active member of the community. Also folks on this very page claim how xml consumes much more resources
I am the WinSpd author. Feel free to ask me any questions you may have.
Diet Benefits Enhance Weight Loss Promote Good Health
I am surprised to see this data, because my impression was that you essentially had to be a physically and mentally flawless human being to go into space.
I am relaxed, I wanted to be clear that you were crossing a philosophical line is all. No anger here, sorry if you felt attacked or anything!

https://en.wikipedia.org/wiki/Is%E2%80%93ought_problem
Where is the accusation?
I think people like to say that programming languages aren't in the same vein as natural languages. But from my personal experience in both fields, I can't help but feel that they're clearly related.

Natural languages are harder to learn, less regular and more general than programming languages, but whenever I study either, they bring to my mind the same sort of efforts and intuitions. Programming languages definitely don't replace foreign languages lessons in high schools, and so on. But the popular dismissal of "they have nothing to do with natural languages" is probably wrong, I think.

My sample set is... fluent in French and English, studied/studying Spanish, Korean and Vietnamese, and similarly for imperative/functional/wtv paradigm PLs. There's clearly ressemblance in learning one or the other.
The article is dated 18 March 2019, but it asks "So: what went wrong?" and then mentions neither p-hacking nor the replication crisis in psychology. Perhaps the author has a rebuttal to those who think that questionable research practices have brought about the fall of scientific authority, but he doesn't give it here.

Some of the problems lie closer to home than the content of scientific journals. Henry Gee is a senior editor of Nature. He wrote an article for the Guardian https://www.theguardian.com/science/occams-corner/2013/sep/1...

Rashly, he attempts to explain p-values, and gets it wrong, saying "For example, one might be able to accord a value to one's conclusion not of "yes" or "no" but "P<0.05", which means that the result has a less than one in 20 chance of being a fluke."

Respect for scientific authority has fallen because of self-sabotage by senior figures.
I would humbly suggest submarine crews as control group.

Canned air, tight space, weird sleep cycles, noise and artificial light. Submarine crews are even more isolated because they can't contact families while underway.
"In my country" with no context and not even a name for your country? I'm disinclined to believe that your anecdote accurately describes any country.

I like how you've inverted the common "US represents the world" fallacy by literally asserting that your herpes-blind nation is representative of the entire world exclusive of the US.
On the contrary, I expect them to apply the law to themselves in the same manner they would apply it to, say, an important NGO whose IT staff have non-maliciously forgotten to update their stack. It is pretty common for large organizations, whether gov, NGOs, or corporate, to have issues where the left hand does not know what the right does. It is only a problem if these screw-ups are mission critical or if they stay unfixed for long. Mistakes happen, we should be judged by how we prevent the bad ones and how we act after they happen.
> So a simple UDP recv() + copy from network card buffer to userspace should be about 3-4usec. In the real world, it's more like 6 or 7usec the last time I timed it.

Not sure where the Linux kernel lags (may be at scale it kind of tails out?)-- if you read Google's paper on their network load balancer, Maglev, where section 5.2.1 specifically calls out 30% performance degradation without bypass on smaller packet sizes.

> By avoiding the buffer copying, you could get something in the same ballpark as kernel bypass but without all the bespoke code and frameworks in every application.

May be this article from Cloudflare helps paint a proper picture of why certain kind of applications may need to keep bypassing the kernel forever because their requirements are very specific and not because the kernel can't be made to go faster (ex: a virtual router/switch, or a load-balancer): https://blog.cloudflare.com/why-we-use-the-linux-kernels-tcp...
I am not sure if you know what you are talking about. The FAA can’t be “deregulated” as it is the regulatory body. And the airline deregulation that happened in ‘78 was deregulation of airline routes, not airline safety requirements. Furthermore, that 1996 Brookings opinion; that hasn’t held up very well considering that US aviation has an extraordinary safety record since that time and an even better record than during the regulated days. More people are killed by trains every year than die in commercial airliners, but are we suggesting that train regulation is deficient? About 16 people a week are killed by trains in the US, yet with commercial airliners in the US, we’ve had a just single fatality since 2009.

By any measure, the FAA and industry have done an exceptional job of keeping the American flying public safe.