skysight-inc/HackerNews huggingface dataset:
Unauthorized access detected in Docker Hub database
Just received an email from Docker Hub support:

On Thursday, April 25th, 2019, we discovered unauthorized access to a single Hub database storing a subset of non-financial user data. Upon discovery, we acted quickly to intervene and secure the site.

We want to update you on what we've learned from our ongoing investigation, including which Hub accounts are impacted, and what actions users should take.

Here is what we’ve learned:

During a brief period of unauthorized access to a Docker Hub database, sensitive data from approximately 190,000 accounts may have been exposed (less than 5% of Hub users). Data includes usernames and hashed passwords for a small percentage of these users, as well as Github and Bitbucket tokens for Docker autobuilds.

Actions to Take:
We are asking users to change their password on Docker Hub and any other accounts that shared this password.
For users with autobuilds that may have been impacted, we have revoked GitHub tokens and access keys, and ask that you reconnect to your repositories and check security logs to see if any unexpected actions have taken place.
You may view security actions on your GitHub or BitBucket accounts to see if any unexpected access has occurred over the past 24 hours -see https://help.github.com/en/articles/reviewing-your-security-log and https://bitbucket.org/blog/new-audit-logs-give-you-the-who-what-when-and-where
This may affect your ongoing builds from our Automated build service. You may need to unlink and then relink your Github and Bitbucket source provider as described in https://docs.docker.com/docker-hub/builds/link-source/
We are enhancing our overall security processes and reviewing our policies. Additional monitoring tools are now in place.

Our investigation is still ongoing, and we will share more information as it becomes available.

Thank you,

Kent
I really like this OCR version! I did a search for "Manafort" and it not only tells you where in the docs the keyword pops up with nice location markers, but also a snippet of surrounding text to give the keyword context. I do wish there was a low-level cache of commonly used keywords so that some searches would be faster, but I don't know what archive.org's position is on tracking user behavior (probably not a fan).
Dude, why don't you just not invest and leave the rest of us to lose our money? If I want to capitalize someone I should be allowed to. The accredited investor thing is already bad enough.
How was linux intended to run?
Is not speech and language partially the process of replaying thought processes so that the receiver can experience the same path and progression. We don't communicate facts so much as paths through a winding trail of thought.

Maybe if our neural networks had a more rigid pattern, the same activation fronts could be copied from person to person, creating cross person feelings and experiences.
Note this link points to an OpEd.

At least I believe the NYT isn’t so far gone as to publish such a claim outside of the editorial section, but I may be wrong.

For a different perspective, read what Glenn Greenwald has to say on the subject, in a piece titled “Robert Mueller Did Not Merely Reject the Trump-Russia Conspiracy Theories. He Obliterated Them.” [1]

Edit: I actually took the time to read the editorial. It is a collection, in my opinion, of dubious claims about standards of evidence being too high as the reason Mueller and his massive team could not bring a single solitary charge against Trump or the campaign related to Russian interference in the election.

Please remember how this all started, with a dirty dossier obtained from the Russians by the DNC, with a counter-intelligence operation claiming without evidence the President could be a Russian patsy. And yet here we are, still entirely unable to expose truth to the lie.

[1] - https://theintercept.com/2019/04/18/robert-mueller-did-not-m...
Bootstrapping helped me avoid these 4 mistakes that can kill funded startups
I always thought this should be a "swipe left / swipe right" thing for both driver & passenger. If they both indicate they want to chat, talk away.
Solar Powered Workstation
Oh, I do realize it. But it is 2019 so my statement holds as true :)
> Shouldn't an accessible, searchable and digital version of government documents be the default form in which they are released?

The way it was done was the most sane way from a security standpoint. In my opinion it is the first time I have thought that somebody who knows what they are doing is actually on the case.

I say this because it is just too easy for you to leak out the redacted parts. People have tried, and failed. We don't know if what is under those black blots are really important or not, but if they were, and the leaking of such information could cause somebody harm -- then this is the way to do it.
This is a different one:

> As a “Lawman” crew filmed the raid Monday, deputies serving a search warrant blew out the suspect’s windows and leveled his gate, frightening neighbors. Jesus Llovera, who was convicted last year of attending a cockfight but has no record of owning weapons, was arrested on charges of suspected cockfighting, Phoenix TV station KPHO reported. He was unarmed.

> Steven Seagal, Arizona Sheriff Use Tank to Bust Up Cockfighting for A&E Show (Update)

https://www.thewrap.com/steven-seagal-arizona-sheriff-use-ta...
thanks for your reply, but this is not the answer I am looking, I want to know the reason why RAM is necessary for a computer, why not just leave those circuits untouched, because if a number is 10001011, those wires already got current, I don't need to store this number elsewhere, right?
Palmos always supported other virtual keyboards. Sony had decuma for example.
My company is not particularly big but just in my team of a dozen or so we have members in Boston, Australia, Phoenix, and Seattle, and regularly deal with those in London, Tokyo, etc. It's not that unusual; in fact it's part of the reason Slack (and Hangouts) are so important.
SWAT raids are a terrible way to get the drop on anyone who is actually intending on armed resistance. They are on the other hand an excellent way to make sure that "accidents" happen, as they routinely do. They are an obvious terror tactic.
In general, AWS/GCP/Azure hosting rates are only slightly marked up as compared to DigitalOcean, Vultr, etc. especially with reserved instances.

These rates compare favourably to rolling your own DC (rack or more).

It’s the bandwidth costs that are inflated by 500-1000%, which is where all the margins come from and it creates a lock in effect as getting your data out is expensive.
I like your photos. That being said, I think it's hard to succeed on Instagram specifically unless you have a very well-defined theme or style. There's nothing wrong with trying a little bit of everything, but I think it's also understandable that the people who initially followed you because they saw a great portrait you took may not be interested in your landscapes.

I have an Instagram account that's private and mainly followed by my personal friends. I post whatever I want on there - my paid photography work, my life updates, pictures of my cat, etc. but I also keep a separate, public account that's strictly for my professional portrait work. I think having that separation helps for retaining interest.
The French president responds to the gilets jaunes
I suspect the reason they released a scanned version of the redacted document is probably a policy decision to avoid serious screw-ups.[1] Also, organizations of all sizes have known how to photocopy/scan documents for decades so it's a path of least resistance thing. The other thing is that those in charge of releasing this report had no interest in doing anything, including a simple OCR pass[2], on that scanned document that would help disseminate the information in this report faster... it's against their interests to do so.[3] So you're right, a more useful document should have been released. But for the previously mentioned reasons, it wasn't. As long as no critical mass of citizens demands digital competence from their government, their government will not offer it.

[1] There was a story in the last month or two about how someone screwed up redaction in an electronic document in a court case where they effectively only painted black bars over the text but the underlying text was in the release document.

[2] It wouldn't surprise me one bit if lawyers viewed an image-only PDF document dump as a digital form of the 'paper blizzard'. It really isn't (not even close) as there was already an OCR'd version of the document available within the hour of its release and some NLP analysis within the day.

[3] In the event that objections are raised, they can always throw up the 'we were moving as fast as we could to get it released and this was the best we could do given time constraints' defense. Most politicians and judges would likely buy that story since they don't tend to be technologically literate themselves.
Your photos are good. Getting instagram followers in itself is a separate set of skills than being a good photographer. There is no scope of "organic" growth when the platform is swamped with people trying out different tricks.
Reading between the lines of their status history is also interesting: https://status.docker.com/pages/history/533c6539221ae15e3f00...

Their message seems to be missing the "which Hub accounts are impacted" info unless I missed that, so not sure if they are only sending the message to the folks impacted or what.
Before the centralized advertising model, the web existed and had content. There are ways that people get paid without advertising, including donations and premium content subscriptions.

The mother of a friend of mine lives in a low cost of living area and makes her entire living from writing gay BSDM anime fan fiction. She has more than 1k monthly subscribers, no ads.

The web does not need attention merchants.
There does not seem to be anything here specific to the Librem 5 (or any other number) or even to phones. It mentions Gnome in passing, but that mainly runs on other things that bring much larger pools of potential users.

Maybe it should suggest developing for the desktop and tablet first, and then adapting the successful project to the phone afterward. Or, just adapting an existing project.
Does Phoenix Live View currently support or intend to support SSE over HTTP2 instead of websockets?
Theoretically any payment can be. That’s why we have corporate auditors, money laundering and financial investigators, etc.

I doubt Jeff Bezos is running some slush fund laundering scheme.
By the sounds of things the patent portfolio could be worth a fair bit but the rest of the division? Not so much.
I believe the push from 7000 to 20000 was big players like etrade or Sachs. The volume of block movement seemed uniformed at the time.
Can confirm that it slightly reduced my sleep deprivation. However I do not happen to have breasts: if I did then the reduction would have been a great deal less due to a small child wanting access to them. Also sleeping on the couch on work nights _may_ have had something to do with the reduction in my sleep deprivation; my memory is a bit shot from sleep deprivation though so not sure. Also it did not stop night terrors, though they were rare.
Not working on Android 9.0 with Chrome 70.0
"With a bank, you are lending cash to them when you make a deposit. You are taking a risk that the bank’s credit won’t be good, and you will lose your money, so you should require interest to compensate for that."

Hmm...I did not think I was taking that risk. As far as I knew, up to I think $250K, the money I have in a bank (actually a credit union) is backed by the full faith and credit of the United States, whatever that is worth today.

Are you a banker?
The beauty of the uber model is that drivers don't even need to break even. Very few I speak to are doing it full time to make money.

Most are doing it as a side hustle for a little extra cash before or after work. Or they're using the money to justify spending more on their dream car.

They don't need to break even, they needed the car anyway, it would depreciate roughly the same amount anyway. Or at least the extra uber usage is going to be negligible compared to the time based depreciation.
- Email coming from addresses to which I had already sent email. (!)

That is understandable. It is hard to validate if an email is authentic. SMTP has no authentication built in. Gmail can't just blindly accept all emails from addresses that you have already sent an email to.

EDIT:

Look at this example:
https://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol#...

Anyone can connect to relay.example.com and pretend to be bob@example.com.
Because you have thousands of employees and it gets expensive. It’s a luxury not a necessity and in leaner times, it’s easy to switch to something equivalent but free.
Your photos are very well executed and pristine.

I think it depends on what you want. Do you want followers? Do you want originality? Do you want to get in galleries? Do you want clients? Do you want to have fun? Are you documenting your life or someone else?

These are all different goals, I'm not sure which one you're prioritizing for.

I admit I don't know about getting followers on Instagram.

For example, gallery artists might try to play with the formal properties of the photo and surprise the viewer in some special way.
I dunno either, because it's incredibly trivial.

func assert(cond bool){
if !cond {
panic("whoopsies")
}
}
For the curious—2017: https://news.ycombinator.com/item?id=15841241

2016: https://news.ycombinator.com/item?id=12537653

2014: https://news.ycombinator.com/item?id=8791812

2013: https://news.ycombinator.com/item?id=5581851

2012: https://news.ycombinator.com/item?id=3767410
Not at all, their main innovation was combining pricing theory in a way that worked. They got drivers on the streets during major storms to keep wait time down. Fascinating
Well having also lived in Tokyo which is a city that quadrupled in 2 to 3 decades, at least one city managed to retain all of those characteristics. Seoul also worked out rather well.
Not only does zig embrace this philosophy, it introduces the concept of "language-level assertions". For example, integer operations, both signed and unsigned, assert that no overflow occured. Likewise many of the casts, such as non truncating integer conversion, assert that the numerical value is unchanged.

In safety-protected build modes assertion failures trigger a panic, which is globally overridable, but the default behavior is to print a full stack trace.

Finally, the assertion behavior can be modified at any scope. So one can identify the performance bottlenecks and turn assertion failures into undefined behavior.
It's not Iraq 2.0 if we saw repeated interference, all deeply researched and shown in the report!
> Releasing the plain text is all that's needed.

I doubt Mueller's team wrote the report in plain text. They probably used Microsoft Word and exported a PDF document.

When I'm president, all government agencies will be forced to use LaTeX. Then we can have both plaintext source, PDFs with actual text, and PDFs that don't leak redacted material.
Yeah,

A bunch of people in the White House deleted evidence and used encrypted communications. Not hypocritical at all.

The President probably committed obstruction multiple times, but Mueller refuses to Make a final judgment on that because they believe that is the job of congress.

And the campaign did try to benefit from the Russian influence campaign, and did try to obtain the stolen emails. They wanted Russias help. But there was no evidence of direct coordination (remember the deleted evidence).

This doesn’t seem like much of an ‘exoneration.’
It's a good example of a minimal system, but it's more academic than an example of something that illustrates a useful system. It's arguable whether much could be done with it in real time. There's no TCP/IP stack, and even if networking did exist, most connection types would time out.

I'm interested in the minimal computing resource needed to run a full network stack and recent software. So far, I've run an m68030 with 10 megs of memory and a 16 bit memory bus (Mac LC II) multiuser with networking. 24 megs in a VAXstation VLC is enough to compile plenty of real software. Even a real 11/780 from 1977 can still run sshd and negotiate a connection before a timeout.
How fortunate it is, then, that I have been dedicated to engineering for more than three decades, and know the difference between sewer pipes and what is in them.
"The investigation did not identify evidence that any U.S. persons knowingly or intentionally coordinated with the IRA’s interference operation"
You mean printing of tethers by Bitfinex.
> Having thousands of files in a single directory is usually not very file system-friendly, and definitely not recommended.

I wonder, is this specific to the situation when I use "ls", or is it in general?

I recently worked on a project where I need to store many small files on ext4, although these files are not read/written by human. I came across suggestions to group files into subdirectories and not put them all in one directory. Is there evidence that it's actually worth it on a modern filesystem?

EDIT: by "many" I mean 10+ million files.
It is like you read my script.sh over my shoulder as I was writing it. :)
It exists, even without a billion somethings.
Yes, as soon as the car drives itself.
Fair enough, this stuff is weird and there are no good explanations available. Until something happens that truly forces me to update my informal priors, though, I still think your middle paragraph is more likely than "a country has access to physics-bending technology" or "aliens."
Nobody cares about crypto?

6 months ago Coinbase raised $300m at $8b valuation.

https://www.cnbc.com/2018/10/30/cryptocurrency-start-up-coin...
I've never gotten spam nor have my ProtonMail emails marked as spam. Lucky me
Interview School – Mock Interview Software with AI-Assisted Grading
Huh? If it's in the Spam folder, they do accept it.
A suspicious amount of online gambling takes place near state lines
Bringing a loaded gun with you is a good way to end up dead.
The top quarter of earners owe 34% of college debt, not the 49% originally reported:

> Based on an analysis of federal data, its researchers concluded that 49 percent of all outstanding education loans belonged to highest-earning quarter of American households. ... It turns out that statistic was also wrong. After a bit of poking around this week, I learned that it was the result of a coding error by Urban’s researchers. The correct stat is that the top quarter of earners owe about one-third of all U.S. student loan debt.
I still find it hard to believe that it's universal across all or even most companies in (for example) Germany. Do software shops there not have Playstation/table tennis/table football or whatever that people use to take a break during working hours?
Uber made 997 million in profit in 2018. Read the S1. ️ #fakenews
I'm less concerned about the potential for high prices on those TLDs and more concerned about the disturbing practice of coordinated censorship by registrars such as namecheap.

We should be commenting to ICANN that all registrars should be required to register and domain regardless of it's content. The registrar wouldn't have to provide secondary services such as hosting, dns, etc... But the actual registration and pushing of glue records should be required in order to maintain your status as a registrar.

ICANN is supposed to be operating in the pubic trust, but by handing off registrations to other entities who ban together to censor undesirable content they violate that trust by proxy. This is a far more relevant issue for us.
Tesla rents out their ai customer owned fleet taxi service to Uber and Lyft
This is two years old. why is that posted now ?

Also I don't understand the rant about free software. If the author prefers free software why go with pocket in the first place ?
Assuming you're talking about money, actually no. Money doesn't have any associated geometry or topology, ie one bit of money, unlike land, is pretty much equivalent to another. It would be like "hoarding" a bunch of land in the middle of nowhere: only a problem if you're taking up a significant fraction of the global supply.
Yep. Uber is subsidising the fares and even then the drivers are barely making minimum wage, after accounting for their expenses.
You can't leave wires 'untouched' in an electrical system. Unless something continuously supplies energy to maintain the charge, the charges on those 'untouched' wires will simply fade away, and with it, your data. [1]

The data is stored in the electrical charges on the wires, not in the actual wires, which appears to be one source of your confusion.

Further, those wires will get reused on the next cycle for the next piece of data moving through, which means if you don't save the values represented by the current charge state of the wires, the data will be gone when the next cycle happens and new charges are forced onto the wires for the next piece of data.

RAM (memory) is the place for holding onto those particular charges (which is what is storing the data) that were on the wires, until a later time when you want to go pick those pieces of data up again.

[1] ignoring flash memory, which is a very specially designed "charge holder" that does not need the continuous energy supply to be able to maintain the charge states.
"One standard antidote to foolish optimism is trained, habitual use of the simple probability math of Fermat and Pascal."

If somebody read the book, I'd like to understand what he means. Why does he think people are generally so optimistic, and what is the math he's referring to?
I sometimes ls | grep.
sqlite has extremely thorough test coverage with something approaching 100% branch coverage and such wide production usage it's basically proven that a lot of this stuff works.
Totally! The one and only time that I tried to get a taxi at my house, which is in a suburb of a major metro area in the US, I was told it would be a 45 minutes wait. I waited the 45 and nobody showed and I called again. 30 more minutes. No show. Now, I can have an Uber at my door in 10 minutes and I know what it will cost.
This is pretty cool. Obviously inspired by Ripple, but I like another implementation without cryptocurrecy or global consensus.

The key difference seems to be that there’s only one currency of account, credits. I find that interesting, not in a bad way.

Let’s say I started a trustworthy node. I offer to issue 1000 credits per bitcoin someone deposits. All publicly accountable and with some crypto black magic (for the sake of argument), trustless.

Would this create an off-chain payment solution?
Of course a symptom can cause other problems, this has been addressed in multiple other comments. But suppressing a symptom (inflammation) does not remove the cause of the problem.

fyi:

>Please don't insinuate that someone hasn't read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that."

https://news.ycombinator.com/newsguidelines.html
I think many people working on development tools outside MS either don't understand value of debuggers, or don't have enough resources to implement them well.

I've been programming for living for 20 years now, did/doing various stuff including mobile, embedded, videogames incl. console, desktop, servers, a bit of web. In my experience, debuggers only work well on microsoft platforms.

Integration is simple on surface, press F5 and it will launch with debugger. Implementation of that can be very complex, launching may involve complicated deployment (over network, USB or worse), starting virtual machines, connecting multiple TCP streams using weird protocol each, and so on.

It works consistently for MS platforms, even very old ones like WinCE. It's broken consistently for the rest of them, even Android or iOS which have larger install base than Windows.