skysight-inc/HackerNews huggingface dataset:
The problem is that most of the recommendations are bad.

Having an up-to-date system and only accepting security updates is a good policy. Fail2ban is a good tool (but it's a starting point; you should be doing other things to detect suspicious behavior).

The rest is just bad advice.

Having everyone log in using a single user account is a terrible idea. You can't audit who did what, ever. You have to remember to remove people from authorized_keys when they leave, and also make sure that they haven't left themselves a backdoor -- a cron job that reinstates the key, an extra user account, even just changing the root password to something else (how often do you actually check the root password on your boxes?).

User account management is a pain, so that's why we have things like LDAP. Everyone has their own user account. You can audit who does what on every machine, and for stuff that requires root, sudo will log the things people do (of course, if you let people have root shells, that's harder). The only people who get access to a local account (and/or root, but I still think root should just have a random password that no one knows) are a few sysadmins. When someone leaves, you kill their account in the LDAP server.

Even better, if this is a possibility, put up a VPN, and only allow ssh access via the VPN (using a firewall). Tie the VPN login to LDAP (and don't let non-VPN-admins ssh directly to the VPN server), and then you can be sure that without a user account in LDAP, no one can log into your servers.

Blind-updating systems in production is a terrible idea. Things break in the open source world all the time when you do this. Never ever use unattended-upgrades. You just need to be on top of security updates. Period. No excuses.

You should never even have a "my first five minutes on a server" type thing anyway. Rolling out a new server should be fully automatically operationalized. The first time you log into the server, it should be completely ready to go. It should be ready to go without you needing to log into it at all. This takes a small amount of up-front effort, and will pay off immediately when you bring up your second server.
Or I could download the ROMs and buy some new games, too! And the 12 year old can mow my lawn for tenpence a day until he or she also has enough to buy a new game.
There seems to be a stark polarisation. There's a whole host of businesses that have become extremely cagey and fearful due to the recession and their lack of ability to cope, and are "coping" by trampling on their own team. On the flipside, there are however a few exceptional businesses as well, that are treating their team well both financially and emotionally, but the ratio of fearful businesses to the exceptional ones is something like 9:1 <-- don't quote me on this, i'm making a random figure up based on my observation, and the reality is probably quite different, but hopefully you get the picture of what i'm saying.
Is it easy for Microsoft to get this money back into the US? And how?

Well, that's not something you want to do to Denmark, they are a member of EU and can make MS's life miserable. Plus, MS has so many assets, all over the world. They can contest it, appeal but then will pay.
Hi there!

I'm from ACME corp, and I would like to introduce you to our - no, your! - new water-jet cutting machine!

It cuts anything, including that 6m board there with a cut so fine that you will be able to get 3 pieces of 2m out of a board of 6m, there is so little waste that within the acceptable margin of error for woodworking the cuts will be 0 width.

Sold?
A global limit on the amount of Local Storage a browser can hold would work, it's not perfect, but it'll prevent subdomains creating 1GB+ of data.
It only needs to overwrite the compression methods
Good point, sir =). I approve, but a 3-week vacation is not nearly as accessible as aspirin (e.g., at my work I get three weeks of paid vacation time per year).
So if they banned nicotine, there would be more people buying alcohol?
The best IT professionals are those with the capability to self-learn

So those who skip university are around 2 to 3 years ahead of the rest that was pumped outdated subjects, mostly given by people that don't have practical experience.

Unis today, except the higher tier (hopefully) don't teach Python, NodeJS, etc

Even worse, some dropped C, Lisp(Scheme) or others for Java.

So don't be surprised the ones that just graduated can't do much
I'm in favor of legalization, but I'm very much against public pot smoking being a thing. Pot smells about 10 times worse than tobacco smoke and tobacco smoke already smelt awful.
I can't be too sure of the specifics, but our db admins decided against UUIDs after a few days debating and lots of coffee.

We aren't using serial, but instead using functions to generate our own nextvals with the server IDs, epoch etc..., kinda the same way as Instagram (though, obviously our databases are no where near the same size). It came down to how much logic we were comfortable implementing in the schema from the start to avoid continuing complexity in the applications themselves.
This is just faulty logic.

openssh is one of the most secure projects. It's developed by the security obsessed (and I mean it in a kind way) folks at OpenBSD.

I, for one, am ready to place for more trust in openssh than in any VPN daemon. The most commonly used ones are propitiatory.

What if there is a 0-day vuln (not exploit) for these VPN daemons? That far more likely. "Securing" ssh with a VPN is just one step beyond of security by obscurity.

If you are afraid of script-kiddies and scanners, let your sshd listen on a non-standard port.
Bad Chevrolet driving may explain Broder's bizarre Tesla driving…
Jailed hacker allowed into IT class, hacks prison computers
No they shouldn't seize anything. That overseas money is not owed to the US Government and does not belong to the US Government. Taxes are only owed if you repatriate it. You're advocating theft as it is.

It's not a loophole, it would be double taxation.

If Microsoft earns $10 billion in China, they should pay taxes to China on that, not pay China + the US Government. Unless you're advocating confiscatory level taxation, of perhaps 60% to 70% on corporate profits.
> health care that actually works

lol (sorry, I live in the US. This idea is laughable.)

> internet, all kinds of fresh food on demand

These are luxuries that many can't afford.
anyone who compromises [the VPN server] is in a pretty good position.

Sure. But without a VPN, anyone who compromises even one of your other hosts is in the same position. It's a lot easier to audit a single-purpose VPN server for possible security issues than it is to audit all the application code running on the rest of your production systems.

And I'd rate the odds of a 0-day being found at higher for most VPN software than for SSH.

I wouldn't. And even if you're right, getting a VPN login still doesn't get you anywhere. You still have to be able to ssh to the rest of the hosts. That's why we do security in layers.
How long to wait before having sex after birth?
Responsive break points: Where to add media queries
"Isn't it common sense that media query break points should be set to when the design breaks, rather than screen resolution of iOS devices?"
I doubt people are presuming that you smoked because you've been to college. That's not a common assumption, at least in my circles.

Regular pot smokers have a certain vibe. Not necessarily red eyes, but a way of being very casual and slightly disconnected. If you disagree with me, then think about how you 'just know' when someone is a pot smoker. There are subtle but telling mannerisms.

Which tells me that long-term pot use has an effect on personality.
I've had df -h write out to the motd before for clients who insisted on tiny slices of disk, no automated monitoring and no manual checking of disk space even after it chewed itself up.

I'm not sure it helped, but it made me feel better.
My bad. I didn't see it on HN previously. I'll make sure to double check next time.
Wow, 5.8 billion on sale of what was originally a 10.8 billion purchase? That sounds steep.

This sound like a political trial though based on Denmark wanting to keep outsiders away from it's businesses and sour grapes Denmark has against MS because they moved the business to Ireland.
US median household income in 2012 was $45,018 [Wikipedia]. There are certainly two-engineer households that make an order of magnitude more; actually there are individual engineers at large successful companies who make that much if you include stock and option grants (which you should, because the IRS certainly does).

Most engineers aren't so well-compensated. Most doctors aren't neurosurgeons, either.
Game Consoles Are Already Dead — And Developers Know It
Or that episode of the Simpons where Marge saw "SUGAR FREE DONUTS" until Apu added a comma between "sugar" and "free", and explained that it was actually sugar with free donuts.
It may. But in general an article whose headline that says "X may Y" implies far more than reality. This article is pure speculation (apart from SurfaceFlinger).

The article doesn't present itself as anything else. But appearing in the context of HN, the title is not appropriate.
Looks great! I have no other suggestion -- that was not already posted here already -- other than handling unread comments.

I use hckrnews.com and its Google Chrome extension to keep track of comments, and it's insanely great.
It's weird how marijuana gets grouped with all the hard drugs when it's far less toxic than alcohol, nicotine, or caffeine. You can die with less than 250ml of 200 proof alcohol (about 1 cup), 60mg of nicotine (around 60 cigarettes), or 3 grams of caffeine (around 15 bottles of the 5 hour energy drinks). However, you'd need to consume around 1000lbs of marijuana to kill yourself. 1000lbs would probably bankrupt most people -- it's around $4M.

I doubt anyone in the modern age can claim they have never used drugs before. Most of the OTC drugs at the pharmacy can be more damaging to your health than alcohol. The only people who can probably claim to be drug free are those who claim to heal with prayer.
"Moved the business to Ireland" doesn't (usually) mean that business has actually moved - operating as a subsidiary of a holding company in Ireland is almost always a pure tax dodge.
Wow, could you perpetuate silly stereotypes more? I already gave an example of one way I notice other people might.

Very casual and disconnected? Red eyes? Yeah, when I'm high my eyes are incredibly red, but I could be high at 10PM and you wouldn't know at 8:30AM.

You realize you suffer from confirmation bias? You know a spacey stoner and so you think everyone who gets high must be casual and disconnected? Let me guess, I must also be dull, inattentive, absentminded?
The exact translation of kroner would be kroner - not dollars. http://www.merriam-webster.com/dictionary/kroner
I think being a part-time admin with other responsibilities is a perfect reason to learn something like Chef or Puppet. It'll end up saving you a lot of time that you can devote to other things.
You are assuming that they have several developers. I bet it's one or two

If you're dealing with more, let's say, 5, your suggestions became relevant

Also you are assuming this servers are staying with the company, which may not be the case

"User account management is a pain, so that's why we have things like LDAP"

Which is a bag of hurt in itself.
Would you happen to know what the difference is between the UK and US version? I assume it's not how they spell "color".
a kick in the ass by your master for being a smartass usually.
Don't be obtuse. I'm referring to the historical precedent set by the last million times some group believed that the world was going to shit, and that their group knew exactly how. Historical precedent clearly tends towards continuation and solutions for the problems that plague us rather than death and destruction because we could not figure them out.

Of course I've thought about it that way, but now let me ask you this: why do you want to think about it that way? What is it inside of you that drives you to believe that THAT way is the correct way to think about it? Doesn't the fact that you are worrying about it mean that the problem is comprehensible to the majority of the human race, that there are probably also millions of other people worrying about it, that the more of a problem that particular problem becomes, the more people will think about it, and that a solution will probably be found? How many times does that situation have to play out before people no longer listen to that demon inside of them which says that the unknown will destroy all of us? Answer: never I hope, because it is that demon which saves us, time and time again.
Palantir provides insights from data for the world's most important institutions
Yeesh.

When incompetent programmers go away perhaps. C in and of itself is not the issue. And neither is scaring people away from it with horror stories.

I've run into young engineers recently who thing that pretty much any 'C style' system call is necessarily dangerous, because OMG the developer has to remember to pass in the length of the buffer they're passing in as well as the buffer itself. No, you just have to not be a frickin' idiot.
How Yandex protects against malware that spreads via Java applets
Yandex has introduced a technology for detecting malicious code for Java apps, which uses a ‘behavioural’ approach to malware detection. It is able to find encrypted malicious code, which exploits the currently most common vulnerabilities in Java Runtime Environment (JRE). This technology also alerts site owners and helps them remove malicious code.<p>Within less than two weeks in early February, Yandex detected more than 4,000 sites that were using malicious Java applets. The combined pre-infection traffic on these websites was 1.5 million visitors a day (after infection, sites tend to lose 90 percent of their visitors due to warnings given by search engines, browsers and antivirus programs).
Hmm, it might be a sausage-fest in here, since this article didn't garner a single comment in 9 hours.

It's not stating anything new or startling. But it hits home for me, since I've experienced a queen bee boss.
To Be the Best, You Have to Go Through the Worst
Pay for what you need.
I didn't say American spelling was perfect ;-p

There's just quite a few places where it makes more sense!
There is a lot of progress being made on HIV/AIDS.

How to tell? Speak to any gay man who lived through the 80s and early 90s. In every reasonable sized gay ghetto, there were funerals every week for people dying of AIDS-related diseases.

Now there are far more treatment options: if one knows they've been exposed, a month-long PEP regimen can stop one from becoming HIV+.

Truvada has been approved by the FDA, which can reduce the risk of transmission by between 44% and 73% - this can be used to reduce the transmission rate for highly sexually-active MSM populations, and can also be a second line of defence for (both heterosexual and gay) HIV negative partners of HIV+ people (because condoms can break).

That there is new development on a possible route to reduce mother-infant transmission is exciting.

And the other day I saw this story - http://www.theatlantic.com/technology/archive/2013/02/could-... - redesigning needles could dramatically reduce transmission among IV drug users.

There won't be a grand announcement of "AIDS cured". What there will be is lots and lots of little things: improved public health messaging, improved drugs, more prophylaxis/vaccine research, lower prices for drugs and so on. We've come an enormous way already on HIV/AIDS. That there are people who were diagnosed in their 30s who are now living into their 60s or 70s is a huge improvement from people being diagnosed and dying within a year or two.
And the proof that this is happening?
You could tax energy instead of labor.
> Closure (the construct)

Of course, if we wanna, we can start getting confused right here. http://mitpress.mit.edu/sicp/full-text/book/book-Z-H-15.html...

(also also, http://www.4clojure.com/ and the "So wait, I can't buy cheap real estate here?" part :)
I think it's more about future planning. If you only have a few hosts now, but know that in the future you'll have many, then you're just going to have to rewrite all your bash scripts anyway. Might as well do them "right" from the start. Learning Chef isn't that hard, and it won't take you that much longer for the first host.
VPNs, possibly. I don't know, for sure, how many use them for work, versus those who use them to evade governments. In the latter category it could encompass things as varied as pirating tv shows, to circumventing the Great Firewall of China. But Chinese workers use VPNs for remote work, too.

As for Tor, I doubt that anyone is using that for work, but I also doubt that many are really using it for anything illegal. To be sure, there are the Silk Road-type sites, but Tor speeds are not conducive to piracy (and Bit Torrent is highly discouraged on the Tor network).
No they're not - PS4 is to be 'PC-based' amd everyone and their uncle now appreciates the value of the Indie movement, so any gains made on PC will regurgitate back on to consoles.

Author seems to conflate fad, fashion and hazy cylicity with epoch-trashing existentialism.

Unless mobile gaming comes up with some seriously Wii-like interaction shift over the next generation or two, it'll mire itself in the limitations of the platform - at best being a satellite to a central home entertainment system (choose your flavour—they're all the same).
Microsoft never earned $10 billion in China, they sold $10 billion worth of goods to an overseas entity using a tax avoidance scheme. Different thing.

I understand that parent/daughter company relationships are hard but the only thing that matters is who holds the final holdings shares. Everything else is just window dressing and obfuscation.
I haven't had any trouble with the wifi. I have whatever the high-end Cisco 3x3 MIMO router is, and the Chromebook connects flawlessly every time. I also have no trouble on the GoogleGuest network at work.
The RANDOM bolded words ARE extremely ANNOYING.
South African province spends $15.4M (140M ZAR) on WordPress site
Yup. The $50 price-tag for console games isn't enough to pay for their bloated $200 million budgets. At best, the big studios make a very small margin of profit. Most of those big budget games put the studio in debt (or transfer the debt to the third party developers who actually create the game). This is why they're bankrupt and dissolving.

I'm glad to see the game industry stretching to accommodate more indie developers. It's about time.
I need too many, it would be lots of $$$. I need to connect "Cold" at least a 100 per day.
No, I mean the real apprenticeships with companies like Siemens and GKN that you need a minimum of 5 GCSEs to get onto, and that lead to BTEC National Diploma then HND qualifications with 1 year degree conversion.

I accept your point that the word 'apprenticeship' has been made meaningless by our Present Leaders but there is some good stuff out there as well.
"relational databases are incredibly easy to tune and improve"... only as long as they are on a single beefy server. When it is not enough, and very often it is not enough, things start to become very hairy up to the point where you have to rewrite your application using a proper NoSQL solution and with some people who understand databases a little better than "See ma, I put SQL here and it automagically evaluates..."
Yeah, the whole IT concepts naming story really lacks narrative closure (http://oxfordindex.oup.com/view/10.1093/oi/authority.2011080...).
I agree on a lot of things, except LDAP. Of course, it sounds like the ideal way, but in practice, there's a matter of scale to take into account.

Frankly, you need a lot of developers and servers before investing the time to setup a ldap deployment, integrating it with logins, and spending the inevitable hours debugging why nobody can access anything anymore, becomes more worth it than "just rsync/pssh into all servers and edit /etc/passwd".

Actually, if I had to do it, I'd use chef to automate creation (and destruction) of user accounts over an LDAP any day. Chef can be a pain to learn and use, but any sort of LDAP is even worse.
A recipe is not an algorithm, it is a heuristic.
Er, no, we need to rebuild some kind of manufacturing sector first! Then make sure companies have their own apprenticeship schemes (proper ones not the shelf stacking ones)
Only a very successful PC game ("World of Warcraft" level of success) could earn enough profit to pay for a big budget console game.

I don't think the average person understands how much labor goes into console games. They're on the level of Hollywood films, with teams of hundreds of people working over periods of years, in perpetual crunch time.
You are assuming that they have several developers. I bet it's one or two

The article presents this as general advice and doesn't make any mention of a team size that's appropriate for the recommendations. Maybe this guy has only 1 or 2 developers working on boxes, but IMO for any number of people >1 you don't want shared accounts.

Also you are assuming this servers are staying with the company, which may not be the case

In many cases they will be, and, again, the article presents this as general advice. If a server is being configured for a client and sent out, then a general process of setting up local user accounts probably doesn't make sense anyway (unless you only have one client).

Agreed that LDAP isn't the most friendly of things to set up, but there are how-tos for common use-cases, and if you have any skill as a sysadmin, you can do it. As soon as it's set up, it's simple to maintain. Manually keeping accounts in sync across multiple machines is rarely simple. Maybe LDAP is overkill for a handful of hosts and user accounts, but if you expect to grow even a little, expect to need some kind of centralized user account system.
I think finding a business guy that gets servers is going to be a struggle in and of itself.

Have you tried to do sales? How do you know you're building something people want?
Could someone explain why she felt compelled to talk? She was advised to by her lawyers, and she was concerned that she'd be arrested if she didn't. Was it because she had a legal obligation to assist in the investigation of the crime?
Not to mention that a Danish "billion" is not the same as a US "billion".

A Danish, Norwegian, Swedish ("biljon" ) billion is 10^12, a US billion is 10^9.
It's utterly confusing sometimes, and this is one of the fewer cases where US metric makes much more sense.

US: million, billion, trillion. 10^6, 10^9, 10^12

Skandinavia: million, milliard, billion, billiard, trillion, trilliard 10^6, 10^9, 10^12, etc

PS: I don't know about the rest of the world.
This is an ARM device - may very well be a hardware or driver issue - hopefully one that can and will be fixed in a software update.
>There won't be a grand announcement of "AIDS cured".

There might be if DRACO succeeds, and I would be surprised if some future medical advance doesn't cure it eventually.
Could this replace Facebook as your identity online?
'Batman' brings in suspect to Bradford police
The website in question:
http://www.freestateonline.fs.gov.za/
Neat trick with Google Now - navigation - privacy?
on my PC
Login in Google +
Search an address on google
On my smartphone:
Open Google Now
Click the address you searched for - Navigate to it..

This is really an awesome feature. Now here is the question. I'm willing to "lose" some privacy for features like this.

But what about you?
And further to that, there is a difference between "He ate that?" (He did what to that?) and "He ate that?" (He ate what?)