skysight-inc/HackerNews huggingface dataset:
Maybe I am a bit dense here, but how does battery drain map to a location? What would they be cross referencing to gather location?

All I can gather is that they would also need to know what tower you were talking to, and then based on the drain they could probably guess where you were based on some heuristic. Meaning, if you are talking to tower x, and the battery drain is high, you could guess that you are either far from the tower or indoors somewhere. It still seems to me that this is dubious at best. I get that technology is always changing, but wouldn't it just be easier to exploit a security hole?
Never mind that all the "independent" binaries depends on a certain init binary sitting as pid1...
>execution of arbitrary code as root.

How the hell is this still possible in this day and age? Why is this service running as root? It really is incredible how much bad decision making goes into your typical linux distro. This should be a non-root service with an ACL on whatever files samba needs to access. It doesn't "need" to be root. Reminds me of the Windows days where every service "needed" a System or Ring0 access and every application local admin rights.

Its just incredible how there's nothing between a buffer overflow (which are common and will never go away considering the languages used) and root. I wonder if SELinux could even do anything here or if samba is such a security nightmare that you just have to give it root and hope for the best.

Samba is the poster child of the ugly, hacky, security questionable code that we all should be working away from, not making excuses for:

http://www.cvedetails.com/vulnerability-list/vendor_id-102/S...

If you want AD, pay for AD. If you want to share files with Windows clients you have a million options nowadays. This reverse-engineered pig is just a liability and helps keep real solutions from emerging because you can just install samba and be done with it. The technical debt and liabilities here are just kicked down the road. I wonder how bad this is going to get in the world of the "internet of things" and cheap NAS's with poor firewalling being sold by the millions.

edit: downvotes dont suddenly make samba a good application
>why wait for the genocide to actually happen?

What Russia is doing/has done in Chechnya is ethnic cleansing. They [Chechens] have been fighting for self determination for 30+ years. Your rhetoric, much like my own country's, falls flat in the face of facts.

>Crimea used that right.

The prevalence of this melarke is astounding. The chronology is a matter of public record. The 'vote' was nearly a month after the invasion.

>Kiev's "pacifier" operation

I have no knowledge of this. I do remember that Ukrainian paras and LEOs cracked down on extreme [Ukrainian] nationalist in the Western Ukraine before they began the fight against the Cossack invasion.

>Putin recognized

...10 years ago that the Ultra-Nationalists in Russia would tear the country apart. He is backed into a corner, ruling a nation controlled by thugs with very little to offer the global economy outside of shit tier weapons and petroleum products.

>...before you'd recognize right for self-determination for Donetsk

Do you support Palestinians, Tamils, Uyghurs, Kosovars right to self determination? I am not an advocate for mass slaughter. I firmly believe in equal representation. Partitioning countries by ethnic division is the fast track to both.

It seems very clear to me that Russia is backed into a corner. They have a dwindling, ignorant population obsessed with decadence. The have a poor geographical position. They have severe cultural divisions. The invasion of Ukraine as well as the impending invasions of Georgia, Bosnia/Croatia, and the Baltic States are a large gambit. Hilariously, it seems to be working so far.

The only thing that stands in the way of Russian Gangster Ascendancy is a German Army with U.S. equipment. Putin knows this. I have no faith in my Nation's wherewithal and resolve. 4000+ KIA in 10 years has nearly broken our military; how can those weaklings go up against a country more willing to slaughter their children and burn their livelihoods instead of retreat? Bully tactics work on the US and most of Europe. Germany and Scandinavia, less so.
It's not just that Komodia used the same root cert. It goes a bit deeper than that: https://blog.filippo.io/komodia-superfish-ssl-validation-is-...
I had to wait, in my apartment, for 40 MINUTES.

"Everything is amazing right now, and nobody's happy."

https://www.youtube.com/watch?v=uEY58fiSK8E
Pembury Tavern. Last time I went there they weren't advertising "pay with bitcoin" any more, only "send us bitcoin tips", which avoids the problem. Maybe the tech's gotten better (this was a year or so ago now), but from here that looks like at least one early adopter who's given up.
Career advice from Einstein
> Once the Republicans and Democrats get their act together on this

So, seems unlikely then ;-)
Plus continuous change, but not even, would not be that easy.
I think the generous interpretation is that the US Security companies simply don't get as much collected data in the areas being targeted by the US intel agencies. I don't have any real data to back it up, but I would assume Kaspersky has a much higher install rate in Russia than, say, Symantec. I wouldn't be surprised if the same is true for much of the middle east, too.

Its especially interesting that the mere assumption that the US security companies are covering for the intel agencies is going to make it look more like they are. If Kaspersky is on 90% of the computers targeted by the NSA/CIA, they're going to be much more likely to get the data necessary for this kind of analysis, which reinforces the thought that the US companies might be covering it up.
I can use a GNU cat with a busybox grep if i want to. Can i use logind with anything other than systemd-as-pid1? (btw, they really need to rename that damn init binary. But then i wonder if it is done willfully).
We want to do some cool stuff with SQL down the road. We'd start with features like a query result browser, but could expand that into things like query analysis too.

We don't have it pegged for a specific release just yet though.
How is a netstat incantation better than a systemctl incantation?
It's normal to charge for real time data in finance. Real time has to be really real time, though, like max a couple of seconds old.
How to Generate More Sales from Your Email Marketing Campaigns
Australia’s carbon-positive prefab house produces more energy than it consumes
Congratulations: You just rediscovered
solution #3 to the fundamental problem in life!

From the E. Fromm, The Art of Loving
(say, love and its connections with
emotions, psychology, and religion),
I simplify
and paraphrase: "For humans, the fundamental problem
in life is doing something effective about feeling
alone. Only four solutions have been found,
#1 love of spouse, #2 love of God, #3 membership in a group,
and #4 [not recommended]."

So you rediscovered #3! Darned good!
in addition to, yes, but upon review of a map, i mean Dagestan.
>> "Only on HN would massive large scale tax avoidance that has left Europe all but bankrupt"

Yes, that's why our economies are screwed - tax avoidance. /s

I agree that it's wrong but the fact that the loopholes have been exposed and our governments have failed to fix them is the real issue. We need to do something Europe-wide because it seems each country is scared to close the loop holes because the businesses will simply move to another European country.
Funny, I made something similar that replaces people on Google Analytics with stock photos from unsplash: https://github.com/sigvef/analytics-unsplash .
Look, I come to hacker news to agree to disagree. If you like systemd than great but as far as I'm concerned it's still a moving target, does way more than replace the init system, uses binary where traditional Unix uses text and in general inserts itself into way too many things for me to be comfortable with it.

Smarter people than me have done a great job of debating both sides of the issue and it looks like systemd has won. That doesn't mean I have to like it and thankfully I can fall back to using OpenBSD since I want a Unix that looks and feels like the Unix I've been using my whole career.

I don't care if you disagree with me but please don't assume that I "don't even know the tenets of unix philosphy" becuase I happen to view systemd in a way that you apparently do not. If all the major distributions are going with systemd than OK, but the beauty of free software is that I have choices and I've made mine.
Companies will tend to make better moral choices in a world where consumers have the time, resources (physical/practical, and reserves of willpower), and desire to dig deeply in to all of the products and brands in their lives and make economic decisions based at least in part on the business practices they find there, day after day, with practically everything that they buy, not as the occasional rare half-assed boycott campaign that gets almost no buy-in.

So, not our world. Here a poor moral compass is a competitive advantage, most of the time. Go around choosing morals over cold hard cash and pretty soon a competitor without your hang-ups will replace you.
Yep! It's in the backlog; to start we'll probably use srclib [1] under the hood to provide the code intel bits, and we'll do some special UI wrappers for bundler/gems.

[1] https://srclib.org/
That's pretty astonishing. Are you referring to this kind of workflow: https://goldmann.pl/blog/2014/07/30/running-docker-container...

I clearly have tons left to learn as a Sysadmin
Could you call an AI meta-meta-designer creative?

It would work out what things can be designed, then define the rules to design them.
The title seems off. They haven't been caught yet. Burning man officials simply said they will find and cancel the tickets. That seems like something they might say regardless of whether they actually could do so.

Can anyone explain to me how they could go about determining who skipped the line and who didn't? I'm curious.
I love the concept of certificate pinning, but I don't see how it solves the core problem:

User: Why should I trust this root CA to secure this domain?

Domain Owner: How can I specify which root CA should be trusted to secure this domain?

If neither of these parties are significantly involved in the trust decision, how can it be said that trust has been established at all?

Most pinning implementations seem to either delegate the trust to someone else (browsers, OS, libraries, etc.) or blindly trust the information presented in the first encounter. This is no different than the historical model. There's nothing preventing any application from presenting a warning when a known certificate changes or a new one is encountered, so what does pinning offer other than extra complexity?

Locally cached relationships aren't any more viable than using an /etc/hosts file for the whole Internet (and pose additional privacy concerns). Leveraging DNS is a worthy goal, but if it was secure enough for this purpose, it would eliminate the need for pinning because a domain owner could confidently present its public key via DNS.

I believe in defense in depth, and this work is important, but we seem to be making little progress in solving the fundamental problem of establishing trust. Maybe it's as unsolvable on the Internet as it is in the real world.
looking forward to this!!
Injecting ads into traffic is basically stealing advertising space from websites. They should sue the living shit out of Lenovo.
I wonder if some sort of compatibility shim library will eventually pop up for Node.js to combat this issue.
You can apply that attitude in general to open source software as well.

Most people using open source software trust it as implicitly as they would have to trust closed source software, they have to, because reviewing and comprehending all of the code running on any typical machine is impossible. Most people simply use open source and don't care about (or aren't capable of) dealing with the code, and of the ones that do, there is no guarantee that they're going to be competent.
Snel vet verbranden met het Burn dieet – Leef Nu Gezonder
HK is a potential retail destination for > 1 bn consumers in East Asia.

Mainland Chinese cross the border and come back with bags full of Apple products (in addition to LV bags etc.).
CVF: SPF as a Certificate Validator for SSL
Exactly.

I wondered if something special happened when a big company like Apple bought 100% wind energy. They could be paying above market price as you could do at some point if you were a simple private consumer. But more likely they are paying less.
What's Big Data?
There was also a "lovely" LMGTFY over on Google+ when systemd grew a DHCP client...
> Each part has its own disable flags on compilation and makes independent binaries.

I'm not speaking of the entire systemd daemon ecosystem (which already displays coupling between logind and journald), just the systemd-as-init daemon.

> I'd argue its less likely that a project under the tutelage of Red Hat

I'd argue in return that if the Lennart Poettering bus factor suddenly went critical, systemd development would indeed hit a significant roadblock. Perhaps not insurmountable, but how many people understand the entirety of the systemd ecosystem? How many resources would RedHat be capable of devoting to this one project?

> the bugs will pile up on the systemd bug trackers

The RHEL bug tracker is currently at 250 open bugs, with 40-50 of them in the "NEW" category, with some of those dating back to 2013. The oldest open bugs date back to 2011. In my opinion, this shows a lack of bug triage, one of first outward signs of "bug pileup".
I love that bit.

But in this case, waiting an hour and a half for a middle man to do what it would have taken me 2 minutes to do wasn't worth the extra $9 they were asking for.
I send lots of patches to lots of open source projects (it's sort of my hobby) with a pretty significant focus on application security. What follows is strictly my opinion, but this may be one of the few topics I actually know what I'm talking about and feel confident answering questions about.

> I want to contribute in code, but I always feel like I am not good enough

Most of the open source projects you know and love are crap. They were hacked together by people who are chasing results, not excellence, many years ago and only manage to truck along because of people at or below your skill level who take the time to polish up one of the rough edges.

I don't care how unskilled you think you are; you are skilled enough. Just watch the issue tracker for a few weeks and see what kind of issues pop up. Or see what has been a longstanding issue for weeks/months. You'll find something you can fix and the maintainers will appreciate it that you took the time to fix it for them.

(Unless it's opencart, then they'll flame you no matter how valuable your contribution is. But they're the exception.)
1/ Maintaining init scripts is a significant part of the work to be done in a distribution, and systemd makes this task easier.

2/ Gnome started requiring systemd (via the dependency of GDM on logind). So, if they want to keep supporting Gnome, they have a choice between switching to systemd or developping some shims. And it's probably safe to assume other major pieces of software (KDE?) will adopt similar requirements.
I suspect only people who've never used a CRT would use this sort of thing ;)

I used CRTs for years (naturally... I'm in my late 30s) and, without fail, they sucked. If they weren't long-persistence, they were flickery; if they were, they were smeary, even by the standards of ancient mono laptops. If they were flat-screened, focus was inconsistent. Large ones were expensive (and by "large" I mean "19 inch"), and you lost some screen area from the bezel.

If you found one that didn't have any of these problems, it was probably enormously expensive. But even your enormously expensive one wouldn't look quite pin-sharp at 1600x1200. (Unless it was truly enormously expensive, and was a 22+ inches diagonal.)

And whatever you did, they took up a huge amount of space, used a vast amount of electricity, and emitted a lot of radiation (though nobody ever seemed to be quite clear on whether this was actually bad for you).

And what nobody seems to remember is how rather unreliable they are. Failure rate for the LCDs I've owned: 0%. For the CRTs? 100%. None made it past six years.

If you like them for games, great. Enjoy your youthful ability to detect those extra 10ms of latency while you still have it, that's what I say! But for a terminal? You're nuts.
> But my point is that trying to convert your percentage to a dollar value in order to compare offers is probably not going to result in any predictive value.

I am converting percentage into a dollar value _strictly_ for comparison between offers, and _not_ for predictive purposes.
I think the problem isn't systemd itself, the problem is "the init system maintained by Poettering et. al."

Give me the coolness of systemd maintained by someone that isn't impossible to work with, and i'd be all for it.
Smartphones also totally marginalized GPS devices, portable music players, point and shoot cameras, portable gaming devices, heck even flashlights are less commonly used than a decade or two ago. (of course all of these products still exist in meaningful ways, but they are certainly a fraction of their former market size)

You could also say that the iPhone had a direct relation to the loss of millions of jobs at RIM/blackberry and Palm.

I don't think i agree with the parent, however, that a company should ultimately be responsible for the losses a product can create in the economy, that would create a huge disincentive for any kind of innovation. and frankly, the effects of products in this way are likely incalculable.
Is PulseAudio causing anyone problems these days?
Google is being investigated by Russia's antitrust agency
As you move, your distance to the closest cell tower changes. You also move past signal obstacles, so the change in signal strength isn't linear. They claim that these changes are characteristic enough that you can track movement that way.
Your comment demonstrates zero understanding of what samba is, or why it might need root. Hint, its tied to authenticating users and accessing their files.

Granted there could be better privilege separation, and a more modular approach, but just writing it off as "why is it running as root" is like asking why does sshd need to run as root. Its just a profoundly ignorant dismissal.

EDIT: parent substantially edited his comment after this was posted
> My vocation dictates I have high-speed internet, thus I'm forced to work with Comcast.

Or move. Sorry to sound like a Comcast apologist, but it annoys me when people claim that they’re being “forced” to do something when they aren’t explaining why the obvious alternatives are unacceptable. I mean, maybe you can’t move because of your job. Or maybe you can’t afford to move. Or you have to live where you do because of your health. Or you can’t leave the state for legal reasons.

(This post is not in any way intended to condone or support the actions of Comcast or that of any other ISP.)
Where did this trope come from? "profiling and data capture"

I'm not saying they dont do that- honestly I would not know, but why is that an argument against apple.. they have a business model that could support some notion of privacy- with google the product is you, so all they -KNOW- how to do is collect data and profile you.
For what it's worth, Gentoo has a similar system. Packages can show a message when they are installed (including updates) and for system-wide changes the package manager will tell you to to read 'eselect news'.
Because change for change's sake is often not a good thing? Thats only a couple decades worth of muscle memory thrown down the toilet...
Just to add to your comment. I've had almost zero issues with Sid, and the issues I've had I've avoided by using apt-listbugs anyways. I can't say that when I tired Ubuntu and Mint. Mint actually botched my install on an update, took me 3 hours to undo the mess and I promptly backed up and installed Debian on that machine. YMMV
> I’ve been sitting on this information for some time, waiting to get more research done before I publish a post.

You've been sitting on common knowledge for some time? Research into what?

Sorry but this is a very well known issue with HTTPS that has been discussed in depth for the last few years, in particular with people suggesting alternatives and improvements to HTTPS (like certificate pinning, Convergence[0], etc).

The fact the author thinks they have found some type of unknown or smoking gun says more about the author than anything. I mean heck you can go back and find tons of examples of root CAs "mistakenly" generating fake certificates for things like Google or Windows Update. You can also read about entire countries being victim of it [1].

[0] http://convergence.io/
[1] http://www.bbc.com/news/technology-14789763
Yes, the "many eyeballs" is a part of it. But I think the author's point is that they are only half. The other half is someone has to trip over the bug. That is, people aren't finding these bugs purely through reading the source code.
I have to agree with @geoka9. Your post is utter tripe when taken in context. I would ask you to explain the rape of Chechnya, but i fear i would piss myself with laughter.

Russia will get away with these monkeyshines as long as America has a domestically focused President. Russia will sit on its ass economically as long as Europe is addicted to petroleum.

There is a clock on the wall counting down for both of those things.
Nope, you can now import docker containers into systemd-nspawn.
I was wondering if they even did the validation properly on the Internet facing side. Turns out they don't, wow.
Can anyone speak as to why Netflix needs so much computing power? As far as I can tell, content delivery is handled separately, so all these talks are about the non-content side.

Sure we need to see various personalised lists when first connecting, but no activity while actually watching things. The personalisation seems very light - eg their lists of comedies look like they show the same to everyone. And it doesn't seem intelligent at all, like for example hiding items you have already seen. https://news.ycombinator.com/item?id=9083196
I don't like the term Software Architect. I think having an architect for software alone is redundant. That's part of the job of coding.

Where I believe there is value is in having a System Architect, who will take a wider view of the system as a whole, especially wrt the users and how they will use it, plus all the add-on mechanisms required to install/maintain/backup a production system.