skysight-inc/HackerNews huggingface dataset:
> What do you call something that grants root access without authentication, but wasn't intended to let arbitrary people or programs use it?

Local privilege escalation. In a huge number of established LPEs, the exploit is by leveraging a weakness in checking who makes the call that allows legitimate privilege escalation. This is a legitimate privilege escalation (sshd binds to port 22, among others tasks), that can be exploited through a weakness in checking who is making that request and if they can have that granted.
Hedge funds are not about returns. They're about hedging risk. Thus, hedge funds. The original purpose of hedge funds was to allow investors to decouple themselves from traditional sources of risk (stock market plunges, housing market crashes, etc. etc.) and diversify their assets in a way that would normalize returns and make things at worst more predictable, and at best stable and predictable. This is also why they enjoy lax regulation, as they often don't invest in traditional methods or securities (or at least they did, things have changed somewhat).

Granted, that hasn't been the MO of every hedge fund ever created, but that is the fundamental point of a hedge fund. Framing the debate by saying "they don't even beat index funds and get paid billions" ignores the reality that investing in a way that diversifies risk is an extremely difficult thing to do, and even if a fund loses money it can still technically succeed at it's purpose and have earned it's commission.
I know a lot of pro and olympic level cyclists. They do.
Ah, you're thinking down at the lines-of-code level. I'm thinking at a much higher, big-project requirements level. It's hard to say which one is worse.

I do, however, think there's a "which kneecap" problem to rigor as well. Rigor isn't free - it comes with costs, in learning curve, in the quality of developer required, etc.

I've been bouncing back and forth between not-rigorous Ruby, kinda-rigorous Go, and pseudo-rigorous Java. I don't think rigor is a killer solution, nor do I think it's a gruesome waste of time. But I find the really ugly problems to be at the requirements and architecture level, not the code level. Not surprising, considering coding isn't my primary work.
I see, so a security update with the same version number does not contain the same patches on all OS X versions it rolls out on, that's... peculiar.

I can't really believe Apple will actually leave this unpatched, as opposed to just saying it won't at this time. The impact of this exploit and the number of affected systems is way too big, they really can't let this sit in OS X versions that were brand new only one or two years ago, that would be insane. With all the resources they have a statement like 'the impact of the changes would be too large' is quite ridiculous.

My guess is that they will patch it in a later update, but haven't finished it yet. Maybe they are even hoping for a few more people to upgrade to Yosemite before they release it. I would be willing to bet that they don't leave a gaping hole like this sitting indefinitely.
Your product itself seems very good, there's just one glaring inconsistency for me (perhaps I'm wrong): the product is ambitious but your goals are not -- and to get a huge growth you need to at least target a huge viral market. The good old forums are not a huge viral market, imo.

For example, you could have tried to replicate a reddit environment: anyone can create a forum with a single click on your domain (don't even mention pricing), you could aggregate all forums on a front page to attract viewers, allow site wide discovery, etc.
I just finished "Kafka on the Shore" by Haruki Murakami. While it was really interesting, I am not sure I fully understood it. Still recommending to everyone that likes a little bit of fantasy combined with fiction and lots of cultural references :)
* taps the dial of his sarcasmometer, puzzled *

If by "disrupting" and "meritocracy" you mean "break the law" and "kleptocracy"...
A chrome extension with a button with notifications count + that page inside a popup when clicking the button would be nice. It would probably reduce a lot of my facebook.com usage.
I don't agree with your assessment that the majority of the world wants drugs banned. Perhaps a majority of the governments and the powerful interests in these countries but the widespread use of drugs among all peoples everywhere shows that the majority of the world wants drugs, and not to have them banned.
I don't think that the pension managers were sophisticated, but rather were idiots. They went to world class bankers to deal with the money, who did a world class job of creating an awesome fee structure for themselves.
> Apple's model customer is one who upgrades often. If you want solid support for old products, stick with Microsoft, and accept that their products can be clunkier because of deliberate choices to maintain backwards-compatibility.

> To be fair, OS X updates are free and usually run well even on 5+ years old hardware. OS X has kinda gone the way of Chrome, with most users on the newest version.

> While this is a significant vulnerability, I don't think the article is correct when it calls it a 'backdoor.' The term backdoor typically implies something that was intentionally left to allow illicit access, and while this is a significant bug, I don't see anything to indicate that's the case here.

> Title is a little generous about "hidden", the exploit revolves around API & Framework used to power the parts of the control panel, and its authorization scheme being broken.

> Smells like an oversight to me. Some new developer got assigned to implement or tweak the SSH enabling switch (or whatever), and this was their solution, which never got reviewed.

> Referring to Snow Leopard now not secure > Still pretty much the best OSX.

> Among other things upgrading (to 10.10.3) will do, it'll fix the issue in the article.
I agree, they should be kept in check. I'm just arguing about the method.

Is it impossible to look for other paths? I don't believe the discussion should be reduced to the two extremes of "shoot them with guns" or "factory farm them". Our current and past situations need not be the only choices when facing the future.
You could've also rewritten that dog-ugly Ruby code in Ruby, but an interesting look into Haskell none-the-less.
So the pricing is $100 per million data points, at minimum. That doesn't seem like it scales well for big data at all.

However, that's 5x cheaper than what BigML is offering (https://bigml.com/pricing/credits) for its ad hoc service, so I might be wrong.
Can't the USB-C drive two monitors?
True, but I'm from Austin Texas and just moved to San Francisco, so I have some insight into this. I'm not sure if there's as big of a demand for laundry pickup services outside of dense urban areas like New York and San Francisco (where many residents do not have in-home washers and dryers). In Austin, most people have laundry machines, so it might not make sense there.

For crowd-sourced apps more generally I think you have a valid point with respect to cost of living adjustments.
We're contemplating moving our static image files (JPG/PNG) from an EBS volume to serving them from an S3 bucket (so we can deploy a HA setup). It sounds like it would be a lot less code if we used EFS instead. Would you guys recommend S3 or EFS for this scenario?
Boring and efficient is fine. Boring and inefficient is a grievous sin that makes people hate you forever. See also the DMV/RMV.
>the East Coast, uses the internet in very different ways than Silicon Valley does, which on the West Coast

In what ways?
It looks like you have pretty similar taste to mine, what did you think of Malazon #1? Would you continue the series? I've seen lots of conflicting reviews...
I personally think these things are great but too expensive. My customers care about solving their problems not perfection. There's a balance to be struck and I'm not excusing bad software, but if the customer isn't willing to pay for better and is happy with the current quality, there is little incentive to put in this extra effort (and therefore cost) when the resources could instead be put to work on providing value in ways the customer does care about.

I didn't say you had to do all of this yourself. I don't believe every programmer has to have a degree in mathematics. Where I take issue is with the refusal to take advantage of the hard work of others. There exist languages, tools and libraries which have a strong mathematical basis that are ignored in favour of the latest fad. Places like stackoverflow are full to the brim with people asking for help solving problems that they wouldn't have to deal with if they'd chosen better tools.
If you have to carry around your laptop in a messenger bag all day, going from 1.6kg to 0.9kg makes a huge difference.
Is the OSX version coming any time soon?
If I recall correctly (at least here in NYC) you can only buy farm raised venison unfortunately. It's because of all the meat regulations (probably a good thing in my opinion), but it'd be nice if there were some sort of effort to make wild venison a viable product.

Upon thinking about it, I'm not sure there are many wild meats you can buy outside of fish (and fish is almost always frozen to negative temperatures to reduce exposure to possible bacteria).

It makes a lot of sense for a large population but it'd be nice if there was a viable way to use wild venison (and maybe horse, aren't mustangs running wild in the west?).
10.10.3 came out 2 days ago. This counts as reasonable disclosure?
Clutch is actually the small purse, not the large one.

My general understanding is that purses are kind of informally and loosely divided into:

Clutches, which are the size of a large woman's wallet -- or a small woman's wallet for that matter. They basically can hold your keys, a credit card, your phone, and maybe some lipstick, and that's about it. Women carry clutches in places where style is more important than functionality, and they go with, like, cocktail dresses and such.

Generic purses, which are maybe twice to three times the size of a clutch, and generally speaking a woman can comfortably put her wallet in there, enough make-up to handle at least an ordinary day in the office, her keys, her phone, and then at least a small amount of additional miscellany. My wife's larger purses will hold a netbook but not a notebook computer.

Totes or messengers, which are typically larger than a normal purse, and might plausibly carry a standard-sized laptop. (My wife, who is small, doesn't carry any purses this size -- she'll use a cloth shopping bag if she needs to carry things this size). My sense is that they are regarded as less fashionable. You might see them referred to as "mom bags," since mothers with small children often carry larger purses than usual.

Doing a bit of research for this post, I have discovered that descriptors that I thought were purely about size are also to do with other factors such as whether the purse has internal subdivisions and/or its strap or shape styles. So some people might use these terms differently.
How about a haircut?
Helix Versioning Engine is a native DVCS. This is in addition to a Git management solution that is part of the solution. Choice of workflow, combined with efficiency in large file, large repo handling -- definitely interested in solving the problem right, instead of using band-aid.
What's the advantage of this over S3?
Well, indeed, I'm not sure I could offer a different choice I would have preferred - so the criticism definitely isn't constructive in that sense. It does seem, though, that the world is missing a sane cross-platform network system. If there had even been some fuse-based system that used a more robust protocol I'd probably prefer that, although if they can more or less guarantee that the NFS service won't go down (easily) then I suppose most of my qualms would be put aside.
Collection of awesome Ruby libraries, tools, frameworks and software
I wish you the best of luck. However I can't imagine purchasing one of these vs just buying the specific items I need on amazon for cheaper.
Point 1 I keep seeing repeated, but it's entirely false. Installing packages as the user does not increase security in the least. If anything, it weakens the traditional unix security model because now the running user owns the binaries, running processes can modify them.

"run as root" is nothing to do with this. Who installs the package and who runs it are entirely disconnected. If I install a package as root, and run it with my user, it's running as my user, not root.

All it actually illustrates is that the package manager is not trusted. You don't give homebrew root so that it can't damage the OS by accident. The end result is a binaries that are at risk from errant processes, but it seems this is preferable to trusting homebrew.
I'm not willing to give the government the benefit of the doubt anymore. I can't recall any instance historically where they have turned out to have been right based on some secret information, even though they often intimate that they have some.
"Worm": https://parahumans.wordpress.com
A better option would be to require job postings to make location and remote-ability explicit at the top, in a standard format/layout. Because quite often I'm Cmd+F-ing through a thread and landing on a ton of "no remote" posts, which is frustrating.
That should get Arnold Rimmer excited.
Readability, hackability, and abstraction
S3 also seems to provide only eventual consistency.
Likewise! I'm halfway through myself. I'm a huge HP fan, and the concept of a Harry Potter universe with slightly modified initial conditions taken to a logical conclusion ("taken to a logical conclusion" being the operative phrase with this book) was hugely appealing. Loving every page, would highly recommend.

Another fanfic that's well worth reading for the consumate HP fan, although cut from a very different cloth: Dumbledore's Army and the Year of Darkness [https://www.fanfiction.net/s/4315906/1/Dumbledore-s-Army-and...]. If you've ever read Ender's Game, imagine Ender's Shadow for Book 7 of Harry Potter. :)
Another problem (not you doing it) is quoting a Joel Spolsky article from 15 years ago saying "don't ever rewrite from scratch". NEVER ever accepting a rewrite, based on someone's experience in a different field... that's also a bad situation.

About 20% of the projects I've dealt with would have been measurable (by pretty much every measurement you can come up with) by a complete rewrite. One of the commonalities I noticed is no one from the original technical team was still around. The notion of losing "institutional knowledge" about the code goes out the window at that point - it's already lost. You now have new people now just adding on more crap (or fixing crap) without ever even knowing why it was crap in the first place.

If someone only wants to keep their systems running - that's 100% fine - no need to rewrite. If the org expects new functionality on a regular basis, and there's no one who truly understands any of the current code, a rewrite may make sense.
In short, they want a bomb truck that can lurk and loiter, it will carry missiles, the missiles will be more maneuverable than any manned fighter.

Going to be a hard sell for a "Top Gun" culture of fighter jocks at the pentagon.
I also saw conflicting reviews and have since stopped the series. Its not bad, but I find it really hard to get into. I may pick the series up at a later date.
> 'opened the kimono'

Kimonos are Japanese, not Chinese.

EDIT: I understand that 'opened the kimono' is already a phrase but it seems like it was used because the article is about china.
Man's Search for Meaning-- There is no finer book for perspective setting than Viktor Frankl's classic work> http://www.goodreads.com/book/show/4069.Man_s_Search_for_Mea...
Speaking on the VC side, some the crunch premise is flawed. The crunch is due to a huge explosion of early stage companies (easier than ever to get seeded, less capital than ever needed to get started) w/o a corresponding explosion of A-level capital.

There is no formula for unicorns, I'd dismiss that outright, and even if we found one, every founder would bend their story to adapt superficially, and the forumla would prove useless.

My #1 theory on why people w/ a somewhat logical strategy/thesis fail to raise? Failure to tell a compelling, coherent story about their opportunity, and failure to come across as a compelling "force of nature" founding team.
The two sets of questions are asking fundamentally different things. The "bad" questions are all about the market your company has entered, the potential size and value of that market and who the competitors are that are in the space. This is important because your "good" questions are all about whether your team can execute and what growth/adoption rate but with an unknown market size. You can certainly grow to be a big fish but if it's a small pond you're playing in that may be less compelling to that investor. On the other hand, an investor may want to make a bet on a smaller fish in a big pond knowing that there's a lot of room to grow even if it means there's higher risk. Both sets of questions are important in my opinion. The 1st set establishes whether or not I even want to invest in this space and the 2nd is if your company is the one I want to place my bets on.
Basically, you don't.

Locally, you can remove the persistent storage device from your computer, and throw it in a grinder.

On a server or in the cloud, you don't.

You could try to encrypt the file, and then you can delete it by forgetting the key. But who knows if some quantic computer won't be able to recover the key and decrypt the file in a couple of years anyways?
Guess the Chinese were on the right track when they started their programs for domestic CPUs and other computing parts. With a bit of luck, the rest of the world gets useable alternatives to Intel and therefore cheaper chips out of it.
Into the Wild by Jon Krakauer
Yeah, tell me about it. I've never seen a ping pong table or a razor scooter at my bank. It's definitely ripe for disruption.
It's worth mentioning here, that since the money is effectively trapped in the mandatory Swedish Pension System (It's basically a locked US 401k with mandatory installments done through Pay As You Earn, ie. done automatically) the Swedish Pension Fund Board, who oversees the system - have negotiated brutal Fund Fee savings for each fund. Some of the mutual funds are almost free from fees.
Dart is never take off as long as is competing with TypeScript.
My parents have parrots, and I lived with them for four years. Really nice pets, very clever, and they can show some affection. It's true that they can get depressed in a cage, but in my case they can fly freely in the house, and they have an aviary for them in the garden that is connected to the house by a window.
EFS which appears to be similar to NFS is built into the kernel. Read, write, stat and etc do not need to be wrapped into http calls.
A tiny drone won't have very good sensors so they can't find the plane. And if you know where the plane is you should send a missile instead of waiting for a drone to find a jet intake.
Probably so, still you're not a retard simply because you work developing Wordpress or Joomla sites. The condescendent and aggressive tone of the reply makes me read nothing but "boo-hoo" from the typical hater that finds joys in arguing over everything. Instead of focusing in the learning experiences and interesting facts of the blog post, starting with a "yawn" doesn't make very constructive does it?
https://www.schneier.com/books/data_and_goliath/

https://en.wikipedia.org/wiki/The_Martian_%28Weir_novel%29
Enjoy
That's a fascinating theory, but leaded gasoline has never been confirmed as the reason.
So, in an effort to refine my argument, as well as accept some of your justification, let me rephrase.

Apart from extinction, I don't care how the deer population as a whole is managed. Individually, I would prefer to cause the least amount of pain to an animal as possible for the needed outcome, where that outcome is dictated by the needs of society and the individual (and in this specific case, I don't consider entertainment a need). I'm fully accepting of, and vastly prefer. the idea of animals raising in traditional farm settings when we need to cull them, and if they need to be killed, doing so in a quick and humane manner.

I am not disputing that deer need to be managed. If the only way we can seem to do that is through hunting, then okay, I consider it justified. I think effort should also be put into finding alternatives to managing the population. We need this in many other cases as well, where hunting isn't feasible. The salient point for me is that the hunting fulfills a need for society and the ecosystem, and if that need subsides, so should the hunting.
I bet the Chinese government is on Alibaba right now buying $1 billion worth of counterfeit Xeon chips.
You need to do the Bonus points version of your recommendation. Running an OS off an external will just make everything feel sluggish (unless you have a lightning enclosure and spare SSD laying around).
I agree! Rather, nob systems (not only binary)
I'm reading the biography of Alan Turning by Andrew Hodges. After seeing the film I read all war year chapters and have now gone back to read the Cambridge years. It fills in many gaps about the war years and is just a lot of fun.
I don't think anyone can really recommend EFS for anything yet until it's in the wild for testing. I'd probably still store static files like that on S3 - with EFS you'd still need a server to handle the requests.
One thing to consider is that EFS is priced at 10x the cost of the most expensive tier of S3 storage ($0.30/Gbyte vs $0.03/Gbyte).

If they are just static assets, you would do better to put them in an S3 bucket, set appropriate Cache-Control headers and serve them via Cloudfront. This reduces your outbound bandwidth cost to the Internet versus EC2/S3, and yields better performance.
We sell a social media product with a market opportunity in the billions. Number of followers is just one metric. These are people that choose to follow you out of their own free will.
Ok so to curtail an excessive deer population, humans force some wolves into the region.

So now instead of excessive amounts of deer, there are excessive amounts of wolves in the region.

..Introduce snakes to curtail wolves now? And than mongoose.

The Mongoose will die off in the winter.
This is a filesystem. You mount it directly inside your EC2 boxes and work with it as if it's local (or really NFS-mounted). It's going to be a couple of orders of magnitude faster, but not directly web-connected, so you can't use it to serve content directly as if it was a CDN.

I can see this being useful for a few cases. For one, I can immediately use it for one of the projects I have where I have multiple worker servers and one of them needs to periodically process a few GB's of data, yet I don't want to give that much storage to every sever, and I don't want to make any one server special.

Another use case: you don't know how big your data will grow, yet you want to access it in a random fashion. S3 isn't great for this, but NFS is, and unlimited mounted storage is nice.

Edit: Third use case is logs. You can collect all the logs from all of your servers in one place and access them from any server.
Do you legitimately see these comments are being apologetic towards apple?
http://aws.amazon.com/s3/faqs/

> Q: What data consistency model does Amazon S3 employ?

> Amazon S3 buckets in the US Standard region provide eventual consistency. Amazon S3 buckets in all other regions provide read-after-write consistency for PUTS of new objects and eventual consistency for overwrite PUTS and DELETES.
My experience is the opposite, I agree it may vary from person to person. Care to elaborate what went wrong in those projects?