skysight-inc/HackerNews huggingface dataset:
> I'd really like to see a solution to how we validate ourselves to banks and other financial institutions as it becomes apparent that Social Security numbers are no longer an effective barrier to identifying a person.

They were never intended as anything more than a payroll identifier. This was known since its inception [that it was unsafe]. Its simply a question of the scale of exploitation is larger with computers.

The underlying problem is security is a cost center and no one wants to pay for it.
Wasn't it last year that the Library of Congress made cell phones an exemption? There was a big hullabaloo about jailbreaking being illegal up to that point.
Nice. The first one was great too.
Isn't it a bit off point ? The article implies distribution of quality of life, not population count. 1 mostly happy billion versus 7.23b struggling and 0.07b accumulating wealth (if I subscribe to the 1% thing), which one do you prefer ?
Congress is responsible for simplifying it. Defunding the IRS still has no impact on it.
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# Create a chain for outgoing proxy traffic
-N PROXY_OUT
-A OUTPUT -m owner --uid-owner proxy -j PROXY_OUT

# Allow replies to the requestor
-A PROXY_OUT -p tcp --sport 8080 -j ACCEPT

# Prevent proxy from talking to anything non HTTP{,s} (and DNS)
-A PROXY_OUT -p tcp -m multiport ! --dports 80,443,53 -j DROP
# Allow DNS udp
-A PROXY_OUT -p udp --dport 53 -j ACCEPT

# Allow the proxy to specific private ips (demos servers)
-A PROXY_OUT -d xxx.xxx.xxx.xxx/32 -j ACCEPT

# Prevent proxy from talking to anything private
-A PROXY_OUT ! -o <%= @public_iface %> -j DROP
-A PROXY_OUT -d 10.0.0.0/8 -j DROP
-A PROXY_OUT -d 172.16.0.0/12 -j DROP
-A PROXY_OUT -d 192.168.0.0/16 -j DROP

# Prevent proxy from talking to services via public ips
<% @aws_public_ips.each do |name, facts| %>
# <%= name %>
-A PROXY_OUT -d <%= facts['ec2_public_ipv4'] %>/32 -j DROP
<% end %>

Anything I missed? Blocking outgoing ports is to taste.
Animation software for motion capture, games and virtual reality
Real World Meteor – Build Scalable, Resilient Meteor Apps for the Real World
And i don't think many would have noticed the existence of systemd, as was the case with upstart, if the projects devs had not started lumping all manner of non-init projects into the systemd bucket.

My first encounter with the existence of systemd was while keeping half an eye on the whole consolekit+polkit+udisk rigamarole i apparently needed to get thunar (or more correctly gvfs) to automount stuff.

This when i learned that consolekit was to be replaced with logind, and logind required systemd as init.

That, to me, was a very WTF moment. It basically made a file manager dependent on a specific init being used.
On the other hand, octopus live only long enough to mature and breed (2-3 years for most of them). Octopus aren't thinking deep thoughts with that fascinating nervous system. There will be no Octopi poems or symphonies. They're pretty much just trying to get laid before they die.
Don't be so naive. Do you think you can just walk up to Mozilla and tell them: "Sup guys, just bundle this crap into your browser. Please."?
Just another reason I'd like to move to Sweden.
HTML5 UP Responsive HTML5 and CSS3 Site Templates
No one is indispensable, including and up to the CEO.

Even key employees can be replaced if properly managed.

If they are a key employee, they bide their time, plan, and locate a suitable replacement candidate. Once the replacement is up to speed, they let the replaced employee go. I've seen this happen a a lot in the companies I worked for.
You can have only so many teachers before the market is oversaturated. And I think quite a few people will prefer home schooling via online courses.
>In this case, 'sigmar' is doing simple drive-by-trolling; say something as offensive as possible to get attention, and refuse to back it up with references when questioned about it.

How is the game reference "offensive"? Their own article offered up "games" as an application of the research (in the section you quoted).

Furthermore, no one asked me a single question about my comment.

You must have a ton of time on your hands to go around trolling like this.
I have absolutely no love for the man, but he had some amazing visions of the future back then.
Hold Your Applause for Tech Companies Announcing 'Family Friendly' Perks
Some context: The last time nnoitra tried running Linux was in 1998.
> Such bands outbred and then drove off or killed the bands that chose to remain hunter-gatherers

The article doesn't give any reason why this would be the case, and it seemed a little stretched, anyone know why would farmers really want to kill hunters ?

ps:
>Therefore, there can be no kings, no class of social parasites who grow fat on food seized from others.

This feels naive at best. Biology creates classes, strong, witty, devious, etc etc
Welcome to the rentier economy...
Bitcoin could split in debate over currency's future
I certainly wouldn't expect advanced RF knowledge, but satellite dishes are a common sight in this country, so I would hope that passing familiarity with the basic concept of directional antennas (even if they don't know what to call them) would exist.

Even barring that, I would at least expect an official to know the depths of their own ignorance. If you don't know anything about WiFi, fine, but then don't try to make arguments about it.

And yes, persisting in making those arguments, not only being ignorant of the subject but after being corrected by people who know, is a special kind of ridiculous.
Rubber Duck Debugging
I've been running Fedora for 10 years now, and I have no idea what you're talking about. I did have trouble of that sort with nVidia drivers until nouveau became an acceptable replacement, but never had configuration problems with apps. I hear Ubuntu is pretty good too.

Don't get me wrong, I like Apple products too, but it's a bit harder to get some things on there like GCC.
I don't think it's about bootstrapping to dev. I think it's about allowing people to solve certain problems using programming, but in a different way from what we're used to. It's about visualizing explorative programming. That's the way I understand it.
What are all those LO commits doing? I don't think they're adding new features. I compared the two calc codebases recently, and I found no new features in LO. I believe LO has consolidated the number of string classes internally, which is a nice bit of refactoring, but I can't think of any significant feature they've added to the spreadsheet app.
I don't think democracy is in any way relevant. The UK just had an election where surveillance and GCHQ wasn't even allowed to be debated at all. No politician is even willing to acknowledge this stuff exists, let alone build an entire credible political party around it. Party democracy is a very low resolution way to hold people accountable. Ideally we'd have something better.
The interview was made in 1995 as the following Steve's words show: "it will go into beta by the end of this year, and we are shipping in production in the first quarter of 1996 – my guess is by February." The date of the magazine is 1 Jan 1996, so I guess not later than November 1995.

At that moment Microsoft only had: https://en.m.wikipedia.org/wiki/Internet_Explorer_2

Even then, Jobs says: "Microsoft is busy trying to kill Netscape."
Scribl Expands Distribution and CrowdPricing Reach with CrowdPricing Everywhere
Fig – equity based crowdfunding for video games
Disrupting the DRTV ad industry through analytics
Issue 333943: Remove built-in support for FTP from Chrome
Ah, okay. I understand your position better now. Thanks for the reply.
Seriously. Condoms have one the worst user interfaces of all modern technology.
Wouldn't the office inevitably start smelling like that familiar "dog smell"? Maybe that's okay with them... but personally I'm not sure I'd want that aroma wafting all around my workplace.
Request for Startup
Opportunity for a startup to build a "hactor" that uses modern tech but is open source and easily modified with support of online communities etc?

EDIT: I've got patent dibs on the name "Hactor"
I'm happy to fill out surveys. But I hate them if they're just ads. Twitter did that to me today. Worse, it was for alcohol. (There probably should be a way to opt out of alcohol and gambling ads. The lack of an opt out makes me consider using ad block).
Paywalled.
Good public transport options? From my experience, this is very important to a hackerspace ..
Visualizing Elm signals
How does an article simultaneously get upvoted to the front page, but universally destroyed in the comments?
Lua has goto (and JS does not), which means not all cfg's are well structured. That could impact the compiler in certain ways.

Lua also has finalizers, which effect the GC's design. The Lua/C api also makes it impossible for the GC to move objects, which means pretty much every current JS VM's GC is out.

Lua 5.3 has 64 bit integers, which would effect most JS VM's in a significant way (but to my knowledge LuaJIT doesn't support 5.3 so...)

There are other issues too, but these are just off the top of my head.
> I'm unaware of twitch streamers or youtubers who primarily teach how to play a game. Can you point out examples of those? I'm really curious.

Picking three random games off the top of my head

- https://www.youtube.com/playlist?list=PLvEIxIeBRKSjprrvlbAcb...

- https://www.youtube.com/user/foxdropLoL/featured

- https://www.youtube.com/watch?v=Fbmd4eRNwnE

I did not pick any pure let's play-ers, even though those video/streams can be quite informative and serve a basically identical purpose to the Prima guides of yesteryear.
It would, but it's quite easy to miss something in the actual implementation:

- How do you extract the hostname from the URL? If the algorithm isn't the same as the one used by your network lib, it might be possible to trick your check into checking the wrong hostname.

- You'd have to check for redirects.

- If you pre-resolve DNS hostnames for your check, and then let your network lib open another socket to the host, it might resolve to another (internal) IP, because the attacker might control the DNS zone of that host, returning 127.0.0.1 on every other request. You'd have to make sure to open a socket to the IP returned during the check.

The safer option would be to work with iptables: https://news.ycombinator.com/item?id=10079554
Filament raises $5M to bring the blockchain to the Internet of things
Thanks for sharing. How are you currently trying to spread the word? Can you share an example?
It would probably be better to donate such a thing to the Internet Archive and get to use it for this project. This guy is renting storage space for the manuals out of his own pocket, it's unlikely he has space for industrial scanning equipment at home.
Obviously, because most of us are neither hunters nor gatherers today. One modern farmer can feed 10's of thousands of people. Those people can specialize e.g. engineer, astronaut, teacher.

Hunter societies could never, ever have become this productive. There's just no leverage there. And ultimately, the local environment has a strict limit on supporting apex predators (hunters), which is orders of magnitude smaller than the environment 'tamed' and groomed for agriculture.

The whole hunter-is-better argument is silly, from a civilization point of view.
I heard of this new thing called 'systemd' Have you heard of it? I don't know how I am supposed to keep up....
Scaling Out PostgreSQL at CloudFlare with CitusDB
This took me no more than 20 seconds of Youtube search.

As it stands, the author did not provide a specific Elder Scrolls game, he generically referenced the series, but to take from the most recent RPG, Skyrim, here's the secrets of lockpicking:
https://www.youtube.com/watch?v=R5fZobDqQbU

Heres how to make your wife hot:
https://www.youtube.com/watch?v=Ozn-byvM8GU

For their newer, online MMORPG game, heres some strategy to increase your income:

https://www.youtube.com/watch?v=KtZpUPGxWzg

Oh, it's specific users you ask?
https://www.youtube.com/user/deltiasgaming

IGN Magazine has some good tips as well:
https://www.youtube.com/user/IGNentertainment

Full disclosure: I have never played an elder scrolls game in my life. But my friends have. From the front page of my search results alone, I have a good feel of how it works.

I don't mean to offend, but your comment betrays either laziness or profound inability to run a search query.
Easy to use tooltip view for written in Swift (iOS)
Tho brings back memories of the biz-tech magazine heyday of the late 90s early 2000s which emphasized layout, graphics and story. Some were more buzz than substance, but they enlivened the scene and made tech more popular while feeding off the frenzy. Kind of like the techcrunches, gigaom, pandos of the day.

So, red herring, the standard, fast company, business2.0, wired, others.
IMO this approach is definitely not one-size-fits-all. It's usually best to provide strong leadership up front in the form of clear expectations, but let people experiment in areas outside their comfort zone. This could mean putting some of the more junior team members underneath a senior developer -- the senior developer gets to experiment with management, and the junior developers benefit from some guidance.

Overall, you have to use techniques like this in the context of a situational leadership framework. There's a ton of reading material on situational leadership, but basically it comes down to recognizing the areas where people are knowledgeable and/or confident and providing the right kind of support. The "let 'em fail" tactic is great for people who are confident but not knowledgeable -- they learn something about the topic, and they learn about their own (lack of) understanding of said topic. There are many situations (when people are neither knowledgeable nor confident) that require you to do more hands-on management of your team -- and that's ok, since your goal is to help them move up the knowledge/confidence curve.

Very rarely do managers in our time have hire/fire power; in my experience it's very difficult to fire anyone for performance-related issues. Usually the best you can do is offer to swap your "problem children" with another manager and hope they do better in a new environment.
I just want some CA to offer cheap/affordable name constrained CA certs for domains I own. If I own `foo.com`, I should be able to get a cert that can sign certs for `foo.com,*.foo.com`.

Yes, yes, DANE, but it's not ubiquitous or even all that widely accepted.
EasyTipView is a custom tooltip view written in Swift that can be used as a call to action or informative tip. It can be presented for any UIBarButtonItem or UIView subclass. In addition it handles automatically orientation changes and will always point to the correct view or item.

Any suggestions are welcome!
My guess is that people vote based on titles, and comment based on content.
Have you considered this: http://smbc-comics.com/index.php?db=comics&id=2335#comic
So it's not shocking that environment would create a situation where this type of systemic failure would occur.

The IRS budget is $10 billion/year[0]. Is that enough money to expect decent security? If not, what is? Are we allowed to demand security from smaller organizations, or only from Google-sized or larger?

If we expect small businesses to protect our information, it's not too much to ask for the same from a $10b/year government department.

0. http://www.politico.com/story/2015/06/gop-irs-budget-118835....
Introducing Product Hunt LIVE
Pretty much like the rest of us...
What to do after an Investor says Yes?
Yes, and that's a temporary exemption that has to be renewed every three years. I think it runs out this year. http://arstechnica.com/tech-policy/2012/10/jailbreaking-now-...
I was seriously considering applying for an American Express platinum card so Kurt and I could get in and try the various varieties of seating they had in the lounge. . .
Apiary.io API Design Stack raised $6.8M
This isn't new territory or groundbreaking research. This is Pocket not performing basic validation techniques. jerf provided excellent information. Maintaining a small blacklist of internal, non-internet routable, and private hostnames/IPs will work fine.

It actually isn't very difficult, but the repercussions of getting it wrong are scary.
Avoiding the creepy factor in authentication
not on Verizon :-(
You often won't see the fruits of massive amounts of cleanup of technical debt, but you might eventually notice one being snappier or less glitchy. Such is the burden of software development.
Ah, so it's been longer than I thought.

Well, it'll be interesting to see what happens if jailbreakers get that rug pulled out from under them. It might drive a long-overdue reform of the DMCA.
Getting an Amex Platinum to gain access to the Amex Centurion (SFO T3, DFW, LAS, MIA, LGA, SEA) is really the best thing you can do to improve your airport experiences. They have excellent food, complementary mid-shelf booze and special amenities: SFO one has a wine wall and the DFW centurion offers complementary 20 minute massages.

Unlike the Cathay lounge at SFO (T-I A-gates) the Centurion is at T-3 so not only can you get in from T-3 but from T-I G-gates via the airside bridge (no need to re-clear security).

The Platinum also gets you into Delta lounges, and you can request a Priority Pass Select (included) which gives you access to the Alaska lounges, the Air France lounge at SFO T-I A-gates and a lot of others, especially international ones.

I've started flying from SFO to most places via DFW just so I can hang out at the DFW centurion ;)
Rather like the Korean or Estonian systems. Although once you implement an ID system it becomes a nonremovable cookie that will end up being required in more and more situations.

(It also means that if the system can be broken you can steal someone's identity very easily and thoroughly)
Explore Startup Timelines
Come and contribute to imcache
> Great programmers use vim or emacs

These kind of generalizations aren't helpful, simply because they aren't true. Are vi and emacs still going to be in wide use 500 years from now? Likely not. Then it stands to reason that there might be a way to improve upon them.

I use an IDE because I don't have to sink an inordinate amount of time into customizing my environment, since that activity doesn't deliver any value to the folks that pay me. I'd prefer to let a really smart team of engineers set those tools up for me. I do not, however, assume that anybody that doesn't use an IDE must be inferior.
The libre office team should really start a campaign to make everyone know that OpenOffice is dead and Libre Office is the future. The standard user still thinks that OpenOffice is the free office and most of the standard users would never have heard of Libre Office.

Of course it would be helpful to redirect visitors of the OOo website, but I fear this would not happen. So the best thing would be to start a "switch to Libre Office" campaign.
It's interesting to 'follow the money' in the UK situation. If we were building more houses then prices would be lower and money would be flowing into construction and therefore the working population as a whole.

With constrained supply the money flows to existing property owners which are generally older, more likely to be retired, etc. That older group probably spend a lot of that excess wealth on holidays and social care. If that excess wealth was reduced then the discretionary purchases would drop first (the holidays). Probably the economy would have a very different 'shape' if construction supply was increased to meet demand.
> I don't think they're adding new features.

Wrong, tons of new features land in major releases. Here are the release notes for the feature-packed 5.0, released a few weeks ago: https://wiki.documentfoundation.org/ReleaseNotes/5.0

In addition to this, yes, refactoring is going on: https://people.gnome.org/~michael/blog/2015-08-05-under-the-...
Reaction time?! Seriously?

In another article, intelligence tests taken in the 1940's (as they were being invented) were rescored to match today's metrics. The average person scored around 70. So we're all geniuses now, compared to then?
Show HN: Spreadsheet Security – when password is not enough
The same paying model would be used for consumers, but with subscriber share model presented in the article, the author argues would be a more equitable distribution for the artists. It seems simple in theory, but I would like to see some actual numbers of the users. I am not sure if the infographics in the article are based on real world numbers, or some assumptions.
Wow, that page looks like it's an ad for some kind of sports bar or monster truck rally. Was that on purpose?
Jason Scott works for the Internet Archive, as well as doing his own archiving and documentary work.
SSH Keys on GitHub
Ask HN: How are you detecting proxy's and fake users?
Using WebRTC to detect IP addresses leaked by proxy's seems to work reasonably well. It isn't 100% reliable. Using REMOTE_ADDR isn't going to get you anything of value.

With regards to fake users, access statistics cam be effective. Yet, this has to be used with care and it is highly dependent on the nature of your service. If the nature of your service allows it, a verified credit card account through a small charge (and charge amount verification) can work well.

If your service can justify it, there can be explicit ID verification. For example, we have a site where we charge users $99 per year for verification.

How are you handling this, if at all?
Yet I see this sentiment all the time on, of all places, Hacker News. People absolutely convinced GNU/Linux is some arcane, unusable dark art. It's quite baffling to watch, really. Then again, most people don't install Windows and OS X on hardware as heterogenous and diverse as what GNU/Linux frequents.

If you can't even handle GNU/Linux, though, what does that say about people's receptiveness to research OS that completely shakes established paradigms? Are we just going to keep reinventing what is most convenient to our preestablished biases? Given the things coming out of GnomeOS and Freedesktop.org, it sure seems like it.
Ask HN: What's the worst that can happen if you get sued over a trademark?
Let's say you're using a logo for your company that plays off a very popular one. For example, something like McDonald's golden arches but 3 of them. Kind of a gray zone, but enough to probably get someone's attention.

What's the worst that can happen? A cease and desist letter? Can they actually sue you for money?
I think this is what happens when you try installing Gentoo or Arch, configure everything your self, and then realize you didn't do it right and now it's a constant headache. New users should really stick with the easiest to use distros like Ubuntu or Fedora, which IMO are on par with OS X in terms of usability and simplicity.
I think that manufacturers have been busy pushing small screen pixel density for tablets & phones. So there has been a race just not the forefront at the large display or laptop markets.
Lots of different kinds of chairs there ^_^ but you need the card in hand ahead of time haha. Next time you want to review, let me know, I'll guest you in haha.
$ telnet 212.221.26.7 23