skysight-inc/HackerNews huggingface dataset:
Yeah, he sold the company a long time ago and doesn't like where it's headed/doesn't want to be associated with it. Then again, Intel is renaming it to Intel Security; I guess because they don't want to be associated with him either.

I think the most the average American knows about him is that he was fleeing the country because he was being investigated for murder and that he was behaving strangely. I am not sure that the majority of people would look into it any further.
I thought the standard way of migrating your PW hashing function was that you could only do it during a login, because that's the only time you have the PW in plain text. No?
Is this enterprise-only?
> Incidentally, though the article says it was scientists who discovered the fossils - they were actually discovered by amateur cavers.

Indeed, some more details here:
http://www.news24.com/SouthAfrica/News/Accountant-found-Homo...
Because if I shoot the mugger instead, I get arrested by the same police I've already been forced to paid for. Why is this so hard to understand?

[Edit: incidentally, I have called the cops three times in my life. The first two times I was told "it's not my problem". The third time they just hadn't showed up in 15 minutes, so I got bored and left.]
It's like reading a trainwreck in chronological order.
> Technical debt.

Fortran code isn't inherently technical debt, any more than code in any other language is.

> Do you still have a VCR? Isn't it a bad idea to assume VHS is a good medium to archive?

I fail to see the relevance of the analogy; its not exactly as if there is a shortage of -- F/OSS and commercial -- Fortran toolchains maintained and available.
Happy Ending: An Epic Saga of Guard and Docker
I'm not a biologist, but my understanding is that animals that can interbreed but usually wouldn't are (if at all) divided into subspecies within the same species.

See https://en.wikipedia.org/wiki/Subspecies

"A taxonomist decides whether to recognize a subspecies or not. A common way to decide is that organisms belonging to different subspecies of the same species are capable of interbreeding and producing fertile offspring, but they do not interbreed in nature due to geographic isolation or other factors."
It doesn't matter. If you set your reserve to what you're willing to pay, you cannot spend more than you are willing to pay. Then any sellers that shill bid above that level risk buying their own auctions and paying the auction house commission, can never gain more money than your reserve -- should have simply set their reserve to whatever the minimum they'll accept for the auction.
How did debugging change, for the better or worse?
Did your tests speed up?
I've used Virtualmin and Horde for my personal email service. Virtualmin does a very good job configuring Dovecot, Spamassassin, Postfix, DNS, Apache/Nginx, etc and Horde is a very good web client for email, contacts, calaendar etc.
Best Type Games for designers to improve your knowledge and skills
I began to port a small project to Swift and at a certain point Xcode crashed because of a copy-paste on a swift file. Postponed it until Xcode 7...
You could have simply bid 1.25 or whatever your true reserve is in the first place. If your reserve price changes in the face of the current auction price you're not acting rationally.
I work in a team that uses the eclipse formatter to enforce our style-guide, so I get the value. Having said that, configurable defeats the point of a community-wide formatting tool. From the article:

Even if the output of the formatter isn’t great, it ends those interminable soul-crushing arguments on code reviews about formatting.

With a configurable formatter you just move those arguments into the style-guide discussions and still have disagreements between people and teams using different configured values.
yea that option is also viable. Thx. Will look into it.
A good solution to the lack of security in passwords is 2 factor authentication, though.
As far as I know, that is correct.[1]
Any change, whether for work factor or algorithm in code still waits for the user to come back and attempt a login, at which point you update the database stored attributes and the hash.

I think that if you can update a user's password without them inputting, then you have two problems.

[1]not authoritative advice.

edit: seems that comments suggest doing the md5(bcrypt(hash)) can be used to upgrade across the board
Embracing the Weirdness of Waterless Waterways
That's an old and very problematic definition of species. In fact, I believe biologists tend to focus on populations rather than species these days, since those at least can be clearly defined.
Exactly. Species is more of a descriptive term than it is prescriptive.
For those of you curious about what a career coach does
The Real Cost of Filling Up: Gasoline Prices by Country
The idea of an auto-formatter has come up many times on the Chrome team. It is always shot down because formatting often imparts meaning. Meaning that is unclear to an auto-formatter. Of course you're free to run an auto-formatter over your own code.

Often I want to format things that are more readable for me. Example (yea, not Google style guide example. Too lazy to dig one up)

uint32_t rgba8888 = ((red & 0xFF) << 24) |
((green & 0xFF) << 16) |
((blue & 0xFF) << 8) |
((alpha & 0xFF) << 0);

vs

uint32_t rgba8888 = ((red & 0xFF) << 24) |
((green & 0xFF) << 16) |
((blue & 0xFF) << 8) |
(alpha & 0xFF);

I think the first is objectively more readable than the second. An auto-formatter is unlikely to ever format that in a "readable" way.

Another simple example. If I have a many argument function

ctx.arc(xPosition, yPosition, radius, startAngle, endAngle, clockwise);

If I break that line I'm not going to break it between xPositon and yPosition, nor and I'm going to break it between startAngle and endAngle. An auto-formatter will never know that semantically those things are more readable when they are on the same line.

Similarly you claim the short length encourages shorting names but you still run into plenty of situations where the code is far far less readable because of the line limit.

Example, assume 40 char limit

int w = desired_width *
scale_factor + padding;
int h = desired_height *
scale_factor + padding;

glBindTexture(
GL_TEXTURE_2D, someTexture);
glTexImage2D(
GL_TEXTURE_2D, level, format,
w, h, border, format, type, data);
glTexParameter(
GL_TEXTURE_2D, GL_TEXTURE_WRAP_S,
GL_REPEAT);

vs

int w = desired_width * scale_factor + padding;
int h = desired_height * scale_factor + padding;

glBindTexture(GL_TEXTURE_2D, someTexture);
glTexImage2D(GL_TEXTURE_2D, level, format, w, h, border, format, type, data);
glTexParameter(GL_TEXTURE_2D, GL_TEXTURE_WRAP_S, GL_REPEAT);

Chrome in particular is full of code line wrapped into what is effectively obfuscated code. So no, I don't agree what a line limit has any point.

You claim human eyes have a line limit. I don't disagree per say, but in my years before Google I never found anyone seriously abusing line length. Then again I never had to use Java but that's a separate issue. I hope Dart is not targeting Java's verboseness. I could make the same claim that unbroken lines, up to a point, are more readable, understandable and I will go on to claim that the 80 char limit at Google breaks that rule and ends up cause 20% of Google's code or more to effectively be obfusticated.
https://xkcd.com/1053/
> Some people may consider the iPad Pro to be a Surface 3 with less features.

I think that's possibly because that's what a lot of people seemed to be wanting / hoping for, from this announcement. And it's not what Apple was looking to deliver - which is fine.
No one thinks it's necessary; it's just fungible and storable, and therefore more practical than barter.

Value-matching with barter is really hard. Maybe I'm a neurosurgeon and I want to buy some novelty shot glasses. Must I perform neurosurgery for the shot glass salesman? That's a very asymmetric trade.
Good thing no one in the govt is proposing the same thing for crypto.

As a side note, and plz don't flamen as this is a system hack, the only realy way to keep the TSA out of your bags and stealing stuff is to put a firearm in there. Even a starter pistol works. TSA can't handle fire ars so it's checked by local cops and then locked up with whatever locks you want. Tho you may not want to do this going to NYC.
Until they get another child that does turn out to be fertile.
There are stories of really old hard drives being made to move around a room with abusive disk access patterns.

http://www.catb.org/jargon/html/W/walking-drives.html
You could delete the old hash and require users to generate a new one through the password reset mechanism. Generally you would want to combine both approaches, so that only users who do not log in during the transfer window have to deal with setting a new password.
So what happens now? I have Samsonite luggage with what looks like more advanced TSA lock, 007.

The keys are not equal, some keys will be more difficult to print, like 006 for example. Or is it the same?

What can I do to disable the lock easily without compromising function of my luggage and without voiding the warranty?

What about legal aspect of you purchasing the luggage expecting certain lock security. And later you find out that anybody can produce a key to open your luggage? can I contact manufacturer of my luggage and ask them to replace the lock because it is compromised now?
The naming convention was changed in ANSI X3.198-1992 (Fortran 90).
That's why it's called a modular jar. There is also this "jmod" file described as:

"For the purpose of modularizing the Java SE Platform’s reference implementation, the JDK, we will introduce a new artifact format that goes beyond JAR files to accommodate native code, configuration files, and other kinds of data that do not fit naturally, if at all, into JAR files. This format leverages another advantage of expressing module declarations in source files and compiling them into class files, namely that class files are independent of any particular artifact format. Whether this new format, provisionally named “JMOD,” should be standardized is an open question."

Edit: from http://mreinhold.org/blog/jigsaw-modular-images

"The internal files rt.jar, tools.jar, and dt.jar have been removed. The content of these files is now stored in a more efficient format in implementation-private files in the lib directory."
This wasn't the PW hashing fucntion. The new method hashes using the bcrypt of the password, which they do have.
Open Sourcing the Stupid-Simple Messaging Protocol
I could also quite easily live on $44k per month.
> The module will still affect everything that is dependent upon it if it is rebuilt as a microservice.

Your services are running on different servers (or containers) to each other, so they're partitioned. If one service has a bug that introduces a catastrophic error that takes all the server resources you'll either:

Monolith: Bring down the service completely.
Microservices/SOA: Timeouts to part of the system, and partial loss of functionality.

(Assuming you've done a decent job of engineering for partial failure)
Lovefield is still relatively new and immature. When I tried to use it I ran into some strange errors. The situation might have improved now but I personally would still recommend PouchDB instead.
> How is Python even being mentioned as a replacement for Fortran?

Its probably being mentioned as such because a lot of the reason people use Fortran is because of key high-performance libraries for particular numeric application domains -- not because Fortran is necessarily the best language, aside from the existence of the those libraries, to express higher-level solutions in those domains. And because Python has convenient wrappers for those libraries, such that where that is the motivation for using Fortran, Python is a reasonable alternative.

> Speed issues is the main reason why Python is not more widely used.

Sure, and that's why you wouldn't (with the current implementations available) want to write the low-level numeric routines underlying NumPy in Python.

OTOH, once you have NumPy, a lot of time Python makes perfect sense as the language to use for higher-level solutions that rely on the functionality provided by those libraries.
This is definitely possible now. In fact, this is possible now even with the existing Apple TV - using the TV Out feature which many games already employ.
I agree with what you're saying, I just don't understand how it applies here.

Tons of people have created broken versions of popular encryption schemes. They go to Wikipedia, get the AES algorithm, and then implement it. That implementation turns out to be flawed, and by "rolling their own encryption" even if it is based on a very secure one, like AES, they have been incorrectly encrypting content.

But that doesn't apply here. They didn't create their own encryption scheme. Literally, nowhere in the code examples that I have seen did they reproduce either a popular or their own bespoke encryption routine (no maths == no encryption).

Concatenating strings together and then passing it to MD5() is authentication, but the actual hash function implementation is housed entirely within MD5() which presumably is created by someone who didn't screw it up.

People in this thread seem to want to entirely redefine what the term "encrypt" even means to encompass the entire authentication logic but either by the dictionary[0] or Wikipedia definitions[1] that is not correct.

If people want to create a new phase: "Don't roll your own authentication." I am absolutely fine with that. Just don't misappropiate an existing one.

[0] http://www.thefreedictionary.com/encrypt

[1] https://en.wikipedia.org/wiki/Encryption
The scarcity points are interesting, but I'm not sure I agree that this has anything to do with the concept of ownership. Is it really necessary for a thing to be scarce in order for it to be "owned"? Why? I would have thought that scarcity would provide the motivation to buy and sell an item of property, but is not necessary for the thing to have been owned in the first place. Can we come up with a single thing out there that we think of as not property because it is not sufficiently scarce?

And what about things that are made scarce by the prevailing legal framework? Surely this is the case for copyrighted works and patented methods (etc.)--I take it that this is the root of your criticism--but it is also true of pretty much any other intangible thing that we think of as being property and, therefore, subject to ownership, such as stock, money, and debt. Is there any principled reason for requiring that things be naturally scarce in order to be subject to ownership?

Finally, I don't think one can simply ignore the policy reasons for the existence of the intellectual property laws that make intellectual property scarce. Maybe you don't think they are good reasons anymore, but simply ignoring the very copious literature on this subject doesn't seem like a good way to persuade anyone.

On the patent front, for example, the usual arguments are that patents 1) encourage people to make more patentable methods than they otherwise would, 2) encourage people to make greater use of the patented methods then they otherwise would (the so-called "extractive" theory), and 3) encourage people to make discoveries public (in exchange for legally enforced exclusivity) instead of protecting them by keeping them secret.

Maybe these arguments don't persuade you (some of them persuade me more than others), but I don't think they are so weak that they can simply be ignored in favor of purely metaphysical arguments about the definition of "property" and "ownership."
The tsa checks my snowboard bag every trip, both directions. Sucks for them, as it's full to the gills of sweaty sopping wet gear on the way home and I usually have to have someone sit on it to get it to zip up.

As a joke I would put those notes they leave when they inspect your bag in there. I was up to 22 of them when one stickler agent throw them all away except the new one. I was sad. It was fun to imagine them opening that bag every time I flew.
Why does everyone make these with PHP? Serious question.

Maybe it "just works" but all of these projects feel ancient to me because of their stack despite being brand new. Sure as a user it doesn't matter but as the maintainer/administrator I just don't want to deal with it. Modphp? Yuck.

We don't always need to use the new new thing all the time but I can't shake the feeling that the same person who runs this is also rocking an unpached PHPMyAdmin and PHPMySQL.
Maybe have a look at mailinabox [1] on your own server, that would actually come close to a proper comparision? Have been running it under Docker for half a year or so and had no real problems so far. Setup is easy enough in comparision with a complete DIY server. Community is fairly active as well.

[1] https://mailinabox.email/
Google's spam filtering is currently useless, IMO. It's too aggressive, so you have to regularly check your spam box for messages. If I have to check the spam box regularly, why bother having one?
With CloudFleet, we're trying to provide the complete self-hosted service for Mailpile.

https://cloudfleet.io/

(currently in development - looking to launch around November)
You don't need trucks to deliver at all hours of the day; you can coordinate it such that deliveries can happen at night, or non-rush hour times. Or even allow only delivery trucks during the day, but have them drive slow, like you see on beach boardwalks and other areas normally closed off to cars.

It's not like you must choose between allowing all vehicles and allowing none of them. There are reasonable middle grounds.
That's cute. Good that there are alternatives, but Bloomberg isn't going anywhere, it forms part of the foundation for half the hedge funds and investment banks in the world. It's not just a source of data, in many cases, it is the definitive yardstick to which all other data is measured, to the point where, if Bloomberg has actual, verifiable errors, people will often knowingly mangle their data only to match Bloomberg.
In an earlier video (linked elsewhere in the comments), he built a fireplace with chimney. I think his goal is to make sure he's showing something new with each video.
It's possible to update everyone's password without them logging in. If the old storage was just MD5(password) and you want to update it to MD5(bcrypt(password)), you're out of luck. You need the plaintext password to make that change. If instead you change your new storage to MD5(bcrypt(MD5(password))), you can take all of the hashes currently in your database and update them at one time with MD5(bcrypt(old hash value)).
I thought that a while ago but then someone just pointed out that you bcrypt hash the MD5 hash and support two step (MD5 then bcrypt) until they login at which point you can rehash using only bcrypt.
I don't think that means we must end specialisation and lose all the benefits it brings. Rather: specialise and communicate better.
“Don't Start a Record Label.” Interview with Stones Throw's Peanut Butter Wolf
As opposed to "scientists who are boys"? How old are scientists these days?
That would seem to rule out using around 99% of all open source projects then? I know of very few that have an 80 character limit.
The proper solution would have been to flag the old passwords and require everyone to change them on the next login. After a couple of months you null out the remaining passwords and require anybody coming back to go through the password reset system.
it's really hard to believe the statistics about ever growing IQs, when you see what imbeciles lead the world. someone actually thought it would be a good idea if one key could open all luggage, and then gave that key to thousands of low paid TSA workers. did the US outsource most of its government work to a pack of baboons? this 3D printing, Washington Post's "carelessness", it's all irrelevant. this looks like 2+2=4, and i'm betting many experts would agree.
Because once upon a time that was true, at least in many people's experience.
The oldest registered .io domains
Pokémon GO – Bringing Pokemon into the Real World
Top ES2015 Features in 15 Minutes
Oh, good, thoughtless downvotes! You know, I always like to think that technically competent men like me are also thoughtful people, capable of introspection and self-criticism, but I'm usually shown otherwise. Still, hope springs eternal...
Apply CQRS to a Spring REST API
PSVita: SNES9XVITA V1.0.0 for Rejuvenate
Ups, you found a bug! Thanks! I fixed it now. It happened because those were relative links and this page is one level deeper in the url hierarchy then the other charts.
Why is deployment coupled? Or rather, why is there a need to synchronize at deployment?

I like the idea of microservices, but I think they're overkill for most systems. By that, I mean that I see the benefits, but I think people discount the skyrocketing development and operational complexities that come with distributing a system. I heard a quote recently that "the best services are extracted from existing systems, not designed up front." I think that's right. Microservices are great IF you need them, and it's really hard to get the bounded contexts right up front with an intuitive, usable API.

Anyway, one of the benefits of microservices is that it forces you to really think about your "public" API. Any decent implementation will have some notion of API versioning. So, team A can truck along with updates, deploy them whenevs, and team B can move to the new version of A when they are ready.

Of course, supporting multiple versions is more work for team A and requires more careful planning of the upgrade path. And there will come a point when team A has to drop support for older versions. "C'mon folks, we're on version 4 of A; everybody has to move to version >=3 within 6 months." But that's just part of having truly isolated services, I think.

I don't see why you couldn't have a similar approach with versioning module API's. Right?

I think your other points are spot on. Things like performance (and error) isolation can be handled through other means, but a services approach (deployed to separate boxes, I'm assuming) makes it cleaner. And it, again, forces you to think about what happens if the dependency is unavailable. Maybe we push updates to a queue, maybe we use some async fetches here with a fallback default if we don't get a response in N MS, etc. Not that you can't do these things in a monolith, but they "feel weird" and require more rigor than most teams can maintain in the face of deadlines, i.e., it would be a whole lot easier to just call this method in this other module. Microservices/SOA force it to happen.
I understand ridership declined due to things like crime, growth of the suburbs, etc., but how much of an impact did things like tearing out the elevated rails in Manhattan have on these ridership numbers? What would they have looked like had they not been torn down?
Sorry, I'm only cutting 20 minutes of your commute each way. If you can't be happy with that, move closer to work. Actually, it's not really closer that wins, it convenient to mass transportation that wins.

My suggestion simply increases the commutable distance from your job, thus offering more affordable places to live.
No, you just take the original MD5 of lower(pass)+username and run that thru your new bcrypt. You will have a more complicated authentication process but it's worth it.
How many are bots overall?