skysight-inc/HackerNews huggingface dataset:
You could deal with large regular mailing lists, you want to move to a system where users can subscribe to a signed mailing list and have the mail server remember that subscription.
But yeah, irregular mailing lists where you suddenly need to tell your million users that your database has been breached and they need to change their passwords will be an issue.

But we are talking about $0.0005 (0.05 cents) worth of hashing on CPU systems per email. With GPU based hashing it should be 50 times cheaper.
If your team has 1 million customers, and can't afford the $10 to pay a GPU based hashing service to hash 1 million emails for you, you might have a bigger problem.

I suspect the biggest issue for such a scheme is $10 for 1 million emails is potentially still profitable for spammers while being at the limit of how much cpu time you can expect to waste for regular (particularly mobile) users. And that's before you consider the possibility of ASIC hashing for emails.
In China, when a large group of people all start successfully breaking the law the same way (and getting away with it) the people get paranoid and round them all up and shoot them.

This has happened several times in the past century, and it still occurs.

They do this because in the past, these kinds of criminal groups have taken control of China.

People like you that discredit history and also geography when you think about politics, nationalism and race, are a true danger to society.
Works here on a Ubuntu desktop ..
sorry I didn't keep up entirely with this story, who is Milliner that you refer to in your last paragraph?
Yes, but first, they apparently did not do that. And second, they didn't appear to rely much on their in-country team.
I would add to that responsiveness in updating rulesets, ability to add your own rules (especially graphical) or customize rule sets by country, and security features like noscript or phishing warnings as possible ways others could stand out in future. We might end up seeing special purpose Content Blockers, site-specific ones...
That's why I did not understand. Buying a ticket on Craigslist is business? Is it supposed to only be used for people who know each other?
What's wrong with PBKDF2?
second part started last week.
Is lowering ever as dramatic as flooding?
If I owe someone 20 bucks for dinner or something I don't mind using Venmo, but who in their right mind would exchange thousands of dollars with strangers over an app without considering the risks or consulting with their bank?
With 2 billion lines of code I would consider the problem of developers stepping on each other's toes essentially solved.
> boot time by a human

From the paper:

> The server will restart periodically. All data kept in
memory is lost at this point and the server must restart
using only the data on disk – which is attacker visible.

So I guess your solution is correct and trivial but the author's solution doesn't use data from outside, not even a user provided symmetric key.
Few things: Firstly, this is about civil cases, not crimes. Secondly, the wrongdoing here is allowing someone else to use your internet connection to perform illegal actions, not those actions themselves. Thirdly, in any law system I can think of there are crimes you can commit by literally doing nothing (neglect). For example, in Germany it's a crime to know about a planned murder and not do anything about it.
How do they (=Venmo) not end up losing court cases over this?
Joint enterprise would be one example of someone being responsible for a crime they did not commit.
Well, terrorism is really not about the number of deaths, it is more about the (frightening) spectacle, about instilling terror, this could, but doesn't have to, involve a large number of deaths.

Its whole point is that it weakens the prestige of the state being attacked, i.e. it's not a personal but rather a national level attack, hence the retaliation.
This is extremely interesting, because the effect which is proven in this study is (only) 1 of the many beneficial aspects from the experience you live through when you ingest the substance LSD: Handled the right way, you can experience the most awe inspiring moment of your life, you can not just see beauty, but live it, be immersed by it and be a part of it. You're likely to ask yourself over and over "why was this hidden from me all those years?".

This is why it's completely wrong for humanity to keep this substance illegal. This substance can lead to a whole new appreciation for our Planet, the Universe and for the human beings around us.

(Of course, "follow the money" seems to apply here as well, when I think how this molecule seems to be able to replace heavy side-effect ridden anti-depressant therapies which are of course one gigantic cash cow for the pharma industry.)

Note: It is absolutely mandatory to educate oneself about the substance as much as possible and to prepare one's experience by respecting all the rules that apply (and: there are a couple of medical conditions which make the substance very risky for you, should you suffer from one of them knowingly or unknowingly).
While this is certainly an impressive demonstration of the WebGL platform, I find the game itself to be not much more than that. Lots of potential, though!
It was a terrible idea with old OS's and engineers never learned about their schedulers. Many of your favorite systems run at high frequencies on Varnish using one thread per session.
As it happens, I occasionally rub elbows with folks who aren't particularly highly educated. I don't have much trouble discussing stuff like economics with them, or with technically-educated and economically-ignorant people, or with my 17-year-old brother who has no real grounding in any of it. All it takes is patience and empathy. And it's not a matter of agreeing or disagreeing; I almost never agree with, say, my father on anything economic or political, but it's not condescending, even if it gets heated.

Reading your posts, the way write (and, I would bet, talk) comes off as if you think everybody is an idiot and/or is out to get you. I am not unsympathetic, because I certainly have my moments of jerkassery (plenty of 'em around here, and I'm not proud of them), but dude, look inward. I mean, even what I would bet you think is innocuous isn't: why not ask a question in good faith instead of imperiously assuming anybody gives a damn about your "bonus points"?

And the benighted-white-male thing is really, really not a good look, FWIW.
Aka, the "second-hand smoke" effect of gmail (or any similar service). Even if you are fine with giving your data Goggle (or Facebook, etc), it's a problem if your forcing that decision on others.

The solution is probably using email in a manner closer to how it was originally designed: many local MTAs instead of a handful of centralized MTAs.

Here's a product idea, which could make someone a lot if they can find a way to implement it: a home server that is a minimal, secure, locally contained, turn-key home email MTA (with some localhost-only IMAP/webmail interface). You sell the server (and maybe a 1-time service to help people set it up).

This server would have to include a "choose your vendor, enter your credit card, click subscribe" super-easy interface to let people subscribe to vendors (multiple, if desired) that provide lower-MX-priority backup MTA services. (perhaps with an optional "hidden MTA" option, where your home server and lowest MX is only visible to the service, so the home router only connects to know hosts, IFF that is something that the customer wants.

People already understand local-only delivery because it emulates snail-mail. If you can let people receive messages and data unattended and asynchronous, so they can run the server when they want and receive their data directly (nobody else involved except for the backup services of their choice, then you have a product that will sell. It doesn't even need to have to have great uptime (that's what multiple MX records are for) or performance.
They really need some tech-savy people in politics. As long as they don't know what they are doing, we are screwed.
So use an ad network that doesn't unnecessarily track me across the entire web, destroy my battery life, and make reading content (particularly on mobile) a game of 'find the article' amongst the shit storm of ads.

The number of things that everyday sites embed in their pages is phenomenal. The Ghostery extension gives a good idea about how much crap gets loaded.

In an article about content blockers, http://www.imore.com/and-hour-safari-content-blockers-and-im... has 13 separate, third-party scripts/etc trying to load.

6 tagged as 'analytics', 4 tagged as 'advertising', 3 tagged as 'social widgets'

That is a ridiculous amount of extra requests, extra data, and of course, tracking.

The advertising (and since the obsession with 'cloud' or 'SAAS', analytics too) industry has been fucking end-users for YEARS. Now users have a credible way to fight back, and suddenly it's "not fair?".

If you want advertising to fund your site/blog/whatever, use an ad network that doesn't try to digitally fuck me every time I visit your site.

edit: grammar
>per account

Nobody stops an attacker to use a fixed password and cycle the username. If your site has lots of users this could work pretty well. Your site could even "leak" (like forums) usernames making this approach more efficient.
It was sent yesterday, you can find more information here: https://news.ycombinator.com/item?id=10225247
PeachPy: Assembly Code Generation in High-Level Python
Because software developers are people who like to eat too?
Maybe 32/64 bit isn't the issue, Apple just choose it as a flag to exclude slow CPU?
Read the NSC draft options paper on strategic approaches to encryption [pdf]
I'd wager that much of their workforce is engineering and integration support, in addition to the redundancy they purchased by buying companies like BrainTree.

Additionally, PayPal owns a massive amount of legacy code and APIs. There are plenty of con talks where PayPal describes how they were mired down in bureaucracy when updating a single line of code in Java (JSP) but managed to flip that overhead on its head by running a NodeJS stack on top of the JSP stack (and in some places replacing it).
Is there any particular reason you decided to go with q-e for turning instead of mouselook?
China says committed to countering Internet hacking
I couldn't play the game because of hardcoded movement keys.
I'm using Colemak layout, and I'm sure Dvorak people would feel the same.
Another open-source iOS 9 content blocker here, using EasyList and EasyPrivacy: https://github.com/ArmandGrillet/Adios (I'm the guy behind this project).
WA came out iPhone exclusive (then later on extended the offering to BB).

iPhone was hugely popular in North America. BB, on the other hand, is hugely popular in Asia (and probably Europe...?) that consists of 3 most populous countries: China, India, Indonesia... guess who uses WA the most...?

Support for other platforms came out very late...
Congrats for this great game, really nice implementation!

I'd be interested in some development facts:
- How long did it take you to create the game to it's current state?

- What was your budget? If you don't want to answer precisely: How high do you reckon must the budget be to realize a game like this?

- how big is your team and which roles did you have in that team?

- which frameworks/engines did you use? Did you create your own?

Thanks, and Keep it up!
It's a decision we took in order to stay true to the genre of classic dungeon crawlers. We're planning to add mouse-look control because many people are asking for it.
Just released a tool Yesterday to give an insight on your S3 bucket size: https://github.com/EverythingMe/ncdu-s3
Padlet is hiring developers, designers, and writers – simplify the world with us
Apple is continuing it's now well-publicised push for enhanced/improved privacy for users of it's devices and services.

Apple don't provide any content blocking out of the box, they provide the ability for users to install a plugin/extension of their own choosing if they wish.

You don't have to use this to block google ads, or google analytics if you don't want to. But many people will, because the amount of data Google collects (or attempts to collect) every day is fucking scary to a lot of people.
Neil Gaiman recently did a SALT seminar about what makes stories last.
http://longnow.org/seminars/02015/jun/09/how-stories-last/

TLDL - Long-term warnings about phenomena like volcanoes are important for survival, but once the message spans three generations, it's coming from people you don't know, so there's a certain Darwinian quality to the elements of a story that will survive for centuries. This is one reason diverse cultures end up with similar stories.
Controls/movements are horrible... it makes the game unplayable. Why not Wolfenstein 3D like movements?
Neat game. Point of view seems to snap to 90 degree angles, which is a little... unnatural?
Doesn't surprise me that they are owned by Paypal; I know many who have been scammed on Paypal and they have the same kind of nice and friendly policy; 'we don't care, kthnxbye'. I understand they cannot be in business if they wouldn't work like that, however why do they need to be bastards about it? Even if they cannot do anything to help you, they could be sorry for you or at least show some kind of humanity.

Also they don't really seem to work on fraud cases, at least not as far as I can discover; a friend who ran a website selling digital goods (but unique goods so he actually had to buy each himself so fraud was costing him money, not only making him less revenue like it could be if it was software or an ebook) was scammed by the same user a number of times and sure, Paypal cannot give my friend his money but it was very clear this user was a scammer, especially after doing it to one company a number of times and probably to more companies as well...

This seems the same case; if they see this scam happening, why do they still refund? They know it's a scam; that weird remark from Eran Kimchi even says so. So why not screw the scammer instead? The seller always ends up screwed with Paypal. No difference here.
No, features are configurable at runtime. This allows A/B testing or slowly rolling out a new feature. Depending on the type of change, you might test it on 1% of users, 1% of servers, etc.
Interesting! When did a XMPP server run with hundreds of thousands of users? At gmail?
Does it actually work? (yes I enabled it in settings)

I tried arstechnica.com and it's still showing ads. With Mercury (which always had its own ad blocker) there are no ads.
Bravo. keep it up.
I cannot recommend Material-UI at this point. It offers zero customization, simple things like internationalization are impossible, etc.
I was under the impression you were the parent I initially replied to. I apologise.

So in regards to your question, AA has been disastrous around the world. In India and Bangladesh hundreds of thousands of deaths, people burning each other in the street, terrifying stuff. All because of class wars instigated by benefits to one class over the other. Same results, on a different magnitude, in Malaysia, Nigeria, Iran, Australia and to a smaller extent the U.S.
AA has never worked in all of recorded history.
Intentional or not, allowing ad blocking on the mobile web should push content creators that rely on ad revenue to develop native applications. This seems like a double win for Apple.
The new app-switcher screen is terrible. Shockingly terrible.
It’s even better expressed in Geometric Algebra, where Maxwell’s equations become just one single equation: ∇F=J

See e.g. http://ar.newsmth.net/att/26bc57c5677573/imag_numbs.pdf http://www.av8n.com/physics/maxwell-ga.htm http://physics.wooster.edu/Lindner/Texts/Electromagnetism.pd... https://fenix.tecnico.ulisboa.pt/downloadFile/3779571248368/...
Modern operating systems are better at handling many threads.
> will give you some of the standard library.

That's what libcore is. A lot of the stdlib is reexports over libcore.

new and delete are C++ isms, their Rust counterparts are `Box::new` (and destructors are automatic). `Box::new`, like `new`, has the OOM issue. If you're okay with that, you are free to link to the `alloc` crate, which gives you `Box` without pulling in additional deps.

There are plans for in-place boxing, and AFAICT that API will be available to embedded users.
Either way, how are you going to rate-limit failed logins while at the same time not allowing a DDOS of a user login? If I am using a botnet to keep trying passwords for Sarah Palin, how are you going to know when the real Sarah Palin logs in from a new computer? Sarah Palin will never be able to log in again from a new computer, unless she uses a key from her old one.
Also, lagging page loading to allow the auctioning of ad space a bit longer to run to hopefully extract a slightly higher price.
GRC Random Password Generator Script
On Unix, the APIs for async disk I/O are completely different from the APIs for async network I/O. This is because, on Unix, the APIs for network I/O are "readiness"-based (they tell you when data is available in the read buffer or space is available in the write buffer), but a disk file handle is always ready (except at EOF). So, for disk I/O you need a "completion" model, where you queue an operation and then get a callback when it is done. This is a very different kind of API, and as a result it does not fit well with the network I/O APIs, but of course if you are doing async you probably need to do both disk and network at the same time, so you need the APIs to play nice with each other (you need a single event loop that waits for both kinds of events).

(On Windows, as I understand it, you can do completion-based I/O on all handle types.)

And then, even if you manage to use async disk I/O, you can only really use it for reads and writes. Filesystem calls that manipulate the directory tree usually don't have async versions. At some point you have to give up and do things in threads.
Thanks! Nice pun. :)

It took us about 3 months to create this game as a two-person team.
Budget was actually pretty low since we only had to buy several 3D assets (they were not created specifically for our game), a few textures and some sound effects.
We used the three.js library.
I've read that in the case of Go, Googlers develop in the public repo of Go, which is periodically synced back into the Google tree.

You can definitely see that Google uses a completely different build system than mainstream Go by the state of the mainstream Go build system though.
I guess that a fart app should probably not cost anything since it's quite useless, but I do believe that it's a problem that on day one of a whole new App Store category, the first app launched, Crystal (it appeared hours before Purify and Peace for me anyways) is a free app. That's how you make mobile apps an unsustainable business.

I don't know how much work has gone into making these content blocker apps, but I bet it has taken some time - time that in any "normal" business would be charged for, and I think mobile apps creators should charge more for their apps too. In my experience, there are two types of mobile apps consumers. Those that won't pay for an app, whether it costs $1, $10 or $20, and those that will, and I think it would be healthier for the ecosystem to cater at least as much to the latter group as the former, but I don't think that's currently the case.

It's a race to the bottom, folks.
Thanks! The locked point of view is part of the classic dungeon crawler genre.
Apple also doesn't invest in the web like Google does because :

- the majority of its revenue ain't ads, search, services,
- they actually have a desktop platform.

Google is trying to make the web as a panacea for specially this reason. I remember reading this comment on Grubers site (http://daringfireball.net/linked/2015/09/15/ppk-stop-pushing...) and personally I agree with him and Koch.
It's been a while since I've been on Apple Maps, but as I remember, it looks way better in big cities than Google maps, but outside of big cities, Google has the better data.
You're 100% right. Sort of. I've built many an AD forest in my years and it is certainly powerful. However when your laptops drop off the domain after a month or so, things get hairy. That and numerous other problems such as an entire network of 5000 machines with TrustedInstaller.exe hanging at 100% CPU etc etc and it's not all smooth. I've got my fair share of horror stories there.

One of our enterprise clients has just bought 500 Chromebooks and we integrated OpenID in our application and no one has to deal with AD, SSO is sorted and zero management overhead. I really like this solution. If someone could build a standalone product with equal quality it would destroy Microsoft overnight. Their ops team is 4 people and two of them are network people to keep the pipes (and APs) working.

And of course there is FreeIPA and PolicyKit as a contender but that's not really there yet.
Oh here is my chance to complain about this pet peeve! My provider gives you a Fritzbox with you subscription, I called them a few times that they should use their mass-purchase leverage to demand better functionality but of course the poor support people couldn't make that happen even if they understood what I was getting at :) Fritzboxen are praised across the internet as great routers, but they won't even let you

- change the default host name suffix
- assign static host names for internal use
- see which device uses how much bandwidth (only the total - yeah great, now I have to hunt for which machine/mobile is uploading all those photos to dropbox)
- block machines from the network, and/or throttle bandwidth. It looks like you can do it, but the implementation is useless - yes you can prioritize smtp over http, hurrah! Everything bandwidth-hungry in 2015 goes over http, and then it's all-or-nothing on fritzbox.
Sorry you felt that way. Keep Out! takes inspiration from dungeon crawlers (like Legend of Grimrock) which have similar old school controls.
Game is practically unplayable in Firefox Developer Edition on OSX. The first key I press works but then triggers 'Find' and focus shifts away from the game screen to the 'Find' input field. Any workaround?
The 64-bit CPUs have a wider (and thus effectively faster) bus, and content blocking is probably rather strenuous on CPU cache (lots of string/pattern matching?). While the 64-bit cutoff is likely mostly a marketing artifact, content blocking on 32-bit CPUs could actually be 2x slower or worse than 64-bit CPUs and thus make page rendering times very painful for some sites.