skysight-inc/HackerNews huggingface dataset:
Yes, YouTube needs to honor DMCA takedown requests, but that doesn't stop YouTube from creating another YouTube-specific kind of request that people can make if they want to make some money off their content that other people have uploaded. That's what YouTube has done with Content ID. See https://support.google.com/youtube/answer/6013276

> This very case is about a video hosted on YouTube.

This case is about a video posted to YouTube 8+ years ago. Content ID was just getting off the ground then, and wasn't at issue in this case. https://en.wikipedia.org/wiki/YouTube#Content_ID
> I hope that one day the Graph databases will be combined with strict schemas that go far beyond XML schema, JSON schema and SQL database constraints.

The graph database model is driven largely by a desire for better navigational convenience at the expense of weaker schemas compared to RDBMS models. So, while you can wish for anything, I don't see that that's likely to happen. RDBMSs start ahead of graph databases when it comes to stronger schemas, and there's no reason that any stronger schema techniques would be more applicable to graph databases than to RDBMSs.
It's aluminum-containing dust, not bulk metallic aluminum. All of the aluminum-containing minerals on the Moon have the aluminum atoms bound to oxygen, silicon, etc. Smelting aluminum is expensive because oxygen bonds to aluminum very tightly, and requires a lot of electricity to pull it off.
This is a tiny bit odd. So they have issued their first certificate, but they don't have cross-signing in place yet? So between now and november 16th they'll be issuing a whole bunch of effectively broken certificates unless people manually install their root CA?

Why even push this today if you don't have cross-signing available? Without that Let's Encrypt is effectively broken out of the box.

PS - I actually like Let's Encrypt and the work they're doing. I will be all queued up when they go live to grab one (and, yes, will put my money where my mouth is and donate). But doing this today without cross-signing seems strange.
This is a real problem that society is going to need to solve. But the safety and environmental upsides of replacing human drivers are going to be huge too. I certainly hope the market creates new opportunities for displaced blue-collar workers, but I'm not optimistic on that point.

Short of utopian sounding solutions like the basic wage, I'm really not sure how our economy will take care of people as we automate more and more formerly manual tasks.
KeePass, password-store
Keepass or Password Safe
https://en.wikipedia.org/wiki/Plant_Patent_Act_of_1930
I suggest Enpass: http://www.enpass.io/
Replacing my workstation with a high-end laptop removed all but the power cord for me ;)
There is Password Safe, which has a few third party implementations. I believe they have Yubikey integration.

Keepassx is cross platform, and supports keyfiles, which could be installed on removable media.

Based on a paper I saw a few months ago, Password Safe's crypto looked to be better implemented.
>I'd actually recommend doing a startup first for about 2 years

You really recommend that someone fresh out of high school should start a business? With essentially zero real-world experience? What "problem" is it that they're going to solve with a startup?

If college isn't right for them out of high school, how about they get a job? That way they can earn some money and learn some social skills that are vital to functioning in our society.
A dying young woman's hope in cryonics and a future
Is this vulnerability in 1Password too?
The answer isn't to make everything wireless. It's to go to Home Depot, buy a dollar's worth of cable ties, bend over, and clean it up.

Funny enough, this is a stark lesson for why Quirky failed. They made exactly the sort of thing you asked for and nobody wanted it.
The problem is that often the TL;DR is shorter than the article, but also incorrectly represents it or is sometimes just plain wrong. Following this leads you to an misinformed decision, not an informed one.
I don't think it's a double standard. Most people would not be unhappy that he was punished to the full extent of the law (although generally I dislike "example" cases that are treated more harshly) if all of those involved were pursued, including those at more senior levels in the bank who were aware of and sanctioned the actions. You would not, by contrast, see prosecutors stop pursuing the top level drug dealers just because they got somebody to make an example of publicly.
I think its because there are tradeoffs for managing the complexity yourself. Using this same argument most abstractions which have performance overhead should be unacceptable. There are tradeoffs everywhere and I guess this is one that a lot of people have accepted.
Not knowing anything about the case, my guess is that to secure a criminal conviction your need hard proofs. These traders have been incredibly helpful by documenting on recorded chatrooms all their crimes. Unless their bosses have been stupid enough to do the same I wouldn't expect to see any of them in court.
A lot of new AAA titles are pretty superficial in comparison to 10 year older ones. That's why many people like to play older, or niche games.
businesses might not want their employees putting 125gb of music or photos or games on the phones they provide.
Ouch, i use one of those at work, i shudder to think the shitstprm id start if i did that.
Following in up on this we just rolled out `application_fee` on the Order Pay endpoint (https://stripe.com/docs/api#pay_order).

It'll behave as expected if you're familiar with the connect `application_fee`.
AMD’s outspoken, plucky underdog routine is doing more harm than good
No it's expertise...
You are just too naive to believe that gov relationship is something less important or could be obtained without much effort...
To be fair, nobody will choose React because of the virtual dom. The virutal dom is just a tool to make React perform faster.

You should choose React because it makes building reusable (web)components for applications much easier.
A Look into LastPass (2014)
Some things that jumped out at me while reading this article:

Stata offered to secure a $2 million three-year subordinated loan from the Bank of Boston in exchange for options to buy $2 million in stock and a position on the
Board.52

In 1983 2 million was a shit ton of money. By comparison, in 2015, it would be around 5 million.

Infocom hired three product managers, who each had assistants and secretaries under them

A marketing manager with assistants and a secretary? Oh how things have changed. If you were this guy in 1983, you had effectively made it. Today, if you're a marketing manager, you'd be lucky if you weren't still stuck in a cube.
Blog post about the sploit here from the authors: https://news.ycombinator.com/item?id=10217551
Federal Court Invalidates Gag Order on National Security Letter Recipient
This may answer your question:
Bayesian comparison of a quantum versus a traditional model of human decision making

http://www.thedocc.com/wp-content/uploads/2015/02/J24.-BuseW...
Awesome story! I can imagine that if you start to fight back, people running bot network take it as a challenge.

By the way, what do you see as the benefit of putting ssh to a different port? To cut down noise? I used to do that, but as they are scanning ports anyway, it seems better idea to just focus on honing fail2ban rules.
I'm so excited for this to take off, and it's good to see they've taken the first steps, but can I at least download the CA Cert over HTTPS? Not sure how comfortable I am installing a CA cert I downloaded via HTTP, since that's kind of the whole point of this whole thing.
I was once turned down because I am an engineer (EE) and not a CS grad. Your mileage varies wildly. It all depends on what kind of product you want to work on. If you're going to write web front ends, CS may be overkill. If you are going to write an OS or a search engine, it won't be. If you are planning on writing guidance software for rockets, CS may not be enough.
Quantum mechanics does not permit parallel states to "communicate" in any way. The theory is purely linear (i.e. acts somewhat independently on all states), except for the wavefunction collapse phenomena. Any non-linenarity would, for instance, immediately imply that we can easily solve NP-complete problems using quantum computing:

http://arxiv.org/abs/quant-ph/9801041

So QM is probably a poor model for explaining human indecisiveness and irrationality. Much better is that it is simply the thing that evolution has come up with that can a) fit in our brains and b) yields proper results.
I use http://www.passwordstore.org/ without any plugins. I imagine this has to be pretty rock solid.
Simulation of a forest fire in Unity
Off-topic, but I tried to wipe that extra stroke off my screen thinking it was fleck of foreign matter.

Turns out it's supposed to be there.
The Staggering Scale of Germany’s Refugee Project
Which Memory Type to Use--Why Bandwidth Is So Important
That's visual hair comparison, not DNA analysis from hair follicles.

It's a hard problem for the courts to tackle. How are lay judges going to go and make the determination of when a seemingly legitimate "science" is legitimate enough for admissibility in court? Reputable universities give out degrees in forensic science. Ultimately they're the root cause of this mess. IMHO higher education has a social obligation to curate these disciplines.
Paper.

Password Safe has (or had) Bruce Schneier's recommendation, for what that's worth. I think he helped design the original version, years ago.

However, I think the key question is, what are you protecting? I doubt Schneier would recommend Password Safe, for example, for nuclear launch codes, but maybe your email password (depending on what's in your email).
Eric Schmidt on Intelligent machines: Making AI work in the real world
Combining React and F# to Make a Drone Design Site
It may exist only to push the consumer to a higher price. 16GB is a low-friction pain point that pushes many people into to an option with more profitable margins for Apple.
From a human perspective, this is what gets me about climate change. So many preach about it, so few practice what they preach.
NoFlo
Some of what 1password provides is a synergy of security and convenience.

1password's browser integration can save you from phishing, because it can tell g00gle.com from google.com every time and not offer to fill in your google.com login, whereas if you're used to just copying from your password manager, you have to make sure not to mess that up.

Lack of convenience means manual work, which means chance for error. This is the same reason we recommend coding using trustworthy high-level crypto constructs instead of implementing it yourself; it's more convenient and harder to mess up.
Super cool feed of top trending #drone, #robots and #robotics news
Well on the bright side I think you can export your lastpass account to something better, like 1pass.
'Red Dragon' Mars Sample-Return Mission Could Launch by 2022
get users addicted; when it's too painful you buy a bigger more expensive phone.
This is a disaster in the making.

In first year economics you learn about opportunity cost. The classic example is a student straight out of HS taking a job at McDonalds because it pays now, vs going
to university and delaying earning money for a better future potential.

But most of all, these are vocational training which won't be of value 15 years through your career. A CS degree will teach you how to think and fundamental skills that will still be of value 30 years from now.
1Password is available on OSX/iOS/Android/Win, but isn't available on desktop Linux.
You can sync it with your phone over local wifi connections.

It's not as secure as a pure-usb connection, but might be worth considering.
If the customer service experience was anything like what it was pre-pivot, I'm not surprised they failed.

When they were going out of business/pivoting, I ordered a bunch of their inventory at a large discount. One week after the "expected arrival date" (and 14 days after my order), surprised that my order hadn't arrived, I emailed them asking for a tracking number. They told me that it was waiting for the carrier to pick up the order and that I would get a tracking number that day. Every two days, repeat the same thing. Promises, no tracking number. Finally, 5 weeks after the order was completed, I received a tracking number.

Terrible experience, for what amounted to a bunch of (fun) junk.
Unfortunately I've seen the opposite result so far. I've seen authors literally balk at the suggestion that they shouldn't have full control over their creations for perpetuity, and upon further digging, their point of view was that anything less is immoral, not just illegal.
That mostly doesn't help, due to the fact that, as I understand the term, standard "decision theories" are intended as normative theories, meaning that when real behavior deviates, the investigators write the behavior off as wrong for failing to conform to theory, instead of trying to come up with a theory that actually describes the behavior.

So if you end up comparing an even-loosely-descriptive theory to a normative one, the descriptive theory will win, every time, no matter how far it is from true accuracy. That is, if you line up prospect theory, standard normative decision theory, and some new descriptive theory, the latter will definitely win in a model selection. But that doesn't tell us how the quantum descriptive theory compares to, for instance, the causal-probabilistic descriptive theory.
Certainly there are no claims of quantum physics being relevant. That would make me much more suspicious.

There's been a lot of "normal" bayesian modeling in cognitive psych and it has problems with the examples they address. So the point isn't data modeling per se, it is better data modeling, which is often worth a look.
Battlecruisers: The Glass-Jawed Warship That Failed
Keepass and variants have served me well (as far as I know...)
From above link: "Our attack only covers users that click the “Store my password” option though so, don’t store your master password!"

That seems a rather important detail. Thanks for the link.
You can download the cert via HTTPS from https://letsencrypt.org/certs/isrgrootx1.der
I received a Fine Art major with a business minor decades ago. After college I attended a six month program at a school in San Francisco called the 'Computer Learning Center' and learned COBOL and Assembly. I have learned a number of other languages since and write code today for a living.

I loved attending a liberal arts college (The University of Puget Sound). The education I received there enriches my work life and non-work life a great deal.

If you are interested in CS today, I think that getting a CS degree at a liberal arts college would represent a wonderful combo platter of useful skills and broad-based knowledge of the humanities and other non '1s and 0s' subjects.
I've used Avis in Canada, UK, Spain and Australia - a fair sample. Not all Avis outlets are the same. For example in Spain they will happily scam you with Dynamic Currency Conversion. Don't take this one event and think Avis are angels. Try the flyertalk forum for Avis..

To be fair though, Avis don't particularly stand out - all car hire companies pull these "tricks" (some people have alleged fraudulant).
It seems possible that the censors don't need the private keys because they somehow get access to symmetric keys used to terminate the connection. That would be bad, but at least doesn't affect users outside China.

(To be clear, this is pure speculation; I have no actual knowledge of such things.)
Fair enough. But I think this raises an interesting, and possibly challenging legal question: is a takedown request (including the standing requests that that content id allows) a "notification of claimed infringement" under the DMCA even if YouTube calls it something different? I could see this going either way if it were tested in court (maybe it already has been--I don't know). But if I were YouTube, I would try to keep my content ID procedures in line with the DMCA procedures voluntarily so that I wouldn't have to find out the hard way. The terminology and general procedure that YouTube uses for content ID roughly parallel the process set out in the DMCA, so I'm inclined to think that YouTube is thinking the same thing.

I expect that someone in YouTube's legal department already has a memo someplace discussing the implications of this ruling for content ID that addresses these very issues.
The one other thing about this proof compared to the exposition of upper division college math is that it doesn't follow an easy linear path but is instead using the theories and tools in an ad-hoc manner. Getting an idea of theories and proof methods as a toolbox rather than just a linear progression of ideas is one of the milestones of "mathematical sophistication" - especially because it's important to not lose sight of the linear development of the field as well.
Any popular password manager, especially an online one, is likely to be compromised. Security has to make a successful attack more expensive than the target is worth. How much is all data in all accounts of an online password manager worth? That is a very attractive target, and generally in IT it is much cheaper to attack than to deend.

I doubt any password manager vendor has the resources necessary to truly protect their users. At least, if you are not paying top dollar for security, don't expect much.
If it's a calm, rational discussion about evidence then science usually wins. In fact science wins that one so often it isn't very exciting.

If it's a heated debate about who can call who which names then everybody loses. Which is why I chose to present them with the evidence they asked for while giving them the benefit of the doubt. When somebody with views like this gives the invitation to discuss evidence I say take it in good faith and encourage them to continue down that path.
> A cross-signature will be in place before general availability.

https://letsencrypt.org/2015/08/07/updated-lets-encrypt-laun...
The catch being that it's very difficult to anticipate multiple decades of career from the very start. You might not plan to do something, but that doesn't mean you won't change your mind later.

I've known people who cannot advance their careers in the ways they want because their lack of education stands in their way. It's very frustrating for them.
Baby steps. This is a huge step forward, and I'm willing to cut them some slack considering they're about to shake up an entire industry.

EDIT: Kudos everyone working on Let's Encrypt. You're doing awesome work.
Fixed, thanks for pointing that out.
I don't understand what it is we should "beware" of? What's the perceived threat?

In theory, even if the NSA themselves were creating these site certificates, because of how they're created (i.e. you generate the keyset yourself locally, they sign the public part), it should be secure.

So as I said: What is the perceived threat condition here?
Super Mario Anniversary Easter Egg by Google
I use 1Password. To my non-security-expert eyes, the two weakest spots in how I use 1Password are: (a) The plugin I use on the browser, (b) The fact that I use Dropbox to sync the password keychain.

I can maybe move the keychain to an encfs encrypted folder in Dropbox. Then, I won't be able to use 1Password mobile app. And for the plugin, perhaps I can disable the plugin and copy-paste the password directly from the app.

Would love to get others' feedback. UPDATE: It appears I can combine sync through encfs folder and manual sync through phone to achieve sync on all devices.
Do you consider a facebook production app a least common denominator?
Pinterest open-sources Terrapin, a tool for serving data from Hadoop
To be honest I had not heard of them till now, and I am a bit confused even after reading some of their site...

So if the difficult part of being a CA (which I think is verifying that I, Paul Brian, own and control the rights to barlcaysbank.com and should have a certificate in that name) if that bit is either not done (!) or is reliant on donations to be able to afford it, is this going to work?
There's also the signal to the market that this flight is in demand. If you're only on the flight for points, (not the utility of the actual flight) then you're making a purchase without it actually being in demand. How this plays out - the airline seeing demand and adding another plane, or having more passengers so they can drop their rate to cover marginal costs and encourage even more passengers... I don't know. No judgement, just saying there's more to it than the jet fuel.
Uncertainty Reduction Theory
What I try to do is use LastPass for unimportant passwords and just remember unique but memorable passwords for important sites, like my bank's.

But nowadays this is pretty tough in general.
The math and code behind chord diagrams
> renders it more dangerous than not having it

If I were your friend, I would tell you that this is still dubious owing to the fact that without it, many people might use very weak passwords that never change. You gotta weigh that and the vulnerability it presents for large-scale remote attacks/leaks, against the likelihood of these guys getting local access to your machine (i think?) for this exploit.
It is possible to build an app purely in JS. The Facebook Ads Manager was built by a team where some people had mobile development experience and several people only had JS experience.
This is such a cool project as a whole. The domain, the simplicity of the project (curl wrapper), the fact that the homepage is basically a man page, the simple auth. It's just an awesome concept and really well done.
Is "Christina Warren, writing at Mashable," with no link, actually considered an acceptable way to quote an author online? It's sort of attribution, but it feels obfuscating.

The article they're referencing is here http://mashable.com/2015/09/10/iphone-6s-rose-gold-is-the-ne...
It's not like it is the first time this has happened. EDS (remember them?) had so much demand for programmers back in the mainframe days that they resorted to hiring people with no knowledge of computers, pushing them through a three/four-month course in programming, and them putting them to work as junior coders.
Is this happening in 2015?
Why is the latter better?
Getting tired of these posts. It is so easy to say college is irrelevant. At a high level, it is a mostly generalized education that of course can no longer guarantee success due to the sheer amount of people who now obtain a degree.

However, college is still relevant. A smart man once told me that college is a place to learn how to learn. Managing a schedule, living on your own, succeeding in courses that you are not passionate about, showing up on time and just overall having your shit together are things you will need to be successful in real life.

Unless you have ambitions of being a sys admin for life straight out of high school, then maybe you should save your $$. Even then, I'd still probably go to college. It's 4 years that you'll never forget for better or worse.
That's from 2014, though. I would imagine what they are going to present is more current research?
1pass likely has similar problems (if you are talking about 1password)
Reading that, it looks like the master password retrieval relies on you using the 'store password' feature, which means anyone with access to the local machine would have access to your vault anyway. Obviously such a feature will reduce security, although you wouldn't necessarily expect it to make the password itself retrievable.

This was also somewhat reassuring:

"As always, we made a responsible disclosure to LastPass. I want to stress how easy it was to work with the security team. The where very responsive and worked on fixing the issues we reported immediately. They also followed up with us from time to time and asked for our thoughts on every fix. It was a real pleasure to work with team!"
Why the ‘happiest’ cities are boring