skysight-inc/HackerNews huggingface dataset:
Why don't more websites that are vulnerable to these types of breaches also encrypt user email addresses as well any personally identifiable information? I don't foresee any performance implications if everything is cached anyways.
Also, phishing and Man-in-the-Middle protection.
I can't agree with this. There's nothing about brutalism that means it prevents humans 'blossoming' or 'prospering', whatever that means. The focus of a lot of brutalist architecture was on functionality – that is, discarding the pomp and frivolity of some older architecture – and making them more focused around the actual functional needs of humans.

The problem is that the brutalist movement, at least in the UK, overlapped with the poor construction methods of the 50s and 60s and economic realignment that resulted in brutalist social housing projects. In the long term, extreme under-investment in maintenance of these projects means that they deteriorate into uninhabitable hellholes.

But there are exceptions - the Barbican estate in London, which is as brutalist as it gets, is a great example of how this sort of architecture can work when properly funded and maintained.
the problem is, if you intend to use the data within the application, you need to be able to decrypt it. If you can decrypt it, so can anyone who compromises the website :)

with e-mail addresses you need to use them in their unencrypted form (e.g. as login names), so encrypting wouldn't do much for you against most attacks.
Not sure why you were downvoted for this. I mainly use it out of curiosity as well. It's very occasionally useful as a sales tool ("Hey, look, your competitors are all using Magento so you should too!") but I'd be lying if I said I used it that way on anything like a regular basis.
Architectural hell.
Ok thanks. This thread was about the gear generator so I won't ask anything here. I'll go to glowforge.com if I need to know more.
Encrypted with what? This is a total dump of Patreon including their SSL certificates by the screenshot on ars.
I first assumed these were concept photoshops of what suburban concrete could be made to look like. Never seen anything like it before.

https://img.washingtonpost.com/wp-apps/imrs.php?src=https://...

Beautiful, scenic, futuristic. But it does not look like a place I would ever want to live in. It really does look brutal, it almost has a fascist vibe.
Show HN: Norwegian “Social Task Management” app seeks investors
Depends on the attack. If the key used to encrypt the data is stored on another server and loaded into memory when the application is initialized, then the attackers technically wouldn't be able to get access to that key unless they also hacked the server with the key.
The unexpanded ZX81 had 1kB of RAM, of which 672 bytes were usable (and you had to fit your video framebuffer and program storage in there; no ROM cartridges here!).

Here's an emulator: http://www.zx81stuff.org.uk/zx81/jtyone.html
The procedure mentions that you need 43 Rotlung Reanimators. A magic deck can only have at most 4 copies of the same card. :-) How are the copies created? Shouldn't be too hard to create infinite copies of a card, but I didn't see this mentioned anywhere.
the intern group is a joke at best. getting rich kids to pay for internships to make their CVs look more international. There isnt any innovation or disruption or even value creation involved. I'm not sure its something SUP Chile needs to be proud of.
> Because the only thing Go did was bake CSP into the language, it is nice, but not a solution for every concurrency problem.

I'm not sure I understand your sentence. Are you saying that communicating sequential process only works because it is first class in Go or that CSP is not a solution to every concurrency problem ?
I don't see how that protects anything, if the information is around for the webserver to use it's around for whoever has root on your box.
It's just sugar, and allows people to write JS do to this in a more consistent manner.
> who exactly is locking your desktop supposed to protect against? Do some offices have untrusted people running around with access to workstations?

Yes, exactly this. Why is that surprising? Why bother with user accounts with audit trails; why not just use user:GUEST pass:GUESS for everything?

There's a bunch of places where you want to make sure that trusted employees are not gaining access to things they shouldn't. EG health care providers.
Why do we sneeze?
Quite a juxtaposition to think about!

This makes me think of King James Programming: "Posts generated by a Markov chain trained on the King James Bible, Structure and Interpretation of Computer Programs, and Why's Poignant Guide to Ruby" http://kingjamesprogramming.tumblr.com/
This is the paper about type inference: https://users.soe.ucsc.edu/~cormac/papers/esop07.pdf

I think I've understood your points and made mine, so lets see how it pans out :) Thanks for the discussion!
How to Use DhtmlxScheduler with Ruby on Rails [Tutorial]
sure for some attacks it might help, but ultimately if someone has compromised your server, that server is likely to have the ability to load the key to decrypt the data.

For example to handle the case of unattended server reboot, you'd be likely to have the server have a script to load the key back into memory. Attacker gets shell access, they get the script, they get the key...

Security is always a trade-off and people tend not to engineer their webapps with the assumption that they'll be breached in specific ways.
If your entire box running with source is compromised, could you not just edit whichever file pulls the key to also dump it to a file on start .?
Singapore’s radical new public transport plan
The "police and crime commissioner" scheme was an attempt to replicate the US model of policing in the UK. However, since they don't have the power to direct prosecutions or any real budget, it's a completely useless £100k-year post that gets 5-15% turnout in elections.
I didn't see anything crumbling there. You can like the style or not, but that's a different thing.
O the tone of MS harping on about what Edge is doing feels like smoke and mirrors to me whilst IE11 will remain one of our lowest common denominators for some time. I respect that a team would love to forget about IE11, but MS is the only company that has any control over it... so whilst they dazzle people with c# style syntactical sugar and pushing typescript (which we will have to compile down to ES5 anyway) I find it hard to get excited about Edge.

Get the basics done right first imvho. I don't want developers staying late to try and understand why something isn't working in a MS browser anymore.
Exactly.

The light in the images gives a hint of how the illusion of emptiness was created. They're all shot early in the morning, waiting for the right moment when nobody is in the frame.

I have a book called "Tokyo Nobody" which does the same thing with Tokyo city scenes. It's unsettling because we're so used to seeing the same streets bustling with people.
It would still protect against attacks that don't involve having root access to the box (i.e. Ashley Madison data breach)
Jonathan Meades makes some outstanding BBC documentaries about brutalism. The intellectual density and quality of his writing (narration) makes him totally unique and he has changed my view of architecture. Well worth a look if you can find them.

I wouldn't be surprised if he inspired this article given his last one was called "Concrete Poetry":

http://www.bbc.co.uk/programmes/b03w7b7x
RF rectennas apparently already have efficiencies up to 90%. According to this article, improving the fabrication process could lead to optical efficiencies up to 40%. That's double the efficency of any photovoltaic cell available today.
A friend of mine used to live in the high rises visible in the background of the "Les Orgues de Flandre" picture and it was bad.

Between dealing in the lobby to urinating into the elevators you had pretty much the entire spectrum of shit going on.

Apparently they cleaned it up some by now.

Amazing is the fact that he still lives in the 19th (which is a very cool part of Paris in lots of respects) some 250 metres away and it feels like a completely different world.
When design meets cardboard
Beauty is in the eye of the beholder and now even science agrees
Show HN: Automated Bundle Update with Descriptive Pull Request for Ruby Projects
Isn't the main purpose patenting?

Even if Google does create a moonshot, they might not be the ones to directly profiteer from it. It might be preferrable to take rent from smaller startups that later on come up with the same idea.
They have set out to aestheticize a series of projects where humans do not live well. We consume these photos as art, but the feeling of profound alienation and danger inherent in such ill-formed spaces doesn't lead to healthy communities.
That's a lot of words to say not much besides the obvious fact that old people are just like us, trying to get by, still doing, for the most part, what they have been doing all along.

My parents are both 84 and behave like everyone else; they use technology just like teenagers do, my father texting constantly with his grand children and my mother using her phone to take pictures of everything and anything. They each have their own computer and share files with Dropbox. They go on holidays. The set up wifi in their country home by themselves when they get there.

As for the "reading list", may I suggest Saint-Simon? This contemporary of Louis XIV, born in 1675, wrote all his life but started his masterpiece, his Memoirs, when he was 65 (in 1740) and finished 10 years later at 75, having produced the amazing total of around 3 million words (for reference, the 7 books of Harry Potter are under 1 million words; the King James bible around 750k words).

Creating in old age isn't something that happened miraculously in the 21st century.
This is true for the historical center, not for the suburbs. Most people are leaving outside the Paris city limits anyway (Paris: 2M, whole Paris area: 12 M).

And siblings hare already answered, they are still used.
Trying JSON in Django 1.9 and PostgreSQL (and Compare with MongoDB)
I love these monthly progress reports. As a non game-programmer, there's not much of immediate use to me, but these writings give a great insight into the development of the project and sometimes they have really interesting and surprising anecdotes that are just fun to read.

Like the one about fixing the audio in Mega Man 3 after fixing the video timing.

If people from the Dolphin projects are reading HN: Thank you for your hard work and especially thank you for writing the monthly progress reports.
demon (long running task in the background) != virus

Virus' primary function is to replicate itself and infect other hosts. You can not simply install apps (or viruses) on other mobile devices without user intervention. Also viruses need access to system and/or other apps to be able to propagate itself, which is not the case on mobile platforms.

None of that things is true for demons.

Btw, iOS also has long running processes if you register proper functionality (VoIP, background download..) when submitting the app to App Store. Also iOS and Android apps can be awaken from the server and perform tasks without user noticing it.
From my experience no it does not turn them into dumb phones, just disables most background sync, you can still turn on mobile data and wifi and use them, but they will turn off as soon as the phone "sleeps", lowers brightness etc etc.
Are Facebook access tokens vulnerable to such an attack?

If I remember correctly, at least Google tokens wouldn't be: The application receives a token from Google. With that token, a new session token is created. This session token expires and can only be renewed with the application token and the correct redirect URL.

If Facebook uses a similar scheme, tokens would be useless without the running application renewing session tokens.
And I find a profound beauty in it. Having been born in the US where brutalism is not common, I see these things and immediately am gripped by them. The design speaks directly to me and inspires me to be part of it. I want to be close to it, to work in or near it. I want to blossom and prosper, but I am within a context and find these spaces to feel like natural spaces. In these spaces, I feel that I have nature as a platform. These things show an unbridled creativity and confirm human ability to mold our environment while not separating ourselves from it. And they don't just survive in time, they become better. The patina these structures take on adds a meaningful layer to their design.

These classic places you speak of survive time because they are attended to furiously. They are things which degrade exponentially without attention and they are ongoing sinks for human capacity in support of their own ostentatiousness. They may please some eyes because they are so out of character. They are rebels against nature and humanity. The inspire us to be other than what we are - godlike and beyond our natural limitations. They are feats of design, but they are more limited in what they express. The idea of working in them makes me feel like I am being conquered by other people's limitations and conformist ideas of beauty.

In disrepair, both will eventually crumble. In brutalism, I see my condition, but also my opportunity. In classicism, I feel distracted from my condition and oppressed by those who would put forth pomp while taking away individuality and opportunity.

Trophies of monarchies vs. triumphs of people.
Restaurants using big data to build picture of who you are and what you eat
I put together a tutorial on writing a simple game in PICO-8 https://www.youtube.com/watch?v=ZuaLuMhwcc8 its really a fun platform to play with
On an interesting related note, during the recent Russian occupation of parts of Ukraine, a helpful app was created and released by "Russia" [1] that would allow pro-Russian civilians in the region to act as reconnaissance for the Russian and pro-Russian forces. Very simple; if you see some Ukrainian military, push the matching picture on the app. Your location and chosen picture are uploaded, and whoever is sitting at the other end sees all the results.

Bingo; you've turned the civil population into military reconnaissance. Are they now a valid target? They certainly don't seem to be just plain civilians anymore, but they're not lawful combatants either.

As it turned out, I am led to believe that the app wasn't a great success, but it's still a disturbing trend.

[1] I say "Russia" because I can't dig out more detail right now. Obviously company X working with agency Y or some other such.
Location: Phoenix, Arizona

Remote: YES (Preferred)

Willing to relocate: Yes(Austin, Seattle, Europe)

LinkedIn: http://linkedin.com/in/owendismuke

GitHub: https://github.com/owendismuke

Résumé/CV: Ask through LinkedIn

Email: Ask through LinkedIn

Technologies:
JavaScript, C#, AngularJS, Azure, Heroku, node.js, Express, HTML, CSS, Git, Go, Coffeescript, D3, React, Bootstrap, Web API, MSSQL, MySQL, Grunt, SignalR, Sequelize, Mongoose, WCF, SVN, TFS, Foundation, ASP.Net, jQuery, GAE, Chai, Mocha, Jasmine, Parse API, Firebase, MongoDB, Waffle.io, Ionic
The toxic side of free. Or: how I lost the love for my side project (part 1)
How do you distinguish someone who was lax with their security from someone who actually takes it seriously and still got hacked?
"analysts estimating operating losses ranging from $500 million to as much as $4 billion this year"

So 500 millions is a little money ?

Reminds me of a congressman that said (approximatively) : "a billion here, a billion there and pretty soon you're talking a bout real money".
At one place I worked we had a team agreement that it was ok to do small pranks to people who left machines unlocked.

Often small changes can have huge benefits, the smallest effective security hack I can remember was a one word change:

We changed "last person to leave for x activates lock" to "first person to leave for x activates lock".
I would say that the CTO is probably a bigger liability from an HR perspective than the potential security problems of leaving computers unlocked.
There are several commercial users in the project list: https://www.emulab.net/projectlist.php3
Its funny how the rules were at most 4 copies, yet I had a red/white deck that had different versions of essentially the same spell (1 red + n colorless damage to target player or creature), and used it frequently against people who didn't understand how to properly defend against it. Had something like 12 cards in that deck that just did that.
> And if they are sending enough spam, then any common identification for their emails is going to end up getting flagged as a spam indicator, which will cause all of their email to get filtered as spam (even though a lot of it isn't spam).

Postfix clearly identifies itself in email headers. Thunderbird clearly identifies itself in email headers. The ratio of non-spam to spam is high enough that the Bayesian filters don't train to recognize those as a spam keyword.

If MailChimp were a legitimate tool, it would fare the same. The fact that MailChimp doesn't meet that ratio means that too many people mark what is sent using it as spam.
"This is also true if you need the highest possible capacity and power efficiency. You can’t pack half a PB of Flash in 3 U with commodity hardware."

http://www.storagereview.com/dot_hill_ultra48_assuredsan_2u_...

you can get pretty close, .4 of a pb in 4u.

Plus if you spend some money on infiniband you can get some impressive through put, faster than whats possible with violin and EMC
Even more strictly speaking, that's a trend.

In my area, the cheapest you can find still in inner London, the average price of a 2 bed is 300K and new flats are 500K and up. All but 1 landlord in my building bought their flat since 2007, all the rest bought them between 60K and 80K when they were built in 2000.

That's the tricky bit when thinking about fixing the problem. Even though only people that can afford 300K and more can move in, the majority of private landlords are of modest means and that's going to be that way for decades.
PicCollage | Taipei Taiwan, VISA, ONSITE

Android and Rails developers, INTERNS welcomed

• About PicCollage

Hello! We are PicCollage from Silicon Valley,

a top 10 photo app for iOS & Android with over 100 million downloads.

Do you want to build something that is used by millions of users around the world?

Do you love to learn, hack and build awesome stuff?

Join our team to build PicCollage and make the world more fun and creative!

Check out our Taipei HQ in 1 min: https://www.youtube.com/watch?v=No6V1zFJE8k

• We are NOW looking for...

- Ruby on Rails developer (Server developer)

- Android developer

• We need someone who…

1. Is fluent in English

2. Has good communication skills and loves to share ideas

3. Has logical thinking and patience with trivial tasks

4. Has hunger to learn new skills, curiosity for new things, and passion.

• Apply here: http://cardinalblue.com/dev

• Contact us: jobs@cardinalblue.com
No Problem.
I personally think it's gorgeous, but it stands and falls with the people who live there.

It's just like I sometimes see pictures of what in the US are ghetto suburbs and I think: this could actually be a lovely neighbourhood. (As a European who has lived all his live in densely populated urban environments it baffles me how people can't turn a neighbourhood where everyone has a free standing house with a yard into a pleasant place to live.)
I think the question is more about 'old' customers rather than 'big'.

The reason most of the time is that the company had a bunch of apps/websites built in the era of IE6/7 maybe even IE8, and they need to be able to run in compatibility mode. It is cheaper for them to stay with old IE than to have these apps re-written for modern browsers.

Hopefully we're nearing an age where the cost of maintaining these old systems is starting to be more painful than upgrading, but I'm sure we'll continue to see old IE requirements for another 5-10 years.
They have legacy applications, written in the late 90s, that have been maintained barely alive because they are linked to a critical process like supply chain, pay, etc, and they still require their employee to use the most ie6 compatible browser.

It is always cheaper to ask the new application to be backward compatible with the environment, rather than upgrading all the legacy ones. But this is also the surest way to dig your grave deeper...
I would suggest that if you can trivially access confidential data from an unlocked workstation then you probably have bigger problems.
On the "Cards" page, http://www.toothycat.net/~hologram/Turing/Cards.html:

> The first sixteen Reanimators were cast in the normal fashion, four by each of the players, and donated by a Bazaar Trader. The other twenty are Clones and Vesuvan Shapeshifters copying a Rotlung Reanimator. The phasing enchantments can include Teferi's Curse, Cloak of Invisibility, and Copy Enchantment, cast by any player and donated by a Bazaar Trader. These creatures and Auras must not be tokens, because tokens disappear when phased out.
Hackers steal T-Mobile data on 15M US customers
Estimating Pi with the Mandelbrot Set [video]
Dropbox does something similar called Edgestore which is built on top of MySQL: https://www.youtube.com/watch?v=VZ-zJEWi-Vo
While a tweaked configuration can be a great productivity boost, it has a major drawback. My main reason for using vim is its ubiquitousness. Whenever I need to ssh into a box to check something out, I can trust that it's there. However, I cannot trust that its configuration has been tweaked like I expect. Hence, I stay away from getting used to non-standard key mappings.
NRA requesting to equip more people with weapons to prevent shootings.
Afaik the main problem with 3D structures is heat dissipation, which limits this approach somewhat. But nanotubes might help with this as well maybe.
Joe – CLI Python tool for generating .gitignore files
It depends on whether you think competition is _always, indisputably_ good, and cooperation _always, indisputably_ inferior and/or suspicious.
it's extremely memory hungry, and you need huge machines
So to be Turing complete you have to play with 4 players?
Their site is infected with "Let's Make Big Fat Pages" syndrome with overlarge graphics and little text.

A few paragraphs work faster. I don't have time to watch a video on every throwaway site I visit from a link.

EDIT: http://www.noteslate.com/ is a perfect example.
This is certainly true, but observing some of my peers, I now have the distinct feeling that the desire to learn new things, both physically and intellectually, diminishes much more quickly that the actual ability.
It is not a solution to every concurrency problem.

I tend to use languages that give library writers (almost) the same control as the language itself has.

EDIT: To expand a little more into what I mean. In most languages that offer async/await, that is mostly syntactic sugar (with some compiler help) to the blessed task pool library.

A good way to explore that is to see the parallel libraries available in C++, JVM, .NET, Haskell and OCaml worlds.
Oh, I already did some of that. I've already killed about a dozen email addresses permanently, and anything sent to those triggers a black-list of the IP for an exponentially increasing amount of time.
Then they didn't do it seriously enough? Either they are not hacked or they can find the person responsible (rogue employee, etc..).
So by this logic the whole startup scene is "money losing"?

It just shows how bankers are short-term oriented and do not understand long term investing that at the end really makes the difference for the whole society (and ultimately turn the profit).