skysight-inc/HackerNews huggingface dataset:
There's something about pasting vs typing that fails to give the user the necessary feedback and this has been a problem for a while. I faced this same issue years ago and I finally figured out my passwords were being truncated by hitting the 'forgot password' link and noting that the service emailed me the plaintext password (another problem but let's do one at a time) which was fewer characters. My original was 32 and the one they sent was far fewer.

I emailed support to ask and they said 'oh yes, we limit the number of characters in your password'. There was no documentation or feedback on the page to tell you this if you pasted the password, but if after pasting you deleted the last character and then tried to re-type it, you would see the error. Pasting never triggered the tooltip telling you the issue.

Now I try this each time I sign up for something which is a minor hassle but still much easier than the seemingly random failures I had been seeing. It also taught me to immediately sign out and test the services' password recovery functionality to weed out the ones storing plaintext passwords, so that's good.
> Sounds so insane I guess it must have really happened.

That happened to me on either "verified by visa" or the mastercard equivalent. I had to reset my password a few times before I figured that one out. For those that haven't used this it's an extra password protected step that comes up sometimes when purchasing things with your card.
Yes, that is where we are heading.

Not communism though, more like corporate ownership of everything. That is, corporations own the property since they exist forever, humans rent them, since their existence is transient.

Remote working, minimalism, cheap flights, universal passport, home rental through Airbnb, Uber for travel. The pieces exist, they just need a little time to work through the system.
I don't think so. Stealing passwords from password manager with a trojan software is much easier (and safer) than breaking into somebody's house. In some countries you can even get shot for that.

You can say the same about credit cards: they can easily be lost, stolen etc. But generally they are better protected than internet bank account with just a password.

And the most appealing point is ease of use. Inserting a key and pressing a button is much easier for a common person than dealing with complicated matters like login, email or password.
Iranian here, it is highly unlikely to happen.but right now something going on under the cities skin which is low enforcement mostly don't show any interest to arrest ordinary users of herbal drugs( for chemical and modern drug it is whole another story,for example X pills.they will find and arrest you.and if you are distributor they will executive you 100%).but they vigoursly arrest and track distributers even herbal drugs.

p.s. if you have questions I would be glad to answer.
Most BSD systems not include GPL code in their base system if it is not necesary but you can install it from ports or whatever they have.
What do you think of the ideas in this video:

http://youtu.be/Hy4QjmKzF1c

I believe it captures most of what is important in making a livable city that people enjoy living in.
SSAE16 SOC I II III|Statements on Standards for Attestation Engagements
I'd like to be able to use my phone for this.

It wouldn't be as secure as a special purpose device, but it would be a whole lot more convenient. Given that people are using banking and pay apps on their phones, I think it doesn't really introduce any new issues for the typical user.
It's easier for a thief targeting specifically you, but that's not what most password hacks are about.
I don't understand what this is for. Could someone suggest some use cases?

Is the idea that you can write an app in a language which is a subset of Java, then deploy it onto multiple different platforms? Given that you can already do that with actual Java, what's the advantage? Is it just that you can deploy on iOS, where there's no JVM?
Also possible to get a heatmap of a keyboard to see what keys were pressed last. I've seen this attack carried out in a youtube video, where a hacker could log back into a kiosk terminal simply by grabbing the heat signature emitted from the last few keys pressed.
16TB SSD is coming from Samsung next year:

http://arstechnica.com/gadgets/2015/08/samsung-unveils-2-5-i...
Did anyone else think it was strange, in an article about runtime efficiency, for them to say that problem-specific optimisations promise speedups of "several orders of magnitude"? Because, well, that doesn't change the order of the algorithm...
What are you going on about? Your giant post did nothing to refute the point that an attacker doesn't know you are using 1 word vs 4 words vs 12.

Also, you seem to imply that there is a distinguishable difference in sha1 outputs of good random inputs and English word inputs, which violates a security property of cryptographic hashes. So there is a lot of fame to be had if you can prove that.
> So, are we trying build some communist utopia where private ownership of the building is forbidden,

No, the building is private property.

> all land belongs to government which rents it to a citizens?

Yes. The idea is that taxing land (not: buildings or property!) is less distortionary than taxing income or consumption. Hyper-capitalistic Hong Kong operates on that model. Property is expensive, but income tax is around 15% and consumption/sales tax is 0%.
Court orders Interxion to close Paris data center
I despise expiring passwords. My university makes me change my password every 6 months, and they keep a list of the last 2 year's worth of passwords so that you can't reuse them. That, and they disallow some characters such as "#" and " " (space). It's annoying.
I'll believe it when Google start acknowledging human being's desire for privacy as a real thing instead of a technical and commercial obstacle.
The SM951 is an OEM product, but it does have better specs.
Running PHP/Symfony Applications with PHP-PM
I guess it is a good thing they are not smart enough to realize that.
As I said in another comment I am from Iran.the thing you are talking about can have huge consequences for regime.(I mean really huge).if they do something like that it will have huge media attention in Iran.people will raise other demands.why not legalize alcoholic drinks?why government keep trying torture girls and boys who have sex outside of marriage in various way? All so many other question . I assure you.if regime agrees to something like that(which I don't think at all,there is no way absolutely). I assure you it is end of Islamic government.
"Page was known as a tough manager inside the search giant, peppering his team with pointed questions and cutting (though usually accurate) observations. “He could come off as very harsh,” said one person who has had many encounters with Page over the years. “Until you realize it was more that he was completely lacking in EQ. I mean, zero.”"

How is asking pointed questions and making cutting observations equate to being unsympathetic ? If you care about succeeding, this type of feedback is invaluable. If you don't, then you are more likely going to use the 'he is not very nice' card to get out doing any good work.
Plain Text Offenders (sites that store your password in plain text)
It's Not Just VW: A Robust Market for Reprogramming Vehicles
Womens wear
i want womens wear,which is the best online shop in worldwide?
No, for the investment to be worth it the return needs to exceed the risk free rate.

If your sole claim about money is that there needs to be a functioning monetary system so that the consumer can easily transfer value to the producer, I agree.
If there is an open source protocol you can use any device you like.

But using bank application on a phone is totally unsecure. A modern phone is a computer with complicated software that can be exploited.
for Linux users : -> upgrade to a NVMe capable linux kernel

"NVM Express: Linux driver support decoded" (2015.06.30)

https://communities.intel.com/community/itpeernetwork/blog/2...
That's certainly an impressive attribute but is it smarter?
Awesome. I wanted just something like that but never heard it exists. Thanks, HN.

Anyone with experience using rr - does it work for long-running processes (daemons) that eventually crash? I had few cases where it wasn't possible to trigger a failure right away, and waiting another day for the daemon to crash to have a new core dump wasn't any great experience. Is the tool usable for such cases - I mean, without dumping few hundred gigabytes of execution history?
This article is way too long and could have said the same thing in a quarter of the space. Roundabout trips through history of IBM and the mainframe intend to lay a foundational understanding but really don't succeed.

Even when it finally gets to blockchains and Ethereum I think we need a more to the point description.
Node.js Logo Iteration
People may be okay with hearing opinions that differ from their own if they don't have to pay for it, but may feel quite differently if there is a sense that they are actively funding the writing and propagation of ideas that run contrary to their beliefs.
Many advocates of land-value taxation have proposed entirely replacing all other forms of taxation with it:

https://en.wikipedia.org/wiki/Single_tax
Chrome keeps refreshing my tabs. any idea why
Not sure where else to ask this

Over the past 2 days I've noticed a very annoying problem: Chrome keeps refreshing idle tabs whenever I click them. This is extremely annoying because I sometimes have form data on these tabs which then gets reset when the page refreshes. Why is this happening? Any way to fix this problem? restarting Chrome and computer does not help.
Well, being creative by and large is NOT creative either. Take the musician who spends days practicing their scales or playing sheet music, for every minute of original composition they do.
Ironically, it's easier for me to log into my internet banking than twitter because internet banking only has a hardware key and a simple 6 digit pin, but for Twitter, I have to go find my paper password list and type it in. It would be great if there was some kind of common hardware key that could be used on multiple sites.
Ditto. My current GP was delighted when I lent him my copies of my lab work going back to 1996 for him to copy, and when in every visit I give him copies of updated spreadsheets showing the history of the relevant results going back then, one each for PSA and lipids and the like. Asked me to add liver enzymes to the latter after my previous visit revealed they'd spiked, so that he'd have a better picture of what was going on after the two month later followup to that.

Any doctor who's not interested in this sort of thing when relevant should be fired on the spot; remember, whatever the "God complex" or the like they require to stay sane making decisions that will inevitably sometimes be wrong and harm or kill a few of their patients, they still work for you.
Well, I'm not using a dedicated device for all that stuff, my phone is probably my most secure computer.
This is awesome! Loved it. I'd love it even more if there was an android app with offline access.
I pretty much 100% agree with it. Except the 5 floors rule. Paris or Vienna are 7-8 floors. Upper manhattan is 10-12. And these do not feel particularly oppressive.

Tokyo is another interesting type of urbanism. You have very large avenues delimiting blocks. The blocks can either be residential, in which case you walk in what feels like a quiet little village with its narrow streets. Or they can be "entertainment", with a dense web of noisy bars, restaurants and game arcades, lots of light and people.
Sure but that is hardly something you can claim about the Economist. They go pretty wide on things.

But sure if taxation isn't your thing then economist and most other magazine about economy isn't your thing either.
Remember that most people do not own their home. Land value tax or no, most landlords are going to price their rent as high as they can get away with. Tenants are effectively paying a land value tax (the rent), whose amount is determined by the market.

Generalising land value tax effectively makes everyone a tenant —land property is abolished. This sounds revolutionary, but since this affects only a minority, I'm not sure how much of a change this would really be. I'm pretty sure for instance that it wouldn't rise the renting prices in big cities.
> I'd probably sacrifice my firstborn

Secret question: what was the name of your first born?
> I should also point out that "could be due to chance" isn't in itself very interesting. That means that with the methods and data the authors happened to use, they didn't happen to find a statistically significant effect, and while that could be because they don't have an effect it could also be that the tools used to look for one were simply not up to par.

My wife wrote had an analytical project when she was working on her masters in accounting. The thesis was correlation between CEO compensation vs Stock market performance. After two months of crunching data, she came to the realization that there was absolutely NO cofrelation. She was distraught by her data thinking she made a mistake so we re-crunched the numbers, attempted to find better samples data (larger range of top tier and lower tier companies), excluding financial companies from the data because of 2008 market and stock price, etc.

At the end, we realized that CEOs compensation has very little effect on stock market price over X amount of time. If you you can rationalize that stock price = CEO performance, then this would be agreeable with the article itself.
It is possible to be pointed and direct with tact. It is called manners.
U2F! The new Yubikeys supports it, and there's other hardware you can get too that supports the protocol.
I am merely suggesting that in the areas where there are little planning restrictions, the developpers do build the much needed housing supply.
So I assume this means the other BSDs (e.g. FreeBSD) exhibit the same bug?
I have this as a bookmarket named 'Reveal Passwords':

javascript:(function(){var IN,F;IN=document.getElementsByTagName('input');for(var i=0;i<IN.length;i ){F=IN[i];if(F.type.toLowerCase()=='password'){try{F.type='text'}catch(r){var n,Fa;n=document.createElement('input');Fa=F.attributes;for(var ii=0;ii<Fa.length;ii ){var k,knn,knv;k=Fa[ii];knn=k.nodeName;knv=k.nodeValue;if(knn.toLowerCase()!='type'){if(knn!='height'&&knn!='width'&!!knv)n[knn]=knv}};F.parentNode.replaceChild(n,F)}}}})()
The article references http://www.opensource.apple.com/source/Libc/Libc-1044.40.1/g... but there's nothing that particularly stands out as being the bug at a quick glance and it is designed to handle arbitrarily deep hierarchies; nonetheless this looks like an off-by-one to me (in fts_alloc):

len = sizeof(FTSENT) + namelen;
if (!ISSET(FTS_NOSTAT))
len += sizeof(struct stat) + ALIGNBYTES;
if ((p = malloc(len)) == NULL)
return (NULL);

/* Copy the name plus the trailing NULL. */
memmove(p->fts_name, name, namelen + 1);

It's a pretty minor bug, since I'd bet the chances of it causing a major exploitable vulnerability are quite low. A theoretical attacker can only control somewhat coarsely where a single byte with the value 0 can be written, and this is in userspace. Most of the time it probably lands in unused padding, and otherwise in an invalid address which causes a segfault.
i think a major problem is that basic income will breed some very undesirable attitudes with those people who will depend on long term basic income. Dependency on handouts breeds passivity and indifference, you will also see a very violent and angry younger generation - these people might be very angry at anybody who sticks out of the gray norm of basic income.

i think basic income will not breed critical thinkers, instead you achieve a state of intolerant and angry uniformity.

You might also study some prior experience here : https://en.wikipedia.org/wiki/Homo_Sovieticus
Of course, it's not the worst schema. But it gets a lot more credit than it is worth.

Using dictionary words reduces the entropy of your password significantly. And for a cracker it can be trivial to attack passwords of that form. Given the sort of compute power you can obtain cheaply nowadays, attacking 4-word schemas (especially given people tend to use common words) is not hard.

It's to some degree security through obscurity: no, a cracker will not know your schema in advance but he will attempt to attack multiple schema types. If you're the sole target then that's probably not a concern - it would be a major effort, with limited rewards, to attack your unknown password schema. But if yours forms part of a larger set of passwords being attacked (where the use of multiple schemas and attacks will reap high rewards) then you're at more risk.

IMO, for all the password schemes that people come up with there is no good alternative to a long, randomly generated string with multiple character types.

Always use a password manager!
Sorry, I couldn't get past the "brazen stupidity" of your first sentence, as you apparently believe that the steel and oil industries were created by two particular gentleman.

Though, this seems like no way to have a conversation.
Just require that your primary properties taxes are handed over to the state on the death of those who hold the title deeds.

That way, people get to live out their lives in their properties and the state still collects their money.
Hey, you're now on Product Hunt!
Now this reminded me of one Unix server operated by an educational institution that shall remain unnamed, where passwords were (maybe still are?) truncated to 8 characters. Fortunately, this wasn't a problem because as long as the first 8 characters matched you could type literally anything and the password would get accepted.

Funnily, the admins apparently really cared about security very much, so they required users to change passwords every few months. It was possible to change asdfghjk to asdfghjkl and keep logging in with asdfghjk. I kid you not.
I've been wondering about password complexity for a while now. If a password is cryptographically hashed, so long as it isn't a dictionary word or date, why on earth do people add in complexity rules that prevent arbitrary character sequences?

What I'm getting at here is that if you had a 8 character password (for the sake of the example), and you can type in lowercase letters, uppercase letters, numbers and punctuation marks the total combinations of values is 95^8.

But then you remove all possible values of just numbers, all values that are just letters, all values that are just special characters. That reduces the set of combinations by (52^8) for alphabetic characters, then reduce further by 10^8 for numeric only values, then 33^8 for special characters. That's quite a few characters removed!

But then you get Apple's recent password requirement of no repeated characters in their iCloud and App Store passwords. My math behind permutations is a bit rusty, but that removes a hell of a lot of passwords as well.

On top of this, if you require at least one special character, alphanumeric character, and at least one number, then that reduces the number of possible passwords even further!

I've never understood how this made passwords safer... What am I missing?
U2F works too, and it even hides the details about which sites you have registered in from everybody but each individual site owner - you can't identify the individual token of know if your users have registered elsewhere or not even if you compare account details. They use unique keypairs for every site.
what bank is it?
I was disappointed to learn that Android wouldn't accept a password with non-ASCII characters. I wanted to mix accents, punctuation, and symbols that are all easily typed with the soft keyboard, but it was rejected as "too short" because anything that wasn't between 0x20-0x7E was trimmed.
Sex, Drugs, and V-Neck Tees: Inside the Cult of American Apparel
Endurance	400TB = 800 cycles per NAND cell
What you're actually doing there, though, is applying security through statistics.

No, an attacker will not know your schema. But she will know all about the common schemas. And you're risking her using your schema in her attacks.

Your proposed password is much better than the one XKCD's proposes because you're using uncommon words and punctuation. And I agree, it's more secure.
People in developing countries probably won't ever buy a U2F key. 7 to 15 Euros are too expensive for them (and me).
Like good enough voice recognition? The fact that we dreamed about computers and robots since first mechanical automatons, perhaps earlier and for many years we couldn't crack it doesn't mean that we haven't and we won't.

I think the author is wrong but not because we won't have visual building blocks and flexible language interfaces. Rather because event if you try to describe what you induction cooking plate does for you using visual building blocks and English language you still end up with pretty tangled mess that only real programmer could have patience for.
They assume people are using short stupid 90's style password rules. Which many unfortunately are...
20+ GBps
I'm not sure if it's enough when you study a group, during a finite time, if you don't know a priori the relative impact of competence compared to luck.

Example 1 : fictive world where everybody has 50% chance of success every year (success = 1 point). After 4 years the distribution looks like :

0pt -> 1/16
1pt -> 4/16
2pt -> 6/16
3pt -> 4/16
4pt -> 1/16

Example 2 : fictive world with 6 competence levels :

group 1: always lose, population 1/16
group 2: win 1/4, population 4/16
group 3: win 1/2, population 6/16
group 4: win 3/4, population 4/16
group 5: always win, population 1/16

If the final distribution is not Gaussian, I think we can distinguish luck vs competence but if the observed curve is Gaussian I'm not sure we can distinguish luck vs competence.
BuildZoom is hiring a designer
> You can say the same about credit cards: they can easily be lost, stolen etc. But generally they are better protected than internet bank account with just a password.

I've physically lost one credit card and had multiple ones canceled unilaterally by the bank because some idiot merchant got hacked. On the other hand (afaik) I've never lost any bitcoin or any bank logins/passwords that were fully under my control.
Where "can't" means "they don't want to because they want to reserve themselves the ability to screw their users by shipping devices with OSX or derivatives installed where the user cannot change the software, which the GPLv3 is specifically designed to prevent".

Considering handling paths is one of the most fundamental functions of the Unix tools and C library, having buffer overflows there is quite damning.
This might be to save memory. Tabs you don't use are freed, and reloaded when you open them again. Take a look at Chrome's task manager, it shows the memory consumption for each process.
The Carpenter and the Engineer (2012)
Interesting. Are these meant to be consumer only? I didn't really see anything about data center applications? We run 24 850 pros in raid configuration as base SAN. I wonder what these would spec out in a configuration like that. Is there a PCIe card that can hold several?
You seem to think that the right of a creator to control how people use their creation is self-evident, along with other self-evident rights, like the right to a fair trial.

Other people like me don't feel that it is self-evident, rather, we feel that it is only justified if it effectively encourages the sciences and the arts. Our axiom, the self-evident truth that we're working for, is the flourishing of arts and science, and if we can find a way to do that which doesn't allow creators to dictate what people do with their copy of Mario, all the better.

Once we realise that we're assuming different axioms, we can stop talking past each other.