skysight-inc/HackerNews huggingface dataset:
As far as I get it (I haven't read much about U2F), U2F is generally perceived - and advertised - as a second factor, not the primary credential like a password.

On the other side, client certificates (be it TLS with X.509 or whatever) are generally considered as password replacements.

I mean, I suppose many don't want a password - just click an identity with autonomous credentials that don't depend on any third party, optionally do the confirmation ritual (hardware button, PIN entry) - and get recognized.
Ask HN: Where to get a good deal for a Ubuntu laptop?
I spilled beer on my Macbook. I have job interviews coming up for developer positions. I desperately need something I can afford.
> I was actually most interested to hear about HHIR and their general compiler pipeline.

You might also be interested in this post, which goes into some more detail about HHBC and HHIR, and gives some examples of what it looked like about a year ago (which hasn't changed to terribly much): http://hhvm.com/blog/6323/the-journey-of-a-thousand-bytecode...
It might be worth checking out Canonical's Juju, we're working on deployable segregation (like security groups) defined in code!
As long as you throttle login attempts short passwords are fine. EX: 6 digit pin on a debit card might seem useless, but if you only get 3 tries per day that's just not an issue.

~10-20 failed attempts per day per IP + some rules to check for multiple IP's per account and 8 lowercase letters - most common passwords is actually reasonable.
Greece is not a example of the people voting for more UBI instead of working, nor was the effect discussed related to what the government can afford, it was related to fundamental economic limits on the ability to raise real levels of a UBI no matter what happens with nominal levels.

That people can vote for a government which enacts policies which have an unsustainable balance of spending vs revenue is true independently of the presence of absence of a UBI, and not any kind of argument against a UBI. And it also has inherent limited, as seen recently in Greece, by access of the government to credit.
A physical key cannot always be found unless you're a hikikomori who never, ever leaves the house.
"Investors, founders, managers and, often, employees have stakes that are delineated by carefully drawn contracts, rather than shares of the sort that trade on exchanges."

The article doesn't go into more detail about this. What is an example of these carefully drawn contracts? Convertible notes? Something else?
Wow, I've got to give you some genuine compliments that you've got a very, very useful introspective compass. I'm not sure who said the maxim of "Success is when luck meets preparation" but I can totally see your point in how things went. Though I've never been devout in Christianity (other than really digging Jesus-was-a-hippie thoughts), when I see a person down and out, scraggly, maybe who made some bad decisions in their life that have held them back, I do appreciate the thought "There but by the grace of God go I" because flipping a couple bits of background entropy means a lot. I guess that's why in fiction there's so much talk about messing with the past having large consequences in the future.

In some ways though, I think your reluctance to want to reach out, unsolicited, is something I can relate to my music endeavors. I get stage fright, whether in front of people I know or just a gathered crowd at an open mic night. I mean, they're there to hear music, so why should I feel nervous? Eventually I got to the point where I would go out and play on street corners, sometimes with a tip jar but mostly just to do it, and get over the fact that what I'm doing has merit because I want to share it, and if nobody pays attention, it doesn't mean I was a jerk for playing some nice tunes in a public space.
I think he had a wild idea a few years ago to hook onto a black hole and haul it back to earth. I remember meeting some of his coworkers at a party once at the big house on a hill outside Livermore Lab that they called the "sty in the sky" that Lowell lived in.
Also

most of the American studies on NFP were conducted by the program’s own developer
Have you considered how much of that might be due to Apple's takeover of the consumer space? There were fewer people looking for exploits and even fewer reporters covering them before they became the OS of choice for hundreds of millions of people.

If you believe Linux is that much better, well, you really ought to follow your distribution's security announcement list. Nobody in the general computing space has a track record which entitles them to cast aspersions at the competition.
"Researchers have often overlooked the obvious – that almost all cannabis users also smoke tobacco"

Is this actually true? It strikes me as plausible, but not presumptively obvious.
Why I Still Get Shunned by Taxi Drivers
Must contain 2 of the following, (upper case letter), (lower case letter), (number), or (Symbol) is higher entropy than 8 lower case letters.
30 Years and Counting in Music: Roots, Passion, Tech and the Future
> $31,000 for a terabyte

What kind of storage are we talking here? Even 1TB server SSDs don't cost nearly that much.
Pigshell: Shell for the web
Fail -> Isn't Needed.
I see this:
https://cloud.google.com/pubsub/subscriber

In the "Delivery contract" section:

"For the most part Pub/Sub delivers each message once, and in the order in which it was published. However, once-only and in-order delivery are not guaranteed: it may happen that a message is delivered more than once, and out of order."

So it is at-least-once delivery as far as I see.
Actual content:

http://www.businessinsider.com/palantir-raises-another-105-m...
My personal preference as a solution for this "problem" would be to make the drives dumb enough that the firmware wouldn't matter that much anymore. Something like ONFI flash with UBIFS. Flash chips are not such unique snowflakes that a generic software with some tweakable parameters could not manage them.
Or maybe, like the male spider mentioned in "Everyone Else Has Had More Sex Than Me", they "would rather die than not get to fuck".
This may be a stupid question, but will the 950 Pro PCIe go into a late-2013 and up Retina Macbook Pro? I ask because I looked into a larger capacity hard drive for my rMBP, and I found this: http://www.thessdreview.com/daily-news/latest-buzz/hard-less... and various other pieces saying that commercial PCIe drives weren't available.
> You're again contradicting the experts. They said that it is possible for the car to ignore brake input, but were unable to determine how corruption could have occurred to cause it.

No one who is actually an expert in cars would say this because the cars in question did not have purely drive by wire brakes. There's literally no way the car could "ignore" brake input unless the hydraulic system failed, which the driver should have noticed the moment they got in the car.
But are the people you interact with the ones in the big public positions the grandparent is referring to? (e.g. Open source projects like Kubernetes)
Last I checked, Fidelity truncates to 10 characters, but silently converts them all to digits. They map them all to their equivalents on a typical phone keypad... so it's not even using all the digits. Talk about awful security...

Edit to add: It appears they may have fixed this misfeature. I did personally verify that you could log into their website with the phone-equivalent digits at one point, maybe a year or two ago. There's also a few forum threads about it around the net, eg https://www.bogleheads.org/forum/viewtopic.php?t=93792#p1350...
There's an old documentary called For the Love of Dolphins, with stories about attempts at human-dolphin communication, https://youtube.com/watch?v=UDAmktAAcno
Surprised of 99% agreement here at HN, because usually IT/security people in majority of the cases don't understand me when saying ^^ the same.
For Offenders Who Can’t Pay, It’s a Pint of Blood or Jail Time
It really stems from the need to deliver commercial software to enterprise customers on a variety of platforms. At least some (if not many) enterprise customers don't want to roll out Java across all of their clients machines. Additionally, not all enterprise customers have the privileges required to install Java themselves. The bundling of the application into a single executable file is advantageous in this scenario.
Just sent you a logo proposal
Because they don't take new jobs unless they're given large raises.
Yes, one of the most annoying things you can encounter is a conversation at dinner with multiple Google employees. They will constantly mention that Google is working on something and then after confirmation with each other that it is still private, refuse to tell anymore details. It seems like it's encouraged in Google culture to brag but in a secretive manner to remind outsiders of what they are missing.
Compared to what? Running a rack of servers? Sure. Running a 3 datacentre presence with low latency interconnect and enough spare capacity to deal with failure? I'm not so sure.
Mathematically, but not socially.

It means that humans reduce the entropy across the board to (more than, IMO) compensate for the mathematical advantage.
No, it is needed.

There's a bunch of public health stuff where England needs to do better. (Mothers smoking through pregnancy, mothers drinking too much through pregnancy, mother taking drugs through pregnancy, mothers eating too much through pregnancy, children not breast fed, children weaned too soon, children weaned with wrong food, children given added-sugar drinks, children and mothers at risk of violence, children and mothers at risk of accidental harm, etc etc. (It's a long list! And there's plenty more)

This are partially helped by the universal access new mothers have to health visitors, and access to things like Sure Start Centres (I'm not sure if those centres are still available though), but there's still a lot to be done.
I think the ones who use leverage do beat the indices over the long haul. Leveraged investments make more long term than stock indices.
Sample size of 76....
Scientifically, it’s not ideal to have the same person who came up with a program trying to determine whether the program is any good.

Not ideal?

This is a great example of the use of understatement if there ever was one. I'd say such a conflict of interest would put the credibility of the entire study at risk.
I guess it refers to shareholders' agreements and stock purchase agreements?
Uber Refueling Its Warchest yet Again, at a Valuation of Up to $70BN
Maybe spiral can automate much of this work ?

http://spiral.net/

http://www.spiralgen.com/
All I Wanted Was to Write a Blog
Drinking during pregnancy seems pretty usual across Europe. I don't think I ever saw a pregnant woman drinking even once in the USA.
Last I heard, Snapchat runs entirely in the cloud: http://www.businessinsider.com/snapchat-is-built-on-googles-...

There's over 400 million Snapchats sent per day. I'd say that's pretty big scale, all done in the cloud.
Well he self-identifies as a infrastructure theorist and inventor so I'm not surprised by the writing style.

But since he's self-aware of who he is, he should have spent more time editing it down.

OTOH this is freely published so I have no complaints :)
I saw Square present on risk management at the Merchant Risk Council this year, and the audience was very skeptical that they were effectively managing their fraud and credit risk. Their procedures as they appear to be in place are dangerous enough in the US, and I expect if they try to expand internationally they are going to run into significant problems. One reason I have much greater faith in companies like Braintree is that I've spoken to their risk managers and they seem to be much more cognizant of the risk involved in merchant processing and have more effective controls in place.
By people who knew to look for obscure african poems? I mean sure, you could guess a Polish sentence if you used a Polish dictionary, but how likely is that?
God damn it, still no 1TB model.
For me, even if the smaller portions might be mundane, its the whole itself that is a creation by me. Look at that website: I made that. That tiny wiggle animation that brings a smile to your face: I made that happen.

Sure, it took me 10 minutes of googling and hunting stack-overflow to workaround some weird browser issue, but the end result is definitely creative. Its not about programming as an activity, but the end-result of the activity, which is a creation.
"But of course, I’m her lawyer. So who gives a shit what I think". Wow, I've never heard that from a lawyer. I bet he's not getting any money either.
Ask HN: Does anyone use Linode but is not using all the available bandwidth?
We use Linode heavily as kind of CDN, storing static files that never change. Our Linode bill is about $1000p/m and most of the CPUs/disc IO is hardly used at all. The reason why we have so many instances is that each instance contributes to the total available bandwidth pool. So by having so many instances we do not pay for bandwidth overages which are very expensive ($0.1 per GB)

I believe there must be lots of companies who use Linode primarily for storing applications that are heavy on CPU/disc IO and use very little of the bandwidth.

I think there could be nice synergies in place where we could stop most of our instances and use someone's other instances for static content and essentially paying part of someone's Linode bill.

Anyone interested?
I wonder when Uber/Lyft will encounter the same problem. I worry that residents of poor neighborhoods will receive a low rating from some of the drivers, based on the same reasons why taxi drivers don't want to provide them rides.

I think a low rider rating could be even worse than the color of your skin (in terms of getting a ride from the service - not in any other way!)

Maybe Uber has already turned their data scientists toward the problem and can detect racist drivers.
I don't care for them either, but there is definitely a purpose: it limits the vulnerability period of a users password compromise.

For example, if you share passwords between sites, compromising one site gives you a limited time frame in which to attack the other. 6 months isn't even a bad compromise; some places with high security requirements make it 30 days.
Thanks for the link, I'll check it out.
http://www.bbc.com/news/education-14079117

Sure Start:

But 12 years after the first Sure Start centres opened, one leading academic who was part of the government's official evaluation of the scheme says there is still no clear evidence it has helped children

Asked what evidence there was that Sure Start was helping children, Sir Michael replies: "We don't know - that is still lacking." One major problem, he says, was that ministers ignored calls for a properly controlled evaluation of the programme - in which children would have been randomly assigned to a Sure Start or a non-Sure Start group. He accuses Labour of deliberately ignoring the possibility the programme might not work

Every country can always do better in health care: perfection is not achievable. But most studies I've seen suggest that the UK gets health outcomes that are good, albeit not the best, but it does so for much less money than many systems. When you normalise for costs, the NHS is actually pretty darn good.
Cool, thanks for the link.
I'd love to see something like this. I mentor a lot of people and I'm always asked about particular programs, but I can rarely recommend anything in particular because I am not aware of anyone else who might have graduated from there.
Chomsky has been saying this for a long time. He equates our current language tech with stone age tools. Long way to go...
It's unfortunate that changes in the brain is all they studied. If you have 18 people who are undergoing this transition, it would be useful to document any other changes and note them as candidates for further study.

For example, many people will remark on an increased sex drive (not a surprise considering the testosterone), but the way people actually think about and treat the opposite gender seems to change as well. It would suggest that testosterone has a part to play in the development of gendered social structures. But who knows?
These centres are clinging on in some local authority areas. They have education activity aimed at parents as well as health advice &c.
It is also a 'code smell' that suggests that the relevant company is storing passwords in plaintext.

Reason: If they were hashing the password, the hash output would be fixed length, independent of the input length, so there would be no need for an external, user visible, maximum length restrictions.
Good ideas often come from unexpected places. "Weighing in" makes it sound like some sort of ponderous, heavy process. It's just someone offering their advice. The expert is free to decide against that advice!
Provinces in Canada don't have that kind of power. Canadian federalism is considered incomplete and is therefore not like the US.
> learning to code when he was 63

> switching careers extended his neural plasticity considerably

I find this very interesting & uplifting. Would you be comfortable sharing more on what motivated him to switch careers at that age and your general observations throughout the process. I'm perhaps your age but I've experienced switching careers significantly is like hitting F5 in your life, or like a complete system re-install. Everything feels fresh & new. You feel energized to learn a lot of new concepts. However, it's usually very difficult to convince someone who's 60+ to learn to code. Usually people are intimidated by programming if they've only interacted with a browser for most of their lives.
I think this would be something you should ponder and think about on your own. Think of a question that you would like to answer (eventually) and more importantly your dissertation reviewers would like to know about. It doesn't necessarily have to be a tough topic but has to hold interest. Something that fancies me right now is impact of behavioral economics on business policies
I'm not even saying this is an established scientific claim, only that it would be really weird if the statistical differences between men and women were 100% outside of the brain, given how different the evolutionary pressures are.

Evolutionary psychology does have some problems :) It's easy to tell dazzling and believable stories in that frame, but much harder to prove them empirically.

I think some real science is being done in the field, but I agree that when people make EP arguments on the internet, you need to apply a lot of skepticism.
Homend+Royaltea+1711+Çelik+Çay+Makinesi+::+Çelik+Sipariş
In general, one of the challenges of delivering commercial software is dealing with the various ecosystems of your customers. Customers may have different versions of Java installed or none at all. Avian allows one to bundle everything required to run a Java application into a single executable and simplifies the problem such that many of the unknowns related to delivering the Java application disappear.

Also, keep in mind that Avian predates at least some of the other solutions to this problem. You could use something like https://github.com/libgdx/packr as well.
The refusal to use randomised controlled trials is infuriating. Supposedly this is something that Jimbo Wales and Ben Goldacre are trying to fix, but they don't seem to have got far with it.

I agree with your comments about the NHS, for most stuff it's great and very cheap. (Sad that I need to say that, but there are people who want to dismantle it).
Yes, indeed. This has been done as a proof of principle [1]. I don't think its being used in mainstream malware.

[1] http://spritesmods.com/?art=hddhack&page=5
This is also something ClusterHQ are working on with their Flocker product.

https://clusterhq.com/flocker/introduction/
What does that have to do with anything? Statistic significance has to do with confidence intervals and sample sizes at the same time, so even a small sample size with a large effect has statistical significance, but a very small effect at a large sample size might not.
I would have thought all living creatures with ears would assign the same meaning to loud/quiet or long/short sounds (i.e. loud sounds are more important as they signify a big predator, or a large object running/falling nearby. Small sound just confirm confirm 2 twigs collided when moved etc). With this common basis for sound, I don't think it is too suprising that our use of vocalisation relate in some way at the very basic level across languages.
Now that we have them in some areas and not others we can compare data and see if they work.
Oracle has the ex-Nebula guys working on a brand new public cloud
I wonder, could OSM even change their licensing in that way if they wanted to? Because all the contributors submitted their content under the old license, they'd all have to agree to the new license again, right?
Saltstack, with the cloud module, fits into this role rather well. It's more of a declarative setup and a discoverable setup, but I've found that to be acceptable.
I'm not sure why you think therapy is not a form of real treatment. Cognitive-behavioral therapy and dialectical behavioral therapy have been proven to be effective for treating numerous biologically based mental disorders. They are not even slightly based on Freudian models.

For many cases it is more effective than medication or boosts the efficacy of pharmacological intervention.

Therapy is an appropriate tool for treating biological conditions. Patients with OCD, whose brain structure is visibly altered because it is a biological condition, respond surprisingly well to CBT and Exposure-Response Prevention based therapy. It is the recommended first line of treatment for the disease [1].

As someone who suffered from OCD, along with depression and anxiety, therapy is a successful way to adapt and overcome diseases that are firmly rooted in biological origins. I experience a vastly improved quality of life than I did years ago. Of course this is an anecdote, but the research backs up the my claims of efficacy.

Given that these diseases affect a network of neurons, learning to adapt to structural, biological or learned abnormalities in the network is crucial.

A study on CBT[2] and depression came to an interesting conclusion:

The evidence shows that that CT [cognitive therapy] is as efficacious as ADM [anti-depressant medication], and that its effects are more enduring. Thus, even if CT and ADM work through the same mechanisms in the same temporal order to reduce depressive symptoms, any enduring effects of CT must be produced by mechanisms that are not mobilized in the same way by ADM. The model that is proposed in this article suggests that CT helps patients learn to recruit prefrontal regulatory brain mechanisms – a skill that these patients could continue to use long after treatment ends. Exploring the neural bases of these effects should enhance our understanding of the nature of depression and allow us to develop more powerful and targeted preventive interventions.

Therapy works and most of all it lasts. Medication may work, but when you stop taking it, you're back to square one.
The most important aspect of this is the acknowledgment that therapy works, through mechanisms not activated by medication. Understanding why therapy works can open the doors to understanding the disease and new modes of treatment.

[1] http://psychiatryonline.org/pb/assets/raw/sitewide/practice_...

[2] http://www.ncbi.nlm.nih.gov/pmc/articles/PMC2748674/
It's known and accepted in the UK you can't drink/smoke when pregnant. It's social taboo. I've never seen it in the UK.
"though god forbid you forget your dongle one day and are completely screwed"

No, I always know where my dongle is.
Possible, but not easy. A lot of people interpret any feedback that boils down to "this work isn't good enough" as a personal attack, no matter how nicely it's couched.