skysight-inc/HackerNews huggingface dataset:
Thanks for the explanation!

While in theory the passwords should be changed, but shouldn't a new vault key also get generated/encrypted and the existing passwords get re-encrypted with the new vault key?

The case I was thinking about is: If for whatever reason that revoked user got access to an encrypted password that got added after he was revoked, he can still use the same vault key to decrypt it.

On a different note, I was trying to understand the granting access part and so far (correct me of I am wrong :)) I think it has to be done in a 3-stage process. 1. invite user, 2. user accepts and generates priv/pub and pushes encrypted priv + pub to 1password, 3. admin confirms the grant by encrypting the vault key with the new user's public key. Did I get it right?

Lastly, would it be more secure if instead of using a master vault key just rely on priv/pub key of each user. When one member adds a new password, they encrypt it with each user's public key and provide it to them (can be considered as a big disadvantage to this approach). I think it makes revocation easier and denies access to future passwords since the user will be out of the team and won't receive new passwords created. But I am not a security expert, so I won't claim anything. :)
Amazon users do rely heavily on reviews, generally. I think with the Google engineers' reviews promoted to the top by the number of people who have marked them as helpful, market forces will finish the job. Few people will buy them, and those that do will have done so against solid advice. Amazon, of course, can delist things or not at their pleasure.
That can be part of the reviews. "This product may look good, but Company X which makes it has a history of ninja-changes to their products."

A central (well, really federated would be better) is one of the most needed tech innovations today, because it will make the market for so many other products function more efficiently.
Even large, US-based companies sometimes change stuff without updating the SKU. This was a huge problem back in the day with getting WiFi adapters that worked in Linux - I've seen chipsets changed out without updating the SKU, even as far as chipset brand. If you were lucky, there'd be a hardware revision listed on the product near the serial number, but sometimes not even that. I think this has happened with a lot of the RTL-SDR adapters as well.
Perhaps the 1 star reviews are for cables that actually do damage your charger, PC, and hub.
FAQ in the post discussed this:

"The main difference between Confidant and the others is that Confidant is purposely not cloud agnostic, choosing to use AWS’s features to deliver a more integrated experience. By leveraging AWS’s KMS service, Confidant is able to ensure the master encryption key can’t be stolen, that authentication credentials for Confidant don’t need to be distributed to clients, and that authentication credentials for Confidant clients don’t need to generated and trusted through quasi-trustable metadata."

Confidant is purposely tied to AWS so that it can rely on KMS for its master key and for authentication.
Agreed, moving towards collaborative filtering is a good idea. We have only a few users right now, so customized categories is mostly content based filtering and figuring out how to recombine the ranking signals for them. That often work fairly well to improve topics (sometimes drastically), but mixing in collaborative filtering seems like an exciting opportunity for improving.

Also hi, I'm Ben, and I worked on this.
If one party says 2+2=4 and the other says 2+2=17, then yes, I'm spouting party line. The GOP absolutely Will. Not. Budge. on raising taxes as a revenue generator. Therefore, they are not truly serious about the deficit. They will cut spending - only in places they don't like - but they won't increase revenue. So all this stuff about the debt ceiling? That's just playing to the cheap seats. It's grandstanding, and it's irresponsible.

That said, there's nothing inherently wrong with running a deficit, as long as the debt can be serviced without breakdown (which is currently and has always been the case). Moreover, there's a strong argument that the federal government must run a deficit, for the sake of the stability of capital markets. In times of crisis, investors need to be able to shift their capital into low-risk securities, and US treasury bonds are the lowest risk reasonably liquid investment there is. Otherwise, everyone would be stuck during whatever the next crisis is, whether it's real estate or the stock market or whatever.

Social Security and Medicare are not endlessly growing monsters that engulf the universe. They represent a certain percentage of the population (retirees), and no more than that. As long as the working population can generate enough revenue to keep them going (and they can), it will work forever.
2015 DXRacer Canada Fall Sale
Led Astray: Online Lead Generation and Payday Loans
As far as I can tell, bulk collection does require a warrant (as per the bulk powers section) and is limited to security / intelligence agencies (does that include police?).

Police have to request the ICRs for an individual on a case-by-case basis, going through a 'senior officer' who takes advice from a single point of contact (SPoC), although I can't find any criteria for SPoC selection.

In any case, there's no judicial oversight on ICR requests as far as I can see.
England maintained the tug-of-war and eventually won it whereas Rome lost it and never regained it. I don't see why that's so difficult to grasp.
Audio Map for the Blind Offers an Open-Data Roadmap for the Country
I trust my VPN providers TigerVPN and TorGuard, they inform me about legal changes in a country so I can change endpoint on time :)
Really? If a product meets your needs, is a fair price, and seems to be working fine after 30 days, you would not give it 5 stars? It would need to perform miracles to get 5 stars?
> I know Microsoft pretty well, and it would have wanted to support as many versions as possible

That's nice to know and I'm sure everyone always means well, but it doesn't change anything in factual terms. I don't know Red Hat but I'm sure they'd like to support as many cloud services as possible.

> It obviously didn't just support SuSE, so your implied either/or is just yet more of your spin.

Dude, honestly, I'm only reading what you linked, with InfoWorld saying MS had a preferential agreement with SuSE. I didn't link that, you did; if it doesn't agree with your view, why did you link it?

Your first list had SuSE (twice), CentOS and Ubuntu, and again I took it at face value, so I don't think I implied anything.

I have no horse in this, no investment, nothing; I just don't like unsupported bias. Can you say the same?

> It might have seen Azure as a rival to Red Hat cloud services

Sure, exactly like Microsoft might have seen Red Hat as a rival to Windows Server in the cloud.

> but that's just my speculation.

Yes, it is "just your speculation". That's what I said, and why I responded to your initial comment. Maybe because of insider knowledge you might have, you're interpreting facts in a somewhat biased view. That's fine, but you cannot assume everyone shares this particular view of the facts and spin it as an absolute truth.

IMHO we've said everything that needed to be said so we might as well close it here.
I think I'm climbing aboard the hype train. The thing that made a difference for me was the lack of GC. I knew I could have an easier time selling that to my team than GC. As soon as they hear 'GC' they will probably start to think of unacceptable latencies and lump D in with Java, Python (et al).

That said, D's compatibility with C++ is a big plus.
It's not about what the cable can handle. Some of these cables can be plugged into an old device on the end that delivers power, while the cable (which isn't just wires) advertises the power delivery capabilities of a newer device.
What's the x-axis on that graph? i.e. how long did it take to see success?
It's probably true, since the Play store only sells one variety of cable, and Google has probably actually vetted it. In which case I can only see that suggestion as a helpful bit of advice for avoiding problems.
Introducing Twitter's public policy transparency page
Sorry! https://www.zesty.com/jobs
These reviews took me back (and made me laugh). They have the same to-the-point-and-technically-correct tone as code reviews internal to Google.

In all seriousness though, these are important for a non-obvious reason: Nexus 6x devices don't ship with USB2-USB3 adapters (they only have a USB3 cable with a wall charger).

So ... anyone who wants to hook up their Nexus 6x to a laptop will almost certainly to Amazon to buy a cable. This is what I did last week, and just today I discovered that certain cables do not quick charge.

Benson Leung, you are doing the lord's work. May future Nexus 6x owners benefit from your expertise.
How will any company, especially a VC funded company, avoid problems and dilemmas seen by other online-submitted-reviews companies like Yelp that basically turn the company into either a fake review haven or a protection racket?
> I just started a job in government. I had two choices: 10% of my salary in a 401K, or 5% of my salary in a 401K and 5% in a pension.

You're talking about 401(k) so I'm assuming US here. Are you using 401k to mean TSP? Or is there a federal gov't position that actually offers 401(k) plans?

And if you do mean TSP, then you'd be under FERS. Or is this a state job?
If you're running in AWS with any secret management service that isn't using CloudHSM, you're trusting AWS with your key material.

There surely is some amount of trust there, though.
She proposes to HIM in a way you would never expect. Watch this video!
Articles such as this are pointless, with the volatility of bitcoin they are outdated almost as soon as they are published.
it's been amazing

Could you please share more? What kind of work, how many hours a week do you work and the like?
The current rhetoric when it comes to the failings of online reviews is to point at fraudulent reviews. I posit that, rather, it's the lack of weighting reviews by the expertise of the reviewers. Clearly the reviews of a hardware engineer at Google should have more weight to them than an average consumer (on products like this), because as bkmartin points out, the average consumer has no idea as to the true quality of a product. Perhaps the cable does work for them. Perhaps the cable mostly works, but the wire gauge is under spec and 1 out of 100 people end up with a fire. That won't be reflected in the overall rating of a product.

Case in point, the Juiced Systems product that Benson reviewed as 2 stars is currently listed as an overall 5/5 stars. In Amazon's defence Benson's review is currently displayed at the top of the reviews. So any shoppers that go through the effort of reading the reviews will quickly see it.

But this product shouldn't be rated 5/5 overall, and because it is, many consumers who can't be bothered to check the content of the reviews will be burned.

This, to me, is a greater problem than fraudulent reviews. Fraudulent reviews can be solved by getting more regular customers to review products they buy. Uber is a great example of UX design that gets customers to review the quality of their service nearly every time. But even if Amazon or other retailers achieve a higher rate of reviews by actual costumers, the non-expert bias will remain.

Of course the trick is, how do we determine which reviewers are experts? Most review systems have a helpfulness rating on each review which could be used to weight reviews in the overall average. But that's only a proxy for an expert rating, is easily cheated, and it's harder to get customers to rate reviews than it is to get them to at least review the product.
My favorite is the only other review on his profile from years ago of the Orange Box soundtrack.
Maybe you should do some research before calling it a "vague concept that consultants can sell to CTOs".

It's the first distributed, decentralized ledger that successfully operates in the presence of malicious nodes. The white paper and reference implementation represent a fundamental breakthrough in computer science (a solution to the famous and previously unsolved Byzantine Generals problem).

Bitcoin is a big deal whether you want to realize it or not.
Thanks to rms for all of his work!

Emacs is still my favorite text editor when in a terminal window, which is most of the time. Maybe one day I'll really embrace vim also, but it's always been a struggle.
Hi Uberneo,
yes, we exactly use it for HTTP, but also others. here is a 20 lines example to extract from a lot of HTTPs to elastic search. https://github.com/eBay/parallec-samples/blob/master/sample-...

Parallec has a special super convenient response context let you pass in/out any object when handling the response. Now you can conduct scalable API calls, then pass aggregated data anywhere to elastic search, kafka, MongoDB, graphite, memcached, etc.

Python has global interpreter lock so if it is computational expensive, you have to use multi-process to use more than 1 core. Parallec can let the handler to run your onComplete() function either in worker before aggregation (parallel) or in manager after aggregation
I'm surprised this needed to be said.

There are millions of small businesses (in the US) and the vast majority of them are just lifestyle businesses that bring freedom/pleasure/excitement to the owner with perhaps a possibility of earning more, but there are many that earn less than what they could make at a regular job with their same experience.

This whole world domination startup thing seems to be localized to SV really. Nowhere else is this considered normal.

By the way, there's a lot of confusion with just the term "startup" in general when it should really be reserved for something new (biz model, innovation, etc). If you're just doing something that's already been proven, which is completely ok, then it's just a small business.
I have no horse in this race (I don't even live in the USA) but I've seen people use "Reality has a liberal bias" on HN unironically so I guess this could answer your question.
The number of people using (and hating) Notes is greater than the people developing for it.
Confessions of a Paywall Journalist
I might like to pay the premium for "tested and built correctly" but without also paying the premium for "the customer is too lazy to look elsewhere so let's gouge them."
It is an explicit design choice of the bitcoin protocol (feature, not a bug) that doing so requires a cabal of the majority of the hash power. With properly distributed hash power like bitcoin had in its infancy, this would not have been possible.
For me, this piece was the most interesting:

"Collaboration on .NET for a new generation of application development capabilities, providing access to .NET technologies across Red Hat offerings, including OpenShift and Red Hat Enterprise Linux, which will be available within the next few weeks."

Further development of .NET as cross-platform, not just Windows-based? That could bode well for the stack.

I doubt I'll ever write .NET code again, but this seems like a sensible decision to me.
An out of spec cable may still be useful for many people. Just not for Pixel owners.
Aukey now rivals Anker, if not exceeds. Check them out.
I agree, it's really not very clear.

The problem I think is that ICRs don't fall under the rules for interception. They seem to be a part of communications data:

A kind of communications data, an ICR is a record of the internet services a specific device has connected to, such as a website or instant messaging application.

Communications data doesn't have the same warrant requirements.
Sounds like a dozen already failed start ups.
I was strictly a full-time corporate guy until about 2 years ago. I got an email out of the blue from a tech recruiter guy, asking if I was interested in freelance. I hadn't given it much thought at the time, but figured I'd at least ask what the rate was.

$100/hour.

My eyes bulged out my skull. My highest fulltime salary to that point had been $120k/year (about $58/hour). My wife has benefits so it seemed like a fairly small risk to jump out of the fulltime pool and try my hand at contracting.

I've since been freelance-only, getting as much as $180/hour for a 6-month commitment. I haven't been unemployed at all during that time. It's just been word-of-mouth. In one instance an ex-fulltime employer needed someone to come in and work on some code. In another a previous co-worker at a fulltime gig recommended me to just consult on the codebase and that led to my current gig.

All positions have been work-from-home except for the first one, that was about a 30-min drive 2 days a week.

I'm a full-stack dev, Ruby on the backend (almost 10 years experience with Rails). I'm not too shabby a designer, either, so I'm lucky that I can kind of fit in with any dev team or become a company's sole development resource if needed (which is my role at my current gig).

My advice would be to hit up several recruiters and get them looking for jobs for you. At one point I had 3 separate ones hitting me up for positions on a daily basis. They only get paid if they get people hired so they're very motivated to find you a job ASAP. I always figured that becoming freelance meant you had to spend your days marketing yourself, schmoozing people on LinkedIn, etc (all stuff I hate). It's turned out to be nothing like that. When you're a month or so from the end of a contract let the recruiters know you're available and the offers come rolling in. In my experience, at least.
Yeah, no pitchfork in hand here, but I also wouldn't be surprised if Amazon didn't appreciate that sort of activity.
Love the layout of the API Explorer. Makes it easy to see exactly what is being requested.
Computerphile interviewed one of the writers of this paper in a series of videos, who explained the brilliant and exiting history of this paper and its recreation, as well as the history of Phototypesetters.

1. https://youtu.be/CVxeuwlvf8ww
2. https://youtu.be/XvwNKpDUkiE
3. https://youtu.be/HdModNEK_1UU
congrats ya'll, what happened in the past couple months to spike the number of patients funded? Would love to hear more about 'growth hacking' a charity like this.
SSG | New York, NY | ONSITE | Software Engineer (low-level ++) | ssgllc.com | resume@ssgllc.com

At SSG we have brought together some of the world’s brightest traders, researchers, and technologists to collaborate and solve some of the most intellectually stimulating and technically challenging problems faced in any industry. Our cross discipline team holds degrees in Computer Science, Electrical Engineering, Math, Physics, and Statistics. We share ideas and collaborate to maximize our differing experiences and backgrounds. Our team finds inspiration everywhere, including academia and parallel industries, sparking our next great ideas.

As a core developer you will focus on building scalable solutions for handling a variety of data, where optimization and speed are at the heart of our systems. We write highly performant systems using a mixture of tried and true methods (C/C++), and we constantly evaluate newer technologies and the open source communities that support them.

Are you driven by your desire to build and constantly improve high performance systems? Are you interested in the technological challenges of building systems that are able to swiftly gather information from data sources all across the globe and writing the software that enables researchers and traders? Are you grounded by your pragmatism? Do you hold yourself accountable, while working well with others?

If so, we want to speak with you.

Necessary Skills
•Bachelor’s or advanced degree in Computer Science, Computer Engineering, or Electrical Engineering.
•Experience writing performance optimized code using object oriented programming in C++
•Strong background in data structures and algorithms.
•Experience writing low level software and expertise in threading
•Extensive experience in distributed systems and parallel processing
•Excellent communication
If you want more flashbacks, I made an album of some recent attempts at classic Mac development: http://imgur.com/a/scNE2

Included are screenshots of ResEdit, Resourcerer, CodeWarrior, and more.
Living in MN, I was surprised by truck driver being on top since I only know one actual OTR driver.

"Truck driver" covers a lot more than OTR. The guy that drives the Budweiser truck to your local grocery store. The Pepsi truck driver that restocks your local 7-11. I dunno, does "Snap-On truck driver" count, even though he's really a small business person selling tools to professional mechanics? UPS driver falls into that category, I'll bet. Friend of mine used to own his own dump truck, hauling for construction jobs. And so on.
> Credit cards offer comprehensive fraud protection; bitcoin offers zero protection and zero recourse if your money is stolen or lost

None of that shit helps me when I can't buy what I want because the merchant is in the U.S., my credit card is issued in Canada, and my shipping address is in Thailand.

I don't care about other people, I should be able to buy things online in 2015 and accept the risk of fraud my own damn self. And the merchant should (and wants to!) be capable of serving me.
I'd say the consequences for violating the witness protection program contract play a huge role in enforcing its respect.
One of his reviews brought up an interesting point. Version 3.1 of the spec does not limit the length of a cable, but version 2.0 does. Is a 4 conductor cable with a USB-C connector on one end only required to meet the USB 3.1 standards?
So this is just a fancy event loop?
Urbit language tutorial, chapter 0
This is pretty good. I am not a fan of any news website which does not provide RSS, but yours is where it is not needed by design.

Now, if only I can increase the font size.
Bitcoin seems more like a speculative commodity than a currency. As long as Bitcoin is experiencing such instability, how can it be useful as a currency?
That's true. BTTF isn't normally predeterministic [1] though, but maybe the desired result could be achieved through a couple of history rewrites. For example, young Marty visits a weird future where old Marty doesn't exist, then he goes back to the original present to live normally. We can then envision a replay of young Marty's experience in the future, wherein things fade in/out around him to create a world where old Marty exists too.

[1] By predeterministic I'm thinking of something like Crichton's Timeline, where the characters visit the past not to change it but to fulfil it (i.e. there is no rewriting or branching, their existence in the past is a constant).
When ChatOps Goes from Cool to Critical
Codes of conduct are not silliness. Almost everywhere that I have seen them implemented, I have seen a better atmosphere over that community.

And while John may have phrased the need for a CoC as a matter of making sure things stay on topic, there are several people who are put off by the hostility of e-devel and would like it if people remained civil.
Starching and ironing dress shirts is work (done for your employer's benefit) that is completely unpaid.
Great overview of the state of the art for newcomers to the big data space.
How ‘The Peanuts Movie’ Puts a New Spin on an Old Gag