skysight-inc/HackerNews huggingface dataset:
How is sending a user an email complex, confusing or error-prone? As for security, given that an account can already be accessed if one has access to the holder's email (which is the case for any password reset flow relying on email), this is no more insecure than the current state.

Seriously, this sort of thing is not complex, not at all.
Actually, there's also the 1992 paper "What Artificial Experts Can and Cannot Do" [1] which gives this anecdote and calls it a "legend".

[1] http://www.jefftk.com/dreyfus92.pdf
Indeed. People shouldn't have to choose a password the first time they use your site. Our login flow in the open source http://qbix.com/platform lets the user check out the site without having to go through signup -> go to email -> click confirmation link -> back to site -> choose a password -> recover context.

In fact, most of our app users don't even have to sign up! They are invited via sms or email, and given a link that works like a capability. Clicking that link established an account for them and they get a full experience right away, complete with all their followers (people who uploaded their address books and had their number or email in there).

This is instant engagement of the user.

We don't even require a password for when they download our native app. We just go to Safari and do an OAuth 2.0 flow with our own site and give an access token to the app. That access token can be for 100 years.

They only need a password when their cookie expires or if they want to access the site from another device.

In that case, it's good to have asked for the email address or phone number in the beginning. That's the user's identifier.

Our system also works with Facebook connect, etc. but that's not the coolest part. The coolest part is having the user choose their own Qbix app as the identity provider to authenticate with, so they can visit new sites and they are instantly greeted by name, find friends on there etc. without the site knowing anything about them on other sites. That's the holy grail :)
For an additional anecdata point, my exercise regime has always been strength-building weight-lifting with some cardio sprinkled on top. I just don't get joint pain.

Also, I like to make it intensive cardio, which (I'm just picking it up again now, so past tense) tended to leave me with the most energy I've ever had in my life.
Kelsey isn't a she :)
Exactly. These neural nets have no concept of what a dog, vulture or trash can are, what properties that have, even what they are like as three dimensional objects. Many people reading about image classifiers assume that the networks are performing the same task humans do in the same way, but they are actualy worlds apart.
Dynamic Language Development Trends in 2016
You're saying a missing report, probably the result of miss filing the data, is a malicious attempt to hide some sort of abortion spike in 2008.

If you find sources you might get upvotes, but given the available information it's probably simply missing.
Theres a difference between finishing someone's sentence in a back-and-fourth conversation and interrupting.
Lower latency since nginx isn't proxying anything or even sharing memory. The nginx worker process runs the code as soon as it receives the request. Also, LuaJIT will outperform Go in some (many?) cases.

The performance differences are minor enough to be negligible for most use cases, though. You'd have to be at very large scale.
They need to have a way to reset passwords for people that scales.
Advertizing using creatine, which used to be banned everywhere until recently, and mentionning injuries all the time makes me think people should stay pretty far from any kind of advices this person gives.
But... What if it is true?
Writing a Lektor publisher plugin
"Google has signed Fiddler engineer Eric Lawrence to a lifetime deal in what one source familiar with the negotiations said is a fairly ordinary hiring.

“We are excited to add Eric to our lineup,” Masko Askov said. “He is a talented player who we feel can make significant contributions to our Chrome team.”

A company spokesperson would not say how much Google paid."

(in all seriousness, congrats to Mr. Lawrence).
I don't mean 'on the desktop' when referring to database use in production.
Using TypeScript with Angular 1.x
Excuse me but since when is it more weight and less repetitions that lead to strength? It is the other way around. Less weight, more repititions -> strength. A lot of weight, less repetitions -> size gains.
I'm not sure if this warrants a separate library since it's just an interface for `sync.WaitGroup`.
SpaceX Did It – What It Should Do Next
MVC itself isn't a tool of craft; it's an ontology for talking about code. That is, there's no system that is or is not MVC; MVC is a guide for mentally modelling a system. It's a way to distinguish parts of a continuous whole by drawing imaginary lines, like between having a "brain" vs. a "mind", or between having a "state" vs. a "government", or between various species of plant or animal. They're tools to use to cluster the various actions of messy systems into well-known, recognizable clumps, and assign labels to those clumps, so that when you talk about your system's "controller" and your friend talks about their system's "controller", you both can understand each-other.

Ontological modelling is the pure kind of abstraction—not the kind you reify by implementing it. There's no "MVC design pattern"; all systems can be broken down into MVC. You're never not implementing the "MVC design pattern."

The reason people get confused is that there are design patterns that people implement which make an explicit distinction that looks like MVC. This has nothing to do with MVC; you haven't "implemented MVC" by creating a system where all your model classes are Model classes, and all your views are Views. You've maybe made it easier to reason about your system in MVC terms, but that doesn't get you anything unless "reasoning about your system in MVC terms" is something you need to do a lot, because e.g. you and your coworkers split your responsibilities that way.

Now, what you may have done instead, when you think you've "implemented MVC", is implemented something like Hexagonal Architecture[1]: an actual design pattern—an idea that some-but-not-all codebases are an instance of—involving effectively inverting your "app" into an "engine" of business logic that relies on dependency-injection of engine-specified "pluggable" interfaces for its IO (both the out-to-the-world kind, and the in-to-its-databases and third-party-services kind.)

If your MVC app's "core" business-logic part is a library with direct unit tests on it and so forth, and this part is useless on its own; and if you've got another part that treats the core as a dependency, and turns it into a web service or whatever else—then you've got Hexagonal Architecture. You've also, coincidentally, got some quite-elegantly-delineated MVC boundaries: your model and your view can't share logic, since there's a component boundary between them and neither one can assume anything about the other. But that's just an analytic property of the code; you didn't "do MVC" or even "do MVC right." You just did Hexagonal Architecture, which happens to make it easy to reason about your codebase in MVC terms.

[1] http://fideloper.com/hexagonal-architecture
> This is essentially the same thing as having your password emailed to you and is insecure for all the same reasons.

No, it's essentially the same thing as having a password-reset email sent to one, which is already the case for just about any account anyway.

> You're putting the responsibility of security on the email provider, which you can't control.

Your email provider is already capable of visiting a site, claiming to be you & claiming to have forgotten your password, then intercepting the password-reset email and resetting your password (about the only sites which require more than this are banks).

You can extend any flow which is secure against an evil email provider resetting a password to be equally secure against an evil email provider logging in. Obviously you could add an SMS code, which would then require subverting your mobile provider as well as your email; ditto a landline call.
What would that get you? The input devices are almost certainly going to be internal and PS/2 or I2C, and if you're the sort of person doing this you'd be using encrypted storage.
It's actually commonly used in production for certain types of databases. SQLite is not a replacement for something such as postgresql but it certainly has it's use cases.
buying suplements instead of eating real food is weird.

https://en.wikipedia.org/wiki/Complete_protein

many complete proteins exist in their raw unprocessed forms.

prev discussion

https://news.ycombinator.com/item?id=5504129
Hi,

I maintain the world's biggest spread sheet of life span experiments.

I believe slowing aging can increase life span.

It turns out that the effect of exercise on all-cause mortality is well studied.

My big spread sheet summarizes about 80 experiments.

They show that exercise usually lets us live longer.

A histogram of their results is at

http://morse.kiwi.nz/kingsley/lib/exe/fetch.php?cache=&media=science:histogram_of_exercise_vs_all_cause_mortality.png

I think the trick is to not OVER train.

I'm told that over-training is worse than no training, and just working up a light sweat is good.

More findings from data mining my big spread sheet of life span experiments are at

http://morse.kiwi.nz/kingsley/doku.php?id=science:kingsleys_big_spread_sheet_of_life_span_experiments
True. Also i could change the 2-6 8-12 repetitions to 10-12 or 15! :)
"Where is the nearest AED" would be helpful, too. (If you have an office with more than X people, or any establishment open to the public, and you don't have an AED, you should reconsider. More of an issue with middle aged/older people, but there are heart attacks in even healthy young people, and not all people are healthy.)
> However, this method can't really be used everywhere — not all emails are encrypted up to the point where the recipient reads them.

Neither are password-reset emails…

This is no more or less secure than sending password-reset emails; any additional security intended to protect in the case of password resets can be applied to login as well (e.g. SMS or landline contact, knowledge of shared secrets of varying security).
Why's this newspaper published in English?
People with children?
source for creatine banned anywhere?

I'm using creatine for 10 years...

also - this article is bullshit :)
Well, some things don't, but it mostly works. Sleep is always dodgy for me (won't wake up properly), the camera doesn't work, and the brightness adjuster is spotty, but it's nothing I can't live with.
Huh? AFAIK creatine hasn't ever been banned. It is the safest workout supplement out there.
Hi,

I maintain the world's biggest spread sheet of life span experiments.

I believe slowing aging can increase life span.

It turns out that the effect of exercise on all-cause mortality is well studied.

My big spread sheet summarizes about 80 exercise experiments.

They show that exercise usually lets us live longer.

A histogram of their results is at

http://morse.kiwi.nz/kingsley/lib/exe/fetch.php?cache=&media=science:histogram_of_exercise_vs_all_cause_mortality.png

I think the trick is to not OVER train.

I'm told that over-training is worse than no training, and just working up a light sweat is good.

More findings from data mining my big spread sheet of life span experiments are at

http://morse.kiwi.nz/kingsley/doku.php?id=science:kingsleys_big_spread_sheet_of_life_span_experiments

Thanks,
Kingsley
This is terrible. Why isn't the article flag killed yet?
>But that's exactly what happens sometimes. Family was ridiculously overprotective of me and crossing roads because my sister got run over by a car.

Well yes, and it isn't the right reaction, not in this case, and neither in the example about vaccination.

Of course it's also all too human and understandable, but in the end it remains absurd.
Do you mean for public facing sites? If so, what are the use cases?
> Yes I've owned Newtons, Palm Pilots/Handsprings, Treos and XDA/SPVs all at launch. All had resistive screens, all were universally awful. The stupid styluses were rubbish.

I haven't tried any of those in particular, but they're all from pretty far before The Capaciting.

> You are confusing what is merely a paradigm (in this case WIMP) with what you think is a modern OS.

A modern desktop OS, which I'd define as following WIMP. If you have another definition then I'd be very interested. iOS (and Android!) might be remotely based on desktop OSes, but with all the defining features stripped out it's not really a useful or applicable label anymore.

> Tell me, why do I need file system access? Do I really need to manually file away thing in this day and age? Why can I see MP3 files when I'm trying to open JPGs?

Because files are a very useful abstraction if you use more than one application, or for moving between them. I don't want to use Okular in particular, I'm just trying to read this document. I should be able to take a piece of data, and the OS should find something that can open it.

> A phone is a personal device, why does it need multi-user access?

It was just an example of something that could be used to differentiate it from something that wasn't "based on a desktop OS". I'm still very curious about where you got that from in the first place, btw.

> Why does it need terminal access, a relic of the pre GUI era? Any counter argument that you come up with I can pretty much guarantee will be an edge case.

Because the terminal programs already exist, and nobody has bothered to make a GUI equivalent. For example, I would use my old N900 to repartition SD cards when needed, just like I could on my desktop machine. Niche? Sure, but it was useful to have the escape hatch when needed.

> Are you referring to the 30%? Go to any other retailer and see if you get that deal.

Why should I have to go through a retailer at all?

> Approval is arbitrary? Perhaps, but it does keep the malware count down. You do know that Google do it to, right? So do Microsoft. Other than that, running your own content delivery and payment system isn't cheap, and neither is managing it, but hey, you keep clutching at those straw men...

As opposed to when service providers ran it? Besides, just because all of them do it, that doesn't mean it's the right thing to do.
Deleted comment as I was talking about the wrong graph....
> I hooked the ground crocodile clamp of my scope to what I thought was the ground but which in fact was V- of the DC supply voltage of the neon light installation that was use to drive the display.

Yeao! I own a couple of high-voltage differential probes for this very purpose. Even though most single-ended scope probes are rated to 300V Cat II, I won't go anywhere near main's power with them.
Security Is Maturing in the Docker Ecosystem
> It runs on a global network of computers with untold hoards of RAM and disk arrays with indefinite IOPS.

Much of that is just to provide automatic spell checking to millions of people concurrently.

I would doubt the actual spell checking software for a single language, excluding proper names, would be something a Mac can't run.
> The card's connectors plug directly into that.

In the past a CPU was attached to a relatively low speed bus, and the peripheral interconnects all came off some external chip. These days you've got PCIe coming off the CPU package and memory clocks in the GHz range, so the mechanical aspects of this become massively more inconvenient. Even ignoring that, once you've got storage and CPU on the card, you've basically got a card that's a significant proportion of the size and weight of a laptop. At which point you could just carry the laptop instead.

> Think along the lines of the card computers that need no cooling but have good performance.

The attempts on that side (such as the Motorola phones that had laptop-style docks available) have been complete failures.

> I promise you that in physical you'll find the more convenient versions will usually get you screwed

And a solution that's excessively inconvenient will just be ignored.
I don't understand how some people can take the risk of being sent to jail in order to take down some gaming server on christmas. Is this a political statement about consumerism ? Or do they just like to piss people off ?
It doesn't fare that well. Proper RAW encoders have tens of manyears of dedicated work put in, intimate knowledge of the camera sensors (often with the assistance of camera makers), expensive labs for color tests etc, and top it with several patented proprietary techniques for the image processing part (Photoshop has tons of those).
Right on. For me, exercise provides a very convenient way of challenging myself. The fact that I look fantastic and I'm very fit are really cool side effects.
Low levels of marijuana smoke exposure actually improves lung function
What is the purpose of this comment? It's a political platitude with no substance.
Demo pls!
Does anyone make that much money outside of expensive cities like San Francisco and New York though? I know that I am underpaid but I don't think I am that underpaid.
How is Ubuntu any more or less user friendly than OSX or Windows? They're all so similar these days..
> It's rare for a tunneling project to find nice hard homogeneous rock through which a tunnel can simply be bored without supports

Obviously you've never played Dwarf Fortress.
It's a personal list by Karsten Schmidt (@toxi on twitter):

See https://twitter.com/toxi/status/679826201502978048
Agreed - I also used to be "linux hobbyist" until the day I realised I was spending far more time monkeying about with packages and kernels than actually doing anything useful. Thanks to Ubuntu I don't have to care about that anymore.
I'm glad this article calls out the CLL drug ibrutinib. You hear a lot of people say "why aren't we making progress in treating cancer?". Well we are, ibrutinib is a great example.

The clinical trial data I looked at a couple year ago is a little fuzzy, but basically if you had CLL and the 17p deletion, your chance of being alive after 2 years was ~25% (using the standard of care before ibrutinib). In the ibrutinib clinical trial, 95%+ of 17p CLL patients were still alive after 2 years.

A massive jump forward in the treatment of cancer.
> But if it did that, there might be target architectures where the code that would need to be generated to check for that case would have a 300% performance overhead

See my sibling reply down-thread. You don't want the compiler to automatically insert the check; but neither do you want the compiler to assume you want to not insert the check. You want the compiler to error out until you tell it whether or not you want a check. Or rather, whether you want checked-division semantics—which will be free on some architectures and costly on others—or unchecked-division semantics—which will be dangerous on all architectures, but technically impossible on some (presumably, it would be approximated by using checked division and then throwing away the error.)

Either way, you probably don't want the default "checked division that could error out on the architectures where it's free, and unchecked division on the rest"; you then have to code for both the case where your function can now trap/throw an exception, and the case where control continues through your function using the invalid calculated intermediate as input for further operations. You've probably coded to handle one or the other—but it's very unlikely you've coded to handle both. And why would you want to have to?

Deciding on your code's semantics should a development-time decision. The compiler should prevent you from making the mistake of leaving your code's semantics to the whims of the target architecture your (presumably portable) code happens to get compiled on, at some other time by some other person, unless you explicitly opt in to having the semantics of "whatever the target architecture wants to give me", on a case-by-case basis. The compiler should ensure that your code has the semantics you want everywhere—whether those be "always do X" or "do whatever the target arch's closest approximation to X is."

What we call "undefined behavior" in C is actually implemented by C compilers as a very specific set of assumptions about what semantics developers prefer—and those assumptions may or may not be right for most code, but they can't be right for 100% of code. Code is made of decisions[1]; the whole of the task of programming is to explicate every decision about a business-process that was previously left implicit, so that the same predictable and deterministic thing will happen everywhere, every time. So why should compilers allow programmers to leave their desired semantics implicit?

[1] http://siderea.livejournal.com/1241996.html
Not sure if anyone realizes this, but Mozilla is not really an open source thing. It's a company that happens to be a nonprofit. It deploys resources and runs itself like a Silicon Valley company.

It's not just a bunch of dudes in their basements writing code. They have like $330 million in annual revenue. They are sitting on like $90 million in cash.

Mozilla isn't about software for its own sake or just for the sake of the web. They are about self preservation and Persona wasn't going to keep them alive, so they killed it.

Mozilla is a company. That is what companies do.
Show HN: HTML Snippets for VSCode
This also very related and just released. This was published in quite many local (finnish) newspapers as this is a joint project of Jyväskylä (finnish) and Michican universities.

http://www.nature.com/articles/srep18259
As I understand it, the main point of Persona was improving the situation around authentication and passwords.

Now, I'm seeing indications that Mozilla is working on implementing FIDO U2F support (“Mozilla’s commitment to add FIDO U2F support to the Firefox browser”).

https://www.yubico.com/2015/12/2015-was-a-yubico-rocket-ride...

That seems like a much better approach to improving the situation around authentication and passwords than Persona was.
Different repos with different access credentials to create another layer of separation between secrets and source. Defence in depth.
Founders leveraging Instagram to build multi-million dollar businesses
If that's your real resume, I'd suggest changing the address before posting it on the Internet, because creeps.

In unrelated uncreepy news, we are practically neighbors! One block over on Steiner.
> I mean its a fucking workstation, and they are still chasing the grandma market

Ubuntu's original mission was to make a desktop for the general user, as every other desktop distro out there was already available for the technical user.
I think this is likely just some angel investor's portfolio, with some other companies sprinkled in. A few alarm bells are going off:

* Explicitly filters for people who do not want a work life balance. If a job applicant says they found your company via this list, you don't have to ask, "Will you regularly work more than 40 hours a week for free?" They just told you.

* No information on why these companies in particular are special (everyone has a strong market/team/growth)

* No disclaimers regarding conflicts of interest

* Trying to establish a brand for some reason

* Published anonymously

Hopefully I'm not being too cynical. Just seems very financially motivated.
>In all honestly I do not see what the concern over this law has been about

>What is concerning is what the law may be twisted to "authorize"
Makes me think that the equivalent of this '30 years ago' story with today's present as the past will be "they used to carry out complex operations on their OWN computers? Oh, they had non-instant network speeds, that explains it..."
Or :9990 on the Docker Machine VM's IP address if you're using Machine.