skysight-inc/HackerNews huggingface dataset:
Interesting but that was over 2 years ago and frankly even if it is still 1.1% since I write web applications not sites I'm not devoting any time to supporting people without JS.

Anything over 1% of the total dev time would be a poor RoI and frankly I'd sooner spend that time making things more accessible to screen readers and such (something that many web applications already do very poorly frankly).
>You use any non-Win10 RDP client and enter the username with the blank password.

I think they are referring to automated attacks.
Thank you! I have two small-time investors currently, although I am still living relatively minimally (I also put in a good deal of money from personal savings, and ~$35k came from Kickstarter). Its pretty much a every spare second of your life type thing, especially with a baby. :)
Spotify's Best Feature: The Spoken Word Section
> An autodrive call will break down as much as a regular car AND then will brake down more because of the various systems over and above that a regular car does not rely upon.

I'm sure glad you have the data to back this up.

> When a regular car brakes down there is normally something you can do. The vehicle is still movable. An autodrive car with a blown lidar unit is probably bricked.

You can still put it on the back of a truck or tow it, the same way you would for a car which has actually broken down. You can do the same for the theoretically broken replacement car.
A demo one of my professors used to show was:

Bob Wills (damn, that pedal steel...): https://www.youtube.com/watch?v=ZFef08YZ6qk

Chuck Berry: https://www.youtube.com/watch?v=8RAfxiyMKAk

Wikipedia cites Wills' 1938 recording as the source, but it's fun to have the video. I totally believe Berry referenced Bill Monroe, I mean, Elvis' Blue Moon of Kentucky is a direct cover of a Bill Monroe tune. It's also thought that Scotty Moore's guitar style on Elvis' early singles was influenced heavily by Merle Travis' playing style ("Travis Picking" also see https://www.youtube.com/watch?v=N8vOTKMqzw4).
A Thousand Years of the Painted Face
> No perl 6 is still a crap like perl5, drop it.

Flamewar comments like this break the HN guidelines. Please post civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html
Docker for Beginners
Is the assembly language an existing variation, or some imaginary machine?
The micro-deposit requirement or Plaid (logging into the bank account) should ideally minimize fraud. But for consumers ACH fraud is sadly way more difficult to deal with than credit card fraud.
How come the title was changed?
Intel VPx hardware decoder slower than software decoder
> Sure, you'll get another flight, but when and you might be left footing the bill for the hotel for the night.

Extraordinary claims require extraordinary proof. Which airline will not cover hotel costs if you are missing a connection because of their fault? Is that even legal??
While there are reasonable arguments on both sides of the growth/zoning/etc. debate, I suspect that in the January 2016 economic climate in the Bay area, no reasonably imagined housing expansion would make more than the smallest dent in housing prices.

Look at Manhattan. Yes, you can't build willy-nilly whatever you want but there's certainly plenty of high-rise residential construction and housing prices are still pretty high in desirable areas.
There isn't really a research exemption in the US. From your cited article, citing Madey v. Duke University (2002):

The court did not reject the defense, but left only a "very
narrow and strictly limited experimental use defense" for
"amusement, to satisfy idle curiosity, or for strictly
philosophical inquiry." The court also precludes the
defense where, regardless of profit motive, the research
was done "in furtherance of the alleged infringer’s
legitimate business." In the case of a research university
like Duke University, the court held that the alleged use
was in furtherance of its legitimate business, and thus
the defense was inapplicable.

Practically speaking, it's difficult to sue a university or an individual for patent infringement when they are conducting research without looking like a monster. Considering the costs of litigation, time wasted, hit to PR, nebulous damages to recover, etc., it doesn't sound very worthwhile. Legally speaking, one would appear to have case law on their side.
time to break out the pitchforks, no more LEDS! ahrarhar
We detached this subthread from https://news.ycombinator.com/item?id=10884654 and marked it off-topic.
How to Be a Good Software Architect
Have you looked at the CAH Kickstarter (an easy reference point)? https://www.kickstarter.com/projects/maxtemkin/cards-against...

While amusing, seems like your video is missing A) details about the game and how to play, B) face to face with your founders, C) people enjoying your product. Also the low tier would be much improved with a digital download.

Re: the game itself, this sounds like it might work with the right group of very tight-knit friends. Kind of niche. CAH, on the other hand, seems to work even with prudish strangers because no one has to take responsibility for what they're doing. And the "Life is Life" chant seems a bit cringe-worthy. I dunno, maybe that's just me.

Good luck.
Yes, in fact the full source is going up on github, likely right around or during release of the first alpha build.
I like this example a lot :)
I love this game, and am so happy to see it on the iPad.

That being said, it's a bit of a shame it uses a virtual keyboard. Given the relatively constrained set of possible inputs (a dozen instructions, plus UP/DOWN/LEFT/RIGHT/ACC/NIL), it would have been cool to see him explore some more experimental touch-friendly input methods.
Very similar immediately playable JavaScript version.

http://play.elevatorsaga.com/

Which I'm now closing as I lost too much time to this the first time I saw it.
Takes about 5 pages until you get to the little price tag. I wonder how many abandonments they will get. Personally I like seeing the price up front.
I got it through Stream last summer, it's super fun. I think I only paid like $3 for it but I would definitely pay the $7 it's at now.
Yes, you can use the git sync for this :) https://www.overleaf.com/blog/195
Does such an insurance policy exist already?
Momondo is nice of course but be very careful as it links to some ... interesting travel agencies and your reservation might just poof! disappear. Make sure to check your reservation exists with the airline about a week after booking.
How long large enterprise takes to move to a new windows has been studied and published. The typical update is close to 4-5 years. Hell, many shops only recently moved from XP to 7. Hell, Win7 is almost seven years old!

>You use any non-Win10 RDP client and enter the username with the blank password.

What username? What code generates the correct name? That's what I was referring to. Say there is a win10 pro machine with rdp enabled for the account 'jmpendergrast' with no password and listening to 3389 with no firewall blocking it. Wonderful, how many passess until you guess that? Where is the automation code?

Note, by default windows will not let you use a password-less account for RDP:

https://support.microsoft.com/en-us/kb/303846

So that's another hurdle someone has to get through.

Also, when RDP is enabled, it default to the newer versions which don't have this bug. You need to specify legacy access as well. Another hurdle.

So let me summarize what needs to happen for this attack to work: Win10 needs RDP enabled with legacy access explicitly allowing non-NLA connections. Then Win10 needs a firewal rule for 3389 from its router or put on the internet without a NAT/Firewall. Then Win10 needs someone to make an account with a password (passwords are mandatory for rdp). Then someone needs to change the registry to allow blank passwords for a RDP user. Then that user needs to remove the password from that account. Then that user needs to be put in the RDP group.

And if a home user does this, he or she isn't using a local account they're probably using a MSN account.

This is very much an edge case here.

>RDP seems like a shitty remote access protocol wrt security, but VPN products are certainly worse than OpenSSH.

Everything sucks but FOSS right? How non-biased of you. I won't mention heartbleed and shellshock then.
I am trying to build a lending platform where we by definition cannot afford to lose 3% on each transaction. I'm am thrilled to see this. We have had to hand jam our current system with a local credit union (where we literally have to print out forms and bring it to them), so being able to switch to a fully programmatic system is awesome.
Is this shape of the face also affected by the country of origin for the prevailing art of the era? I would think models would affect this more.
Which is exactly why I just released http://paynote.io
75 Average Fans Crush ESPN’s Bowl Picks by Using A.I
@pc How do you feel about the assumed fraud risk you are taking on with this? I'd love to have a conversation with you about it (in private). You can email me at rwmurray (@) vt.edu. I know you all have quite a few vulnerabilities in your system and can't ever find a way to share them.
This is great! Many times I've thought it would be cool to develop a programming logic harness for elevator logic, but I've never come close to starting.

I think many developers have been waiting for an elevator thinking "Damn this thing is DUMB! I could do a way better job coding the logic for this..." Can finally test it out.
Oh, wow! How did I miss this? If you are pushing the source on github (regardless of license, I want to avoid that rathole) just so others can learn from what you did, then where do I go to fund you?
1 Improvements to error responses in Rails 5 API mode
This talk from Ed Lu[1] has a lot of great illustrations and cost/benefit analysis of NEO defense measures. He is obviously a bit biased as CEO of the Sentinel Mission, but IIRC, he isn't shy to admit that.

[1] https://www.astrosociety.org/silicon-valley-astronomy-lectur...
This has now been fixed. Sorry again for the trouble!
>Note, by default windows will not let you use a password-less account for RDP:

That is what this bug is about. I think there is a chance that the login screen may show the usernames.

Update: reproed and confirmed how it shows the usernames, in fact in some cases it can login automatically!
and still PACER is charging for searches. rip swartz
Indium and Gallium based? Sorry, but this won't replace much except maybe for certain niches, as it will simply be orders of magnitude more expensive than tin.
Yeah lets see how it plays out. I might have a look at rust at some point.

On the benchmark though, its doesn't seem quite fair. At least that first one is comparing a single threaded c++ program, to a multi threaded rust program. And for the regex example the author doesn't use C++ std::regex and std::futures (std::async) like he does for Rust. It makes me think a proper C++ implementation would do much better. (Personally I use the Parallel Patterns Library. I like it a lot. We will get something similar in C++ in a few years)

I don't know much about rust. It worries me though the examples are still using threads and mutexes. I think we need much higher level abstraction (like ppl::task, coroutines, etc) to get better scaling. Also lock free data structures dont scale that well either. As they still require synchronization and that hurts scaling). I think we need some kind of revolution in how we code to scale our programs to hundreds of cores.
Aside from the other comments, https://github.com/michaelwu/rust-bindgen/tree/sm-hacks somewhat works for binding to more complicated C++ code.

C code, works fine, as always.
INFOSEC started with Ware Report defining issues and predicting requirements. Lots of CompSci and experimentation by military followed. MULTICS pentest and other landmark works happened. Most key activities that boost security were identified then included into standards like Orange Book. A niche market and CompSci field flourished studying and building systems that used every technique known to improve security with great results (on security anyway). U.S. government canceled mandate on high assurance to switch to COTS for features & cost. Private market did same for similar reasons. High assurance market imploded with research going to a trickle.

PC and Internet eras were really getting going around that same time. Languages and approaches that introduce vulnerabilities one way or another became huge. INFOSEC research and products shifted toward all kinds of tactics for hardening, analyzing, monitoring, and recovering such inherently, insecure stuff. Revisionism kicked in where people forgot the old wisdom, starting to reinvent it slowly, plus how and why they got there in the first place. The products, both regular and security, had tons of vulnerabilities old methods and tools prevented. I call this the Modern Era of INFOSEC. It's still running strong.

Good news is the Old Guard published tons of papers and experience reports telling us what to do, what not to do, and so on. There's a steady stream of CompSci people and some in industry building on that. Keeps advancing. Even mainstream IT and INFOSEC adopted some of the strategies. Rust, "side channels" analysis, unikernels, trusted boot... all these are modern variations (sometimes improvements) on what was done in 70's-early 90's. So, it's not dead but it's mostly ignored and barely moving.

That's what I'm thinking when I see another modern firewall or whatever with less security than the guards from the 80's that predated them. You'd think they'd have learned something by now past just the features. The assurance activities were there for a reason.
Guards, if you were wondering...
https://en.wikipedia.org/wiki/Guard_%28information_security%...

Good essay on security assurance from engineering rather than subjective point of view that development often takes:

http://web.cecs.pdx.edu/~hook/cs491sp08/AssuranceSp08.ppt
I'm down, will do.
How to Profit from Rising Rents: Build Apartments
Plaid co-founder here. When users connect their accounts via the Plaid instant verification process, we actually allow developers to get a greater understanding of the user. Via Plaid, you can do things like validate the available balance and check the account owner's identity -- which can significantly reduce the likelihood of ACH fraud.
The troops were so in, in 2013 iirc. The entire political spectrum from Jon Stewart to the NFL was banging the drum to employ. those. veterans.

The entrepreneurial scene was of course quick to get it on the action and as OP mentions, adding the word veteran to any business plan earned you as many points as "big data" then or "AI" does today.
Depends on what you classify as efficient: mem usage, gpu workload, etc. Voxels are easy to work with but often represent more data than your really need.
Am I missing something? Why not just create a filter that permanently deletes or marks emails from a certain sender as spam?
Wells Fargo CEO can do it. IIRC it wasn't cheap unless you have high volume, though.
Just got my beta invite too. Got frustrated at the lack of an easy ACH payments platform long ago though and went ahead and made my own. Launched http://paynote.io on January 1st of this year.
Engineer Builds a Functional Miniature V8 Engine Using Only Paper
https://www.techdirt.com/articles/20160111/05574633295/forbe...
I'm assuming the conductivity is a lot better than existing conductive glues, though I really wish their article had actually provided some comparisons to those glues so it was easier to understand the motivation.
Really? I've been using Stripe for a couple years and never had a problem with fraudulent transactions. Do you require zip code verification?
This is unfortunately not the case in reality.

It is quite easy to get access to high value checking accounts for less than 50 USD. They could be personal or business. For between 25-75 USD you could get access to all the login information you need to access Wells Fargo/SunTrust/BoA accounts. You could see both Plaid micro-deposits. Even PayPal has faced this issue and they're solution was to be a huge pain in the fucking ass to users.

Balancing convenience with security for ACH is not an easy task. That's why ACH is so damn hard to do online.
Please read my response below.
I was mainly asking in general terms of "gamedev" efficient: Whatever deforms and renders at a playable rate and looks just as good as the alternatives.
That might be addressed by modifying the animal to produce the dsired organ at the correct size, scrubbing out all livestock cells with strong detergents, then seeding the organ extracellular matrix with progenitor cells from the intended recipient.

There would be no livestock cells left, so no worry about zoonotic pathogens.
well, come on, you have to at least try - I mean if you literally come up with a business plan to sell books online "after making a cross-country drive from New York to Seattle, writing up the business plan on the way", which is a quote I got from Jeff Bezos's wikipedia page on how he founded Amazon...oh.
Making this system integrate with Plaid out of the box was a smart move. Plaid is so much better for users' than having to manually enter bank account and routing numbers.
I have never seen a spec, do you have a link?
Thats a good point. I should factor that into the next version of my essay. It will be a natural advantage for OSS. On proprietary end, perhaps the contract will give disclosure of problems plus immunity to suits to the reviewer. There are still problems that can happen in that model but negates most of what you said.

Btw, about obligation, my essay assumes the company is trying to differentiate by taking initiative and having their product reviewed. Companies that don't shouldn't be trusted at all. End of story.
No, I never did really. Programming an elevator sounds very tedious, but it never sounded very hard. Elevators are heavy equipment, and there are edge cases around safety near heavy equipment: I'd rather not have to learn those first-hand.

However, I do think this is a great exercise for people new to programming. It's a common enough scenario that most people can recite 80% of the requirements of an elevator from memory.
You have a mobile phone, I assume? With a touchscreen? Which does multi-touch? And the thing sports a bluetooth adapter?

In that case all you need is a program running on that phone, emulating you 'airmouse'. No need for more hardware, just use what you have. The same works for a 'normal' PC, btw. I know there are several apps for Android which can provide this service, I guess the same is true for the other contenders in this area.
How team time tracking will change with Hours
I use it for fun, the most recent project I've been working upon is a console-based mail-client with Lua scripting. (Think "mutt").

The core of the project is C++, along with lots of Lua.

https://github.com/lumail/lumail2/
This question is settled on HN: https://news.ycombinator.com/item?id=10178989.

Articles behind paywalls are ok as long as the paywall has a workaround. Comments helping people read an article are ok. Generic paywall complaints are off topic.
What products are you selling? If you sell something high value and easily resellable then you should count your blessings. It's become a bit harder to identify a Stripe-based site without investigating.

Even with zip code verification you have minimal protection. There are no geo-location checks for IP + billing/shipping zip code or other protections. Stripe should bundle with a service like MaxMind IMO.
This is super important for b2b companies that need to accept payments of multiple thousands of dollars (e.g. Annual subscription / support), which largerish companies typically will not hand over a cc for, either due to CC limitations or (usually) internal process red tape.
Will this game in the future be able to run, ported or otherwise, on the proposed Voxatron Game Console[0] by Lexaloffle[1]?

[0] http://www.lexaloffle.com/games.php?page=consoles

[1] http://www.lexaloffle.com/
You should definitely email the fraud team! Try mlm@stripe.com. (Feel free to CC me; patrick@stripe.com.)
Doulci activator iOS 9.3 free download – iOS Jailbreak Tools and Jailbreak Guide
This is a great article!

I see a lot of pessimism about AWS in this thread but its unfounded.

The sheer number of success stories on AWS at every scale is amazing. This guide demonstrates the diverse set of services AWS offers for customers from zero to Netflix. AWS is world-class engineering and operations that can be summoned by a single API call.

There might be ways to cut monthly costs on other providers, but many people forget to factor in your time to research, design stand up and operate software. I'd go all in on SQS, with all it's design quirks and potential costs, over rolling my own RabbitMQ cluster on Digital Ocean any day.

I'm biased, working full time on open source tools to help beginners on AWS at Convox (https://github.com/convox/rack), but frankly there's not a better time to build and scale your business on AWS. The platform is pure productivity with very little operational overhead.
As someone who recently started integrating with Plaid in my app, I can verify that the extra information they give you access to is extraordinarily beneficial to better understanding your user. Also, asking for account and routing numbers is a massive inconvenience to users.
I run a Silicon Valley startup, but I refuse to own a cell phone
I use this feature with a Meteor app and it's really nice. Just be sure to not load a corrupted or crashing bundle, else your user will need to reinstall the app.

Apple is allowing this because JS is sandboxed, so I guess it's here to stay.
Are there any large deployments of Rust outside Mozilla? (I'm not being sarcastic, just wondering who with resources besides Mozilla is incentivized to put money into Rust development.) Thanks!
Great game last night. Alabama is on a different level, but Watson gives Clemson a chance to beat anybody, anywhere. Odd that the "experts" didn't see that and picked Oklahoma.