skysight-inc/HackerNews huggingface dataset:
There is already a standard solution for this imo. Get a GPG smartcard like a Yubikey and put an Authentication subkey on it.

Now to ssh to anything, clone from Github, etc you insert your Yubikey, and enter your pin to unlock it. A gpg-agent process is created that acts as a standard ssh agent.

No server modifications required and you get strong hardware backed 2FA. The ssh private key never enters system memory and could not be stolen even by an untrusted machine.

If the smartcard itself is stolen, it will brick itself on 3 incorrect pin attempts.

The same device can also store all your OTP tokens or behave as U2F depending on what a service supports so the end game is secrets no longer live on disk or in memory on your systems.

This also integrates well on Android devices via the Yubikey Neo with apps like Yubico Authenticator and Open Keychain,
Support work is all about empathy.
Flappy Bird on Linux (via Shashlik)
Bronze Age Homes Unearthed in East Anglia
You're right that a Merkle tree is sufficient for censorship resistance when the criteria in your linked comment are met. (I read that comment earlier and enjoyed it!)

So I'm changing my argument: I think key succession is very important and blockchains do it better. When you revoke a PGP key, you have to rebuild your web of trust from scratch, right? The key is your identity, and continuity is hard. With blockchains, a program is your identity. I can trust your new key immediately if the backup process your program encodes has been fulfilled.

PGP keys can't be used to build identities that are as permanent and resilient as state-issued identities. Blockchains can.
For a lot of people, it is more important to be strong in our values than to ignore them for the sake of the economy even if it means losing economical growth. For Québec to be strong it needs to be true to itself. Selling out our heritage for profit would be unthinkable.

You could argue that some laws make no sense and I would agree on some points but people are very afraid to lose what makes Québec what it is and some harsh measures are put in place.
> I tend to justify things (whether rational or not) as a content problem ("Oh I can just build this system and it will make making this type of content so much easier!").

That can also be a trap (one that I myself am particularly prone to given how much I love roguelikes and tool-building). When it comes to games, I'm just not wired right to enjoy hand-authoring content. So when I do game-like stuff, I tend to lean towards procedural generation because it lets me avoid that unpleasant task.

But, I've learned, painfully, time and time again, that that tends to be way harder than hand-authoring. It kind of makes sense. If hand-drawing a fun level is difficult for me to do, why should it be easier for me to write a program than can author a million of them? In some sense, the latter must be strictly harder since it is a superset of hand-authoring a few one-off things.

Tool-building does matter, of course. But sometimes you just gotta make some stuff.

Another option is to push it onto the player: make the gameplay itself creative. That can work (SimCity), but it can also fizzle out (Spore).

The problem there is similar, I think. With hand-authored content, you have to come up with a narrative path or maybe a tree through the possible game space that's fun to play. With player-authored content, the entire play space has to be fun. Otherwise they'll be able to make anything, but most of the stuff they make won't be fun to make.
This looks very interesting. Tell me more! How are you offsetting the cost of fraud when payments by fraudsters will cost them nothing?
From the authors linkedin:

Managing Director and Co-Founder
Garage Technology Ventures

Harvard University
AB, History of Science

Stanford University Graduate School of Business
MBA, Finance, Economics, Public Management

He seem's to have a sufficient background to support such an analysis.

https://www.linkedin.com/in/billreichert
What corporate network uses local accounts as opposed to Active Directory/Domain accounts?

If your business is not managing accounts over the domain via Active Directory and is individually setting up unmanaged local accounts for employees, you have far far bigger security issues than this remote desktop exploit.
30-40 years. Have money and motivation. Most tutorials are targeted at beginners, not intermediate skill people.
Tedious drama.
I don't know how spammers work, but legit mailing list software/providers will remove an address after a number of soft or hard bounces.
Nice. I'm surprised someone hasn't setup a script to enumerate them all. The ids all seem less than 6 digits
So we can guess from this that they don't plan on public releasing an audit of their reserves. How we can allow a country like Saudi Arabia to be the swing producer without us having any idea of their reserves is insane - actually allowing them to destroy the frackers and other high cost producers for a couple of years of cheap oil is insane.
You've never wanted to do something as simple as map over a list in your configuration to handle repetition?
Monitoring your Node.js app with DataDog
> You cited one defunct app that never went anywhere as evidence of an advertising bubble?

That they were able to raise $1.5M in seed funding is evidence of a bubble.

https://www.crunchbase.com/organization/yo
Canadian companies too?
[Just following instructions...](http://thedailywtf.com/articles/just-following-instructions).
Which is quite interesting for someone like me.

Around 1994 C++ seemed the path forward from Turbo Pascal, given that I favoured type safety, C was a meh when compared with Turbo Pascal, but Turbo Pascal was a PC only thing.

Back in those days C++ was regarded like Rust and other C++ wannabe replacements are nowadays.

We were the hipster of the 90's, with C devs targeting home systems slowly accepting that not all functions needed to be inline Assembly wrappers.

So it is interesting for a grey beard like me to see C++ being described just like C and Pascal vs C++ compilers were back in the mid-90's.

Nowadays my area of work is dominated by JVM, .NET and the native languages of mobile OSes.

I wish Bjarne et al succeed pushing "C++ Core Guidelines" forward, but they will not change the mentality of those that program C with C++ compiler, which is what I usually see at the typical corporations.
This was was posed as the the first homework assignment in my first undergrad CS class (15 years ago). I don't think a single person managed to do it.

It's a classic example of a problem that you think is appropriate to throw at new programmers but find out it goes terribly wrong because the hard part is designing a suitable state machine first. If you just start coding without a full model that covers all the edge cases, it quickly degenerates to a mess of ad-hoc heuristics and spaghetti.
In that case, of course you get into mitigation options.

Depending on your contract, proprietary vendors offer few choices about getting a vulnerability patched, if ever. If you're in the riffraff section (ie, most router owners only have a few), you might wait a very long time. One [1] from netgear that languished for months. And what about the Juniper backdoor: won't fix?

With open source, you can take the code to whomever you wish, fix it in house, offer a bounty, etc etc. There are plenty of houses that give away code and sell support. If GPL'ed, this model also accelerates fixes because everyone gets immediate benefit of everyone else's fixes.

http://betanews.com/2015/10/10/hackers-exploit-serious-unpat...
Seems fairly similar to sneakemail[0] (which I have been using for more than a decade), but with more polish. Looks like Throttle's basic service doesn't handle attachments or replying (sneakemail does), which is unfortunate.

0. https://sneakemail.com/
They are very simple, imaginary machines. They only have one general purpose register, a single non-addressable register to which you can copy or swap the value in the main register and four I/O registers for communicating with adjacent machines. To get anything complex done, you need to use multiple machines and much of the puzzling is spent figuring out how to divide the responsibilities.
11 Signs You Are Dating a Womanizer
Ah, I see. Looks promising then!
Want to register some support for what I see in the video - the banner looks cool, but I'm a lot more excited about the more detailed procedurally generated terrain in the video.
I actually laughed out loud. Well played.

Taking the comparison seriously though for a moment. In my opinion the difference is that C++ isn't just a better Cobol. Its not just the same thing re-imagined or cleaned up. There is a revolution between them. You can do things in C++ that you cant in Cobol.

Im waiting for that revolutionary new general purpose language that goes mainstream. I think it will be a language that scales much better and easier to hundreds of cores. Maybe it will be a functional language.
How do you propose dealing with NIMBYs who refuse to be reassured?
A project during my graduate work was to solve this problem. You can read my write up, which includes pseudo-code for the best algorithm I found[1].

Long story short: a simple, rules-based algorithm defeated my best efforts at having multiple elevators working together to coordinate their action.

[1]: https://clarkmoody.com/Moody_AgentBasedElevatorControl.pdf
It must be nice to be wealthy enough that you don't have an employer to force you to own a phone. Most people must have a phone to stay employed and can't make the decision this person made.

It must also be nice to have an adult watching your children all the time, even when it's not you. Many single parents also don't have this luxury.

He also asks what happened when your child had an emergency and no one could reach you because you didn't have a phone. Well, first of all, you probably were near a phone because you were at work.

Second, bad things happened sometimes. Just because people "got by" with things the way they were in the past doesn't mean it's OK to return to them.

tl;dr This is a privileged person talking about his privilege as though he's uncovered some kind of magical formula to being happier.

Unrelated: It says a lot that one of David Cameron's top policy advisors never reads books...
Perhaps it is legal boilerplate for People's Republic of China companies.

Consider that an American EULA might require a "worldwide, sublicenseable, irrevocable [...]" user content license, and forbid activites illegal in the USA.
One of the best in the field. :) Although I think they just have dev assurance. Not total high assurance. An early one with total was GEMSOS by Schell, one of INFOSEC's founders:

http://www.iwia.org/2005/Schell2005.PDF

Smartcard OS by Karger, another founder of INFOSEC:

https://www.acsac.org/2012/workshops/law/pdf/Lessons.pdf

A comparable one for dev assurance, but maybe easier to emulate, was CompCert. Testing of it against many other compilers validated formal verification gave best reliability.

http://gallium.inria.fr/~xleroy/talks/compcert-lctes08.pdf

Ironically, Microsoft compete neck-to-neck with seL4 in terms of verification with their excellent work on VerveOS:

https://people.csail.mit.edu/jeanyang/papers/pldi117-yang.pd...
The Oil Pricequake
Until banks get developer friendly and support OAuth, I'm not sure what else you could do if you want real time verification. I guess micro deposits could still work if you had faster rails, but ACH is still a batch process.
Off-topic, why did you switch from xmonad to i3?
Twitter Takes a Side in the Culture Wars and Lies About It
i3 works great with three monitor. It's my work setup.
You’re totally justified in your frustration, most people think about onboarding in terms of signing forms and getting added to a payroll database when really, it should take you from day 0 to 90 to the end of your tenure. In short, its about getting you up to speed.

Even when companies have an onboarding program, they often fail to relay the ​​tacit​​ information a new hire needs -- like the tech or third party software you describe. That's partially because tacit knowledge is hard to record and transfer, but its also a because no one thought to create a knowledge base or make it easy to transfer that knowledge.

If you're looking to improve the training, I would strongly suggest recording the way you use tools on a day to day basis. That way its not overwhelming if you have to explain or write everything down for a new hire. Using giphy/screenshots/videos is a more engaging strategy for demonstrating how to use an application. If you record processes every once in a while, pretty soon you'll have a compendium of your workflow or a living operations manual. While you could use a cloud storage platform for this, something like https://tasytt.com/, let's everyone collaborate and has features like account provisioning, analytics (for compliance), and more fluid access than Google Drive.
Someone make an API to link this and Starfighter.io.
Let's be careful about decoding vs. encoding.
This time is different
VLC Is Finally Available on Apple TV
Nice! They shoot for automated grading. I wish I had that when I was a TA.
Why? I found even the basic configuration is good for me. All I need is dmenu, which is already pre-setup.
my experience is that you should move.
No breaking change was required for that. :) The PyPy guys have removed the GIL with existing Python2 code.[0] The CPython core dev team doesn't want to work that hard though- they've just created a lot of needless work for others with their decisions.

You're right though, unless someone takes on the mantle of CPython2, we're looking at being forced to move to 3 or find something else. I personally think '16/'17 will be the year(s) of Swift. With the Perfect server-side Swift framework[1], and more sure to come, it's very intriguing.

I'm a pretty conservative user myself, and dislike churn and feature bloat so I'm also fairly attracted to Go. I'm not suggesting that's Swift by any means. Go promised no breaking changes for a long time so it's a good choice to write long-lived software in (and who knows what will and won't end up being long-lived so we should always assume the latter).

[0]http://morepypy.blogspot.com/2015/03/pypy-stm-251-released.h...

[1]http://perfect.org/
Then I'm guessing it's more a matter of his readership's level of finance knowledge. Seems like he's dumbing it down for TC.
Through grade school and some college experience in band (alto, tenor, and baritone saxophone!) we called all the instruments horns. Even percussion mallets/sticks. It was just a formality of dealing with field orders during football/marching season, including "horns up."
String Theory Meets Loop Quantum Gravity
Show HN: I'm a professor who has developed an interactive Powerpoint alternative
"I actually laughed out loud. Well played."

It's a new meme of mine. Glad you had fun with it. :)

"Im waiting for that revolutionary new general purpose language that goes mainstream. I think it will be a language that scales much better and easier to hundreds of cores. Maybe it will be a functional language."

I am too. I think Rust is a nice alternative to C++ for doing that sort of thing. Far as next step, I'm waiting too. I encourage you to check out Julia because it seems to have some of those traits. It's a LISP on the inside with a productive, imperative skin on the outside. Lots of potential for such a hybrid.

Also, check out ParaSail if you're interested in languages designed for easy parallelism. It's an Ada superset with some interesting design decisions. Might be worth factoring into the next, ideal language. ;)
It's a complicated issue.

There is a strong wish to stay true to our cultural heritage and stay true to our endangered roots as French Canadians. Québec has been fighting pressure to abandon the french language for ages. This is why we have things such as the "Loi 101" and the "Charte de la langue française". It makes sure that people can go in a coffee and order in french without any problems.

You would think this is a non-issue, why force people to speak and write french? It's easy to think that because most of the province is french business and strangers are is going to standardize to french but it's not true. Even with the laws that we have in place, there are a lot of shops or restaurants where they can only offer service in english. It's a constant uphill battle and while some laws make no sense, it's better than having no laws or regulations.

Yes, it is very hard to come and live in Québec if you are not willing to put time and effort to learn french. That's exactly the way we want it.

Sometimes the province is seen as racist and backward from the outside. The truth is that we are a very welcoming people but only to those who acknowledge and try to understand our cultural heritage and the fight that is being fought to stay true to our values despite all the pressure to change.
If you had a dog walking service with a route that crossed my property without permission, and after some time I asked you not to do so, you might write a blog post trumpeting: "Property owner is shutting me down." But others might disagree.

There may be ways to preserve the viability of your dog walking service. You can enter into an arrangement with me to use my property (which might include a nominal fee), you can take a different route (inconvenient for you and your customers, but not my problem), etc.

If the only way you can run your dog walking service is to take a shortcut across my property without my permission, well, then the world is sending you a message about the viability of your business.

Again, the mere fact that you and your dogs have grown accustomed to crossing my property does not mean I'm "shut[ing] you down." And next time, maybe you should secure written permission before starting a business based on the assumption that you'll have the right to use someone else's property forever without paying.
Sorry maybe I am not aligned, ssh-agent for handling password prompt? ssh-agent afaik is useful for going from A->B and then B carrying that over to C,D,E,F,G etc
LaptopsHome Gives Over 600 Computers to District Families
I actually wonder how the space and time complexity of the algorithm would increase as the number of possible dimensions of travel increases.
I always love memories like these. Looks like you found a pain point with a clear value-add solution. Hindsight is 20/20, but I always wonder what would have happened if your startup pivoted to offering ACH as a service....
I am starting with Ansible and pretty much my first thought was to write my own "super" python scripts that called Ansibke instead of using playbook and their DSL

But, is this a good idea? As the first six comments here are starting that discussion, what are the pros and cons?

The API may be rich but it feels a second class citizen. But DSLs are really hard to get right and often lack ... Everything.
This is a really good question actually. This engine isn't really meant to compete with major engines, but moreso satisfy a little niche (and maybe that could be a big niche depending on how it gets used). I think the best way to explain it is "Shadertoy for large environments" - being able to quickly dynamically create stuff with pure code. To be honest a lot of this is still unmapped territory and I'm not even one hundred percent certain that these things are all that useful. My main goal is to empower individuals by creating a relatively inflexible engine - that sounds weird but if you have a totally flexible content pipeline you are giving users enough rope to hang themselves. I guess the proof of usefulness in limitation can be found in things like Minecraft - it appeals to a broad audience of not just people who want a game, but people who like to tinker. Minecraft, by many people's accounts, is not really a fun game, but a great sandbox. I'm not saying I can get away with making an unfun game, but I think there is some sort of value in empowering users in the guise of a game. I don't know if this makes sense, let me know if I can explain it better :)
No idea how it works (can't watch a video where I am and it isn't explained anywhere else), but it does seem to consolidate a few useful features that I currently get elsewhere:

-Combine mass mailings in to a single daily digest email (Unrollme)

-Find out who tries to sell your email address (Using email+website@gmail.com)
"my country does barely have any contracts with other countries for crimes like this. So they would have to use a complicated way to actually force them to give out my data."

As far as you know. And that's exactly where the problem lies. You are trusting your adversaries to be honest about who they cooperate with, which is a great way to get screwed over, because your adversaries are adversaries.

So no, it still wouldn't necessarily be "better than not using one". The tradeoff is far more complex than that.
Using 2FA is all well and good but what I haven't found is a good solution for managing ssh keys for an organization/group. Would love to get some recommendations here.
Yes, they do awesome job. Check reddit.com/r/pfsense or check forum.pfsense.org or check their contributions to FreeBSD (both $$$ and code). Don't just link some random stupid thread from trolls.
> It felt so obscure and unnecessarily difficult.

I earned a bit of money in the 90's doing a lot of those types of data transfers. I get the feeling 70% of IT is just data munging.
in what way is Chef over-engineered?
Your Life Is Tetris. Stop Playing It Like Chess
This is specifically what I said:

"I guess jsprogrammer didn't learn much from their comments in that thread either."

I don't think that would change anything you said but please feel free to add to to it if needed.
This is really amazing. How on earth does it all fit in memory? If the render distance is 16km, then that's somewhere around 16000 * 16000 * 2000 = 512 billion voxels, which would take somewhere in the order of 512GB of RAM. Obviously this is not the case, so what clever tricks are being used?
I'm fairly sure it's never been called Aqua; "Aqua" is the name of the standard UI look (cf. the NSAppearance class). But the window manager is Quartz: "Quartz Compositor is the display server (and at the same time the compositing window manager) in OS X."

https://en.wikipedia.org/wiki/Quartz_Compositor

(Hence the name "XQuartz" for the X11 display server.)
I am a naturalized Canadian. French is my first language, and I studied and lived in Montreal several years before moving to Toronto. I feel that Toronto, and Ontario in general, does a much better job at integrating immigrants and visible minorities, regardless of origin or native language, than Quebec. This is a huge factor if you want to attract talent in a global economy.
10 U.S. Sailors are being help by Iran
This story doesn't get told enough.

Most of Google Cloud is built to operate the same way with 1 user or 1m users. And in many cases, Google doesn't charge you for the "scaling vector", whereas AWS will, and will sometimes even require a separate product (see Firehose).

Things like Load Balancer not requiring pre-warming, PubSub seamlessly scaling, Datastore and AppEngine seamlessly scaling.

This is especially obvious on the product I work on, BigQuery:

- We had a customer who did not do anything special, did not configure anything, didn't tell us, and ingested 4.5 million rows per second using our Streaming API for a few hours.

- We frequently find customers who scale up to 1PB-size without ever talking to us. I can be their first point of contact at Google.. after they're at that scale.

- Unlike traditional Databases, BigQuery lets you use thousands of cores for the few seconds your query needs them, and you only pay for the job. If I were to translate this to VM pricing, BigQuery gives you ability to near-instantly fire up thousands VMs, shut them down in 10 seconds, and only pay per-second. Customers like that kind of thing :)

Disclosure: Shamelessly biased
Doesn't have to be an issue with the appropriate PPA.

https://launchpad.net/~hvr/+archive/ubuntu/ghc