skysight-inc/HackerNews huggingface dataset:
I don't think that's a fair criticism of Lastpass for having "security issues" for the following reasons:

1. In the blog post you linked, no user passwords were at risk. They were being abundantly cautious, which makes sense since they hold everyone's passwords.

2. In the talk you linked, this is a inherent problem with storing keys on your local filesystem and not a problem with Lastpass. 1password is also "vulnerable" to this attack.

3. This current phishing attack is not a vulnerability in Lastpass itself, or anything wrong with their cryptography. As the author points out, anyone who falls for this will receive an automatic email notice (if 2FA is not on) from Lastpass and if you have geographic restrictions enabled this attack won't work at all (note 1password does not have these features).

4. Storing encrypted data in the cloud is not inherently a vulnerability, although it increases your attack surface. Many users of 1password also do this with features like Dropbox sync, and Dropbox provides much less rigorous access control compared to Lastpass.

5. 1password has had it's own share of security blunders. The most recent being their database format that leaks all of your account names and the URL they are for, which 1password defended was for "performance reasons". http://myers.io/2015/10/22/1password-leaks-your-data/

EDIT: Updated to mention that alert emails are only sent if 2FA is disabled.
Think? We know this is the case. We also know they're coached on what to say in court. It shouldn't be surprising that when we officially give them different legal standards based on yelling (or testifying) certain magic phrases, they opt into the lower standards.

But for just "stop resisting", see the Newport Beach recruitment video here: http://www.theagitator.com/2012/07/05/two-videos-two-cities-...
They've developed a photonic crystal [1] which reflects IR while passing visible light. That should be useful. Using it to to try to reflect IR back to the filament of an incandescent bulb is probably not going to be cost-effective. Photonic crystals have detailed structure like an IC, with waveguides and cavities, and are made by similar methods. That's a lot to make just to get an IR mirror for a light bulb, since you'd need a large surface area of the material. Probably more expensive than fabbing LEDs.

This sounds like an interesting development overhyped by the PR staff. Again. See [2].

[1] http://ab-initio.mit.edu/photons/
[2] https://news.ycombinator.com/item?id=10916894
Obligatory: http://www.theonion.com/article/open-minded-man-grimly-reali...
I'm (only) 23 and I've felt this for a while. I've been trying to leave my small no-name company for a higher calibre job in NYC for a few months now. I guess I'm lucky because I know what I want - but I need to wade through extreme amounts of bullshit to get there. I'm very efficient with my time but if I made every second worthwhile, I'd go nuts. Sometimes BS time (videogames, the pub, etc) are necessary.
Somewhat unbelievably, I still have that 1960's jeans jacket with the patch on it that says, "Do it today, tomorrow it may be illegal." And, all hail the Internet, that thing can still be bought online:

http://www.holidays.net/mlk/store/Old-60-s-70-s-Protest-type...
Check-in before code review is an antipattern
Has hello world ever been exciting, it is only really a building point. You can't do anything intersting until you know the basics, of building and flashing the board.

The question is what does Rust have to offer as your embedded program grows.
Good timing on the topic, I mean "how short is it?" when it comes to life duration. I'm at a stage of slowing down, cutting back after working for decades "at the front line". Like everyone says, it all zoomed by so fast.

Or did it? I think it reflects the point of view, when we're involved in work, all the details to take care of, we feel overwhelmed, busy, time isn't rushing by at all. But once it's history, the past, all of that is suddenly doesn't exist, it has no reality and it is packaged up in memory as though it was just a brief moment. Kind of like closing a menu what's there is hidden, except we're not reopening it, at least not the same way ever again.

Time is relative, as Einstein said, it goes quickly sitting next to a pretty girl, but a boring lecture drags on forever. The epochs across the lifespan come and go, and I think we judge the duration of experience by its currency because involvement with events in real time gives the sense of time. The meaning of a "long" or "short" time is anchored in such reality.

Anyway I've been thinking for a while that what's important is not how much time we have left to live. After all that's not something we can actually ever know. What matters is what we do with the time we have. I'd surely agree we can't afford to waste it on irrelevancies, pipe-dreams, or bitterness. Far better to do what we can, when we can do it.
Sure, but most people do not walk ten times as fast (or even twice as fast) as their escalators lift them.

Visual inspection of https://www.youtube.com/watch?v=7fNDgwp_w_s suggests that when two people enter the escalator side by side, the walker exits the escalator at about the same time as the stander is 75% of the way up it (~=133% of the rate of speed). The density of the walking side is surprisingly high to me (maybe accounted for by the short span relative to the monsters I'm used to on WMATA MetroRail), about 60% of the standing side. This leaves 80% throughput for the walking side of short-span split escalators relative to the standing side, only a ten percent overall cut in capacity for this one escalator in Singapore.

That number will probably go down the taller the escalator is, as the walking side slows down due to personal stamina (adjusted walking speed and percent willing to walk), and bunching, a phenomena we're familiar with from busses.
The registrar only has your public key and Cloudflare handles the private one for you. If you distribute the public key to your servers as part of the validation this means that your largest risk is actually a breach in Cloudflare.

I really really trust them, they have an impressive history of contributions to the web and commitment to security. If your servers are behind another access control layer, like a corporate VPN, this shouldn't be a big concern, since they would have to disclose breaches anyway.

Finally, I think this interesting because basically DNSSEC gives you an easy way to distribute data globally in a secure way with a TTL. This is the best benefit compared to using certificates for access control where revocation is usually very painful.

Consider this an initial look on how to use those benefits of DNS. I agree another layer of security would be great. Think something like asymmetric signature of the actual TXT record so that DNSSEC helps control expiration and then the other key validates origin. You are using DNSSEC only for the benefits of TTL validation.
Does anyone else find the trend of accelerating forced obolescence very unpleasant? With recent hardware only getting more locked-down and user-hostile (often in the name of "security"), and hardware from the last few years being more than sufficient for most uses, I can see the impetus to upgrade has decreased significantly. Windows XP was supported by MS for a long time, and even after that, is still in quite widespread use today. I suspect 7 will last even longer, as it's effectively the last version of Windows that is still relatively featureful and not a "service".

A lot of users don't care about "latest and greatest" --- they just want to keep doing what they were, with what they have. Lack of support from MS doesn't matter, as the community will form its own to provide unofficial fixes for various things that don't work (and a lot of other things will keep working.) Windows 9x, many years unsupported by MS, still has quite a lively community:

http://www.msfn.org/board/forum/8-windows-9x-me/

http://kernelex.sourceforge.net/

(There are also surprisingly many videos on YouTube of new hardware running old software.)

XP too:

http://www.msfn.org/board/forum/34-windows-xp/
Hacker news is definitely not the best place to engage in discussions about medical papers.
While Rick Steves is a warm and wonderful person he is no authority on Iran. He visited Iran and was carefully stage managed to present only the positive side of things and completely ignore the rest.

He is not a historian, he is not a sociologist, he is not an orientalist, he has zero credentials or background which would make him in any way an authority or a source of insight.

He went to Iran and had a great time visiting different cities and sites. And he talked to many people, while government minders were close by but off camera.

Therefore, this presentation is what it is: an anecdotal account of one man's carefully choreographed visit to a country.

And I'll add that I'm saying this as an Iranian - I wish I didn't have to add that but it seems that sometimes good intentioned people see anything negative written about Iran or a 'brown' country and automatically think it is motivated by racism or bigotry.
Sen. Obama in 2006: CS Gender Discrimination Threatens My Daughters' Prospects
Incidentally, one of the stickiest lessons I received from my Econ 101 prof was that if you ever have a choice to go out with a couple with kids or a couple without kids, you should opt for couples with kids, for they value their leisure time as though it was ground up rhino horn.
I think the problem is definitely finiteness (not length).

I don't understand it when people talk about 'squeezing everything out of life' - As though you could extract real lasting substance/meaning from it.
I don't believe it's possible to "Make the most" out of life - It all adds up to 0 in the end.

"Squeezing everything out of life" implies that you're literally taking the juice out of life and storing it somewhere safe/permanent - In reality, it is like squeezing an orange and then putting the juice back inside the orange.
To be fair, this is on par with, or better than, Wordpress.
Marriage definitely made me prune bullshit from my life. I can only imagine what children would do.

I would include Anger as a subcategory of bullshit. It promotes irrationality and the after effects hamper you. In the renowned book "Emotional Intelligence" the author says that the best thing to do when angry is to focus on controlling it. The more it grows, the harder it is to escape.
Same here. I saw the screenshot before scrolling down to see the explanation, and assumed it was the real thing shown for comparison purposes. Very convincing attack.

Edit: assume->assumed
If walking is just 50% faster than riding (i.e. walkers go at half the speed of the escalator), but requires 50% more space, then it's a break-even situation for capacity. And a win for latency.
> I'm very efficient with my time but if I made every second worthwhile, I'd go nuts. Sometimes BS time (videogames, the pub, etc) are necessary.

Be careful with equating "unproductive" and bullshit. Society at large only cares about your productivity, and there is always pressure for you to do "productive" thing that advances some imaginary life ladder.

From your POV and benefits, all those productive things might all be bullshit.
Move Sooner and Faster Than You Think You Can
This is a good introduction to the subject but misses what I think is going to be the next big push against advertisers: network blockers.

You can see proof of concept projects like the Raspberry PiHole [1] now, but I think are going to explode in popularity with any organization that's already doing content filtering (government agencies, corporations and universities) as it's such a small technological step and the justification of "it will stop malware and save on bandwidth" is likely to carry the day.

While I think the HN crowd is generally in favor of ad blockers, it's interesting to note that the next thing being deeply affected is any kind of analytics service (even first party).

1 - https://github.com/jacobsalmela/pi-hole
This is amazing not just for the execution, but the plain simplicity of it. Could you get around this by always clicking on the browser bar LastPass button when you want to login?

I've noticed LastPass will often log out seemingly at random. This is supposed to be determined by a combination of your settings like "only allow one IP logged in at a time", which would log you out if you switched on your VPN for instance. However, it can appear to happen out of the blue, which makes this attack more dangerous, because people are used to that occurring.

LastPass has a binary extension option for Chrome, hopefully they put that to use here with a desktop window that pops up for you to log in. But the fact that they just got bought by LogMeIn (and their reply to this issue) worries me that they won't do anything.
An experience feels meaningful only with respect to others that don't. If it wasn't for bullshit we would never know what to cherish.

The bullshit and cherishable also seem to frequently reverse roles. Many things that seem like noise today, may return to foreground with profound meaning later.

I wonder if perhaps nothing is bullshit or meaningful after all. Experience simply plays this game of light and shadow to keep us entertained.
This is click bait. Old versions of Windows will work just fine, they simply just won't be optimized for the new architecture features.

Enterprise customers are the ones who will be affected the most. It sounds like Microsoft is saying that they won't provide support for issues if you're running an old architecture. Regular users really won't be affected by this at all.
I'd like to clarify that there's a _major_ issue to consider. Here's my comment on the article explaining:

Cloudflare delivers signatures for records that last more than the TTL of the record. This has the problem of replay attacks. If one employee that had access at some points configures a machines DNS to return an old DNS response it will be valid until the expiration of the signature, hence having access for more time than the actual TTL.

I just checked and Cloudflare generates signatures expiring +2 days in the future. This means that I have a TTL of 5 minutes on my record but the client is receiving old queries, authentication would pass without a problem for as long as the RRSIG is valid.

Ideally Cloudflare should sign every record with the same frequency as the records TTL, that would solve the issue.

After finding this out I think you should _not_ use Cloudflare's DNSSEC because revoking access to a user wouldn't be 100% effective until the RRSIG expiration date given the replay attack scenario.
Life is too short to not be involved in and/or contributing to anti-aging research in any way.

If Wright brothers (and other flight enthusiasts around that time) had not taken the initiative, academics, pundits, and "experts" had it settled that heavier-than-air flight is impossible.

It had to eventually happen because technology is inevitable, but we might have conquered flight in 1953 instead of 1903.

In the case of anti-aging, such a difference means you either die or barely make it past the last generation to die.
Paul,you don't know me. But this could not have been more perfectly timed. Thank you, so much.
Exactly! The IranDeal was all about giving US more options in mideast. Saudis had ensure to maintain their monopoly as being the only US option and as a result they could get away with indirectly funding and supporting ISIS, etc.
There is probably "more" stuff that will come out from US-Iran before Obama's end of term as this relationship will expand his legacy and it will provide the Iranian counterpart opportunity to show they are ready to be part of the world.
The OS doesn't come with drivers for everything but that doesn't mean others won't write drivers either.
Iran is not shy about its imperial ambitions and the barbaric tactics it pursues them with. Why are we putting our heads in the sand? Hezbollah, Hamas, Al-Qaeda, Iraqi insurgents, the Taliban, these are just some of the groups that Iran has funded, armed, and sponsored at various points in time, including the present day. The same Iran, led by the same people, that we so eagerly made this deal with.

What's happening is nothing but appeasement.

Don't take my word for it, this wiki article is a good starting point for more information. https://en.wikipedia.org/wiki/Iran_and_state-sponsored_terro...
Yes, clicking on the button in the browser's task bar would foil this phishing attack.
The patent thicket surrounding it is looking quite daunting, which I find mildly enraging. However, I have mixed feeling on biotechnology. Weaponized biotechnology looks to be getting disturbingly cheap; maybe these absurd government-granted monopolies will do some good in slowing this down.
Imagine that you have to create website on your laptop.

With semi-transparent editor window and with live reloading, you are able to modify website code and see instantly how website changes underneath. Without switching apps.
The title is misleading, they aren't saying new processors won't work. They're saying that they'll only support them in Windows 10.
Finally, the narrative underscores that scientific
breakthroughs are rarely eureka moments. They are typically
ensemble acts, played out over a decade or more, in which
the cast becomes part of something greater than what any
one of them could do alone.

An excellent closing paragraph. Even if the majority of the technical concepts in this paper were beyond my grasp, I did take this much away from it.
On the other hand, how long does it really take to build a new PC? Maybe an hour for research and ordering parts... another two hours at most to put it together. Seems like a small investment for something you're going to use a lot.
I'm trying to achieve currently what it seems you have already achieved. The problem is I cut everything out, but then there will be a moment at work where you're waiting for something (in my job for example, waiting for RHEL to install), and you decide to glance at Facebook. Then you do it a couple of times. Then you get home and decide as it's raining you won't go cycling. It all builds back up and I'm back to square one.

It feels like trying to kick smoking. I have a list of stuff I want to do (fix up my motorbikes, finish my 'day van', get back in to DH mountain biking) and a list of stuff I do (video games, drink, NetFlix, Reddit), and I always seep back to the latter one.

Might give it another go soon, life is short after all.
Out of curiosity, what does the vb in vb.html stand for?
As opposed to our dear friends, the Saudis?
> If frequent beatings by the police don't create sufficient community pressure, I hardly see how being cut out from some delivery services is going to tip the balance.

It depends on how much of the local population the frequent beatings affect. If it's only directly affecting a marginalized portion of the population, the rest might not notice. The point of this protest would be to reach additional people, if it increases the fraction of the population that's affected (directly or indirectly), it might just tip the balance.
What do you mean durable? If you leave an incandescent and a CFL on continuously, the CFL lasts much longer. If you take both and turn them on and off over and over repeatedly, the CFL doesn’t have the same advantage. The CFL is also much more expensive to produce, and much more difficult to dispose of.

This is a pretty reasonable list of complaints about CFL lamps. http://www.richsoil.com/CFL-fluorescent-light-bulbs.jsp

(Many of the other sites around the web complaining about CFLs are full of wacky exaggerations.)
I have the same machine. It's markedly slower than Sublime (though I used it full time until recently, as I really want it to do well. I've recently switched to various JetBrains tools)
I think you may be wrong about #3. The author argues that anyone with 2factor turned on will NOT receive email notification, and I'm not sure what you mean by geographic restriction. You can disallow Tor IPs but that is about it.
Hey Nadim, how would you like the broader applied crypto/tech community to support you?

It is really unacceptable for a company's whose core assets are your work to cause you this much distress.
So it is 1. built on top of heavy heavy Web technology 2. very much tied to the OS. The worst of both worlds...
I covered this briefly when mentioning OS and router level blocking for the entire network, as well as carrier level blocking. There are only so many scenarios and technical details I can include in a single article for techcrunch.

I do think it'll get more filtered at the network level for security reasons at certain organizations but then there's the issue of encrypted traffic and embedded sponsored content.
I love the vertigo feeling in long escalators. When I go up, I tilt my head back and stare at the ceiling somewhat above the line of sight to the top. I almost have the sensation that the tube is vertical and I could free-fall backwards at any moment.
Comments on PubPeer are very negative about the undisclosed conflict of interest of OP's author:

https://pubpeer.com/publications/D400145518C0A557E9A79F7BB20...
> As with the tearing down of the Berlin Wall, opening up countries to the world's economy and ideas is the first step towards democracy.

Saying this kind of thing in 2016 is not merely naive, but sits firmly in the territory of culpable ignorance. That was Clinton's official line when he brought China into the WTO, and the following decade and a half have proven that it is perfectly possible to have a fully globally integrated market economy without making any concessions to democracy.

Apart from that, what the fall of the Berlin Wall shows is that annexing a smaller country is the first step towards extending your system of government to it, be it democracy or otherwise.
Nothing will make me go to windows 10. I wholeheartedly disagree with the business model behind it, and the only reason I'm on windows is for games; but linux has a lot on it now, so the reasoning is going away. I paid for a windows 7 license, i'm going to ride it for as long as I can, which will be at least a few years. After that, I'll jump to linux for gaming, and by then the state of gaming on Linux will have gotten even better.
Surely you mean cancer research? It is much more likely to kill us all than old age.
The idea is because your time is more valuable. I'm not sure I agree with a Mac having a lower total cost of ownership in either cost or time, but that's the idea. Don't do work Apple pays Chinese laborers to do.
Standard deviations assume normal distributions... but ultimately when you look for some two standard deviations from the mean, you're just look for an event that only occurs 95% of the time. A technique that works regardless of distribution is percentiles. Postgesql supports these now as well.
My sincere apology for all the downvotes you have received on this comment. I have close Iranian friends who exactly share your point of view, as opposed to other overly optimistic and simplistic comments you see in this thread which applaud lifting the sanctions.

I hope these downvotes don't make you disappointed about bringing out your message. Take care and stay safe wherever you are.
>The inter-step distance on escalators is large enough to acommodate walking motion...one person per step

In theory possibly but I've never seen that. It's rare for standing passengers to be one per step. In the real world it's probably 3 per 4 steps standing, 1 per 4 steps walking. I think what we need are coordinated escalator classes taught in a similar manner to ballet, for greater utilisation.