skysight-inc/HackerNews huggingface dataset:
The EFF score card is an embarrassment which is essentially equivalent to one of those "comparison table of our competitors" on a SaaS website. That's a good analogy for it, because it uses the same questionable metrics and even more questionable ranking system that one of those tables would use. The score card gives Signal the same ranking as Cryptocat - that's an instant negative result for its usefulness.
This stuff used to happen a lot back in the first dot com bubble. The poster child at the time was Henry Blodget:

... Merrill Lynch e-mails in which Blodget gave
assessments about stocks which allegedly conflicted
with what was publicly published

Blodget agreed to a fine and a lifetime ban from the securities industry.[1]

But don't feel too sorry for Blodget. He later founded Silicon Alley Insider, which became Business Insider, which was eventually sold for over $343 million. Henry probably made out OK on that.[2]

[1] https://en.wikipedia.org/wiki/Henry_Blodget#Fraud_allegation...
[2] https://en.wikipedia.org/wiki/Business_Insider#Acquisition
I recently read about the cost of building a hotel. I could barely believe what I was reading. A 2,000 sq ft house with all the amenities that go with it can be built for around $250,000. But a 500 sq ft hotel room costs over a $1,000,000. It doesn't make a lot of sense. How can there be an inverse economy of scale?
I mean that there is no password between desktop client and the open source cloud engine – anyone can log in to it just like that.

The tokens to auth are world-readable under /accounts or /n
Use a password manager of some kind. Lastpass is nice, and has an enterprise component that lets you share passwords with co-workers or teams.
8 địa điểm tuyệt vời để tìm kiếm một ý tưởng kinh doanh
Re: Ideals in crypto: Apple has a long history of collaborating
There was a thread from a week ago discussing a React IDE, that seems to have gotten more traction (though not exactly what you were looking for:

https://news.ycombinator.com/item?id=11074653
Set Custom Rotation Angle for Text-Frame and Enhanced Presentation Export to PDF
I feel for you. You went through things, and survived, AND bettered yourself, where many others gave up or simply died themselves.

However i'd like to point out that such articles come about, even if it's not expressed directly, less because the homeless are victims. It is because an entire people, homeless as well as citizens are the victims here. The following is harsh, but there is no other way to put it without compromising the reality: The victims here are the homeless people for being abandoned by their government, as well as the average citizen for being abandoned along with the homeless. There is no reason that homeless people should have to fend for their live on the street, with little to no hope of reintegration; nor that average citizens should have to live in a city where their safety is endangered because homeless people do not receive adequate reintegration efforts.

There are known and proven ways to handle this problem, while simultaneously improving the lives of every single citizen, homeless and not homeless. Look to Europe.

And until the american governments can agree to implement these, homeless will have no choice but to do and take what they can get, average citizen will need to be very aware of their safety, and news outlets will write confused articles like this.
That reminds me of this amazing talk called Why Greatness Cannot be Planned:

https://www.youtube.com/watch?v=dXQPL9GooyI

TLDV: Innovation is not driven by narrowly focused heroic effort. We'd be wiser and the outcomes would be better if instead we whole-heartedly embraced serendipitous discovery and playful creativity. We can potentially achieve more by following a non-objective yet still principled path, after throwing off the shackles of objectives, metrics, and mandated outcomes.

This also matches my experience 100%. All my best discoveries are accidental.
http://www.sfgate.com/bayarea/matier-ross/article/S-F-spendi...

SF is 'trying' and isn't succeeding. Stop spending my unaccounted for tax dollars on this if it isn't going to solve the issue and is just going to make SF a mafia wife enabling the homeless.
By allowing people to set their own questions and answers instead of a) using a pre-defined list of questions b) forming questions from information about the customer that friends/acquaintances usually know or information that can be found via a Google search.
The Slow Death of Redbox: Why the Kiosk Colossus Is the Next Blockbuster
"During peak, we have about 500,000 concurrent websocket connections open. That’s a lot of browsers. Fun fact: some of those browsers have been open for over 18 months. We’re not sure why. Someone should go check if those developers are still alive."

It's impressive that SO held the connection open for 18 months! That's some seriously good uptime for a process that manages a TCP connection.
Yes, there is. Firmware updates must be digitally signed using Apple's private key. That means no one except Apple can edit out the device check, or indeed modify the firmware in any way.
I am curious if the demo app was built using some pre-existing libraries/frameworks or even UI widgets. Because, based on the info available on the demo site, even if the author knew exactly what he was going to develop and the tech behind it, the sheer amount of coding required to build such an app from scratch would take way more than 3 days.
Gonna have to agree with you. If I remember correctly the overhead is similar between Django and Flask. I love how quickly I can write a hello world app but I find that if I am building any kind of application that requires auth, db interaction, crud like actions, it ends up being easier in the long run to just run with Django.

It may be because I do not use flask enough either. I spent a little over a year working on a production flask app with a small team and I still feel no where closer in solidifying best practices and design patterns with flask.
Interest is not sufficient.

People who have natural abilities chronically underestimate their effects. Some, regardless of interests, will always struggle more with certain physical or mental tasks.

Interest is important, but ignoring ability is not the right way to interview.
3) SF has spent more than 30k per homeless person per year in the city to do 'something' about it. It's typically unaccounted for money and an area ripe/putrid for corruption.
Not a Slippery Slope, but a Jump Off the Cliff
> Can a candidate lacking the technical skills go deep into details the way the parent commenter describes?

I withdraw this somewhat rhetorical question. I should never have asked it because it's not the point (and it invites answers out of the original context that overlook "the way the parent commenter describes").

Here we have two ways of evaluating technical candidates, just two of perhaps many: One seems to be more arbitrary and unreliable than many have assumed, and the other is very time-consuming, doesn't reduce to graphable data and requires a really good interviewer.

Please just recognize that having candidates jump through technical hoops is not as solid and objective a method of evaluation as it might seem to you, and could even filter out certain kinds of great candidates. Where at all possible, please try to treat the human being under evaluation more like a human being and less like a horse.
Brendan Gregg has a nice video on how Solaris 10's iowait works. It starts a little slow and may even sound imprecise or inaccurate, but it gets better around 6 minutes in.

http://dtrace.org/blogs/brendan/2011/06/24/load-average-vide...
What do you do when a dependency has a security problem? Or some other bug?
Not true. To say something has a "back door" is to imply security was deliberately compromised by the manufacturer, whereas a vulnerability is a security weakness in the the architecture or implementation.

This is not a "back door". It's just not.
Show HN: Teen Patti game simulation using clojure
> Flask/Python blows Node out of the water where performance is concerned. That shouldn't be a surprise to anyone.

I'm a huge fan of Flask and Python in general, and despise server-side Javascript (or Javascript anything, really). But I'm curious how you can make this claim. CPython lacks JIT, and gunicorn + Flask is going to run a process pool by default, with each process being single threaded and under GIL.

What's your set up then? PyPy and gevent gunicorn workers? Otherwise I don't see how CPython+Flask+gunicorn could beat Node performance wise out of the box. At best PyPy + gevent would approximate NodeJS performance, unless you can tell me otherwise.
Pin-protected USB 2FA token with self-destruct and plausible deniability
So what does a product manager do?
Unfortunately, the NSA/FBI likely have far more money than Apple, and if Apple spends too much, their shareholders can demand that leadership backs down.

Tim Cook is responsible to his BoD and shareholders.
Well said. I'd add that being able to see all sides of the equation allows us to consider the problem in a deeper way and form meaningful solutions that can help everyone - the homeless, desperate and drug dependent as well as the people merely seeking a safer environment for themselves and their loved ones. Being outraged by someones reaction robs us of energy that would be better spent considering the underlying problem.

Contemplate those who abuse their children, spouses or others were often abused themselves. It's natural to want those elements removed from society and I wouldn't blame anyone for thinking that way, however the nuanced view is to consider the problem like a virus spreading. How do you contain it, how do you prevent it, how do you treat it, what is innate in people that makes them susceptible to spreading this social calamity? You can ask the big questions, or dig a big pit and throw the problem in there - hoping it won't come back to haunt you.

With that said: where the life or well-being of a single person isn't worth much, in subtle ways everybody suffers. You aren't truly rich if you're dodging the hungry and homeless in your luxury car, or walled up from the desperate and deranged.
While he sounds reasonable, his assertions of superiority
are tone-deaf and quite irritating.

Sure he's been exposed to some obscene behavior and perhaps mentally unstable homeless people, but I don't think he has considered that there is undoubtedly thousands of otherwise normal people in very unfortunate circumstances that don't deserve to be lumped with "those people".
"opinionated" is just shorthand for "the language authors held strong opinions when designing". There's no anthropomorphism so hopefully that takes away the confusion.
> Signal the same ranking as Cryptocat

You are probably right that getting a high score on the scorecard doesn't guarantee a secure program. (The standard of the socrecard is not high.)

But can't you still argue that getting a low score on the scorecard would probably mean it's not a secure app?
EURJPY: Remains Weak and Vulnerable
The important thing is to voice your disapproval. I'm confident that my wording could be improved, but it's important that Obama quantify the sheer number of US citizens that disagree with this despicable act.
The salt could be created from the username (possibly with a standardize form step for case insensitively and maybe also including a site salt).

On mobile devices client side hashing could affect battery life. If done with javascript, then login won't work without javascript enabled. Also, a work factor that doesn't slow down the slowest devices that a user might use could provide much less protection than desired, although the server could also do some work.
Knocking and asking someone to open the door for you to let you in their house is different from asking someone for the key to their house.
It's not necessarily the most profitable thing. Apple is picking a fight with a very big adversary. This takes some serious backbone.
Most trades develop a vernacular particular to the trade...this makes it easy for those in the trade to distinguish between knowledgeable tradesmen and those who are new...

It's a rite of passage...

Go work a construction site...a hospital...a day care center...if you're new you'll either pick up on the "code" or be somewhat of an outsider until you do...

It's the price of true admission...
It's the difference between unlocking a safe to help execute a warrant (typically legally required) and making a key that unlocks all safes.
Can you cite your source?
An infected machine would more likely steal the password, then still run the scrypt. Why make it easier for someone else to steal it too?
I'd also like to add this message to the tech industry, startups and entrepreneurs:

If people had more of their paychecks available to spend as they wish rather than on housing, just imagine how much more they would spend on the services and products you make than they currently do.

A switch to an economy where consumers are in the driver seat rather than one that is a pyramid scheme for wealthy real estate investors would boost the country's economic strength and growth potential immensely in all aspects.
Do you have a suggestion for a replacement for "monad"? It's always been such an opaque term to me, even as I began to get a grasp of it.
“Street Style” at New York Fashion Week – The Emporialist
Risk Management Necessity in Vietnam?
He didn't earn the right to live there. You earn a salary, you earn a degree, you live in SF by choice. No one is entitled to live there.

He also earned being called a nitwit.
They likely thought you used knowledge of their internal system for blackhat purposes, which is kind of what you did. Interesting analysis and dci nonetheless.
When you say there's enough liquidity, do you mean there's enough for the price not to move at all, or enough that there isn't a temporary overreaction in the price?
OK Go are also doing a reddit AMA!

https://www.reddit.com/r/IAmA/comments/46asrt/we_are_ok_go_w...
Fixed Mindset V/s Growth Mindset
Operation SOPHIA: EU military intervention against “refugee boats”
What if there's a bill like, say, Comcast, and your user only wanted to cancel one service (TV) and not another (Internet)?
Well the question would be, who gets to dictate the size/scope of the project and the rate charged to the government? Is any person outside of Apple really qualified to make that claim? It's not open source code, so Apple could make any claim they wanted. Also, who says they would have to put their 'A' players on this? Why not back-burner that with specially hired 'E', and 'F' level developers? Charging $700-$1000/hour might seem high, but on a custom development project may not be too far out of line.

At the end of the day, there really is no way the government will succeed here, you really can't force Apple's developers to do this, as they could just tell the government to go pound sand. The only way they could get it done is through threat of violence/incarceration or by gigantic sums of money. The government can't really argue that Apple with its billions in profits, that their developers' time isn't worth a few billion.
Google Launches Fresh-Grocery Deliveries
Yes, otherwise you can get messages from noisy libraries bubbling up to the user that may not be relevant in the app context. If the logging is just going to a file to look at later it matters less, still sometimes it is nice to shut them up.
It's actually a mix of GPS and atomic clocks for diversity. See the Spanner paper section on TrueTime for details
Yes, of course. I moved from a single bedroom unit in a building with dozens of apartments to a house with three bedrooms and two bathrooms, a yard, an attic, better appliances, better carpet, and a much better kitchen.

That's sort of normal, I think. You get a better standard of living for that extra money.

My point was, originally, that if you're in an apartment you'll most likely be able to save for a downpayment on the sort of house on which you'll be able to afford the monthly payment. If you can't, either you're not the kind of person who saves money or there's something wrong with your math.
I'm pretty sure it's the same rule that outlaws insider trading. If the analysts and investment bankers talked to each other they could potentially cook up some crazy schemes:
"Hey Joe, I just invested someone's money in company X. Can you upgrade them to a BUY rating?"
"Sure thing Bill, what's my cut?" "10% of the increase?" "Sure, sounds fair."
Or another scheme:
"Hey Joe, GM is a big client and is starting to get a little worried about TESLA. Can you downgrade them?"
"Sure thing Bill, let's put Elon in his place and keep our big clients happy."
The WireCutter argues that the Kia Soul is currently the best EV
> but password hashes have (2) as their whole objective,

Only until that was what people cared about. How long, and how many still, use single-round md5 and sha for password storage?

SRP is an old algorithm -- it could be strengthened significantly with little love. (Similar as to how took a little care from the community for bcrypt, pbkdf2, &c have become the "norm" over md5.)

> SRP isn't buying you anything

SRP is buying you the ability for the server to never have the password, a secret value you're handing someone else!

> SRP is a bad call for virtually all projects. Or, maybe a better way to say that is, "if you have to ask, don't use SRP."

I still feel like you're throwing the baby out with the bathwater. Just because something can be updated and hasn't (like using a weak hash like md5), doesn't mean the core concept is bad (using a 1-way hash function).
>For better or worse, CS departments across the US produce Java programmers more than anything else.

Do you think this large pool of programmers are good?

>This makes it very easy to hire Java developers.

Yes, if you are looking for sub-par developers. I don't think Google thinks to itself "oh man we're so glad we use java, otherwise hiring would be challenging". No, they have just as much difficultly hiring as anyone else. I'd even say that considering it's the 'blub' language to use PG speak, it makes hiring harder for them.

>Java has stability, Java has concurrency, Java has hot reloading, Java has a good track record, Java scales,

No, those are things the JVM has.

>Java has really nice functional programming support,

You can't honestly believe this. How much functional programming experience do you have?
A Go Grandmaster Will Battle Google's AI for $1M
Young women with high emotional intelligence more likely to be manipulative?
And I'm pretty sure if he had known that line would be incessantly quoted as a slur of Groovy every single time it gets mentioned on Hacker News, he would probably have never said it!
I've added the year to the title, but the content is far from stale.

I'd never heard of Attic before, and just like the author my reaction was "how did it take so long to find this?!" It's easy to use, simple yet configurable, featureful, and has the slickest way to restore snapshots I've seen. And the blogpost linked gives a much better overview of that awesomeness than the Attic site directly ( https://attic-backup.org/ )
Important to remember: All iPhones since the 3GS have oleophobic surface coating (which combined with cloth pockets means the screen stays relatively clean). Also important to remember, fingerprints on a random surface are VERY hard to copy onto latex milk or PCB substrate.

Please continue to think
I'm not sure but I'm assuming this has more to do with Postgres' WAL than it does filtering logs. I've never used this side of Postgres though, so just a guess.
This. Flask can technically run in an async event loop (see:
http://docs.gunicorn.org/en/stable/settings.html). But gevent is a massive monkey-patch on top of Python standard libs to make them async friendly.

If you're hitting enough load where async really matters, just skip Python altogether. And please, please, don't use Node. Just use Golang or Scala for true multithreading, and you'll save yourself the headaches Javascript will bring for something that's not truly parallelized.
Though they do usually pay less since they usually live in less property.
No, it isn't. It's storing verifiers with the same power for attackers as scrypt, except that scrypt's verifiers are harder to crack.
As someone who has worked in this industry and seen a lot of these ideas fail first hand - another big challenge is going to be ground entry points. For GEO satellites, each satellite serves many customers and may only need maybe 2-3 (for redundancy) groundstations.

For LEO constellations, each satellite can only see a small portion of customers at any time and will quickly move out of coverage of a single point on the earth, requiring many groundstations.

Alternatively, the satellites can crosslink and eventually hit a groundstation, but these handoffs and trip lengths quickly get back to the ping latencies of making a single trip to GEO.
I was commenting on doing such automatically. (Hard to implement.)

Doing it manually would be great, but then you run into Chrome's obsession with remaining simple and "slim", regardless of whether this happens to the detriment of users.
There is, and this parasite will be one of the first ones up against the wall.

Probably not, because the rednecks are the ones with the guns. And they won't be doing your dirty work for you on this issue.
> (3) Using a plain text editor, which for a typesafe language is a bit daft.

What's wrong with using Vim, Emacs, or Sublime? There are plugins out there which get you a lot of the IDE magic (including jump to definition, autocomplete, autofmt, and there probably is something for inline errors)
You can still have the question. But my answer is a random 32 character string of alphanumerics :)
The ratio of median wage to median rent peaked in 1958 at 22% (or rather, 4.54). That was also the peak of the Baby Boom. Which makes sense, really, because the ratio of wage to rent is one of the fundamental determinants of male sexuality, especially back then, when it was less common for women to work. It was much easier for an 18 year old to afford their own apartment and start their own family.

People often point out that the median male wage in the USA has been declining since 1973, but what is rarely pointed out is that for men under the age of 25, its been falling since 1958. The loss of high paying low skill jobs means the only high paying jobs are high skill jobs. That has forced two adjustments on us: one, people start their adult lives later than they used to, and two, some people never get there, as they never acquire the skills to get there.
Yep, it doesn't stop though. And it doesn't handle things differently for different use patterns. Since that would be hard to implement automatically.
They said the same of a certain junior senator from Illinois. Why do people think Sanders can't win when all evidence points to the contrary.

Sanders is sticking to the core liberals. That solid 25-35% that will actually vote. Hillary is trying to pursue centre, swing voters and losing the liberal core. Trump is doing the same on the right.

Hillary and Jeb assumed they had the left and right core voters, respectively, locked up and both have been proven completely wrong.
A Go Grandmaster Will Battle Google's AI in a $1M Prizefight
I have to wonder - did you try the Flask Blueprint facility? Furthermore you don't have to use the decorator approach to define the endpoints, there is a class based initialization (add_url_rule) to which you can just pass a View class. These are AFAIK the main two ways to modularize Flask code.
Ah, yes, HN -- the font of all life experience.