skysight-inc/HackerNews huggingface dataset:
If someone generates the keys, same someone can decrypt. You cannot establish secure connection without someone's trusted server. By that definition same server could MITM you.
I wonder if some smart data analysis can give a score about how picky a customer is likely to be (do they often order 'obscure' vegetables, do they only order stuff that is in season, do they search for a lot of food and cooking related terms). Highly picky shoppers will get the good stuff, and those likely not to notice or complain will get the crap stuff.
I often dabble in other languages but in the end always return to python (3).

What it offers for me truly is the batteries included and easy, memorable and predictable syntax. (Probably due to experience).

Sure, Go is easier to deploy, Erlang and by extension Elixir are easier to scale.

But python does align very well with my personal though process. I don't think parallel and I don't have race conditions in my mind.
If I want to quickly write something that will perform decently, I choose python, because the time I save by not having to learn a new language could be days or perhaps even weeks.
I guess it boils down to this: with my current experience, I'm more then 10 times as productive in python as I would be in any other language.

Sure, it would be neat if I had as much experience in Erlang as I have in python, but that will take years, and at the end of the day, I'd rather finish my project this year with python, then next year with any other language.
What are the penalties associated with these 2,555 incidents? I assume it's not legal to smuggle a loaded gun onto a flight, and these numbers are staggeringly high.
Google acquires Singapore-based chat app startup Pie
Ignore Wall Street: Tableau’s Still the King of Business Intelligence
They have made attempts at social network, with plans just the way you propose.

They had a major backend overhaul called OpenSocial, that was supposed to bring social networking to Yahoo. I think the overhaul took 5 years and the way I understood, their plan was to start build outward facing social networking once OpenSocial was completed.

When it was finally done, they had been through something like 2 CEO's and nothing came of it.
Google’s Sundar Pichai Offers Some Support to Apple on Its FBI Encryption Fight
I wasn't talking about you, nor did I say all old people are bad at computers. When I said "they" I meant my family members, not the set of all people over 45. My accountant is over 45 and can use computers just fine. Why do you need to interpret things in such a black-and-white manner?
The quality of produce is not a binary thing though. When you go to the supermarket, there's the rotting produce, there's the premium produce, but then there's also the mediocre produce, which probably takes up 80% of the stock of produce.

Now, someone who cares about the quality of their bananas, or specifically wants bananas of a certain ripeness (maybe they want overripe bananas for a cake, or slightly unripe bananas for cooking), can go to a physical store and select the bananas they want. A picker at a warehouse isn't going to do that, I'm sure they'll avoid picking stock that's past it, but that doesn't mean they'll grab the best, or what you want.
I'm curious if there's a bias here though.

Do the undercover TSA agents not already know where the weaknesses are in the detection process?
If you're interested in using a js bookmarklet to bypass, search for "froomens".
The biggest hiring decision I’ve made as the founder at Vend
> I expect that future models will close this hole, and then I definitely won’t be buying TP-LINK devices in the future.

I suppose people will start rooting these devices. It's not like consumer routers have particularly impressive security track record.
There is an native U2F implementation for Android by yubico: https://github.com/Yubico/android-u2f-demo.
Also take a look at this webinar https://www.yubico.com/2015/10/u2f-webinar-from-concept-to-i....
The client data part is what you have to send to the authenticator.
Maybe undercover TSA agents are better smugglers.
I apprechiate the effort, but that article did not tell me almost anything.

This one from Linuxjournal[0] however.

[0] - http://www.linuxjournal.com/article/9001
Show HN: Postcards from space – latest Sentinel-2 data in your browser
I've gone back and forth on this, and I'm still not sure how I feel. On one hand, I do believe we should let people live how they want, as long as that doesn't negatively impact other people (simple Golden Rule type thing).

But then that's it -- out of the homeless people who genuinely prefer that lifestyle, does that negatively impact other people? And it's hard to answer that, because I think a lot of the discomfort about homeless people surrounds people defecating on the sidewalk, people asking for money, and the mentally ill yelling obscenities and freaking people out... etc.

So the the question becomes: if we could help the people who do not want to be homeless, including those who have mental health issues, and get them off the streets and into places where they can heal, what would be left? If the remainder is just people who like the homeless lifestyle, would that be ok? Would non-homeless people feel comfortable with that? I don't know the answer to that, even on a personal level.
I wanted to inform you about a new service that we have established - satellite imagery service based on Sentinel-2 data. It offers 10 meter resolution multi-spectral data on a weekly-biweekly basis (depending on the location), worldwide.

We’ve built a technology demonstration app to showcase this:

http://www.sentinel-hub.com/apps/postcards/

It gives a full resolution insight into Sentinel-2 data over standard web-browser from any place on Earth for any time satellite acquired the data, in several visualisation options. In a matter of seconds.

A short intro about the technology:

https://www.youtube.com/watch?v=jOG52oHdtbg

http://www.sentinel-hub.com/

For experts, dealing with remote sensing, another app might be of interest:

http://www.sentinel-hub.com/apps/image-finder

where you can browse full archive of Sentinel-2 data on Amazon Public Dataset.

Have fun and let us know what you think!

Best, Matej
Persistent (Stored) DOM XSS on Ebay.com Domain
Is this limited to devices sold in the US? They are going to impose it on every other place that sells them?

Afiu tp-link has no obligations to manage two devices trees for a niche community. Stubborn minority effect at play here.
[1] http://fooledbyrandomness.com/minority.pdf
Slightly disappointing there is no Android app right now. Very disappointing that there is no info on their rewards scheme. Hard to see how it is worth paying £40 for double rewards when you don't know what the rewards are in the first place!
I never thought I'd say it, but I'm loving programming the new ES2105 version of JavaScript. It really has a great deal in common with Python now. Clearly many programming languages are converging as they implement common good ideas from other programming languages. That's going to mean that whilst Python might have distinguished itself in the past for being streets ahead, in the future it's likely that many languages will also have many of those same good ideas incorporated.

I posted about it:

What language has decorators, generators, comprehensions, modules, but isn't Python?

http://fourlightyears.blogspot.com.au/2015/08/what-language-...
Most of my development experience is in Python, and Clojure's what excites me the most these days. I've had to write a lot of Javascript for work, and it turns out that there's a large community of Javascript developers who wish they were writing Clojure, and they've built libraries like tcomb, Immutable.js and transducers.js to get pretty close.

In the transpilers era, Javascript will never be so bad that choosing another dynamic language is a clear win. I'd go back to Python and Django for a CRUD app, but since Javascript is easier to write in a functional style than Python, I've actually started to prefer it as a first choice.
> A supermarket takes up a huge area, and usually in areas where land tends to be expensive

I think this is a particularly good point about their success, especially in London. In London, there aren't really many huge supermarkets (the closest one to me is about 5km away through dense built-up areas), and most people don't own cars. Hence, if you want to do a big shop, online delivery is pretty much the only way.
>Sure, Go is easier to deploy

Go's lack of a package manager making deployment more painful is the thing that made me come back to python.
Possibly - but if they know the weaknesses, then it means that they are being left unaddressed for whatever reason (malicious or otherwise)
A bit offtopic, but is it normal to have interest rates locked for the whole duration of the loan? Around here the interest rates usually follow 1, 6, or 12 month Euribor[0] with a small bank margin on top.

So yes, technically some people now could have loans with negative interest rates, but there is usually an extra clause for a minimum or 0% or 1% or somesuch.

[0] https://en.wikipedia.org/wiki/Euribor
I once carried a small penknife onto a plane just by forgetting I had it.
There's some folks called I-Novae trying to do a similar thing, but making a space-fight simulator game on top as well, called Infinity: https://www.inovaestudios.com/Technology. I'd be curious to hear a technical comparison. It looks like Outerra focuses more on the planet-side and I-Novae more on the space-side.
Going by the usual standards of TSA people I dont think that guy was Jason Bourn.
They have to. A phone number is not a key, so there's no way to avoid that.

However I've seen leaked screenshots that suggest at least the Android client is getting the ability to see what the keys are and pin them. Hence, TOFU encryption. It's about the best you can do in a consumer product.
>They have a lot to learn from the Javascript and Ruby evosystems.

Such as?

I really hope I'm not going to start needing 1,200 dependencies to build a simple app like I would in node.
According to http://sos.noaa.gov/Datasets/dataset.php?id=44
there are 29000 commercial flights per day in the US.

If the 7 guns per day corresponds to 4% found, that would mean that there are 7.0/0.04 - 7 = 168 guns per day not found.

That's abound 1/2 percent of flights (one in 172) where a gun got aboard undetected.
It may very well never happen, that's a completely possible outcome.

We'll see what it does to Python's popularity.
> Getting rid of the GIL is more noble, but seems impossible to do without breaking compatibility.
>
> Python 4 will just be the next release after Python 3.9.

Really? Why even change the major version then, when there are no breaking changes?

Given that many Python programmers seem to be traumatized by the last major version switch, why even bother?

Or is this just for setting up Python 5 can have breaking changes if the switch to 4 is painless?
Of the mongoDB projects I've been involved with, I've always wanted to do large complex joins and filters which was just didn't perform as well as relational databases, and there is no support (as far as I know) for geo-coded data.

That's why I suggest it's good for prototyping, maybe it will work for some projects long-term, but I don't think it's the norm as mongoDb would suggest.

However, most prototypes don't end up as successes, so that's where I figure it's worth the switching cost once a go-nogo decision is made.
yes, I tried my best to make it obviously satire...
Based on the fact that they claimed that the problems with America was that it wasn't capitalist enough and the fact that US-style libertarian opinions are over-represented in this forum. There wasn't enough detail in the post to be certain of anything much.

I agree that America is more oligarchy than capitalist, as does, I believe, the author of the original article, and the commenter. But I'm guessing that there's a lot of differences in the exact solutions we'd all propose, and the norwiegen model doesn't seem popular in the US or with posters on HN who seem to have a worked out political viewpoint.
It's currently limited to consumer accounts on Outlook.com and Yahoo.
As opposed to older people who can dupe young investors into giving them billions for vaporware?

OK, that's mean. WhatsApp and its success is not vaporware. And they DID charge money at the time they were sold to FB, albeit pitiful amounts from virtually nobody. But the asking price was so high and so out of whack with the financial potential of the app, that I hesitate to describe Koum as a traditional businessman. "Sell my app to a company that's terrified of anything that smells social being successful without them" is still not a business model, not even now.
These individual cases happen for every tech company.
> less optimal for your lifestyle

That's a tiny bit racist.
Apparently it's 28-29 degrees here. It really isn't.

(Weather Line is reporting 7, so the weather source for this is incredibly wrong)
The client-side code and the standard are fairly trivial to implement — thanks to Yubico as well — but the problem lies in designing and standardising an extension to the existing mail protocols, and getting that accepted as a common feature for e-mail providers (such as Google and Microsoft) and a common feature in MTAs and MDAs.
In some jurisdictions penknives are explicitly allowed, due to their blade typically being just under 60mm long.
Los Angeles hospital paid hackers $17,000 ransom in Bitcoins
On interaction architecture: punters vs. society, an illustrated guide
Ah, thats why that damned thing wont work! Thanks.
My standard interface is a finicky touchpad. Has been for ~30 years & half a dozen microwaves.
4% of all shipping containers are inspected by customs at The Port Of Rotterdam.

1% contain things that shouldn't be there (that's all they would say when telling us).

The port I was at (there are 25 I think) unload 14 million containers per year.

Those are pretty good odds for smugglers.

EDIT: they said random inspection but they would, wouldn't they
I'd really like to know this too. Been sitting on my wrt54g for far too long and starting to feel the need for speed.
From what I can see, this is a boilerplate project with a fancy command line installer. So if you don't plan on using their exact stack, remember there are hundreds of other boilerplates you could use that are no more difficult to install.
Have a look at pass [1], it's a minimalist tool in bash that is so simple you can easily make adjustments to it yourself. The codebase is very small so it is easy to audit. The principle is that your password are encrypted with your public key. You can then use git to keep running copies of your encrypted passwords on many devices.

[1] - https://www.passwordstore.org/
I know what you mean. It does feel strangely uncomfortable to the liberal mind, like having servants.
Cybersecurity is slowing down my business, say majority of chief execs
Eh yeah, just try to tell that to the chief execs at talk talk....
At it's core, Dropbox is about "syncing". But at Jumpshare, the core is "quick sharing". This makes all the difference. We're able to build our product around the quick sharing aspect, for example, our sharing happens in real-time so you don't have to wait for uploads to finish first. And we offer a slew of built-in tools (capturing screenshots, annotations, recording screencasts, etc) and features to supercharge your sharing.

You can learn more from the discussion here: https://www.producthunt.com/tech/jumpshare-for-mac
If gitlab stored its issues and wiki on a separate branch of the main git repo in some format I can still read when I decide that some other server (github, bitbucket or maybe just plain git), I would actually use those features. Right now they feel like completely unnecessary lock-in, so I’ll stick with Doxygen in-repo bugs/issues/todos and documentation.
How starting with why will help you hire good people and make sales tactics useless
Yes, if they have juvenile clothing sense. They can also wear baseball hats and other things -- after all it's a free country.
You're an awful person. /s ;)

I only upvoted because I felt smart for recognizing "au". (Not a high-school graduate.)
People are running Ubuntu on Nvidia Shield TV (Tegra X1) and tablet (Tegra K1). Nvidia has L4T (Linux for Tegra) officially, since they want to push the Tegra boards to robotics etc, where people of course want to run a full Linux.

CUDA compatible too which is nice.

I think there will be an X1 powered tablet from Nvidia this year, hopefully priced better than the Pixel C
Heroku Erroneously Overbilling by Thousands
Back in the 80's I once sat next to a guy with a set of a dozen or so Exacto knives. He passed the time on our flight making intricate wood carvings.
My point was just that the FBI didn't ask Apple to "build a tool for the FBI that will allow them to look at any user's data". They asked Apple to prevent some security mechanisms of that particular device from working. Whether Apple builds a tool or uses manual labour with existing tools to do so is irrelevant for the FBI.
I personally find python in general to align almost perfectly with the way I think about writing software. It's interpreted so I can do things like compiling dynamic python in my code or fall into a python shell for debugging. Majority of time, I can use the standard library to do everything I need. And I love the clean syntax of Python — always a pleasure to look at.

As for Py3, the standard libs are very clean and streamlined, (e.g. io). Oddly enough, the point that I love about Py3 is its handling of unicode vs bytes (which most people find it difficult for some reason).

I'm not sure what you mean by "can't target the browser"? I don't find distributing/deploying python to be difficult or even involved at all. I do get annoyed at the single CPU bound limitation.

If I had to summarize why I'd pick Py3 for new projects, I'd say because it thrives in being minimalist and I hate clutter.
Samsung vi ricorda che Gear 360 sarà presentata domenica
Do you think it is more a mindset of certain individuals as opposed to the environment they work in?
EU-Startups report analyses 85 European tech startup accelerators
Just getting ready for bed (in Melbourne) and caught an email re: my Heroku account (which houses 5 or 6 toy projects) being charged.

Logged in to find current charges ~$3700. Terrifying...
Only if you mean, "they sometimes use the american term".

Because otherwise the polish term is "komputer przenośny" (portable, movable, etc computer).
You think it is a personality issue then? Some people can just handle pressure better than others?

Thanks for the insight btw :)
Bear in mind that giving the password over the phone has a different threat model to sending the password over a TLS-secured connection from your browser to a bank-run web server. Specifically there is a human in the call centre who is transcribing what you say. Using a partial password (give me letters X, Y and Z) is a way of mitigating the risk of call centre staff being able to harvest meaningful amounts of security credentials. This does mean that you need to be able to check subsets of the characters in the password, which rules out hashing the whole password in this case.
I would recommend to even use pyenv (https://github.com/yyuu/pyenv) that will allow you to install any Python version in your home directory (i.e. not fucking up your system installation).

If you maintain many FOSS libs like I do, together with tox it's priceless.
2to3 (comes bundled with Python) will do some of the work for you.
Oh, wait, Java 7 is no longer the one you need, you've got to use Java 8 because nobody uses 7 now. BAM, not so easy any more.
Uber is burning through $1B a year in China
Sorry, poor contextual phrasing.

I have an original Leap. When I tested it with the new software they've just released, it still worked fine. The new software doesn't require new Leap hardware, and will work with the original hardware.

As for what I used it for when I got it - I bought it for motion capture. It wasn't good enough. The new "Orion" software, on the other hand, might be.
I agree with your points about the salary and levels of competition. One shouldn't expect any odd company to slap a >150k offer on the table and getting an offer is challenging enough. That's why both sides benefit from a recruitment layer between them to help candidates find out about the opportunity and understand the company to go to interviews prepared.

However, your point about the lack of openness seems directed at prop trading shops more than banks or hedge funds.

Banks are large corporations and are expectedly monolithic, but they are seeing benefits to opening up and hosting hackathons. Using/contributing to open source is difficult there because of inflated compliance departments, who need to justify their existence by banning the use of open source and signing up on enterprise solutions.

Prop trading is definitely the most secretive, because the people are trading their own money and aren't huge fans of letting anyone close to the secret sauce. Because it's their bread and butter, you would probably be less keen to make your methods public if your money was on the line in a really cut-throat environment. It's comparable to google not open sourcing their ranking/search engine - we don't complain about that, do we?

Hedge funds are by far the most open both internally and externally. Several of the big funds I know, sponsor academic events, research, organise hackathons internally and externally. A NY HF recently ran an internal build your air hockey AI to play against human air hockey pros. Devs were working on the software and someone connected airhockey controllers to leves and pulleys. The AI won. the business model at HFs promotes collaboration and the engineers are the most chilled out bunch you ever meet, so most people end up liking the environment.
I was under the impression that the community as a whole had agreed to switch to that term as well. :( Given your name I reckon you feel strongly about this, too.
Yes, significantly.

I was in the same boat. The new tracking's much better.

Doesn't seem to improve all of the old apps, mind. I tried their 3D modelling app with the new Orion software and it wasn't much cop. But for VR it works well.
I thought the FCC walked back on this?
ATM it takes work to create a deployable artifact.

We package virtualenvs using fpm, others use Docker. But Go just spits out a single binary you can scp anywhere (the build process OTOH is more painful IMHO).

That’s why I’m highly curious about https://us.pycon.org/2016/schedule/presentation/2122/ .
Pick Python for the sheer amount of libraries that's available. Not just for web stuff, where Node.js and Ruby do fine, but also for scientific work, for statistics, for embedded work (Raspberry Pi or MicroPython), for systems administration, for command-line tools, for really just about anything you can imagine. And you can do all of those things while not having to switch contexts between different syntaxes and different standard libraries for basic things like regular expressions or HTTP requests.

Picking the best tool for the job often gets in the way of actually getting things done. Python is the true swiss army knife of today's programming languages.
JQuery easypin
The TSA will refer you to the local police. What happens next depends on the local laws. In some states you will be arrested (e.g., Massachusetts, where a law prohibits most people from carrying guns into three of the state's airports). In other states, forgetting to take a gun out of your bag is no different from forgetting to take a water bottle out, and you will be allowed to return the gun to your car before going through security again and boarding your flight (e.g., Georgia, which passed the Safe Carry Protection Act in 2014).
Great comment - thanks for sharing. I think I agree - it's not just about the environment you work in (although I think certain environments bring it out more), it's a certain type of personality/mindset maybe.