skysight-inc/HackerNews huggingface dataset:
Could someone explain how FIDO 2.0 fits in with U2F and UAF? I'm having a bit of trouble understanding how the pieces go together. Does FIDO 2.0 make the existing U2F and UAF specs obsolete? Is there any documentation explaining this (maybe I've missed it?). Thanks.
MERN scaffolded apps depend on Mongoose. I wrote a plugin that maybe could fix that, its called mongoose-sanitizer: https://www.npmjs.com/package/mongoose-sanitizer
The end of Singapore Inc
because mongo queries are in JSON style, plays well with Javascript
Completely agree, I tried in the past but it felt too invasive. Maybe a few tamplates which include nav/footer layouts would be nice
Pipe Logic
Russian Central Bank shutting down banks that staged attacks to rip off clients
Driving around Africa should be considered carefully and researched even more carefully. There are very real dangers and complete no-go areas.

Good luck out there!
The article seems critical of all US politicians, but specifically calls out both Bill and Hillary Clinton.

Since the author desires something to the "left" of Sanders, I doubt it's a subtle attempt to boost Hillary, though of course the author is closer to Democrats than Republicans.
> Mind you, we are talking about people older than 45. They have trouble using computers (even phones!) as-is, even before we get to the security part.

As a 43-year-old sysadmin, thanks for warning me. I better find alternate employment in the next two years.
An isomorphic app is basically a Single Page Application (think Angular / React / Ember application) with the special ability to be rendered server side. The interest vs a simple SPA is that on the first page load, instead of loading just javascript, and having to wait for XHR request and JavaScript rendering to draw the data, you get the page properly rendered in the first place. But when you navigate to go to a different page, you use javascript to repopulate the data. It's the best of both world for the users. But for the developers it usually means extra work.
You mean "ZipPy": https://bitbucket.org/ssllab/zippy.
Singapore-Based Cloud Communication Startup Wavecell Scores $1.6M Series A
About 5 months ago my mother sold a house that was built by my Grandmother in the 50's. That had been my home for 12 years or so and I'd been going to for as long as I'd been alive. I love that house, the garden, the sense of belonging. But it was expensive to run and mum could not afford to keep it (and I am not successful enough to make that go away alas).

That place was home in a deep and meaningful sense. Do you know what I realised when I drove home on a weekend to a new house with no history, no lore, no memories? Home is where mum is.

Of course I also have a home in London which is rented and changes all the time and that, too, is home. I don't need to own a place for it to be home. I don't have to be there or have been there for years. I just have to go home and feel good about the space which is mine and filled with my people (and my things).

I guess I just disagree with the premise that there is a need for what you describe. It's something people are taught they need in some cultures.
It's one of those instances where developers went looking for a word that perfectly articulates what it's doing, but is so esoteric as to be useless.

> being of identical or similar form, shape, or structure

I call it fronty-backy-samey-samey and everyone knows what I'm talking about.
I find it always disappointing that most 'Best VPN..' articles aren't really objectively written. Hence the affiliate links on each item (which is fine by itself).

Furthermore 'Best' can be defined differently by an individual. E.g. 'Mullvad' for me is the best match. But not mentioned in the above article.

So besides some background information, I'd love to see a review which goes in-depth in stuff like (relative) anonymity, legal jurisdictions etc.

By summing up facts in those categories someone could make a better choice (and hell if you want to earn some affiliate cash, fine).
Don't forget biology: "How is babby formed?"
Never let a good crisis go to waste.

The coordination is astounding. Crypto is being assaulted on all fronts by establishment brass. Makes one wonder who's setting the agenda?
It's not that you don't have migrations, it's that you move that logic to your application code. I personally find that to be a terrible trade-off. People make the same arguments in favor of mutable data structures: you benefit initially from having everything mutable, but then you start writing code to compensate for the flexible nature of it and suddenly you have a whole new set of issues.
Go feels similar to where Microsoft eventually wants to be with .NET Core and their native compilation.

Other than that competitor, I don't think Go has too many others in the same niche. Maybe D? I love the combo of native code + high level language + single binary in a language that also tackles parallelism.

It's as if the Go language designers took a good hard look at Python and went "This is what's wrong with it", taking its greatest weaknesses like dependencies/packaging and the GIL, turning these around 180 degrees, instead becoming main advantages of their new language. Of course, it's not an interpreted language so the comparison isn't perfect, but Go ticks a lot of boxes for me as well that Python perhaps never will due to design.
I think a good metric is directly related to the amount of progress a single thread with default priority makes on the CPU per unit time.
I don't think isomorphic means what you think it means.
The article was perhaps too subtle on this point, but I believe she was arguing that Norway is more "capitalist" than the US, so she agrees with you to some extent.

But, if you're an American, commenting on HN in this way then you're probably a male libertarian, and would consider state run education paid for with progressive taxes as un-capitalist, and there she'd disagree.

It's notable that Peter Thiel lamented that women got the right to vote, as they don't vote libertarian as much as men. A perfect opportunity for self-reflection which I feel was squandered.
It's nice with zero configuration. Especially the no password by default thing. Why bother with limiting your database with host access and passwords ;)
I had the same reaction as you - until I realised it was sarcasm.

Bravo, parent, bravo.
Attaching "lifestyle" as you have used it imply that it is a choice for Aspergers. For many, this is simply not the case. As a dad with two Asperger sons, somedays I wished that it was a choice and can be consciously switched off.

Sorry for the vent.
Cancer cons, phoney accidents and fake deaths: meet the internet hoax buster
Well, if they aren't being asked to build a tool, then there's nothing for them to help the FBI with because the device functions as designed.

It is precisely the design of the device that the FBI wants Apple to alter using some sort of tool that Apple will make for them.
How to scale software businesses: what are the critical components?
When they mention device - do the mean phone? Will there be other devices that aren't so expensive?
VS is much faster than the JetBrains IDE without any plug ins. Adding JetBrains' products makes it slow.
Nothing probits using UAF/U2F for other stuff outside web browsers. The problem is that the concept of "AppId" is not clearly defined in non Web Application but that should not stop people form doing it. Yubico has Open Source code that makes it relativly easy.
Except people have bad tendency to not throw out prototypes and are unwilling to do the work to deal with bad decisions from the prototype time...
Тop 10 Handymen in New York, NY
Visualizations: Raft: Understandable Distributed Consensus
It's not really esoteric... it just kind of has the wrong connotations, because it's used rigorously in mathematics, and here it just means "portable between different JavaScript runtimes," pretty much.

To me the word makes me imagine a web application that can parse its own rendered HTML and get back the application state. Which sounds kind of interesting...
The main thing is that getting 4 masterpieces is extremely likely if you produce 10,000 works, and next to impossible if you produce only 4.
FWIW 'isomorphic javascript' was pretty much supplanted by 'universal javascript' last year per this medium post [1]. You might consider changing the copy.

Edit: At the very least Dan Abramov (Redux creator) is ok with universal [2]

[1] https://medium.com/@mjackson/universal-javascript-4761051b7a...

[2] https://github.com/gaearon/react-redux-universal-hot-example
This looks great, I want one.
I wouldn't hold my breath on this one.

https://medium.com/insurge-intelligence/how-the-cia-made-goo...
Been thinking about learning to code, and a lot of people have recommended Python as a good language to begin with. Taking a look at this, should I be looking elsewhere?
The underlying debate isn't technological, its social and requires a more abstract paradigm of thinking - beyond "with us or against us mentality". Everyone involved has been and will be negotiating boundaries that fits with their own moral focus.

> Anyone that stands up to the police-state-mentality is honorable.

Theres a difference between a police state and a police state mentality. The latter is a subjective and abstract point of view, not so easy to stand up against.
Please don't "sanitize" input, just escape accordingly.

"<script>" might be a legitimate input.
I use environment variables so the configuration is basically setting up the host/username/pw in the Heroku interface. But ok, almost no configuration then...
CHFI and DIGITAL FORENSICS TUTORIAL [PART 1] – BASICS and FTK IMAGER LAB
I've heard complaints about Scala and binary compatibility often breaking, and it remains to be seen if Kotlin will even be successful enough to catch on.
Honestly, I only use gmail because I have to - I find outlook a far better interface.
So this is a repo that is being cloned on your computer [1]. I have a couple of questions :

1. Why not just creating yeoman generator?

2. Don't you think it is too opinionated and inflexible to be useful?

1: https://github.com/Hashnode/mern-cli/blob/master/lib/main.js
Docker Cloud
Compile common lisp using bazel
He should only eat GPL'ed popcorns.
Python 3 is worth it not for asyncio and unicode (though these are very good reasons if you care about them). It's worth it due to 21st century exception handling, which breaks down in Python 2 in a spectacular fashion the moment you raise in your except: clauses.
Universities Need to Use Analytics Better
FlatMappable :-)
How To: Monetize the IoT
But isomorphic sounds cooler...
Python is an excellent language to begin with, you're reading this article wrong if it puts you off Python. There is drama around Python 2 or Python 3, but the answer is clear. Use Python 3 for new projects, use Python 2 when you have to (legacy projects).
Isomorphic means hybrid client/server view rendering.

SPAs are (relatively) slow to load. To improve perceived performance, the view requested is prerendered on the server with the ability to capture user input. The user sees a fully functioning site while the app bootstraps in the background.

Once the app is finished bootstrapping, the user inputs are replayed on the actual app.

This fixes the problem of poor perceived initial load times that come with SPAs. Once the app is bootstrapped everything is fast/snappy as one would expect with a SPA, incl no page refreshing between URIs.

Isomorphic React is already supported. Isomorphic Angular2 (ie Angular Universal) is in the works. I don't know about Ember but I'd assume they already support it.
Free Ethical Hacking Course (Training Videos)
The worry in this case is the troubling precedent it would set.
They probably mean American women.
Well the idea is that you use the fingerprint sensor on your phone to login while browsing with your phone. You can have a fingerprint sensor on your laptop. Alternativly these could also be cheap external devices that you connect over USB, NFC or Bluetooth LE (their are already standards for this).

They would really like if all devices had some kind of UAF sensor built in.

You can get U2F devices for about 15$.
This is a pretty lame response. Could be a troubling precedent? Really?

Tweeting it also seems to massively trivialise it.
Canonical should have made it clear that when the E4.5 was available last year, it was intended to early adopters / dev / enthusiasts only. But my guess is that it was probably awkward to present it that way to BQ.

Anyway, being a long time Linux enthusiast and running Ubuntu as my main OS for many years, I bought the E4.5 to support the project and was not expecting an experience which would match Android.

Having said that, it has improved so much and I would venture to say that as of 2016, it is starting to be ready for general public.

It is my main phone, and everything pretty much works, the UX is great. The main annoyance is that it is a bit slow: starting an app takes a few seconds. But might be due to the not too potent hardware of a E4.5.

Ubuntu phone seems the only alternative we have to the smartphone OS duopoly and to feel and be in control of the device in our pocket. That is priceless to me.
> I don't understand why 7ms is considered a good bound for atomic clocks?

It isn't, GPS + ptp can give slaves on the same lan +/- 700ns very cheaply
Good luck with that searching, and remember to share with HN.

I find ElasticSearch somewhat brittle (I need to restart it every few weeks or
so, because it stops accepting any data or queries), and I really do want to
replace it, since it's a memory hog (no data, and it already needs 230MB RAM),
but I haven't found any sensible log storage yet. All I got is this document
searching engine.
Theory versus Data? You Shouldn't Have to Choose
7ms is even achievable with a well done local NTP setup
The Beginner's Guide – Scraping in Ruby Cheat Sheet
Many people still don't agree, neither do I. There's no doubt that the term "universal" is more correct, however, languages don't work that way. In the JS land isomorphic has a very specific meaning. Universal is a flexible word. "A universal api for observables" means something (works across libraries), "An isomorphic api for observables" means something else (works across environments) .
I have been following this for a while and I don't get it completly.

UAF/U2F are FIDO1.0 standards. As I understand the idea is that FIDO2.0 standards build on these basic blocks and add additional features. I think the problem of revoking a device accross all services is something they want to work on in 2.0.

Im also confused, but I think the UAF/U2F standards should not get depreciated with FIDO2.0.

If somebody knows more, Im all ears.
Celebs at Winter 2016 NY Fashion Week
Ah yeah the small nice things. `raise from`, `__traceback__` on all raised exceptions (instead of dicking with `sys.exc_info`), `nonlocal`, `super` …
It runs on OpenGL 3.3 so at least Linux and Mac should clearly be possible with some work.
While flask is a nice framework, it has some problems. I worked with numerous python web frameworks, mainly webapp2 and flask. So some things i don"t like about flask:

Disclaimer: You can architect beautiful apps in apps, its just easy todo it wrong.

GLOBALS:
Flask has a lot of globals (from flask import g, request, current_user, etc.)
A better web handler function looks like this handle(request) -> response. Any other web framework that I know does it like this. Much better. Flask promotes touching the 'request' object everywhere. Example: https://github.com/lepture/flask-wtf/blob/master/flask_wtf/f.... Flask is not functional, its inherently statefull with globals.

MIDDLEWARE:
Flask promotes writing middleware as decorators functions, while it looks nice, it not really useable anywhere else, and its not really a standard. At least you can still use WSGI middleware.

BLUEPRINT are nice, but have issues:
When you create a blueprint, for a sub app, you cant set error handlers. They only work on app level.
Also (small issue) You cant add blueprint specific middleware.

Better way to create 'sub apps': Use a new WSGI App.
Or use a sitemap where you bind functions to paths.

SITEMAP @route has disadvantages
For big apps, its nice to have a single routes.py file where you can see all urls the app supports, and which methods to handle those. The @route is nice to use initially, but imho for big apps it becomes messy. Also it promotes circular imports:

view.py:
from init import blueprint #circular import!
blueprint.route('/test/')
def f(): pass

init.py:
blueprint = new Blueprint
from . import view
assert view # ensure the handlers are initiallized
Previously to this machine I had a 15" MacBook Pro (2012) and didn't have any issues either. I don't run many browser tabs, that might be the difference. Although I do think the fans spun up more often on the 15" you're right.
All you want to know about mobile apps – Planning, development to monetization
No, I dont think so. PayPal is mostly interested in FIDO because of UAF. The have publicly stated that they would not move to U2F.

This was a while ago and I dont have a source. The plans could have changed.
Convert ODT to TeX
Since everyone gives anecdotal proofs that Python 3 is just fine, I'll give mine as well. I've migrated to Python3 a rather big project (for the unicode handling) and although it was not quite easy, it'just fine now. I'm active in Qt, web, json, sql domains and I've never needed a library that is Python 2 only. Thus from my own point of view, the Python 3 ecosystem is just complete now. Super.
No phone required, at all. It would not be a very useful standard if a smartphone was a requirement.

Have a look at this short overview:

https://fidoalliance.org/specifications/overview/

UAF is authentication by means of a local device with some biometric authentication factor. U2F uses a separate hardware token that can be used via USB, NFC, or Bluetooth LE — so basically, any modern computing device.
With NoSQL you do have to reimplement all of the constraints in the application but this will likely be necessary even for SQL code because you'll need to provide both server and client side validations on user input.

SQL can be even more of a pain because you'll need additional checks to handle the SQL server's particular blend of error handling if/when something goes wrong.

In both SQL and NoSQL, any decent ORM should provide models, validations, sane error handling, and constraint checks so none of those really matter.

Unless, for whatever reason the business logic is defined in SQL SPROCS. Then, good luck if/when they don't work properly.
Auto play video with sound
I'm not sure I like the trend of tethering an application to a specific backend, especially regarding databases. I think it would be more interesting to, if we're looking to be isomorphic, generate a front-end template and an API gateway . I say this because often when you're not working in tiny startups, your backend is handled by a different team and is loosely coupled.
Growing Your Engineering Career If You Don't Want to Manage
The script work on ubuntu and debian
UK is a very different situation: online grocery shopping is very well established and very competitive, with most major supermarket chains offering delivery and supposedly 3 in 10 people buying their groceries online [1].

[1]: http://www.foodmanufacture.co.uk/Business-News/UK-is-biggest...
So logstash V5, is that a rewrite in go? I say this because it seems all their other tooling is now written in go, and also, logstash agent and server are very resource intensive in jruby.
If theres a v5 alpha, which isnt on github, is it not open source?
How to Transfer Photos from Picasa to Google Photos and Weed Out Duplicates?
Oh yes, XSS attack on a bare minimum blog app! There's a reason why its called starter app!
We are using Python LDAP library[1] at work, but it is not available for Python 3 yet. Is there an alternative?

1 https://pypi.python.org/pypi/python-ldap/
I think I need to explain a bit better. I have a few different layers. From the outside in:

Flask/Web

Deal with sessions, authentication, caching, templating, logging etc here. Fires up an instance of the App and keeps it around for the duration of the life of the Web instance. I actually have an API in here that looks like what you'd expect in most other web apps. It does the validation / error handling etc. In terms of manipluating the data, I'm not a total purist - the API is allowed to load up the SQLA models and make changes. If there's a more complex operation going on though, it will live inside the next layer down.

App

Deal with remote services / data models / db connection. I guess on the outside you might call this a "service layer". A surprisingly large amount of this is data persistance management. The model I use is to put the data access stuff just off to the side at the top level of the app. Nothing in here knows anything about things like web frameworks. This is important. In other places in the system, this same App is used by RQ (worker instances taking on work via a redis queue). There's another web app that uses it for administrative tasks. I can boot it up to work with it in ipython (I do this a lot). Oh, and I don't manage the db life-cycle here. Whichever layer sits above this determines when it's ok to commit transactions. If something goes wrong here we raise app specific expections - the layer above can handle those and relay them as appropriate.

Core

In the very core I have "pure" algorithmic stuff (for context - http://www.countfire.com is effectively an image recognition app). Really this is just one component that the App happens to be using. If the App wants to talk to this, it needs to create the data structures that the core defines. At various borders I often have mappings from the objects in the current local world to versions for the created to talk to the layer below (ps I like namedtuples).

It's a lot more complex than all this, each of these layers has more sub layers etc. And really, what I've called the Core is a sublayer of the App (in my case there's a well definied algorithmic chunk that I think of as the core so it's in its own package - it stands alone as its own library).

There's no real way of knowing where you'll draw lines between the layers when you start but I have a few rules. Any bit of code should be given the bare minimum of data required to do its work. At borders map local data to data for the next layer. Make sure the stuff going into the current layer is really there because it needs to be there. Be a pragmatist - things will change, you'll pull stuff out into submodules. By following the other rules hopefully refactoring won't be too painful.
It's

"I'm a CEO speak" for categories.
Using IPv6 with Linux? You’ve Likely Been Visited by Shodan
https://en.wikipedia.org/wiki/Linguistic_prescription

vs

https://en.wikipedia.org/wiki/Linguistic_description

You might dislike it but it's become common usage in the js community so by any reasonable non-prescriptive definition of 'means' it 'means' what this author says.
> So mixed messages again

No mixed messages here, Google has a penchant of making 2 of everything[1], and they can keep at it for years at a time. ChromeOS & Android, Google Maps and Google Earth (and Waze!), and so on. There is cross-pollination of ideas, and some products eventually coalesce.

> Is 'Inbox' the next-gen Gmail interface or a hobby project

I think the answer is 'neither', just like the iPad wasn't the next-gen MacBook. Inbox is just another email client that is certainly not for everyone, it holds a little too strongly to the inbox zero philosophy to be mainstream.

Having both Inbox and Gmail as separate products makes sense because at their core, Inbox and GMail are different beasts, I use both for different contexts. Inbox is great for organizing my personal email, GMail is great for work email. I wouldn't trust Inbox to properly organize my work email, and I don't have the energy to manually organize my personal email.

1. http://arstechnica.com/business/2014/10/googles-product-stra...