skysight-inc/HackerNews huggingface dataset:
I don't. The other person needs to have these things, as does the intermediary.

Bet you removing $10 & handing it over from my pocket beats all these in a time test.

While its cool to use those, not always. UK banks are nice in the sense you can transfer instantly/free but its more of a hassle entering the account number in (which isn't really that hard, but handing over cash is much easier).
I was thinking of doing a write up on ADP's workforce product recently, some things about the website I've noticed.
The site uses cookies to determine if you have two windows open of the site. The problem is this doesn't work correctly and I often have to blow out my cookies to log in.
On mobile I have to turn on screen rotation to be able to use the menu bar on the top of the screen, then I have to turn it back to be able to see the punch in buttons.
I don't even feel like I can discuss some of the topics with other experts, for fear that I will share a solution that puts them at risk of infringement, accidental or otherwise.
http://canmua.net/world/race-is-on-to-deliver-internet-from-...
No better way to elicit information from people than making outrageous claims. Thanks for those references!
Yep. Thanks for this. Painted a great pic in my mind about the issue/process here.
Reminds me of:

http://www.businessinsider.com/ben-horowitz-columbia-graduat...

Key quote (paraphrasing)

"Is it that they love doing what they're doing, or that they love being successful?"
That's a $300 million 30+ person company, thank you very much.
Can you expand on this idea? What type of authentication method would replace it? (One that can't be directly linked to the person obviously).
You're permitted (under both the GPL and the DFSG) to restrict who you make the code available to, and to charge them for it. The only requirement is that the recipient have the right to further redistribute the sources, without being compelled to restrict who they distribute it to, or being compelled to charge for it.

That is, it is entirely legitimate and legal for me to make a Debian derivative where the only means of distribution is that I charge you $30/month for a CD of my distribution (including source to any patches I apply), and I don't distribute it otherwise. I just have to give you the right to rip the CD and put it online for free, if you so choose.
No one thumbs their nose exactly because they are "milk" based :-)

I agree with parent because I had a similar process, and I see the same difference in nature. I'd say that coffee-based drinks are more of a piano concerto, while milk-based products more of a strings trio, although I'm sure this is a terrible analogy.
I find it very interesting that they are adopting a different release schedule for Firefox than the rest of Debian stable. People that care about fast release cycles probably really just care about few minor things being up to date, while administrators don't care about which programs/libraries make problems when updating as long as the total amount of breakages in a certain time isn't too high.
from that discussion, super informative details on how secure enclave is actually implemented:

http://forums.appleinsider.com/discussion/comment/2832533/#C...
Kinda meh on adding it to the repo since it's yet another file I have to "manage" that isn't really part of the working code.
This is an interesting way to put survivorship bias into perspective. At least for normal looking fellows.
Your 100% right I never realized they were two different companies.
Yes, a thug that has to spend all of its military money defending other countries..so they can throw it back in their face that they don't spend as much on the military.

Without the US, the world would be fucked.
I don’t think Apple will lose.

First, there is an obvious pre-technology version of this problem: I have some information in my brain, and only in my brain, that I refuse to tell you. You are unable to pursuade me to cough it up. Therefore, you never get the information.

The FBI should be forced to treat an encrypted phone as being equally opaque and inaccessible. You can see the phone, you suspect it contains something you want, you can’t get it. You can see my head, you suspect it contains something you want, you can’t get it.

Besides, Apple has the money to fight forever in legal proceedings (shouldn’t be hard...seems the FBI had to drag out an 18th-century clause to even make the request; it should only become more comical from here on out).

Also, phones are sold everywhere in the world. You don’t even need a phone to be a “phone” because anything with WiFi access can effectively communicate; it doesn’t matter if the device was purchased domestically or even has the ability to connect to cellular networks. So yeah, given these options, terrorists will obviously decide to only purchase a Certified Backdoored U.S. Cellphone™ for all their illegal activities, right!?
Wouldn't it be cool if there was some sort of "electronic money", so to speak, that could be send between people at low cost over the internet?
When will they add support for long GIFs with sound? /s

There's a weird trend of taking full HD YouTube videos, converting them to soundless, bad quality GIFs and then upload them to twitter or imgur, where they're then encoded back to video. Quite often this goes without source to the original. I assume that people doing this just want to show the important content on the respective platform rather than sending a link (although twitter and reddit embed YouTube videos). Or is there another reason?
Ten Steps to Evaluate a Rails Project
The article inaccurately describes generating a password hash & using it as "storing a password".
And if I built a physical safe that was so complex that only I could safely open it and then sold the safe to an alleged criminal, would the court have the power to force me to reveal the secret to opening this safe? Sorry, but the law is not exactly on our side here. The courts have legitimately exercised such warrants before and will do so again, as is their right and authority.

Unfortunately, I think this sort of example paints you into a corner. The court is not requiring the company to permenantly damage the product, any more than a locksmith who opens a locked door to assist in the execution of a warrant is damaging the door. Once the court has what it requests it is trivial to reinstall the original firmware.

There is an old saying that hard cases make bad law. This is a hard case. The defendants are both heinous and deceased; they lack standing to resist and few will support such an effort. Apple is a third-party here and is on such shakey legal ground that they are left defending themselves in the court of public opinion because they know they are going to lose in an actual court. Bad things tend to come out of situations like this.
I literally don't understand what it is you're getting at.

Password hashing has existed since at least the 1970s and until the 2000s salting wasn't common. While some hashing libraries do insist on you supplying a salt, it is still ultimately up to the application developer to generate and store the salt for later usage.

Therefore it is still common for an application developer to "worry about salts" even if just for storage and generation reasons.

Anyone using 3DES, MD5, or similar is likely vulnerable to timing attacks, and they're definitely still in the realm of a "password hash." Plus some wonderful developers hard code the salt (salt = "secret") which too could leave them vulnerable to timing attacks if an attacker knew what hashing algorithm and workfactor (e.g. the default) was in usage.
It's really very nice to just throw Ubuntu 14.04 on everything and not worry about it. I can use my machines for doing work and not have to waste a lot of time dealing with whatever the latest churn is.
No need to be dramatic, there will be no real consequences to having these once in a while. These look good actually. I'll try to get one now.
I find the difference between "self-taught" and not almost laughable. Even if you have a post graduate degree in computer science to stay current and succeed in the field you will have to be particularly good at self teaching concepts, tools, frameworks, and everything revolves around being able to learn things on your own. Sure being taught more traditionally is very helpful for understanding underlying and foundational concepts but just saying someone is or is not self taught because they have a degree seems to not make a lot of sense. This probably relates back to why even a large part of those in degree programs struggle in the field if they don't have the self-teaching ability then even after earning a degree they won't succeed.
Java != JVM, Java doesn't even have to run in JVM. You should update your response then.
But that is an issue with Apache and not really a Distro issue. I'm thinking I didn't have to change anything on my Apache config since mine is very vanilla.

So if you have a vanilla config on Apache it still works.
Seems like a nice combo of things I've stitched together (at 3 different companies now) with Trello + Zapier + GitHub.
It depends on which country in Europe you are in. The fiscally-conservative Germans love cash and love to pay for things with cash. Cash is a lot more prevalent there. I wonder if that love of cash dates to the early 20th century where money in a German bank frequently disappeared, whether through economic collapse, hyperinflation, or simply being bombed into rubble.

There are other countries (Iceland springs to mind, but I know there are others) where electronic payment methods are so dominant that someone can get along fine without having any cash.

Europe can't always be nicely generalized. There are plenty of differences between individual European countries.
talk about moving slow.

two years and that's what we get? meanwhile my bigger diffs are still garbage. and we have to use other companies to have a simple agile board... and don't even get me started on decent branch management and rebases...

sigh. really hate that my employer buys that
I think people are also missing the point when they say "newer iPhones wouldn't be affected by this anyway".

I think what's more likely to happen is that in a future case, the FBI will tell the judge that Apple has already complied with such a request before, and now "suddenly" it doesn't want to anymore. Then the judge will probably agree with the FBI that Apple is in the wrong here, and tell Apple "hey, do that thing you did with the previous iPhones, too".

And what that will mean is that Apple will have to make it so the Secure Enclave can be tampered with. That would affect all devices, because Apple would have to cripple every single device like that if it wants to be able to comply with all future orders, and you can also say bye-bye to secure storage of fingerprint data and credit card data on iPhones.

It's all about the precedent here and it's an extremely dangerous one. As Apple said, too, if the FBI succeeds in getting Apple to push malicious updates to their users, who knows what kind of other similar requests will come from the FBI - not just to decrypt local storage, but also to break end-to-end encryption for communications and so on.

FBI's fight is literally a fight against good security.
Twitter is becoming worse in every way in order to chase the users of a larger social network that's worse in every way. The timeline isn't just about to become disjointed, it's going to become more inane as well.
You can (un)subscribe to specific issues, but you cannot filter issues in general. Which means you'll still get notified about new issues until you manually (or programmatically) unsubscribe from them.
My guess is that they don't want it to be like reddit. Same reason why there are no comment notifications.

When you have a new comment notification, you are more likely to respond. People are more confrontational on reddit because of this reason. Whereas on HN, you tend to write a thoughtful answer and leave it at that. Threads are shorter on average, so the conversation is less likely to get out of topic.

Collapsed comments are usually ignored, because people are too lazy to dig that deep, that means some really good conversation might get buried.

I kinda like HN comments style better, I hope they keep it like that.
Polls on that very topic are a regular part of election cycles in Taiwan. Back in the late 80s there was a sizable minority of Taiwanese people identified themselves as Chinese and many others identified as Chinese and Taiwanese.

Now about 2/3 of the population identifies as Taiwanese, about 1/3 identifies as Taiwanese and Chinese and the percentage identifying as Chinese is less than the standard error of the surveys. The long term trend shows no sign of slowing down or reversing either.

If you're interested in the topic, Zhengda (aka NCCU) has an election study center and publishes their findings.
Sure, but a piecewise-linear function on a log-log graph is still qualitatively "exponential growth", with a rate which changes over time.
Many large FOSS projects (which this is aimed for) already have CONTRIBUTING.md etc...

I personally prefer this non UI/Github specific approach.
> I literally don't understand what it is you're getting at.

I truly hope this will help then: https://paragonie.com/blog/2015/08/you-wouldnt-base64-a-pass...

"Password hashing" is its own compound noun. The acceptable algorithms (as defined in the blog post this HN thread is about) take care of this for you.

> Anyone using 3DES, MD5, or similar is likely vulnerable to timing attacks, and they're definitely still in the realm of a "password hash."

3DES is a block cipher. MD5 is a crytographic hash. Neither of them are password hashes.

> Plus some wonderful developers hard code the salt (salt = "secret") which too could leave them vulnerable to timing attacks if an attacker knew what hashing algorithm and workfactor (e.g. the default) was in usage.

What you're describing is closer to a "pepper".

http://blog.ircmaxell.com/2012/04/properly-salting-passwords...
My guess is that it's likely that the FBI can access the data without Apple's help. Based on what we know, how do we distingish between these two situations, and which seems more likely?

A) Apple has created unbreakable security. The FBI cannot access the data and needs Apple's help.

B) iPhone security, like all other security, is breakable. iPhones are a very high-value target (all data on all iPhones); therefore some national security organizations, probably many of them in many countries, have developed exploits. The FBI, following normal practice, does not want to reveal the exploits or capability and therefore must go through this charade.
Crucially, this is software which doesn't currently exist in the world and which Apple has no intention of voluntarily writing. There is no specific law or regulation (like CALEA) which requires Apple to provide this functionality.

What the FBI is attempting is to use 'All Writs Act' from 1789 which authorizes Federal courts to issue "all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law." Are there limits to what a judge can order a person, or a company, to provide?

A warrant describes "the place to be searched, and the persons or things to be seized." I would not expect a judge can draft a warrant for something which doesn't actually exist, and then force someone to create it.

This is not about providing physical access, or about producing documents which are in your possession. This is whether the government can usurp your workforce to make you create something that only you are capable of creating, against your will, not because there's actually a law which says you have to provide that capability, but simply because some investigator has probable cause that given such a tool they could use it to find evidence of a crime!

If 'All Writs' somehow does give the government the ability to enslave software developers to creating this particular backdoor, what is there to legally differentiate this request from, for example, one that would function over WiFi or LTE remotely?

There's been a lot of discussion about the 'secure enclave' and how this particular attack isn't possible on the iPhone 6. I think that's missing the point.... If 'All Writs' can force Apple to open a black-hat lab responsible for developing backdoor firmware for the 5C, then it can do the same for the 6. For example, why not force Apple to provide remote access to a suspect's device over LTE while the device is unlocked / in use? While we're at it, the iPhone has perfectly good cameras and microphones, let's force Apple to provide real-time feeds.

Think about the sheer quantity of networked devices which exist (or will exist) in an average home which could be used in the course of an investigation. If they can force Apple to create a 5C backdoor, I can't see any reason they can't apply the same logic to WiFi cameras, Xbox Kinects, or even your cars OnStar. Heck, even TV remotes come with microphones and bluetooth now... And don't get me started on Amazon Echo!

Fundamentally, the question is can you force a device manufacturer to implement backdoors into their products to be used against their own customers? Notably, service providers have already lost that battle, they are required to architect their systems to be able to spy on their users and provide that data to law enforcement, often through specially design real-time dashboards. At least in that case it is based on duly enacted legislation with that specific intent.

But this is something really quite shocking -- can investigators, simply through obtaining a warrant, force companies to re-design the personal devices that we own and keep with us almost every moment of the day to spy on us? I truly hope not.
They'd go to Android. Apple only has a significant share of mobile users in the USA. Most other countries they are losing (globally they have something like 8% vs Android's 85% market share).
Presumably that change would invalidate the signature.
Bitcoin Performed Better Than Stocks, Commodities and Bond Yields
The title has been corrected as of ~half an hour ago.
I'm not a user of the product but seems weird to only give users a 2 week notice.
Awesome, I'd love an updated (traditional) Windows 2k/XP GUI with windows and linux tools in it. :)

Interesting... I appreciate the faithful reproduction, but they've also copied the outright bad designs like the tiny environment variable window in the system control panel I always hated. ;)

Noticed they used a source-forge download instead of a torrent. :/
Diving into Docker: What It Means for Your DevOps Strategy
No where did I provide an analysis of their capabilities. I simply stated that they are the second largest economy in the world and they are greatly expanding their military. This would indicate that any military conflict would be costly, thus best avoided.
Great, glad to help.
Logarithmic growth would literally be sub-linear growth. Historically countries growth looks something like a piecewise-linear growth in a log-log graph.
Right so even if your application is only meant for 10 concurrent users it's your duty to optimize it to the point where it can handle HN traffic...

Come on man.
> Because if the FBI and this court get away with using the All Writs act to compel Apple to write new software they'll eventually be forced to add a backdoor to SE-equipped devices too. Courts won't understand or care about the differences

The whole point is that it doesn't matter what the court thinks if Apple cannot comply due to the laws of nature. That was their whole argument to begin with. Their argument now is pretty mushy in comparison.
With regards to hardware being the issue:

The last I’ve heard was that debbugs is run on the fastest hardware the Debian project has available, i.e. one of the few machines with fast SSDs.
Tim answers to shareholders. Shareholders look at the bottom line and not his character.
Important to remember: Anyone who has your phone also has an object covered in your finger prints. Don't rely on Touch ID for actual security.
Craigslist has dedicated form fields for a lot of those things, which can then be used with search filters. The problem is that they aren't mandatory, and most users don't fill them in.

The side effect of this is that if you use the search filters, you risk missing out on a result which matches your criteria but lacks the metadata. (Craigslist doesn't have an option to search for only Blue AND Unspecified, so there's no good way to just hide the explicitly non-Blue cars.)
The money multiplier is the inverse of the reserve requirement. If the requirement is 10%, the bank loans out 10x the deposit.

This is because from each $1 you deposit, the bank keeps $0.10 in reserve, then loans out $0.90 to a debtor account. Of that, they keep $0.09 as reserves, and lend $0.81 out to another debtor account. Of that, they keep $0.081 as reserves....

Get it now? As long as the same dollar is present in the vault, it qualifies as reserves for $10 in electronic circulation.
I mean, it kind of does now yeah? It means a short, soundless video that loops.
>I've been dreaming about a ballot proposition which says that if a person agreed to a contract that enforced binding arbitration, and was never given an opportunity to amend the contract, then the consumer would be eligible to pick the arbitrator from the set of licensed arbitrators.

The Supreme Court decided in AT&T Mobility LLC v. Concepcion that the Federal Arbitration Act preempts state laws disfavoring arbitration. Your proposed law would invalidate a large number of existing arbitration agreements and so would likely also be preempted. At this point, it will take an act of Congress to make any significant changes to existing consumer arbitration laws because conflict preemption will invalidate nearly any conceivable state law favoring consumers.

It's an upsetting state of affairs because the federal government does little to protect consumers yet consistently interferes with the ability of state governments to do so (see, e.g., the Office of Comptroller of Currency's frequent interventions to prevent state regulators from investigating predatory lending practices in the years leading up to the financial crisis).
I've got a set a special hex screws and soldered on RAM to talk to you about...
Digital marketing
I've written an app that I (obviously) think is cool. It's up on the App Store and Google Play.

My question is in regard to marketing. Every couple weeks or so you see an App make a big splash across the internet for it's "launch". Peach is the most recent example. What does it take to achieve this sort of exposure? Knowing the right people? Spending x dollars?
HIPAA is probably a stretch - but certainly sounds like someone's asking for an employment lawsuit.
> The amount of sugar you were putting in your coffee is probably not close to comparable to that in these drinks.

Even if you put just 2 teaspoons, that is 10gr of sugar. If you drink 3 coffees a day, that's 30gr or your entire daily recommendation as per WHO.

Unsurprisingly, I too drink my coffee black. While I can stand coffee with milk in it, and sometimes order cappuccinos at fancy coffee shops, sugar just ruins it. If you can get off it, you'll be much better off in every way.
Running these for decorative lettuce in a big city is one thing, when farmers use this for corn in Iowa you might have a point.

Shipping bulk rice from US to China is cheaper in terms of energy than shipping electricity required to grow that same Rice.

PS: Another sanity check. The US has 922 Million Acres of farmland. At 1kw/m * 8h / day that's vastly more than the world total energy usage. You can't even replace that with fusion power as the waste energy would directly produce significant global worming. (4046 sq M / Acre * 8kwh/day = 32 Megawatt hours per Acre * .92 billion = 30,000 Twh per day, world electricity is under 30,000Twh per year. ) https://en.wikipedia.org/wiki/World_energy_consumption#/medi...