skysight-inc/HackerNews huggingface dataset:
In my most recent trips to Germany, 2013/14, the opposite was the case. Cash seemed to be the most common way of paying for things. At food stores almost everyone was paying with cash though there was some sort of card reader (debit I assume ...?) that I saw people using occasionally. As someone from the US where in my experience electronic transfers are the norm, I was pretty astonished to find that the home of the EU central bank was still running on cash.
> As a former recruiter, I can't second this enough. Applying online is like shouting into a black hole.

If this is true, why even have an online job site? Why waste everyone's time?
No, pay at the till, then fill up the tank. This is in the US.
Probably by using DFU, and uploading the image via the lightning cable.
I was more thinking about artificial pathways, not renormalization (which sound very very difficult) but I'm happy to learn it's considered. Thanks a lot for the name too.
This is the world's first actually-useful bendable phone
I sure hope so! And given how much Apple has to loose if they just cave, it is reasonable for them to do so.
An even better title would be "How to Safely Generate and Use Password Hashes in 2016".
"If there was a zero cost way for ordinary US citizens to move smallish sums ($1-500) electronically I'd use that instead."

Are you talking about paying merchants or individuals? Have you checked out Dwolla?
So... it sounds like you more or less agree with me. Apple can comply with this court order and open your secure device. We just differ as to whether they can do it over the air.

(FWIW: OTA firmware updates are routine in the industry. I've worked on such systems professionally, though not for Apple.)
Not only that but people unfamiliar with Polish names would not necessarily assume Sklodowska is Polish anyway.
Wow this made my day. I think my faith in Apple's privacy concerns got a much needed revitalization. Privacy and encryption are the number one reason I stick with iPhone and Mac with File Vault. It was always hard to completely trust them after PRISM. However, that was arguably a different Apple.

This stance against the government come poetry reaffirms my faith in the genuineness of Apple'e encryption efforts and Tim Cook specifically.
> You do -- if people really are rationally processing ideas, then, so long as someone is exposed to good, not-socially-destructive ideas, they will propagate more successfully than those that aren't.

Actually, expending effort to propagate even subjectively good political ideas (that is, ideas that would benefit the person involved if they were widely held) is usually irrational for most people, because the expected marginal utility is low compared to the cost to spread them.

Its useful to the individual if other people spread the ideas, but its often a classic tragedy of the common situation.

Now, for wealthy people (or people with otherwise disproportionate media reach and impact), the utility cost of propagating useful ideas to those who might be receptive is lower compared to the benefit, so its more likely to be rational to do it. Further, with unconstrained spending, the spending of the rich bids up the market cost of reach for ideas, making it less rational for the less rich to expend resources propagating the ideas they favor.

You are invoking rationality, but doing so with an argument that ignores market conditions, opportunity costs, and relative payoffs.

(Also, rational agents -- by the definition of rationality -- don't act on the social consequences of options, but on their personal costs and benefits.)
Serving your customers well is good for profit, but it is not the same thing as doing the right thing. Ad-based companies have customers and users. By serving their customers too well they easily screw over the users, with obnoxious and even unethical ads.
I wasn't bashing PHP per say but I was saying that if you are sticking with it you are going to get worse and worse jobs going forward because the market is looking for Python right now. Depends what you want to be building, or if you work for yourself and choose the technology.

I'm building a network scanner at the moment and I have to say that even Python let alone PHP isn't really cutting it. As I've been learning Elixir (for a project in my spare time) and getting to grips with the OTP you really do start to realise that functional programming and the Actor Model amongst all the syntactic sugar is a big win.

Sure if you are bashing out a PHP websites great. But if you are building something with lots of processes or parallelisation requirements PHP (or Python for that matter) is not your friend. In conclusion use the right tool for the job.

As everyone knows we should all stop using PHP and start using lisp, given the choice :-) http://www.paulgraham.com/avg.html
People should note however, this appears to have been updated since the last posting - there are references to things that have happened since 743 days ago (e.g. "Today (early 2015)") and discussions of Haswell.
Are you sure you're not thinking of "logistic".
Not that they're more intuitive to use, have a higher quality app ecosystem, and "just work" for most people.
Doesn't seem to work on enterprise github yet. :(
Twitter is all about who you follow. Follow people with similar interests and it's great. Follow random people and non-suprisingly, the experience is going to suck.
Crowdfunding for Kanye’s debt raises a meager...
I still see "How to Safely Store Your Users' Passwords in 2016".
Awesome tool! Good to know there's super useful tools like this out there.
Oh right, I forgot some states do this. I even used to live in Alabama, which has the same policy. Coming from Ohio (where I grew up) I always thought this was oddly impractical.
The All Writs Act is a United States federal statute, codified at 28 U.S.C. § 1651, which authorizes the United States federal courts to "issue all writs necessary or appropriate in aid of their respective jurisdictions and agreeable to the usages and principles of law."

well, as far as I can see, it is not agreeable to the use and principle of law to force a company (or a person since corporations are people) to spend money and waste resources to compromise its own security systems, which happens to be something they morally object to.
They're rehosting loads of copyrighted content, too.
Different loss scenarios. After a bike accident I lost some memory (especially peoples names, but I lost a password I'd set that week). I had no backup and there was no email reset. I just lost access. Now, that ended up not being a huge deal, but had it been say a Bitcoin wallet it would be over.
Great job!

Next item, be able to star issues.

That would help a lot and we are able to avoid +1 comments.
I had a hard time parsing out the technical bits behind the facade of titles and endorsements. I didn't know you could be a Vice President of an open source product. Two roles I'm familiar with: committer and PMC chair. Now VPs. Just saying...
Other commenters have pointed out that this does not appear to be on the London Tube. The post mentions nothing saying that the poster took the photograph or that it was on the London Tube, the London-Tube association of the HN headline seems to be mis-inferred from the poster's location, Edinburgh, United Kingdom, although that's quite a ways from London...
Geosynchronous satellites don't have to be over the equator. Geosynchronous satellites that are over the equator are called geostationary.

https://en.wikipedia.org/wiki/Geosynchronous_satellite#Defin...
https://www.gofundme.com/kanyesmedicis
There is an option in the iOS app to opt out.
Galaxy S7: Both Qualcomm and Samsung Chips Seen by OpenSignal
This is a great idea, but I'm immediately concerned about giving my financial account information to any sort of free service.

What is your business model? Why not charge a one-time $10 fee up front to build trust, and revenue?
This site does not look like an unbiased source.
I'm optimistic for the use of physical tokens instead of passwords. In my work environment, a lot of authentication is based on physical token possession plus a password just as a guard against lost devices (password validated by the token, not by the service).

These kinds of systems aren't technically very complex but there hasn't been a lot of traction for them outside of corporate environments. The result is that they tend to be hyper-expensive, unfortunately. Standards like FIDO and the Yubikey are good first steps at pushing this into the consumer space, although they don't offer on-device PIN validation yet.
Secret post-mortem
For one thing, existence of a jobs page tells desirable candidates to find the real way to apply; non-existence leads some candidates to assume you're not hiring.

Every company with 10+ engineers is hiring engineers but many people don't know that yet, so, have a jobs page.
> Since the destructive idea started that one bad hire
> was a disaster for a company, it has been a lot more
> difficult than that.

I experienced this first-hand a few years ago. I had a few friends and former colleagues working there and was qualified. One of the six interviewers was known to be difficult (even to outsiders) and sank me. The CTO personally apologized to me face-to-face but decided to uphold the 100% agreement tradition.
That's the correction. Given that the audience for this blog post is developers, I feel that the current title is precise enough.

People who know about password hashing don't need this advice.

People who are storing passwords need this advice.
You don't want to burn any tries in case the Apple developers would need a few?
Gold is going to be somewhat harder to spend.

"The Serious Organised Crime Agency claimed that "90% of all €500 notes sold in the UK are in the hands of organised crime", revealed during an eight-month analysis." [1]

€500 weighs 1.12g, but is worth $1.11, so US$1M in €500s is 2kg. A very decent saving.

Of course, the UK doesn't use the Euro, so it would be interesting to see the same analysis done in several different Eurozone countries.

[1] http://news.bbc.co.uk/2/hi/uk_news/8678886.stm
Was about to post the same link. I was just recently introduced to them. Haven't seen or used one.
But there is one user review (small one though) at the very bottom of the page.

Roughly translated: "Very good build quality, light and nice design. Everything works out of the box. Great and nice customer service. Thanks again!"

Haven't searched for other reviews yet.

http://www.tuxedocomputers.com/Linux-Hardware/Linux-Notebook...
I did something very similar and approached the hiring manager to show him what I've done. While he appreciated my work, he wanted me to work (for free) on the company's Github stuff and said he will call me if that something opens up.
PS: I am okay spending my free time on his cool project but it progressively looks unsustainable.
The main limitation of that is that your passwords are limited to what you can memorize. Which, for most people, is not very much. Even for just one password, never mind for multiple services. I think if you're a pragmatic security conscious person you'd weigh the trade offs...and I thinking of it as just "simply memorize it" opens you up to other problems.
Don't gifs come under fair usage mostly? Can't claim a 5 second clip of a show/movie is copyright infringement
A few points to ponder:

- Money spent counts toward GDP, even if the money comes from a bank loan that will never be repaid (Example: big real estate project in a third-tier city that will never sell for its listed price)

- China's foreign reserves can not be used to pay back debt denominated in Chinese Yuan (foreign currency reserves are the result of people/institutions giving the Chinese government foreign currency in exchange for Chinese Yuan -- you can't do the conversion twice)

- China has a shrinking workforce due to demographic shifts. Specifically, they have moved from an agrarian birthrate to an industrialized one.

You are correct that China has a huge population and workforce. Their wages are rising (which is good for China!) which makes them less competitive as the factory to the world. The Chinese are making progress at moving up the value ladder to help justify those higher wages, but they aren't quite at the top yet. And the workers are very much getting squeezed between high living costs and soon-to-be higher costs to service all that debt and pay benefits to those not in the workforce. These are some reasons why experts are suggesting that China needs a new and more sustainable growth model.

The Chinese government will not allow the Chinese banks to fail the same way the USG did for Bear Stearns. They will likely buy the bad loans from the banks at face value and put them in government-owned asset management companies who will attempt to restructure them.

The cynic in me expects it will probably go worse than Japan since the '90s.
The largest thing that stops me from being able to apply for a job as a college student is that every job I am interested in, mainly back-end/low-level software development, say that they require a "MS in CS and 5 years of experience."

These job postings are for entry level positions and internships, nothing higher.

Is this something I should be worried about? Should I just apply to this kind of work anyway?

How do I find companies willing to hire me as a college student with no official experience?
Kenneth Clark thinks the 12th-13th century was special in some mysterious way; pointing out that all kinds of interesting progress happened then. There was certainly a great deal of learning which occurred then; in addition to Bacon and Grosseteste; Witelo, Albertus Magnus, Petrus Peregrinus, Leonardo Fibonacci, Abelard. In the spiritual realm, Francis of Assisi; an important thinker even to the non-religious.

Clark points out that, oddly, a lot of interesting and nice things happened in other civilizations at around the same time. I can't list any at present, as my world history isn't as good as Clark's, but it's in his documentary. I dunno, maybe the weather was particularly conducive to elevated thinking.

The conventional wisdom is that science was hamstrung by the black death, since something like half the population of Europe died off. While Newton escaped a plague at Cambridge during his miraculous year, that's not the same level of disaster as half the population going away.
Anyway, history nerding is fun.
Orbx FTX Freeware
Thanks for the reply!

We currently use Trello for project management but find that the duplication of data between Trello and GitHub and the lack of "higher order" views (epics, roadmap, etc) make us want to move to a more purpose built service.
GitHub Enterprise releases typically run a few months behind GitHub.com changes. You'll likely have to wait until GHE 2.6. Sorry!
The Experiment That Will Allow Humans to “See” Quantum Entanglement
Overall, my initial impression is quite positive.

One negative comment, "Feature Flag-Driven Development" makes it sound like a parody.
Indeed. A lot of big bank behavior is due to their shareholders demanding more profit. When you open an account at a credit union, you literally ARE one of those shareholders. I can't say enough good things about them.
We use Gargoyle by Disqus in our Django projects. Disqus has a newer alternative, but Gargoyle works for us.
Here in Brazil, we had the "Confisco da Poupança" in the 90s. According to Wikipedia (https://pt.wikipedia.org/wiki/Plano_Collor), 80% of every bank account above some value was frozen for 18 months.

Even nowadays, rumors of a new "confisco" are enough for some people to take all their money out of their bank accounts (even though constitutional amendment 32, written a decade later, contains a clause specifically designed to prevent another "confisco").
Wow, beautiful site!

I'm loving this trend of services to save me money (Paribus is one other example that I love). However, I too am concerned about handing financial information over to a third party. I'd love to hear the business model.
There's a special place in hell for people that make jokes and post massive animated memes in issues.
A one-time up-front $10 fee may build trust, but it would also scare people away.

There's a few ways we can go for revenue. Here's an example: Since we know what subscriptions are popular, and we can have verified ratings on those subscriptions, we'll be able to make recommendations. For example, "You're paying $12 for Pandora. People seem to be happier with Spotify, and your friends love it. Give it a try!"
Using those referrals, we'd get a cut of the subscription revenue from Spotify.
Viewing a gif or mp4 is much more lightweight on mobile than a youtube video.
When a US senator expressed upset with Wikileaks, Amazon shut them down. Not even a court order, just a tantrum from a politician. If you really think Amazon aren't cheerfully inviting the US government into their datacentres, you haven't been paying attention.
Yet here in the US we continue to think it's good public policy to subsidize the production of sugar and corn syrup.
Code elements to look for when automating exploit generation
There is already a way of doing this using the URL like: https://github.com/jamesRaybould/go-mssqldb/issues/new?body=...

You can then add it as a simple href to the readme.md.

It also means that you can have multiple templates depending on what a user wants to do, just by having multiple links and changing the content of the `body` parameter.

Simplest way to get going on this is to use http://urldecode.org to write the markdown you want and then hit the encode button, take the result and add it after `body=`

We also use it to auto-assign labels using `labels=` in the URL
well, no one protected from thermo-rectal crypto-analysis. The only difference is that gov guys want to keep it hidden from target
It sounds like she is known or remembered in Poland for her science and for her nationalism then. Outside of Poland, her Polish nationalism is obviously going to be less important/relevant than her contribution to science.

>I don't know how else to describe it, maybe if Alexander Graham Bell had another surname, say French or German, and people everywhere were using that instead, without ever mentioning Bell? Would that be an understandable example then?

I think I would understand more if she had never used the name Marie Curie, or even rejected it at any point in her life (did she?) and was simply called that by other people. If she herself used and was happy with the name "Marie Curie" though, and AFAIK she was, I don't see what the issue is with her being known by that name.
Unofficial Haskell Stack Packages for FreeBSD
What about attachments to issues? Using gist for it is simply annoying.
Because fingerprints are not sufficient to generate / recover KEKs from.
McDonald's coffee improved drastically when they switched to Newman's Own.
What's the potential fallout on this case? I assume Apple is appealing the ruling - what happens if the ruling is upheld and Apple refuses to comply (unlikely IMO, but what if)? Could the DOJ target individual Apple engineers and order them to do it or face contempt of court charges?
Heaven must be a real party then.
> Huge props to Apple

They may be doing it for people right to privacy, but don't forget they might also be doing this because their image would become tainted irrevocably if they complied with this. Trust in Apple devices would be shattered (across those who currently trust Apple).
Sure, and with the vague definition of "issues," you can move the goalposts all day long.
Both formed in 2010. Leap Motion is also doing some Augmented Reality. Hard to fight the over $1,300,000,000 in funding that Magic Leap has been able to raise.
This is a good way to think about things skeptically, but to say it as though it is fact is misleading. Is it that unlikely that a business professional can frame his beliefs and knowledge in this domain in such a way to justify himself to the shareholders? Or are we all just too skeptical that people in power act against morality whenever easy or possible?
Thanks! See my reply to tomkinstinch re: business model
Surely Starbucks can afford an engineer to design and manufacture a roaster that can properly handle their volume?
Both asm.js and NaCl guarantee execution stack integrity and allow jumps only at predefined targets in code making exploiting bugs like this highly problematic. Data-only exploits are hard and in asm.js case they are father limited as access outside of the memory leads to program termination.

On the other hand memory safety does not prevent bugs like Heartbleed or resent OpenSSH key leak. As the underling issue is related to broken reuse of a cached buffer, such code can be written in Java or even Rust just as well.
Community Highlight: Searchkit.co
Parquet is also designed to efficiently store nested data on disk (by efficient I mean it can retrieve a field at arbitrary depth without needing to walk from the root of the record)
Has anyone used this? How is the rendered code?
Having hired a bunch of people, including juniors out of school, I'll tell you this: apply, just apply.

A job description and requirement is their picture of the ideal candidate, but they will hire the person that's the closest to that, and other things not mentioned in the offers like how you would fit culturally in the team, work with others, and so many other things.

Just apply to what you want to do, what's the worst case again? Ah, you spent time writing a cover letter.

Btw, keep your cover letter short. People might not read it if it's too long.

Another last tip: apply even if you are almost certain you won't have it. Never say "I'll apply when I get more experience". You know what? By then, you will change, the company will change, and it might not be a good fit anymore. I wanted to apply to a couple of specifics startups in the past that I never applied too because I felt like I was not up to it, in the end, I was wrong and the company changed so much that I don't want to work there anymore at all, but I'm sure that would have been great for years.

Apply. Just apply.
> Unless that data is completely anonymized, isn't it a violation of HIPAA?

It sounds to me from reading various articles that Castlight is used in various ways, including to provide information and recommendations to employees. This use is probably fine under HIPAA.

Information that gets sent back to employers that uses PHI from insurance claims, absent specific consent for the use intended, would seem on first glance to be a HIPAA violation on the part of the insurer.

And, actually using it in a discriminatory way (which paying to gather it would be prima facie, though not dispositive, evidence of) would violate a whole lot of employment law on the employers part.
The AMD drivers haven't been sent for conformance testing yet, probably due to the fact that they're very buggy. (No personal experience but somewhere in this thread someone said they're unusable).
Bot Designed to Waste Telemarketers Time
What's new in Swift 2.2?
> What is always left unsaid in the article: they're farming lettuce, a food that has 59 calories per head and is 95% water.

Which crop would you be more interested in seeing farmed robotically? Pick one and I'll go get you a link to the machinery that does so.
According to a former apple engineer that worked on this stuff, the enclave's firmware is indeed a signed blob:

https://twitter.com/JohnHedge/status/699882614212075520

The key thing would be for it to lose all stored keys on update when the current passphase has not been provided, and it sounds like that may not currently be the case.

Maybe in this case, Apple could comply, but a simple tweak would make it impossible in the future?