skysight-inc/HackerNews huggingface dataset:
How does KeePass2 rank in security against other password managers?

I've used it for a while, and haven't heard either way. The Android app has good Dropbox integration, which really streamlines mobile password use.
I almost thought that they pay opposing players to not play with full strength when reading the first sentences. Glad you clarified.
8/40

I heard the story of the Exeter research on NPR while driving back from the airport at night last year at it floored me! I never realized that other people could actually picture images in their minds. I also thought this was entirely metaphorical. I wrote to the researchers back then to be included in further research.

I'm a computer engineer.

Anyone know if there a community group of people with aphantasia?
Am I the only one who was slightly ticked off by this guy's writing style?

It was riddled with terms like "arb", clearly written for self-satisfaction. If my life was wrapped around the VC universe, I probably would not care to read this article, and yet for anyone who isn't so familiar, you need to interrupt the reading several times if you want to understand what he is talking about.

The conclusion of the article, hinted at the beginning, seems to run abrupt without fully explaining itself.
The last part of this reminded me of my favorite part of BB10, when I briefly used it: BlackBerry Hub.

It was so freeing to have my texts, Facebook messages, emails, etc in one place. People noticed I responded to messages faster, and I was much more organized than when everything was fragmented into different apps. I just need something like this on the OS-level on iOS.
>Will businesses? Probably not.

Sadly no. The current version of mobile and the web relies on claiming consumer spaces and trying to herd users into them so they can be farmed.

It's a top-down control model.

Thinking in terms of bottom-up user value without imposing top-down control is alien to corporate psychology - even though if businesses agreed open low-friction global standards for payment processing and other kinds of interaction, possibly with some kind of profit sharing, they'd likely do better in the medium to long term.
I think the idea is there's a keyword used to salt the password and you could use change the keyword if the password needs to be changed.
I'm currently trying to setup an OpenVPN based VPN server on OS X. That's because several iPad apps I use seem to bypass my regular DNS servers and go to Google's DNS servers and OpenDNS, which I don't want them to do.

I could stick a gateway on my network, but frankly I just don't want to spend any more money and OS X should do fine for what I want.

There is surprisingly little documentation on how to setup OpenVPN on OS X. However, in my travails through OS X I've had to learn a whole bunch of tools I've never used before, the main ones are how to create launcher files, how to setup OpenVPN and how to use pf - in the way OS X wants me to.

I'm think of uploading the setup onto GitHub - would anyone be interested?
Sadly, that's true.
I have one of my own design where this problem is solved by just having a "version" field in the hashed data. Bump it and the password changes, and you still have the ability to retrieve old passwords. I have been waiting for one of the good ones to incorporate this idea so I don't have to finish mine. ;)

Edit: and I might as well mention my other feature that I haven't seen elsewhere, which is that the hashed data isn't used as the password directly, but rather is input to a transformation function which can take into consideration different password rules for different sites. This way if a site has a dumb rule like no exclamation points or an 8 character limit, I can still use my generator to manage the passwords, just with a lame final transform that limits the password space in the appropriate way.
I use PasswordMaker.org. Sadly it stopped being updated.
Try watching Shakespeare: https://www.youtube.com/watch?v=bsYrGIQnmxo
Good points. I was originally comparing the food to retail for a mid-level AR-15 because that seems to be one of the most common choices for a defensive rifle. You're definitely right that you could get something very capable for a lot less.
you have misunderstood what you are reading. man 2 is the library doc not the chroot program, this page is just reminding people to cd into the root otherwise they will be vulnerable.
Grown up in Japan and got into theatre, I've tried a few of Shakespeare (in Japanese translations), but I didn't fully get it---until I came to US and actually read it aloud in English. I agree that it is much more approachable as spoken words.
And it can't accommodate websites having weird password requirements. Some websites require symbols and some have maximum number of characters. Fixing this would probably require special characters in the keyword which would force you to remember the website's original password requirements on top of the keyword itself.
> For me the $64.000 question is why leaders of the era weren't alarmed from the writings. Haven't they read the book?

If you're American, do you read the campaign biographies of all the major presidential candidates?
> It's safe to assume independence in this case because the five primaries (Connecticut, Delaware, Maryland, Pennsylvania, Rhode Island) will all occur at roughly the same time, in the same time zone. It would be unlikely for the result of one of these primaries to influence the result of another, so we will assume that there's no inter-primary influence.

No way they are independent. If the previous day he appears in all the mayor TV networks killing a kitty and drinking the blood, the probability of winning will decrease in all the states, so there is a lot of correlation.

(You can come up with a more realistic scenario.)
That forces you to remember which "version" of the keyword you're on. Was I on github1? github56? etc. It makes the management part even more manual.
Great description, and makes me feel less handicapped for not having a very vivid mind's eye.

I wounder though whether somebody with aphantasia could really understand that description. After all, they would have to actually visualise a reflection to get to grips with it.
Also known as the thundering herd...
Something else that really helps is backchaining.

Split the thing you are learning into chunks... making each chunk as small/simple/easy as you can.

Learn the chunks in reverse order. Starting with chunk N, then N-1, all the way to chunk 1. This way, you always start with the hardest part and then move onto the easier (more practiced) parts.

This keeps the focus on the part you are trying to learn, and reduces learning stress.
I want to believe that this is the kind of thinking that's rewarded, but...
Doing things that scale
One thing that never ceases to amaze me is that there are so many succesful modern retellings of his plays. Something about the stories are just timeless.

Watch the originals, by all means, but the reimagined ones are not too shabby either:

Romeo + Juliet, modern day "Verona Beach"

https://www.youtube.com/watch?v=4VBsi0VxiLg

Much Ado About Nothing, set in modern days:

https://www.youtube.com/watch?v=WnmZc8uoEbo

Hamlet, set in the 1800's

https://www.youtube.com/watch?v=-rd74Gniz-A

Richard III, set in WW2:

https://www.youtube.com/watch?v=OXc0-EME0C8
That's a good point. If you're under 40, "Proxy" probably conjures images of those free proxies you mention. Over that, I have to believe you're going to favor the legal terminology at first blush.
Are there viable fuels that don't degrade like this?
Doesn't caching writes from multiple different servers potentially cause consistency and durability concerns?

I know MongoDB still haven't marked the bug [1] reported by Kyle Kingsbury [2] that found stale reads on all consistency and write concern levels...

1. https://jira.mongodb.org/plugins/servlet/mobile#issue/SERVER...

2. https://aphyr.com/posts/322-jepsen-mongodb-stale-reads
Move to the US and pay taxes
> This is like someone having the scepter of an Egyptian king

The point of a scepter is that you can wave it around in front of your subjects, not leave it in a vault somewhere all the time. It's more like the actual grave goods the Egyptian kings were buried with, maybe.

> Sol LeWitt is an unusual artist in that he rarely painted, drew, or sculpted the art you see by him. Instead, he wrote out instructions for artwork, and then left it to “constructors”—often art students, museum curators, or others, to do the actual work of fabrication. LeWitt liked to be a recipe writer, not a chef.

So. Algorithmic art, except executed by humans instead of the traditional computer. "calculate z_{n+1} = z_n²+1 for each point repeatedly; color it black if it converges..."
Financial "Engineering" applies to all public companies across the board. What applies to SalesForce is the part of the statement "it's hard to tell" :) (Given the level of detail they provide on their filings about the Marketing/Sales spending it's very hard to tell :)
As someone new to Shakespeare, you should definitely start out by watching performances, rather than reading scripts. Until you've absorbed the rhythm and the literary style, it can be very difficult to follow their plots just from a cold reading of the text; particularly for the histories. (And while King Lear is classed as a tragedy, I've personally always felt that it reads more like one of the histories)

If you do start reading the scripts for pleasure (which totally is not required!), then it's probably a good idea to start with one which you've seen performed, just to let your brain adapt itself to seeing the words in written form, and to get used to looking back and forth between the text and the annotations, without needing to worry about losing the plot.
I can understand this argument.

The term "proxy" immediately brings me back to the days of trying to bypass the high school content filters using sketchy foreign proxies…
Where is the trends (#) icon on new Twitter mobile?
Help me figure this out please!

Is it like a secret game cheat hidden until I do a sequence? Like say find and follow someone who has a Hermit The Frog on a bike profile pic, tap it, long tap it, tap it, tap it, voila!

Is it just temporarily disabled until something is fixed?

No room for one more icon on that neat top bar?

Am I a B case on a A/B testing project?

I really just need to go with the flow and install the app?
No experience with tractor DRM.

All those things sound like good ideas to the mind of a non-farmer.

Fiber in rural areas but not in the city! Think I need to move.
My thought is downvote, but it will take away from your karma (-1 point). The only way it wouldn't or you get that point back is if you left a comment, possibly responding why you downvoted in the first place (factual, wrong, not relevant to the discussion, etc). Quid pro quo.
All VPNs are proxies, but not all proxies are VPNs!
Reddit seems pretty adolescent in general. What comes to my mind when I think of it is cartoons/comics, video games, celebrities and mainstream news. So does warm and fuzzy mean they are catering to a more mature audience or what?
Thanks for the pointer to Bruce Clayton, I'll have to look him up. I don't mean to come across as being against having the gun - I actually agree with your "kind word and gun" idea. I just wanted to get the point out about how much relief can be accomplished with that money because I think it gets missed in a lot of discussions, and of the two it seems a lot more likely to be relevant in a real disaster to me.
<rant>

If you google, "Warren Buffet Investment Advice", you will get all kinds of crap: syllogisms, general life advice that he's said, etc, all out of context.

It never ceases to amaze me that when people trot out his investment advice they get very in the weeds with Security Analysis, treating any investments as though you own the company, paying careful attention to what book value means in specific contexts, and on, and on, and on.

What fails to come up, very often, is the very specific advice he has laid out time after time for most average people: buy a passive index fund that tracks the S&P 500, Vanguard's product is probably the best right now, invest 90% of your retirement in that and the other 10% in a mix of A-class bonds. Personally I think, early in one's life, you can skip the allocation advice and go full 100% S&P 500 (especially given how crappy bonds are right now), mixing it up later in life.

</rant>
This ignores some critical context.

For one, the worst behaved subreddits moderation wise are often the "default" ones, meaning the ones that everyone sees when logged out. They have a favored position on the site, in other words. Every user is subscribed to them by default, which also means their content is going to wind up on /r/all more often.

Also, once a subreddit gets that size, crap mods can get away with a lot more because the volume of submissions make it hard to tell that something untoward is going on. And the people who pay attention (perhaps a few thousand on a good day) will easily be drowned out by those who do not.

Community forks happen, but never at that level. The deck is hilariously stacked towards the entrenched communities.
Yeah, my personal password manager is mostly that but with salt and other shenanigans, the algorithm is :

bytestring = hash(master_password + url_domain + random_salt + persona)

password = translate(
bytestring, alphanumeric +
special_symbols_required_for_the_site
)[:max_allowed_length_for_website]

print(password)

storage[(url_domain, persona)] = (
random_salt,
max_allowed_length_for_website,
special_symbols_required_for_the_site
)

The advantage is that it's safer than password managers that store your passwords or require you to send your password over the internet, and it's more flexible than managers that do not store any information.

The problem is that you need to copy your database file to each device you use , that can be specially frustrating when I need to use android, for instance.
Ethanol (or Methanol) can be stored for a long time. (If you want to drink it, it even gets more expensive the older it is...)
That'd be a fair position to hold.
My Gerbils
Sorry. I did not see your comment first. Open the (new) Settings app, then click on Network & Internet and then usage details.
Groupthink is a problem per-subreddit. Don't like it? Invest some time in finding better subreddits.
And they take their rules to the point of absurdity. I've seen many occasions where a commenter had direct personal experience with the event being asked about, and provided proof they were whom they said they were, but their comment was still deleted because "no personal anecdotes."
Vanguard, VFINX. Keep it simple stupid.

Study after study has shown how atrocious human beings are at actively managing an investment strategy. You can, literally, count on two hands the number of people who have consistently beaten the S&P 500 over a period longer than 20 years (which is the time span that matters when you're trying to beat it). Why would anyone think they were one of them?
Generally its the upper 32k ports that are ephemeral, and if your churn more than that per minute in connections, you'll run into that TIME_WAIT issue.

Hacky way to get around that is to enable tcp_tw_reuse which will let you reuse ports, but it can be risky if you get a SYN from the previous connection that happens to lineup with segment number of the current connection (which will close your connection). Shouldn't happen often, and if you can tolerate a small amount of failure is an easy way to get around this limit.

[0] http://blog.davidvassallo.me/2010/07/13/time_wait-and-port-r...
I was briefly confused but gathered that. The only other confusing thing was that mpu works with major players in high-assurance per a comment but didn't respond to only comment (mine) about applying assurance tech. Wasn't bothered but didn't expect it either. Unusual.
"momentum"
It is possible to have ads that require no js.
>We're not trying to be a safer Reddit, or even trying to be a direct Reddit competitor.

Then whom do you see as your direct competitors?
Cloud computing in China is a total shit show:

1. Go with a foreign cloud provider which has horrible latency thanks to the Great Firewall, and could get permanently blocked any time at the whims of the government.

2. Go with one of the big Chinese tech companies (Baidu, Alibaba and Tencent), where it's almost guaranteed that they will steal your idea/code/data, clone your product, and rely on their massive size and network effect to destroy you. They didn't get big through innovation like Western tech companies; they got big by stealing and government-backed monopoly.

3. Go with a smaller Chinese tech company that has reliability problems and could go belly up at any time.
> thread management in general

That's the beauty of it though; the JVM web server does the thread management so your app code doesn't have to deal with it at all.

> avoids entire classes of problems (like shared state)

Shared state is an orthogonal thing though. You can have shared state in Node or go stateless in Scala. You can have race conditions in either. Node prevents the simple `shared.x = shared.x + 1` problems, but can't ensure anything across callback boundaries. Scala attacks this by making everything immutable by default. Either way, there shouldn't be shared state in a REST app anyway.

> "async call stack"

That is pretty cool. Actually once Javascript gets async/await added to core, then Node could be pretty viable.
Be careful that you don't bring about the apocalypse as you try to immanentize the eschaton.
To me it seems our ability to preserve and share knowledge is far more important for our intellectual pursuits than the individual brain is. E.g. it took hundreds of thousands of years for someone to think up the number 0, and then it spread like wildfire (after the authorities stopped resisting).

What I find curious is that parrots can vocalize at least as well as humans, they show some pretty solid reasoning ability, their tongue is practically an opposable thumb, and yet they don't seem to have developed complex spoken language or technology.

I wonder what's missing from bird brains that would help them with language. Actually, I just had a flash of memory about some part of the brain involved with putting ideas into linear sequences, as we do with words. Maybe that plays a part.
Near the top. They were informally audited by a university research team, and the few issues they found have long since been corrected.

The fact that it is offline, open-source, and (on Windows) uses the standard Win crypto libraries gives it an advantage over Lastpass or 1Password.
Now that Oakland is getting so expensive, it'd be interesting to see where people in the bay area spill over to next. Berkley? Hayward? Daly City? The way these things work is that now some broke 22 year old with an art degree (and I mean that in the best way) is now realizing that he can't live in Oakland. Where he decides to move to will be very interesting and will probably end up creating millions, perhaps billions, in real estate value.

This obviously presumes the growth rate the bay area (and many urban centers in the USA) will continue.
Have you used eventlet or gevent? I thought they were game changers. Gevent has been working very well for me for quite a while, without callback hell.
And the ability to mute future notifications from apps that have overstepped the bounds of good taste.
> Humans have more neurons in this region than any other mammal by far.

Except dolphins, of course. https://en.wikipedia.org/wiki/List_of_animals_by_number_of_n...
> But from what I hear from others, apparently people actually think about things with words, and which words they have both enable and limit their thinking. I still don't exactly know how that works, but apparently its common?

This isn't common at all, but the belief that it's happening is common.

What's actually happening is that people's thoughts automatically trigger language production, and they hear the words, the output of that process, in their head. But the thought comes first and the mental words are a side effect. Imagine your brain having an internal narrator who constantly reads your thoughts and shouts them out as formed sentences.
He didn't say negative comments were always wrong, he said to not let them get to him.
The term you're looking for is actually negative externality. I am very familiar with the subject. I know it well enough, in fact, to know that if you're going to refer to a "market failure" you have to actually be discussing the market. Your example is dependent upon a commons and/or publicly owned enterprise, ie. not a market.

Very basic logic here.
Could you please elaborate on why async would be preferred than a task queue solution (would it)?
Right. And when my first thought is "WTF?", it helps to think "At least I'm alive!" ;)
Engineer salary negotiation: from $120K to $250K offer
Does anyone know if any ES2015 features are optimized yet?

When last I checked, just having an unused `let` statement in a function made V8 bail out to the slow compiler, making ES2015 off-limits for anything nontrivial. But that was some months ago.
Kubota Assist Suit RAKU VEST ARM-1D
> I wish that there was a site with an hn-level of moderation that covered issues like bikes, local news, etc.

You mean like Metafilter?

http://lanyrd.com/2011/sxsw/scrdr/
The drama ebbs and flows on reddit and then settles for a bit then up again.

Maybe it's my imagination but in my 9 years there it's like you can almost see the next wave of new users arrive. It's subtle at first but you soon see the common culture of that age/culture group, cohort or whatever it is.

What I don't like is the new (~6 months) locking of threads I think that's a cop out of moderators or the admins. You don't like the conversation? Slam the door shut.