skysight-inc/HackerNews huggingface dataset:
Barriers to entry are high for a mobile network, but probably pretty low for a ridesharing app. If Uber and Lyft raised their fares massively, then they're leaving a wide open opportunity for someone else to come and undercut them, even if just for a short time. There might be some 3rd app waiting in the wings to pick up price-sensitive riders and drivers whenever the "cartel" puts prices too high.
My guess is to stop copying and pasting from Desktop\passwords.doc.
I've had this setup for about a month on my primary email, and it is working flawlessly. Even when I had to reboot the server, I was able to bring everything back online quickly.

I am keeping a lower priority MX dns entry pointed to an independent provider as a failover, but this is standard practice, I believe.

What I really like about the docker-mailserver image is that it has no database and that it is designed for simple updates (that is, docker pull && docker-compose restart).

Rainloop is also new to me (I previously used roundcube) and again I am very positively surprised: it works over imaps, so multiple accounts can be combined under a single login, it supports 2FA, manages both plaintext and html, manages your contacts, it supports openPGP (still in beta, I've not tried it yet).
Wristband that measures alcohol levels wins US competition
H&R Block Online also does this, and is the primary reason that I switched away from them this year.

Ironically, I switched to TurboTax, but didn't have the same issue because the login is done automatically via my bank login.

Does anyone know of a decent online tax app that doesn't disable the pasting of passwords?
Antipersona: Use Twitter from the perspective of another account
Six nifty ES6 tricks
> inspired by Turing machines

This is the very spirit of ad-hoc engineering and trial and error: trying some architecture out because it resembles / has high-level connections to some other unrelated concept.
https://en.wikipedia.org/wiki/Generic_antecedent#Approaches_...
Wow qmail! Instant confidence.
If this is not an inside job I'd be extremely impressed and interested to hear how they did it.
Key is "unwilling". Hackers must also remember some companies willingly pay for this info.

Based on the numbers I've seen doing contract work for a big blue chip in the UK, you could see it as an opportunity to sell penetration testing services. If this one is unwilling, there could be 5 more willing to pay a good sum to have these sorts of flaws identified and fixed.

I get the feeling a lot of pen. testing companies run a standard set of checks for vulnerabilities. The report I saw was simply a bunch of metasploit results. They were charging some many thousands for this. Offering above and beyond could be a good opportunity.
It's just an alternative to using "he" (or "they", which still feels a bit awkward) to describe a hypothetical person. Either flip a coin to choose their gender, or always use "she" to counter-balance (a little) all the times writers default to "he".
צימרים בנהריה – PASTORALI
That last sentence is the real piece of news here - the absolute core of the issue: Nigerians have been doing extremely well at Scrabble by applying non-greedy strategies. It seems obvious in retrospect that a game like Scrabble is not played optimally by making greedy choices.
Software doesn't have to be safety critical in order to do harm. Security vulnerabilities, data loss... these all cause harm to the public interest. Whether by snooping, lost profits, online harassment -- these are problems we would be seeing less of if software developers took the view to construct software with fewer errors in the design stage.

We simply do not because the practice of writing high-level specifications in the form of mathematical models or proofs is not common. I think the tools have become sophisticated enough and the maths approachable enough that it should be and can be used in the construction of non-safety-critical systems.
Do you mean instance where the release number be the same, as in 1.77 vs. 2.77? Because that likely won't happen, as due to the different compatibility these should be different releases. Or do you mean, if the release numbers are reasonably close, as in 1.77 vs. 2.78, and then maybe 1.79 again?
It is possible, in theory. That however assumes that the property of all those machines and product is public - that they are owned by the collectivity. And that this allows to run them efficiently.
But even if this is possibke, it's the transition period between the current private property system and a completely collectivist one that's scary. Because at the moment almost all means of production are privately owned and run for profit. AIs will both skyrocket the profits while creating vast amounts of people completely unable to survive with their wages - and therefore to buy any products. At some point the system has to collapse and become a sort of communism, but I don't think it will be a painless transition at all.
1. In case anyone doesn't know who Noel Gallagher is, he's an attention grabbing narcissist who broke up his own rubbish derivative band that pretended to represent a part of society that doesn't actually exist.

2. Did you just try and make a credible argument by referencing Noel Gallagher spitting incoherent crap at a music tabloid?
Even with regular working hours, it's not without problems to record everything that happens during the shift on video. Starting with bathroom breaks.
No doubt some self-proclaimed "security expert" did it long ago and it got picked up by a few places and the rest is history.

There are many such anti-patterns around like requiring "complex" passwords with upper, lower, special, etc. characters yet do not work with >16 characters. Something that pisses me off to no end is Microsoft not allowing spaces in their passwords for some unknown reason.

If it were up to me I would have one limit to passwords, length. A minimum of 12 characters. Sure you will get some moron using aaaaaaaaaaaa but they are the kind of people who will find a way to use an idiotic password no matter what.

The reality is passwords need to die. We should be encouraging pass-phrases.
Docker Cleanup Scripts Comparison
Google (youtube/chrome) says "stats for nerds" and nobody cares, I don't think anybody really cares about being called a nerd.

My friends and I often refer to each other as nerds and I hear it's quite hip with the youths these days.
We also recommend AES-256 being preferred to AES-128 in Mozilla's modern configuration. From the rationale section:

AES256-GCM is prioritized above its 128 bits variant,
and ChaCha20 because we assume that most modern devices
support AESNI instructions and thus benefit from fast
and constant time AES.

https://wiki.mozilla.org/Security/Server_Side_TLS#Modern_com...
Right click inspect element. Edit the value attribute pasting your password... Should work
This is a write up by BAE Systems Applied Intelligence (and possibly not an official one, not sure), previously known as Detica, who were acquired by BAE a few years back. They have a consultancy side and a security side.
You're right about that. Much of what I was taught when I studied CS involved learning by implication. We would be shown how to do something, and were supposed to figure everything out after seeing how that was done, while getting on with the next five things we were seeing demonstrated.

It was more like teaching a child to tie a shoelace and then assuming that he can work out how to tie all the different types of knots needed on a sailing ship than it was actually teaching.
Atomic Scan – Container Vulnerability Detection
Because it was developed for Google and they what they care is speed not security or client side certificates.
But it doesn’t even matter if someone puts the wrong password in: if they get it wrong, you just nudge them to reset it and everyone’s happy.

Getting email address wrong is far more important, but far fewer things do the same doubling up on that.
Philosophy in the Face of Artificial Intelligence [pdf]
What was Algeria's role in the conflict?

As for the other arguments, you don't get to claim a territory just because you think you can run it better. It doesn't matter if Morocco has made improvements in the region if they're illegally occupying the territory, which is certainly what is being suggested by the article.
It goes in that direction with https://ghc.haskell.org/trac/ghc/wiki/Backpack
> Among that field of upstanding people, who do you imagine this exploit could be sold to without clearly and knowingly contributing to massively unethical operations?

I imagine state actors as the most likely buyers and way worse offenders, than organized crime. In the world, you believe in, it might be unethical to sell to them. In the world, where the state actors are the enemies of the people and the enemies of each other, it might not, but passively not doing anything might be.
Code generator for bit permutations
I use this future so that email agregators (bots) cannot reach my web site. So far 0 spam :D
A side question: why would a normal person paste password in the password field? Its either autofilled or he types it in. Only case I see this happening is when you get the password in the email from website and are asked to enter that, which itself would be a bad practice.
"Cling is capable to parse everything that Clang can do. In addition, Cling can parse some interpreter-specific C++ extensions."

Punchline!
> this country of 500 languages
That caught me by surprise, until https://www.ethnologue.com/country/ng/languages
Not if every case in which it does would be scrutinized even more than usual.

Body cams are good but they like any other camera fail often at capturing the context, they work and fail at the same time since even the slightest sign of hostility and lack of cooperation can and is used by the police as justification.

The problem is way beyond what cameras can do, if you train your police to be bouncers rather than social workers you'll get violence.
Author here, curious about your feedback and questions, so shoot!
I'd say Teh Carmack is up there.
Because I'm using a password manager.

Why shouldn't normal people use password managers?
Sure, but anecdotalmoly I'd guess 95% of my false positives are caused by my being cautious early, not by recharging without hitting 80%
How Facebook warps our worlds
In my experience classes that read literature like that are not to teach you to write better (at least not the direct goal), but maybe to explore the genre or author and write or analyze her.

In my university the writing classes were your usual "this is the theme/subject for the whole semester, I'll give you prompts for you to research and write about".
Download Allo and Duo Apps and How to Install with Xposed Module
OneCore to rule them all: How Windows Everywhere finally happened
Uber is tracking my battery status, all the time
I looked into the HTTPS-trafic from the Uber-app (with MITMproxy) and it is one of the few apps I have found

that is sending my battery and charging status on a regular basis:

"battery_status": "unplugged",
"battery_level": 0.73,
I'm fascinated because I should like Radiohead, because they do the kinds of things I'd usually be interested in - experiments with Max, and so on. And clearly a lot of people like them.

But I just can't stand the music. To me, it sounds like the artistic equivalent of wet grey cardboard.

I wish I could hear what people are hearing. But whatever it is, it's just not there for me.

Edit: To add, I've long suspected that there's a weird imprinting process in music. You literally imprint on the music and bands that affect you emotionally when puberty hits. To outsiders it looks like a generational thing, but in fact it's more physiological - your idea of "good music" literally gets burned into your brain, and triggers a more generic set of "this is good music" neural pathways that everyone shares.
Let me be the first to say: moneytile!
"This magazine article is only available to paid subscribers"
I know this is technically possible, but I've never seen it being used. This is definitely not the reason why so many sites disable pasting.
My wife is going to leave her job almost exclusively because of this open office sweatshop layout. She's coming home noticeably more stressed and tired even though she's working less hours and easier work than her last job (cubicle).
It only stops the pasting, not the copying.
Bill Clinton needing short victorious war to clean his image because of the Lewinsky affair is better reason too. If the ones you mentioned were good enough - Rwanda would not have happened.
Using newer cracking techniques[1], pass-phrases are as quick to crack as many others. I honestly think password managers should not exist without the ability to randomly generate new passwords.

1. https://hashcat.net/oclhashcat/
Is keeping a plaintext password file worse than forcing users to use a password that's easy to type and encouraging them to use the same password everywhere?
Nettoyez Votre PC Avec PC Decrapifier
I dislike this. The reasons I like semantic versioning is that it encourages things that I consider to be good:

- releasing features separately from bugfixes

- releasing backwards-compatible new features

- releasing bugfixes for older releases (this one is more optional)

This versioning scheme seems to remove all of that just for the sake of simplicity - I don't see the benefits.
Almost nobody is using voicemails, where I know (Czech Rep., Slovakia, Spain, Hungary) - it used to be the default (voicemail is on) to get charged for the calls into it, but I think it is not even so anymore (because it was too annoying for the users that the companies had to change it).

It rings for some time and then you get some "the user is not available at the moment".

Sometimes I really wonder how the US tech is stuck in the past (while generally is not, of course).
Yes. Cryptocurrencies remove the needs for banks in the first place, so you're not vulnerable to a banker/politician running windows, inflating your currency, etc. Vulnerabilities of internal bank networks are rare, most of the risk lies in the e-banking frontend. Fiat banks running on a blockchain indeed could gain from the security properties in many ways.
I would expect all of those to fall in line with systemd soon enough...
Eh, from the article it's clear it's really a "rack management strategy", not a "short word strategy." An intense rack management strategy leads to more short words than you might expect, but does not rule out long words in certain circumstances.
I've resorted to selecting the field, pasting into Quicksilver [1] and using the "Type Text" action to get around these restrictions.

[1]: https://qsapp.com/
I like this… turning a (let’s just call it) “fail” into the “breeding ground of something new”.
FFS, we are not going to beat Windows by recreating it!
The Hidden Power of Humble Interfaces [video]
I also find it annoying when sites make me type my email twice and won't let me copy-and-paste it the second time - I know my email address and can tell by looking at it if I've typed it correctly, I really don't need to type it again to prove that I can type it.
It might discourage people from storing their passwords in plain text files and force them to memorise it.

It adds to the image that passwords are something special and secret if you cannot use basic functionality.
I still don't understand how this has any security advantages over just sending code. You are sending code, just shoehorning it into a serialization format.
EFT used to go down at the store I worked at weekly midnight Monday morning for maintenance for a few hours.

Processing them manually was the only option.
Passwords are entered twice because you can't see them. You could make a mistake and not see it. People recently mistakenly assumed it's "because your password is important" and have consequently doubled the email address too.

I so hate places that make me write my email address twice and disallow pasting, I'm not retarded and it's my own fault if I can't spell my own name (or in this case, email address), especially if I copy-paste it.

You know what? Why don't we make every field double before someone typoes their address and ships it to the wrong place? That'd be such a bad customer experience!
The price will go to zero gradually. It's already doing it - it used to be that you had to work for a several months to buy a shirt. Today you can do it with a several hours of a minimum wage, and in a "scary" future you will need to work for a several minutes.
Show HN: Doctest – C++ single-header testing framework
In-Q-Tel
Driver error kills about 33K people a year in North America. That's how freaking bad this "software glitch" would need to be.
The difference is that if you're anonymously mailing ants to a person you're doing it out of malice. The bad person is the person directly responsible for sending the ants out.

The company doesn't want to mail ants to the wrong people, but they have no safeguards against it either. They're not acting out of malice, but they're peforming a malign action anyway. They're relying on your good spirit to ensure the ants end up in the right place.
That's why some jurisdictions implement "guilty until proven innocent" against their police force, making turning off the camera (or "not noticing it just broke") and proceeding to beat someone up a rather bad idea.
Experiment and Scandal
SEYAHATLERİNİZ İLE İLGİLİ YAZILAR VE VİDEO GÖRSELLERİ İLE PARA KAZANMAK
You might, plenty don't, and I have the bounce backs to prove it.
Was there a historical reason about JavaScript on other pages pulling what was in your paste buffer?
For sure in an ideal world all users would have a password manager that generates 60+ character long passwords that are unique to every service but sadly that probably won't happen for a long time.
Git is the worst piece of software I actually use. It is impossible to use safely and without headaches unless (a) you only do the same, simple things every time, or (b) you're an expert. And yet, pretty much all programmers have to use it every day.
First there's a slippery slope there. You presume that all menial tasks will be taken over by AI or robots. You also assume that some or all people who presently perform these menial tasks are not smart enough or capable of performing tasks beyond the menial ones.

The problem I have with that is that economic and political forces often keep people, intelligent people, in menial jobs for no better reason than circumstance. There are plenty of smart, capable people with real passions for music or mathematics who are stuck filling forms in an office because they need to a job to pay the rent and bills. There are many ways they could have ended up at that job.

But if they were given the opportunity to be free from that circumstance, what do you think they would do? If the economic output of the region is the same regardless, does it matter if they do nothing?

I have a belief that people will find more productive things to do that they previously never could.

> I, personally, think that we have to accept that there'll be a world where not everybody will be able to have a job. And we should prepare for it.

That's what I meant when I suggested we would need to shift our economic models away from the ideals set out by Max Weber. Criticisms about the formation of capitalism aside it traded serfdom for indentured servitude. It allowed us to transform our world and build great things... but I think it's time is nearing an end.

But yet the greatest opponents to change are those with the most to lose. And they have quite a lot of money and power.

update grammar.
More or less. At least 4g. There's tens of millions of people willing to pay the current prices so they don't go down.
Go with Clojure.(Most Productive Language on JVM)

It is designed for concurrency that you will need when designing live streaming web app.
$12M stolen from 1,400 convenience store ATMs across Japan in 2 hours
(Note: I do support AES-128-GCM, and don't recommend doing what the author of this article did.) That said:

According to my webserver logs, I see <5% of traffic being TLS 1.0/1.1, so going TLS 1.2 only wouldn't (in my case) exclude many people. By recently blocking only 3 IP addresses (unfriendly bots), I calculate an expected reduction in TLS 1.1 usage of about 85%. So now I expect TLS 1.1 usage to plunge from about 1% to ... less than 1%.

I encourage everyone to measure their traffic, and take some time to consider how important their TLS 1.0 and 1.1 users are. If you're a business, what percentage of sales are from TLS 1.0/1.1 clients? What's the ratio of good:bad traffic? And the same questions for 1.2. Measure!
I always feel like this is protecting against the wrong userbase. A user who is advanced enough to want to copy-paste his email is not the same user who lacks the skills to type it correctly the first time
Idris[1] already has a working system for this, and it's type system is more complicated (it has much more support for dependent typing). It allows this principle for regular function names as well.

[1]: http://www.idris-lang.org/
Same here, I started listening to them after The Bends was released. Nowadays I can still appreciate The Bends and Hail to the Thief. The rest is just too much... Wailing I guess. They are still a good band, but I guess that I have outgrown them.
non-embryonic
EURUSD: Maintains Downside Pressure but with Caution
Is it bad practice to get your password in an email? I thought that's what happens when you reset your password
You could say the same about gambling, loan sharks, and minimum wage laws in general. We have these laws to protect people from themselves. We aren't all rational decision makers, especially not those of us who are desperate.
I use m.uber.com - I am almost certain it does not have this permissions ability. Bonus: it works on desktop too.
I've been resisting everyone telling me to move to Austin. I never really understood the hype even when all my friends went to UT. It doesn't seem to have the bones to become a major liveable city. Certainly a young professional prifessional can have a good lifestyle downtown but as far as raising a family ... meh. Too hot, limited economy and tech sector there has been untested by a downturn, not that cheap anymore, and Texas politics.

Now, where do all the open minded slackers go in America now? Austin, Portland, Venice ... these places aren't really giving that vibe anymore
I think the problem here is that the hacker's "responsible disclosure practice" never filtered down to a part of the organization that was in a position to care, understand and respond.

Merely sending a emails and awaiting a response (if that's what happened) is an ineffectual tactic as it depends on a chain of unaccountable people within the org making the right decision about who to forward the email to.
One company offering below minimum wage and you can go to another place

Everyone offering below minimum wage because that's ok now and you are fucked.

I don't think Uber should be allowed to offer below minimum wage, personally.
Dean Food’s Davis Hurled Phone into Creek to Derail FBI
Again no one currently does this atm, and there are no "cheaper and less bureaucratically constricted launch systems" atm to launch these things.

SpaceX isn't ready for these kinds of launches it's not proven enough.
ULA is just a " bureaucratically constricted" as the SLS.

I don't understand why people are proposing to play around with projects that are already insanely risky and hard to approve, we get to send a probe to Europa, which on it's own is complicated enough and now you want to build a whole orbital launch platform around it? Let the industry do it, blow up some stuff in orbit till they make it work, blow up some more stuff in transit till they get things sorted and then lets use it to launch billion dollar probes to Jupiter.
Paypal used to do this, for example.