skysight-inc/HackerNews huggingface dataset:
I'm a tech savvy person and still don't use a pwd manager. I have a base password with extra stuff added at the end that I can figure out from the domain name. I want to use a password manager but it seems to me to not be easy as you claim.

It's nowhere near as easy as you hand wavingly claim it is. Last time I tried the one everyone said to use had been bought and everyone was saying don't use it, but the other alternative didn't work on mobiles (or something, I forget) properly. I even had one installed for a bit but it never seemed to work so I gave up.

It's still a broken ux with a non-trivial cost of using it.

I know I should use it, I know when I get hacked I will regret it. I do use 2 factor for the important stuff, because it works and is actually easy, unlike the bolted on clunkiness of password managers.
However, this leave people still exposed to diseases where the thing that maybe helps you does not cost $10,000 but $100,000 (not uncommon) or $1,000,000.

For instance, recently I read about carfilzomib or sipuleucel, both cancer medicines; $100,000 doesn't get you there yet.
The nest cost $250, insulation cost 10x that, and new furnace is 40x.

I agree that insulation and upgrading the home would produce the nest results but my point is that the data is useful, not useless.

I could shut my heating completely and save 100% but that misses the point. What I did was turn on the heating in the morning to a temperature that was comfortable and then shut it off so that by the time everyone left for work/school the temperature would still be acceptable but on the lower bounds. That saved about 45 mins of heating a day.

Overnight as well I could see how my furnace behaved and tweaked based on that, etc.

The key isn't just the nest but the other temp sensors so I have a complete idea of what my houses characteristics are.
ES2016 is already mostly compatible with major browsers - is it not?
I don't think there were ever 2 steps in this account recovery flow. There seems to be only 1 step when initiating a account recovery: provide the code sent to your phone.

A 2 factor recovery flow would be 1) verify an email that was sent to your recovery email address that triggers 2) this account recovery code sent to your phone.
Or that he's not polite enough to be considerate.
Hi @vonklaus,
thanks for the feedback. This was actually not intended to be an "article" but more like an answer to a targeted question (I am the author of this little write-up). Basically, someone asked me this specific question some time ago (I think via email), and I answered it with this person's background in mind. Then, I generalized it a bit more and added it to the FAQ section in the GitHub repo in hope that it is also helpful to others. It's really more like a quick overview, idea, explanation in contrast to a fully fleshed-out blog article :)
HW/SW co-design is supposed to go like this: Never do anything in HW if you can do it in SW. Because HW is expensive and dangerously set in stone. Because SW can be as complex as it needs to be and can be easily fixed / updated later. If you can't do it in a timely manner in SW, add the minimum safest HW to enable things. That's it.

Except for cosmic rays flipping bits, well designed processors aren't inherently unsafe. People and the software they write are unsafe (guns don't kill people...). Why put any SW onus on HW where it will almost always be more expensive and less flexible?
For the first time a country has invested heavily in space mining
I'm not sure why people would have thought that Meredith and Andrea were biased. All they said was "Jacob was accused of sexual harassment", and they said it before the Tor release confirming exactly what they said.

On the other hand, the http://jacobappelbaum.net/ site is clearly biased.

If the only thing you can see is that all of those are women accusing Jacob of sexual harassment, you're probably sexist.
The most important piece of the article:

> Questions have been raised about who funds the Google Transparency Project. The CfA declined to say, and this prompted suspicion that it is bankrolled by rival media and internet companies keen to check the company’s power.

If you're going to be a transparency-watchdog, it helps that your own organization remains transparent as well.
Hey Rob any idea why VSCode gives this warning on export class for Components?

>[ts] Experimental support for decorators is a feature that is subject to change in a future release. Set the 'experimentalDecorators' option to remove this warning.

When using the angular-cli,
My recollection was at the time it was not better, just different. There was no reason for a proprietary keyboard, either. Amiga's refusal to work with commodity hardware meant that it was doomed - it wasn't big enough to force the issue.

If I recall correctly it couldn't read standard floppy disks either, but I might recall that wrong.

Microsoft did Apple a huge favor by making the Z80 Softcard for the Apple II.
I always substantiate any of my one-liners. In this particular case see https://news.ycombinator.com/item?id=11836930 . Few things are more deserving of "snarky" treatment.

The other two (chronologically disordered) examples are a product of my indignation with an obstinate person who wasted people's time and, brazenly ignoring their arguments as well as my own, continued arguing FUD.

Bottom point: I am not malicious and I contribute. So I'd appreciate if the trigger was not pulled on me even though it's probably the only way to get one's comments removed from here :-/
Depends on how "transmit only" is done. If it's using the equivalent of UDP and no encryption of the data, then you're likely correct.

But if the "transmit only" has anything that receives data - even just ack signals for what's sent, let alone something to negotiate encryption - all bets are off. :(
A lot of opinions about error handling in this thread, but I don't see the main thing mentioned: difference in requirements of different projects and subsequent difference in technical strategies.

Some applications need to fail fast, fail hard, and restart automatically.

Some applications need to present any failure or error condition to the user and give him power to decide.

Some applications need to be restored to some sensible state at all cost.

Needless to say, all possible error handling strategies, from C return codes to Java checked exceptions, have their fair use cases; discussing which one is better and which one is worse without specific project in mind, at least as an example, is completely pointless.
You can also get away with podcasts and audiobooks, which have really prevented me from seeing it as a simple waste of time.
See jcrites comment here https://news.ycombinator.com/item?id=11842726 for an example where neither the code nor the data has a bug. Broken sockets are simply a part of distributed systems the code has to deal with.

(If you feel that "the network should be reliable" is a valid answer, see: https://en.wikipedia.org/wiki/Fallacies_of_distributed_compu...)
Show HN: Craigslist-rental-market – Show rental prices in U.S. housing markets
I was thinking about the concept of workstations connected over the network protocols, email, remote printers and file servers when I wrote it.
If that would be what alpha means, there's no way to indicate non-feature completeness...
> "I figured if it was coming from you it would be real."

You should set up a strict DMARC policy (p=reject) to prevent people from spoofing your email address. It appears that you have not[1].

Additionally, you should harden your SPF record: change ~all to -all.

[1]: https://dmarcian.com/record-tools/azinman.com
> Lets be honest here, the 'minaret' issue is extremely minor one.

Not at all. It violates the very idea of freedom of religion. I doubt a ban on building of churches would be approved and this shows that a more popular group can (and does) trample on fundamental human rights of other smaller groups.
> It said Facebook ads are based only around information shared by members on the social network and their net surfing habits elsewhere.

so...cookies?
I seem to recall there were some services that charged a one-time small fee in the late-90s / early-2000s basically for that reason. But in the past 10 years most seem to have moved to requiring a mobile phone number as the hurdle instead. The idea is that it has some of the same deterrent effect for bad actors, since coming up with a steady stream of unused mobile numbers costs a nonzero amount, but produces less sign-up friction for legitimate users.
This is a pretty interesting find, and makes sense.

As someone that struggles greatly with loneliness -- what kinds of systems have people found to address it as an adult? (Presumably there's an interest on this site, since this article is here.)

I've for years found it to be an utterly crippling problem that I just can't really get on top of. I scrape by by having acquaintances at work, and trying to stay in touch with remote friends (which works quite badly). But I haven't been able to find a good balance with it for many years.

Sometimes I think maybe I'm trying to solve the wrong problem, but it seems to be an unnatural state for a person to feel alone.
Social Media De Addiction – Experiment 1
There's a beach near where I live that's littered with thousands of perfectly round, hand-sized stone discs, presumably created by some special wave and/or ancient glacial movement there. I'm pretty sure someone thinks it was aliens, though.
Well, to be honest: Nobody really needs this.

But if this would work flawlessly then life could be just a bit more comfortable.

For example I am laying currently on the bed and the light in the kitchen is still on. Yes, I could just get out of bed and walk over there, but if there would be an easy gui for this is my mobile it would be good because at the moment I am very lazy.

A quite real problem I have in winter is the temperature in my sleeping room. Sometimes I wake up and it is either too warm or too cold and I have to get up and change the settings. Usually I then have the problem that I can not fall asleep again. If I could just press a button, I could turn around and continue sleeping.

So yes, I don't really _need_ this, but my lazy self would love the comfort.
For average people, the best part of the satellite constellation is the regular occurrence of Iridium flares. Worth seeing, at least a few times: https://en.wikipedia.org/wiki/Satellite_flare#Iridium_flares
Dr. Kay, if you're still following... then with singular respect and gratitude for your life-changing work and ideas, I would like to ask you one question.

Is there a good way to use bad systems?

Such as the web, which you describe as a “broken wheel,” lacking even a fraction
of (e.g.) Englebart's vision. Or Linux, which you call “a budget of bad ideas.”
(And no small budget, at that.) Or the iPad (and all common tablets, I assume),
whose interface you call “brain dead.”[0]

What should we do with these things? Are they dead ends? Are they good for
anything? Can they not be salvaged incrementally?

Here in the Hacker News community, where I am happy to see that my enthusiasm
about your work and message is strongly shared, there is yet a huge amount of
energy being poured into the wrong end of the low-pass filter, or, as you call
it, “the world.” I know that we are not averse to learning curves, but maybe
there is too much sunk cost to question what's already “working”? What should
we do?

One answer is to use bad systems to simulate better ones. But—when this is even
feasible—it's always done at the cost of performance, and VPRI's publications
make no secret of that. A proof-of-concept does not equal a product. And at
any rate, most of us are not researchers.

Because of this apparent dilemma, the exhiliration that I always feel when I
hear you speak or read your writing is always tainted with a sense of despair.
Is there any enlightened way to use today's systems (for example, as application
developers), or should all of our efforts be directed at fixing (or indeed
replacing) the systems themselves?

Thank you again, for all that you've done and continue to do.

[0] https://www.youtube.com/watch?v=gTAghAJcO1o&t=28m

https://archive.org/details/130124AlanKayFull

And others. I believe that these quotes are representative and not misused out
of context.
Well if the reports are true, that is also what happened with Longhorn and later on with WinRT vs Desktop, meaning WinDev vs DevTools divisions at Microsoft.
A new city , new friends
The part i don't get in all this discussion is that being alone is a physical thing, but being lonely is a choice, a perception that can be changed subjectively.

If you are feeling lonely, and don't like. Stop. On the other hand if you are enjoying feeling bad, which happens more frequently than most people seem to realize, then don't complain.
He said "My company..." That makes it quite obvious.
Why not Stack Overflow?
although I think fiatmoney is conflating a centrally planned command economy with communism.

Seems like a distinction without a difference, considering that every time a nation tries to implement the latter they end up with the former as an "intermediate stage" of the revolution that somehow never goes away.

In a corporate body, there is no pretense that central planning is a transitional stage. There are a few exceptions like Valve and Zappos, but even fewer genuine success stories where a non-hierarchical structure has outperformed traditional ones in the long run.
I'm also interested in this question.

Here's two things I saw on Jeff Morrison's (Flow author) Twitter:

* http://djcordhose.github.io/flow-vs-typescript/2016_hhjs.htm...

* https://gist.github.com/jeffmo/ef9214ca3acfe76c54a237b5710d3...
I think it's actually quite elegant. The issue is that it always does two comparisons, even when one would suffice.
Sure, but implementation matters. I've long thought that 2 factor via SMS is a sub-optimal solution because it trains you to expect secure login info from a random shortcode SMS number.
I bet it is his HN password as well! I would go ahead and try but nah, not gonna do it. :)
> One person following this pattern submitted an LT proposal alleging that Jake was a US Intelligence Operative. I LOLed. After a few rounds of encrypted e-mail pestering and a few texts, they insisted on being put on the schedule. I did so to appease, as was my strategy at the time, with every intention of pulling them off after they inevitably failed to follow directions. You can go look at the wiki histories for any LT I organized to show this was what I often did with dubious presentations.

This doesn't excuse the level of JA's alleged continued hostility, but this is an example of why, for conference-level situations, talks and topics should be discussed by a group of people, rather than just having one person make the decision. I could see why a talk accusing JA of being an informant might be funny in a close-knit group, but it sounds like people actively hated JA by this time, and this conflict, combined with the paranoia that is probably natural in this field, would add to JA seeing this as an aggressive act of hostility. With one decision-maker who has a quirky sense of humor and/or more laid back attitude, such a talk could seem harmless. But I think if another person had been part of the talk-filtering process, they would've seen the proposed talk as unnecessary antagonism.

But while JA had a right to be angry about the proposal, that doesn't justify harassing Farr, or demanding the private details of the proposer, or obviously, any of the other allegations against JA. Good for Farr for standing up for the privacy of the individual who proposed the talk.
Accidentally... love it.
Well, it depends on the event and the people. Some people are endless gossip and all they care about are what other people are doing. Some people love to hang out and people watch. Which, btw, is a great thing to do if you're alone :D
Managing containers on Mesos with HalfLife2
"Iridium is wiretappable."

Beyond this, it's probably possible to snoop on the location of local targets with some unknown degree of accuracy, even if you can't decode their data payload.
Which one did you try? I've been using 1Password for years and it works great across all of my devices (automatically synced via Dropbox). No affiliation besides being a customer.
I can't go with that. Anders H is one of the most avuncular, helpful and accessible voices out there. Oh and his very verbs twinkle!
A place I worked at did a trial of NeXTSTEP back in the 90's when they ported it to other architectures. I got to play with it on a high end HP PA-RISC workstation...it as amazing.
I was equally slow to fully believe Nick until he posted details (which he did). In general I'll evaluate someone's own claims on their merit (including personal credibility), but am a lot less likely to base actions on third party hearsay. If any of the rape accusers posts a similarly detailed account with verifiable facts (easier under his or her own name, but still can be anonymous) those can be taken seriously too.

Nick's account isn't the end of the process; it is the beginning. Now you have to evaluate, give the other parties a chance to respond, etc. Not pre-judging doesn't mean never judging.
(in TypeScript)
I have long running data-streams that need to be managed (transformed, filtered, split, merged, etc.) for which observables are awesome.

Promises are like observables light, but often good enough for simple CRUD stuff.
That's yet another moving part with its own error modes.

And I'm not quite sure (without having it thought through) how I would do something like get the URL of the last permanent redirect and correlate it with the original request. I'm sure it's possible somehow, but it doesn't seem exactly straightforward.
>>and it's very rare to have more than a year's security with a lease, even with a good relationship with the landlord.

Huh? Landlords prefer stability as much as tenants. Very rarely will they say no to a multi-year lease. They may want to add the option of rent re-evaluation after the first year, but from a landlord's perspective it is very difficult to find good tenants, therefore the longer those tenants stay the better.
As a counter anecdote: I don't know those people, I "know" Nick and trust him so his story is much more credible than "random twitter accounts spouting filth" to me. Hell, the puellavulnerata account rings too many avoidavoid-bells learned in 25 years of internet to me.

I do not believe in any way that the gender alone can be deemed responsible for your observation. What makes you even think that the same people who you saw alleging those women yesterday are the same who stand behind Nick here?
beside skill level I found there exist also domains of application. Given that programming is applied to many fields, it would be challenging to work with everything, like biochemistry or launching rockets etc.

I had the same questions as you, and I confirm those labels are subjective, so I stopped feeling not experienced enough.
You can find the price online from Lenovo if you buy an OEM battery straight from them, I'd bet it's $100-190.
If you run the numbers and assume a market rate of return on most investments, it's very hard to turn the relatively small amount of money a down payment is into a net gain after 30 years.
Askbot: https://askbot.com/
See slide 30 on this Neo900 presentation: http://neo900.org/stuff/ohsw2014/ohsw2014.pdf

Also see the various kill switches on the block diagram (GPS kill, modem monitor, mic not directly attached to modem (so you could probably send fake audio/silence),etc:
http://neo900.org/stuff/block-diagrams/neo900/neo900.html

See slides 16 through 23 here for some details on the modem/audio monitoring/separation: http://neo900.org/stuff/cccamp15/ccc2015talk/talk.pdf

Would this meet some of your criteria? If there is something missing you can discuss with the people involved (on IRC usually): http://neo900.org/contact
Depth Security | Kansas City, MO | on-site | full-time

We are looking for experienced web application security consultants. Professional developers and systems administrators with no specific security experience will be considered provided sufficient aptitude and interest is displayed. Extra credit will be given to those who can demonstrate experience assessing both web & mobile applications. Applicants with published research (vulnerabilities, exploits, tools, etc.) will be preferred over those with none.

Benefits

* Competitive salary

* Performance bonuses

* 100% company-paid insurance premiums (individual and family)

* Low-deductible medical insurance

* Vision and Dental insurance

* Generous research hardware/software budget

* Relocation assistance available

* Lunches paid for by company (employee's choice of restaurant)

* Casual work environment

We have fun breaking things, and then helping fix them. Work with smart people in a smaller security shop (no project managers or 'suits' yeah!), everyone here is a hacker. While we are currently looking for web testers, we offer a wide range of assessments that you will be able to rotate in on or work with someone experienced to learn new things. One of my personal favorite things is being able to learn from the guys that focus on mobile and internal pens, you can grow your skillset and career here!

Interview Process: We just want to talk shop!

Email: rpreston (at) depthsecurity.com with your resume and we can set something up.
We are passionate about security and hope you are too!

https://depthsecurity.com/ If there's a way in, we’ll find it.
In all fairness, I'm sure there was a day when many people said: "A remote for the TV--how lazy can you be?" (Admittedly there were only about four channels or so then.)

>If I could just press a button

The more likely model is to go "Alexa--turn off the downstairs lights."

Joking aside, there's probably some confluence between consumer IoT devices and natural language recognition that brings some things into the lazy but genuinely useful range. Unfortunately, most of my annoying home tasks fall into messy physical world interfaces (do the laundry and put it away) that don't really lend themselves to digital automation.
Well, I just saw a talk about TypeScript 2 and it felt to me that he was belittling JavaScript.
The advantage of TypeScript is it emits idiomatic js. Decided that optional static typing is more trouble than it's worth? Fine. Bin your ts and keep the js. The code is totally fine. This is the attitude our team adopted when we first tried it out back in the 0.9 days. We didn't go back. You won't want to either
I think it is yet another point showing how broken our immigration / vIsa program is. This sort of blackmarket style operation would never have existed in the first place if the talanted non US (calling them aliens seems dehumanizing and encourages the us vs them mentality) workers could easily and affordably get permission to work here
As far as I understand it there was no decision made by Nick except when the organisers intervened. The lightning talks always were chaotic. Nick wrote that the more risky presenters usually did not show anyways, at least that's how I understood it. I think it is awesome to have the LTs not vetted by commitee but being open for anyone who adheres to their format.
Except I think you are assuming the renter is starting out with a large cash reserve they can invest and the owner doesn't have that at the start and must accrue that value over their mortgage period.

To compare correctly you must assume both people are starting the same
I was on the 2007 CCC Camp trip that Nick Farr organized. I do remember Jake being an asshole on it, including making many inappropriate sexual comments. Since then, I have heard Jake trash talk Nick Farr quite a few times. Jake's been on my "avoid" list for a long time.
It is there for a reason. Cancer should not be treated at all. Instead, people who have a problem should kill themselves and therefore die on their own terms, instead of slow and painful degeneration.

What is the point of living anyway?