skysight-inc/HackerNews huggingface dataset:
> I really can't be bothered into using a password manager, so what's the alternative besides reusing passwords?

The alternative is getting burned by password reuse repeatedly until you can be bothered, I would assume. Alternatively, you could cling to the hope that a more secure and more convenient authentication mechanism gets adopted somewhere in the next decade or two.
Any search box where you want to hit a backend server and do typeahead searching.

Edit - for a good example, google use it on their search box.
Oh, so not very frieghtning then.
DNA is an API and therefore can be copyrighted.
They had lots-o-help, but they are the poster children. Er, very old "children", I suppose.
Those interested in Dahl might also be keen to note his career as a World War I flying ace, and then (again as a Military officer), World War II espionage agent sent by the British to nudge the Americans into war. As a member of the British Diplomatic Legation in Washington, DC he gained access to the Georgetown cocktail party circuit, and from there, helped build social consensus among many (including Mrs. Roosevelt) about the importance of an American entry into the War. No need to trust my word for it, check out Jennet Conant's fantastic book on the matter, "The Irregulars: Roald Dahl and the British Spy Ring in Wartime Washington"
https://www.amazon.com/Irregulars-Roald-British-Wartime-Wash...
The fifth paragraph addresses the significance of your point.

I'm skeptical, but I applaud him for making public a very specific and short-term goal that we can all watch: coast-to-coast USA on 40 gallons of fuel in a small SUV.
Turning it off in other browsers? What do other browsers do when they don't understand the setting? If any of the others say "well it doesn't say off, so let's leave autocomplete on" then you're a bit screwed.
Considering Samsung has been known to push for proprietary technology (they tried to create market of Android apps that would only work on Samsung's phones) I'm little worried there is going to be some sort of new node.js fork that's incompatible with current one and has some weird licensing stuff or something.
But you also need to be able to penetrate even light-armer/heavy clothing in actual combat situations, it's a matter of balancing the two.
Having worked in a Samsung office for enough time to have an informed opinion, I can emphatically say that the "hardware focused history" has nothing to do with their lacking on the software front. They have some amazing engineers (especially at HQ in Korea), but the main obstacles are partly Korean culture in general (especially as it pertains to engineers) and partly the management practices of the company. The best things they develop (either in partnership or internally) usually never have a fair leg in the market. I'm certainly not apologizing for the company, just saying don't think the issues you see are directly the engineer's fault.

I don't remember the exact Korean wording, but a common phrase said by Samsung engineers (under their breath) in Korea basically translates to "I'll do what you say, but it's only because I'm at <name of a Japanese labor camp that I forget now>." My time there really made me appreciate how much better we have it here!
Is the Koch that gave cash to pbs more liberal?
Ek Se Badh Kar Ek – Motu Patlu in Telugu
Those uninterested can also consult his wikipedia entry, posted here for ease of access. Though I highly recommend the book. It is quite good. And available on tape for those with long commutes, and Audible accounts. https://en.wikipedia.org/wiki/Roald_Dahl
Then you should probably disarm the police too.
Not in China! Here we mug a cino, homes. Smacks of LA.
> As per the article, to actually prevent ring -3 malware. The implemented signature is the best way to do this. If we could run our own "libre" code there, so could the attacker.

That's completely false; allowing the execution of libre software doesn't worsen security, and the security-by-obscurity model doesn't improve it.
So, down-voters, the War On Drugs DIDN'T get a name and kick into high gear in the 80s???

Or perhaps the WOD was a liberal plot, only pushed through past poor old Reagan due to his fear of his veto being overturned if he dared vote against it???
Then you should see the japanese way of working, it's also quite fun! I believe this is common in most of asia. I have worked in China and it's not quite different at all from what you're saying.
Correct but if it happens it'll likely contain enough data to better verify its origin.
TrustZone Kernel Privilege Escalation (CVE-2016-2431)
Bourgeois Equality: Ideas, not capital, transformed the world
I read an article earlier that pointed out that in police shootings in NYC that they hit their target less than 50% of the time. Unfortunately, even light training isn't enough. And short of sending everyone into the military for active duty in combat, most people won't be thoroughly literate.

It's about personal freedom and liberty... I'm in favor of them, even if I choose not to own one.
When it comes to hardware backdoors, one particular case seems to keep popping up in my mind, and that is Bill Hamilton of the infamous Inslaw/Promis octopus debacle. A few years ago when I was on Scheiers blog regular, he was claiming they had prearranged the backdoor installation at the silicon manufacturing level...

Something about that has never left my mind, and I suspect its generally correct. Heres hoping that power8 workstation Talos gets off the ground...or some risc equiv.
>(not to mention illegal, but execution videos and calls to kill infidels are already illegal to share)

Source and in what jurisdiction(s)?
Do you feel we should also disarm the police? In my mind there's no reason the police should have a firearm that doesn't apply to someone being attacked in their own home.
Anyone remember Bastille Linux? https://help.ubuntu.com/community/BastilleLinux
Not the signature, the payload. It's very complex. I guarantee there are bugs.
Codesigning is "security-by-obscurity" now?
Replying to myself: I actually think most software patents would fail the first or second half of the above test. Never mind all of it.
Edit:spelling
The Mandibles: Lionel Shriver's cautionary tale of economic collapse
"It's kind of a shame that ZFS hasn't seen better adoption"

We[1] are full steam ahead!

We transitioned all of rsync.net, globally, to ZFS starting in ate 2012. After that, we began offering zfs send and receive (over ssh, of course) into rsync.net filesystems[2].

It's working wonderfully. We have many, many customers that do extremely efficient backups of very large zpools/snapshots into the rsync.net location of their choice. It's been tested and reviewed favorably in the press.[3]

[1] rsync.net

[2] http://www.rsync.net/products/zfsintro.html

[3] https://0x.co/G36YPW
In that case, do you suppose that the value of reading about the hobby is worth $15 to you? There is perhaps pleasure to be had just reading about it and dreaming about it.
Yes, upstream vendors would love to have total control over how any user uses its software. But there is no guarantee that at least one of the vendors will not have a really shitty install or uninstall script which will do something like this:

#!/bin/sh
DIR=/home/$USER/ftp
rm -rf $DIR
rm -rf /home/guest
adduser guest

.... assuming that /bin/sh is symlinked to bash (it isn't always), assuming $USER exists (it doesn't always), assuming the user 'guest' doesn't already exist with important files to keep... you really don't want to know how many ISVs actually have install scripts like this.

Users can still install ISV-packaged software in distros. But ISV packages typically hurt the system by removing things like vital dependency tracking information, or replace files that other packages provide, or won't be tracked for security patches, or will be installed into non-standard paths.

--

I have been a package maintainer for 6.. no wait 8... no, 9 Linux distributions. I have created thousands of packages (easily 10,000). I have maintained forked distributions for corporate use. I have also developed dozens of individual software projects which all were designed to be packaged by maintainers, and were adopted into Linux distributions by somebody else.

And i'm telling you: Anything other than maintainers packaging software is a fucking nightmare for everyone involved. We have a good system! Devs, make your software so it's easy to package. Maintainers, package it for your particular distro. Users, just use what's in the distro, OR follow the upstream's instructions on installing _at your peril_.
Public transit, not to mention many jobs should be able to remote work. Before cars were very common it was also common to build communities around smaller shops that were closer.

There are a lot of people in and around NYC that would argue differently.
It kills me that it's 2016 and pulseaudio stutters when I move a window (at least on my system).
http://www.dongleauth.info/ maintains a list of sites supporting U2F devices. There aren't many yet, but it looks like a Wordpress plugin exists that may end up in core. There are also a handful of additional sites listed in issues and pull requests on the site's GitHub page (https://github.com/Nitrokey/dongleauth).

(I'm not affiliated with the site, I just check it periodically and thought it might be of use here.)
Bitbucket as well.
It's already been successfully forked once, under 'io.js', when a group of developers were frustrated at the slow pace of Joyent's custodianship. io.js came back to node.js after politicking.
They're referring to global (i.e. shipping) geography with regard to east-west, not local geography.

The convention is actually to call the Atlantic side 'north' and the Pacific side 'south'.
> They have some amazing engineers (especially at HQ in Korea), but the main obstacles are partly Korean culture in general (especially as it pertains to engineers) and partly the management practices of the company.

Can you explain the cultural aspects (and management shortcomings) in more detail for those of us who haven't experienced Korea? Thanks.
I have the same reaction, for me samsung is more a hardware company and the software they make is only to support their hardware. So is all future Joyent software development will be close sourced and only used by Samsung?
No, not that, the rest of it. I meant the fact that it's a binary blob which hasn't (recently) been subject to review by users.
Yep, used an "Oh By Code" as a shortener for that arstechnica link ... URL shortening is a secondary use-case:

https://news.ycombinator.com/item?id=11896717
From my experience with small quadbikes, I'd say that gives the driver more controll. On a light vehicle, you can just lean a bit to counter highly uneven terrain.
Negative Results, Null Results, or No Results?
Uh, wat. Honda engines are insanely efficient. I doubt this guy knows anything that Honda/Toyota doesn't.

Honda could easily give you a 100mpg car, if it weren't for those meddling kids at the NHTSA. Damn them and their stupid, heavy airbags|crumple zones|roll cages.
Had the projects not merged back, I'm sure io.js would have gained significant ground, so I don't think this is that big of a deal.
Expressing a concern and "freaking out" are wholly different beasts. Most people are doing the former, but you're painting everyone with the latter brush. That's both rhetorically dishonest, and just plain uncool.
The AR-15 is inappropriate for the likes of deer or elk, and overkill from smaller animals...

The many sizes of ammo and rounds are the nature of having many weapons from many manufacturers in many cultures, mostly around war times.

Some people are just avid collectors... Nobody needs to have 2+ cars per household, and teenage deaths from auto accidents are significant.

For me, it's about extending personal freedom and accepting that you can never be completely safe. In the case of this shooting, it probably would have been a bomb otherwise, and would have killed/injured about as many people.
I cannot agree with this enough. I help package the container tools for openSUSE and SLE (I'm also an upstream maintainer of one of the tools as well, so I see both sides of the picture). But I personally am against ISVs making packages (especially "universal" ones) -- if they want to provide a container deployment method then provide the Dockerfile so people can build and curate it themselves.

It's really frustrating when upstream turns around and says "actually, we provide packages -- not you". In fact, we've had cases where a certain project suggested that a reasonable compromise would be that we change the name of the package in our distribution to "reduce confusion to users". Wat.

However, I do understand their point somewhat. If you have users pinging your issue tracker and they're using distro-supplied packages, then you are getting a lot of noise. But the right way of reporting bugs is to complain to your distribution (we actually live and breathe the distro you're using!) and I feel like upstream projects should make this communication model more clear rather than complaining to distros about users submitting bugs in the wrong place.

EDIT: Thanks for the SUSE shoutout! OBS is pretty cool and the people developing it are pretty cool people too.
Show HN: Eyelid wipes for focusing at the computer – Beta Test
How Science Is Putting a New Face on Crime Solving
FAUST definitely is worth checking out.
Its authors are concerned with "long-term preservation of music programs", which is a great idea ; FAUST allows you to do just that.
One can write audio dsp code, without cluttering the actual audio computation code with implementation/performance stuff like SSE, VST, ... that will be obsolete one day.

Another key point is that FAUST doesn't let you manipulate individual samples or time, but instead, focuses on the dataflow, which means you don't have to start all your programs by a time loop ; for example, a simple 2-input mixer is just "process = +;". It's a huge improvement over "for(t=0;t < n;t++) out[t] = in1[t] + in1[t];".
I don't own an AR-15. I don't want an AR-15. I fully support civilians owning AR-15 guns.

I wish it was politically correct to come out and say "shit happens" when it comes to these things like Jeb! Bush said about another incident. Let's face it. Politicians on both sides of the gun issue are using this issue for nothing other than to advance their career or the party platform.

I think we need to move beyond mass shootings and get I to real reasons why we need gun reform and that is gun safety. I want people to not have accidents. However, we are not in a common sense world. Neither side can advocate proper gun training. The left can't legitimize guns by saying civilians with proper training can have guns. The right will kick out anyone who suggests recommend ding or requiring gun safety training to own a gun.

Nobody needs an AR-15. Not police officers, not civilians. That doesn't mean we should ban it though. Can you imagine if we started banning things because we didn't "need" them? Does anyone "need" television?
IANAL, but I wonder if there is a case to be made that the cheat is a derivative work of the game.
Fascinating:
The Court of Appeals ruled that for a software licensee's
violation of a contract to constitute copyright infringement,
there must be a nexus between the license condition and the
licensor’s exclusive rights of copyright. However ... that a
finding of circumvention under the Digital Millennium
Copyright Act does not require a nexus between circumvention
and actual copyright infringement.

The DMCA's anti-circumvention section appears to be the only thing that preserved parts of the original finding. Perhaps the next time this law is up for review, some less onerous terms can be placed for reverse engineering for the purpose of interoperability.
> 1) As per the article, to actually prevent ring -3 malware. The implemented signature is the best way to do this. If we could run our own "libre" code there, so could the attacker.

Why can't computers have physical switches that enable/disable writing the memory that this piece of software is located in?
Hey All,

We're trying to get beta testers for our proprietary eyelid wipe tech that helps anyone who spends hours at the computer refresh their eyes and focus better.
Distribution networks for pirated torrent material... that could make a lot of seed nodes.
This is in England. The country that gave the world the original WASPs.
This is far better than TeamViewer's response to the same threat lately.
What does the license have to do with anything? Joyent themselves are now behind SmartOS, which is based on Solaris and its CDDL license. An open source license being more free or more liberal has absolutely nothing with the ability of the community to fork and/or continue support if the original owner discontinues it.
Strictly, for knowledge, which isn't the same thing as truth.
How is this any different from funding Silk Road?
What happens when your 'special patented formula' ends up in your eyes? This just sounds like an ethyl alcohol wipe for your eyes.
SUSE's OBS is in my biased opinion (I work at SUSE), probably one of the better ways of solving this problem for ISVs. You don't need a build infrastructure, you can get feedback from distribution maintainers and submission to the main distribution is surprisingly painless. Actually you can build packages for non-SUSE distributions on OBS as well, so it's even more versatile than just the openSUSE community's distributions.
I was going to nitpick about efficiency of the generator not being 100 %, but apparently a generator can be 99 % effective.
Oh, definitely.

That's why I am in favour of taxing land values (as a proxy for unearned land rent), and the central bank targeting nominal GDP levels.

The former policy dampens land price bubbles and raises taxes in the most economically efficient way possible; the latter avoids real shocks in one part of the economy taking the whole house of cards down.

Ideally, no single company would then be too big to fail.

http://www.economist.com/blogs/freeexchange/2015/04/land-val...

http://www.economist.com/blogs/freeexchange/2011/10/monetary...
I donated last month, time to donate again. I was at the Internet Archive building last week for the Decentralized Web Summit. Good folks there.
I feel like sites should somehow preemptively disable passwords that have leaked publically. Is there a simple way for them to do so without downloading every leak themself? Is there a simple way for whitehats to help out? Whitehat means you can't test the site without their permission, but someone could have a database that they provide partial access to for sites without leaking and spreading it further themself?

Here's an idea I just thought of: sites should have a standardized, secondary place to log in, where if the login is correct it automatically disables the password and requires a reset. "Report a compromised account", as it were. Anyone (or maybe specific whitehat groups) should have explicit permission to try any logins they want there: after all, if they succeed in logging in then the right thing happens and the account is locked. It's impossible to gain any illicit advantage from such access because any correct credentials are locked as soon as you try them. (Is this assumption robust?) So whitehats could then take lists and throw them against sites that implement this standard, but no attackers can gain from this.

The only problem I see is that disabling rate limits would open you to DOS (also if multiple people use the same list, although better coordination would help solve that): maybe allow bulk uploads which take less bandwidth overall.

Does this idea have any value?
Just a nit, but extremely unlikely they would stop in 2 US ports due to Jones act:

"requires that all goods transported by water between U.S. ports be carried on U.S.-flag ships, constructed in the United States, owned by U.S. citizens, and crewed by U.S. citizens and U.S. permanent residents."

Not a lot of those so US port to port is run a bit different. Basically Hawaii and Alaska.
Deja vu all over again.
Looks really clean. Looks like its designed for coffee roasters that already know the basics. It would be really great if there were explanations for the roasting parameters. Ex: Why is bean moisture important ? What is the ideal temperature for roasting.
Sure. But for that calculation, it doesn't matter too much whether the insurance is provided publicly (think Britain's NHS) or by private companies.
DA's have a reputation to keep.
Yes, those pesky stable distributions that prioritise bug fixes are clearly to blame. While it might be annoying for you (and me to some extent), some people actually need to have a stable system. If I was installing a GNU/Linux distro for a family member I would pick Debian or openSUSE Leap over a more rapidly updating distribution -- I just got burned by such a distro yesterday and I'm still reinstalling my machine.
Debit cards are doubly interesting because they go through a company like VISA or MasterCard, who I would expect to also not want this trouble.

I have to say, it makes me a little bit happy they're respecting the interstate commerce clause if what you're saying is true. A credit union that doesn't allow interstate transfers from the marijuana account and doesn't settle transfers using the federal reserve does seem like it'd be outside their scope.
It is intended for the "Intel defined enterprises" to be more precise. Ordinary Joe cannot declare him/her to be an enterprise and do so, unless he/she is willing to pay the Intel "thugs" an inordinate amount upfront.
Url changed from http://arstechnica.com/security/2016/06/meet-xdedic-the-site..., which points to this.
If the salt changes, you'd need to compute the password using multiple salts, which might have crypto guarantee issues when sent to the server.
Modeling data with functional programming in R
That's an interesting point. And yes, it's entirely fixable.

At the most crude, you could separate natural resources from the rest of the land rights, people already do that.

By the way if memory serves right Germany, which doesn't have general land taxes, already doesn't let you own mineral resources below your land by default. Would be interesting to see what effect that regulation already has on people prospecting.
GnuTLS is actually a good thing. OpenSSL has become a monoculture and there's a lot of good reasons to not use it (in addition, the license isn't GPL-compatible so it's a pain to link against in projects too).
Thanks for the response!

I'll look into them.

Well, I am still looking around so no fixed ideas yet whether to use or not use whatever CF offers, but since in my experience CF is the one that stands up the most in whatever stuff I read, I thought it would be very nice to have alternatives for research.
Startup aims for electric car in 2018