skysight-inc/HackerNews huggingface dataset:
If you can make hundreds of login attempts per second, and you can keep at it for days/weeks/years, you can get through some pretty big password dictionaries with lots of variants (e.g. password/p4ssword/passw0rd/p4ssw0rd/etc.).
Chrome 60 will now calculate the entropy of the value, and if it appears to contain more entropy than typical strings it will ignore the value and whack the programmer on the head.
HR managed services are certainly one big opportunity here as are leveraging Microsoft's B2B connections - however those are just the layer of utility services they can build over a massive 'corporate directory + network' and a feed. The opening up of that directory across companies could be huge and expand the potential competition to far more than just Oracle, Salesforce and IBM (to things like FB for Work, Slack etc.)

More thoughts on that here:
https://medium.com/@ux/will-linkedin-and-microsofts-new-play...
Is there a good heuristic to answer this question?
419 scammers tricked into re-enacting monty python dead parrot sketch: http://boingboing.net/2007/02/20/419-scammers-tricked.html

419 scammers tricked into hand writing and scanning an entire harry potter book: https://techcrunch.com/2008/01/16/scambaiting-at-its-finest-...
I found a copy of, "Over To You" in a backpackers in New Zealand. I read, and had read to me, most of Dahl's children's books, but I never knew him as a writer of adult books, let alone non fiction books on war. But there his writing was, narrating about fining prostitutes in Cairo during WWII.

It's a great book, by the way.
This is more impactful. It is designed to let those in opposition look at them as well and say "aha, yeah, maybe this does make sense".

Perhaps like a Trojan Horse type attack. Nobody in the Trump camp will believe these unless they think these are the hidden dark secrets full of juicy secrets from Hillary. So they read and it and then see stuff like "Oh Trump is a racist, huh, I guess maybe that's right".
Hey Hacker News! I'm Mark Davis...the product hacker at Fullstack Academy, and the guy behind Fullstack Fund.

We're really psyched to start investing in our graduates, so they can create their own startups and make a dent in the universe.

AMA!

"Smart people should build things"
Thanks for your response.

I realize my wording may have seemed a tad strong.

My hope was not that we use fear tactics, but rather begin a global conversation regarding: ideal off limit zones for implementation (ie military uses & surveillance), how we can implement said technology in order to address climate degradation and limit waste and how it could provide us with the capacity to reenvision our global economy.
So we're back to hacks to replicate a feature that browser developers have decided to ignore? Gotta love web technology.

If "just use a textarea" is a valid solution, why did Google even bother not honoring autocomplete?
I find it so difficult to express that opinion these days. Especially given the conflicting thought on how "bad" it is for you recreationally - I see certain opinions all the way from it being completely harmless to doing long-term irreversible damage. I feel like such a fuddy-duddy objecting to pot usage around me.
Eh this will happen anyway.

Just think of it as industrially produced beer vs craft beer, there will be market for both if theres reason for there to be
And doubly so for when they change the underlying link!

It is frustrating to make a comment then get a response, "ugh, didn't you even read the article?" Uh, yes, I did, but it was a different article!
Because taxes are mandatory, they are taken from people by force.

I am absolutely happy to give back to the community, when it's a voluntary decision, a choice I am free to make.

Yes, I did benefit from living in a society, but I never signed up to owing them something for the rest of my life.

It's beautiful when people are making a decision to contribute to society and help others, it's very different when they are coerced into it.
I brought up this idea to my employers at a coding bootcamp in 2014. It was met with mostly blank stares. Glad to see someone else doing it.
Where I live 15$US buys you 4 12 Oz (Large) flat whites - that would be 'latte's' for Americans, I think. So its probably worth it. I own (sorry, licensed user) of a few of the books in the bundle and they are good introduction material generally. You will get your $15's value out of them I'm sure.
Exactly!

If Github offered better community discussion features and a professional portfolio/resume product for developers, then Github could become more relevant than LinkedIn for the developer community.

If Dribbble doubled down on those types of things too, then Dribbble could be more relevant than LinkedIn in the Design community.

etc, etc. and it's possible that people have various skillsets for which they have various types of professional personas. There's a lot of angles here, and it's not like they're not being explored, but these things take a long time. It's easy to forget.
I am not advocating for that devil, but the events from the recent years - active encouragement of replacement of secular government with Islamist ones. Deal with Iran that cements the Islamic revolution, support for Erdogan while he makes Turkey a theocracy, giant arms sales to Saudi Arabia, drone strikes that are effective Taliban and ISIS recruitment tools, arming Iraq army which only strategic move is to drop their gear for ISIS to use and flee. Either there is strong support for islamisation of the middle east or the recent administrations have no idea and clue what are they doing.
Banks, wealthy individuals and corporations like to sell this story: they're simply following the law. While there's certainly a lot of that I also think there's an awful lot of outright fraud and tax evasion. Look at the Swiss bank BSI settling criminal charges with the US where BSI admitted they would deliver debit cards full of cash to clients without names on them. That's not legal. It's repatriation of funds into the US thus making the money taxable in the US.

Here's another example:

http://arstechnica.com/tech-policy/2014/10/how-eas-jet-setti...

I applaud the Panama Papers whistle-blower. The veil of secrecy is used to hide way too much. Just look at the TPP/TIPP negotiations as a prime example.

We now have a financial system that seems willing to be criminal accomplices to fraud. I have to applaud the US for going after these banks.
Fundamentally the reason they have that rule is to prevent apps from doing an end run around Apple's 30% cut. For example, to unlock the "Pro" features, go to the developer's website and enter some payment info.

The rule has nothing to do with preventing crappy ad-driven experiences. If you had to click 3 ads in app to get 100 gold coins, Apple would be fine with that even though it's crappy - they're fine with it because the action is still happening within their garden walls and if it involves any exchange of real $$ they have enough control to either get their 30% or block the app.
I understood about 1/2 the phrases in this article. Can someone who is familiar with shipping terms tell me what Panamax strings are?
xnu's loadable kext isolation means that you have a one-time hit on using anything beyond x86-64+sse2, which can be paid at kernel prelink time, kext load time, or while a kext is running, via a trap that switches call preamble/postamble to handle the extra state (and which facilitates selecting fast paths on a cpu-by-cpu basis, for example). Only the presence of x87 insns impose noticeable cost.

o3x builds and runs just fine with -O2 -march=native and the latest clang just by changing CC and CFLAGS; the kexts that get built aren't backwards compatible though (you'll get a panic if you build with -march=native on a machine that does AVX and run on a machine that doesn't).

The code that recent clang+llvm generates makes heavy use of the XMM and YMM registers, and does some substantial vectorization. The compression and checksumming and galois field code that's generated is strikingly better, although not quite as good as the hand tuned code in e.g. (https://github.com/zfsonlinux/zfs/pull/4439). It may be interesting to compare performance, but given that compression=lz4 and checksum=edonr has negligible CPU impact on a late 2012 4-core mac mini (core i7) even when doing enormous I/O (> 200k IOPS to a pair of Samsung 850 PROs), hand tuning likely won't make as much of a difference as moving up from compression=on, checksum=[sha256|fletcher4].

I'm pretty sure that once the hand tuned stuff is in ZOL it'll get looked at by lundman for possible integration.
You also have companies which jump on the google style guide bandwagon.

It's a fine guide, but it was written for google and has some stuff in there as a result of that (no exceptions being on example).
Trump tweeted that climate change is a conspiracy created by the Chinese to destroy the American economy.

I wish I was making that up.

https://twitter.com/realdonaldtrump/status/26589529219124838...
She said no multiple times and he persistently pressured her anyways. As leader in the Tor community and a colleague she looked up to he was in a huge position of power making it easy to coerce her. He physically pulled her into the tub, directly against her clearly stated nonconsent. To not call that just "ungentlemanly" is what is actually crazy here and you should be disgusted with yourself for making it sound like he did no worse than forget to hold a door open for a passerby.

> All you nerdy guys out there, if you don't want something like this to happen to you

If you don't want actively ignoring someone's else's nonconsent and forcing them into sexual contact with you to happen to you- wait wtf?

> learn the dance -- there is a sequence and a pace to these things if you want a woman to feel good

Ah yes, the don't-sexually-assault-people dance. A classic in romantic etiquette. It sure makes women feel good not to be assaulted. Do you read the things you write?
I don't think anybody is implying that.
That's just not true.

I have some interest in types (mostly practical, some theoretical) but I have no graduate degree, I still regularly encounter both theory and type voodoo I don't understand, and I wouldn't consider myself a "type system expert".

On a recent project I was able to use the type checker to help me catch things including 1) passing a bid price where I meant an ask price, 2) using an index into the wrong array, 3) calling a function not permitted to run on the thread in question (because of data access or deliberate marking).

This wasn't Haskell - it was C.
And the record companies made big bucks by distributing everything as $20 CDs even if the consumer really only wanted a single song off the album. Of course, the reason why they wanted the single was because the other 8 tracks weren't very good and only there so the company could justify charging $20.

It's not like the record companies were completely blameless. They didn't care about their customers, they only cared about the artists they signed because they were legally obligated to, and no one who cares about music is mourning their downfall.
A ban on pistols would make a lot more sense. Statistically, you're more likely to have someone beat you to death with his fists than to be shot with a long gun. But these kinds of incidents make people emotional.
Nix until some intrepid souls set up a large supplemental non-free repo for guix
You can tell their engineers never continuously tested Siri's responses for multiple weeks. I'd rather have the "Ok" than Siri's 5 other longer responses, and the one sassy response.
Indeed. And to put that into perspective:

"The amount of matter converted to energy in the atomic bomb dropped on Hiroshima was about 700 milligrams, less than one-third the mass of a U.S. dime."

(From http://discovermagazine.com/2010/jul-aug/24-numbers-nuclear-...)
+1 for this; Colyer's blog has been incredibly eye-opening.

Just reading the summaries is pretty interesting, but having a curated set of papers to dig into as time permits is fantastic as well.
Software is by no means immune to what you list. Indeed, as Hubris is one of the Three Virtues of a Programmer, you definitely find it.

Hubris isn't necessarily the wrong word in this larger context of indispensability, but I've always viewed Hubris in the context of the Three Virtues to be of "I can do this, against all odds", and being on the negative/low end of the Impostor Syndrome spectrum. Three Virtues Hubris is internal confidence; Indispensability Hubris is (perhaps unfounded) confidence in the perception of how others view you.
> peace of mind to users that they can use your app without their contacts stolen or their phones hijacked

I think you can get that part without requiring the bottleneck of a single, hand-curated app store. The OS sandboxes app processes and blocks them from accessing user information without getting permission first - if that's done well, no app review is needed to ensure apps can't hijack your data.
I attempted this at some point. It went pretty well until I stopped having time.

The first one was actually "On Computable Numbers" -> http://swizec.com/blog/week-1-turings-on-computable-numbers/...

It helps that I had 2 semesters in college on essentially "What did Godel and Turing create for us"
FYI, the "Making Things Talk" book is not about attaching voice circuitry to devices. It's about making devices that can communicate with each other.
The Dotjs extension is no longer maintained, just for those looking at this and wondering if it's worthwhile.
> I've always been somewhat surprised that NTFS hasn't been more popular for external media, as it's a pretty good fit there.

Isn't that because NTFS is Microsoft-proprietary? AFAIK all the existing third-party implementations are reverse-engineered and hence not 100% safe. Meanwhile even HFS+ has a public specification published by Apple.
I will wait for you to publish it. Does the decentralization depend on concerned citizens reporting their neighbours to the government, or is it more of a vigilante thing?
+1 for RSS feeds. I would definitely subscribe to weekly feeds for HN and Medium at the least.
If on Windows you can download or possibly use VLC to stream.
Techcrunch is a business news publication and they've screwed up here.

'Wholesale marketplace' is the right term.
I was going to ask the same thing. How do you stop someone from owning a new Linode between the time you start the server and the time you disable password authentication?
You said earlier:

> Graphics in a minimum 60 fps context is about 700 times less time sensitive.

16.6 ms (60 fps) / 700 = ~24 microseconds.

> So you put in the parameters into registers 'per hand' in assembly and then memcopyed some function to the right adress (using a function pointer?) to process these registers? Wow. That sounds pretty complicated. For now i just use gcc and function pointers and let gcc do the rest.

I concatenated blocks of compiled code together (compiled as position independent), avoiding branches and indirect calls.

Loop setup block took care of putting right parameters to right registers.

Hardest part was getting the filter parameter passing right. Dynamic configuration was trivial after that.

There were no function pointers except one to trigger the top level loop.
No, it's more of a shared risk/liability via voluntary associations thing.
What competitors are there for CLoudFlare that you consider better than them?

I am genuinely interested since I was thinking on signing up for their service, but I would love to research some alternatives first.
I'd seen pastebin and some others, just not wordpress.com Makes sense.
For Medium, I just fetch this link( medium.com/top-stories) and get top 10 links every day
The Queen of FM Fights for Her Throne
Copy/paste this into VLC Windows folk.
Only power users are going to bother clicking a button just to help them fill in a form, or even know that's what the button does in the first place.

This is an interesting observation. I never used the "wand" function in Opera because, partly, it's named in such a way as to not appeal to power users at all. The name "wand" says "do something magically". Agreed that "wand" doesn't indicate what it does, which is another reason to shy away from it. It's such a generic term as to be useless. Literally anything could be behind the "magic" operation.
Kitten – A concatenative programming language
>Either there is strong support for islamisation of the middle east or the recent administrations have no idea and clue what are they doing.

They probably have no idea and clue what they're doing.

I still remember being promised we would be welcomed into Baghdad as liberators, like Christ being led into Jerusalem.
I wish my fellow warriors would learn to remember their oath to the constitution (and therefore the second amendment) in discussions like this. The fact that you don't seem to is sad but indicative of the general disregard for the importance of oaths these days.
Or when the cache is cold. It REALLY hurts to reboot while a deferred destroy on a big deduplicated snapshot is in progress. No import today for you!

Well, unless your medium has no seek penalty, which is what hurts with deduplication. Dedup on SSDs is pretty much OK, as long as your checksum performs reasonably (skein is reasonable; sha256 is not).

DDTs that fit inside no-seek-penalty L2s don't hurt that much either, and big DDTs on spinny-disk pools are acceptable with persistent l2arc, although it's risky because if the l2 fails, especially at import, you can have a big highly deduplicated pool that isn't technically broken but is fundamentally useless if not outright harmful to the system it's imported (or ESPECIALLY attempting to be imported) by. "No returns from zpool(1) or zfs(1) commands for you today!"

When eventually openzfs can pin datasets and DDTs to specific vdevs (notably ones made out of no-seek-penalty devices), heavy deduplication on big spinny disk pools should be usable and reliable.

Until then, "well technically even if you have only ARC and it's very small, it will work, just slowly" while correct in the normal case, is unfortunately hiding some of the most frustrating downsides when things go wrong.
Well obviously this is a "performance" NUC but it surprises me they don't offer a Core-M model (price?), which would facilitate a fanless 'kit', without specialised 3rd-party housing.

I don't need the performance, so if I'd probably go with the budget sensitive Celeron-based Brix that is fanless. Braswell based, so I guess Apollo Lake will be another year away.
Bullshit it doesn't. Ever get in a firefight with a bolt-action and win? Didn't fucking think so. Fuck, a 15 minute firefight could have me expend 240+ rounds easy! (especially if our 249's were down or for suppressive reasons, but still)
Closure is indeed TM-based, but that's not an A/B test of ease-of-use. I don't think there exists evidence to suggest that transactions are easier to use.

I think you are confused about the meaning of composability. The synchronized/atomic TM proposal for C++ is roughly single-global-lock. This means that you can still deadlock if you use synchronized to protect IPC with another process, which then does an IPC call back to you, which you service on another thread that also uses synchronized. Whenever these transactional proposals fall back on locking, they immediately bring in the pitfalls of locking.

The C++ TM proposal is a joke. There's no good reason to use concurrency if you won't get a speed-up, and the current design of synchronized is sure to make it more difficult to get speed-ups.
Leaving CMU
For the love of FSM, why is it that browser vendors are always so f%!#ng arrogant?? It's not just Chrome, we've seen this attitude from Firefox devs before as well: "fuck you, we know more about what you meant than you do".

I really wish somebody would fork either Chromium or Firefox and commit to delivering a browser that just fully, completely and accurately implements the various specifications, instead of trying to "improve" them like this.
What's amazing is that we actually have to remind people of this. Every large, powerful, cohesive society in history has had a centralized state of some sort. Societies that don't tend to get conquered by armies ranging from bandits to systematic invaders, or to get balkanized into wasteful little feudal domains.
I enjoy criticism of our current administration as much as anyone, but I'm going to go with Hanlon's Razor and guess the latter: they have no clue what effective foreign policy looks like. I suspect that simply doing nothing at all (leaving all pre-existing policies and agreements in place) would have been more effective than what we have done. At least it would have appeared consistent and predictable.
Law actually encourages this sort of behavior so people don't take things into their own hands or try to extort each other.
The "science" of foods that cause cancer is some of the worst science there is. Pronouncements like this create a well-deserved skepticism of the claims of science among non-scientists.
3 encyclopedias + both make:electronics books are a steal for $15!!!
From what I understand a ZIL helps with workloads which need to fsync a lot (say databases) and also NFS (due to COMMIT commands issued by clients).
NTFS

I ran into a bug just today that I'm still struggling to believe. A large Oracle server fell over, just reporting "IO errors". The issue was ultimately traced to NTFS's handling of fragmentation[0].

I've gone about ten years thinking running a defrag - particular on a virtual disk sitting on a SAN in a RAID array - made no sense. Today's downtime says otherwise.

It's one thing to perform poorly. But seeing services just die with disk write errors on a disk that's 30% full has left me with a very low opinion of NTFS. Our Oracle person sounds like a desktop maintenance person from the 90's making an issue out of "the importance of weekly defrags".

[0] https://support.microsoft.com/en-au/kb/967351
Also see http://text-symbols.com/upside-down/ :)

One of many implementations: http://www.upsidedowntext.com/
Ask HN: What happened to Panama papers?
I am wondering what happened with all the buzz around Panama papers? They promised so much more, but looks like since their main target was Putin's friend and Messi, and from what I understand - they did not prove anything fishy there, just a shell company which all this famous people had. Anybody has any feedback on that?
There are plenty of other free editors. Why would I pay for sublime?

Sublime has a great opportunity to exploit: adding new features for a price. There are plenty of areas open for improvement and the user base is already there.
But leaking campaign finance details? I feel like that is a good way to piss off your donors.
Now someone just needs to make a 2x and -2x cannabis ETN.
I doubt side project is the right thing at this point in time, unless it is something you can complete in a day. It looks like the OP needs to be away from his computer and side projects that don't work out can be more frustrating than your daily job and may cause OP to spiral further into depression.
Grandpa didn't talk about what he shot at German's and Italians. It wasn't lever action. Mostly, he dealt with that experience via anti-depressants and a lot of alcohol over the last 50 years of his life. He left a snub nosed .38 when he died. At least he didn't shoot himself.

Grandpa was a Sergent in the 504st PIR from 1942 through 46. North Africa, Sicily, the boot and a walk from Ardennes into Germany. Went to Ohio State on the GI Bill and didn't cotton bullshit. His name was Bernard Worthington Jamison. Charitably, it seems the article contains a substantial misidentification.
Hmm, that's the interesting thing about implication, it's can be very ambiguous. If you leave something ambiguous knowing a small minority will misinterpret the real implication for something worse, and accept that as beneficial and make no move to clarify that point, are you implying that as well?