skysight-inc/HackerNews huggingface dataset:
Indeed, the apparent success of the Soviet NHS model, for example, in fighting Typhoid, Typhus and Tuberculosis is partly what led to the structure of the British NHS.

Had the Tories had their way in the 40s (and without a clear example of success to point to, they may have), the UK would now have an insurance based "show me the money and we treat you" system - the exact kind which Americans are all apparently very happy with.
It's not a terrible idea, but it does fall apart if you need to change one of the passwords (say, because you were using this strategy for a number of services including gotomypc). Now you need to have multiple master passwords, or you need to increment the service name (gotomypc2?), and then you're remembering the increment as well as the service and master password.

It's a cute trick, but I don't think it really scales well for the number of accounts we tend to have these days, and the frequency with which passwords must be changed due to hacks, password aging policies, validation ("must have 1 punctuation character"), etc.

As for entropy, it's limited by the master password, and whatever obscurity the hashing and service name provide. If you have a short master password, you're not getting the as much uniqueness as you might think by looking at the length of the hash output.
I know they don't have the 'production-ready' stamp, but if I were to jump back into the JVM world it would be Frege at this point. It is basically a Haskell on the JVM. It compiles to Java source code, so you can work it in slowly to your real project [1]. You can call Java from Frege, or Frege functions from Java.

ABCL - Armed Bear Common Lisp is another, but Lisp on the JVM instead of Haskell. It's been around for a while, and has become fast for a Lisp on the JVM, though it's not SBCL in speed. It does however support full 32 bit integers on 32 bits sytems compared with SBCL's 29 bits on 32 bit systems due to boxing. Again, not used much in production, although, there are some great testimonials of some cool implementations [2]. I particularly like the Keck telescope code written in Lisp in 1994, ported to ABCL and using Java for some image work and display.

[1] https://github.com/frege/frege

[2] https://common-lisp.net/project/armedbear/testimonials.shtml
I use the free version of Maskme or Blur from Abine https://www.abine.com/index.html
If a company sends out communication to a group of authorized employees, then presumably they all accessed the documents -- as they should have. In the case of a security test, presumably many people were made aware so that they could improve their security.

Who among those employees leaked?

You can only know by access if that information was sufficiently isolating or unique.
Yeah, we're not as well known as some of the more prominent SDRs out ther. We're mostly targeting professional users and have been mostly focused on figuring out how to get our tech into the real telecom world. Stay tuned - you will hear more about us, as we now have our system integrated into operators and have our hardware running in the real world.
That's a pretty negative way of looking at it.

I don't disagree that humanity is 'wasteful', but these 'destructive' tendencies will be necessary for the creation and propagation of _life_ beyond/within our solar system.

What do you value more, preservation of the cosmos in their current state, or the expansion of our existence beyond Earth.

I think the fact that companies are already looking to mine asteroids is nothing short of awesome and inspiring.
> In all cases, it is hard to argument the move to a new language in an existing codebase when there is no official push in that direction.

I don't understand the logic behind this sentence? Why do you need Google to push you somewhere instead of you youself choosing a more productive option?

Kotlin is designed to be easy to integrate into existing Java codebase and our introduction to a largeish Android codebase has been a great success.
That's a really good idea, btw
DeepSQL Wins “Best Newbie Tech” at 2016 MITX Awards
If a lot of people start doing this thing, then it will be trivial for an attacker to figure out name+service1@domain can be changed to name+service2@domain
Such recommendations leave little to imagination when they say:

... service has been targeted by a very sophisticated password attack
Startups- Why a business plan is important
French police raid Lycamobile on suspicion of money laundering and tax fraud
> ..you could interpret the soft fork as an amendment - even though not all of the DAO token holders were asked for agreement.

DAO token holders can express their agreement or disagreement by choosing which fork they want to attach to.
I use https://www.passwordstore.org/ to generate passwords which are then encrypted using my GPG keys. My passwords directory is a git repo which I sync to GitHub. Since I don't possess a Yubikey or similar, I've stored a copy of my secret key in Protonmail.
> When I tell some middle managers that I don't know exactly how long a software project will take they insist on endless planning meetings that hold up work even more.

It's middle management's job to come up with the estimate and give that to upper management. They should not be asking team leads for project-level estimates, team leads are too close to see the forest for the trees. Any time a manager asks me for a number, I ask them to try to come up with one, because their guess is as good as mine, so he might as well come up with it.

To management thinking, not knowing how long something is going to take is indicative of not understanding the problem enough. The solution to a lack of understanding is to get the right people in the room together to articulate what they know about it, figure out what's missing, and work out a correcting plan. In other words, a meeting.

What's different about software development is that it more resembles research than manufacturing. If you were to ask Thomas Edison while he was testing thousands of materials for filaments how long it was going to take before he has the next light bulb, he'd have angrily thrown you out of the room. Yet we expect programmers to be able to answer that question all the time.

The best estimate you'd get for when Edison would be done would be from someone close to him, but not actually working with him, say his secretary or wife. They'd be able to notice all the little things that he can't because he's not paying attention to them.

So in software development, you'd ask the lowest level manager, rather than coder, for a ballpark number. All that person needs to do is look over the history of the group and come up with a number in line with other projects with similar scopes. If there's no project with a similar scope, then a meeting or two is needed in order to work out how to break up the project into more-manageable chunks.
It is decentralized in the sense that it is not centralized, i.e. there is no central entity in control managing entry into the network.

The key point is that any node in a p2p network can be used to join the network, so any number of independent entities can publish lists of ways to join the network.

Certainly, i would also love some multicast/anycast support on the IP level, but we don't have that, so making sure that you have many independent entry points into the network is the next best thing.

Maybe you're thinking distributed, not decentralized? https://i.imgur.com/YsiiKeq.png
Formal verification can be layered on top. One simple use case is as a way of proving termination, greatly mitigating gas-related issues. Another use case is proving specific properties – for example, “if all participants collude, they can get their money out in all cases”, or “if you send your tokens A to this contract, you are guaranteed to either get the amount of token B that you want or be able to fully refund yourself”. Or “this contract fits into a restricted subset of Solidity that makes re-entrancy, gas issues and call stack issues impossible”.

Why not restrict the entire language instead of trying to verify that a program fits into a safe subset? What practical uses are there for general recursion and unbounded gas usage in the context of smart contracts (not to mention multiple inheritance, inline bytecode assembly, and the many other complex features of Solidity)?
Here in Germany, you just have to move to a small village the east (no jobs, poorer states) and get a remote job at a company in the west (many jobs, richer states).

Yes, this doesn't lower your expenses 90%, but you still get much more bang for the buck.
I think you may have the beginning of experimental setup to test the hypothesis that the value brought by a MBA is not different than zero.
“T-shaped” people (2012)
Opposite anecdotal evidence. I am terrible in following video lectures. But listening to audio books works wonders.
This may come off a bit snarky but is there really plenty of Java games out there? If so, anything anybody might have heard off?
Advertising Demystified
Surprised nobody has mentioned yet that the company was founded by Peter Thiel, who is becoming a uniquely objectionable individual these days and has every reason to draw the intense scrutiny of investigative online media outlets.
I don't get his complaint against windows given that current space ships have windows. Admittedly, many ships overdo them in scifi, but you wouldn't even need to go back a hundred years to find people who would have said that there was no way to produce glass sheets strong and large enough for its current use in skyscrapers. Windows are only a problem for near-future hard scifi, and then only when they're particularly large or prevalent.
Short term bridging of a company (or real estate portfolio). It's not so much the 20% APR that kills you; it's the length of time that you pay it.
It's more like a host/parasite relationship.

The cure, in any case (unionization of the value producers), isn't particularly obvious to most.
Wow, so much negativity here O.o

Kotlin is getting rapid adoption in the Android community and is quickly getting the same status as Swift has in the iOS world.

The main reasons for the rapid adoption are:

- It's designed to easily integrate into existing Java codebases. This means that starting to use Kotlin is pretty much a case of adding two Gradle dependencies and source files into `src/kotlin`. Interop with Java is painless and doesn't require any special boxing as opposed to some other languages.

- It's standard library is small (~700KB), which is a stark contrast to Scala and some other JVM languages, which pretty much demand usage of ProGuard while developing due to large method count.

- It's performance characteristics are close to Java and doesn't cause catastrophic GC collection issues like some Clojure code does.

- It has pretty much all the features expected from a modern language (nullability, const values, concise syntax) while still keeping code very readable for people who already know Java. The adoption in our Java codebase has thus been rather painless, since code doesn't do any additional magic you wouldn't expect.

- It compiles code to Java bytecode which runs on Java 6 JVM, which is critical for Android.

- It has first-party support in IntelliJ IDEs, which includes Android Studio itself. The IDE experience is significantly better than Scala or Clojure one and almost on par with Java.

So in short, we got a modern language, which is easy to transition to from Java 6, gives seamless interoperability with existing Java code (you can just start writing Kotlin classes in your Java code base), doesn't add overhead to your Android application and doesn't behave strangely performance-wise. There are still some warts to fix (mostly related to static checkers), but Kotlin has been a huge win for Android world.
> I use https://lastpass.com/ for generating passwords. ... Would prefer open source, but nothing else comes close.

On a linux/unix system, one could use /dev/urandom:

tr -dc '[[:alnum:][:punct:]]' < /dev/urandom | head -16c

would generate a 16 character long password.

One could even put the following function in $HOME/.bash_profile or such

genpw() {
tr -dc '[[:alnum:][:punct:]]' < /dev/urandom | head -${1-16}c
}

Now invoking it by saying genpw would generate a pseudorandom string of 16 characters length. You could specify the length by passing a parameter to it, e.g. genpw 8.
And you don't need tests to make sure the assertions are there?
Learning is not fun, stop pretending otherwise
The Strange Power of a Medieval Poem about the Death of a Child
So, I've started working on a new project recently, and thought I'd use JWT (instead of Ye Olde cookie-based sessions). After working with it for a bit, I've decided that I can probably get away with using it for authentication, but definitely NOT for authorization.

I'm using a kind of RBAC and storing Roles in the JWT just seems like a bad idea. Header size is one issue, but also there is the problem of granting/revoking a role and having that change reflected immediately (rather than waiting on the token refresh window).

So, now my API requests happen thusly: "Ok, I have a valid token for User X, so I accept that this request came from User X. Now, let's check User X's roles in the database to see if they have permission to perform action Y on resource Z..."

Hmm... I'm not sure this feels right.
OS-9 is a dramatically more capable OS than CP/M, in that it's a fully multitasking RTOS.
KeePassX (https://www.keepassx.org/) is free and open source password manager. Having never tried LastPass I can't vouch that it's feature compatible, but it covers all my needs.
USB3 can pump up to 900mA @ 5V = 4.5W, which is pretty good. But each device has its own specs - e.g. LimeSDR has only 10dBm output power, because it doesn't have a built-in amplifier. So if you (1) don't attach a large antenna to it, (2) you operate in your basement, (3) you choose an unused ARFCn and (4) you operate in closed mode, you should be fine form technical perspective. That said, legality of this is up to you - check your local spectrum rules.
Porsche Talks Trash About Tesla
How do you generate new emails? Say, I see a new websites I need a new email? What do you do? Is there a chrome extension that can do it with one click?
They don't really say it has been hacked, just that being a target of an advanced password attack.

It might mean attackers are using password lists from previous leaks (linkedin), so they decided to force a pass reset to everyone. Or maybe they got hacked. Who knows, not very clear.
Or carbon neutral fuels. I've been a fan of engineering algae to make ethanol and similar from sun water and CO2 and though nothing's ready for primetime yet you never know.
This is not a good suggestion on their part, and has long been proven ineffective:

Substitute numbers for letters that
look similar (for example, substitute
“0” for “o” or “3” for “E”.
Yes, they're a bit of an open secret in that many people who would love them never even hear about them.
Right, I wouldn't discredit electrical engineers. I can reasonably expect my house not to burn to the ground due to an electrical fire, and my washing machine/fridge will probably fail safe as well. Hardware engineers mostly get a pass in my book, too (when was the last time your CPU hung?).

Meanwhile, Toyota is allowed to ship buggy, untested, unauditable ECUs[0]. How can SE be considered a legitimate engineering discipline when such examples abound?

The "Software engineer" title ought to be reserved for those doing formal verification or at least aiming for high code coverage and otherwise employing proper design and testing methods. Think programmers of NASA shuttle avionics or airplane autopilots.

It's not for your run-of-the-mill startup coder (which includes me).

[0]: https://users.ece.cmu.edu/~koopman/pubs/koopman14_toyota_ua_...
For getting into new web-dev frameworks/languages I often do these three steps:

1. hello world (simply getting something on the screen)

2. todo list (display a simple data-set and interact with it)

3. blog (display a relational data-set and interact with it, maybe some auth stuff)

But I would like to know how these steps would look for embedded stuff.
"The infographic below explains the mechanisms that make advertising work"

Or rather: The lack of infographic below means we just copy/pasted some text from another site.
Here is a video of tests we're doing at installations with real operators - https://www.youtube.com/watch?v=mxpUXPy1htA
(our equipment is almost invisible on the top of the tower, big racks and thick cables are existing infrastructure which was there)
Gee, we have to wonder if some good anomaly detection

https://news.ycombinator.com/item?id=11880593

would have detected that intrusion?
"The home hoarding rentier class"?

What about someone who's primary assets are a couple of houses that (s)he rents out? Should (s)he be restricted from getting a market rate income on those houses?

I disagree pretty strongly that the "rentiers" are protected from market forces. If we look at the case of people who really are in the "rentier class", who are heavily leveraged, they are taking a fairly big risk here that the economy and housing prices are going to stay high, and many are risking bankruptcy should we suffer a reversal.
Can people rename this to something that makes sense? Seeing a post on the front page saying "A brief update" is so vague. An update by whom? About what? There's literally not enough information to gauge whether or not I should pursue this further without clicking on it.
r/s4p might be little annoying but they didn't:

- post dozens of pictures of Hillary kissing the KKK in a single day

- post a bunch of cropped centipede pictures that can be combined when browsing r/all

- etc

If they want to promote their favorite politician, I understand but populating 40% of r/all with meme shitposts will make the admins take actions.
What worries me is that this product is owned by Citrix.

Our company uses other products by Citrix extensively like GoToMeeting, Citrix applications etc. And if those products get compromised, then it will be a huge enterprise level financial loss.
>Actually any normal country would not have wanted to match the US's military spending.

It's pretty normal behavior for most countries to react defensively and aggressively when threatened.

Hence:

* USA puts nukes in Turkey => USSR puts nukes in Cuba.

* USA puts nukes on the Korean DMZ => North Korea creates nuclear weapons program.

What's fucking weird is how American propaganda manages to successfully depict these kinds of actions as the unprovoked behaviors of crazed madmen.

The same kind of attitude towards Iran is common, too.
> s it even possible to work part-time, go to school part-time, and graduate without debt, anymore

For my personal experience, the answer was yes. I went to a Midwestern in-state school and worked IT jobs part time (full time in summer) to pay for my school.
I tried both (switched from LastPass to KeePassX). KeePassX works better, especially with KeePass2Android. Strongly recommended.
It would be awesome if there would be some JVM language that supported explicit vectorization, memory layout support and a good FFI. But it also seems impossible. How would any JVM language have memory layout support while at the same time running in the memory managed sandbox of the JVM?
That's not true. To run a benchtop setup you just need an inexpensive SDR (LimeSDR, UmTRX or B200) and your laptop - that's not "high thousands". If you're deploying networks professionally, then yes - you'll spend thousands on proper base stations, software to control them, etc. But in the latter case you should have your spectrum license, so operating a BTS should not be an issue.
Also see my post above about 911 services.
How Summer Vacations Really End
Just wait until IFTTT gets hacked. That has to be a huge target. Think of all the other services and physical devices on the network they'd potentially have the keys/access to.

Future Ouch.
I use 33mail.com. You just give them a new email address, no need to generate. For example, hackernews@lukasm.33mail.com
If you mean embedded systems, this is what I would do when working with a new microcontroller:

1. Make a LED blink - the Hello World of embedded.

2. Output a PWM signal from a pin to control a motor or to a speaker output.

3. Read an analog signal using the onboard ADC. A temperature or luminosity sensor is a good start.

4. Write a light OS that can execute multiple tasks simultaneously - take user input, read analog sensor values, perform a calculation, keep track of time, etc. This will need all of the above + interrupt handling.
تحميل برنامج لاين للكمبيوتر والموبايل 2016 مجاناً Download Line
Chris Milk the birth of virtual reality as an art form
Just a warning: If you mess around with ANY of this and:

a) don't have specific written permission from the FCC or Industry Canada (or your local spectrum regulator)

and/or

b) Don't do it in a good quality faraday cage

You deserve an FCC party van...
6 in 10 of you will share this link without reading it
Hasn't Ngrok the same security risks as GoToMyPC?
1/2 OT: How do you pronounce DAO? As a word like Dao or as an abbreviation like D A O?
How do you unionize just the value producers, without also unionizing (and entrenching) layers of middle management?
Implement the common search and sort algorithms, solve a few Project Euler challenges, and build a full-fledged todo-list or photo sharing application.
> Now imagine you stacked 2ms GC pauses into that level of the system. That would be a barely serviceable kernel. Forget any real-time facilities.

Real-time just means bounded latency. If 2ms was a hard upper bound, that's hard realtime. If it's ~90% bounded by 2ms with a small variance, that's soft realtime.
I am switching away from unique mail addresses … I used a mix of catch-all and plus characters:

The former reduces the efficiency of your spam filter, the later is not (fully) supported by many websites. AirBnB for example allowed me to set an mail address with a plus character, however, login did not work anymore, so I was locked out and had to create a new account … AirBnB support refused to change my mail address since they apparently did not get the plus character 'trick'.
Isn't it risky to have your password and your 2FA tokens in the same app, i.e., 1Password in your case?
There is still a major annoyance with Google Authenticator etc.:

When you switch your device, you have to set up your 2FA credentials again …
You can and I've recommended it but it's not that trivial either the path loss in coax signals as well as some other factors might not work with all SDR's and RF equipment and it takes a bit more legwork to set up.
I did a few Arch installs two years ago to try it out. I loved the experience, it really did teach me tons and gave me a beautifully minimalistic system with me in control - and yet I ended up going back to Ubuntu. I found that I valued the community too much to leave, and on the whole I appreciated having a system that just worked (well, most of the time) rather than having to spend hours taking care of the OS. I might give Arch another shot some time, maybe give it a chance and stick with it a bit longer. But for now I'm quite happy in the Ubuntu universe :-)
Nice thanks :D

I already imagined that the hello world of embedded is a blinking LED , haha.

So these things (PWM, ADC) are "standard" to all embedded systems?
> The whole education sector is overblown by irrational pro-education rhetoric and free flowing federal money.

It's worth mentioning that you'd have been downvoted into oblivion for mentioning this on a social network just several years ago. This was also true offline, people didn't want to hear it.
Would you mind linking to some resources you'd recommend to start learning if you were starting today? I'm just starting to learn elixir and Phoenix, but I'd be interested in how you'd approach it today.
Close enough: I will flag this link without reading it.