skysight-inc/HackerNews huggingface dataset:
There's a element of truth to the idea that really glaringly obvious opening emails act as a filter for the most naive, but I suspect much of it is also because scammers tend to be lazy, prefer to write about places and companies they know about, copy other scammers' "formats" slavishly, aren't necessarily aware that what sounds like a perfectly regular name to them tags them as Nigerian to most readers whether they mention it or not, and are pretty sloppy in their execution even if they start out pretending to actually be Blackberry Lottery, London Mayfair. One big reason not to mention Nigeria, oil money or large inheritances in the opening email is that even really unworldly people have spam filters.

It's amazing how often even the relatively competently- executed scam listings that appear place on classified and auction sites raises red flags up because the reply email for Mrs Smith from Scotland detailing exactly how she'd like to be paid a deposit by trusted payment service PayPal belongs to princeadebayo or mrsolatunde. Still suspect they're more likely to make money doing that than the ones who have to really, really cajole the rare credulous person that replies to them to make that "deposit" for the 713,000,000 dollars of inheritance money.

Worth noting the fact that Nigerians are also associated with more non-obvious forms of online fraud is almost certainly damaging for those of Nigerian heritage who actually are trying to conduct a bit of business or sell off unwanted assets online.
I'd say the onus is on the person trying to train "empathy" to perceive the conversation is awkward and get to relate to you in a different manner.

But if it's you trying to train it, the onus is on you to make it not awkward. Because everybody do default to this conversation.
Discussion: https://news.ycombinator.com/item?id=11644340
The secret to turning your business around from a champion BBQ pitmaster
I know I am much more willing to run some software downloaded from a website that looks like it hasn't changed since the late 90s and is maintained by one person and their dog.
Why Startups Are Struggling
I created an Ansible role to do the majority of the tweaks immediately: https://galaxy.ansible.com/geerlingguy/security/ (works on RHEL/CentOS/Fedora/Ubuntu/Debian/Arch).

You should really automate this process if you create more than one server, ever. It's fairly easy to get the basics, and if you don't automate it, I guarantee you'll miss one or more steps in the setup.
For good algorithms/constructions/primitives, like AES, even though there are selectable key sizes, they don't in practice matter (arguably they do in a post-quantum world, but they're the least of our concerns). There is no practical distinction between AES-128 and AES-256.

There is a significant practical difference between RSA-1024 and RSA-2048. But you shouldn't use RSA at all. You should avoid it, as much as possible, for other reasons.

I am militant about this point because key size selection is something everyone feels competent to nerd out about, but then they ship things like AES-256 running in unauthenticated CFB mode.
I am not assuming - we reference more tenants than any other rental company in the UK and know how a reference decision impacts a tenancy going ahead (it has a massive impact). We also know how many landlords order references (again, nearly all).

I kind of wish the data presented was more thorough, but that's probably because I'm too close to the industry - the headline is certainly catchy, and the comparison over time certainly more interesting, I just wanted give a heads up about the actual % figure not being representative.
Life in America is simple, "To each his own". You are on your own if you fuck up and no, you can't rely on institutions to save your ass. Institutions are just looking for their own good.
The MOOC on coursera is an excellent place to pick up some basic terminology and simple algorithms. It is taught at an undergraduate level, so it is rather accessible.
There probably are such scripts, but the educational value is bigger in the post format.

That said, if you do such things at scale, you'll likely have automated provisioning and configuration management systems in place anyway.

For example you could have images that have the static parts already pre-configured, and something like cloudinit for the ssh keys and/or passwords.

Or you provision the systems with foreman, and then use puppet for configuration management.
How are they two separate issues? If you don't go as fast as possible, you can get less work done before your deadline. Even with today's CPUs and the kind of parallelisation that a good DAW program will do, I still routinely see producers (myself included) hit CPU usage limits. In audio DSP, programmers have responded to the increase in CPU capacity not with higher-level languages but instead with more computationally expensive algorithms (modern filters, for example, use techniques derived from circuit simulators for solving nonlinear equations).

Besides, actually writing the DSP code makes up a comparatively tiny portion of the development time. Tuning and tweaking the DSP algorithms takes far more, and designing the user interface dwarfs both. I know multiple audio products which use Lua for their UI layer because the productivity increase is so significant. And there, you don't have to worry about performance to anywhere the degree you need to in the DSP.
Well I wouldn't have 'parroted' it, had known that it as 'tired old discredited creationist propaganda'.

Does that answer your question?
All users in your team are forced to use dark terminal backgrounds?
I had to look it up: RUD is "Rapidly Unscheduled Disassembly"
I think it is. Of course there's going to be shipping. Moving things around isn't free.
Be aware fail2ban does not handle IPv6 at all with its default configuration on Debian/Ubuntu.

https://github.com/fail2ban/fail2ban/issues/1123
We run one here:

https://legalentityidentifier.info/lei/doc/page/api
Why the LinkedIn Acquisition Is So Important to SaaS
At best you can call that losing "lots of potential money".

Equity is not money.
As someone who used to use mRemote everyday, all day long (change of jobs since then and the work I do now doesn't require it) I can say that mRemote(ng) is super stable, especially considering what it does. And I used the app more than any other on my computer, apart from Chrome, and it rarely had any crashes. The fact that it had barely any updates for years but was still so stable is a testament to how well it was written, regardless of it being written in VB.

And just because a language is used for teaching and not necessarily designed for super robust applications, doesn't mean something written in it isn't useful or dependable.
Lopper: A lightweight C++ framework for vectorizing image-processing code
Apple’s Latest Siri Feature: Search, Drag, Steal
The thing I'm always missing on Reddit and HN is a sliding scale to tweak the time dropoff factor. For example I've been busy and check Reddit for the first time in four days. Ideally I'd see the most important stuff of the past 4 days, but the algorithm for "best" is not configurable and I roughly see what's hot today.

Another example is a thoroughly boring lesson where you just keep hitting refresh and all the links are purple already. Here I'd slide the scale to "what's new in the past 5-30 minutes?"

On reddit you can go for top posts of the day/week/month/year/alltime already and HN can do the same via the search feature. What I can't select is a granularity of less than a week and either longer or shorter than a day, and this website can't do that either, so for me at least this site has no use.

I'm not saying you (OP) should build this. It's more of a shout out to the community in general, perhaps someone has tips (e.g. an app that can do this) or someone agrees and happens to know a reddit admin and tells them... just my thoughts. That's why I'm posting this, not to make you change this site ;)

By the way, it might just be me, but the background... is more of a foreground, at least when I try to look at the website it jumps out immediately.
i have not found anything more powerful than panda for this kind of thing, its the perfect mix of customization and preconfiguration.

http://usepanda.com/app/
When to use such a DB?
We are preparing one focussing on application development:

https://github.com/FallibleInc/security-guide-for-developers... (work in progress)
I read exactly the same thing - I was wondering if he was going to start touting how amazing it is to be able to just start talking with people in "Engineering Rooms" or something.
he's already taken coursera courses and looking for further resources.
You're welcome. I only discovered it myself recently when testing their IPv6 tunnel service.

no beer required :-)
Audio Weaver is a graphical tool for doing audio dsp. You use a drag-and-drop interface to configure your signal flow graph. When you "run" the system your graph is used to dynamically instantiate the necessary low level functions and compose them together. While the design is running you can do live tuning (changing gains, filter coefficients, delays, etc.). The low level functions have implementations on several architectures (PC, ARM Cortex-A and M, Tensilica HiFi 2 and 3, ADI SHARC, TI C66xx, plus a few more). This means that your signal flow graph is cross platform.

DISCLAIMER - I work for the company that makes Audio Weaver.
That's my issue with the Raspberry Pi.

It's often advertised as a 35 dollar computer, etc., however when I decided to get one all the recommended partners and distributers were easily selling it for 40-45 minimum, excluding tax and shipping costs.
> sudo ufw allow from {your-ip} to any port 22

I'm surprised nobody mentioned this is a great way to shoot yourself in the foot if you don't have a static IP.
There was a project called Bastille which basically did exactly that: http://bastille-linux.sourceforge.net/

It would run through a series of questions about your use case to build a security policy, and then edit config files for you.

The problem is that it needs to be aware of all the different flavors of Linux it might be running on, so it's naturally fragile and requires lots of maintenance. Sadly, it hasn't been updated in a few years.
I sort of agree that if I wouldn't re-hire a person for a role then they should be let go: after all once someone has been trained in and is gelled with the team, they should be better at the job than anyone coming in from outside. In that sense this is just a dramatic reframing of standard performance evaluation wisdom.

But I also find it a very strange thing to say, because the biggest challenge of hiring new people is that you really never know how they'll perform until you actually start working with them. In my case I've always hired for smaller organizations with a smaller pool of applicants, so I prefer to just roughly gauge for Spolsky's test of "smart and gets things done" as well as I can and then turn them loose to see what they can do. In large, well-known companies with huge hiring funnels false negatives matter much less and they are incentivized to screen very aggressively on whatever axes they can. However in either case, the existing employee has a known performance profile, and the new hire is unknown regardless of how good they look on paper. So I just find it an obtuse apples-to-oranges comparison to frame performance reviews this way.
So, do you have any real criticism or do you just hate proprietary software and hyped things?
The Adafruit offices are in NYC, right? There are three or four Microcenter stores in the area, and they claim to have "10+" available.
Will the Internet Make Most Languages Go Extinct?
My style is that I like constantly trying to put myself further into something I don't understand. If you read about something interesting in this forum, just go straight into trying it out. Install everything you can, test out the languages, packages and tools to the best of your ability.

The more you don't understand, the better you're doing! Keep asking questions. Keep trying tutorials. Keep pushing into what you find confusing and difficult.

I can't say for sure this is a great method of learning, but it's the style I enjoy most. Good luck, and thanks for opening this thread.
A couple things that I think are important to being more "senior"

- Owning the problem. Don't pass the buck when you see a problem and it's well within your realm to own and fix.

- Ownership and delivery. You have to deliver. You have to remove your own blockers. You have to be realistic about what you're biting off. When you say no, and you should, you need have a reason.

- Be a leader. Make those around you better by thinking of them when you build your system.
I moved most of my 2FA/TOTP stuff to 1Password. Works great on the Apple watch, and it's one less app (I tried Authy, but I have this thing against using too many apps)
There's one where they are convinced to reenact the Dead Parrot Sketch which is quite something:

https://youtu.be/YM5QMKLjjm8
Posted today https://blogs.msdn.microsoft.com/typescript/2016/06/15/the-f...
Great tactical advice, but what a sad situation to be in. "Run this command, then run this command, then run this command ..."

There should be a single configuration file (or set of files) that declaratively describes the whole state of the machine. That way the exact situation of the server can be reviewed by just looking at files, instead of trying to poke and prod at the machine to see what commands have been run over the last X weeks.
It does, but I seem to remember it having trouble cleaning up after itself when abruptly terminated and restarted. It's been a few years, though, so that's probably no longer an issue.
I don't think that even the creationists find natural selection controversial.
Conda revisions: letting you rollback to a previous version of your environment
Apparently the broadband out there is great. The issue isn't lack of satellites or speed.

The issue is that when you have a Merlin 1D (or 3) firing directly at a mobile platform, it's going to shake violently. And when you have sensitive equipment on that platform shaking, you're going to have a satellite misalignment and signal cut outs while the lock is reacquired.

Considering this is a pretty unique scenario (I would imagine 99% of satellite internet connections don't have rockets landing on them), I doubt it's a high priority to resolve somehow.
You're confused because you're unfamiliar with the concepts being discussed. That's not the same thing as being confused because the parent comment's argument is flawed.

RSA is dangerous for a bunch of reasons:

* It has selectable key sizes and performance parameters that beg people to deploy it insecurely. That's the concept you're probably roughly familiar with.

* It is subject to a far greater diversity of implementation faults (for instance: because of its padding requirements, or because of its relatively complicated key generation process) than alternative algorithms.

* It offers one primitive operation you actually want (signatures) along with one you almost never want (encryption), which results in cryptosystems like classical TLS or, worse, every system that ever directly encrypted a credit card number with RSA. Alternative algorithms don't offer this foot-gun.

* The underlying mathematics of RSA are weakening(/improving) faster than those of elliptic curve; we could lose RSA entirely within our lifetimes even if quantum doesn't come to pass.

You don't have to take my word for it. Survey modern cryptosystems. Note which ones depend on curves and which depend on RSA, and then investigate the reputations of each of those systems.
BPF is Berkley Packet Filter: https://en.wikipedia.org/wiki/Berkeley_Packet_Filter
Oh, so it is ok to question motives! I'm so relieved. Google and wikipedia will quickly and easily disabuse you of the idea that it's "a big flaw in the theory of evolution". What were your motives for thinking and parroting that there is a "big flaw" in evolution without bothering to look it up, when it's so easy to discover how tired and discredited the "absence of intermediate forms" argument is?

Here's the first google hit with the phrase "absence of intermediate forms" you parroted, a site specifically dedicated to spreading misinformation about evolution -- Gary Bates' Creation Ministries International:
http://creation.com/that-quote-about-the-missing-transitiona...

>Gary has been speaking on the creation/evolution issue since 1990. With a background in management and marketing, in 2002, he was invited to join the ministry full-time in Brisbane and eventually became its Head of Ministry. Much in demand for his popular lay talks on creation, Gary and his family relocated to America to serve as CEO of CMI-US. He was also elected to the position of CEO of CMI-Worldwide, CMI’s international Federation of ministries.

http://creationwiki.org/Gary_Bates

>Bates has a keen interest in the UFO phenomenon and wrote the Amazon.com top 50 bestseller Alien Intrusion: UFOs and the Evolution Connection. In July 2009 he was the keynote speaker at the first Christian symposium on the UFO phenomenon held in Roswell, New Mexico.

And here's a more reputable source that debunks the claim you parroted -- National Center for Science Education:
http://ncse.com/creationism/analysis/transitional-fossils-ar...

>Fossils with transitional morphology are not rare. Fossils illustrating the gradual origin of humans, horses, rhinos, whales, seacows, mammals, birds, tetrapods, and various major Cambrian "phyla" have been discovered and are well-known to scientists. Explore Evolution's claims to the contrary are just a rehash of older creationist arguments on this point, relying on out-of-context quotes, confusion over terminology and classification, and ignoring inconvenient evidence.
Quite right. In a one-on-one conversation, I know how to conduct myself to make it less awkward for the other person, but I still feel like I'm lying by omission when I answer questions like that.
LIGO Gravitational Wave Webcast 10:15 Pacific
A coworker of mine used to ask job candidates (usually folks with PhDs) with HMMs on their CV "what's hidden in a hidden markov model". Lots of people couldn't answer that question.
I saw this a couple of years ago, its a pretty nice rotary engine. As others have pointed out, rotary engines have their challenges but their advantage in weight and torque still makes them a good choice for aircraft.

The "secret sauce" that the Liquid Piston folks bring to the party is the upgraded rotor shape. It doesn't need apex seals like the old Wankel version did. The news here is that they had reduced their experimental work into an actual functional engine. Unlike the Wankel, their cylinder design would really support a compact multi-rotor engine but presumably you could gang them together on the same crankshaft if you really wanted to.

Other than the UAV and possibly the paramotor market I'm not sure where these guys are going to find customers though.
I have... zero self doubt. Any "I can't do this" anxiety I get is related to my lack of prep-time, not my concern for my aptitude. I believe I can accomplish anything, given some time and practice.

Does this mean I'm an oblivious narcissist? I hadn't even considered the possibility...
That first property is an HMO. It looks like they've turned a small house into five 'studio flats', with a tiny communal kitchen.

The second, judging by the photos, is a small living room which has been converted into an 'open plan' studio. Doesn't even look like there's room for a double bed.

Both are in Croydon, so you get all the downsides of living in London, with virtually none of the upsides.

There are doubtless other catches to both properties, as decent properties never make it online.

Neither property is remotely commensurate with a young professional earning £50k.
Whoever downvoted you is apparently thinking that it not being broken on his Linux Chrome means you're wrong. Well, I also run Linux, and on Chrome it's just as broken for me as well:

https://i.sli.mg/tu1UJG.png
> The black moths could still mate with the peppered variety so they're still the same species just different 'breeds', perhaps, so is this really evolution?

Yes, not all evolutionary changes constitute changes of species.

> I am a layman but one criticism of the theory of evolution that seems sensible to me is the absence of intermediate forms.

An incomplete fossil record (and, given what is known about how the fossil record is laid down, its obviously going to be extremely incomplete even before considering how little of it we've actually been able to access) combined with evolution that is continuous (even if punctuated rather than constant-pace) is naturally going to miss lots of things between many of the things it preserves. That isn't a criticism of evolution.

> All the species seem very well defined when you'd expect a continuum.

There is a continuum; talking about it in any useful way, however, forces us to divide it up into discrete buckets -- taxonomic categories, whether "species" or higher- or lower-level categories -- and, where there are unclear cases, we end up arguing over which bucket they belong in, and how many buckets we should consider there to be.
Just because I'm nosy, what do you have intended for your 40 CHIPs? Education?
I agree with this, but I think it could be phrased in a more nuanced way. I would state it thusly:

"Key size is a red herring. People fetishize key size because it's the most identifiable number and our monkey brains just want to make that number as large as possible. But key size is a not a dial you can tune in any context, and good cryptography depends on algorithms, not key sizes. A well-designed algorithm explicitly defines the key sizes you can select because it limits how much users can shoot themselves in the foot. The number of bits is not important, it's the way in which the algorithm creates a ciphertext using that number. Theoretically, a proven secure algorithm using an encryption function with a single bit key size would be perfectly fine to use."

I think that would be interpreted more charitably :). Then again, that's typing a lot more.

Hey for anyone reading this, this is basically why companies that state they use "bank-grade" or "128 bit" encryption on their cool landing pages aren't really saying anything.
Wow! That's a keepsake. :-)
Implementation pitfalls for RSA are one problem, but not the only one. RSA systems also tend to intrinsically resist forward security (they beg for long-lived keys used directly to encrypt things) and have idiosyncratic padding requirements and message restrictions. These are design-level issues that libraries can't easily address for you.

Look at the deployed base of RSA systems, including modern ones, and note how few of them use OAEP and how many use PKCS1v15.

If you don't have a choice what algorithm you can use, I'm not so interested in what advice you're getting. Just do what everyone else tells you to do. But if you're in a place where you have real choices to make, the most important thing people can probably tell you is "don't use RSA, don't use conventional Diffie-Hellman".
Extreme polarization is keeping Congress from functioning properly: http://www.pressherald.com/2012/03/04/analysis-shows-congres...
Lenny is apparently quite effective against telemarketers:

http://toao.net/595-lenny
I find most "Web-2.0" websites childish and amateurish-looking. It's really a matter of taste. The Bloomberg site looks cheap to me -- just like a tabloid in the supermarket.

It looked much more trustworthy a couple of years ago.
HMAC-SHA256 is a secure and conservative choice for almost any application, but allows a variable key size. I'm sure I've seen deployments with a 0 bit key.

Most algorithms in use happen to be defined only for a 128 bit symmetric key or above, which is also the currently recommended key length, but that is incidental. There is no fundamental truth in your quote, it has been wrong in the past, and it will be wrong in the future.