skysight-inc/HackerNews huggingface dataset:
Notebook players less keen to adopt USB Type C
Free Talks from Spolsky, Godin, DHH, Sierra, Ries, McKenzie, Wiebe and More
Is it ever a good idea to perform self-surgery?
Perhaps, but this particular exploit doesn't target the fact your passwords are stored in the cloud.

It targets the local autofill functionality in the browser, so it could conceivably have occurred in any password manager with browser/autofill integration. Including those that use a local password store.
I am now imagining a world where people can code a genome in a REPL or IDE.
When they are happy with the results, the print it out in a large 3D printer.
If they don't like the organism they created, then they kill it and throw it in a recycling bin so that the materials can be reused.
> There is no IT solution that we could come up with to change this and it wouldn't even be desirable in the first place.

Tinder has worked well for some people I know
Android runs on Linux? I'm not being facetious. AOSP is a fully open source stack that any handset maker can use, Cyanogen is as open a fully-baked distro equivalent as you could want.
Horses for courses indeed. Mavericks is the pinnacle of Aqua for me. Beautiful, great typography, great affordances, a little bit of character.
That's easy: Who cares what Lenovo installs on their hardware? Whatever is on there is coming off as soon as I get it. And their hardware is excellent for the price.
The post does point out that this would not work if multifactor authentication is on. I would never dream of using my LastPass account without that anyway.

Like with all decisions this is balancing risk/reward. The reward are all the points you have already expressed that I also love about LastPass. Currently I believe the risk is fairly minimal assuming you use 2 factor-authentication. Though I might turn off autofill now as an extra precaution.
I was comparing two possible scenarios:

a) you have set up your own internal CA, which key is safely stored on an HSM, with all security measures.

b) you use Let's Encrypt, and they issue you certificates based on DNS validation.

With (b) if malicious party gains control over your DNS server, they can issue themselves a bunch of valid certificates that you may not even know about (unless you watch CT records). With (a) remote attacker barely has a chance. Thus, a self-hosted CA may be beneficial in terms of security.
Yes, my thoughts exactly. He could had made 100x that money on the black market, so no wonder we still have problems with 0days traded there.

How long would you work for $1,000? Some days, a week, two? If you spend more than a week on this problem it seems not worth to report it... On the other hand, if you set the incentive for bug bounty too high I imagine all sorts of cranks pop up, that want to show off bugs that are not there, and resources will be bound to this task -- they have to be verified, and analyzed even if its a bogus report (and in the worst case it will not accomplish anything).

Where is the middle ground?
Seems like the fan is about to get hit again:

http://www.zdnet.com/article/lastpass-zero-day-vulnerability...
I'd say some of the points could be easily covered by something like KeePass which, unlike cloud, doesn't have to depend on questionable security of third-party services.

For example. I use KeePass to store all my password. I keep my KeePass database in Google Drive, so any change to the file will be updated. because of that I can use KeePass on any machine that has access to Google Drive (I also keep executables for various systems in drive). Furthermore, there are number of free mobile applications for KeePass which can hook into GDrive and you can use KeePass on the phone too. And lastly - browser extensions which let you use your KeePass to automatically fill & save passwords (I don't use it, though).

Sure, KeePass requires a bit more of an effort compared to all-in-one solutions such as LastPass. That is the price you pay for not thinking about possible security breaches in the cloud.
Inside Tesla's gigantic Gigafactory
> anonymity is a primarily utility for criminals/tax evaders

And terrorist and child predators, right?
One could achieve a similar thing using PDF files by utilizing a feature called "File Attachments" [0], [1].

There is nothing insecure about it too.

You could even need commercial software for it, and could use TeX and friends [2] to achieve the same.

[0] https://blogs.adobe.com/insidepdf/2010/11/pdf-file-attachmen...

[1] https://wwwimages2.adobe.com/content/dam/Adobe/en/devnet/pdf...

[2] http://tex.stackexchange.com/questions/208012/attaching-file...
Kitura – A modular web-framework in Swift
The T460p is a very good deal if you want something light, powerful and extensible for a very good price. You can get a version with a quad-core i7, dedicated Nvidia graphics card and 3k display for about 1400 USD. Combined with a three-year guarantee it's a very good deal I'd say, and much better than what most other manufacturers (including Dell and Apple) offer for this price. I also own an X1 Carbon, which is a great laptop but a little underpowered for my needs (and hard/impossible to upgrade).
You get Windows driver/graphics and power support. You get the applications that need Linux. No screwing with blobs and updates and whatnot.
BT avoids Openreach broadband break-up
It seems, spec-wise that the "real deal" sucks in comparison.

If you can run Hackintosh on it, I don't see why I wouldn't go with it instead of paying $2500 on Apple computer with similar specs.
Similar here, also using KeePass. Fairly happy to sacrifice some of the usability for more control and less "cloud".
> Which means that you can add at most 20 subdomains a week. Any more than that, and you are SOL.

Though the use cases for needing 21+ new subdomains in a week are few and far between I expect, and probably all cases where a wildcard cert would be a better choice (which LE doesn't yet support).

Note that it is 20 certificates though, not 20 sub-domains, and LE lets you include more then sub-domain per certificate. So if you can group the sub-domains together you can get many more then 20 in the period.
Because the power management never quite works as it should
I agree. A lot of "normal" operations that need to be implemented usually perform actions to different tables/entities. So, the accepted "REST" way of doing things forces you to either move your combination/"atomicity" logic to the frontend, or to call other REST actions from the first rest call itself. Even then, that specific call is not linked to an entity, but stands on its own.
Seems like LastPass' bounty program is a joke. Their max reward is $1,000.

https://bugcrowd.com/lastpass
Some of these audio examples remind me of a long night my freshman year at MIT, when at around 7 AM, in delirium, my friend and I wrote a few hundred lines of code in Matlab, yes Matlab, to procedurally generate music by probabilistically moving from chord to chord based off of the frequency of such changes in real music. Added some bass for counterpoint and some terrible percussion synthesized from white noise and we had what we believed to be some real bangers.
If you mean the kind of Optimus thing, it's actually handled okay out of the box with recent Nvidia drivers. I had problems with it about two years ago, but recently reinstalled with LM17.3 and the Nvidia drivers it automatically installed handle the dual graphics thing just fine.
> I've been using LastPass for about 3 years, and now I'm seriously thinking about all the times people told me about how storing passwords in someone else's cloud is bad.

This bug doesn't seem to have anything to do with the cloud.

FTA:

> The bug that allowed me to extract passwords was found in the autofill functionality.
At the time I submitted this, they didn't even have a bug bounty. Considering that, I think $1,000 is great :)
"You agree not to disclose the full amount awarded you as part of this bug bounty award contract."
I meant the software as a whole and the fact that there can be vulnerabilities in the browser extension right now.
> The cost implications remain slightly unclear, although at Zipline’s Kigali launch on the sidelines of the World Economic Forum on Africa, Rwanda’s health minister, Dr Agnes Binagwaho, insisted that they were comparable to current delivery methods.

Current delivery methods are person on a motorbike, or parachute drop from small airplane. Light unmanned drone should be significantly cheaper.
Why is that amazing?
https://www.amazon.co.uk/gp/product/B00689HXI4/ref=oh_aui_se...

This one (Ergotron LX Desk Mount LCD Monitor Arm, Tall Pole) has been working well for me for the last couple of years, in conjunction with a Conset sit/stand desk (also great). I got the Tall Pole version just to be on the safe side, and it gives a lot of flexibility on where you want to position and angle the monitor.
IoT is already worse, in the last couple of years there have been multiple security talks joking about the state of affairs, yet it doesn't seem to have improved much.
And even some products which supposedly provide free apples are made with apples, and require themselves to be used beyond their serviceable lifetime to provide more apples than went into making them.

In short, we either need a radical new source of apples, or we need to find a way to use far fewer apples.
Solving the webproblem in Haskell
> Why doesn't my OS run "apt-get update" in the background every so often so I don't have to do it manually

Probably because you disabled it at install time. There's a box to check in the software update settings on Ubuntu; I see a similar cronjob on Debian.

In any case, you don't have to do it. You'll simply get the version of the package that was current at the time you last did the update.

> Why is it "yum install httpd" but "apt-get install apache2"

Because these are different tools.
I up-voted you because I really appreciated the concept and the form, but...

> I would work very hard to learn how to be happy without apples (or at least with a tiny amount of apples).

The problem is: with no apples, you can't be as happy as with apples. At least, not until the others are enjoying their apples and share the negative sides with you. It's the usual tragedy of the common, when anybody could be happier if (and only if) everybody ate less apples.
Bounties for security should be valued by an independent party.
I didn't read your comment but, why should I care about climate change. I agree it is real, but I simply would rather spend time living a time efficient lifestyle.
Lumion 6.5.1 Pro Crack and Serial Key Full Free Download
Ice Bucket Challenge funds gene discovery in ALS (MND) research
OnionBalance – Load balancing and redundancy for Tor hidden services
I guess that'll teach my imaginary kid to look both ways before crossing the street.
That's because you probably bought the phone from a re-seller who re-flashed a "custom global ROM" (compiled by who knows who) which does not receive OTA updates because it's not compatible with the official releases. This is what happened to me. After noticing that I don't get the updates for a while I started to investigate and I re-flashed one of the official ROMs from http://en.miui.com/download.html.
I will ignore the sensational nonsense headline from TC.

So revenue from services up 19% and App Store growth is up 27% which are quite impressive numbers yet all the media seems to be talking about is "is the Apple Goldrush over?" The market for smartphone is fairly well saturated in the majority of first world countries. And they are using that success to sell services that run on those devices which seems to be working. How is this a back drop against which to paint a picture of decline and impending demise?
Its been recommended (at least as long as I've been using Lastpass, so a few years) that you keep autofill disabled, for exactly the reason mentioned in the article.

"Also, this would not work if multi factor authentication was on, so you should probably enable that as well."

If you have something as important as a password manager (ie something that holds the keys to ... everything), then MFA is a must. If you use LastPass without MFA, then you're probably asking for trouble.
>Everything is vulnerable.

Well, that put it in perspective for me. I just googled the vulnerabilities in offline password managers like Keepass/X and 1Password. And oh man, I was pretty shocked to see even the offline ones could be broken into.

I think I just had a crisis of faith.

>you'll be more secure than 99% of people

Thanks. I guess since I don't store very sensitive info (financial, etc.), and the important services - Google, Github, Atlassian, AWS use 2FA. I guess I don't have to be paranoid.
> more than any decade in the past,
> Humans have survived ice ages - civilisations and societies have not, to our knowledge - humans will likely survive this - but this civilisation - who knows.

From a historic perspective the CO2 were vastly higher for hundred of millions of years.
Climate change will be a challenge (sea level rise for Calcutta, New York etc) but I doubt it will be a doomsday scenario.
Android has competition in form of iOS. Windows doesn't have any competition with same level of polish. Linux experience is still broken for many people, from the moment of boot (many display changes, flashing loading screens, text messages scrolling on the screen), through broken drivers, hunting online for magic commandline fixes to common problems, ending up with lack of software support for the platform.
One should really consider using open source tools for such things. The good thing is that those are battle-tested real well and are, usually, more secure than the commercial offerings.

An example is Vault [0].

Encryptr [1] is another alternative: it claims that "all of your data will be saved in encrypted format in our Zero Knowledge [2] cloud".

[0] https://github.com/hashicorp/vault

[1] https://spideroak.com/solutions/encryptr

[2] https://spideroak.com/features/zero-knowledge
Downvoted for the speech style. "You're one of those online fanboys...".

Read up on nonviolent communication, man!
MFA for the end site, not for lastpass. This bug would still have been exploitable with lastpass MFA.
> we either need a radical new source of apples, or we need to find a way to use far fewer apples.

I'm afraid that in no way we can have the second without the first one. People switched to fossil fuels because life was way too much easier with them, and no climate change can convince us to go back unless we find another big source of cheap energy or, simply, we exhaust the oil fields.
Not sure, but maybe I say that because I'm a happy Sputnik (xps 13 w/Ubuntu) owner.

Though to be honest there is a small issue with coil whine in very quiet settings. I hear Dell has addressed this in newer models.
The fact that Android makes use of Linux as a kernel is hardly visible to most developers.

The user space is fully Java based and the NDK is so constrained that you can hardly see any difference from another POSIX compatible kernel. And they don't even support a full UNIX SYSTEM V compilant API (e.g. no IPC calls)

Now with Android 7, any NDK library that tries to link directly to non-official shared objects will get killed by the dynamic linker.

So yeah, Android has Linux as kernel, but they can change it at any moment and only the OEMs writing device drivers would notice the change.
The fact that LastPass consider that a flaw in their system that could have put them on their knees is only worth 1K is quite frightening if you are relying on them for your security.
Carbon Fibre isn't a good enough 'tech wank' material?
At times I hope that climate change deniers in positions of power are held accountable for crimes against the human race; however, in the face of what I would anticipate to be the global living conditions justice would seem pointless.

We can only hope that it becomes just bad enough to scare everyone[1], but no worse (i.e. methane pockets). If it's already "worse" geoengineering is the only thing that can save us because it's a runaway process, cutting carbon emissions would only delay the inevitable. We're not seeing much in the way of investment into that final pocket ace, though, at least Alphabet had a shot at it.

[1]: http://traveller24.news24.com/News/Alerts/watch-another-torn...
Or single camera, including neighborhood street stroll:

https://youtu.be/GnuQzP3gty4
The T440p was bulky, hot - total shit. The graphics were super weak, and the screen was utter junk. Dunno if the newer ones are considerably better; they probably fixed a lot.

The X250 is pretty good, though you get a keyboard at random and will need to replace the part (always get next business day warranty) if you get one of the junk ones. Otherwise it's a nice laptop - I've not seen anything I like more (though it could be better, of course; a 3:2 screen for starters).

I've used a T450s, and the keyboard feels fantastic on it. At 3K res it'd probably real nice. Unless you need a specific CPU/GPU, stick with the X260/T460s (s for slim). Perhaps compare reviews to the X250/T450s to see if it got worse?

Assuming you don't need high-end power (like quad core), it's more of a preference if you want a small 12" or a larger screen. I dock my X250 and it seems fine, even driving a higher-pixel external monitor. I'd go for the X260, but if software support was better for hiDPI I might consider the T450s. (If they had centred keyboards without numpad, maybe even a 15" model.)

Edit: FWIW when using it in laptop mode, I run CPU throttled to 50% or less to keep it cool. I have the cheaper i5-5200U option and it's fine for emacs/VS/browsing. At full power it can play Dolphin emulator Smash Brothers Brawl and Melee at full speed, but just barely.
What you do does seem pretty good.
I use Lastpass for work and can't stand it. I use 1Password for personal stuff (and some private work stuff now that I think of it) and highly recommend it. It's got a Chrome browser extension, mobile app, and like someone else mentioned below you can sync the encrypted db to a cloud service (iCloud, Dropbox, etc) so you can access it from all of your devices.
Skill based heat map of demand and salary in US, as per the industry
How's the heat on the T460p? Can you use it for light work without the keyboard heating up at all?
I'd agree if there wasn't an extremely good solution to this problem.

Verbal Expressions - It's an extremely good higher level interface to the underlying regular expressions tools, in MANY languages.

Including:

JavaScript - https://github.com/VerbalExpressions/JSVerbalExpressions

ActionScript 3 - https://github.com/VerbalExpressions/AS3VerbalExpressions

Clojure - https://github.com/VerbalExpressions/ClojureVerbalExpression...

C++ - https://github.com/VerbalExpressions/CppVerbalExpressions

C# - https://github.com/VerbalExpressions/CSharpVerbalExpressions

Dart - https://github.com/VerbalExpressions/DartVerbalExpressions

Elixir - https://github.com/VerbalExpressions/ElixirVerbalExpressions

Elm - https://github.com/VerbalExpressions/elm-verbal-expressions

Erlang - https://github.com/VerbalExpressions/ErlangVerbalExpressions

FreeBasic - https://github.com/VerbalExpressions/FreeBasicVerbalExpressi...

F# - https://github.com/VerbalExpressions/FSharpVerbalExpressions

Go - https://github.com/VerbalExpressions/GoVerbalExpressions

Groovy - https://github.com/VerbalExpressions/GroovyVerbalExpressions

Haskell - https://github.com/VerbalExpressions/HaskellVerbalExpression...

Haxe - https://github.com/VerbalExpressions/HaxeVerbalExpressions

Java - https://github.com/VerbalExpressions/JavaVerbalExpressions

Lua - https://github.com/VerbalExpressions/LuaVerbalExpressions

Objective C - https://github.com/VerbalExpressions/ObjectiveCVerbalExpress...

Perl - https://github.com/VerbalExpressions/PerlVerbalExpressions

PHP - https://github.com/VerbalExpressions/PHPVerbalExpressions

PowerShell - https://github.com/VerbalExpressions/PowerShellVerbalExpress...

PureScript - https://github.com/VerbalExpressions/purescript-verbal-expre...

Python - https://github.com/VerbalExpressions/PythonVerbalExpressions

Racket - https://github.com/VerbalExpressions/RacketVerbalExpressions

Ruby - https://github.com/VerbalExpressions/RubyVerbalExpressions

Rust - https://github.com/VerbalExpressions/RustVerbalExpressions

Scala - https://github.com/VerbalExpressions/ScalaVerbalExpressions

Swift - https://github.com/VerbalExpressions/SwiftVerbalExpressions

Vala - https://github.com/VerbalExpressions/ValaVerbalExpressions

And probably more, but that's just the "official" implementations.
never heard of vendor lock in?
It might have made you feel safe but it certainly didn't do it for me.
On paper.

https://www.schneier.com/blog/archives/2005/06/write_down_yo...

https://www.schneier.com/news/archives/2010/11/bruce_schneie...
Anti Mediocracy Manifesto for Software Development
This image from their website would suggest it's not. http://c1.mifile.cn/f/i/16/mibookair/design/design-mainboard...
Neither does Windows' power management come close to the hours/work you can squeeze out of OS X on a Mac.
I would love just a push notification I can open and get the 2FA code instead of unlocking my phone, finding authenticator etc.
No, the migration itself will cause transactions to stall.

For example, if you have a table with 1M user records, and you run a migration to add a column in MySQL, then any updates to the table will be stalled while the table is rewritten to add the extra column (which may take a while). This is independent of how many records it touches - even if the transaction only touched 1 record and would take 10ms to execute, if the migration takes 10 minutes it may be stalled for up to 10 minutes.

In Postgres you can add a nullable column, and the table will only be locked for a very short amount of time, independent of the size of the table.
What is frustrating about this article is that no climate scientists were caught off-guard by 2016 bring hot so far. There was a strong El Niño. Everyone saw serious heat coming months in advance.
iOS is irrelevant in many countries where the average population can't afford "devices for rich people".

Hence why Apple is trying to bride their way into India with their 2nd hand and refurbished devices.
Looks like it's an Oman meetup! Student of ISD here.
Well, if we're talking copies, then Airs are just a scaled-up version of the eeepc - same 'sharp wedge' shape (that is apparently why Lenovo X1s are being called clones of Airs).

The eeepc was the thing that proved there was enough interest for a low-power-but-mobile computer, which ended up turning into the tablet market. Crappy build quality, but people went berserk for them.
Agreed the CloudFlare analytics are good enough
Introduction to container orchestration
I think that many people agree with you in principle, but when they start considering the cost in terms of lifestyle, than the followers start to vanish.
sigh Figured as much.
Blocking ad blockers sucks Here is a better way