skysight-inc/HackerNews huggingface dataset:
I hate when article do that. Let me pick a unit of measure that makes the number sound REALLY big. Did you know I weigh 75 THOUSAND grams? I'm huge!!!

I'm not sure where he got the 9 billion gallons per day from, but it's suspect. Total public utility water use is 42 billion gallons per day. So lawns take up 25% of all public water use?[1]

I could see that being true in some areas, but when I used to live in Michigan it rained often enough that rarely ever watered. Maybe once or twice a summer?

[1]http://water.usgs.gov/watuse/wuto.html
It's interesting that one of the first books I read as a child ~5-6 years old was describing how a human body works.

It had a full chapter on macro-nutrients.
I'm 37 in Australia and I've literally never had a chequebook in my life. I think one time I used a bank cheque for a real estate transaction but that was a decade ago.
Markets vs. polls as election predictors: An historical assessment [pdf]
It's true that key rotation would mean changing your IP address, but that is something that is fairly routine on the current internet already, though certainly infrequently done by major sites and services.

The primary purpose of the encryption in CJDNS is simply to establish identity and make the completely decentralized addressing system (the key component) possible. Using the keys to do built in transparent end-to-end encryption is an important and valuable feature as well, but ultimately is secondary. If you need the kind of security that requires frequent key rotation, you should really be using an additional encryption and identity verification layer on top, just like with the current internet.

Also, CJDNS uses 512 bit keys, and the nature of how the protocol works means that any address collisions (which would be unavoidable by someone impersonating you) would be obvious and detectable, so for it's intended purpose it should not be necessary to rotate keys very often at all.
I worked on Free Skool Santa Cruz (http://santacruz.freeskool.org/) but we stopped a few years back. It's entirely decentralized, and there's a bunch of projects around the world. Here's a wiki page that has more links and resources: https://en.wikipedia.org/wiki/Anarchistic_free_school
Does anyone know the Twitter handle in question? I'm curious to read about that incident.

(edit: Oops, I guess I didn't realize the bold were hyperlinks in the article. Thanks for the pointer.)
Stanford Research – Can Your Personality Explain Your iTunes Playlist?
Yes, it's @n. This is linked from the article: https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...
EFF Announces 2016 Pioneer Award Winners
Likely @n: https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...
The connection between elementary physics and "information" is unproven pop-sci that desperate physicists have come up with in order to stay cool and relevant, in the absence of any real breakthroughs in physics for close to a century.

Throw it in the same rotten bag as string theory and super-symmetry.
As in 'The Art of War': "Appear weak when you are strong, and strong when you are weak."
Parent said "that can compete" so no, in practice, we don't have that.
(Of course I hope the situation will improve!!)

https://en.wikipedia.org/wiki/Comparison_of_deep_learning_so... (see column "Open CL support")
Being unable to fly their airplanes will likely mean going out of business as well.
how do I opt out?
Not really - it's just a pie chart by industry. It doesn't say anything about other companies.

If you search by organization you can get some numbers but it's not comprehensive. For example, it says that only 28 people (not hundreds) are profiled with "google", 30 with "microsoft" and 1 for "hewlett packard", etc.
@OP: the article's title has changed (to reflect the fact that the sum to be paid will be in excess of $400M)
> Your linked version also doesn't mess up the units: 3.2°Kelvin is incorrect, it's 3.2 K. Kelvin is never used with the degree prefix.

This is pointless pedantry. Yes, the official unit is just "Kelvin" now. No, it's not impressive to recognize this misuse. This is little better than pointing out that someone wrote "too" instead of "two".

Historically, it was also called degrees Kelvin, so it's not as if there's a lack of precedent for this, even if it's no longer the preferred usage.

> I could understand that in copying the quote one might have not noticed the superscripts were messed up, except it is evident deliberate alterations were made. Very strange.

It's not evident at all. I don't know why you would assume that some random StackExchange answer is the definitive version. Schneier's original version uses °K, per Scheier's blog:

https://www.schneier.com/blog/archives/2009/09/the_doghouse_...

As does the original answer on StackExchange, actually (look at the revision 4 diff):

http://security.stackexchange.com/posts/25392/revisions
Olympic Gold, if not for nature's call
Browsers added built-in popup blockers and the option to disable flash for just this reason - to enable users to block only the bad behavior. Well-behaved ads would continue to work just fine.

But the advertisers completely ignored that very clear message. Rather than avoiding bad behavior and being good citizens of the society, they instead found ways to circumvent the blocks, achieve the same effects, and make things worse. And now they want us to feel sorry for them. To feel guilty for not letting them victimize us with their bad behavior. Blocking all ads is a reasonable response. We gave them a chance to behave. They blew it.

Besides, if their ads have, (hypothetical number) just a 3% chance of serving malware that might cost $1000 in time (or otherwise) to repair, then each ad would cost each consumer (on average) $30. So who's robbing who? (Admittedly 3%/$1000 are probably high numbers, but arguing that is no longer arguing whether the advertisers are committing an offense, just arguing the degree of the offense.)
Thanks for sharing your story Kenneth. Unfortunately it will be a common one... Maintainers of open source projects will be increasingly target by sophisticated hacking teams, sometimes government funded. They will often win but the best thing you can do for yourself and your users is to practice good security hygiene and this story is a perfect example why. Strong random passwords everywhere (no repeated passwords) and 2-factor auth should be the minimum. Thankfully there are plenty of free apps out there that help you manage this process. Nobody can have perfect security but you can easily raise the bar high enough to force an attacker to move elsewhere. Also the Op's password was most likely taken from the recently leaked LinkedIn breach (educated guess).
Good enough for what?

If we're talking about providing for the energy needs of the Earth, that'd be way way overkill too. See how much solar we'd need on Earth to power our needs: http://www.techinsider.io/map-shows-solar-panels-to-power-th...

If we're talking about powering some future hypothetical civilization.. Yeah it'd have to be ginormous and have huge energy requirements to warrant that much energy. Maybe if they wanted to channel that energy and blow up a few planets it could be useful..
You'd like updates on 3DP but not too often. Subscribe to our monthly Newsletter
Even many new academics follow that minimalist style. Academia frowns upon style over substance.
There's ways to deal with stuff like that in commercial sector and academia going back a long time. It is more complex than a simple ping. It's also common to have the protocols analyzed or even formally-verified for avoiding issues like you mentioned. Many systems will also have things like separate power supplies, certain distance apart, octocouplers, whatever to reduce hardware glitches. There's also both noise-immune (like 1802) and clockless (like Amulet) architectures to knock out those problems. Systems with a subset of these have been known to go years to over a decade without downtime.

The usual culprit in stuff like you described is management. They either force knowledgeable staff to use less to save money in short-term at long-term expense or don't even hire staff good enough for high-assurance systems. Those do cost money given they're uncommon to rare. Although, one company (Ericsson) did go all out one time making their network nine 9's just to show it could be done. Till management and customers looked at the cost. :)

EDIT to add textbook case study on management angle:

https://www.youtube.com/watch?v=nsJpTTIEySo
Kenneth should repeat N's big takeaway:

• Avoid using custom DNS emails (e.g. yourname@yourdomain.com) for any login purposes. It basically opens you up for these kind of attacks (where a hacker breaks into your domain name account and forwards your custom email to his own).

Read N's story at https://medium.com/@N/how-i-lost-my-50-000-twitter-username-...
Smells like spam
This keeps happening because:

1. Lots of companies don't yet realize that if you're not a technology company you may as well close up shop cause eventually you will fade to competition or have a reputation destroying event.

2. They don't pay their employees enough.

3. They don't respect their employees enough.
Google has a huge number of interactions with regulations. Whether or not there is a revolving door ought to be orthogonal to your opinion on whether or not Google is in the right on many of its legal positions.

Like many other companies, Google uses the Double Irish to minimize its tax bill. Assuming the law were updated to affect all Double Irish users equally (like to e.g. Facebook), do you think we should prevent such tax evasion? The answer seems to me obviously yes, regardless of your political persuasion. Clearly lobbying must have some impact on its favorable tax treatment.

In a manner of bundling similar to other tech companies, Google promoted Chrome on www.google.com. It seems reasonable to describe that promotion as using its dominance in the search market to become dominant in the browser market. Likewise, its complex deal with Android manufacturers results in Google Search (among other applications) being the default on their phones. The EU is in the process of sanctioning Google for the later. Supposing the spirit of anti-trust law were applied equally to application bundlers (like to e.g., Apple), do you think we should prevent such bundling from occurring? The answer to me seems to be yes: I think unbundling software makes the software ecosystem healthier and more innovative. Clearly lobbying in the U.S. must have some impact on its favorable anti-trust treatment versus the E.U.

Like few other funnels, Google monetizes content in ways that minimize the value to the producer. This could mean monetizing copyrighted material, like searches that lead to movie torrents or whole copies hosted on YouTube. Or its dominant place in search makes previously subscription-only newspapers have to go free on-the-web, because news cannot be copyrighted and anyone can read an NYTimes article and write a free (but plagiarized) destination for search results. How much value should go to producers, and to the extent that it extracts a rent from the transaction, should Google be the entity that transfers the value from the producer to the consumer? The answer to this question isn't obvious. But Google has won a complex set of legal victories, like the Google Books Search settlement lawsuit and lawsuits by newspaper publishers around the world. It's likely, though not as clear, that its extensive relationship with government (and for that matter, consumers) has earned it a favorable view of its rent extraction from producers.

The controversy ought not to be the revolving door. You would have to be a real blowhard to believe that Google doesn't receive favorable treatment from the government. Furthermore, you should be allowed to campaign against Google's favorable treatment without simultaneously campaigning against Apple, Facebook, and all of corporate America.

Instead, I think the controversy should be whether or not you actually think Google is in the right on these matters.
I remember when Google had basically pledged to stay out of politics. Then the Government sued them. You see, when you've got that kind of money, politicians don't allow you not to bribe them.
Isn't twitter basically a public message board for every twitter user?

So now the public message board app has a public message board?

This is like explaining that Lyft is Uber for rides.

Unless I am missing something (which, I concede, is entirely possible).
NASA: Standard Disclaimer
It's odd not to examine the "contacted a friend at GitHub" part. On the one hand, it's all too common to see this as the only escalation path at a modern tech company. On the other hand, at companies without strong internal controls, it raises the question of how to authenticate yourself to the friend at the company - especially in what the author describes as a stressful 10 minutes.

We know from postmortems that the error-handling code tends to be among the least-tested parts of a codebase, which leads to cascading failure. I wonder if an even wilier attacker could have leveraged the analogous failure here.
Don't Ditch Capitalism. Tax Its Extractive Side Effects and Use It to Fuel Growth
Xiaomi Redmi 3S Prime First Sale Today: What You Need to Know
OpenCL is not well supported by any major learning framework out there. Theano has had WIP support for years with little visible progress, Torch has an unofficial fork for it, and IIUC Caffe doesn't use OpenCL at all.

Like it or not, Nvidia's currently cornered the market. With their outstanding work on CUDNN et al, they are milking that cow for all it's worth.
It's not just complete switch death you have to worry about. Ports can die, cables can go bad, etc. Rare, but at the scale Delta's at, it'll happen frequently enough to plan for it.
Matt Cutts, who was/is a semipublic Google employee wrote on Quora today about his work at USDS.

https://www.quora.com/session/Matt-Cutts/1

https://news.ycombinator.com/user?id=Matt_Cutts
How to Start a Startup (CS183B) – Sam Altman
But I don't want to use @gmail.com because that ties me down to the vendor.

What am I supposed to use then?
They should, yes. Are you saying those are mutually exclusive?
lol, where would you like to meet this deprecated cypher again? Hoping for an RC5?
I one time saw a story on 60 Minutes many years ago that was either about the CIA or the NSA. It doesn't really matter. During the interview, the reporter asked what the oldest thing still classified was. It's from World War I, and refers to sources and methods. When pressed that everyone involved is dead, and the former enemies are now allies, the answer came back that it was sources and methods.

Apparently, it's recipe for invisible ink.[0]

[0] http://www.fas.org/sgp/news/jmpoldest.html
Seems like it's a place where they dump any standard diclaimer boiler plate they come across, Includes Includes "Not the Beatles", "Falling rock" and "No Alcohol, dogs or horses" This is just begging to go viral.
Wildspeed for Postgres – a fast wildcard search for LIKE operator
Introducing FarmBot Genesis – Teaser – Qreoo
Directly scamming federal law enforcement seems unwise.
NASA Partners Develop Prototypes to Expand Knowledge of Deep Space Habitats
It is crazy to me that Googlers no longer even "revolve the door" to shift back and forth to working for the government. Matt Cutts is merely 'on leave'. Similarly, Eric Schmidt is on a panel at the DoD while simultaneously still in his position at Google.

It's impossible for someone to make the best decisions for American citizens while they're simultaneously employed by a giant international corporation which is evading billions of dollars in taxes, causing the rest of us to have to pick up all the slack.
> It's odd not to examine the "contacted a friend at GitHub" part.

Authentication aside: what does somebody do to talk to GitHub if you don't have a friend at GitHub that's willing to chat with you? Would Kenneth have been given the Source IP address of the attacker if he didn't know someone there?
It's AI complete to do it with human level accuracy, yes. If you don't mind blocking random friends' posts, you can craft the ad blocker to remove them all.
not enough consumers complaining it's slow

Alternatively, not enough consumers knowing that it could be faster.

Most people have absolutely no idea about processor speeds or data sizes. When I pointed out to a friend that a 10MB "flashlight" app whose sole purpose is to display a solid colour on the Android's screen was ridiculously large, she did not understand at all. Even showing her some 4 kilobyte demoscene intros which did far more, didn't have much of an effect.
I'm also pessimistic about where it's going. As if the segregation on the web isn't bad enough already. We might end up with two kind of webs- one independent and open, another capitalized and closed. Just the fact that indieweb.org needs to exist tells us what's waiting.

Tim Berners Lee would cry if we end up with 2 webs.
سكس كلب ينيك بنت ويفشخ كسها من كتر النيك افلام نيك حيوانات
Build your own security mechanisms (alerting, etc.)
The easy answer is this: these tests exist. Since no computer put to the turing test has passed, simply look up the test and observe how humans have induced the computer to fail.

In practice, a good class of tests to use is a test that must evoke an emotional response to produce a sensical answer. An example is art interpretation. Questions involving allegory. Interpret a poem etc.

Important to note that whatever the challenge is, it must always be a new example - as in never been seen before. Anything that is already in the existing corpus, the computer can simply look up what is already out there. In other words, there is no one concrete thing you can use again and again repeatedly.

Example of test that would foil a computer: A personally written poem and having discussion about it.
How to use 3D printers for your business? – Trdinoo
Would using 2FA on the DNS provider have prevented this? It's unclear to me how exactly the attacker got into DNSsimple.
I started with a chicken-wire corner reflector and a shortwave receiver back in the 70s. Great fun, especially when clouds block photons from my other telescopes.
No, the paired iPhone doesn't need to be around for a few features, including tracking activity and Apple Pay.
Hollywood Forces Publishers Worldwide to California Court
California Court Cannot Lasso Texas Resident into DVD Case
It's kind of a modified The Price Is Right mechanic, isn't it? With the difference that the actual market price is known. So each bidder's goal is to guess how slim a margin every other bidder will try for, and go $1 more than that.

In the end, assuming anyone bids at all and all the bidders are rational, someone will make a profit. It just won't be a very big profit, probably.
It does. AFAIK, the Touch ID from the phone authenticates Apple Pay transactions from the watch.

[edit] I stand corrected. Looks like the watch had a Secure Element also to store the pay info. It automatically locks if you take it off.
It predates any real standards for HTML.
My father had one of those miniature farms, he worked very hard to maintain it (and conscripted me into assisting). Every week he would ritually harvest a useless crop which went directly into the garbage. He was a very proud man, and used the condition of his lawn to signal his moral superiority.

Often in the evenings around the dinner table he would single out malingerers in the neighbourhood and proclaim them to be substandard human beings.

These proclamations weren't typically backed up by action until he was appointed an administrator on the condominium board. Newly backed with institutional authority, he took to logging lawn care infractions, and hand delivering customized warning notices to scofflaws with great zeal.
That's exactly one of the many things that FB Purity fixes - you can set it to chronological mode. (In addition to filtering out noise and junk.) It also had a "Do not autoplay videos" setting well before Facebook added an option for that.
Works at nearly 60 fps on my 50$ APU using Chrome on Linux.
I'll say what's probably on everyone else's mind: if this had not been lost and/or had been taken seriously, we'd probably be in space by now. At the very least, we'd be nearer to a theory of everything, figured out fusion, etc...
Is there a comprehensive list somewhere of which websites/services support 2FA and where to go to enable it on each one?
Here's mine if you want to try it out: https://corkpage.com/f/505938970063
You’ve got a product. Do you have these 12 essentials?
That's not what happened! It's the computer system that failed. The entire administrative team didn't just up and die.

Also, "centralize administration" just means that you can control everything from a single location. It doesn't preclude being able to control from multiple locations.

Think of AWS, you can control everything across multiple data centers from a centralized interface from anywhere with an Internet connection, even if entire data centers go down.

A sane system should essentially allow delta to operate from many possible locations seamlessly as long as they have the human operators required.
Against their users? How do their users think they pay to run the site in the first place? Would it be better on their users to require everyone to pay for use? People need to stop acting like Google and Facebook owes them something. All the free stuff is only available if someone pays. My thoughts...there are a lot of bad ad companies out there and unknowing websites place their ads up. But, to place an ad blocker on a well known established company and then use their services without paying is flat out stealing.
> Personally, I think this will become a machine learning battlefield in the next handful of years.

Everyone will get their own personal AI stalker bot from the birth. I have such high hopes for humanity. When we at it maybe also replace politicians with AI, I'm sure they will do a better job than we mortals.
Well, people in such agrarian societies don't have a good standard of living, at least from most of HN's perspective. I think things like computers would be pretty expensive for them.
Also check out adhocteam.us. I don't work there, but they're doing important work for HHS and VA.
Fractal in Excel – 16 lines of VBA code
Are your investors double dipping in your startup?
VMWare can go fuck themselves. Infrastructure is meant to be open, trustworthy AND scalable. Current infrastructure software models don't directly benefit everyone using the software. The models benefit the company, however, but run counter to improving trust with consumers.
I won't comment on the arrogance, but trust me, many scientists have verbal tics or habits that are distracting, including me. We aren't the best at public speaking, we are the best at science.

EDIT: wrote "visual" when I meant "verbal"
Justice Department Issues Scathing Report on Baltimore Police Department
I think the Google Transparency Project needs some transparency: http://fortune.com/2016/04/27/google-transparency-project/
Why the World Isn't Close to Eradicating Guinea Worm
Is that a 5400 line shell script?

echo "This configure script requires a POSIX-compatible shell"
echo "such as bash or ksh."
echo "THIS IS NOT A BUG IN LIBAV, DO NOT REPORT IT AS SUCH."

That's always a good sign.
I don't think the cloud and/or auto-scaling would help here. Most likely this is due to poor architecture choices.

Also, from what I can see, gov't departments normally outsource for projects and only ever retain staff for maintenance activities (i.e. keep the lights running). It's probably due to the way budgeting is done.
OpenBSD “Money” lyrics
Thanks for the links!
Glad to hear that work carries over, so I can revisit it as a good example.
UK Man Jailed for Killing Shopkeeper Over Islam 'Disrespect'
I is hard to believe how things have changed in the world 25 year later. I wonder I we will ever find something as transformative for our world as the www.