skysight-inc/HackerNews huggingface dataset:
Yes and no, if you're in the market for an S3 clone, but want to be able to add features, fix bug or hack on it in some way, it nice to know which language it's being developed in.

As you can tell from the other comments, there's plenty of alternatives to pick from, and if you're going to dive in to the code yourself the language may be a deciding factors.
So "old fashioned lifestyle approaches" requires the internet and global access to non-native food sources.
This is an overview of the mathematics of infinity, lovingly illustrated with examples like an infinite cow, an infinite chicken, bubblegum... It's a curious transmission from a more chaotic universe.
Keep your password written on a piece of paper in your wallet, with a few extra characters you need to remember to ignore.
What network effects do you see in Uber?
The investigation for those three companies mentioned is complete and they have to pay the taxes. Now if they finally will do after years of appeals that's a different question. That was my "aka" summary.
Honest question: Why does any none need password managers? Does not chrome password sync or firefox sync do the job? Thanks
Don’t text and drive: let’s save some lives
Do Presenters and Public Speakers Really Need PowerPoint?
Why not use firefox sync or chrome password sync? All data is locally encrypted before uploading.
I know and that. And that's why I find minio interesting.
Start with a single node.
Raise up to 16.
Zero severs in Russia, China, Turkey, India..? Over 2 bn. people left out of the market? I know not all have network access, but still. Not Russia or India at least?
Convolutional neural networks on the iPhone with VGGNet
As much as it's not an MVC framewrok, I'd argue Node fits right in: it was created by devs with waaaay too much time on their hands.
Not all opposition is collusion. In their fight against e-cigs, big tobacco has an unexpected (and unwitting) ally: anti smoking activists. Less unhealthy would not be healthy enough for them and even if it was, it would literally threaten their cause. When an idea starts leaning towards ideology, anything that would deprive the idea of its base will be met with strong skepticism.
Arguably, this leak seems to have been the result of password reuse. If you store your data with millions of people and 200 employees have a way to access it, your are exposed to

1. An interesting phishing target for a hacker

2. Lots of employees who can fuck up, a hacker only needs one, one time

I'd say the probability you will be hacked is probably less if you use like a Synology with a reasonably strong password and automatic system updates.
So how does this work? Did the hacker go "Hey look, i managed to hack Dropbox, here are the data related because I trust you!" Or was it that HIBP managed to find where the data was?
Change your passwords; especially if you use the same password for many things.

you're not alright, we have a way of knowing if that was your password or not and having unlimited tries with unlimited processing power, which means it's a matter of time before someone is able to guess their way into your accounts.
> But you're overstating the frequency of github outages.

It's a little of topic, but I don't think it's overstated. People complain about the stability of something like HipChat all the time, but GitHub is unavailable more often, in our area at least.

GitHub is huge target, and outages are extremely disruptive for companies.
My girlfriend wants to ask: do you have any ideas for an upcoming space engineering thesis (2 years till graduating)
> Credit cards should work the same way: a unique authorization code specific to this vendor or this transaction and useless to any other actor.

Isn't that how chip-and-pin works?
I have my 2FA in Notification Center and consider this fine given that it's second factor. With that, it's about eight seconds for me involving one slide of my finger. I'm also mystified that you think support for 2FA and mandatory 2FA are the same thing, particularly for something like Netflix.
Has anyone had yubikey fail?

I have one on my keychain, never an issue in years, but I can't help but be concerned, one day, I will be locked out...
Something similar in Spain, your mandatory ID card is a smart card, and you can also ask for free personal certificates from the Royal Mint. Works really great to do paperwork from home, but only a minority uses it.
Change your password at Dropbox and any sites you re-use that password on (which you really shouldn't be doing).
You could probably expand on your minimum requirements a little.

I use and recommend Apple's Keychain (with iCloud Keychain if you want syncing), but that only works if you're exclusively using reasonably recent versions of iOS/macOS (aka OS X).

An alternative that I've looked at (as a basis for a business tool) is KeePass. The original app is open source, and a number of keepass-compatible tools have popped up, giving reasonable coverage for most platforms.

Obviously, as a third-party tool, it's unlikely to have quite the same level of integration as an OS/Browser vendor's solution.
How come the salts aren't available? Did the attacker choose not to release them, or were they stored elsewhere?
Misuse must definitely stop. But wouldn't this force businesses to outsource to offshore offices... Losing talent, losing jobs to other country and losing out on taxes. And the jobs that cannot be offshored would require higher/complex skillset
Zile
Engage Millennial Customers Using Mobile and Social Media
Should developers test their own code?
I have to disagree with the Authy recommendation. I switched to Authy a few years ago, but it was nothing but painful and I have recently migrated away from it. For a long time the "TouchID Prompt" was slow and buggy, but that does appear to be fixed now.

The real pain point is that it managed to corrupt one of my keys (how??) and the app tries to get me to backup my keys to their servers with multiple popups (which I cannot disable) prompting me to backup every time I use the app. I don't know why they are so determined to get hold of my OTP keys, but it isn't happening.

I'm currently using an app called "OTP Auth" and it seems quite nice, and is quick to use.
You're welcome.

I'll add, you've spanked me at least once for an off-flavour comment (on the Slashdot aquisition story). Interesting thing there was that your guidance prompted me to go beyond my first impressions (I was, and remain suspicious of the company which bought Slashdot), and turned up a fairly messy past. Might still not excuse the tone, but that ended up strengthening the basis for the sentiment considerably.
In my experience the old Google Docs worked better for (college) group work. The new one still doesn't have proper heading numbering, table editing sucks, and styling is severely limited compared to using CSS. It's also too slow/heavy for editing large documents. It seems like a case of NIH syndrome, poor product management and googlers overestimating their abilities, which has resulted in a big bloated mess that still hasn't achieved feature parity with the old one (in the places where it matters) despite years of development.

In my opinion they should not have tried to imitate MS Word, but build a new kind of collaborative word processor on the strengths of HTML/CSS/JS. Now they have just a bloated slow MS Works style crippled word processor that doesn't really work for anything demanding.
Is this a release candidate in the traditional Microsoft sense or the Angular 2 sense?
One important consideration here is that the phishing attack as described here could be pulled off even if the targeted site did not support redirects - and in general, it would be exploitable without any identifiable fault on the part of the "vulnerable" web app.

This property is an artifact of how browsers work, and it's not something that's likely to change soon. Basically, if you visit evil.com, evil.com can always load accounts.some-trusted-domain.com in a new window, give you enough time to examine the address bar and confirm that it's legit - and then sneakily navigate that window to a phishy location that looks the same as our legit login prompt, but is controlled by the attacker.

(The evil site can also detect certain events, such as navigation, and deliver the payload only at that point.)

For my whimsical demo for Chrome and Firefox (dating back to 2011!), see: http://lcamtuf.coredump.cx/switch/

(Disclaimer: I kinda wrote a book about this stuff. Also, I work for Google.)
VMware dresses up Docker for the enterprise
If you are going out into a public park surely you must expect to meet other people and the inconvenience that may cause you? I would also think that the pollution from cars (or from the leaf blower or any other equipment used to keep the park nice) would be a much bigger concern than anyone vaping? I imagine it must be terribly annoying living close to other people if you are disturbed by such minor things, but perhaps I'm wrong.
I really dig your .plan!
Most services have the option of remembering your 2FA authentication on a certain device. For example, I have to enter my LastPass password in my computer to login, but I only have to use 2FA if I'm logging in from a new device.
Visio Tips: Enabling the Developer Ribbon
Am I misunderstanding something? Alberta Labour lists this:

* General hourly minimum wage – $11.20 for most employees

* An hourly minimum wage of $10.70 for employees serving liquor as part of their regular job

https://work.alberta.ca/employment-standards/minimum-wage.ht...
Essentially agree 100%. My minor nitpic is that while I'm willing to be cynical almost whole hog including your examples, we even have similar examples that are more dumb and less insidious than yours. E.g, truffles vs mushrooms in the netherlands (one is banned, the other isn't, I'm not aware of one being the uppity fungi vs the hood shroom)

Even in the LSD example, someone using a fancier stationary could be way more guilty than a cheapo two ply. The whole thing is ridiculous in ways the crack vs cocaine thing is relatively less so. If anything, this law encourages lsd to be made on the most portable medium possible. If you claim this too was intentional, then we enter the realm of the ridiculous.

This might sound like splitting hairs, but I'm just advocating to a caveat to cynicism for things once in awhile being just flat out dumb.
Adding a thousands separator in Avada’s counter box
Ask your brother to stop the intake of sugar completely for 3 month (including all the hidden sugar in any processed food). I know this from myself and couple people which had acne that if you stop the intake of artificial sugar long enough the acne will mostly vanish. Even today whenever I eat high amounts of sugar I know for sure what will happen. I think this is a good example of misuse of antibiotics.
MONSTER PLR package includes Private Label Rights to 300,000+ article
I've dropped my YubiKey quite far onto hard ground, dropped it in water, and various other abuses. It seems quite hardwearing.
> some 2FA do not seem to think it is critical to send the email or txt msg right away, and even when they do, email servers do not really work real time

SMS isn't real time either, it's best effort. Mostly (~99,9%) it gets through within seconds, but delays of a few minutes are perfectly acceptable to telcos. As service provider you can't do much about it, either pay through the nose for "priority" delivery (which maybe halves the amount of delayed messages in our experience) or tell your customers to switch mobile providers (yeah, good luck with that).
I'm intrigued by this line of argument - have always assumed it's mainly because alcohol can be enjoyed on its own merits, whereas most drugs are taken solely for the impact on the mind (e.g. wine for taste etc...).
Maybe recommended posts instead?
> I've been reading books recently that emphasise the importance of being the first to market with something innovative

That worked well for the Newton, the Lisa, the Nomad, Amiga Inc, didn't it?

Contrast with Palm, Mac & Windows, iPods, and so on and so forth.
Interesting ! Although, firstly, "scp for the modern era" -- Not really, may be scp for the future since this is this alpha. And secondly from the Readme:

> but isn't there tool X, Y, and Z already for this?
> no, actually, not really.

https://github.com/yuzawataka/ucp
https://github.com/bnewbold/ucp
https://github.com/millerjs/udt_transfer

...and possibly more.
To generate random, strong passwords. Also not to be locked into a browser. Better actual password management (e.g. last changed). Tags.

A canary of chrome did have the ability to generate random passwords, but password management in chrome is still a pain IMO. Not sure about FF, but a quick google suggests it doesn't generate random passwords automatically.
I am not arguing about support vs mandatory. Just that I am not convinced 2FA is a compeling alternative. At least the way I see it implemented.

I like the idea behind SQRL, which still requires another device, so still inconvenient, but at least it does not rely on the server sending a message through a slow protocol. The website displays a QR code, you launch an app, scan the QR code, this app connects to the server and authenticate you through cryptography. No login or password to type, no message to wait for or to copy manually. No privacy concern since it does not rely on a third party. I could live with that.
Someone I know described visiting a small rural pharmacy in Nepal and talking to the pharmacist. Many locals can't afford courses of antibiotics for sick family members so they buy just a dose or two. This was allowed on even fairly hardcore, last line antibiotics which required special government ministry approval back home. If different countries have such different practices, things are not going to go well.
I would argue that the source is a valid complaint, but i might have overreacted after reading atleast one more article.

Like this one, http://tranquilmonkey.com/19-super-foods-naturally-cleanse-l...

They actually do write in the article that there is no research done to back up the "superfood detox" and actually seem to provide some good tips instead. But I still cant understand why they go for that style of article headlines.
Hello G+ team, please give me code syntax highlighting. Thanks.
Why is it so important what language it is written in? :-)
> Because Dropbox stores its user passwords encrypted [...]

> [...] batch of encrypted passwords [...]

> [...] from using the encryption algorithm SHA-1

> Some of the stolen passwords were encrypted with SHA-1, while 32 million were encrypted with bcrypt

> The passwords were also secured with a salt, a random data string added to strengthen the encryption.

> it does not appear that the encryption protecting them has been cracked.

I know it's completely tangential and I'm just nitpicking but damn that does bother me more than it should.
Overly cynical viewpoint - I know my own views on a whole host of things have changed over the last decade. If we were all held to account for things we believed at other times in our lives/careers we'd never progress as individuals.
Also Linux kernel logs. Kernel ASLR requires kernel addresses to be secret, yet dmesg is full of them sometimes and you usually ship those out over unencrypted syslog.
Distributed Transactions: The Icebergs of Microservices
For credit cards, check out privacy.com

I recently started using it, works great.
> "Putin fan" is not a term I would use to describe myself or anyone who is seriously analyzing the situation from a rational unbiased perspective.

You certainly wouldn't use it as you rightly perceive general hostility to Putin fans over here. I'm not sure what your propaganda fix is. Your casting me as an unsophisticated American, despite my blindingly obvious Russian reference username suggests you are a 2nd gen immigrant, so it's prolly RT. But it's certain you like to think that your opinion is not formed by propaganda in one bit, and you rather arrived to it independently (even if down to same exact talking points) at a bidding of your intellect.

I won't even bother you asking the shebboleth of "чей Крым", as I certainly know the kind of "it's complicated" Putin-fan-in-a-hostile-environment answer it would entail. If it walks like a duck, looks like a duck, and quacks like a duck...
The H1-B program allows employers to hire foreign employees, at below-market rates, by limiting those employees' options to compete freely on the US domestic labour markets. Employment is an area in which employers already have a natural advantage, a point noted (and explained in detail) 240 years ago by Adam Smith.

Offshoring introduces additional challenges to management -- it's simply easier to manage a workforce who rolls into the office and is locally present, though yes, remote (or occasional from-home) management is possible.

If a company wants to pay offshore-wages, then it can employ offshore talent, offshore, and incur the offshore management and logistics hassles. If it wants to hire domestic labour, it should do so at local labour rates.

If foreign workers are brought to domestic markets, allow them full mobility between employers.

Otherwise, the only effect of the H1-B program is to use one class of restricted-rights workers (the visa holders) to depress domestic wages through threat of a cheaper, effectively indentured workforce.

This has been clearly evident for years, and eloquently argued by Norman Matloff of UC Davis:

http://heather.cs.ucdavis.edu/h1b.html
Lyft and Uber launch programs to cater to seniors
Except that the merchant still gets to see my credit card numbers (both sides). But it's how paypal works. The merchant only get an authorization code from paypal, and this code is useless to a hacker.
Laws are usually theoretical until they are broken and tried in court. Even then they are still subject to revision.

This is not anarchist in any sense of the word, colloquially or academically. It's hundreds of years (or more) of legal practice.
If you're discussing sales, you are arguing mandatory.

Duo is the counterpoint to 2FA being cumbersome.
They are a company focussing on just one commercial product.

Also I find there's some kind of pride in quality amongst mac-developers.

Plus the lastpass vulnerability that was disclosed a couple of month ago seemed pretty basic and I haven't heard from serious vulnerabilities in 1password for a while.

And that 1Password is local.

All of that is just a feeling though, of course.
It kind of did, AFAIK it was the first functional search engine.

Everything else at the time was pretty terrible.
> Unique-per-service email addresses work pretty well as a canary for breaches

I do this too, but it taught me everything is breached - the local ambulance service, the local computer store, the local car share, small businesses overseas that I've placed orders with.

Some of the big names don't seem to be, which is lucky because otherwise I'd be wondering if it was the ISPs that had been breached. Either large chunks of SMTP routes are breached and picking up confirmation emails, or there's a giant iceberg of pwnage floating beneath the surface out of view.
Arrow's only proves you can't meet a certain set of criteria. It doesn't prove that set of voting criteria is necessary for a fair vote outcome. IIAC is particularly problematic.
Can someone in the know indicate how to BEST manage passwords for different services in a secure way in 2016? Should I be using password managers (à la 1Password, LastPassword and others), or use something like Keychain Access on Mac OS X (what are the Windows equivalents?), anything else? It's important to note that not everyone is well-educated on the matter, despite the fact that most people on HN are technical people.

EDIT: Thanks everyone for your answers, this is a good example of the power of communities.
For me, it's that 1Password runs locally and doesn't need to phone home, whereas LastPass is "cloud". Also, LastPass being owned by LogMeIn doesn't sit right with me, but that's definitely personal.

No idea about Keepass(x), although I found that ecosystem to be confusing, with different apps for different platforms you might accidentally download a rouge one on e.g. your phone. I know, paranoia.
Yeah, on the Pebble Time Steel it lasts me 7-8 days. Before I activated health activity tracking, I'd get to the order of 9-10 days on average. I find this highly impressive.
I know you're being sarcastic, but with lastpass you can rotate most of your passwords.

https://blog.lastpass.com/2014/12/introducing-auto-password-...
400k GitHub repositories, 1B files, 14 terabytes of code: Spaces or Tabs?
DDoS attacked using Chinese torrents
What currency are you quoting in? I wouldn't get out of bed for 130k in Norway. I probably couldn't even afford to.
The EU's tough line on net neutrality
I agree with you; outsourcing those services certainly helps this one-man ops team. But for a larger company with a more mature and staffed ops team, there's going to be that advantage above.
Cyber security in the financial industry
Apple and Google Face Long Battle with the EU
Like paypal and their unwritten no spaces rule?
Amen. "Name and shame" only works to some extent (re: Jacon Appelbaum) but if the person isn't that prominent, or the story doesn't get traction, then the normal human tendency to try and put it all behind oneself is a factor (along with not wanting to deal with "victim blaming") Then the story eventually turns into just gossip and is left in the past...

Due diligence is a good idea, but for the first asshole I dealt with, there were stories, but the person who introduced me to him didn't tell me because of "ethical concerns". Even though he knew the stories were true and that this guy was problematic. He is also very secretive, so any due diligence I might have done probably wouldn't have turned up much (i.e. any lawsuits would have been hard to uncover). I picked up clues though and didn't put together a full picture of this guy's character till it was too late because I was too focused on the work. My take on the whole thing was everyone in the past that had been ripped off by this guy chalked it up to "life" and so nothing ever stuck to him well enough. Typical shady businessman...

As for the second full blown psychopath I've dealt with... he had a reputation, I thought it was all more gossip / sour grapes, and I didn't look hard enough because I trusted the people who were giving him a pass (though my intuition was complaining). Never again. We all got screwed over and I had to spend £4k to defend myself against this idiot's bogus threats of lawsuits (my fault for being manipulated...)

So if I ever do business with anyone else again, the only answer is A) trust no one and B) be a psychopath for defensive purposes. Capitalism these days practically demands that you think like a psychopath because the majority of people you deal with are going to do the same. That goes for management as well - employers are not your friends. They merely may be idiots, but you are only a resource to be exploited by them.

The conclusion of all this stress over the past 7 years is that character truly does matter, in all areas of life and to focus on that first off when evaluating a person.
torrents are more general than netflix, so it's not the same category
Chrome and Firefox are password managers :)

People use other managers for many reasons: storing passwords (and other secrets) which aren't used on a site, using them on different browsers (say, Safari on the desktop and Chrome on mobile) and lack of trust on the browser's password manager.

Also, for a long time, browsers didn't save passwords with forms marked with autocomplete=off.
Tipping is the worst form of 'wage', and it's sad that restaurants in United States have made it a norm already.
I guess its ok for SES as they say the insurance premiums didn't go up at all for using the reusable rocket. So they are just saving money with the same risk for SES in both cases.
So that one issue wipes out all others? Do you really have no preference as to whether Trump or Hillary wins?