skysight-inc/HackerNews huggingface dataset:
I see nothing wrong with copy/paste. On Android it is a security risk, because apps can get notified and wake up when it happens, but Keepass2Android that I mentioned provides a keyboard for input which works better than 1Password.

And on desktops, I just don't think it's a real threat. Bruce Schneider doesn't thinks so either, while at the same time he recommends against auto-fill: https://www.schneier.com/blog/archives/2014/09/security_of_p...

But even so, KeeWeb and KeePass give you this "auto-type" facility that types the password for you in any password field, without going through copy/paste. It's not much, but it works if you're worried.
>Maybe you can find it?

It's this one concerning Hussain Sajwani:

http://investmentpolicyhub.unctad.org/ISDS/Details/419

It seems Sajwani agreed to drop the case as part of a settlement with Egypt [1] [2]

[1] http://www.reuters.com/article/egypt-damac-idUSL6N0DW4PL2013...

[2] http://www.constructionweekonline.com/article-22767-egypt-su...
I guess some people just really hate kittens :)

https://www.stream.me/kittendorm
KaOS Linux – One of the Best KDE Distros
Now it's just, "oh, crap, we don't have any signal out here in pumpkin head holler."
Weird. I can't find any announcement or news article about why it closed down.
Show HN: A JavaScript String replace API that challenges the status quo
https://en.wikipedia.org/wiki/Nibiru_cataclysm#Scientific_re...

If Pluto is #9, what numbers are Ceres, Sedna, Eris, Haumea, and Makemake? Ceres was considered a planet until the 1850s.

Astronomers think there are a few hundred more such dwarf planets, with 2007 OR10, Quaoar, Sedna, Orcus, (307261) 2002 MS4 and Salacia as likely candidates.

Which numbers are those?

The hypothetical planet the New Yorker mentions has an orbital period between twelve and twenty thousand years. Sitchin says the Babylonian religious texts say the period is 3,600 years.

These are not the same planet.
Yes, It is not on the millions but on $ 60k per kg according the Satellogic CEO [1]. The millions number is if you want to launch a constellation of satellites.

[1] http://www.clarin.com/sociedad/Hoy-espacio-Manolito-satelite... (spanish)
Thanks for the reply. It was really illuminating and when I think about it more, it makes all the more sense. The number of bugs, the number of times another person who is working on your code asks you something etc.
Republican Congressman Pushes Internet Sales Tax Plan
I recall 15-20 years ago some people were experimenting with capturing the tractor's exhaust and applying it into the soil that it was working, but it didn't seem to go anywhere.
> UK last month: Grosvenor dies leaving 9bn GBP in land to his son. We have inheritance tax in the UK, the son should have received a bill of several billion which would fund our health service.

The Grosvenor family have spent the centuries since 1622 — when Sir Richard Grosvenor was created a baronet by King James I — slowly building up their family fortune. In 1761 Sir Richard Grosvenor, Bt, was created Baron Grosvenor; in 1784 he became Earl Grosvenor. In Robert Grosvenor, the second earl, was created Marquess of Westminster; in 1874 Hugh Grosvenor, the third marquess, was created Duke of Westminster.

The family has distinguished itself by long and loyal service to the Crown and to the people of England. I fail to see why the new Duke should be forced to see the fortune his ancestors have spent centuries building be diminished so brutally.
There's no "generating" of a dictionary. The gzip algorithm is based upon the "dictionary" being the last seen 32k bytes of uncompressed data based upon where in the file the compressor is presently working (technically in compression circles it is a 'windowed' algorithm, not a 'dictionary' algorithm). It compresses by finding a repetitive string in that 32k window that matches a string at the current location, and outputting an instruction that says (in effect): "seek backwards in the uncompressed data 200 bytes, then copy 100 bytes from there to here".

So as long as each parallel block has pre-pended the final 32k of the prior block, the output from the compression algorithm will be identical between a straight sequential compression and a pigz parallel compression. Because at byte 0 of the current block, the 32k window of the uncompressed prior block is available to perform matching against, just as if it were running sequentially.

The only growth from pigz comes from needing to round each parallel compressed block up to a multiple of 8 bits (the huffman codes that are output are bitstrings that don't match with 8-bit byte boundaries). But worst case that is 7 bits per block for each parallel block. Given the performance gains on multiple CPU systems, a few hundred bytes net increase is not likely to matter. If those few hundred bytes did matter, then one should use bzip2 or lzip or xz and get much higher compression ratios (at the expense of much longer time).
I have written a fairly big open source React + Redux application https://github.com/rwieruch/favesound-redux and refactored it to use MobX instead of Redux https://github.com/rwieruch/favesound-mobx I hope I can add some extra value to your post.

I agree that for most users Redux feels like a lot of boilerplate. At the same time I think most people underestimate were we came from. Personally I wrote a huge amount of Angular code before and at a certain point I felt very unhappy about the two-way data binding and state handling in Angular. It was unpredictable in a huge code base at some point. Then it was the time of Flux and in our company we introduced a stores and unidirectional data flow implementation of our own. Afterwards Redux got announced and we loved the clear constraints and lightweight API from the beginning. We use it now.

In a team of developers everyone can clearly follow state changes, the state itself and the places from where the state changes were triggered. Redux is scaleable and shouldn't be used for every small project which could live without a state management library and should use setState instead. Redux simply works, even though you have already a big amount of actions in production.

I think MobX is on the right path to give an alternative way for state management. For now I see a clear benefit to kick off smaller projects in smaller teams which don't rely on Redux' constraints and scaleability. Little feature op-tins like useStrict will help MobX to have a more scalable state management system. Otherwise in a growing code base it will feel like the old Angular days with two-way data binding. In the end that is the power of MobX, because it isn't opinionated: You can either mutate your state directly in a component or build a proper infrastructure around it to make it scale.
Sure, but you still have to write that display layer. You're just moving it around on your plate. You still have to eat it.
I'm not forgetting anything, I was talking about my personal favourites, there are plenty more great songs in time signatures other than 4/4 and 3/4.
I've had several attacks hit my services on OVH. Not once did they null route, and as far as I could tell the majority of attack traffic was filtered with only a minor service interruption before mitigation kicked in. Granted these were shitty $10 booter services hitting me and not a "real" DDoS.

Be careful using services like game servers or VOIP or anything else using UDP though, since UDP is subject to much more stringent filtering at OVH and may get affected during mitigation.
It's actually not super hard, Unix has pretty good support for this, and a lot of companies have something like this internally. The gulf between "good enough for a company" and "good enough for the world" is pretty huge.

Plus, the extent to which people can't do this because they have no/have a terrible build system is generally underestimated.
http://www.atmel.com/products/rad-hard/rad-tolerant-devices/...
Read up on CP/M and DOS: http://www.computerhistory.org/atchm/microsoft-ms-dos-early-...

Here's a copy of Gary Kidall's autobiography: http://www.computerhistory.org/atchm/in-his-own-words-gary-k...
I am not agree. The human writes assembly language in very different way, compared to the HLL compiler. Taking the compiler as a reference, you will get all the disadvantages and none of the advantages it have.

I would suggest simply to take some good quality, human written assembly language source and to try to modify it to fit your needs. Or start to program some small assembly language program from scratch and ask on the asm forums for help.
Still being born https://en.wikipedia.org/wiki/Global_Internet_usage
I like Xwt: https://github.com/mono/xwt

Used it for the TrueCraft launcher: https://github.com/SirCmpwn/TrueCraft/tree/master/TrueCraft....
Disclaimer: I work for a hosting company, but these views are my own personal opinions which I held even before working where I currently do.

This is one of the reasons I would consider managed hosting as opposed to AWS, Digital Ocean, etc. With any good managed hosting provider, they are going to take steps to help deal with the DDoS. Depending on your level of service and the level of the attack, of course. But they will have an interest in helping you deal with and mitigate the attacks.

The reality is that true DDoS solutions are expensive, and if you have a "small website" then you're probably not going to be able to afford them. But if you're at a good sized hosting provider, they're going to need to have these solutions themselves and can hopefully put them to use to protect your site.
Yes it might have been a valid question a few years ago. These days the ReadySignOn iOS is unquestionably the best password manager all around. Actually it's the only one that I ccould trust. Its recently released source code of KeePass plug-in shows it actually uses a million key derivation iteration count and additional direct key xors on top of ASE256.
It's one of the things Barbara Corcoran always says. The best people in business and sales are those who take the hit and then get up again over and over. She said that amongst her own sales people, it wasn't even down to sales talents, the top performers were simply the ones who never let a hit keep them down.
Because Millenial music is s*t.

There isn't a song written this year that will be remembered in 5 years.

Also - the author forgot 'I have to stay high, just to keep you off my mind' by that Swedish chick.
Governments do this, almost everywhere. But the Russians have been mastering these techniques for over a century now, and Maskirovka is a significant aspect of Russian military doctrine, which we in the West - while we are tuned into our own variety of it (the Pentagon are really good at this too) - are not necessarily prepared to understand, especially the Russian variant, completely:

https://en.wikipedia.org/wiki/Russian_military_deception

It has relevance to us here on HN because after all, these same techniques can be de-weaponized and re-industrialized, and such actions have legitimacy in the marketing world in which we all play. It is indeed wise to learn the variants of deception that major governments - and other world-oriented bodies - enact upon us, the populace.
interest to hooking that up with a copy paste detector that takes LICENSE file of repo into account
> this fonctionnality is offered to you only if you call the plateform via a special number - see if your country is in the list

Classic French English "mistakes" on the page.
Tire Pressure takes no more than 1-minute to check.

What do you do when you're waiting for your gas to fill up? Might as well be productive, right? Plus, air-pump stations are all over gas stations. If you're getting your gas filled up, might as well check tire pressure while you're at it.

Leave a pressure gauge in your car.
I've faced DoS attacks for years as I run internet forums.

The simple advice for layer 7 (application) attacks:

1. Design your web app to be incredibly cacheable

2. Use your CDN to cache everything

3. When under attack seek to identify the site (if you host more than one) and page that is being attacked. Force cache it via your CDN of choice.

4. If you cannot cache the page then move it.

5. If you cannot cache or move it, then have your CDN/security layer of choice issue a captcha challenge or similar.

The simple advice for layer 3 (network) attacks:

1. Rely on the security layer of choice, if it's not working change vendor.

On the L3 stuff, when it comes to DNS I've had some bad experiences (Linode, oh they suffered) some pretty good experiences (DNS Made Easy) and some great experiences (CloudFlare).

On L7 stuff, there's a few things no-one tells you about... like if you have your application back onto AWS S3 and serve static files, that the attack can be on your purse as the bandwidth costs can really add up.

It's definitely worth thinking of how to push all costs outside of your little realm. A Varnish cache or Nginx reverse proxy with file system cache can make all the difference by saving your bandwidth costs and app servers.

I personally put CloudFlare in front of my service, but even then I use Varnish as a reverse proxy cache within my little setup to ensure that the application underneath it is really well cached. I only have about 90GB of static files in S3, and about 60GB of that is in my Varnish cache, which means when some of the more interesting attacks are based on resource exhaustion (and the resource is my pocket), they fail because they're probably just filling caches and not actually hurting.

The places you should be ready to add captchas as they really are uncacheable:

* Login pages

* Shopping Cart Checkout pages

* Search result pages

Ah, there's so much one can do, but generally... designing to be highly cacheable and then using a provider who routinely handles big attacks is the way to go.
Yes, but not as a meme.

And not generally howling like that.

It's definitely a thing.
I'm sorry to hear about this. How do lawyer's think about this situation (up front vs potential earnings) for something that seems like it could be a sure thing?

Are there any legal financing options available to manage the fact that cash is needed up front?
If Android Dominates, Why Are There So Many iPhone and iPad Accessories?
> According to official records, five people died while constructing the Empire State Building. One was struck by a truck, another fell down an elevator shaft, a third was killed by explosives, a fourth struck by a hoist and the fifth fell from scaffolding.

On the other hand it doesn't seem like the Freedom Tower construction had a very good record either (but I couldn't find any info on deaths):

> In fact, The News found at least 81 incidents involving dangerous work conditions at the site since construction began in 2003. Through this year, at least 42 of those incidents involved workers falling from a height far enough to seriously injure themselves.
> "But don't hold your breath for oriental tuning. I don't see any reason why that would ever catch on. ick."

I can understand your personal preference. That said, I think the ear is more adaptable than you might think, I've found myself enjoying music that employs microtones. To give one example, here's some Turkish music played on microtonal guitar:

https://m.youtube.com/watch?v=iRsSjh5TTqI
Aren't there existing Craigslist apps that do most of this already?
typical article of someone really smart and educated that want to talk about something he doesn't really understand, but he doesn't know that.
First flights of Dragon 2 will splash down under parachute because NASA is nervous about propulsive landing. When propulsive landing happens (probably at CCAFS) we'll see how fast can the capsule be decontaminated (superdraco uses hydrazine fuel, will need something like this: https://www.wired.com/images_blogs/dangerroom/2011/11/120310...).
You will definitely not pay again for the Android / iOS apps, unless they release it with another name in the app store, or they introduce another paid option, hiding new features under some switch in their code, otherwise for both Android and iOS it's a pay once model.

I've also had 1Password 6 for at least a year. Nothing new happened since I first bought it. And the Windows client still sucks so horribly that indeed that price isn't justified.

But btw, for 3x desktop licenses I don't think you'll get away with 3 dollars per month ;-)
> on a guarantee of privacy that has been unilaterally revoked

The Whatsapp ToS also says that they can change the ToS anytime they want and however they want and people using their software knew this. This is the risk that exists with every single proprietary platform. If you don't own the code, eventually it is going to screw you, Stallman has been saying so for 40 years now and people still get surprised when it happens even though it eventually happens to every single proprietary platform. Don't want to get screwed over? Use open source platform where you control your data.

As for the ICO, they are the incompetents responsable for the cookie alert on every page simply because they don't understand how stateless network protocol work, no doubt they will do a great job "investigating" this case /s
If you want good prices you need to buy a whole pallet or more of panels: http://sunelec.com/solar-panels
PR piece, bleh.
I wouldn't be surprised if features were removed in a version or two. The have negative incentive to maintain working dropbox synching code, since now it's competition for their main product.

Even if they don't remove the feature, what are the odds it gets any love and continues to work well?

Bitrot is a real thing. Most software needs a little bit of love to continue working as the world around it changes.
Unlikely. The standard for infringement in the US (likely similar w/EU via treaties and the like) is that it's confusingly similar and in relation to products or services similar to the products or services covered by the trademark.
I think the explanation is reasonable even if you disagree with it, and the world isn't a polarity between "company behaviors I agree with" and "shady, insidious, underhanded behavior by a company that deserves basically openly harassing someone who volunteered to talk about it and questioning their integrity and honesty in a comment." People are too quick to accuse someone of dishonesty these days and I don't think most realize how serious of a charge that actually is. If you said something like that to me in person we'd have a serious problem because at the end if the day, integrity is all anybody really has.

Anyway, completely happy subscription user here and it's actually the reason I went back to 1Password. I used to do the standalone Dropbox thing too and the subscription is just night and day better, and given the value I extract from this product I'm not going to freak out over half a coffee a month nor accuse AgileBits, a company I've tremendously respected for many years with their attention to support and customer experience, with suddenly being the axis of evil as you've done here.

I'll drive this point home: I actually got the standalone licenses cheaper through work way back when and still happily entered into paying for a subscription from my own funds.

I think the people extremely upset about this, including you, are the ones being disingenuous and forgetting how reasonable AgileBits is in everything else they do. I'm not even a fan, it's just been apparent to me for a long time.

Again, this is $36 per year. How much value do you extract from the stuff you store in 1Password? Is it really that unreasonable for a company to move toward more recurring revenue? It's a really weird opinion here, of all places, the "let's build a hypergrowth SaaS" home of the Web.
Ask HN: Microservices testing best practises?
Hello fellow developers, architects, tech leads,

Two years ago In my current company we started migration into microservices. The whole project happen without any plan in place. microservices were created ad-hoc, when someone wanted to create something new or just migrated a part of monolith API. We end up having around 15 coupled services. The problem we are facing now are the tests. As we don't have client libraries - project were e.g. User microService is implemented, mock its methods during unit/functional test. Mocks are part of the project consuming this service. Integration tests are done manually on staging. Because of that if something in the given microservices changes we are unable to detect the problem (unless someone spots it on staging). It happens often as developers do not update mocks in depended projects. In future we will run integration testing in docker using endpoints not mock but first we have to migrate our build environment to support docker.

Few questions:

#1 If we writing integration testing to test flow that depends on e.g. 5-6 Microservices where this test should be stored, in the code base of the client applications or separated repo?

#2 Should we use client libraries that e.g. provided mocks for given microservice so if there is a change all depended projects will fail running functional tests?

#3 How you track releases between multiple projects, e.g. branch xxx from this website can only work with microservices that are using branch yyy? E.g. in case you would like to rollback website to the previous release. And at the time given microservice could change few times.

I would appreciate any feedback you can provide on microservices at your workplace.

Thanks!
Perhaps the point the article is aiming for there is: we've started down a path toward cars becoming almost "System-on-a-Chip" designs, like mobile and IoT devices currently are. But the analogue components of a car—places where the motor is connected to analogue sensors, or analogue actuators, using analogue (e.g. hydraulic, or rotating-shaft) signalling paths—resist this vertical integration.

You're right that there's no reason to not put these technologies into petrol cars. But there will be two opposing forces from that point forward: the computerized side of the car trying to expand its digital signal-path tentacles through the whole architecture, and the traditional petrol motor and its associated parts resisting change-for-the-sake-of-change in favor of well-known (analogue) engineering solutions.

In the end, I suspect the force of computerization will "win", and what we'll end up with is every car essentially being an electric car architecturally, just with some cars containing a petrol-fed electric generator under the hood.

Such an architecture likely won't be as fuel-efficient as current hybrid designs are! But it will win anyway: due to the vertical integration possible in electronic systems, it'll likely be much, much cheaper to produce, and more reliable. The "core" of your car—everything that's not sensors or motors—will be a $50 daughterboard, not even worth diagnosing when there's a problem, just popped out and replaced. Just like phones are today.
I created a video course aimed at ML enthusiasts with software experience. It introduces Google's TensorFlow library, walks through code examples, and tries intuitively explain some of the statistics. https://www.packtpub.com/big-data-and-business-intelligence/...

But I also agree with other posters that you should study fundamental statistics first.