skysight-inc/HackerNews huggingface dataset:
Chip and PIN cards can support tokenization, which prevents the merchant (or anyone who has hacked the merchant) from seeing the card number, but they are not required to do so. I haven't seen any numbers on what fraction of cards use tokenization.

Something to keep in mind is that when chip and PIN was developed to combat credit card fraud it was card present fraud that was the big problem, either by someone using the stolen card itself at a brick and mortar merchant or making a counterfeit cart by writing the stolen number onto a blank card and using that at a brick and mortar merchant. Card not present fraud, where the number is used but not a card such as at an online merchant or a mail order merchant or telephone order merchant, was much less common.

Chip and pin made card present fraud much harder because it was much harder to obtain blank chip cards and the equipment to write a stolen number to them, and it made using an actual stolen card harder because of the PIN.
If You Own a Home in Palo Alto, CA, Sell It Now
> There are however efforts underway to actually put one of these things into space in the form of a tiny satellite, and see if any thrust is produced there, which seems like the perfect experimental setup.

Wouldn't this have the problem that the object will constantly being hit by particles (and the distribution of particles will not be random) and accelerated by these?
Have you tried this? It fails for most sites IME.
Do you have a comparison with unpaper, which seems to do almost the same thing?
Our authority for authentication is Active Directory, it may sound very enterprise and not-hip but it's great because basically everything supports it. A user just needs one password for all our systems - email, servers, laptops, internal applications.

For servers we use LDAP, so you just SSH to a machine and it creates an account if one doesn't exist. It authenticates against AD every time, so if an account is disabled there, their access to all servers is instantly revoked. You can still use SSH keys so you don't need your password every time.

Internal web applications (mainly Rails) are backed by LDAP too, but also support NTLM SSO for Windows uses (so they only need to enter their password once when they log-in to their machine). Not everyone uses Windows (or is part of the domain), so we use CAS on top of that to make switching between applications transparent for everyone.

We don't really use any external services that we need to share passwords for.
Grab a C function by memory address from compiled code in iOS/OS X, and call it
You're right. The dynamics aren't unrelated.

But paying full costs for labour is long-term necessary. Again, Smith, in one of his less-frequently cited passages.
Presiden Lyon menolak tawaran sebesar
Indeed. And they spun out of Bittorrent Inc. completely, which is known for doing scammy things:

https://en.wikipedia.org/wiki/ΜTorrent#Ads_and_malware
This is actually very similar to what an I-Ching reading does :) Except of course, the ML part is replaced by a random number generator (coins or sticks).

Fortunately we have an extremely powerful fuzzy narrative pattern matcher in our heads and with a bit of effort and interpretation people would still get useful advice from the method.
Yes that's what I said - they don't see both sets of numbers.
This is called supply and demand. The most flagrant abusers of the H1-B system use it to artificially increase supply of workers to depress costs. If the costs rise to the point where retraining is considered an appealing option I don't see how that is a problem.
I suppose kW ?
Response to “Literate programming considered harmful”
Large agribusiness do other deplorable stuff - i.e. letting cows die and collecting insurance instead of treating them, etc...
2FA doesn't have to be done over email/SMS. Nearly all websites these days support Google Authenticator protocol enabling use of a wide race of app/devices (for example my Garmin watch) to produce the code. No need to wait for an email/SMS.
He actually has already discussed his sleep, diet, and exercise habits in this interview:https://www.youtube.com/watch?v=FE4iFYqi4QU

The part you're looking for is 2-3 minutes in but its worth watching the whole thing as they ask him some questions that are different from the usual ones.
This is still a hard problem.

I use Google Apps OAuth for everything possible. This makes it pretty easy. You can also use SAML or any other SSO mechanism.

You should absolutely create new users when that is an option. Then, when someone leaves, it's easy to remove access without having to worry about things.

We use Lastpass to store all company passwords, and there are some shares done through it as well, but we don't share unless we have to.

If you are sharing an account with someone you should change the password for that account when they leave the company. If you're using something like Lastpass or similar this is easier to do than distributing the password another way.
Some of us still do!
I'm very fascinated by the phrase "disgruntled former employee". Obviously she's disgruntled, that simply means one is unhappy. But the implication is that because one is unhappy with their employment experience, one somehow loses credibility.

Where is it, and why is it, that people who one minute will rant against evil corporations on the other hand when reading about how an employee was mistreated will blame the victim? (I'm speaking generally, but for instance when Amazon's practices came to light there was a bit of victim blaming going on here.)

Why is the presumption of innocence for the employer so strong?

This goes further into hiring practices-- if you look at it objectively, hiring practices are very one sided. Employers make the demands take all of the time for questions, will rebuff questions they don't want to answer (like what's the cap table look like? how many shares outstanding on a fully diluted basis? - things you need to know to evaluate the offer) while simultaneously demanding to know your salary history- and recently I've seen reports of employers demanding poof of salary history with the threat of termination if you don't supply it.

Market forces can make one player have more power than the other, and in the great depression employers had a lot more power. but it's fascinating how the culture has enshrined that power, and people accept it.

If you complain about an employer, this is not taken as a sign the employer is bad, it's taken as a sign you are bad.

But if you complain about bad service at a restaurant, we don't assume you're a bad eater.
It doesn't sound far fetched to me, when I look what the Nixon administration did.
yes but they can use data from pioneer to correct for it, especially if they are far enough from earth, also if the drive can be cycled, they can measure against the condition at rest.
Outside of the US, content on Netflix varies from "bad" to "meh".
The theory is simply wrong, it neglects the electromagnetic pressure between the electromagnetic field and the tapered wall of the waveguide, it should produce the missing force component for a net force of 0.

It's impossible to arrive at a non-zero net Force with classical electrodynamics. It's theoretically proven that it conserves momentum.

Very possible reasons for measuring non-zero force:

> Systematic measurement errors.

> Leaking EM field carrying momentum.

> Energy channel from outside carrying momentum (failing measurements including battery mentioned in comments)

Unlikely explanation: All currently used theories of electrodynamics are wrong.

But explaining non-zero force from classical ED is simply impossible.

Also note that breaking conservation of momentum + relativity means that conservation of energy is broken as well.

edit: typo

edit 2:

I mean the theoretical approach presented in the paper makes obvious mistakes. I'm not arguing that breaking conservation of momentum is impossible (although I think it's really unlikely), I argue that even if it would happen it couldn't be described by classical electrodynamics (or even QED). We would have to come up with better laws for electrodynamics.
It was, but who could resist?
How Code Review Saves You Time
Fixed Point Fascination
Cloudron is now open source
Behind the scenes of a progressive web App – Housing GO
In a similar vein there's a project at the moment to map the world's internet infrastructure called The New Cloud Atlas (http://newcloudatlas.org) which describes itself thus:

> The New Cloud Atlas is a global effort to map each data place that makes up the cloud in an open and accountable way. We have set out to find and map each warehouse data centre, each internet exchange, each connecting cable and switch. Anything of any physical significance in the operation of the cloud should be observed is some way, and recorded for everyone to see and use.
API Hooking Paint Using Shadows Sub in VB.NET
> It will be too expensive to maintain branches of their own and catch up with the upstream.

Haha, you guys are awesome! You've totally figured it out. Stay awesome!
Sure, with an offline password manager backups and synchronization are up to you, but even if you end up relying on cloud storage it's a different story; for instance, if you store your KeePass database on a Dropbox account and said Dropbox account gets breached, at least you know that unless there's a flaw in the encryption algorithm used by KeePass, the password database cannot be decrypted without the master password (and brute forcing it should be very impractical if the master password is good enough).

If you use service like LastPass or 1Password you can never be entirely certain that a breach or a security flaw in any of these services isn't going to expose your passwords. I'm sure they use the proper encryption measures, but like the Dropbox breach shows, shit happens and companies get hacked.

I'm not saying never use a cloud password manager, but understand that the added convenience comes with added risk; I would definitely not make my company depend on them.
Zach Braff to star in pilot about a Podcast Startup
Tons, and it seems like it's still an actively researched topic.
Is it me or I suspect the 100K lower limit is kind of ineffective?

Every time I ran the numbers about moving to the US, the minimum acceptable offer was well above that number.
>>>I have no idea what Paypal is trying to achieve by passing on this fairly personal piece of data.

For years the Paypal API sucked, and even today their are many companies that do not have full integration with paypal, so this is a way to match payment records as for 99% of shoppers the email address for the order/account will match the paypal email address.
It's obviously a typo
Tabs or spaces – Parsing a 1B files among 14 programming languages
What can be better alternative? IMO using something like 1Password/Lastpass is less secure because it then only takes someone to get my master password to get all my other passwords.
Confessions of Android Convert: Good, Bad and Infuriating
Do you never, ever, use devices not in your full possession?
Chip and pin is not for online transactions, but in-store transactions. The merchant can see your credit card and would often manipulate it themselves.
> Waiter spit in my food and was really obnoxious/rude to me - 10% tip

It is absolutely insane to me that you would tip anything at all in that case. US tipping culture is crazy.

In what situation would you give 0% tip?
Somebody remind me what's justifying those six-figure tech salaries that are pricing everybody else out of the Bay Area?
That is also something that Google Docs lacks because of the bloated NIH document editing interface.
At least E-Cat didn't initially claim to violate any fundamental laws of physics. The unnamed "aerospace company" he says he is working with will never see their money again.
How I changed my life with side projects
Thoughts on Fairness in Rowing
Those places have governments, just ones that, relative to the governments of advanced economies, are extremely small and barbaric.

If we define a government as a party with a localized monopoly on force, even an armed robber is a government.

And if one doesn't define government this broadly, that still doesn't invalidate the libertarian argument, since it hinges on opposition to the initiation of force (aggression), as opposed to initiation of strictly government force.
I'd say the supply of workers is artificially being kept low; there's nothing "natural" about immigration restrictions.

Of course, I also don't agree with the use of "artificial" as a synonym for bad (or good).
For farm workers and boat crews there are. https://travel.state.gov/content/visas/en/other/crewmember.h...
> I think the generalizations around LMDB made by you and others are making this situation worse

Fair enough. For anyone else following, @jasonwatkinspdx is correct that LMDB is not the right (= best available today) choice for certain workloads. I personally used TrailDB for event traces and if I needed prefix compression on keys (like the CockroachDB team), RocksDB would be an arguably better choice.

What I don't agree with is that LMDB's existence or users are causing open source database research to stagnate. Quite the contrary, I think the benefits of LMDB's architecture have not yet been fully realized and I would love to see more research be done to improve/extend it.

Most of the research action today (at least to me) seems focused on making log-structure merge trees and variations thereof less sucky at the margin instead of identifying what makes LMDB's design actually tick and then improving on it. There's still a lot of low-hanging fruit in the LMDB architecture waiting to be explored.
Because the books are written by the teachers (or their colleagues)?
Maybe slightly off topic, but I'm subscribed to YC on Soundcloud and had a notification pop up last night to tell me that this interview was available. Hit "play" on the driveway this morning while still connected to wifi and started my commute. 5 minutes later and it cuts out - mobile data dropped out (I live in a rural area).

Does the Soundcloud app not support buffering at all? I'd have thought that 20 minutes of speech would be a couple of MB at most. I see I can "upgrade" to allow offline listening for £9.99 per month, which seems pointless as this is all I'd use the service for.

I suppose I'll have to go down the route of using a legally dubious third party service to download the interview like I did for the Zuckerberg one a few weeks back. Shame they don't offer a more convenient way to listen, as this is shaping up to be a really interesting series.
> The reason for their opposition is twofold; e-cigarettes appear to act as a gateway drug for people who don't smoke; teenagers in particular. colourful packaging, synthetic fruity flavours; the e-cigarette industry is well aware of this particular demographic.

Reminds me of an event in Norway. There anything above 4.5% beer is only sold via vinmonopolet. Note that it says beer, and thus things like cider was vinmonopolet only.

Except that after entering the EEA, various foreign breweries pressed for having anything 4.5% strength sold alongside beer.

The response from the teetotalers was that those "tastier" options would attract kids to drinking.

None of that happened. For the first year or so after ciders and such were allowed alongside beer, there was a small uptick in sales. But then it went back to the very same numbers as the years before.

the most likely explanation is that adults picked up a couple of bottles to check it out, and that was it.

No sudden epidemic of drunk kids in gutters ever materialized.
This is exactly the kind of comment I would expect to read shortly before some presumed law of the universe were broken. Reminds me of the "maybe in thousands of years people will fly" newspaper comment the same year the Wright brothers flew.

I'm not treating it lightly that conservation of energy etc. would be broken. I'm just saying... it's a law until it's discovered that it's not. Or rather, that the law is only applicable within certain conditions, or needs some asterisks on it.
That just squishes the problem into a new space, and recreates the initial G+ problem. Actually, the original Gmail problem.

Until Gmail existed, there was no reason for the typical user to log in to Google at all. Webmasters and advertisers and a few other categories, yes, but search was just Generic, Unauthenticated Search.

Gmail changed that. Now the general public had a reason to create a Google acccount. And to have their online Google activity accountable to that.

I immediately resisted any temptation to create a personal Gmail account. I may have had several through corporate email (and yes, it was technically far superior to, say, Microsoft Exchange). But man did the idea of mapping my random search activity to my name (and my employer, and my paycheck) not sit well.

Any mandated centralised ID across Google services, without the ability to disown or repudiate services, is simply wrong.
I have a garmin vivoactive smartwatch. It does most of what my pepple could do, but has a lot more. It has built in GPS and an amazing battery life.

I get 1 week with daily runs using the gps. I get 2 weeks when im not running. I actually just broke the screen while replacing the siding on my house. Reason being I wear it all the time. No need to charge it every day or so, so I forget about it.
Reading List: Histories of American National Parks
Also, iCloud allow this.
I once issued an order to our service desk that qwerty123 was no longer to be given to users as a "temporary" password. They (the users) always said they would change it, but they never did.

At another workplace, I took Bruce Schneier's advice about writing down passwords (i.e, not a bad idea, so long as you keep the note safe) and gave credit-card sized, laminated cards to everyone with their unique and random password on it. Strict instructions to keep it in their wallet or purse. So these things turned up all over the place, stuck to desks, keyboards, and furniture next to desks. So much for that one. Unless people are getting fired for this kind of thing, they don't care.

I offered to crack my boss's email account to show how insecure our systems were, but he didn't act on it when I succeeded. But I did get the blame for hacking his email account a year after I left the company. Obviously, it was me (they reasoned) since "he's done it before!"
Use the $destroy event to solve memory leaks in Angular
Significant Changes Impacting Analytics #dataldn
the excessively excited "omg how could you even be discussing this??" is a bit offputting

I wrote that sentence minus the omg part, but I don't think I meant what you think I meant-- The "how could you even be discussing this" wasn't dismissive-- I meant this is TOO important an issue to leave to discussion-- that action by Google (namely extending the API so the user could opt-out of auto-backup) was needed, and that until that happened, Connectbot should shut it off. Unfortunately, neither occurred.

Isn't there APIs for safely storing passwords outside of config data?

There are means of storing data that avoid the auto-backup to Google Drive, but unless they happened to have been done already (such as saving to the /cache directory, which isn't auto-backed up) it would typically require additional work, such as manifest changes by the Developer to opt specific directories in/out of the auto-backup.

This is not just a Connectbot-specific thing. It's my understanding that ALL apps that target Marshmallow or Nougat (that is, the current and last version of Android, API 23 and 24) will automatically get this 25MB backup "service". The end user can't opt out per app either, only system-wide.

Incidentally, Connectbot does explicitly enable the backup agent.

https://github.com/connectbot/connectbot/blob/master/app/src... & 190/191

"The automatic backup feature preserves the data your app creates on a user device by uploading it to the user’s Google Drive account and encrypting it."

For me at least, I don't want my private SSH keys and server info sent to Google, even if it's encrypted once/after it gets there. (and before someone says "use a good passphrase".. yeah, okay.)
> it taught me everything is breached

More likely, sold. Every service that collects user data will get offers, and many can't resist the temptation.

Doesn't matter however, businesses that will sell you to the highest bidder (and in many cases, outside the US, illegally) can't be trusted to ever seriously invest in security. So if they aren't breached, they sooner or later will be.
I would say don't give up. Use your second probationary period to learn and improve as much as you can. If things don't work out well, at least you would have learnt something useful you can use in your next job.

Try asking the seniors for help when you get stuck somewhere. But only ask for help after trying all the possible solutions you can think of yourself.

Try to come up with 3 or 4 test scenarios for your code and test them before you submit the code. Thinking up new scenarios will help you reduce the bugs.

Critically review your own code a few days after you've submitted it. Pretend it was someone else's code and think of all the possible ways to improve it.

If your seniors are willing, ask for a code review. Go through the review comments carefully and make sure you never get the same review comment again. Don't ignore any comment, however trivial it may look.

Spend an hour or two extra everyday to improve your knowledge of the system. Learn something new everyday about the tools, language etc.
Paypal is great at that kind of unintentional disclosure. Six or eight years back, because I liked what she had to say, I used it to donate to someone who was then speaking under a pseudonym as a result of some fairly credible threats. Imagine my surprise when, in the process of transferring funds, Paypal showed me her full legal name and domicile address in the UI!

Of course I let her know about it, and I seem to recall her saying she'd addressed it successfully, but if she described how, I no longer remember. It quite astonished me that this was even a thing that could happen, though. One hopes it no longer does.
The only bit you're missing here is redirecting the user back to a Google page you do need to be logged in for, so they think everything is ok and don't think twice about what just happened
Comments like these really makes a guy wonder...
I like the base rate fallacy committed there.
In recent history, there have been at least 5 sizable asteroid impacts, each of which would evaporate a big city. Just lucky those didn't hit any. In longer term, two of those triggered mass extinctions.
Dupe: https://news.ycombinator.com/item?id=12379518
I love how people try to downplay the things corporations do.

"Oh, it's not tax evasion, it's tax avoidance!"

And now "oh, it's not tax avoidance, it's tax-friendly jurisdictions".

Let's just agree to close the loopholes so that everyone pays their fair share.
One of the customers I was dealing with recently still requires .NET 4.0 due to XP support.
I think people might finally be wising up to to the fact that outsourcing knowledge work to the cheapest foreign country doesn't often produce great results. Communication overheard, time-shifting, mismatch of cultural expectations and norms, it introduces a lot of complexity. And sometimes, you just get what you pay for.

I work with customers every day that decided to axe their internal IT staffs and outsource it to the big consulting and services firms. It may have made Bill Lumbergh's stock go up a quarter of a point in the short term, but the reduced efficiency, red tape and typically less-than-stellar competence drags on the whole organization.
So what you are saying is that we should let poor people pay more taxes instead?

Because that is what abolishing corporate profit tax comes down to. The only substantial tax most states have are consumer taxes, and we all know that these taxes disproportionately hurt people that are already poor.