skysight-inc/HackerNews huggingface dataset:
Download a password manager like Keepass, Lastpass or Password Safe:

https://en.wikipedia.org/wiki/List_of_password_managers

I use Keepass, it does exactly what I need.

Secure the password manager itself with a long password. Put your logins into it, and generate a unique random password for each one, then go to the website in question and change the password to the new one.

When you want to login to that website, open your password manager, copy the password to your clipboard and paste it in. Remove the password from the clipboard (Keepass does this automatically after about 10 seconds).

That is ALL you need to do. You could get into using keys, etc, to secure the password manager but if you have a long, unique password for the password manager, it shouldn't be necessary. I'm sure others can provide you with info on how to finesse the process using online password managers, etc, but what I've just described is the basics. Start simple, ramp it up later if you're the paranoid type (which you should be ;)

EDIT: Another thing, if you can use two-factor authentication, do it. I use this on my Google accounts, Paypal and my bank.

https://www.google.com/landing/2step/

https://www.turnon2fa.com/tutorials/how-to-turn-on-2fa-for-p...

Another edit: You can store more in the password manager than just passwords. I keep a scan of my signature in there in case I have to put it into one of those (admittedly insecure) PDF-type forms to "verify" I've signed something. I also make up stupid answers to password hint questions and these also go in the password manager, e.g. "First school" -> "Dr Magnus Pike's School for Aspiring Arsonists". Too easy for people to work out what my real first school is called.
Thanks, much better!
The DeepMind paper on synthetic gradients is super interesting for training in clusters. I hope it gets built into TF soon.

Also really hope there will be more options for GPU hardware on public clouds.

Eventually the pieces will come together and it will be trivial to deploy cloud 400gpus for an hour to run the load your local 4gpu workstation would spend 100 hours on, but we are definitely not there yet.

We are working on a packaging format called snappy (http://www.snapcraft.io) and starting to talk to TF guys about packaging TF with it (kubernetes is already packaged as a snap) - hopefully this will take some pain away once it's working
In my city in Spain Uber is not available but GMaps offers rides with Cabify instead, a local alternative. But I think it is negotiated on a case-by-case basis.
Humble Sierra Bundle
Make sure you sign yourself up for something like https://haveibeenpwned.com if you haven't already. Sometimes being timely in responding to leaks can make a big difference on any further leaks.
Come on, I literally linked to a website describing "CEPH OBJECT GATEWAY S3 API"
Officially, not since July of 2014 -- two years ago. Unofficially, pseudonyms were often, though not always, tolerated before that.

http://www.zdnet.com/article/google-reverses-real-names-poli...
Bio briquettes octagonal and round shape produced by simple machine method
The carrier weight is significant because its proportional to the amount of substance, the paper is the distribution vector. Someone caught with a sheet of LSD is carrying significantly more than a single tab of LSD. The latter defying "personal consumption. And personal consumption vs intent to distribute is significantly different.

While I don't believe that non-violent drug offenders should be locked up for life, this individual failed to appreciate the gravity of being arrested for the serious offense of distribution on two prior occasions! To add to the stupidity , the Seth Faranti case was a huge cause célèbre in 1993 and he was put away for life. It was well known at the time that the Feds were taking a serious view of LSD distribution and were targeting Deadshows. Yet he continued his disregard for consequences well into 1994.

LSD is not physically addictive so this is not like someone who became physically addicted and was arrested as a recidivist offender as a result. This was someone who was financing a lifestyle by selling acid. There were plenty of other Deadheads that financed their road trips without selling drugs. It was a choice he made on at least three different occasions.

While I believe the war drugs is indeed dumb, getting arrested for the same serious crime three times is even dumber.

There is a difference between making a mistake in ones youth and throwing your life away.
https://torrentfreak.com/vpn-provider-pia-exits-russia-serve...

Russia is not a friendly country to do business in

China is closed off behind the Great Firewall and probably already has a local netflix clone

India, I do not know, could be cost issues?
I came here to say exactly the same thing. You know exactly what it means when you read it, but you still can't help but appreciate it.
Can't comment on the followup / extension idea, but Scott Alexander's Meditations on Moloch is an amazing, possibly life-changing piece of writing. It's long, so you'll probably need at least an hour of time in a single uninterrupted chunk - but in the end, it's absolutely worth it.
>Everything is a probability right?

Perhaps, but not everything gives the same odds and stakes.

>I generally don't spend my days worrying about how I'm going to survive the next asteroid strike on the planet

If there were legitimate news of an asteroid en route to earth, you probably would.

And there are legitimate studies of antibiotics crapping out.

And even if you don't "spend your days worrying" about the latter (which I didn't suggest everybody should), doctors, biology researchers, drug companies etc, better DO worry.
Show HN: Blackgate – A Simple API Gateway Application
Someone pointed out the original paper, which has better estimates than my back of the napkin calculation for traffic throughput. Good stuff.

Still would love to know more about the internals of their servers and support infrastructure.
Look ma, no framework
I use spamgourmet.com for the unique-email-per-service..

Sadly, it doesn't support 2FA.
In this case I feel that an upvote isn't enough - this was intriguing, fascinating, and horrifying in equal measure.

Excellent article.
His point is our existence is not some assured thing, it's a fragile semi-random event...

And as I read it, he means that for our continued existence.
It's on Denise Darvall's (the donor) wikipedia page, https://en.wikipedia.org/wiki/Denise_Darvall
Продажа отеля в Сочи с рестораном и банкетным залом
Or for which they could ever possibly have a mandate.
I really dislike password managers and there's good news: you don't need one to have unique password per site. A good password algorithm is very useful:

http://penguindreams.org/blog/my-accounts-been-hacked-no-it-...

The article is dated. I'd suggest a longer minimum and 2 factor for services that support it. The advantage is unique passwords that you don't have to look up.
Becoming a Full Stack Evangelist: Key Points to Consider
> Don't hate the player, hate the game.

Said every gangster ever.
People need to first understand that the minimum wage in america allows you to save more money as a single male then working as an engineer in a large part of India and many other poor countries.

The salary in my own country for a mid level software engineer is 600 dollars a month !

Think about that for a moment . . . .

Now imagine if you are a company, you can hire a developer with 10-20 years of experience at the cost below your junior developer.

Why won't you do it ?

The other part of the equation is the fact that if you do not do it you are a strong competitive disadvantage compared to companies.

Now many people on HN might want to crack down on this Donald Trump Style.

But actually cracking down on it will make matters worse.

Software, IP is really global these days.

So as soon as wages are pushed up in america, the flow of FDI ( which is growing at 5x every year in India ! ) will shoot even higher.

Someone made this argument that I find the best explanation for what is going on.

Countries like India have more untapped computational power compared to the US, just due to having 4x the population and not even 1:1 the wealth.

There is nothing immoral about what is going on.

Its capitalism working as intended - I also do not think americans are losers in this game, it just means they will not see any investment or improve in their standard of living while private money is busy improving the lives of everyone else.
Serverless Apps CI/CD with Lambda+API Gateway Part 2 of 3
I use 1Password and I'm fairly happy with it. I also use dropbox for sync, since other methods suck. I didn't had a Dropbox account in 2012 so I'm not sure if I'm affected, but anyway, my 1Password chain should be secure even if stolen/accessed... That's what encryption is all about anyway.
It's funny. Here we have a bunch of people worried about the effects of systematic abuse of a legal framework by companies who skirt or break the law to pay darker-skinned people less money (in part because those people's job mobility is seriously depressed; they can't legally get an arbitrary job of their choosing). Here is legislation which is proposed to fix that by keeping those people out of the US to begin with.

Cut the salaries involved to 20% of what they are now, change the legal framework from "H1-B" to "no visa at all," and you've just described a stereotypical Donald Trump voter. AND YET I cannot help but imagine that those who would support this proposed legislation would be shocked at the comparison to those horrible terrible racist people.
???

+ We're talking about where and why the new temples were built. 'Why' there were built there is a pretty important part of the overall question.

+ My proposition was to support the theory that they were built there for geopolitical reasons, not architectural reasons, and I gave some reasoning behind why this was - and to contextualize the misplaced statement regarding a 'cruel switch of religions'

+ You're not reading my comments regarding religion correctly - they are an historical articulation of the social development of religion based on evolving metaphysical premises, specifically from pre-Common Era polytheistic faiths to Common Era faiths, and it has nothing to do with what 'magical' those people happen to believe.
Tasmanian Devils Developing Resistance to Transmissible Cancer
Curious radio signal stirs talk of extraterrestrials
For me, that would be most probably both if I were serious. Less of a target of course (I'm only one dude), but also much less attack surface. Basically install a trusty GNU/Linux or Open BSD, set up automatic updates, and block everything but SSH. Oh, and disable password based logins —use a public/private key pair of appropriate strength.

Or better yet, ask actual security experts about that setup, they're likely to come up with something better (just as simple and more secure).
Are you 100% positive your partner has never cheated?
I would be interested what these "universally accepted human values and ethics" are.
On Education let me quote a popular writer from my place , Kamala Surayya (Madhavikutty) -

"I feel formal education here makes mediocrity's out of everybody. I don't think any genius can survive caught in the machine of formal education.
It works like a bulldozer with which everybody is brought to a low level. They won't tolerate brilliance, they won't tolerate independent thinking. I don't believe that one can be a pundit, great scholar, by digesting what other scholars have written. I think we must find our own conclusions from our experiences."

On Economics and Industry - It is interesting to look at the fundamental truths on how value get generated and distributed. But it calls for a different write up all together
Brave Browser (Bitcoin) Payments Preview
I remember going back to college after my "summer of dieting" (proper balanced, calorie restrictive, but not the crazy kind) and having my first chocolate bar. Sent me to the moon and back.
It depends how many rounds of sha1 were used and what was the load setting on bcrypt. You can make either one harder to break by playing with those parameters.
Fedora 24 review
The Word Is Alive – Nigeria News
Robert Scoble on G+ Noise controls, 2011: "Why yo daddy won't use Google+: no noise control"

http://scobleizer.com/why-yo-daddy-wont-use-google-no-noise-...

Blocking fuckwits helps, but you've got to be tremendously brutal about it.

https://plus.google.com/104092656004159577193/posts/drLZV8sm...
Would be cool to have a service do this automatically and test which services leak email addresses and which don't.
Interesting you picked Dutch/American. Did you know about the DAFT?

https://en.m.wikipedia.org/wiki/DAFT

I don't know about using it to go to the US, but for a Dutch Visa it wasn't so painful.
I don't believe the header so i don't believe the article. The header claim, tens of thousands, "tens of thousands" - 20,000 to 99,999 kills a year. I call bs.
If you're a German dev, I doubt you'll come to US to work at Tata. Wouldn't be worthwhile. You might come to work at Google and such, but they wouldn't be affected by raising the bar as this law does, since they already comply with it in practice.
> If you don't have a cola each day, you can dribble into a towel for another 3 years when you are older.... No thanks, Ill take the coke. put it on the reapers tab.

But fit people have better quality of life.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3567315/

http://www.heart.org/HEARTORG/HealthyLiving/PhysicalActivity...

https://www.ncbi.nlm.nih.gov/pubmed/22249758

https://www.sciencedaily.com/releases/2005/11/051110215438.h...

If anything, an unfit person is slowly dribbling in a towel throughout his relatively shorter life.

You live a shorter, low quality life. I don't see how you see that a positive over living a longer, healthier life with may be a bit of suffering at the end compared to suffering throughout your life(out of breath, joint pains, clogged arteries...)
I suppose this is one of those self sustaining phenomena, like a fire. Doing it, gives him the energy to do it further..

Getting there is harder..
Designers and Developers
CMake Rants
Anyone know of an open source Firefox extension that can do this?
Australia to regulate Bitcoin under counter-terrorism finance laws
Can any open source password managers do this?
You made a tough choice between your "partner" and your team. I appreciate the way you chose, and can assure you that not many people choose that way.
Ask HN: How are credentials managed at your company?
Access to servers, SaaS apps, crucial infrastructure software. There are tons of things that need to be accessed by people in the organisation. Although, in many cases, there is an option to create new users but sometimes it's not and often, creating new users is more of a hassle every time someone needs access.

How does your company deal with giving and managing access?
> They are a company focussing on just one commercial product.

Or: "they are a company depending on just one commercial product".

Doesn't look that good anymore hm?

Try keepass for excample. It's local too and it's open source.
> There's a common expectation when looking for great developers that they need to be "passionate" about coding, which is often equated to coding long hours.

I have always considered myself passionate about programming, CS, the tools I use... and early on realized I don't like working long hours. I don't mind crunch modes but I require breaks after them.

Lately, I've been experimenting with 4 hours workdays. And in those 4 hours I am passionate about my craft. After that, I rest (and do other tasks).

And I'm okay with that. If someone is reading this and has issues about their own working hours and feel they may be seen as "slackers" because of the prevalent industry expectations, my advice is you do some soul searching and find what's best for you.
Free Vector Patterns
Vic Gundotra was in charge. Larry Page and Sergey Brin, however, gave him full reign, and bear ultimate responsibility.

Google fundamentally do not get social interactions, period.

General access to G+ was a month or two after initial public beta. I argue that was too soon.

Facebook, by contrast, expanded from Harvard, to other Ivys and Stanford, selective admissions colleges, and finally general public access, over 2-3 years. It somewhat followed Usenet's development in this, and I think in both cases, the selective founding cohort and acculturalisation primed both networks for larger appeal.
But why would that matter? You don't know 89 has your name in it, because the numbers were randomly assigned to random people in the first place. You would just draw the name associated with box 89, which is not necessarily your name.
>> Let (b) => an X subgroup is X because of itself ("caused its own harm").

>It is a tautology.

Yeah, I meant:

"a subgroup of group G is X because of itself ("caused its own harm")"

Or:

"a subgroup is (a bad thing) X because of itself ("caused its own harm")"

>Violence can be opportunistic because you're a war-like tribe and have spotted a weakness in another tribe. Consider the Mongols attacking Europeans or the Zulu wiping out the Bush people. Do you consider that an external circumstance or a cultural choice?

A cultural choice.

>Ok. Well I don't live in the United States, but I can tell you that the same subgroup exists in places that never had a history of slavery e.g. Ireland. We have people directly from Africa who live here, and that same subgroup exists here, freshly minted as it were.

Those "fresh from Africa" weren't slaves in the US, but do come from the same legacy of several centuries of colonialism in Africa itself.

Heck, even their countries' borders where drawn on the map by white men to divide their plundering. Usually with a "divide and conquer" approach, to mix hostile or unrelated local groups/tribes in the same borders and control things playing each other against them. And the meddling, support of friendly lackeys in power, and "divide and conquer" has never stopped since (e.g. for one example few heard/care: http://www.independent.co.uk/news/world/africa/inside-france... ).

>That's not to say it does not matter. Just that I am not accepting that line of argument. The Irish and Jews are not notably more violent and criminal than they were pre-genocide, and they were also oppressed for centuries.

Well, the Jews did establish a quite oppressive and one of the most war-ready and vigilant nation states to protect their identity post-WWII. And a lot of their culture was informed by the persecutions over the centuries.

That said, those persecutions were of a different nature than being held 2-3 centuries as slaves. And their being white, they could always mix far easier into society and climb socially, which they were fully allowed post-WWII. Britain had a Jewish PM back in 1874 -- for them to have a black PM back then would be unheard of and not just protested but derided.

Merely "group a was persecuted too, but is not X like group b" doesn't say much. The specifics of the persecution, and the relative historical accounts of both groups needs to be taken into account.

At some point or another, everyone has been persecuted (e.g. even whites living Europe because of religious persecution) but not all persecution is the same, and not all has hold for the same period, and not all took the same form.
This has been this way for several years now.

I have notes on a Google attack I discovered ~2 years ago that includes an open redirect as a critical part. It allows running arbitrary JS on authenticated users on the click of a link.

However, there is one small part of the attack (one character!) which prevents it working so I've never reported it. Interesting that there is such a debate here, as I thought open redirects were generally accepted as out of scope for most bug bounties.
Just because there are other annoying or polluting things in public places does not mean we should add or allow more of them.
I've had the same response. When I ask how come the spammer managed to successfully guess exactly the particular unique email address (including unique hashes appended to the service name as part of the username side of the address) on the first and only attempt (verified by looking at mail server logs), they just shrug.
> the merchant still gets to see my credit card numbers (both sides)

With chip and pin? I don't think they do.
If you're already considering leaving, I would take a gamble and tell your CTO/boss exactly what you said and be honest with your employer.

Who knows, maybe they trust and respect you enough to make the right changes and you'll end up loving it there.

All relationships (including professional ones) build; they never start at that perfect place.
My mother is able to run keepass and she still has a problem with double clicking.

But sure. Looking for yourself is not easy. You have to do something for yourself and not just throw money on some company that is depending on this one product.

Not sure if your paranoia is directed the right way here though.
In most cases I've seen: not well.
Some objective research is useful here. Lancet did an evaluation across multiple spectrums, harm to self, harm to environment, harm to society, harm to others, crime, etc...

(https://www.researchgate.net/publication/47635105_Nutt_DJ_Ki...) - in particular, check out the graph down the page.

Alcohol is unquestionably the more destructive of substances, LSD ranks far lower in this scale. Importantly, Alcohol results in a lot of harm to other people (violence, drunk driving, etc...).
And the other way around? Let's say I have a campaign. "Write a testimonial and get a discount.". I mean, they can write whatever they want.
Exactly my thoughts and I'm not alone here. There is a growing attitude against cloud infrastructure which together with the industries hype for it will lead to a interesting clash at some point.

I hope this will bring out even more cloudless solutions in the future.
Yeah, I've been doing that same thing with security questions, except I just generate a new random password for each. I really wish that field was automatically blocked from view without the master password like the passwords themselves are when you toggle that (excellent) option.
Or were they really bad salts? Like a hash of the username?
Parrot unveils a hybrid fixed-wing quadcopter minidrone:looks like an X-wing
People's positions evolve, particularly as better information is available and we become more knowledgable on a subject.
Carrier weight is really dumb because someone carrying a 1g crystal has up to 10,000 doses on their person, 1g of paper, not so much.
Hopefully someone can support/refute this: my off the cuff guess why this happened is because the discount on the launch price is about equal to the cost of building the satellite. So if it works, everyone is happy. If it explodes, they can build another one and aren't out any money (but are out time), and the launch costs for the next one are covered by SpaceX or insurance - however they have it set up.
A rough estimate for using spot instances on EC2 says you can get maybe 40 trillion SHA1 hashes per dollar. (700MH/s and just under $.07/hour) So one dollar will crack a password 7 characters long. A million dollars will crack a password 10 characters long.

Switch to bcrypt and you're now at 25 million hashes per dollar on those same instances. Now you can barely crack passwords that are 4 characters long, or for a million dollars you get 7 characters.

That's if you know the salt, of course. Otherwise that gets added on to the length you're cracking.

None of this is very exact but it gets you in the right ballpark. And you can compare it to a password manager spitting out 20 character passwords that are completely immune to brute forcing.
Examining the Role of Cash Loans for the Unemployed and Its Importance
The tip would be labelled "User Config", while the remaining behemoth, respectively: "DNS".

For the sysadmins out there ;)