skysight-inc/HackerNews huggingface dataset:
Exactly. When a random site demands that you create an account to continue, you might create a throw-away account that you don't expect to reuse.

Worse yet, some such sites intentionally break pasting into the password field, making it a pain to paste in a randomly generated password.
This looks very interesting. Seems like a similar story to H. P. Lovecraft.
On deal terms, generally speaking it would be impractical for a startup to fundraise via equity crowdfunding if the hundreds or thousands of investors, each putting in as little as $10, were to have voting and information rights.

Yeah, right. I get an annual report, a 10-K, and voting rights on every public stock for which I own at least one share.
Funny the binary has the strings embedded in them. You'd think they'd at least make it better at hiding itself. You could just do "strings <binfile>" to find them

"We are Anonymous.
All your servers will be DDoS-ed starting {{ .Time.Weekday.String }} ({{ .Time.Format "Jan 2 2006" }}) if you don't pay {{ .Amount }} Bitcoins @"
If you follow the link in the article to leakedsource.com, it says:

Passwords were stored using unsalted MD5 hashing.

It's 2016... why is this still happening?
Hexagon spy satellite was 'better than Google Earth'
Iron.io workers are down
Presumably because last.fm was created in 2002 and they never changed it.
If using Linux on the desktop in 2016 is time-consuming for you, that says a lot more about you than it does Linux.
Yup! There's some technical reasons why it isn't in stable yet, but it's not an inherent problem, just needs someone to do the work. It is a thing we care about though, since speed is a major goal of Rust.
I am unfamiliar with unique meaning anything but "one of a kind", mind educating me?
While not strictly necessary, those breakthrough definitely helped: dropout and greedy layer-wise pretraining.

Also convolutions are not only used in computer vision. For example, alphago used them: (the paper is called "Mastering the Game of Go with Deep Neural Networks and
Tree Search"). In my opinion, I would say that convolutions should be useful whenever your data has a spatial aspect to it.
In Bitcoin, these final nodes are called UTXOs (unspent transaction outputs), and indeed if you use chain pruning or a light client, they are all you need. They also need to be searched quickly to verify transactions, so they are usually kept in RAM. Because they cannot be pruned, there is a soft fork being developed called SegWit that changes the accounting so that transactions cost more if they create many unspent outputs, or cost less if they spend more outputs than they create.
Urchin Software Corp. – The Unlikely Origin of Google Analytics
> some such sites intentionally break pasting into the password field

You can fix that with a bookmarklet to re-enable pasting.

var inputs = document.getElementsByTagName('input');
for (var i=0; i < inputs.length; i++) {
if (inputs[i].getAttribute('type').toLowerCase() === 'password') {
inputs[i].setAttribute('onpaste', '');
}
}

(Tested with desktop Safari, no idea about other browsers.)
Oops that was meant as a reply to "rustyfe" on a starting point resource! Can i edit the response?
Exactly. Part of the annoyance of passwords is due to the loss of perspective that comes with running a business, SAAS offering etc: you, the owner, may think it's a big deal, but if there are no credit cards involved, the databases of most websites don't contain anything the users really care about. In fact the most sensitive thing they probably hold is the password / hash thereof, because they force people (inappropriately) to use strong and therefore valuable passwords.
Startups turning to a funding tactic used by oil and gas companies in the 1900s
It can also be (sort of) rectified through judicious use of history.pushState vs. replaceState. The latter just replaces the URL in your URL bar but doesn't add an entry to your history - so every new view can get a new URL without polluting history.

I say "sort of" because everyone has their own idea about which things should be pushed vs. replaced. One person's "history pollution" is another's useful tool. But in this case it seems pretty clear that simply moving the map shouldn't push to history.
iOffer | San Francisco, CA | FULLTIME | ONSITE

In 2002, iOffer revolutionized eCommerce by launching a transparent, negotiable marketplace. Our mission was to disrupt the status quo -- frenetic and rivalrous auction sites -- by empowering real people to buy, sell and trade on their own terms.

Position: Enterprise Devops/SysAdmin

iOffer is looking for a motivated infrastructure engineer to join the team. You will take full responsibility for our data center hardware, from network to servers to memory and storage. Your focus will be on the continuing operation of our applications to run in a highly available, large scale environment. You will oversee and develop the tools to streamline deployments, so that the developers can concentrate on their code.

RESPONSIBILITIES

* Responsible for day-to-day health, security and uptime of physical and virtual servers.
* Troubleshoot issues across the entire stack, from network to OS to applications.
* Develop documentation for existing systems and procedures.
* Design new network, system, and storage architecture as needed.
* Define DevOps roadmap that aligns with business objectives.
* Collaborate closely with developers to support deployment.
* Architect and implement procedures for continuous security monitoring and updates.
* Provide recommendations on improvements to the environment and configuration.
* Manage technical side of PCI-DSS compliance.
* Recruit and manage additional team members if necessary.

If you think you'd be great for this position, please email me at ian@ioffer.com.
>...This would mean more power residing in the federal government. Do we really need more power to be centralized

Yes. Local governments have shown they care not for the rights of citizens and the Constitution in general. People like to say "what if the Fed did the opposite". but all too often the Fed is the only rescue from oppressive local regimes.
na, no problem. 'tomp2' is still available
You can enable new features only to users with a subscription.
how about using PVS Studio over code of PVS studio. :D
Oracle used to sell Oracle Open Office, the commercial edition of OpenOffice.org.
I believe you so my bad. But I got this impression from my erroneous understanding of the flamewar detector which you reference in another comment, but also because I know a penalty was put on my account even though I rarely make comments that go negative, though I often make comments that clearly get a lot of up AND down votes (obvious as I see the net go up and down, e.g. my comment at the top of this subthread, for which I give you permission to post the up and down totals in reply publicly). Daniel cleared that penalty but I obviously "earned" it back, as is evident from how my comments are ranked.

I suggested to Daniel back then that HN should let users with penalties know that they have them, and show them what earned those penalties so that they can adjust their behavior. Feedback loops only work when the user understands the feedback. He agreed.

It’s also important for transparency. It isn’t very honest to show us our positive karma scores but also keep a separate negative karma hidden.
> Further, HPKP scares me. It requires you to keep a secondary key, but if something happens like a fire, you could lose both keys.

You're free to outsource the risk of losing key access by pinning to a small number of CAs you trust (and possibly have a business relationship with) instead of keys under your control. You're already willing to trust at least a small number of organizations for DANE, so you might as well do the same for HPKP.

> So then, perhaps we can petition browser makers to allow self-signed certificate installations to be less terrifying/complicated when they are name constrained to just the domain in question? Yeah, didn't think so.

How is it complicated? Firefox has a simple UI where you can import certificate files in the trust store (I just counted - it's < 10 clicks). Other browsers typically use the OS trust store, to which you can add certificates by just opening a pem/pfx file and following a few steps in a wizard. For the group of users that I'd trust to make reasonable decisions when they're facing a certificate warning, you can't honestly tell me that this would be an obstacle.

> But you could at least make their lives more difficult: force their hand into compiling a hacked up version of your browser that bypasses HPKP.

Or in other words, give users a false sense of privacy, which you're never going to get on a device that's controlled by someone else.

You're also ignoring the fact that this could be a hindrance to HPKP deployment, as users that visit sites that deploy HPKP would see warnings and possibly be scared off, meaning the site might lose visitors initially. That's typically a good way to make sure no one adopts a protocol. I'd rather have a protocol that does not attempt to solve an impossible problem than one that doesn't see any real-life usage.
I'd like to see some of those patches...
Generally game engines have been migrating towards work-stealing based tasks architectures.

How are Golang goroutines for implementing work-stealing?
Announcing a Microsoft .NET Core and ASP.NET Core Bug Bounty
Interesting so was this a high profile issue then in Canada and B.C in general. For those unaware, in some places these foreign investors(speculators, non-primary residences.) are getting tax breaks. So not only on their making out on the appreciation on the property but they are receiving tax breaks on top of that:

http://www.businessinsider.com/foreign-billionaire-tax-break...
Whoa! This is a great link and thank you but thank you even more for making me aware of academictorrents.com.

I may never see the sunlight again.
Companies raising under Title III file annual reports with the SEC. That said, public companies in which you own stock and private, early-stage startups have vastly different capacities to deal with these issues. The basis for investment in each is also quite different. Apples and oranges.
> Could they drop openoffice, then rename libreoffice to openoffice? That would be fantastic

Oh, the Document Foundation (which makes LibreOffice) wanted to do that. But Oracle decided to hand OpenOffice.org to the Apache Foundation instead, presumably out of spite.
Right. It's professional documents we're after, work/profession related.

In terms of document types:
- Templates
- White-papers
- Samples
- Reports
- Policies and procedures
- Articles
- Forms
- Checklists
- Research
- Project deliverables...

In terms of formats:
- PDF, OpenOffice, Excel, Word, Powerpoint, etc..

The users we've tested with were on the sell side of things: individuals/organizations that had documents to share/sell/distribute.
Are you sure? The header for C will tell you the hash of B. How will you verify the header given for B if you cannot hash the entire block and compare it to the hash you got in the header of C?
As a current TA at Berkeley, those marathon parties are indeed a big part of the job. But Gradescope has made things much easier overall, and but to scale for >1700 students in our intro CS61A class!
You can't use subscriptions for consumable purchases.
No.

First, solutions to Byzantine agreement for known numbers of processes predate Bitcoin.

Second, Nakamoto Consensus is not Byzantine agreement. Byzantine agreement forbids committed writes from being reverted, and each replica sees the same history of writes. However, Nakamoto Consensus only offers probabilistic write durability (our transactions can get orphaned arbitrarily far into the future), and different peers can see divergent histories of arbitrary length even under normal operation.

Third, Byzantine agreement is defined in terms of the set of peers. Systems where the agreement protocol does not know the number of peers cannot solve the Byzantine agreement problem, since they can't prove that no more than f of 3f+1 peers are faulty (neither quantity is known to the system).

Fourth, open-membership Byzantine agreement was published this year: http://hackingdistributed.com/2016/08/04/byzcoin/. The membership set changes every "block", but the peers in the set during the current epoch are known.

EDIT: typo
Yeah, I would agree with that being the primary reason. I left out my reasoning for why it dropped since I didn't want to go looking up citations earlier this afternoon.
Fair point - if the browser is displaying the protocol in the URL bar that is. I believe Edge and Safari don't. Chrome and Firefox seem to display https:// but not http://.

In the case of Chrome visiting an untrusted CA, it already displays https:// in red with strikethrough, which seems like a perfectly adequate way to negate any expectation of security. So the scary warning which takes two clicks to pass seems like overkill.

If I was making a browser, I'd just show a "secure" symbol for valid, trusted certs, an "insecure" symbol for anything else, and no protocols in the URL bar.
The whole Cortana stuff is disabled in my company's laptops.
SLS is a reconfigured version of the larger rocket from the Constellation program (Ares V); renamed for political purposes. The 'Senate Launch System' will take humans nowhere useful, and its real purpose is to preserve the employment status of the people developing it.
That is news to me... I've yet to see any real viable patches returned back to AOO. Very occasionally I will see large chunks of code that need to be extremely re-factored to be consumed by AOO, but that's not backwards contribution.

If, however, there are, or have been, patches that could be consumed by AOO, I'd like to see URLs for those discussions and pull/merge requests. Thx!
Nope. A non-techie friend at uni was still using OpenOffice on their laptop, I had to tell them to install LibreOffice.

Because non-tech people do not know about LibreOffice. They've heard of OpenOffice, and that's it.
Haven't you seen Men in Black?
That's a very parochial view. Foreign capital investment is just a form of economic colonialism, unless properly managed to mitigate the risks it introduces.
There are successful deep networks with pure feed forward non-convolution layers. There are also deep layers of other exotic non-convolutions flavors like LSTMs and GRUs, particularly useful for sequence-to-sequence tasks like machine translation.
People are confused. As was I at first. Considering the emphasis "truly unique" I expected more treatment of that point by the article. By not having that I was left feeling like I missed something / confused. People generally don't like feeling confused.

Personally, I don't understand the people defending the usage here. As far as I have experienced in my life, when people say "unique" in good faith they mean "one of a kind" and those people who don't use it that way are considered to have done a bait-and-switch.

That said, perhaps there's been a lingustic shift I haven't yet noticed.
I didn't downvote you.

The thanks to AirBNB was as an aside.
I think we rented AirBNB but to be honest not sure; might have been one of the many other under the radar holiday house schemes available in Italy and other places.

However the phenomenon under discussion clearly makes something like AirBNB possible -- and good luck to them.

Whether it is an upside or downside overall -- I do not know.

(I have now upvoted both of your comments)
Does Saturn have an identical cloud pattern on its south pole? I always hear about the north pole, but without geographic features wouldn't there be symmetry between the north and south poles?
I don't understand this objection. No, as a fact, DNSSEC resolution happens at DNS servers. No browser does DANE at all (the two that tried --- Firefox and Chrome --- rescinded their support). But when they do, they'll be using a stub resolver just like everyone else, because that is how the protocol is designed.
Nashville, Austin, and Boulder are peaking or have peaked. Tech in Philadelphia is right at the tipping point. To skate to where the puck is going, look to the Rust Belt.
I second this. I'd switch over from RDS to Aurora in a heartbeat if AWS built a postgres frontend for it.
More likely they'll throw a few half-hearted insults at each other, then realize how much they have in common and become BFFs.
Blame your lousy Internet on the poles
My mum bought a (Sony) bluray player that, at the time, was great. It had support for Lovefilm (now Amazon), Spotify, Netflix and all sorts. It was quite expensive, but we thought it was worth it for the extras and it was highly rated as a standalone bluray player. She even paid for the overpriced USB wifi dongle.

Now it's just a bluray player. There's no support for any of the apps because they all changed their protocols (or whatever happens). Thankfully it's still useful and it's not the TV that's defunct.

It damages consumer relations a lot because now she's very cynical about buying any kind of 'smart' device. Good for her to be savvy, but bad for Sony. The people in the target market are getting screwed. Unless you buy an Android TV that has a decent chip in it, you're setting yourself up for EOL in a couple of years.

I bought her a Roku stick for Christmas and she couldn't be happier.
Laaaaazy. :P
It's not that stub resolvers don't do DNSSEC validation. They can't. They get a single bit in the header from their upstream recursive cache telling them whether validation succeeded or failed. That's it.

If you want better than that, you can't use a stub resolver. You have to embed an entire recursive cache server in every endpoint.
Yes and no. Basically there was and still are major obstacles to widespread adoption.
For example, VERY recently stuff like https://metamask.io/ and Mist has been released, which make this sort of apps more accessible to the average user. light clients protocol are still under development, there is lots of important scalability improvements on the roadmap (proof of stake, instantaneous transactions, unlimited txs, etc..). Decentralized storages such as swarm, IPFS, maidsafe etc.. are still under development. Overall, there is a lot of experimentation and throwing stuff at the wall to see what sticks. If you want to develop production ready stuff that your grandma can use today, you might be better off waiting 2-5 years until it's sufficiently mature and all the use cases are obvious. If you like to experiment with new paradigms, new architectures, and explore new business models then it's an exciting field to be in.
> "One of the most notable findings of these first-ever pictures of Jupiter’s north and south poles is something that the JunoCam imager did not see."

No, the article is actually saying that the lack of a hexagon is important. Combined with such insights as "some clouds are higher than other things", the mentioned items really don't add up to a breathless "truly unique". The things we already knew about Jupiter - the vibrant bands and the red dot as obvious starters - are far more interesting and worthy of a discussion about what makes the planet unique.
Multiple keys seem to be fine.

I haven't seen performance issues, but it's a relatively small deployment in the scheme of things. There are also existing solutions for caching here. NSCD seems to be the go-to for caching LDAP query results directly. Alternately, you could cache credentials at the PAM level with pam-ccreds (Debian package name).
We're an e-commerce tech start-up based in San Francisco, looking for quality engineers to join our dev team. We're a diverse, socially-saavy group from a variety of backgrounds. Our CTO is hands-on and engaged with what we do, offering insightful feedback without the tedious micro-managing. We're data-driven and value learning, testing, and getting it done together. Our team sits in the best part of the office with the sweetest views of the city. We have all the resources we need to execute effectively, and are a few steps away from of all the fun stuff, too (healthy food, hydration, and a sleepy three-legged dog who loves belly rubs). The company has managed to harness a fickle audience, and now it's our job to give them the experience of their lives. Come join us.

Check out openings here: http://careers.touchofmodern.com/#jobvite
Yes, there's those too. Same group as the Lynx. But neither Lynx, Bobcat, nor Mountain Lion are decimating bird populations.
mind != brain
Apple - https://gigaom.com/2014/09/18/apples-warrant-canary-disappea...
No, that is only half the HPKP story. The other half is that when a pin breaks in a browser, the browser can report it. Your browser might not have a certificate pinned yet (though: for the most important sites on the Internet, it does, because they're preloaded). But hundreds of thousands of other browsers do.

Every HPKP-enabled browser functions as part of a global surveillance system monitoring certificate issuance.

This works because under the TLS CA hierarchy, we have trust agility. When a CA screws up badly, they can be limited by the browsers (Chrome has repeatedly shown themselves willing to do that), or removed entirely.

DNSSEC+DANE gives us no trust agility. You cannot revoke .COM without breaking the Internet.
Sure, I didn't say all LO developers. But from what I've seen (and to be fair, this recollection is a bit old) a lot of the LO people showed a lot of resistance to having code flow back the other way

I will share a story.

Awhile ago I was employed by Red Hat and, as we know, Red Hat has a number of developers working on LO. I was talking w/ our CTO at the time and suggested that it would be a Good Thing if Red Hat allowed all our code donated to LO be triple-licensed (MPL/GPL/ALv2) so that AOO could benefit from these contributions. He thought it was a great idea since it showed that Red Hat was all about open source and true universal sharing.

But when we asked the developers they refused to do so. The explanations were either (1) We refuse to contribute to permissive projects or (2) We have been told by TDF that they will not accept any of our contributions so licensed.

So the "resistance" in code flowing to AOO is, in fact, reality. My hope is that we can change that for the benefit of the entire OO eco-system.

The "enemy", lest we forget, is MSO, not any of the OO implementations.
Rather, in the absence of personal experience, I choose to believe someone who is well educated and generally involved in the politics of the country they reside in, rather than coming up with my own fantasies to fit whatever agenda I want to push.
This is cool! I would love to see a similar global car traffic visualization. I suppose that data is much harder to come by.
I'm curious what are the reasons some people "can't live without Aurora anymore". I would love to hear specific benefits of Aurora, regarding performance or other aspects.

The comparisons I could find didn't seem to be very favorable to Aurora (mainly that the claimed 5x improvement does not show up in the benchmarks)
Android companies keep pretending that Android doesn’t exist
"This is the first I've heard of Saturn's hexagon, very interesting"

Yes, me too -- thanks for posting your reply and the link, I've now learnt something new today (and it's only 00:45 so that's a good start to the weekend!).
America loves women like H Clinton as long as they’re not asking for a promotion