skysight-inc/HackerNews huggingface dataset:
Does the salting address the issue described in the dedup est machina paper? I noticed they did not mention that it worked against VMWare.
5 Cheap and Cost Effective Ways to Market and Promote Indie Games
It's really a shame that we haven't solved this problem yet as an industry.

I was thinking we could build a general purpose version of "Magic Links" for logging in, where the format of the email is well-defined, and the user's browser is able to receive these messages on their behalf through some form of integration. You could imagine a webmail provider offering some kind of polling or websocket API for listening for when these messages arrive.

When the site they're visiting indicates through its web page that, "I'm trying to authenticate you by email", then the browser can fetch recent incoming messages of this type, then parse them and display UI chrome like "Xyz.example.com wants to authenticate you". You click a button to log in passwordlessly, which involves sending an HTTP request to a link specified in the email. Coordination occurs on the server side and the login is allowed.

There are probably some details I'm not considering, but it doesn't seem like it'd be too hard to build a prototype, and if standardized and deployed it would eliminate the need for passwords. I gather that Mozilla Persona works along similar lines, though I confess to not knowing the exact details. There would be practical difficulties integrating all of these things together, though: email, browser, and website login, and gaining adoption in the real world.

There are also sites that don't require email on signup, but this feature could be supported only for people who want to supply email. The email address used for this feature could also be a different technical address unrelated to the primary mailbox, where only login requests are sent. This could also help expedite the email traffic to ensure it's real-time. The browser could automatically fill in the email address when challenged by a website supporting this login method.

Alternatively, perhaps a browser vendor could introduce a de facto standard where sites can integrate via an API with the browser's password safe features. Chrome can save passwords and synchronize them across devices. Maybe it wouldn't be too hard for sites to comply with a microformat that helps the browser understand when to generate a password on signup, and when to provide it, etc.
then how can you run the webapp if you aren't binding it to localhost?

How will your PC know how to resolve 3.0.0.0/8?
Location: Pakistan

Remote: Yes

Willing to relocate: Yes

Technologies: Node.js, Java, .Net, AWS, Spring, MySQL, ExpressJS, DevOps, Everything Backend

Résumé/CV: https://www.dropbox.com/s/qr5urs6fgv53l5i/CV.pdf?dl=0

Email: hrshasan@gmail.com
That's security by obscurity (which may work to delay the attacker). If an attacker can modify your public keys he can modify your checksums as well.

Seems to me that a public key should be identified by a cryptographic hash of it, rather than the public keys itself. Then the attacker would need to replace the entire hash, rather than just a few bits, because the hash changes completely just by flipping a single bit in the input.
like LG G5 magic slot ?
http://www.lg.com/us/mobile-phones/g5#G5Modularity

but it seems LG has reliability with it
http://www.alphr.com/lg/1002753/lg-g5-review-2016s-cleverest...
Where'd you find this? I'm trying to find out what happened to "Cleveland Corp of Australia".
Cross-VM Row Hammer Attacks and Privilege Escalation
Flip it around, would anyone want to apply to Google if they weren't doing big visionary things? I've met a lot of people who want to work at Google, not because anything they want to achieve in life is only possible if they do it with Google's resources, but simply because "It's a magical place." as Phil Coulson would say.

So whether or not it keeps people from leaving, if it is effective at getting people to apply to Google first, it meets its goal right?

From my experience working there some of the "moonshot" type projects were rather hit or miss in terms of retention. Some, like the self driving car one, attracted a lot of great talent, some of the more interesting power related ones were only interesting to people who cared about power efficiency. But the feeling that anything is possible is intoxicating until you realize what you have to give up to make something possible. Then its sort of hit or miss.
New Incentives (YC S16) | SF | REMOTE | Full-time

New Incentives is a metrics-based non-profit that is creating one of the most cost-effective ways of saving lives. We are looking for a senior engineer who will lead the development of tools to help scale our organization. This role requires strong skills managing backend and frontend services.

This is very important for us and we're looking for someone who is motivated by the challenges of increasing efficiency and building products that are scalable.

Email: pratyush-AT-newincentives. org
Are these java stored procedures?
Anyone have "systemise" on their bullshit bingo card?
Nah, there I agree with tzs, after the manufacturer sells the product, copyright has been exhausted and the distributor has no obligations unless they make new copies of the work.
Why do you need https for text only page? Sure, somebody could do deep packet inspection, but they would not find anything they couldn't find going to the domain (that won't be hidden by https anyway) directly.

EDIT: previously incorrectly stated 'url' instead of 'domain'.
Network Locum | London | ONSITE, Full time (& open to INTERNS)

We're trying to fix healthcare by changing the way that medical professionals arrange their work.

We're mainly looking for Javascript, Android and QA engineers to join our team of 12 devs. We're 45 people in total based in a very hipster office in Shoteditch, and just raised a series B.

Our backend stack is microservices in Python, Scala and Go running on Docker and Rancher. On the front-end, we've got Angular + Redux.

Email michael@networklocum.com
Show HN: Learning keyboard touch typing with instant feedbacks
>is this a US-Valley blind spot or something?

As a Wisconsinite: bikes are great. They are a seasonal and recreation activity. There are a handful of people willing to bike their 6-7 mile commute year round, rain or shine, snow or sleet. They are the elite badass club. This is not a trait urban planning can expect from the masses.

It's certainly a Bay Area blindspot to forget that most people in most of this country experience extremely unpleasant heat, cold, rain, snow, etc. a majority of the time, and see dry temperate days like our daily reality here as a rare treat.
I've used kratom and honestly it's no more potent than a good cup of coffee on an empty stomach. I really enjoy it. It made me more talkative like when I drink tea or coffee, but also feel more relaxed like beer. I would describe it as having the good qualities of being drunk while not being intoxicated or cognitively impaired.

Really though, you can't get high off kratom. There are three levels:
you take too little, you don't feel any different. You take the right amount, you feel kinda good for a little bit (like having a beer and a coffee). You take too much, you throw up. There is no high. There is no outsize health risk. Why make it schedule I?
Anyone paying the slightest bit of attention knew this was the ultimate result on the very day they announced it.

To make something modular you need to wrap each piece in its own case, add bulky connectors, etc. Both weight and volume are at an extreme premium in mobile devices. All that metal/plastic going in to making the pieces modular is stealing volume and weight from the battery.

The only realistic way to make the power envelope is to use an SoC, which means the CPU, GPU, and RAM must all be in the same module. That doesn't leave a lot worth upgrading... maybe just the radio module. Jumping up in screen resolution would mean replacing the SoC to get a better GPU too.

Modularity worked in desktop PCs because they have gobs of space and an AC power connection.
Any insight into how this happened so suddenly? Somehow they managed to pay for fuel and crew to get across the ocean, but didn't have money to pay the stevedores?

How does that happen? Couldn't one of their executives whip out a credit card for the labor? It seems dangerous to have something the size of a container ship sitting around near a busy port.
Whenever I saw articles about this my first thought was always that it didn't make any sense.
1. Why do consumers need to decide what goes in their phone. Are my needs really different that someone else's?
2. Building hardware is hard. Building consumer hardware is really harder. Making it modular is just batshit crazy.

I never once thought this would see the light of day.
EDIT: The Korea Herald indicates that the issues appear to be originating from faulty ITM battery packs [2].

OLD:

Going along with the assumption there is some fault with the devices...

Essentially they should just sit there in shipping unless there is an external/internal battery short, extreme temperature or puncture. I assume the batteries were not punctured sitting in their target package after all the testing they must do and the fact these batteries can handle the temperatures of shipping (this is done all of the time).

"Sister company Samsung SDI Co Ltd (006400.KS) said that while it was a supplier of Galaxy Note 7 batteries, it had received no information to suggest the batteries were faulty." [1]

These batteries are made and tested all of the time, I would hope the technology is quite well understood my now which for me would rule out the likelihood of internal battery failure. Samsung also tend make quite high quality equipment in general in my personal opinion.

For me that leaves two likely possibilities, the phones were somehow switched on during travel (potentially through vibration or bad software) or bad circuit design meaning some current draw in given scenarios allowing the batteries to warm up.

My money would be on the devices turning on during shipping due to a crate knock or large shock. If a pallet fell of a fork lift or some semi-large force to the devices, I wouldn't be surprised if the low-profile power button was pressed inwards, switching the devices on.

If I remember rightly, Samsung devices ship in cardboard, acting both as insulation and something to get the fire going. A nice large hot display and hot battery well insulated would be enough to do a bit of thermal escalation. I would imagine it would only take one to turn on to do the trick. If I were Samsung I would switch one on, stick it back in it's packaging and wrap it in bubble wrap to simulate the condition of being in the middle of a pallet.

[1] http://www.reuters.com/article/us-samsung-elec-smartphones-i...

[2] http://www.koreaherald.com/view.php?ud=20160901000855
For integrity, ie. tamper-resistance and knowing if MitM tampering was done.
Like the Chromebooks?

What the heck is the deal with big companies naming things in horribly ambiguous, confusing ways? Is there an actual reason for doing that, i.e. it's proven that this somehow leads to better sales or something?
There's a conflation of terms going on.

The definition of "money laundering" is transforming "dirty money" into "clean money", and "dirty money" is by definition wrong, or at least illegal.

Anonymizing money for non-dirty purposes is something else. The mechanics might be identical to money laundering mechanics, but we shouldn't call it laundering.
You should have the backup codes stored somewhere more secure than your computer either way, quite possibly printed out.
> In this case, what matters is what set they specify (not necessarily denote) and what proof.

How does this even make sense? The whole point to specifying something abstractly is that you want to denote anything that satisfies the specification. And what proof are you talking about? Are you confusing “proof” with “typing derivation”? A single term may admit multiple typing derivations.

> First, the computational complexity of verifying a program is the same no matter when it's done.

You're assuming that you can write correct programs, without taking verification into consideration right from the beginning. This assumption is incorrect.
Have you heard of AI winter?

https://en.wikipedia.org/wiki/AI_winter

Too much opportunistic thinkinking caused crazy hype cycles.
Falcon 9 and AMOS-6 Static Fire Anomaly FAQ, Summary, and what we know so far
Maximum speed and capacity aren't increasing because those aren't problematic factors. Right now the most important place for improvement is in fuel economy, and at that modern planes are doing much better than their 1970s equivalents.

The 747-400 costs $47.34 per nautical mile, the 787-8 only $27.35. Sure it's not as visible to the passengers (except indirectly in the form of cheaper tickets), but that is a huge improvement in an important metric.
It would also be useful to point out limitations and vulnerabilities. Tor browser has no protection against malware that hits the Internet directly, bypassing Tor circuits. But Tor Project does not prominently warn users about that on its website. While Tor Project does acknowledge Tor's vulnerability to global adversaries, there's also no prominent warning about that. If you run Tor in a terminal, you see "This is experimental software. Do not rely on it for strong anonymity." But how many users will ever see that warning?
libXaw[3d[Xft]] don't use pixmap primitives, but geometric primitives. The X protocol has messages like: "draw a polygon with these vertices and this visual". Sometimes a bitmap or pixmap might be used to render an icon or something, but most of the window is drawn via these primitives. Contrast to GTK (for example, but most "modern" toolkits do this) everything is rendered to a pixmap (via, e.g., GDK or Cairo), and the final pixmap representing the entire window is handed off to X to display with a single message like: "draw this pixmap at (0, 0)".

The primary reason Xaw and kin (along with Motif, Tk, and other toolkits that make good use of X's drawing primitives) get better network performance is perhaps obvious at this point: a handful of serialized polygon objects is smaller than a TrueColor pixmap. Basically, windows drawn with GTK and friends are practically streaming video with lossless compression (if any), while windows drawn with Xaw and friends are more like SVGs.

The end result is that the X-primitive-based toolkits use much less bandwidth than the pixmap-based ones, and the difference is usability is often enormous.
It's not about you seeing the car, but the car seeing you. Consider, for example, cars turning right across a crosswalk while a cyclist continues straight through the intersection on the crosswalk. The driver's visual scan will catch pedestrians but not you, since you are nowhere near the intersection at the time they look but in front of them by the time they start accelerating. If you were in the street, you would appear in the right side mirror.
The difference is that software has practically no licensing or patent issues, while hardware is a minefield of costs.
The FairPhone 2 is also pretty modular.
T.A.H.I.T.I is calling.

"It's a magical place"
I know and in a general sense I agree with their decision to do it - it makes sense. I just don't think it's appropriate for HN. If you do pay to bypass a news wall, chances are you will only pay for one. If there's three hypothetical equal competitors, that'll limit the audience by a third.
A Leader in Full
You seem obsessed with one implementation. Passwords themselves are obsolete.

Actually the problem is already solved for at least a decade: Certificate based authentication. Browsers support it. Try StartSSl registration, for example.
They may make more profit from the latter if the margin is higher and upgrades more frequent.
> Modularity worked out pretty well for the PC. When you make things open, there's no way to imagine ahead of times the things people will come up with.

I agree with this but the extreme space constraints of a mobile make this comparison less accurate. A PC is often not space, weight or battery life constrained and has the space and power for big dual graphics cards, huge heatsinks, water cooling, big fans, multiple hard drives etc.

I just can't see how it's feasible to create a modular mobile that will compete with current flagship phones which are likely pushing the space constraints and specs to the limits (is this accurate?). This sounds unlike how you can build a PC to compete with prebuilt options.

A better comparison is comparing modular phones to modular laptops. Laptops are weight, battery and space constrained as well and I haven't seen upgradable laptops gaining traction. Is that because of similar technical issues?
>there's no way to avoid it

Of course there is, keep it secret until they're close to release.
The outsized effect of Disneyland on the American psyche has always fascinated me. In a lot of ways, Disneyland is synonymous with the idea of the family vacation. I remember reading a fascinating article a few months back about a column Elie Wiesel wrote about his trip to Disneyland [0]:

> I don’t know if a Garden of Eden awaits adults in the hereafter. I do know, though, that there is a Garden of Eden for children here in this life. I know because I myself visited this paradise. I have just returned from there, just passed through its gates, just left the magical kingdom known as Disneyland. And as I bid that kingdom farewell, I understood for the first time the true meaning of the French saying ‘to leave is to die a little’ [partir, c’est mourir un peu]

For a theme park--of all things--to create that sort of effect on its visitors is nothing short of remarkable.

0. http://www.tabletmag.com/jewish-arts-and-culture/206125/elie...
In Israel there is an HR as a service company for early stage startups, that succeeds in bring really good talent. They choose startups wisely, their employees actually work in that startup shoulder to shoulder with the developers (especially to avoid backward linkedin interaction) and they recommend good candidates that had issues in/with one company to try and fit in another. This makes everyone happy. They also have a good name so they have connections with good head hunters, friends of friends, manager's linkedin profile access.

Their main problem is that their hr specialist take a long time to train, and since stationed in good startups they might want to become a FullTime employee themselves, instead of switching to a new startup as the existing one grows too big.
Encrypted RAM is offered by the newest Intel server-grade CPUs (SGX, Skylake) and the next AMD server-grade CPUs (SME, Zen).

One of the main use-cases for these technologies is trusted computing in a cloud environment - the customer can assert that the hardware is securing the program state from the eyes of the computer owner!.

However, the cloud is actually made from cheap commodity boxes without server-grade anything! ;)

Encrypting RAM pages would prevent the hypervisor from deduping pages between virtual machines, and this would be very negative for cloud providers who want to up the occupancy on each box as much as possible...

In a few years, or perhaps longer, perhaps proper DDR4 and other immune memory will be mainstream in clouds. But until then, it seems we'll have a cloud fitted out with increasingly aging cheap machines with no rowhammer immunity.
Blowing fire as well?
Dramatic video shows full extent of SpaceX rocket explosion
Yup, what everyone else said: rust is fine. At least it's preferable to chunks of chrome coating :)

Argentine grills are not coated. If you want to keep them from rusting, you just grease them a bit with the remains of the meat (you usually don't even need to do that) and clean them up next time around. If you are really concerned about the rust, you can always coat the grill with vegetable oil (just take a paper napkin, soak it in vegetable oil and lightly rub the grill with it.)

BTW, the biggest unrelated tip: when you are seasoning meat, use kosher salt instead of fine salt. It works much better!
Show HN: Online Course for Learning Swift Programming [Free for Limited Time]
Same question, seems they are either looking for a junior dev or they just don't know market rate for an iOS dev.
Pamela Anderson comes out against porn in WSJ
To have that strategy work, you would need zero cost, zero volume connectors that stay together forever if desired, yet come apart easily.

Otherwise, the guy building the integrated system would offer a smaller, sturdier phone at lower cost that suits 90+% of the market, leaving scraps for you, forcing your prices up, decreasing your market even further, forcing your prices up, etc.

There's a reason that, except for a few early suitcase-sized ones, we never saw laptops with ISA/PCI/PCMCIA slots succeed in the market, and laptops had the advantage to start out as desktops, which had slots.
why less instead of sass?
It may shound harsh, but why should I want a modular Android phone? To update my hardware over the years to come while still running the same Android version without receiving updates.

Google, your Android updating system is fucked up. Fix it first, and then we can talk about exending the life of hardware.
> Sure, but the breach was in 2012

Even in 2012, storing passwords unsalted (and probably even hashed just once) was considered bad practice. As was MD5.

Bad passwords being bad passwords also goes without saying. 123456 was never a good password.
>> Scientists have discovered....

Really? Does anyone take these studies seriously that scientists are spending time and money on it?
Location: Prague, Czech republic

Remote: Yes

Willing to relocate: Possibly

Technologies: NodeJS, PHP, Javascript, AWS, Linux

Email: marek at trunkat.eu

LinkedIn/Resume: https://www.linkedin.com/in/marektrunkat

I am a full-stack developer with wide experience, from architecture of AWS based infrastructure and backend development through to frontend JavaScript frameworks.
Point for ThomPete on this one. I can find many more sources citing experts pegging computer go at a decade+ off, compared to those who thought we would have it by now.

However, points to argonaut for doing his best Dijkstra impersonation.

'I don't know how many of you have ever met Dijkstra, but you probably know that arrogance in computer science is measured in nano-Dijkstras.' - Alan Kay
I guess it could be useful to have something modular for more professional usage. Like adding a fast barcode reader, a chip & pin reader, or a thermal camera, or something to remote control a device.

As a mainstream device for my mom, yes I agree.
Here you go, someone got this for me as a gift many years ago:

https://www.pamperedchef.com/shop/Outdoor/BBQ+Tools/BBQ+Turn...

I used it quite a bit, but just as a spatula. Very sturdy.
Ask HN: What underrated GitHub repos you found in August?
Although it has 845 stars I think https://github.com/SeldonIO/seldon-server should be more visible.

Also this helped me on a project a few weeks ago: https://github.com/sconxu/react-native-checkbox
Show HN: rqlite v3.4.1 – replicating SQLite via Raft consensus
Yes, yet people still came into the Apple store with questions in 2007 regardless of how easy you thought it was. Just because it is easy for you doesn't make it easy for the other 80% of the population.
Balanced, you must be.
Those are some good points, thank you. I'll have to think about this for some time.
>Hashing is a method for encrypting data

No it isn't.

> MD5 is seriously out of style

That's, err, one way of putting it.

> The most popular password pulled from the Last.fm database was 123456. L Seriously, it’s 2016 people

These accounts were made more than four years ago...

> use a platform like LastPass

Yeah about that... https://news.ycombinator.com/item?id=9721212

Poor reporting is poor. Why do I expect more from TechCrunch?
I didn't know Canada was so big on barbecue.
LG tried it with their G5 model. It isnt very interesting
in and of itself, no. but it could alter a permission bit, for example, and then reading would be allowed.