skysight-inc/HackerNews huggingface dataset:
My two older brothers went to see Queen in the mid 80's, my mother wouldn't let my dad go as she was worried about his safety ... he jokes that he's never forgiven her for that ...
From the article: "If the level of ketones in your blood skyrockets, ketoacidosis may occur because ketones are acidic in nature. This means your blood pH could become lower which can spell death. However, this should not be a major concern if you are not diabetic."

That title is rather clickbaity
Or with actual code:

https://github.com/creshal/yspave/blob/master/yspave/pwgen.p...

A password generator does not care whether its input alphabet is \d, \w, all emoji codepoints, or `cat /usr/share/dict/words`. You determine the entropy of it, and then output as many tokens as needed. It doesn't matter whether an attacker has a copy of your input alphabet, or knows your algorithm. You defeat him by setting the entropy bar high enough (and using a cryptographically secure RNG to generate it).

But a random selection of /usr/share/dict/words (~120,000 entries on Arch Linux) will be easier to memorize than a random selection of the ascii printable range.
For the "can prove fatal" the article says:

> If the level of ketones in your blood skyrockets, ketoacidosis may occur because ketones are acidic in nature. This means your blood pH could become lower which can spell death. However, this should not be a major concern if you are not diabetic.
The comic itself mentions that it's intended threat model is someone trying to remotely login to your web server/ssh whatever, not trying to decrypt stolen hashes.

I doubt any web service lets you try 32 billion logins/sec.
I do understand that is just my case, but it seems that I have smaller ears (and consecuently, smaller ear conducts) than the average person.

I cannot wear the Apple earphones because they don't fit firmly: they're moving constantly (which generates noise that I hear) AND they tend to fall from my ears, even just sitting down in my computer and moving my head slightly.

I would love to get rid of the cables, but airpods would be even a bigger problem, because at least with the cord they won't hit the floor.

I usually employ in-ear earphones, which come in different sizes and that resolves my problem.

TL;DR: it's not only sports/exercise, there's people with smaller ears :)
It feels off that Linode is being targetted so intensely and one feels bad for them but this can destroy their business.

It will be a pity if the barriers to entry are being constantly raised by the need for more and more mitigation and this will reflect in the level of expertise needed and prices for end consumers, and even then with the constant threat of blackouts.

It also becomes easy to silence inconvenient voices.

It is difficult to run a business or website if you need to constantly fight extortionists or make payoffs to address threats of downtime. Today Linode is in the news, tomorrow it could be anyone else targetted.

There is no easy solution here, without putting constraints somewhere but there must be a way to make the web more resilient and robust and not subject to the whims of extortionists and other malicious agents.
Facebook login, Google login, etc. still work (at least with most implementations), since they redirect to the SSO site, which is what every reasonable site should do, instead of using an iframe/embed.

Good luck finding something that considerably improves your privacy while breaking 0.000% of modern sites.
I am now required to use Slack for communication at work. It replaces the previous chat tool I was required to use to communicate at work and is, in fact, the fourth communication tool that I have been required to use for work in the past 12 months. Needless to say, I can't communicate with anybody.

The only killer feature I would have any interest in would be syndication across various communication tools.
Housing prices today are going out of control because the supply of what people want housing for - jobs - is diminishing. As the job market shrinks and more and more people are dropped out of the economy due to automation, there is more and more demand to live where jobs are, which drives housing prices out of control in many places like NY or SF but almost every major metro area experiences it.

It is confounded by the growing wealth inequality, where the rich find it a valuable asset to buy up these valuable residential buildings that are in demand as a store of value, further diminishing the supply and further exacerbating the problem.

Under a UBI, the market for residential is restored to what it was decades ago when the towns now abandoned in the post-industrial US were populated. There are many times more houses than homeless in the US, but because those homes are located nowhere near a stable income nobody can live in them.

The same applies to food and electricity. We are not at any supply side bounding here, and a UBI makes these makes so incredibly stable and predictable it lets the margins of businesses operating in them get as close to break even as possible because of the certainty metrics now associated with them.
You don't need to consume any. For a normal water fast where you don't exercise, everything you need is taken from the liver and fat.
Again, that's very Perl-ish, to me. "Here are some tools and tricks, use them to do your own OO if you want--but you can easily bypass it all every time you wish".
I can't comment on that paper since it doesn't appear to be available publicly yet, so I'm just going to talk about guilds as proposed.

Adding a guild word to each object header is certainly a way to check ownership, and should be a cheap check to perform in the interpreter, but will obviously add some extra overhead to standard program execution.

The thing that concerns me is that explicit ownership passing can introduce as many bugs as it solves. If I have two objects A and B, with A holding a reference to B, then I can freeze A and freely pass it between guilds, but if I try and touch B I'll get an error until that too has been frozen or its ownership transferred. The same problems occurs with explicit ownership transfer of a non-frozen A, which leaves you with the slower option of a deep-copy or a recursive ownership transfer which can have equally unexpected consequences.

The "Ruby global data" slide also gives me the scream heebie-jeebies, as did finding stack overflow answers on how to unfreeze objects in MRI. I'm sure nothing will go wrong. :-)

Having said all that, it probably can work nicely for the common use cases of balancing requests between a group of worker guilds where the request is a simple data structure whose ownership can be safely transferred, but it would be hard to do a general work stealing solution that was always safe.
So true. I'm sitting in an ad agency right now and I see at least half a dozen laptops and desktops abandoned on shelves.
Unsalted SHA1 is just as easy to brute force as unsalted MD5. There is maybe a ~30% speed difference.

Now adding a salt would have made it ~2 millions time harder for these ~2 million unique passwords.
From the slides I got the idea that there is only one OS process with guilds and possibly threads within guilds. But it could be that the language doesn't care and that's an implementation detail. We'll see.
> I was puzzled how they could even use their trademark

Important point about trademark law: it is intended to prevent you from fooling customers into thinking they are buying someone else's product, NOT to prevent you from talking about someone else's product.
This article doesn't seem very well written. For instance, under the drawbacks, it lists "triggers fatigue and brain fog". That'd be an interesting thing to know, if it were true, and I suppose for some people it is, but I had more energy and a sharper brain. So this is like a potential side effect. The glib writing makes it sound like everyone experiences this.

It lists "saggy skin", an effect of not working out, as if it had something to do with the diet, when it just explained that athletes sometimes use this diet to lose fat while not working out, or something along those lines. So they've sort of lumped in a side-effect of weight loss without working out and portrayed it as if it had something to do with the diet.

An altered blood lipid profile happen any time you adjust your diet. This would be true of a Mediterranean diet as well. Additionally, it mentions that it increases your cholesterol level, without mentioning that HDL goes up more than LDL cholesterol, which most measures use as a divisor for cholesterol risk, since LDL tends to inhibit blood flow, and HDL, on the other hand, tends to promote it. So that overall rise tends to be an improvement.

Trigger ketoacidosis... if you're diabetic. Okay, diabetics need to be careful with diets and medications. check.

The article makes some legitimate points, but frames them so badly with so much fluff and half-truth that I think it's worth a downvote.
Sounds good,
how old is he?
80? 90?
Somewhat off topic, but a few friends now seem to have great success using Oil Pulling to combat gum disease so might be worth looking into (obviously keep brushing/flossing etc). I've started doing it on my drive to work which has the added bonus of stopping me smoking as much.
Why Isn’t Your Business Using NoSQL Databases Yet?
I'm an excel noob but doesn't table mode fix all this.
And immigration is going so well in other places.
Why not ask the same question of Nike or Addidas? The number of people who wear sportswear for fashion FAR outstrips those who wear it for sports alone. And that cash cow seems far from milked, what with the recent fashion trend of athliesure...

My point is, tech literacy is irrelevant; the lifestyle brand is everything.
No, hunger disappears around day 3, then returns with a vengeance shortly before death, which can be up to 3 months later. This second burst of hunger is actual starvation.
New improvements in Blender 27.8
> There is no use case for the headphone jack that can't be better handled by the lightening connector or bluetooth. Seriously. Want to integrate something from sparkfun? Bluetooth is what you want.

Using your existing 250€ wired headphones while the phone is charging. Doesn't seem that outlandish to me.
The "text blob" always starts explaining precisely what kind of return value to expect under which circumstances. The return value's type can change depending on the context, and using plain text is somewhat easier to write and read than trying to come up with a dedicated notation.

See findall[0], for example. The structure returned depends on whether the regexp has capturing groups or not. A specialized notation could be designed to represent that, but as far as I am concerned, the textual string is good enough.

Just for fun, the return type could be expressed as:

[string N] (A)
| [(string M) N] : (M > 1) (B)

- Case A if the regexp matches N times without overlapping and without capturing any group, or capturing a single group.
- Case B if the regexp matches N times without overlapping and, for each match, captures a tuple of M groups, as strings.

... where [type size] denotes a list of size "size" satisfying the type description "type". Likewise, (type size) is a tuple of "size" elements, all of which satisfying the same type. Or you could write t1 * t2 like in other languages to define cross-products.

[0] https://docs.python.org/2/library/re.html#re.findall
HelloFresh | Berlin, ONSITE

We are the leading global company in the expanding online recipe kit delivery market. This is a unique opportunity to gain valuable and challenging experience at a rapidly growing startup. Responsibility is given from day one to use your initiative and creativity to help us grow our business. We are fast-paced and love the food world.

We're looking for Senior Frontend and Backend Developers who are keen to gain exposure to a modern stack and work as part of a team of exceptional engineers.

We work with PHP, Go, Docker, React.JS/Redux, Angular.JS, and are currently transitioning towards a microservice focused approach.

The recruiting process starts with the application screening, then there will be a general interview (25 minutes) introducing HelloFresh, getting to know each other, and clarifying any practical concerns (relocation, visa, etc.), then there will be a technical test administered through Github with a subsequent code review, one technical interview with one of our lead developers (60 minutes) to go more into detail about your experiences, common design patterns and to introduce our codebase, and finally there will be an interview with our CTO to go over any remaining questions you might have.

If you're keen to join our team, please apply here: http://grnh.se/cix4ea
"The problem is that I don't know what methods the returned objects have available, and as such whether they are a duck or a tiger."

I don't get this...
Why not do the following:

In [1]: import requests
In [2]: resp = requests.get('http://www.google.com')
In [3]: resp.
resp.apparent_encoding resp.iter_lines
resp.close resp.json
resp.connection resp.links
resp.content resp.ok
resp.cookies resp.raise_for_status
resp.elapsed resp.raw
resp.encoding resp.reason
resp.headers resp.request
resp.history resp.status_code
resp.is_permanent_redirect resp.text
resp.is_redirect resp.url
resp.iter_content

Now you can try each of those things and explore their methods.
I don't know any of the science behind it, but it's my understanding that during long periods of not eating, metabolism gradually slows to a crawl to allow maximum duration from the amount of 'energy' available in the body.

I'd wager it gradually ramps back up again once food is reintroduced, and overeating during this period could probably lead to some pretty hefty weight gain.
Thank you very much for your comment. What do you think about Recalbox OS? Some people say it´s better than RetroPie, but I don´t know (and do not really care as long as it works).
My bank limits passwords at 15 characters. The best thing? There is no verification, it just cuts off. Have fun figuring out why you can not login anymore.
100k words might be a bit to many for a dictionary of words that are easy to remember. The comic proposes using not enough entropy (i.e. you should use more than four random words).

The Schneier method is basically equivalent but with important caveats: 1) Such a phrase is not randomly chosen but follows at minimum basic English grammar and at worst is well-known and thus part of the attacker's dictionary and 2) even if that is taken account for the first letters are not distributed uniformly across the alphabet, you just need to take a look at any (printed) dictionary. That greatly reduces entropy and makes it hard to reliably estimate entropy.
> Point of investment is to make profit.

You can also invest out of ideological or ethical reasons. For example, I would not for the life of myself invest in a weapons manufacturer even if they had the highest ROI around.
I don't think the loss-of-control narrative holds. One, global banks aren't nearly that coördinated (within or without). Two, algorithmic and prop desks are examples of banks willingly giving up control to make more money.

The issues with the blockchain are it's unpredictable and, as someone else mentioned, difficult to trace responsibility on. That matters in a legal system with a concept of fault.

Blockchain finance doesn't yet make sense somewhere like the UK or America because our systems are too deep and storied. They could have a leg up on existing institutions in places like India or Italy or Russia, where the current system is crap. That said, I'm still waiting for a blockchain start-up to run its cap table on a blockchain.
That only matters if, for some reason, your password is length limited. If your password must not be more than four letters long, then yes, choosing your tokens from an ascii table has the highest possible entropy. (Example: WPA2 PSKs, shitty websites.)

If your password can have arbitrary length (or arbitrary enough, about ~120 letters), you can generate a 128 bit password with dictionary words as tokens. Sure, the password will be much longer (factor ~6), but also much easier to memorize.
It's a NP complete problem. What I mean is, there is no generalisable solution to this. Optimising algorithms employed by sophisticated technical users (think `-O`optimisation; Java hotspot) typically employ sets of heuristics that run the code in more optimal ways based on certain patterns. To trigger these you usually have to be aware of them and write your code in a certain way.

Given that Excel isn't really targeted at these kinds of user (heavy lifting typically offloaded to external libraries) it wouldn't be "Sad" if they didn't already do it, and I would in fact be pleasantly surprised. Which is why I'm asking the question.

EDIT: Turns out you're right! https://msdn.microsoft.com/en-us/library/office/bb687899.asp...
These passwords are just abysmal.
"users who extensively tweak their settings from the defaults may be actually making their browsers considerably easier to uniquely fingerprint"
...interesting comment in section, "User-dependent behaviors and preferences"
If you want to read the paper now I'm sure the authors will email you a draft.
That's still twisting words. There's nothing "premium" here, it's just a kit. People should spend 50 bucks on a 2nd hand Core2Duo ThinkPad and some mcu for GPIO, they'll learn as much for less.
In anywhere else where people don't throw billions into moonshots it is the goal. Nobody forces you to work on your small business all the time, you create it, you hire someone to do it, you collect money. If your only goal is to lose as much money as possible, as that means "pre-profit", then good luck.
The cost of quality
The cause of the next financial crisis: US house prices
> 100k words might be a bit to many for a dictionary of words that are good to remember.

I've been generating all my (memorized) passwords from a 120k word dictionary for years now, can't complain. And estimating the entropy is easy.
Unified Communication Platforms – Unified Customer Communication
Unsalted MD5 is not that much worse than unsalted SHA-1 in this case. Afaik the only vulnerability MD5 has over SHA-1, fundamentally, is that MD5 has easy collision exploitation. But that doesn't matter when bruteforcing passwords.

* I'm not 100% on this, but let's be bold :) please forgive me if I'm wrong.
I'm not blaming you for the fact that disabling third-party cookies may break some sites. The problem is that you provided a long list of preferences privacy-sensitive users allegedly should set, without explaining what these prefs do let alone warning about the possible negative impact.
> | grep -v "'s" | egrep -v 's$'

Why filter those out?
I can't properly describe the cultural phenomenon but there is a sort of intelligent/privileged/rich get-out-there demographic that has been on a steady incline for some time causing gentrification of many rural areas.

Sort of a cross between totally-stoked-Mountain-Dew-guys + farm-to-table-vegan-tatooed-hipster + do-not-really-have-to-worry-about-money + love-ridiculously-over-hoppy-ipas + own-four-bikes + sustainable-forever + into-outdoor-shaming-others [1].

I'm not that knowledgeable on demographic groupings but I think you know the type. Yes stereotypes are dangerous and I hope I don't offend anyone.

EDIT: btw to be clear I don't have any problem with above mentioned traits (as I'm not far from it myself). IMO I prefer it to the rural stereotypes I grew up with which is toting guns and killing animals for sport (which again sadly I don't actually have strong feeling against either). However I do hate IPA beers. The over hoppy beers have to stop (I'm stout, porter guy).

Also if you are looking for a similar city to Billings I just recently visited Flagstaff Arizona. Flagstaff is pretty darn cool.

[1]: https://stuffwhitepeoplelike.com/2008/01/20/9-making-you-fee...
Yeah but their stocks ripped because nintendo only owned a 3rd of the stake in the Pokemon Company & nintendo made an announcement that they didn't expect this to affect their earnings
Sorry I meant the depth of field is too shallow in the S7.
Had this bug in a system I was working on. Pushed a patch in april.. and there still is an ongoing discussion whether it should be merged or not.
Ask HN: What happened to Facebook graph search?
I recall a few years ago being able to create really meanifull and helpfull queries on facebook like:

Friends of friends who like mountain biking and live in New Zealand

However it seems that facebook's search has been dumbed down. Were the searches too computationally intensive or abused in some form?

Any FB employees care to chime in as to what happened?
It was courageous to make a leap of faith and all that but not so courageous when it is at 160$. It's just ridiculous.
Waiting for Xiaomi to show their courage at 20$
How Thernaos Fell
> The manufacturing industry has become so specialized that companies are looking for hyperspecific skills that few outside workers could be expected to have.

I've seen this in action. A company hires someone, that person bounces around the company picking up various skills, roles and responsibilities.

Time passes, that person leaves the company, and the company looks for a replacement, completely ignoring the fact that the role and the employee who filled it grew organically together over the years, making it impossible to find a drop-in replacement.

They then complain that there's a skills shortage because none of the electrical engineers applying for the position are proficient with both graphic design in Corel Draw, and operating the shop's CNC lathe.
> The XKCD comic is showing its age. The comic mentions 1000 hashes per second.

scrypt should be about in that order of magnitude even on modern hardware.
‪‪Andy Murray‬, ‪Serena Williams‬, ‪Stan Wawrinka‬, – Daily News
Urban sound classification using neural networks
The Beginner's Guide to MySQL Storage Engines
THis is really great news.
There's a related issue that I've seen in some banks, which prevents you from using passwords LONGER than a certain number of characters (usually 8 or 10). The only reason I can think this is happening is because they don't hash them and they need to fit in their database column. I took my money out of that bank the next day.
Here is the perfect diet, which allows you to eat whatever you want and still lose fat:

(1) Eat whatever you want.
(2) Make sure that you consume less calories than you burn while eating whatever you want.
(3) Done.
ITT closing down doesn't help. There definitely seems like a need to fill technical certifications.
It's not that hard. If you're going to do three days you might as well do a little longer. It takes around three days to switch to ketosis, after which hunger disappears. I did a week with just a sense of determination and knowledge of what to expect, and my relationship with food improved immensely.
This is a great example of a "10x engineer". Someone less experienced would take 10x or 100x the time to investigate and resolve this problem.
My guess was going to be Unicode, the reason why 'sort' on Linux can be so slow if you're in certain locales.

https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/846...
Easy entropy calculation is the beauty of that method.

But for "take the first letters in an English phrase" you can't just do (2*26)^{length} or you are way overestimating.
An AI could possibly grasp more abstract meaning than humans, eventually. It doesn't have the same hardware limitations.
all the 50,000 words will not be chosen with the same probability. I think we are more like a random 8 characters [a-zA-Z0-9] password.