skysight-inc/HackerNews huggingface dataset:
I carry it in my back pocket turned on without any apparent problems.

I'm not averse to having a cellphone or other transmitting devices close to my body for extended periods of the day; it's having it right next to my head/brain for the entire 8 hours I'm trying to get good quality sleep that I'm more cautious.
Canabalt is an "infinite runner" game. It isn't close to the same genre/ style as the Rayman games (which are action/ puzzle games, where you have to find and use dexterity to collect 100 "Lums" in each of the many small levels).
Would be really interested to know how they cracked these passwords...
Not a single one of those phrases are a random mix of dictionary words.
There is no consensus about this question. Both sides clearly have an ax to grind. Everett knows the language best, so I'd lend more credence to his judgment. Regardless of the answer, it only means that Chomsky's theory that everything is about recursion may or may not have been falsified, not that it is a good theory.
suuuuure 3.5mm is dying. Just as uUsb is dead. Seriously, though, it's an well-established standard with design that has withstood the test of time. It is not dying today. Nor tomorrow.
That might be an artefact of how they were found. Note that the page says "a few of the longer passwords". It's likely that they specifically searched for passwords using that principle.
The tech industry is in Bozeman (140 miles to the West).
It is not like I didn't brush my teeth. But the layer on the tongue was about 1mm thick, maybe more, and no amount of brushing it would remove it. It would only make my tongue hurt after a while, so i went back to regular brushing. Ketones may be the answer as the other reply explains, but one thing is for sure, having that foul smell in my tongue and nose at the same time 24 hours a day for 2 weeks is no party.
At first I was really impressed by `1qaz2wsx3edc4rfv5tgb6yhn7ujm8ik,9ol.0p;/`, but then I watched my keyboard and all became clear. These brute force tools are getting better and better at trying useful combinations to the point where I think all "clever" are now known to the tools and the only thing that remains is completely random passwords as they are generated by password managers.

Thank you for posting this list - this is very enlightening.
Unless the article was updated after your comment: the reason is right there in the article:

"However, Python does not produce any instructions for assert statements when compiling source code into optimized byte code (e.g. python -O). That silently removes whatever protection against malformed data that the programmer wired into their code leaving the application open to attacks.

The root cause of this weakness is that the assert mechanism is designed purely for testing purposes, as is done in C++. Programmers must use other means for ensuring data consistency."
>Then imagined it is.

Only in the most pedantic and useless sense of the term.

Asserts are not just some random imagination, they are added based on the program's specifications and expected/desired functionality and constraints. The CS term for those kind of constraints are "invariants", and asserts are a way to be notified if those invariants are violated.

>unless you make them become real.

Only there are no assurances for that. If the invariants in your program were somehow guaranteed to be "real" then you wouldn't need asserts.

Asserts are there because whether you tried to make your invariants "become real" or not, you'll still miss things, have bugs, have unexpected interactions with code/systems outside your control etc. So they are there to tell you about those misses.

>Point taken. Unfortunately, logging errors or aborting the program won't make assertions magically become true, though.

Assertions are not expected to "magically become true" -- just to (a) inform about anytime they are violated, and, optionally, (b) not be violated and still have the program continue to run.
> If you feel uncomfortable in that section, feel free to avoid touching it.

I feel very comfortable touching hidden prefs in Firefox. That's not my point. My point is that random users stumbling upon your github page may not know what they're doing.

> Sure, everything may break some sites. But this is about blocking third party cookies, which blocks not a single site I know (Do you know a popular one?)

I quickly googled this for you, found this:

https://bugzilla.mozilla.org/show_bug.cgi?id=849948

https://news.ycombinator.com/item?id=5272069

https://getsatisfaction.com/getsatisfaction/topics/bad_user_...

https://planapple.uservoice.com/knowledgebase/articles/50965...

> No. If I remember correctly, the "new tab" page is about the ads.

The new tab page displays frequently visited sites. In new profiles without a browsing history, it would also suggest sites, some of which would be "sponsored" (i.e. ads). If I remember correctly, Firefox would pick the ads locally without leaking information about you. So what's the privacy impact? Also, it doesn't even do that anymore: http://arstechnica.com/information-technology/2015/12/firefo...
"Cannot be resolved" means NXDOMAIN.

Why assume email addresses only get checked in one place, and not all?

Ten million a day was a milestone. I left that company over a year ago; it would astonish me to find that figure now exceeded by less than a factor of twenty. Granted these are mostly not signups. They are outgoing emails nonetheless, which makes the case germane despite that superficial distinction.

Your proposed solution sounds pretty expensive in ops resource, to no obviously greater benefit than the rather simple (well under one dev-day) option we chose. You seem to feel yours is strongly preferable, but I still don't understand why.
By all means, let's keep charging out the ass for higher education so young people can be competitive in the job market while at the same time ship jobs overseas.
He must had a hard time figuring it out when he first encountered the problem..
Ok, I see. To be honest I read that as "keep your PYTHONPATH sane". I think that's a bit different from worrying about someone having write access to the source, but still related - point taken.
and whats wrong with eating too much - I understand that you say breaking the fast is important ... but why?
UK tech firm swoops on HP software unit in £6.6bn deal
the last one (script injection) isn't limited to python but any language that make use of template engine. escaping variables should be the default behavior.

Now I like python, it has many useful libraries, in fact it is one of the language that has the most libraries for any purpose. I wish, even as a dynamically typed language, it was stricter sometimes though.
The difference is that PGO was developed by Niantic, a third party developer, who pays Nintendo licensing fees. The licensing terms were not public, so it makes sense that the initial pricing of Nintendo would favor them to be optimistic, before correcting to a lower price upon hearing the news from Nintendo that the fees would minimally affect revenue.

Mario will be developed directly by Nintendo and they will keep 100% of the revenue it generates.
Regular Expression That Checks If A Number Is Prime
Additionally, last.fm used unsalted MD5 hashes, which are so trivial to break it's not funny any more.

(john manages 24 million hashes/second on my five years old laptop for that, even crypt(3) with md5 is three orders of magnitude harder to brute force.)
This is known as a "keyboard walk" and its variations are one of the more common patterns tested for.
He says,"I am not taking your questions because your questions are stupid and check the internet"
One Python gotcha that has bitten people in my company a lot:

fun_call('string1',
'string2'
'string3')

That is, missing commas and subsequent string concatenations can lead to nasty errors. I wish Python didn't nick this from C and would have just enforced the use of + to concat over-length strings, if they need to be split to multiple lines.
The article does end with three references to books.
I'd hate to be David Iceland right now....
From the OP: " clear is how much the precociously gifted outweigh the rest of society in their influence."

But ... all the students they followed had been through their program. Doesn't that equally prove that its clear how much those going through their program outweigh the rest in their influence? Isn't this just some kind of confirmation bias?
I don't think you even need to go that far. Can you optimise your implementation so that parallelisable chunks could run across all your cores? This sounds like the kind of think Excel may even do "automatically" but like many such things you usually need to structure your implementation in a suitable fashion.
Pro tip if you're just starting out, before you ever make a change to try to fix something, you should have a mental model of exactly what you expect your change to do. If you don't, step through the code over and over again until you do think you can predict the result of your change. Then verify your change does what you intended and repeat.
Blindly changing stuff or adding guards is never good enough, even if it's actually correct or fixes the problem. In code review if I ask why you made the change you did and you can't explain in detail what was causing the bug and why your change fixed it, I'm going to have to do that work myself.
Software isn't black magic, it's 100% predictable and hiding bugs with "fixes" just causes more harm in the long run.
Endless runners seem to enjoy good success. Anything with Mario slapped on it enjoys huge success, be it party games, sport games, platform games etc. For now, Mario is missing (pun intended) on the smartphones.

Seems to me that this is a winning combination for a HUGE success.
It is indeed no longer good advice, but not because of longer passwords not being better:

https://www.schneier.com/blog/archives/2014/03/choosing_secu...

> This is why the oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick.
Exercise can cancel out the booze, says study
In your blog post, you write:

> I do data science freelancing. That is, I take contracts related to machine learning (predicting things, e.g. user growth of a company), data visualization (custom charts in D3.js), preparing and conducting trainings in data analysis [...]

Would you mind sharing a bit on your approach to contracting in this space?

Here are a few questions: Do you do blind calls? Do you use a freelancing site? Do you work remotely? What is the typical contract, how much do you bill? Does one have to do public talks to get recognised? How much do clients value your having a PhD? How do you animate the networking? Do clients find you, or do you find them? Why are they buying, FOMO on a marketing dataset, or just plain curiosity on the subject? If you had to specialise in one niche market, what would be, what would be your approach? Basically: what would be the steps you would take should you start only with the data science technical knowledge?
>The assertion remains false for the final process state, before the process quits.

Which is inconsequential. Programmers don't expect automatic "recovery" from assertions, they expect them to notify them of the violated constraint, and/or to ensure that a program wont go on and use a value that violates an assertion further down -- which program termination achieves.

>Outside of the process, the assertion is simply meaningless (neither true nor false), because the assertion's free variables are only bound inside the process.

Captain Obvious?
Had a good laugh at this one

<script>alert(document.cookie);</script>
I get full well what it does, but I find the syntax "magic" and not very attractive. Why no special keyword for visibility, proper namespaces etc.?

In c++ and likes, I know there's a vtable somewhere, and I get why there must be one for virtual funcs, but I don't want to deal with it directly, it's the compiler job. Same for Python, I know it must prevent fields from getting clobbered when inheriting, but I don't want to be exposed to its mangling or whatever other mechanism it uses.
Interesting! I used to wonder myself about such a dependency pushed on money. There are a lot of efforts to get all the society cashless, and it's understandable because there are upsides for many involved parties, but the downside is the reliance on its infrastructure that can fail or be attacked. I also used to wonder if people will consider this vulnerability without a precedent or not. I see this state of things persists in a lot of other systems too.
Learn digital skills together with self-taught people like you
Yep. I have 5000+ files in Box. We have users with far more (and it supports very large file sizes -- 15GB I think today?).

Sync client has improved quite a bit over the years.
Wholly agreed about not writing Java in Python, and I do write idiomatic Python. The problem is that I don't know what methods the returned objects have available, and as such whether they are a duck or a tiger. The examples show that it has a mouth and eyes, but I need to know whether it has wings or claws, and Python's docs don't make that clear.

Can I index the returned object, or only iterate over it? Is it mutable? Is it a dict or a tuple of (key,value) tuples? Did the author think it was worth it to make its own class for the return type, because they want the indexes where the value was found as well as the metadata?

Python, to a degree, brushes over these problems by being able to print out most types of data and then figure out where the problem is, but TBH I'd prefer to write the correct code to begin with, and the docs don't give me enough information to do so. As such, Python turns into a dodge-the-error-driven-programming, and I feel much less productive than I could be.

Yes, duck-typing gets you part of the way, but it doesn't let you pretend type doesn't exist entirely.

I feel like using Go's interfaces would be more powerful for a duck-typing language than having type-annotations.
The current US welfare system is such a complicated clusterfuck of fragmented programs that anything would be an improvement. The most insidious aspect is that it has all of these income cliffs where actually working and earning over a certain level means that you lose benefits, so that earning one dollar more may cost you thousands in lost benefits.
> I memorize 3 passwords and they are extremely hard.

Not everyone is a masochist. It doesn't matter whether you encode 128 bit entropy in a base95 string, or a list of ~8 random words, it's still 128 bit entropy… but the word list will be easier to memorize and to type out.
The non-programmers in other countries are actually more confused with the English formulas than with their native ones. I know as, not living in the English speaking country, I had to explain various Excel functionality (and formulas) to such people.

And it's true even for those who during some time in their life spent some years in some English speaking country.
> Field visibility

It has nothing whatsoever to do with field visibility.
Every time I drive through Billings I wish they didn't have several oil refineries in town. Given the choice, I'd always pick a town that did not host major industrial sites.

Source: https://www.google.com/maps/search/billings+oil+refineries/@... (this query doesn't pick up the refinery in Laurel, just to the West of Billings).
like he said the rounding made 975000 an impossible result.

if you have rounding or some kind of non-continuous function the right feature to use is actually Solver (which is an included add in you have to enable in Excel options) which provides you with an fmin function (or several) as opposed to goal seek's fzero.
I remember talking with a football player in the gym when I was in high school. He told me that the coach had told him the opposite: if he had one drink that would undo the effects of a week worth of training. He believed it too.
Execution is important though, and Nintendo might surprise here.
What about franchise dilution?

I'm not sure what a Call of Duty game means any more, other than it's going to be a FPS.

They have had different teams work on the games, there aren't any common characters, time periods vary etc etc.
In my own experience day 3 of a water fast had profound effect on my health. I have some health issues so I closely monitor my blood pressure and blood sugar. On the morning of the fourth day my blood pressure and blood sugar would drop tremendously and stay normal for several months. ymmv
> Same for Python, I know it must prevent fields from getting clobbered when inheriting, but I don't want to be exposed to its mangling or whatever other mechanism it uses.

Python does not prevent anything, it gives the developer a name mangling tool, it's up to the developer whether they want to use it or not. By default, identical names will conflict and you will clobber supertype fields or methods.
To add to the ease of hacking around it, how the hell are you supposed to log in from a phone? Or a different keyboard layout?
Some of the context of this can be found in the 'Poverty of stimulus' wikipedia entry. Chomsky argument was tried to be cast in theorem form in a paper of E. M. Gold to apparently settle the question (in favour of Chomsky), but despite that result the computational linguists have been busy making useful work in NLP with machine learning methods, and now the debate has shifted from armchair discussion to the question of the interest of the emerging new language technologies and the role of unsupervised learning. Less famous, Zellig Harris (Chomsky thesis advisor), is now cited in deep learning language modelling literature as a precursor of the distributional model pushed by Bengio that is now used in word2vec and what not nlp.
Well, the new users might want to keep their files hosted where they already are.

I have Box account, but not much files there, my primary cloud storage is gDrive, but you know, people might have Box accounts with those 50GB that OEMs gave away with devices ;)
lol what? i'm not sure where you get that sentiment but apple has always been about good engineering. sure they've had their design flaws and mistakes, but more often than not they are pushing the boundaries of what can be done(minus what i consider their latest phone offerings)

i think you're forgetting in the age of plastic laden laptops the things like the air were considered impressive engineering wise. overpriced, sure. but solid. the built quality of my old macbook pro was leaps and bounds beyond any pc equivalent at the time. apple trackpads/screens and touch sensitivity have still yet to be matched.

you can criticize apple's pricing, proprietary lock-in and a host of other things, but i think quality of engineering is definitely not one of them.
David Lynch on Great Ideas
Vivaldi browser 1.4 released with theme scheduling
I don't think that's true.

Why are they even publishing these numbers then? Even when it's not helping their image.
Schneier completely misses the point. The entropy estimates quoted by XKCD (and indeed, used by implementations) assume that the crackers are "on to this trick". For any given entropy you use to generate your password, xkcd-style passwords will be easier to memorize and type out.
And the way we handle that is by designing systems to compensate for the fallibility of humans so that the human-computer system is more robust as a whole.
It's sad this animal is extinct, it's such a great example of convergent evolution and comparisons with the wolf (mammal) originally got me interested in thylacine when I was a child.
That only happens if you have different production and development environment settings though -- in which case you should expect the different results.

In this particular case, you compiled your code with "-O", so it's not the "same code" used in production, but code compiled with a different flag. Shouldn't they check what the flag does?
Not exactly always, some of the no doubt distorted by the passage of time reported symptoms don't align with what we know of at least more modern strains of the plague, e.g. stuff more like what's seen with modern hemorrhagic viruses.

The official third and most recent pandemic started in 1855 in China and reached the US by the turn of the century, so we have much more solid reports of that strain's behavior: https://en.wikipedia.org/wiki/Plague_(disease)#Third_pandemi...
Maybe it's just not reflected in the question, but did the asker not immediately try other characters to see if there's a pattern? Given the answer, other letters would probably have had the same result and other characters would not. They could have at least narrowed the problem down to letters.
This article is posted every time the comic is mentioned but I can't understand the argument. The calculation of password complexity in the comic is made with that in mind. It's assumed that the cracker knows the method used to generate the password, including the dictionary. The strength of this method does not rely on the fact that the password has many characters but that words are randomly chosen from a large dictionary. The attacker would need to do the same at minimum.
sounds good, what's the draw back like?
I agree that it sounds like a great web app (I had the same thought) but I think you need to be careful not to be too hand-holdy. Half the game is the journaling of the situation, and if you too hand-holdy I think you lose a lot of the impetus to do the journaling. Or at least to do it well.

Still, I'm definitely considering it for this one, or something like it.
Use 4G VoLTE Technology at Its Best – Here Is How
One of the most attractive aspects of basic income is exactly this. $10000 a year stretches a lot farther out in the boonies than it does in SF or NYC, and if you don't have to be there to work, that opens up a lot of degrees of freedom.
Password manager but then in that case it might as well be random.
Video games are art. You can't be "Better than art" as art only means "creation with intent", which is so broad even kicking a can down the hill in a certain way can be called art.
Comic book movies in general are fast reaching the breaking point, at least with reviewers. But I'm sure the studios are well aware of this and will maximise for as long as their moment lasts
There is no silver bullet, no technology that is good everywhere, but there are things that are bad everywhere, like unnecessary reliance on JavaScript, code and resource bloat and so on.

Being diplomatic about it and not assuming everyone who deployed a Joomla installation with a ton of bad plugins because it HAS TO WORK NOW is an idiot is OK. But wrapping bad engineering practices in "different contexts need different solutions based on determined use cases and needs" is a very different story.

Obviously, different contexts and use cases need different solutions. That's no excuse to pick the bad ones, nor to pretend they're not really, really bad.
I mostly agree with you. Where the names are clear and obvious, naming is very helpful.

However, when it is no longer obvious what the name refers to, there is no more benefit than the original cell reference. In fact it is even worse because it's not immediately apparent where the cell is now the reference isn't showing. I often run into this problem with very large spreadsheets where every cell is named.

Our workplace has a strict "everything has to be named" in Excel and it really makes life much more difficult when working with extremely large calculations. Often I will want to know what a certain formula is doing. I will look at the formula. There are about 6 named cells that I have no idea what they refer to. I then have to use the drop down list (which includes about 500 names) to find the cell it refers to. Looking through this list is a lot slower than just reading the cell reference and looking at that cell. It's also quite easy to pick the wrong name in a list of 500, because there is likely to be a lot of similarly named cells.