skysight-inc/HackerNews huggingface dataset:
> Even parents in the US call police to discipline their kids for silly stuff like drinking alcohol.

I think you're drastically exaggerating. The opposite is true. In my opinion parents very rarely call the police to discipline their own children, particularly for things like alcohol. The police are also very rarely involved in school discipline, unless it involves higher level violence or weapons. Of the N instances of discipline problems at a school, a sub 1% number of those would involve calls to the police. In an average American high school with 1,000 students, there are going to be at least a dozen instances per day of discipline problems with students, the police are not getting called that often.
Telemetry related of course. Shame it is not properly documented. As with all things closed source we have no idea how this works, when it is updated or if it is possible to ignore it totally.
Could this list of domains be used as one-stop-shop to block all Windows 10 snooping?
Those numbers are great and all, if you ignore human behaviour. Nobody's saying that wearing a helmet doesn't make you safer if you are in an accident, that's just a strawman.

The real issue is such things as driver behaviour changing around people with helmets making accidents more likely, or mandated helmet usage leading to fewer people choosing the bicycle as their mode of transportation, making things more dangerous in two ways: people choosing other options that are more dangerous than bicycling, and the fact that more bicycles on the road means less danger because 1. people get used to interacting with bicycles in traffic, and 2. there are fewer cars on the road.

You need to look at the broader picture. You can't just look at a fire escape where people gets injured because they trip down the stairs and conclude that the solution should be to remove the fire exit. Sure, it will definitely decrease the number of injuries in that fire exit but that's not really helpful, is it?
> Which is why Kanye West's comparison is nonsensical.

When you think about it from a media perspective, I think it's actually very insightful.

The American public was up in arms about the death of 314 soldiers on foreign soil, but seemingly oblivious to the >500 killed right at home in just one city in the good 'ol USA.

Surely all lives are equal, and it doesn't matter where a person is killed, but only that they are killed. For every minute of airtime given to the deaths Overseas, more than that should have been given to the deaths in Chicago alone. And NYC, and Baltimore, etc. etc.

It wasn't. The media is not giving an accurate representation of real life, and now people are making life decisions based on that false picture.
I agree with following comment.i was wrong. Thanks asdfaoeu for it.
Yes, I use it as an example URL for tutorials or for testing out any HTTP-request-making code.
> The first listing is indeed from Amazon.com as the seller. It has the cheapest price at $5.97 with "FREE Shipping" if you have Prime. So I assume that without Prime, there is a cost for shipping.

Worth noting that Amazon has been regulated (in the UK) over their adverts and use of the term "free shipping".

https://www.asa.org.uk/Rulings/Adjudications/2016/8/Amazon-E...
If necessary, it's possible to fall back to password plus OTP.

That's a reasonable compromise, since you carry the OTP generator around with you.
Some general advice based on most requirements.

- Is it better to use a different passphrase on each key, or does using the same one not matter much?

If they are being used on different device then different passphrases makes sense otherwise no.

- How much less secure is it to not use a passphrase on a key?

10? Not sure you can really quantify an answer. I'd recommend a passphrase if you aren't already using disk encryption with that it's probably less of a concern however with agents there's not much issue with not having one.

- Should you use a different key per user account, per server, or per use-case (i.e. personal or work)?

Use a different key per client device but you don't need a different key for logging into different servers unless you care about people correlating those users.

- Does increasing the amount of bits in a key really have an effect on the security of the key, or does it not make much difference in a real-world use?

Use more than 2048bit for RSA/DSA beyond that it doesn't matter.

- How/Where should private keys be stored on a device using them?

~/.ssh on some local filesystem.
A researcher from Bath University found that drivers gave him less space when he was wearing a helmet.

They gave him the most space when he was wearing a long blonde wig.

http://archive.cosmosmagazine.com/news/blonde-wigs-safer-hel...
Hmm... maybe use people who require surgery/anesthesia and just tell them they were injected? I've taken a few courses on clinical trial design just out of curiosity, but now I find I can't really say anything substantial about my own idea. Back to the courses?
Cellular rates in Germany are pretty high. On a recent trip I was shocked to find out that prepaid mobile data is roughly 10x - 20x more expensive than in neighbouring countries.
We are now witnessing the highest levels of displacement on record
I have been programming in C++ for almost 17 years now and I would say I know maybe 20-25% at most.

The reality of C++ is you know what is needed for the problem you need to solve. As people mostly work in the same (broad) areas for their day to day work it is unlikely you need to know outside of that scope regularly. At least not in my personal experience.

Also I strongly believe nobody truly understands C++ streams :)
> Private key is a "password", we need to treat it as such!

This is harmful advice in my opinion. A key has sufficient entropy to resist brute force attacks and is never directly exposed to a server. The same key between multiple servers is fine.
yes that was the point of the article(that you obviously didn't read), young men aren't going out and doing the low level jobs that would lead to career advancement. they're doing them but at later ages, leading them to miss the cutoff for advancement and being stuck in lower level roles
Germany has abysmal mobile contracts. Inam cheaper roaming on my Austrian premium sim in Germany than to get a German sim.
> The police are also very rarely involved in school discipline,

Police are so involved in school discipline that it has its own name -- School to prison pipeline.

https://en.wikipedia.org/wiki/School-to-prison_pipeline
"Ravi is a derivative/dialect of Lua 5.3 with limited optional static typing and an LLVM powered JIT compiler."

https://github.com/dibyendumajumdar/ravi
Read the original Bitcoin paper, it should take no more than two hours even if you're not technical; http://genius.com/Satoshi-nakamoto-bitcoin-a-peer-to-peer-el..., once you understand what a blockchain does you'll probably want to know more about smart contracts http://about.smartcontract.com/#defining-a-smart-contract, since their decentralized data/transaction storage capabilities enable the decentralized computation which has the capacity to replace 90%+ of computable contracts (http://www3.weforum.org/docs/WEF_GAC15_Technological_Tipping...) which are currently in silos, much like what we had with various data before the internet
What about for the host key of the server (assuming ssh2)?
How many companies have you run?
Here's an article that describes the phenomenon: https://www.sciencedaily.com/releases/2012/10/121030161416.h...
AVM doesn't call it VLANs, but "guest network". Activating the feature opens up a new SSID with internet-only access (the newest release of FritzOS even can do a captive portal!), and you can assign the LAN4 ethernet port to it, too.

Separating the IoT stuff (at least the stuff that needs connectivity from outside) into its own VLAN at least prevents a hacker from gaining access to the rest of your home network (e.g. NAS devices or your normal computers).
Only a handful of modern C++ features appeal to me.
In order to use them, i actually have to use other features(less desirable, like templates or class inheritance) which create bloat, latency and corner cases requiring knowledge of the inner structure of the things(like variadic functions actually being variadic template syntax sugar). Ease of use which C++ brings is 'balanced' by opaque and hard debugging, large executable sizes and large memory use.
First Year Data of Mars Orbiter Mission (MOM) Released
I recall that Google was taken down by a botnet in 2003, but I'm not able to find any articles about it.

Today it's different, not only do they have a massive network, but they probably also have firewalls which drop the attacks from the start.
Very nice.

GCC introduced split stack in 4.6 I think. Code that uses this split stack feature would be a problem right ? Anyway to handle those in tgc ?

If I understand it correctly if one rolls ones own spaghetti stack on the heap tgc would still be fine with it. Is that correct ?
What's the processor in the Lima? The website has no technical information on it whatsoever (even under the 'Tech Specs' sections). Genuinely curious; I thought all x86 processors made these days supported CMOV.
Can you give some concrete examples?
Works fine in Germany also.
What are the components of C++ that add up to 100%?

I can count:

* language basics (variables, structural statements, functions, error handling, preprocessor, how compilation works)

* OOP

* functional programming (which is not that complicated at all in C++)

* generic programming

* advanced generic programming and metaprogramming

* the C standard library

* the C++ standard library basics (containers, algorithms, smart pointers, cout << "foo")

* more advanced c++ standard library (maths stuff, threading(?), chrono, advanced streams (not needed))

I think most C++ programmers have a reasonable command of all of these except the metaprogramming and advanced standard library.
i don't care about the money, i have and will in the future spend lots of money on useless things
what i'm always worried about with these projects is the potential lack of community engagement. tons of these type of things come out and die within six months because the major maker/hacker communities just do not give a damn about them, so they don't get iterated on or mixed with other things. makers/hackers are fundamentally cheap ie they like working with cheap components even if the overall scope creep on a project ends up eating a significant chunk of their salaries.

raspberry foundation did something really clever by going for the cheap/educational route. nearly everyone i know has heard/hacked on a raspberry pi

exciting to hear about and if the project makes it in terms of excitement within the maker/hacker communities, will definitely buy one
> Outside of complying with space-consuming regulations and certain special urban bonuses related to lot size, Houston doesn’t regulate density.

What are "space-consuming regulations"?
I pay 15€/month for 4GB LTE with unlimited SMS and minutes and it's prepaid. I know it's not the best in Europe but it has gotten better.
There is nothing "simple" about Java once you get past the basics. When you get into the EE world it gets extremely complicated.
I don't think it's a non-story the fact that some market participants can short sell non-existent amounts of stocks. Is this common knowledge? Did everyone already know this but me?
The Library in the Lobby at Andreessen Horowitz
A British view: https://youtu.be/K2k1iRD2f-c
Looking at the list of domains, they appear to be almost entirely unrelated to telemetry.

Most likely this feature is a response to incidents such as this: https://www.wired.com/2011/03/comodo-compromise/ (in which certs for login.skype.com and login.live.com were misissued by Comodo).

Blocking the domains in this list to prevent telemetry, as suggested in other comments, would prevent access to most of Microsoft's online services. This includes third-party websites hosted on Azure that aren't using their own custom domain (.azurewebsites.net), and all software updates, including critical security patches.
Not true. As someone else already noted, you can get 4G for 15-20€/month with reasonable traffic limits.
Which is exactly my point.

Also the reason I argue that those that think Go will be kept simple, just aren't prepared for the eventual mainstream enterprise adoption.

Imagine when IBM or similar, releases their vision of GoEE.
Uber for packages already exists (https://rush.uber.com/how-it-works)

They use "Earn on your own schedule" instead of "Bored at work?" as a slogan, though (https://www.uber.com/signup/drive/deliver/)
>Two kinds of people hide behind being an introvert: assholes and people afraid of other people, often a mixture of both.

False dichotomy. I love hanging out with people, and get on with a lot of people really well, but I need alone time in between or it becomes a hellish experience. Kind of like how I love being awake, but if I don't sleep regularly then being awake is really horrible.

Then again, extroverts who don't understand this probably think I'm an aloof asshole for not wanting to socialise with strangers all the time.
Further down they explicitly mention journalists, which I believe is a reasonable category for Krebs.
I didn't watch the Ted talk, I read the chapter in his book. So I don't have the high emotional response.

What I see is that child seats are being DOT approved much as if car crash data only had to exist for one vendor selected model for one configuration of passengers and then cars with similar mass distribution were deemed inherently safe for any configuration. Thus, there is nothing in the approval to indicate that whatever approved car seat you buy achieves a safety purpose.

I don't really care if Levitt can prove that they are on average less safe. The point that they will have a random distribution between better and worse than nothing for their only purpose is why they are a fraudulent industry that can't be mandated by legislation. I would rather parents that don't care to do research buy nothing than buy the cheapest or prettiest or most adjustable fine avoidance mechanism. Forcing uninformed purchases furthers the average level of safety fraud, pushing the market to converge towards less safety.

The chosen system lets DOT look important as they raise that minimum bar to exclude the loopholes used by the very cheapest seats while fighting industry lobbying.. It is like they are looking for a new batch of deaths from encouraging a market for extremely dangerous products to be important again.
You just proved my point ;)
Ask HN: Why would government security and hacking be any good?
Everywhere else in government, IT systems are generally bad, or old, or underfunded, or outsourced to some foreign services company.

Making anything happen is slow, political, time consuming, expensive and has a reasonable chance of failing.

Why is it that anyone feels that government hacking, surveillance and spying would be anything better?

Fear the NSA? You've got to be joking. In five years they won't even know what systems they have, let alone how to retrieve meaningful information from the flood of data they never knew how to get on top of in the first place.

Why do we fear government spying? We should be laughing out loud at the idea that our government could do anything so clever in and organized and competent manner over the long run.
That's not true.

There are always window shoppers and people that go there just to "hang out" without buying anything.

The wealthy people also have to buy their clothes somewhere and they probably stick to overpriced items in brand stores (not sure if I'm using the right name, but I'm thinking of the stores where they only sell one brand) which could be locates in a mall.
Platform API differences != language complexity.

These are two different things, platform differences are normally handled by a simple abstraction layer (or ifdefs if you're into masochism).
i can see why they would not call this VLAN functionality although it surely makes use of it, it is not configurable individually. So lets just say i misunderstood what you were meaning. Setting up a guest network with internet access would allow the same exploitation in order to participate in a DDoS attack.

While this would as you said protect my other networks to some extend it does not solve the problem. I will not ever trust these devices to get secure enough to expose them directly to the internet.

This is why i am thinking the only way to operate these devices securely is to require some kind of transport protection in form of an IPsec tunnel for example. This would allow me and anyone with the right set of access to control the devices without making them accessible to anyone else.

If home routers would encourage the use of such tunnels it would be a normal thing to have a link back to your home network (or maybe a separate IoT network) which could be properly firewalled...
I think Go depends in if Google want to take it from a language that solves their problems well to one that solves generic enterprise problems.
No guarantee you could block all tracking, although you probably cover a wide swath of the snooping by blocking the hostnames in this list (since they are owned by Microsoft). As mentioned in the article, the registry entry does seem to be regularly updated, so you’d have to keep track of any changes to it over time.
Is there ever a reason to give equity for free?

If the person thinks they have valuable business connections, then they should be willing to invest to then reap the rewards of the connection.
I see a possible solution here using technology:

Senders should add a small $1 "black box" recording acceleration data, and shipping companies should be able to query for a certain package and a certain timestamp, which employee was accountable at that moment.

Then when you receive a broken package, the black box tells you the timestamp when it was thrown to the ground, you tell that to the shipping company, which then finds the employee at fault and gives him/her a warning/sacks him/her.
As both rockdoe and hannob have mentioned, ed25519 provides the same attack resistance as a 128-bit symmetric cipher. This is even mentioned in the original DJB ed25519 paper:

> High security level. This system has a 2^128 security target; breaking it has similar difficulty to breaking NIST P-256, RSA with ≈ 3000-bit keys, strong 128-bit block ciphers, etc. (The same techniques would also produce speed improvements at other security levels.) The best attacks known actually cost more than 2^140 bit operations on average, and degrade quadratically in success probability as the number of bit operations drops.
It's already happening; OVH was hit by a DDoS nearing 1 Tbps.

https://twitter.com/olesovhcom/status/779297257199964160
This doesn't make much sense.

Just because the computers at your local library are slow doesn't mean that the NSA can't get your data.
GitHub, why no repository line count?
To me, that's equivalent :)*

* that's highly subjective
Don't most torrents mainly rely on DHT these days?
> There was no control over reproduction by women before the birth control pill reached the market in 1960. Therefore it would follow that every society before 1960 was poor, which isn't true.

No, it wouldn't. The argument here is that birth control is a factor that correlates to rising women's empowerment, which in turn can lead to a reduction in poverty. The reverse (societies without birth control are poor) does not follow.

> why do we experience today rising poverty while further expanding womens rights at the same time?

because women's rights are a factor, but not the only one. The argument is that, in the context of developing countries, it makes sense to empower women. It is not that any increase in women's rights automatically leads to more wealth.
> - Is it better to use a different passphrase on each key, or does using the same one not matter much?

It is better to use a different passphrase for each key but it is also less convenient unless you're using a password manager (personally, I'm using KeePass)

> - How much less secure is it to not use a passphrase on a key?

That depends on the security of the computer where the keys are. I remember a Firefox vulnerability where one site exploiting it was looking for ssh keys on the local file system. So I'd say that a passphrase is very important.

> - Should you use a different key per user account, per server, or per use-case (i.e. personal or work)?

Personally I'm using a key per account per host.

> - Does increasing the amount of bits in a key really have an effect on the security of the key, or does it not make much difference in a real-world use?

Yes up until 2048 where the returns of increasing the amount of bits will start diminishing.[1]

[1]: https://www.gnupg.org/faq/gnupg-faq.html#no_default_of_rsa4096
This. It's so cheap and easy to use a hardware token for your GPG and SSH keys nowadays (YubiKey 4! TPM! Smartcards!). If you're not using one, you should.
I think you're proving the point, but I'm not going to fan the cyclist/driver flames.

> Rolling through a stop sign is a serious offense for us, and outright dangerous.

It's not outright dangerous, assuming you're in North America. The US has so many stop signs that the safety message is lost, the vast majority are pointless.

In Europe [1], small junctions in residential areas don't have any signs at all. Where they meet larger roads, they just have yield signs. If there's a lot of traffic, there could be a mini roundabout (painted roundabout), which just changes the way people yield -- to the left, rather than to the larger road. In all these cases, it's not required to stop. The driver/cyclist uses their judgement, based on traffic, visibility, and so on.

Stop signs are used sparingly, and show there's a real danger. For example, in the UK "stop signs may be placed only at sites with severely restricted visibility, and each must be individually approved by the Secretary of State for Transport" [2]. Where I grew up in England, I know of only one stop sign out of all the routes we took to visit places. It was where an overhanging mediæval building obscured the view of traffic at a junction.

[1] the parts with roads at least as safe as the USA

[2] https://en.wikipedia.org/wiki/Stop_sign#United_Kingdom
In my opinion, many C++ projects would be simpler, cheaper, safer, and better maintained, if were written in C (with adequate libraries, e.g. for strings, vectors, maps, threads, timers, sockets, etc.).
Atheist shoes? I'd worry they'd arrive without soles...

...I'll see myself out.
too bad windows apps required a comprehensive bottom to top knowledge of windows stuff.
for example - built an android app while learning java in school. didn't know what everything did but the outcome was the same as promised in the tutorial
meanwhile in the windows 7 app tutorials, phrases like "do this as you would do in wcf so & so and it should work" were thrown about leading to an endless nesting doll structure of learning what the definitions meant- that led to 4 weeks of on again off again learning before i made a copy of my android app. the tutorials improved later but i'd given up on windows app development by then, the promised free support for windows app developers never materialised in my country

great platform decisions, poor app developer support and shitty ecosystem(still haven't considered developing for the windows 10 appstore because of this reason).