skysight-inc/HackerNews huggingface dataset:
This really starts to hurt when you go around shopping for C++ libraries. You can totally mandate a particular C++ style in an organization and achieve good results but good luck trying to use a library written in another style. Which is one of the reasons why C++ library ecosystem is relatively scarce.
Remotely: zero

Locally: if you distract the person making the calculations for a second, it's easy to move a bead or two.

Insider: easier than a computerized system for individual computations. Imagine how easy it is to move a few beads incorrectly when computing taxes on your own income statement and how much work it would be to detect that.
The only way to get it well-adopted would be if you could get Google, Apple, Microsoft and router manufacturers to agree on some user-friendly and secure way to set up tunnels and connect to them from your phone/devices. Good luck with that...
> In the US all that matters is money.

Not entirely. Perhaps more than in the UK, yet behavior and social circle are still a factor in the US.
>If there's x1000 speedup, as claimed, it's a real deal, no matter if it's "really quantum" or otherwise.

Except not, because constant time speedup isn't interesting, 1000x classical computers will get you the same effect probably for less $ than d-wave. The entire point is that a genuine quantum computer should achieve an asymptotic speed-up not a constant factor one, which no one really cares about.
TIL. Never knew that thanks.
"Where did this collective insanity come from?"

From the paternalistic insanity of authoritarian collectivism.
This exact same thing is happening in Oslo.

All of the new skyscrapers downtown around the opera house are sinking into the ground, and new construction is making the situation worse.

Curiously I can't find any articles about this in English, but here is one in Norwegian.

http://www.tu.no/artikler/bjorvika-synker/231007
From my experince as an attacker --

- Is it better to use a different passphrase on each key, or does using the same one not matter much?
- How much less secure is it to not use a passphrase on a key?
- Should you use a different key per user account, per server, or per use-case (i.e. personal or work)?

None of these things really matter that much. Make sure you use full disk encryption and never stand up from your machine without locking it, and make sure you keep your local machine patched. If I get code execution on your machine, I am going to use whatever keys are loaded in your ssh-agent to pivot, hijack your existing open sessions, or modify your ssh client to dump the keys I need.

- Does increasing the amount of bits in a key really have an effect on the security of the key, or does it not make much difference in a real-world use?

Key length is a protection against the future, and against state level actors. Right now, key length doesn't matter much to me because I'm more focused on just stealing your keys from you regardless of length.
Wow, cool. Where did you get that? Does it also have other features such as allowing you to talk to the person in front of the door?
Well, at the moment, they are "opposite" as well.

No battle tested crypto schemes are post-quantum safe, and no post-quantum crypto schemes are battle tested.
The random generator code-driven art
Concerning the manager<-->employee relationship, the author may be right. I've loathed some people I met. It's often because they're young and insecure after suddenly being thrown in a position of power. Inexperienced people then often feel the need to assert dominance and that's sometimes not pretty to watch.

But the author is wrong concerning the cultural aspects, like "Club Mate" and art exhibitions and friday drinks. That stuff is critically important because it fosters communication across companies. With so many ideas being rapidly tested, some failing, some changing completely – and with mostly young people also changing, it facilitates the "optimal allocation of resources".

People meet at parties, get talking and often start a project together, with many being involved in several projects at the same time. They can easily shift time to where it's most productive and the cost of trying something is kept low. It's also a lot more fun than a cubicle at a bank.

What may be missing is (a) raw engineering talent in the way Stanford or (previously) Bell Labs produce it. You need a few people who are above and beyond everyone to start the really exciting stuff. And (b) possibly the funding infrastructure.
True, but this is the first sentence of the article:

> America is experiencing a bizarre disconnect between real and perceived danger when it comes to kids.

America, not "the West". There is a very specific crazyness in America and kids. Apparently you can now be arrested in Arizona for touching kids genitalia for any reason whatsoever, including parents changing diapers, doctors examining children, etc. etc.

Kids are not fragile angels, they are just little people.
Indeed, tons of job postings with php, java, Typo(cms). I am often wondering what is it that i am missing here.

And one generally gets very much the feeling that true innovation and creativity is not really apreciated in here. Goes pretty well together with the unfriendly business environment, where it was not possible to start a company with limited liability with less than 25 000€ In start capital until 8 years ago. So much hype in this "Berlin startup city" thing.
I wonder how much companies are going to, if it really occured to them, badmouth YC ... on the YC forums. Even if they had a bad experience, they can still use the network.
Digital Summit Detroit 2016: Max your marketing muscle
Nice collection of web art.
I fear it would be null routing. Would be good to know someone with some experience of this that's not from Google.

We can get all the reassurance from an account manager that they'd never stop our service. Real life doesn't always play out that way though...
Your list of common features is a bit too broad. For instance a common sentiment among game programmers is "STL is shit, you better don't touch it at all".
Yeah, the more I think about it, the more I think men are obsolete. Men are responsible for forcing all the natives out, setting up the government, constructing nearly every piece of infrastructure and creating nearly all technology. Not to minimize the potential of women (patriarchy really, really held them down), just highlighting that these male flavored contributions to society are really not needed anymore.
Where can I download cargo for i686-unknown-freebsd ?
A strange app.
> Most people value (some) animal life above human life.

/me puts on flameproof gear

Since this started with a gorilla... From a purely numbers-based point of view, it actually makes sense. Death of a single member of near-extinct species has a negative impact on the viability of that species. A death of a single human (or even few of them) will not make a difference. Not on a planet where human overpopulation is an increasingly pressing problem.

Even if you disagree with the idea of conservation, at least have some sympathy for the future Epicureans. By driving species into extinction, we are depriving those future society members of experiences they might otherwise have.

[insert end-of-sarcasm tag here]
Trumps supporters are victims because sane people don't want to support those who support a sociopath.

Gotcha.

Edit: also:

I still don't understand why you believe there is a problem. If someone is actually fired because they support a particular party/etc that would be (in sane countries) illegal.

If it's not illegal in your country, maybe you should fix that before insisting that anything anyone says should be automatically free of consequences. That is a very slippery fucking slope, especially with the sort of shit trump supporters say aleady.

As for the specific issues: Brendan resigned from Mozilla because he couldn't "manage effectively", aka the staff in Mozilla didn't respect him because of his prior actions. It was the staff in Mozilla who publicised his donation - they knew what he'd done before the shit storm that happened online.

If you can't unfuck yourself from a situation where people don't respect you, maybe you didn't have the chops to be CEO in the first place.

And for the trump supporter, I don't fucking care. Trump is an orange hitler with less charm and a worse haircut than the original. To those who support him: fuck you very much, from the rest of the fucking world.
i can recommend this link:

Upgrade your SSH keys!
https://blog.g3rt.nl/upgrade-your-ssh-keys.html?_utm_source=...
During hurricane Sandy I lived directly across from the Chase building in the financial district. The motion of the Chase building made me sea sick looking at how much it swayed in the wind. You could see the window shades flying back and forth, some office chairs moving around. The displacement was obvious with the naked eye, it reminded me of palm trees at the beach during high winds.
That still doesn't add up in my mind. A 1%-er household would have $240k+ post-tax annual income, more if they're deducting hefty mortgage interest payments.

$100 in food daily ~ $36k
$500 weekly domestic help ~ $25k
$500 monthly utilities ~ $6k
$2k monthly transportation ~ $24k
$2k monthly misc ~ $24k
$10,000 monthly mortgage ~ $120k

That hits around $235k post-tax. I think that's a nice lifestyle. Eating out less would allow for different "fun" activities.

Oh, I guess I forgot savings. Doh! I'd aim for savings about 10% annual pre-tax income for a household bringing in $400k+ pre-tax. I'm not sure how much of the mortgage principal payments I'd count towards that amount.
Presumably the probability density function, https://en.wikipedia.org/wiki/Probability_density_function
Knowing the price of textbooks it mostly seems like the thievy thing to do.
I agree with most points, except for the urbanization part. I don't know if you refer specifically to the US or a general human behavior. But in Asia, children still go home by themselves, play by themselves and stay at home by themselves. The cities in Asia are much more dense than in the US.
I like the Berlin culture very much. But here in the south is simply more money...
They've explored that route - and at least in my case, I so almost very nearly accepted their offer.
My feelings are opposite. LuaJIT is here and now, and I won't wait for yet another community-driven python-or-rubylike that will [never] become its weak competitor.

Lua 5.1 itself is Scheme with regular syntax traded for macros, and one doesn't simply drop another language in for replacement.
Great idea, but how about 95c cost
Are you referring to something like this?
http://blog.patshead.com/2013/09/generating-new-more-secure-...
I think I would if I ever witnessed it. I haven't, so I don't know, but I probably would walk up to them and ask them if they're serious or what their problem is.
Why not? Granted the passphrase are in one place but as long as your password store doesn't get compromised managing to brute force a key's password then only gives you access to the machine(s) that one key is accepted on.

Also, the keys don't have to reside on the same device the password store is on. If you have one key per client device for example.
> they handle packages better than our local carriers DHL

God DHL is such an utter shit-show, it's amazing.

> for the salary they are willing to pay

Yeah that tends to be a big issue, there isn't any positive incentive to care, and the "production" incentives (number of packages through) generally go the other way, wasting time treating packages carefully is a good way to not meet quota and get shit-canned. And let's not kid ourselves, consumers aren't generally willing to pay for expensive careful shipping either.
> I gathered a fairly large set of data on the HSV and RGB values of each colored sticker in different lighting situations.

Wouldn't LAB have been a much better and easier choice?
Whether it is reasonable to believe something does not depend on whether it is true (because you can't know that), but on whether it is the currently best-known explanation of the available evidence.

Quacks aren't stupid because what they believe isn't true, but because they believe it without sufficient evidence, or, often enough, despite evidence to the contrary.
I recall seeing a list of telemetry domains, and it's quite different.

This is a list of user-facing sites.
These aren't the telemetry domains.
Girls' Life vs. Boys' Life? Magazine Cover Sparks Uproar
Insurance, and inflation eat into that return. So, no it's not good ROI as a 30 year treasury bond from 1987 beats it let alone the stock market.

The real difference is often positive vs negative investment returns. Most sports stars lose more money from poor investments than they do spending.
How would that solve anything? He would have to pay crazy Google CDN fees now:

https://cloud.google.com/cdn/pricing

At 650 Gbps (81.25 GB/s) he's looking at $1.625/sec ($5850/hr) in cache egress fees alone.

I would go CloudFlare, which is flat rate.
A lot of rare things have names.
Startup opportunity: bike helmets with wigs on top.
I love Cython, its extremely fast... Has someone experience about the stuff the guys at magic.io are building. They seem to have developed a really fast implementation of asyncio event loop on top of libuv...
Because the gorilla had no choice, he was a prisoner put there for the amusement of tourists.
Fantastic.

Now I hope that some car manufacturers would introduce new models that look like a TV thereby resulting in fewer accidents and lost lives.
I think templates get a bad reputation because in practice many uses of templates are not appropriate.

Too many clever people saw 3 repetitions of a pattern and decided to show case every template trick to create a "generic library" that is compile-time optimized, usually to solve a problem that doesn't exist.

Multiply that many times through the course of a project and you end up with code that seems to try to maximizes job security.
An attempt to do something similar with netfilter/Linux: https://github.com/fredburger/xt_sslpin

Recent fork: https://github.com/Enteee/xt_sslpin

Someone's blog post about it: https://duckpond.ch/networking/security/2016/09/09/xt_sslpin...

/r/netsec discussion: https://www.reddit.com/r/netsec/comments/52me9w/xt_sslpin_ma...

I like the idea.
Maybe Microsoft are trying to foil m.i.t.m. attacks against their infrastructure, by reporting back certificate errors for those domains. A hacker who is developing an attack against Windows Update will need to implement a mock version of the service, redirect dns, and create self-signed certs for those domains. I think Microsoft are interested in people/organizations doing that.

Of course, this is not foolproof, and documenting the feature will just alert people they need to mock telemetry and this pinning feature first.
https://github.com/philipWendland/IsoApplet + some blank java cards + card reader. Something about Yubico rubs me the wrong way.
While a common agreement on how this should be done would be the best solution, it should be enough to have at least some option to setup such tunnels through an API. Router manufactures could develop an App to make that setup easier then.

Although this wont be practical for any device that is not a phone or a (desktop) computer.
No.

There's everything simple about Java. The semantics of Java are actually pretty simple, at least compared to C++. What's complicated are the monstrosities people build with Java, but those aren't inherent in the language.

Saying that Java is complicated because EE exists is like saying that C is complicated because Linux exists: Complexity can be built atop simplicity. And for some reason, Java is a complexity magnet.
If progressivism is at fault, why aren't we seeing this problem in countries that are far more progressive?
Runtime. With hardware.

They underestimated how difficult it would be to produce competitive execution scheduling at compile-time in software.
Wow, I felt the opposite about Berlin's music scene. (I guess we have differing tastes?) I'd fly across from Australia because Berlin had a goth/rock/metal nightclub with 5 floors that ran multiple nights every week, and in my hometown we were lucky to get a 'club' organized in a bar once a month. (I'll really miss K17.) I also liked Last Cathedral, not much of a club but a great place to relax with a drink & some Rammstein.

There was an excellent jazz bar that opened just off Kurfürstendamm, open every night of the week, and not only was the music excellent, but the bartenders were brilliant and cared about their whiskey. I wish we had a jazz bar like that in my hometown.

And while it's cheesy mainstream pop/rock, I loved seeing Unheilig and Bollmer perform live in Berlin, something I'd never see in Australia. (Totally worth the airfare.) An acquaintance of mine even moved from Australia to Berlin to build his recording studio there.

I'm really sorry you didn't find what you were looking for in Berlin :(
Good advise. This happenned to me. By luck I had another account I could use to recover. I wish I could disable that feature. I use config now but the default should not be to try every key in ssh directory.
Colored output reminds me of httpie: https://httpie.org/

The timings are a nice addition, although I am not sure if there is much use for it.
Rarity of Tulsa Shooting: Female Officers Are Almost Never Involved
The most needlessly sexist thing I'll read today.
Looks like a post from 2013, it should have "(2013)" appended to its HN submission title.
Bikes don't have airbags, crumple zones, and seatbelts already in place. Helmets are likely to move the needle a lot more there than in a car.
Uvloop – Ultra fast implementation of asyncio event loop on top of libuv
Some people I know occasionally call this natural selection. If you kid can stay alive/safe in safe conditions ...
> But how many of you would step up to slap down those morons who berate parents for leaving their kids in the car for 30 seconds?

The morons in question are generally litigation-happy brown-nosing assholes, so that's a good way to get charged with assault and battery.
Most important is - keep it safe

Passphrase is strongly advised
The details of shipping are quite interesting. Martin Guitars (a well know brand) removes absolutely every reference to their brand or the fact that they are guitars or musical instruments in the external packaging, while keeping an internal box with their logo, etc... a box within a box

They started doing so after having issues with "disappearing" guitars in transit (though probably at the moment with all the new tracking systems this is more complicated nowadays)

Their packaging is also quite protective, as you can imagine with a musical instrument...
High Hitler: how Nazi drug abuse steered the course of history
For now DNS information reflect the former address and name servers for most people:

$ dig krebsonsecurity.com +short
127.0.0.1

$ dig ns krebsonsecurity.com +short
ns2.prolexic.net.
ns1.prolexic.net.

127.0.0.1 points to localhost, which is your local machine.

However if you query the Whois, you'll see that the site changed its name servers from Prolexic's to Google's ones today:

$ whois krebsonsecurity.com | grep "Name Server"
Name Server: NS-CLOUD-D1.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-D2.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-D3.GOOGLEDOMAINS.COM
Name Server: NS-CLOUD-D4.GOOGLEDOMAINS.COM

And indeed if we query those directly:

$ dig krebsonsecurity.com @ns-cloud-d1.googledomains.com +short
130.211.45.45

Such name servers change can take up to 72h to propagate. Meanwhile, you can edit your /etc/hosts file (on GNU/Linux) to hardcode the IP of krebsonsecurity.com:

# echo "130.211.45.45 krebsonsecurity.com" >> /etc/hosts

(must run as root)

Now browse to krebsonsecurity.com et voilà!
I can confirm, using it for many years (already can't remember exact moment we went to lj).
Interpreter part 'just works'.

Also can't understand all drama about low support. We have a rocket with two modes: turboreactive, which just works, and sub-lightspeed mode where, well, strange things may happen. All those complaints about debugging of relativity shadow the fact that all other dynamic languages are conventional single-mode subsonic aircrafts.
> Then assume I'm talking about photographing every building and putting a list of that online. Also illegal.

How is that illegal? That's called a map.
Looks very nice, thanks a lot to the authors.
Implementing generics was a good idea. However, templates were not. They should have been dismissed as a bad job years ago, and replaced by a better metaprogramming facility with less complexity, if at all possible (given the complexity of C++, it may not be). Kind of like what Rust did, by pretty much just stealing syntax-rules wholesale from Scheme.
In his podcast episode with Tim Ferris he cites again Influence - by Robert B. Cialdini PhD
> - How much less secure is it to not use a passphrase on a key?

This is a question of layers. If you don't have a passphrase on your key, what stops someone from gaining access to it? Just your account password? If they steal your device, is there some form of storage encryption involved?

> - Should you use a different key per user account, per server, or per use-case (i.e. personal or work)?

I have different keys for different purposes per client device. This is mostly because sometimes I need to login to places that are ancient enough I need to use a weaker key than I would like to use in other places or vice-versa, there's places I can only login with ed25519 keys.

Though having different keys per purpose isn't necessary it allows me to keep certain identities separate. I have a different one for GitHub for example, mainly because GitHub exposes my public key and therefor allows for clever tricks like tying the key to an established identity should I use that key to authenticate in other places.

I would also recommend configuring SSH so that it doesn't send over any/all keys by default. Take a look at the IdentitiesOnly option in ssh_config.
Can confirm..in my trips to Japan, Korea, Hong Kong, China...Kids take mass transportation by themselves to and from school. Hoards of kids play at the park with few adult supervision.

Up to elementary school (1994) I would walk to the park with some friends after school and play or go to the library (next to the park) for 2.5 hours till my mom picked me up. It's where a lot of kids went.

Generally if there is only one or two kid left at the park, a parent would stay after to ensure everyone is picked up.

My middle school was in a different part of the city so not sure how much longer I would have continued that.