skysight-inc/HackerNews huggingface dataset:
Modern passports have an NFC chip in them which holds a digitally signed version of the passport data. Some of them are more sophisticated chips that are also uncloneable (but not all of them).

Even the basic form of the chip prevents the creation of entirely fictional passports, assuming the integrity of the official passport issuing infrastructure. My understanding is that modern passport fraud therefore tends to be based on stealing passports on demand from someone who looks like the client, and/or forging passports that aren't protected by the chip.
Five Hundred Meter Aperture Spherical Telescope
Or asciidiagram ( https://github.com/Twinside/asciidiagram ), clearly inspired by ditaa
Why do you say "whoever wanted them"?

>Mr. Kaminsky says he never accepted payment for forgeries, so that he could keep his motives clear and work only for causes he believed in.

Many people give money or time to a cause they believe in, why not him? In any case, it would be nice if you back up you assertion with something.
Why is that idea limited to Classical artists?
PepsiCo's Practical Application of Supply Chain Resilience Strategies
https://github.com/esurharun/kyle/blob/master/lib/kyle.rb#L1...

ret += Constants::PASSWORD_CHARS[c % Constants::PASSWORD_CHARS.length]

Looks like biased output.

Also, what is this? (From https://github.com/sceptive/Forgiva)

algorithm forgiva-iterative-hashing
Input: Value to hashed as DATA, Algorithm array AARRAY
Ouput: Hashed input data
final_value = DATA
for each character C in DATA
algorithm = AARRAY index of (C code num modulus AARRAY)
final_value = forgiva-hash(final_value, algorithm)
return final_value

Is that selection of algorithms based on the hash? Doesn’t seem to jive with

> It's developed by security professionals
Ingress filtering
Worth noting this too: https://en.wikipedia.org/wiki/Credentialism
This looks really neat but trying to understand it is doing my head in
It's possible to do that with KVM, running the untrusted guest as a user-mode program in a guest and trapping system calls into the hypervisor. The cost of a system call would be about 6000 clock cycles.
It's a little sad that people seem to forget that Sphinx Search exists. For quick full-text search implementation Sphinx is much easier than trying to spin up and understand Solr or ElasticSearch.

For a large number of sites search could be improved greatly by simple setting up Sphinx with an SQL query for slurping up data from you backend database.
Plus it's in your database, which means it is trivial to limit the search results by any JOINable criteria, i.e. permissions, roles, groups, users, organisations or anything that you have in your database.
All x86 page tables have a single bit for page tables, not just 64-bit ones.
You need a better argument than "somebody else has been working on word vectors before Google"

No shit.
Face-Searcher: Facial Recognition as a Cloud Service – ALLEVATE
I saw this earlier, iirc the certs don't get acknowledged anywhere.
Yet he also says he didn't care who he made forged documents for because everyone is the same. Those two positions are contradictory: either he was very discerning about his clients and they were not all the same, or the motives of his clients were details and he didn't pay attention to them. He claims both at once.
ISTM the educational materials firm have decided to change their strategy. They have also decided to pretend that the strategy hasn't changed, that they never intended to allow teachers to use print shops. Apparently they have a pretty low opinion of teachers.

[EDIT:] This is certainly a threat to the CC model, so I'm glad that FedEx are fighting it for now.
GitHub is really useful for issue tracking on open source projects. It's annoying to have to hunt through whatever 90's era mailing list archive website to see if someone else has had the same issue on projects that don't use it.
Scripting Your Way Outta Hell
Honestly, that would depend on whereI was pulled over and whether or not I had been speeding.

If I get pulled over out-of-state for no apparent reason, I'm probably not saying anything other than my name, handing over my ID, and waiting for a ticket. An as soon as the cop asks me to leave the vehicle or asks about my reason for being where I am, I'm refusing to answer.
I first saw Tup a few years ago as it seemed to be the preferred way to filewatch/automagically-transpire moonscript to lua.
Bit of an amateur question, but why a bunch of triangles instead of just a perfectly smooth curve?
See https://news.ycombinator.com/item?id=12619622 for extensive commentary.
How far do you take this? If I see someone in a car throw some trash at a bicyclist, and then swerve and knock the cyclist off the road...should I not give a description of the car and driver to the police?

Or suppose a child disappears on the way home from school. Police ask people along the child's normal route if they saw her that day (they are trying to narrow down where she may have been abducted). I was out mowing the lawn that afternoon and did see her walk by, and know the time to within 5 minutes. Should I not tell the police?

In prior discussions of this video on other forums, people have told me that based on it they would in fact not say anything in the above examples. If people won't tell the police these kind of things, it is going to be a lot easier to persuade people to support pervasive public surveillance.
Or pijul.

https://pijul.org/
In a perfect world, everything is generated from ASCII diagram sources: https://github.com/sigvef/sigvehtml .
We can’t know for sure. It sure seems like it is while we are looking, but how can we tell anything about what’s going elsewhen?
Possibly because then you'd need a parser for every language someone might use.

But, since you mention C#, see: https://www.semanticmerge.com
> If it is CC-BY-NC then he should be able to prevent you from adding ads in combination with his music

I would recommend anybody not to license in a CC license that includes "NC" as long it is not clearly defined what you mean by "commercial".

- Is using the music in a private YouTube video commercial (probably not)?

- Is using the music in a private YouTube video that, say, some 3D-Designer rendered for a classroom project commercial?

- Is using the music in a YouTube video that some 3D-Designer rendered for a classroom project but with the potential of showing his skills to potential employers commercial?

- Is using the music in a YouTube video that some 3D-Designer rendered for some funny private side project with the potential of showing his skills to potential employers commercial?

- Is using the music in a YouTube video that some 3D-Designer released for free to show his skills to potential employers commercial?

- Is enabling ads on such YouTube videos commercial? What if you enable ads because you had costs?

- Is using the music in an advertising video that is distributed only freely commercial (rather yes)?

- Is using the music in a commercial film commercial (clearly yes)?

If you say something is commercial if you get paid for it, what other types of compensation makes it commercial/non-commercial: YouTube clicks, Facebook likes, Bitcoins (when they had no value), attention for other (advertized) videos in your YouTube channel, awareness among potential employers?
Sounds like you're a real easy guy to work with.
I'd debugged live systems that where for side projects. One such example was a game server who I wrote a few thousand lines of code for. All with no test suite, all with no other eyes inspecting it, absolutely no documentation, and all with a usually incomplete git history.

I had about 2-4 systems talking to each other for this project (that's counting the system that I wrote that works as a plugin/module loader and all of it's plugins as 1 system).

It's a relic from my past that I'm glad I left behind. Editing plugins live, writing everything in usually the one or two days of free time I had between school engagements, and a few other tricky things that happened, this was probably one of the most funny projects I worked on.

By the end of it, I had two config file formats for pretty much everything, I opted out of using the right tool for the job most cases, and I kept having to upgrade hardware which was a pain in the ass since I didn't have any setup instructions since I made the damned thing.

Following is a list of everything that's public.

https://github.com/gravypod/StarmadeWrapper

https://github.com/gravypod/StarmadeWrapper-API

https://github.com/gravypod/StarmadeDebugging

https://github.com/gravypod/Checkers

https://github.com/gravypod/Starmade-Log-Reader

https://github.com/gravypod/StarmadeWapper-Panel

https://github.com/gravypod/StarmadeWrapper-Claim

https://github.com/gravypod/StarmadeWrapper-Warps

https://github.com/gravypod/Starmade-Map

It was quite a bit of a mess and I can definetly agree, debugging live systems, debugging distributed systems, and debugging unverified/untested/undocumented systems is crap too.

I'm pretty sure that being a doctor is the same as this except thousands of times worse. The amount of times I've messed up when working on my spaghetti plate was more then I can count and I'm pretty sure the human body is more slopily put together then my leaning tower of crap.
The best work is going to be through contacts and your network.

Upwork is competitive and rates are low.

First try your contacts/network, you might not think you have connections but I expect someone you already know either needs or knows someone needing your services. So email/call everyone you know.

While you are waiting to hear back from your network you can try going door to door to local small businesses who would benefit from your services and try to build a relationship/offer your services in person.

Sometimes it takes a while for projects to get off the ground so try to find one or price one that is 2x your rent and get 50% up front payment.

Make sure you deliver on time/quality work so you can build your reputation and build your client base.

Good luck with your freelancing and startup.
What do you mean?

This solution does not store passwords at all, if I understand it correctly.

So whining about storing them on "someone else disk" is a bit odd, don't you think?
WW WW WW HH HH YY YY ??
WW WW WW HH HH YY YY ?? ??
WW WW WW HHHHHHHHH YY YY ??
WW WW WW HH HH YYYY ??
WWWWW HH HH YY ??
WWW HH HH YY ??
Ask HN: How do you get people to use your product when you suck at networking?
TL;DR: Built a simple web app product, can't get it off the ground. Help!

To give context to this question, allow me to explain my situation.

I have been working as a freelance developer for a few years now and at times the work load gets a little difficult to handle.
That's when I hop on to websites like freelancer.com and upwork to find a few other freelancers to help me out.
The results have been really bad, bad quality developers at extreme rates cause they have have paid accounts.

Somehow, on multiple occasions I've managed to find skilled and in-budget developers on craigslist.
I presume this is because of craigslist's dead simple methodology and lack of rating systems or paid accounts.

Taking this into consideration, I built a little web app called FreelanceList.in (http://freelancelist.in/ still in beta.. or alpha-ish) thats follows the craigslist philosophy but focuses on freelancers.

Now the current situation is that I'm not able to get freelancelist.in off the ground!
I'm good at building products with a team but have no experience with branding or promotions.

The projects I work on as a freelancer usually have an active audience or a good brand value hence, I have no idea about launching this off the ground.

What do you think should be the next step ?
While you're at it, please leave a feedback too :)
Thank you!
TLS version intolerance
Wow man, sigvehtml is actually used in production!

Source: https://github.com/sigvef/arktis/blob/master/index.sigvehtml

Rendered website: http://arkt.is/
The Kākāpō species has a peculiar ambassador in the form of Sirocco[0], the individual who attempted to mate with Mark Carwardine's head.

> "He had to be raised away from other kakapo and this led to him being imprinted on humans. As an older bird, he still does not associate with other kakapo. This extends to the mating ritual of 'booming'; Sirocco booms in the presence of humans, rather than female kakapo. Sirocco is therefore seen as unlikely to be successful when it comes to breeding. However, his affinity to human beings means he has become an effective advocate for the kakapo species."

He's now New Zealand's "Official Spokesbird for Conservation". He even has his own Facebook page[1].

If you want to help save these amazing birds you can go to the Kākāpō Recovery site[2] and either donate, or adopt a Kākāpō.

[0]: https://en.wikipedia.org/wiki/Sirocco_(parrot)

[1]: https://www.facebook.com/siroccokakapo/

[2]: http://kakaporecovery.org.nz/adopt-a-kakapo/
It's absolutely not true that we don't care about KVM host vulnerabilities. KVM survived a good deal of fuzzing with only a handful of trivially fixed NULL-pointer dereference oopses found (including one which turned out to be a bug in a completely different part of the kernel) and no privilege escalations.

Most distros actually make /dev/kvm world-accessible; you are confusing that with virt-manager requiring PolicyKit authentication by default (that's because networking is better integrated if libvirtd runs as root), but for example GNOME Boxes doesn't
this is like three or four levels beyond simply 'ill-informed'
Wow. I can't believe they called it a privilege! What does that mean in their minds? I though the Bill of Rights, and therefore the 5th Amendment, were rights not a privilege. When and how did they transform a right into a privilege? It appears that it has taken less than 250 years to revert back into subjects.
Because the composer/artist has to be dead for many years for the copyright to expire (in the United states 70 years after the death; cf. https://en.wikipedia.org/w/index.php?title=List_of_countries...).
For beginners: Exposing C++ classes to C
Probably you are right, though in the case you linked the barrier was clearly insufficient. And OTOH, I have seen many cases where actually sane one-time contributors had to spend unreasonable time changing trivial patches to match the guidelines.

[RFC PATCH] cmdline: Hide "debug" from /proc/cmdline

It has come to our attention that a system running a specific user
space init program will not boot if you add "debug" to the kernel
command line.

Lol. I sometimes get disgusted by the kind of crap people merge, but it's nice that at least this one got the ridicule it deserved.
Oh, this is amazing.

I wondered how it figured out to use the elephant JPEG from the ASCII art. Well:

def educated_guess_at_image():
return 'http://pensivetoaster.com/wp-content/uploads/2013/05/elephant-banner.jpg'

(https://github.com/sigvef/sigvehtml/blob/e2cfa586f43aacbb374...)

Very xkcd 221.
"Source-viewable"
Many survivors fight for good cause a life long. I met one who said today he'd try to become a hacker.

I think it is very plausible and his underground contacts through which the later forging happened provided some trust. He would also see the amount of children he makes passports for and know their destination. He also might have forged easier to fake passports of neighboring countries, rather than EU/US ones.

The other thing is: Who needs fake passports anyways? Armies certainly don't. That leaves refugees, terrorists and corrupt people. Terrorists and corrupt people probably are organized enough to have someone among themselves to do their passports. The bit of control about who gets his passports might have been good enough for him to decide it will do more good than harm.
Ila qosol: Jacaylkii Dhoodaan
Not the American way, the Republican way. More specifically they are statists, and there are some Democrats floating about who are statists.

The state is assumed to be right, not cooperating is admission of guilt. They are
"law and order" type who believe in vindictiveness and wrath when citizens won't respect police power.
> I want people to share it, but I don't want it expoited without permission (which I'd gladly give, I just want to know by who).

The purpose of Creative Commons licenses is that people know what they are allowed to do - exactly so that they don't have to go to the tedious process of asking each artist for permission.
Saudi Arabia might export an extremist and hateful variant of their religion, but they don't advocate terror (you don't rock the boat when you're on top of the world).

Iran is probably the world's largest terror exporter (Pakistan might be worse?) and militarily expansionist. I think they even (internally) argue for their goal of controlling the muslim holy places, etc.

So Iran actively destabilizes Middle East countries. The only good thing with this is that it gave Israel and the Arab countries a common enemy.
'The Chinese Farmer'- Inspiring Story by Alan Watts
OneSite
Hi there, 2 weeks ago we launched OneSite, where we strive to provide the best free web hosting service on the market. Could you please give it a look and let us know how to improve it? :) URL: https://onesite.co/

Thanks!!!
I don't think "fake passports for rebels" would even warrant a mention on a list of "bad things that happened in Africa in the 20th century". Or the 21st century. They've already had a war that would've counted as a "World War" if it were in Europe or America. [0]

[0] https://en.wikipedia.org/wiki/Second_Congo_War
I noticed this too. I guess not everyone sees this kind of stuff?

http://i.imgur.com/wfY6e5Z.png
I guess one could train a Convolutional Neural Network to convert the ASCII art to an actual image. Something like this, but for ASCII: http://sketchy.eye.gatech.edu/
I don't see why each developer should. I'm perfectly fine with commands as they are by default.

I'm just saying that if your problem is that you need to enter multiple commands instead of one, then instead of new VCS you may as well just put a config file in your home dir.
When people say they don't like git, I lose a little faith in them as a programmer and/or engineer. This is probably due to my own biases of having worked with folks that just don't want to invest the time in learning it. That or they are afraid of branching/merging. To me this indicates intellectual laziness which isn't the kind of laziness that makes a good programmer (as is with the quote from Larry Wall and the kind of laziness he speaks of).
If this becomes pervasive, maybe there'll be some legislation that protects the population better from the police?
This is useful in a plain-text based document system, for producing nicer rendered output. Box diagrams typed up in a man page can be rendered more nicely in a HTML version.

It could also serve as part of the markup input language in a system like asciidoc. The benefit is that the source resembles the output.

In this man page, I have lots of occurrences of

<-->

http://www.nongnu.org/txr/txr-manpage.html

in verbatim code which could be turned into a nicer arrow.

Also, textual diagrams occur:

http://www.nongnu.org/txr/txr-manpage.html#N-03E5CED9

http://www.nongnu.org/txr/txr-manpage.html#N-027AA48B
SVG images with lots of small individual objects don't perform very well (processing & rendering).
git and hg are somewhere between Subversion and Darcs/Pijul. You kinda deal with individual patches (commits) but not quite as prominently as in Darcs/Pijul. It's all a compromise, and even Subversion gained merge features, leaning more into the git/hg realm. Tracking patches has huge advantages, especially in open source work, whereas it's not really needed if you just commit to master/trunk all the time and merge with a tool and not by tracking patches. Darcs and Pijul are what would be a perfect fit for the patch queue model used by kernel maintainers.
I say people haven't learnt their lesson of they're still on macs.
Very cool. The idea which I liked most, is the ability to switch between branches, even though you still have uncommitted changes. With git, I'm forced to either make an extraneous commit, just to enable branch switching, or stash all my changes into a stack which I may later forget all about. Both of the solutions above are really cumbersome and prevent easy context switching.

The only feature I noticed missing, is the ability to stash changes. I use this most often to move changes from one branch to another branch, without cluttering history with an extraneous commit. How would this work on gitless?
I've seen people recommend npm over submodules. You can give it a git repo as a package and tag/commit as the version so it's not just for JavaScript repositories and also pulls the submodule's own npm dependencies. Although I don't know if you can put it wherever you want or it will always go to the node_modules directory.
Please please please support "zoom text only".

First time in a while zooming caused a web site to have its text overlap with itself.
This post seems pretty confused to me. The idea is that you tell YouTube "I own this, people can't use it without my permission, but I'm ok with it as long as you give me a cut of the ad revenue". But with CC-licensed music you have already given people that permission.

It sounds like the author wants to give people the right to use their music freely anywhere but YouTube, which CC and YouTube understandably don't support.

Disclaimer: I work for Google, on open source software that doesn't have anything to do with YouTube.
Or we've used other DVCS systems like Mercurial or Bazaar or Bitkeeper that had sane CLIs with consistent and self-explanatory user interfaces.

Git is powerful. And also seems to have a powerfully elitist community around it, as evidenced from your comment.
Mozila hack
Maybe the point is that you do not need to store the database securely, that you can store it openly, as long as the certificate used to generate the passwords is kept secret.

But you probably want to keep the meta info of what sites you have access to secret to.

So I don't know why this is better than simply use the certificate to encrypt the database.

But maybe I did not understand how it works.
The best editor to use is the one you already use for everything else.
I work in an industry where branded terms are EXTREMELY expensive and I've spent the last year and a half looking for ways to build better heuristics on how marketing actually works. I am extremely skeptical of media agencies and all parties relating to marketing spend, even those who want to measure it in their own "scientific" manner.

From attending conferences it doesn't seem like anyone is really on the ball with attribution reporting. The best thing you can do for marketing analytics is implement rigorous and scientific experiments, which require massive buy in. If anyone wants to discuss this or work towards a solution send me an email (in profile.)
Well:

git commit -am "message".

Will add and commit. Pushing should be separate for a distributed vc.
A super powerful piece by the NYTs. Highly recommended. Done in interviews, video, animations, and shadow puppets.
Pentagon Paid for Fake ‘Al Qaeda’ Videos
Just in case anyone is interested and wants to collaborate,
This project is open sourced at https://github.com/Obsessive/FreelanceList.in
Note that your site currently doesn't work in Safari (desktop or mobile). A quick glance at the error console shows that you're using the Fetch API [1]. Polyfills are available.

Have you tried running any adverts? Ultimately, I suspect it comes down to either running a marketing campaign yourself or networking enough to find someone else who's prepared to handle that side.

[1] http://caniuse.com/#search=fetch
How to Search for and Find Anything in Slack