skysight-inc/HackerNews huggingface dataset:
This seems like a good time to rant about PayPal 2FA and its poor usability.

Every time I open the PayPal app I have to wait for a text message and type a code across. That should not be necessary! PayPal should count the app as the second factor and only ask for the password. I am happy to us 2FA with Google because I only have to use it when on a new device, or once a month or so in the browser.

Second, support 2FA apps like Authy already. SMS based 2FA is both insecure and unreliable.
Beyond the skills I had in mind, but this is a cool idea - wish I had this when I was first learning about these functions.
That doesn't help in this case. I have a VeriSign 2FA dongle for PayPal and it still offers the same option of logging in with security questions.
This is not a difficult problem to solve. The ROM cannot be overwritten - hence it can be designed so that malware cannot run.

Also, jumpers are cheap. Just set the jumper to enable writes, and download the update.

Are you happy with it being unknowable which of your appliances are compromised or not? Would you pay $1 more for a disk drive with firmware in ROM? I would. If you were running a banking system, would you pay extra for code in ROM that cannot be compromised?
Ask HN: Any stockBrokers let multiple companies's be traded in a single order?
Fidelity charges me $7.95 commission per order.
And the website lets me trade only one stock symbol in an order.

So, if I want to buy 100 shares of AAPL, and 100 shares of MSFT, I have to place two orders.

Are there any stock brokers that let this transaction happen in one order, and charge me the $7.95 commission for one order.
no.

what you get then is groups trying to outdo each other trying to get bragging rights for being the largest.
As I just mentioned elsewhere on this thread, SMS isn't the problem here. I use a VeriSign dongle for PayPal 2FA but PayPal still offers the same option of using security questions instead. I was previously under the reasonable assumption that the security questions form was ar least handled correctly, but apparently not.
> We observed 10s of millions of discrete IP addresses associated with the Mirai botnet that were part of the attack. (linked article)

> ... the Mirai botnet was at about 550,000 nodes, and that approximately 10 percent were involved in the attack on Dyn (from Level 3 CISO) [0]

Something really doesn't add up there - even if it turned out 100% of infected hosts in the Mirai botnet were targeting dyn (ie: 5.5 million nodes) - that still is a fraction of the number dyn is claiming.

[0]: https://threatpost.com/mirai-fueled-iot-botnet-behind-ddos-a...
I worry that this is another example of throwing technology at a social and political problem.

That the current web is centralized has little to do with its technical design, and everything to do with economic and structural incentives that have made it that way.

It's tempting to say "start afresh", but we'll just be trading our current problems for a new set of problems IPFS introduces. It's a law of nature that problems are always conserved.

I would rather we do the hard work of fixing the web we've got, in particular the hard issue of how to re-decentralize it.
What is the additional phone verification good for if you can bypass it anyhow?

I mean - if you can chose between pw+phone and pw+pw2 ... why bring the phone into play at all?
You are absolutely correct.

The fact and reality that you are absolutely correct is a HUGE PART of the ENTIRE REASON why software startups so frequently outperform large incumbent companies with greater resources, support, investment, and time. Because while the software startup is messily, irritatingly, often horribly dealing with its people issues, it creates pods of productivity, small, coherent groups that work well together and make things happen without the need to wait until the lunch next Tuesday to gauge incumbent X's support for proposition Y before presenting proposition Y at gathering Z five weeks from now. In a successful startup, someone screams, "EUREKA!" summons one or two other minds from the team to a rickety little conference room, elaborates the idea to make sure he/she isn't missing anything obvious, and then starts working on it, possibly being finished by the end of a two-week sprint. What takes the incumbent organization MONTHS of political angling happens in these small, fluid organizations in WEEKS - or less!

I'm really quite glad your analysis is correct, because it creates massive opportunities for guys like me, who trend a bit on the abrasive side now and then, but it also discourages me as to the correct course of action to get any already-existibg institution into fighting shape. Is it potentially literally impossible under average circumstances? I worry it genuinely might be, and that creation of new institutionsay be the only answer, but that answer makes me very sad for some reason.
It would be almost useless since localhost doesn't even generate outside traffic. It will only drive up the electricity consumption and heating the device. One could run a fork bomb and temporarily brick or permanently damage the device (due to overheating) or disable networking altogether.
Buffett made most of his money in deals that were nothing like the Goldman Sachs arrangement. Very few of his big returns provided him any special advantage like that.

His biggest returns for the first 3/4 of his adult life involved him going against the market when equities were out of favor and scooping up extremely large positions in the likes of The Washington Post, GEICO, American Express, Wells Fargo and Coca Cola.

His extraordinary history of stock picking is what enabled him to begin buying entire substantial businesses in the first place. The stock picking is what accumulated the capital necessary to buy Blue Chip Stamps and See's Candies. The Buffett partnerships for example were not built around buying up entire businesses and operating them for decades to reinvest the cash flow, and yet his returns were dramatic - regularly stomping the Dow - during those years precisely because he was such a great stock picker.
This is very naive. If working in many countries and for many entities all over the world though me anything, it's that:

- people are tracked by everyone. Companies. State agencies. Other people.

- the database contains much more data than you think it does. And there are more data base than you think, also most of them are not connected to each others. But people in charge are.

- the data can be exploited in much more ways than you think it can.

- the law is broken is many more ways than you think it is. And as often as it's possible when not getting caught.

- the human in charge bypass everything they can, with every way they have, and help each others to do saw across entities.

- even the human that are not willing to do any of these are not necessarily competent enough to prevent abuses.

The only we don't suffer too much about it is:

- you can't see the many things in your life that are influenced by it because it's indirect and untold.
- the sheer mass of it make it hard for the human to handle everything so only 5% of the real potential is actually in used. Wait for the AI to step in...
- those are life threatening most of the time. But remember the table of power and freedom always turned during the history of humanity. Our current situation is NOT permanent.

Luckily most people I've met related to the data collection are not evil enough, and don't have enough greed to be a threat. Even the ones that are are usually not competent enough to become the next big brother. But the potential is here nevertheless.

TL;DR: the amount of data is huge. It can be used in scary ways. It is abused on a daily basis, but the consequences are not too insufferable yet.
How do hosting providers fit in here, if at all? E.g., if I want to host a website on IPFS, do I publish it from my own machine and then wait a healthy amount of time for the content to be absorbed by the ether, or is there some way I can encourage other nodes to pick it up without requiring end-users to actively seek out my fresh material?
To use js-ipfs, you still need to host the script somewhere. Doesn't help when the whole host doesn't respond.
The screen was on, just not private due to tempest snooping. Private strings were output using Morse flashes from HD activity LED. :)
Just to be clear, it bypasses any of their 2FA codes, not just SMS-based codes. The security questions bypass "feature" also appears on my account for which I use a VeriSign 2FA dongle.
Does that mean they are assigning random IPv6 addresses to computers on the network for each peer or connection and maintaining a mapping in memory?
Doppler's earbuds that also speaks Spanish
I think you're right, but imo it comes down to "what is easy vs what is right". I think traveling and mingling with locals in another country can give a valuable glimpse of another way to live, allowing the traveler to reflect upon their own culture.
If google didn't use idealized conditions with isolated legal jurisdictions, perfect weather, and engineers ready to intervene at a moments notice, maybe their 2 million miles would be worth talking about. All they've proven so far is that they can drive really well when they don't have to do anything even remotely difficult. I don't know about you, but personally I don't think that Billy Madison acing kindergarten can be taken as a sign of a PhD looming around the corner.
Again just no. Tardigrades are predated by each other and plenty of other animals. Just because you can survive drought and radiation doesnt mean you can mechanically survive another organism evolved to eat you hunting you down.
IPFS is a pretty nice project, but it's pretty slow at times.
I know it is cynical, but a part of it also is because it isn't worthwhile for them yet.

If large numbers of people cannot afford to say "I won't work/live there because it is too dangerous", a capitalist doesn't need to work on safety.

That's why, for example, clothes factories can get away with counteracting the "employees may steal stuff" risk by locking down windows and emergency exits or why coal mining companies can ignore all kinds of warnings of upcoming disasters, even if similar warnings have been followed by deadly 'accidents' recently and in the same company.
It seems that the role of a hosting provider could be: I pay you <amount> per month to fetch <hash> or <name> on <N> peers with bandwidth <bandwidth>.

Of course, the economics are quite different. In the normal web, you need to add more resources when a page becomes more popular. In a distributed web, more resources are a side-effect of a page becoming more popular.
Our Dyn account manager confirmed to us that issues were ongoing at 2:27pm ET.
Sounds familiar. But as I said, it just makes no impression on them most of the time so I rarely bother anymore.
> Then you add on the language barrier, and it's no wonder that they may appear unsociable

I went to poland for only a week for a foreign language meetup, and I'm very surprised at how much more introverted I became, with nobody to speak english to. It's definitely harder to socialize in a second language.
Right, ok, but then ipfs.io is already using ipfs-js itself? Because some time ago I checked and the reference impl was python, and the ipfs-js port was not complete yet.
If I were to guess this flaw was a result of monkey-patching to support 2FA that didn't quite consider different scenarios.

I've come across a few authentication bypass vulns that seem similar.
>People are nicer to you if you're a jerk
>No one respects nice people.
>Nice people don't get promoted, they don't get funding, they just don't get invited places.

That hasn't been my experience. Being a jerk can only get you so far and makes people much less inclined to help you.

Building consensus, being friendly, doing favors to build good-will works wonders.

Perhaps you and I are using different definitions of "nice" and "jerk"? Being nice doesn't mean being a doormat, nor does it mean hiding your true feelings and failing to set boundaries. Perhaps you are mistaking "jerk" for confidence? You can be very confident without being an asshole.
>take credit for all the things you've done

Might sound corny but -there is no I in team -.
Great leaders bring change by assembling great teams where everyone gets their time to shine and don't take the credit for it. Everyone wins.
‘I’ll take legal action against EVERY SINGLE ONE’ Trump pledges to sue females
Look at his video on the flipped classroom format. He really draws out the explanation. Very verbose. I'm not impressed. It could have been explained in one sentence.

And he loves to say "you know." Way too much.

And when he writes names of people on the whiteboard (later in a video on packets) he scribbles them. If it's worth writing down, it's worth writing clearly, especially for something like a person's name where it's not a dictionary word with a known spelling. This is a quality of instruction issue. To be a great teacher, you have to notice these things, care about them, and fix them.
Google. Ads or not, it's the best 'engineering' company to work for.
Thanks for your feedback.
The Python extension for VS Code (editor) supports template debugging and all forms of debugging (comparable to PyCharm) as well. It isn't meant to be a competitor to PyCharm, but a lightweight editor (i.e. a very lightweight and portable alternative).
https://marketplace.visualstudio.com/items?itemName=donjayam...
Well, as I understood IPNS is a bit limited; it only has one resource and there is only one authority that can change content, the node in this case.

It does protect against DDOS, since old content remains visible and online but if the private key is leaked or the node is malicious, it has exactly 0 protection.

Even worse, if the private key is stolen, you can't do much about it unless you have DNS setup... which brings you back to centralized.
I noticed that if it's a fire that kills many people it's only a one day news; while if it's a bomb that kills one everybody's afraid.
Does anyone here know the actual technical details of the attack? How exactly did the DDoS occur? Just a ton of bots making DNS requests over UDP??

Links to articles with tech details would be greatly appreciated.
"owns roughly half of the economy" is doing a lot of work. It's not necessarily true that the choices that active investors make average out to be roughly equivalent to the choices that passive investors make. Like, the active investors could very well own the better-performing half of the economy, because they put in the work to figure out what portion of the economy is actually worth more than the market thinks it is.
New game at Gamejolt people SPIME
Python editor with linting, Jupyter, refactoring, unittests, debugging and more
Obscurity is a valid defense layer, so long as it is not the only layer, and so long as the obscurity is not just a way of covering up garbage.
I think there are multiple issues in many contexts wrt decentralised net. You probably won't require Facebook or Twitter for many reasons. There's both a social and tech issue.

But there are some things that mirroring and content addressing would be perfect for. Replacement for the current script and files CDN for example. Package/software repos, firmware downloads, news sites, etc. Anything accessed by lots of people and not updated every second.

And there's also the location context. If you live on the west coast US, maybe it doesn't matter. But if half of the web traffic could move to ipfs, Australia for example should get an amazing speed increase by unblocking the big pipes.
DJ Khaled and Fiancee Nicole Tuck Welcomes First Child
Isn't this what CISPA was trying to provide a legal framework for?
Nice. Now we just need the game distributed DRM-free on GOG for the art assets.

https://www.gog.com/wishlist/games/diablo_i_diablo_ii_and_di...
Online lead generation: Web design tips for great UX
Is+computer+gaming+really+sport
Top QWERTY Typist: 120 wpm

Top Dvorak Typist: 140 wpm

I use QWERTY and I can definitely maintain 140WPM easily when typing something from memory or when participating in realtime chat. In short bursts, ~230WPM isn't difficult. A look at sites like TypeRacer shows that there are indeed many typists who can achieve 150-160WPM, and some occasionally exceed 200.

That said, I think typing speed is highly dependent upon the keyboard, and layout is only one of many other factors. From personal experience I have a feeling most keyboards out there are extremely suboptimal, with too much key travel and heavy actuation force. I've not be able to go above 130WPM on any laptop keyboard, for example, and even trying to achieve 100 feels extremely tiring. On the other hand, my desktop keyboard happens to have extremely light keys and shallow travel with a good bouncy "cushion" at the end, and I can type for many hours at much higher speeds without feeling tired.

Steno's biggest advantage comes from having very long words produced with a single chord, but the average word length is not so high, and most faster typists I know, as do I, already somewhat "chord" keys for common sequences (otherwise transposition errors wouldn't appear at all --- "hte" instead of "the" being one example, as those with experience will tend to hit both keys almost simultaneously for that.)
I consider it shite because I clicked the link and was met with a paywall.
Wikileaks Podesta emails summary
> Modern devices make it almost irrelevant.

A todo list on an mbp, yes. A complex app on a tablet, not so much.

> Yours is useless out of the box, to be used on a real complex app it needs...more dependencies.

All Vue requires is vue.min.js and you're set. Adding routing and clean data flow out of the box is trivial. _But_ it is easy to end up with a massively over engined babel-webpack-flow-npm-flux meme stack, given the excellent vue cli. I am, of course, guilty of that myself.
There is a drinking culture in the UK.

There is the expectation that you drink too unless you are visibly muslim.

And with some people, there is the feeling that if you aren't drinking with them then they can't trust you fully.

In my first two years here i ran into all of that.

Then i said fuck it and just started telling people honestly why i wasn't going out drinking with them 'i really don't like to drink much, it makes me really sleepy and not much fun. I don't like being around drunk people when i'm sober, and besides all that i'm not spending £120 for a hotel so i have to drive.'

After repeating that a few times most people understood. Some never did.

Those people who never did understand or accept it, i don't work with them any longer.
I've recently had issues accessing most CDNs from inside of China without a VPN, accessing directly doesn't have this issue. So maybe IPFS could help there as well.
But it can also be substantially more costly than its worth, and a lot of the cost isn't super visible (people finding it marginally harder to get their job done, being unable to learn from informed discussion on HN, &c).
Nice looking chair.
Normal static address is assigned. Whether it comes from the external range or from the link-local range doesn't really matter. You could potentially randomise the source at the exit to prevent identification of your hosts, but you don't have to.

For most practical cases just imagine you're getting a big ipv4 range. Whatever you can do with it - you can do the same with ipv6. NAT, no NAT, filtering, static or dynamic assignment.
That only works if you can assume your audience has the necessary context.

That being said, I've often thought Hacker News should have a nice crowd sourced tldr summary at the top of all the comments.
It would be effective in pissing of customers, more angry calls to support, possibly less retention.
Tell me again how finding 10B to go to Mars is impossible?

This is a satirical comment, trying to make a point: Depending on the context, the same amount of money can be considered anything from huge to tiny. It seems ridiculous to me that hundreds of billions routinely get pushed around in business mergers or military deals, where no one blinks an eye, but scraping together a tenth of that to do something actually interesting and/or useful is a major undertaking. Just goes to show how unfairly balanced this system is (regardless of which way it's balanced; some things have it easier than others).
No, this isn't true. This isn't how the US courts work. The US courts decide what is consistent with the law. Let's look at the two issues you're discussing, abortion and gay marriage. These were both decided by Supreme Court cases, Roe v. Wade and Obergefell v. Hodges, respectively.

In Roe, the court found that outlawing abortion would constitute a violation of rights already established in the Constitution, specifically the due process clause of the 14th amendment. This means that the same legal rationale for your right to abort is also the legal rationale that prevents a state from, say, passing a bill stating that "prewett is now a criminal because we say so."

In the case of Obergefell, the court decided that denying recognition for same-sex marriages from other states was a violation of equal protection, because opposite-sex marriages from other states were recognized. This is the same right that, say, allows you to marry someone of another race and then go to another state and have that marriage continue to be valid.

So no, the court is not deciding, morally, what is right and wrong. If you think that, that's probably the source of your confusion. The court is deciding that the implication of the constitution and laws as written demand this conclusion in order to be logically consistent.

You might disagree with the logical (or moral) basis of their decision. Sure.

You might say they're legislating morality. No.
> in particular the hard issue of how to re-decentralize it.

Isn't that exactly the problem ipfs is attempting to address. What kind of solution do you want and why does this one not work for you? It's easier to discard someone else's idea than it is to evaluate it's merits. I'm not sure this is the solution but it looks interesting and it appears to interoperate with the existing Web via gateways even though the author does not make this clear early on in the documentation.
Athletic Department on line 2. Coach says to put those goalposts right back where you found them, or there'll be trouble.
(IPFS dev here)

js-ipfs, the Javascript implementation of IPFS, has made a lot of progress in the past 6 months. It's still early but totally usable.

We've been working on go-ipfs and js-ipfs interop so that browser nodes can talk to "native" nodes. It's not fully ready yet but soon. This will open a lot of doors for a more advanced network and applications using IPFS.

See https://github.com/ipfs/js-ipfs.

As for your question re. ipfs.io using js-ipfs, the answers is no, it doesn't use js-ipfs implementation yet.
Didn't she say that after she was confronted about being wrong in the first place?

From your prior link:
https://glomardisclosure.com/2016/07/26/the-who-and-how-of-t...
It's interesting to me that the opposite seems to be the case (as per a variety of anecdotes including mine, anyway) that Americans tend to be one of the more overly optimistic to the faux optimism in general social settings. In my experience, social interactions in the US seem especially convoluted due to having to navigate layers of abstraction to decipher what someone means.