skysight-inc/HackerNews huggingface dataset:
I have talked to a number of current and former Weebly employees trying to convince them to use things like hardware token based 2FA, hardened servers, hardened workstations, and strong end to end encrypted password management that can't be trivially decrypted from a private key stolen from memory. I had such things written off as being too paranoid when they are too easy -not- to set up.

I was not at all shocked by this headline.

I don't want to just single out Weebly here as I discuss these sorts of things with people at different companies all over the bay out of personal interest and anything harder than using something like lastpass to reach production systems is considered too much work. Honestly Google and Facebook are the only large companies I have seen deploy fairly decent security practices out of the dozens I have exposure to. I credit this to the fact the employ teams people who have the specific job of continually auditing and enforcing all available security tools on their systems and fostering a culture that security is everyone's job.

You will pay for security either way. Either up front paying teams of capable people, or in lost customer trust after the fact.

Security apathy in the valley is a cancer impacting companies of all sizes. Sure you can't make anything perfectly secure, but you can at least force your attacker to burn a 0day. Don't make it as easy as spoofing an email and getting an employee to click a malicious link.

If you have any sort if privileged access to PII data of your customers and are not even doing basics like using hardware tokens to gate your server and db access you are one keykogger or XSS away from a serious breach. If you know how to set such things up and still don't do it, you are additionally a terrible person.

At the very least the data required to readily plaintext the passwords is not public in this case which is a lot better off than companies using only simple hashing like md5. Some credit is due here for sure, but I can't help but strongly suspect the issues here and in now countless other orgs are a result of people having access to PII that don't really care about security or respect the privacy of the user data they are responsible for.
Vuejs 2.0 does server side rendering, afaik.
It might be that productivity and maintainability of "more polished" and "simpler" beats "new concept".

It beats angular, because it is both more polished and simpler.

It beats React, at least in short term, because it is both simpler and you don't have to learn new concepts.

People betting on react are hoping that after they internalize those new concepts, it would make it simpler/more maintainable for them in the long run.
Okay, there was an attempt made to get the .com redirected?
Samsung fired up over GTA mod that turns Note 7 into a bomb
I'm using that stack for two fairly large projects and loving it... I use the ember-django-adapter to translate data on the client side (previously had used drf json-api).. so far it's not too much hassle to build the ember models as needed but I see what you're saying..
I bought an Aeron from the Arthur Andersen bankruptcy auction, and kept it for about a decade until I moved into an RV and didn't have room for it. I loved it, and miss it every time I have a twinge of back pain because of sitting too long on the sofa or at the dinette. I have frequently considered getting a bigger RV just so I'd have room for a new Aeron. I'm sure there are other great chairs, but the Aeron was the first great chair I ever owned (I'd gone through a half dozen or so cheapo office chairs before getting the Aeron).

In short, a chair is one of those things that it is well worth spending some money on. The nice thing about Aerons after so long on the market is how common they are on the used market now.
I learned an incredible amount from this series. Pretty much every Civ, tech, religion, civic, or unit with a special name ("Hoplite") is a story in itself worth reading about. Not just the civilopedia, which is a good start.

I may have spent more time playing this game than reading actual history books.
It currently does.
@vijayp Please retitle your post to add "In North America, anyone can take anyone's phone number". BTW arent any of hackernews readers worried?
Making Billions with One Belief: The Markets Can’t Be Beat
That explains why lots of libraries get written, but not why they get used.
> But I'm not in the (very large) faction that believes surveillance to be intrinsically evil.

I don't think anybody on HN had that impression.

> I personally feel fortunate to have made it out of the 1970s without disintegrating in a nuclear barrage. That threat is not gone; it is far more realistic than evil AI.

So, essentially you're scared and that's why you are ok with surveillance. What I don't get is why you feel that all this surveillance is helping to keep you safe from nuclear barrage?

Personally I'm against mass surveillance of any kind, it is against our collective human rights (which does not stop at the border of the US or any other country), also I'm by extension against any kind of surveillance of the private individuals of any other country by intelligence operatives of my country.

Finally, 'Europeans' and 'Americans' are not entities that you can compare directly, Europeans are typically the citizens of some country and those countries have very different capabilities when it comes to surveillance and usually a very different role on the world stage. You can't compare the intelligence services of say Greece, Germany, Finland, the UK and Slovenia with respect to their capability and you really can't compare their role in Europe as an entity and in the world at large. States are not countries, the USA is a continent sized country with an extremely large federal budget when it comes to things like mass surveillance, military (aka 'defense', but it hasn't been used for that purpose in ages) and so on.

Finally, the reason that you'll find a lot of Europeans taking issue with any kind of spying on allies (also by their own intelligence services, which are most likely just as unhinged as the US ones) is that it isn't all that long ago that there was a large chunk of what is now the EU under the boot of an army of occupation, and that this was kept that way to a large extent by mass surveillance of the citizenry.

I sincerely hope you'll never be given a reason to regret your stance on being 'ok' with mass surveillance, but if you do end up regretting it don't be surprised by any lack of sympathy from my end, of all the people that I know that support this stance you are probably the only one where I will never understand why your position is the way it is.
Is there any MMO or multiplayer elements in this game?
Statistical Data Exploration Using Spark 2.0: : Five Number Summary
The WhoIS we are talking about in the pricing page is the Gandi one. It is not available for every TLDs has some registries don't support it. Majors one does.
It's... it's a robot Dali Giger.

I love living in the future.
The newer victory options, such as "cultural victory" always felt a little artificial to me. Did they improve that in civilization VI? Also, I watched part of the AI battle royale this week, and one of the developers commented that domination victories in such battles among AI players would be very rare. That's a pity, because IMHO this is the most fun way to win.
How to Verify the Software Is Signed with Code Signing Certificate?
I am a Java developer who used to work with JSF 2 and I enjoyed it a lot. Now I'm writing a Vue2 app and I finally feel like JS frameworks have reached a stage where I'm nearly as productive with them as I was with JSF, while requiring probably just one tenth of the server resources.

JSF basically provides you with a server side component tree.
You're right, that's why I wrote

> (one lens) iPhones

:)
Ask HN: What payment provider today for a side project?
Hello,

for a SaaS B2B side project I need a payment option. What do people use today, still Recurly?

Thanks for your opinions!
You should add tezos.com

"WHAT IS TEZOS?
Tezos is the first and only blockchain
implementation operating with decentralized
governance.

Tezos is a distributed consensus platform
with meta-consensus capability. Tezos not
only comes to consensus about state, like
BTC or ETH. It also comes to consensus about
how the protocol and the nodes should adapt
and upgrade.
Macs are cheaper to own than PCs
Don't have one; could you describe in some more detail how it works, or link to some info on the web?

edit: for now, main google results are "how to disable haptic feedback on iphone 7" -- huh?

edit 2: ok, found some basic info: http://appleinsider.com/articles/16/09/27/inside-the-iphone-...

So, from what I understand, still a buzzer, only much more precise, controllable and subtle (?). Still not clear if the Kodak's gonna be the same, or something more interesting.

edit 3: eh, based on http://www.trustedreviews.com/kodak-ektra-review, I believe it's just a buzzer in Kodak too: "There’s a little bit of haptic feedback as you rotate the dial to give it some tangibility." So, nothing to write home about, I think.
The nuance though is the direction in which the market moved. On the day, the market went from 20% for Brexit in the morning to 10% by the evening for Brexit. And this trend had been in place for about 10 days (ie Brexit losing ground). So you'd think that as an event draws closer, the prediction odds would tend towards the outcome, not diverge from it.
In fact there is no correct answer to that and it depends on your current state of knowledge and needs for your project. It also changes over time.

I would be careful to claim that with theoretical approach you will always get better understanding.
Your comment sounds like another case of "how hard could copying this multi-national juggernaut actually be??", ala https://news.ycombinator.com/item?id=12626314

Copying Uber at a small scale with a limited feature set is feasible, just like making a little boutique search engine to compete with Google is feasible. But where do you go from there? Seriously competing means you need to do better than them, and with Uber already have advantages of scale and brand, what's your angle?
See the SELinux boolean "deny_ptrace", and/or the sysctl "kernel.yama.ptrace_scope", and have at it.

It's not just for debugging, but for any tool that needs some measure of process control. Probably the next most common ptrace-caller I know is "strace".
The Cultural Heritage of Computer Software and Systems
Trump vs. Clinton, Who Is Winning  – Newsfios
For me the Gesture is a "you never go back" chair. Once I got used to the adjustable armrests, every chair I used since felt like it was limiting my movement.
This is basically the exact hypothesis of a TED talk I saw by cognitive scientist Donald Hoffman.

https://www.youtube.com/watch?v=oYp5XuGYqqY

fascinating stuff
sshd can have vulnerabilities which port-knocking can (temporarily) block.
Release of All Current (Non-Confidential) Congressional Research Service Reports
If you wanted to create a useful tool to promote yourselves you could make something for CentOS that allows a user to apply critical security updates only. yum-security doesn't seem to work on CentOS as the repos don't have the correct meta data. Currently that requires a satellite subscription.
Persian Lockscreen and why you shouldn’t filter package names
Mac & Linux ports are apparently in the works, although there doesn't appear to be any firm delivery date. It can't come soon enough.
I know the feeling, I'm unsure if to install a windows partition this afternoon to play the game or to wait and hope we get a Linux version soon-ish.
Which is mostly root. Rootless containers are still not widely deployed
What's difficult about it? Just use chocolatey.
Xe+tải+Hyundai+HD700+6,8T+Đồng+Vàng+chở+lợn,+gà
Yeah, honestly it sounds like a misspelling.
Okay, sorry for the confusion.
All the pictures I can find of Palm Treos have keyboards. Which model was it that didn't?
Ha! My telco in UK(giffgaff) does not have any phone customer support, so the only way anyone could ask for an account transfer would be through a webform....after logging in to my account. Doing which would also send a notification to my email address. Feels slightly safer now.
Personally, it's the lack of pain when getting started.

React has an unfamiliar syntax and the cognitive load to "get it" while not huge, was going to take time.

Angular seemed fine but a little verbose and a new version was coming out that diverged from Angular 1 in a way that caused more than a few headaches, apparently.

With Vue.js I read through the excellently presented guide and started building my app, instantly.

I view building an app (or app based business) as lego. Join all the pieces together and yay, you have a product. Vue's component based approach matches that perfectly.

Then you look at the small number of open issues on Github, the large number of Vue.js components available (https://github.com/vuejs/awesome-vue), the well-thought-out error messages, documentation and chrome dev extension.

That adds up to a refreshingly pain-free dev experience. As I've mentioned here before, it's so simple it feels like cheating.
Internet of Things != Smart home

I also often tend to forget that, but unlike the Smart home, where I agree with your opinion, IoT for industrial applications like remote monitoring and failure prediction of mechanical parts seems to develop pretty well.
The Power of Conditional Payments
That is certainly part of the reason, but other platforms enforce language choices and don't have the same level of churn. Two popular mobile platforms come to mind.
If this were always true, it could very easily be turned into a profitable betting strategy.
> it is fact

No, it's a hasty generalization[1] where personal experience is assumed to match other cases.

Of course Google could have simply stated the reason for the suspension clearly, if they weren't so reliably opaque in support and service management issues,

[1] https://en.wikipedia.org/wiki/Hasty_generalization
Adwords is the only Google product to have dedicated support staff… and they're working on commission. Of course they're going to haunt you until the end of the world.
I inherited an Aeron from my dad who’d bought it in the Enron bankruptcy auction. I’ve replaced the base mesh that wore through, the arm pads as the foam crumbled, and the gas lift has been replaced twice. Wouldn’t even think about buying another chair though. The availability of spare parts is key to that.
The thing with roofs is that if you get substantial snowfall in winter, practicality demands a steep roof pitch, otherwise melted snow will drip through the shingles. A high roof pitch necessary makes the roof more prominent.

From a reverse image search, the two "more roof than house" photos (both in the 8 section) seem to be from Sandy Spring, Maryland and Gaithersburg, Maryland.

In general, the author seems to think that builders should place more value on architectural merit rather than practicality, maintainability and cost. Obviously most homebuyers don't share her priorities.
I too had the same problem with the seat edge - and after a couple of hours it cut off circulation in my legs. Not something you want when you pay $1,300 for an office chair. I found the Mirra to be better.
They could lock you out of your account and require your number before letting you log in again. Any day.

Happened to me.
That is an hilarious example compared to streets in Europe. I'm interested how it would tackle this road for example: https://www.google.no/maps/@40.9956543,17.2208349,3a,75y,266...
the lack of a good standard library might have something to do with it.

I'll admit im not sure.
I played a lot of Civ I and III, but kind of stopped after that. Culture was present in III while being almost useless except as a way to prevent you from founding cities near other players.

But I personally love the idea of cultural victory. Military victories are an easy way to win, but they feel unsatisfying to me because you never develop high technology. Advancing your civilization needs to have some payoff.

A lot of games lean heavily on having you judge a "guns or butter" tradeoff, where if you don't produce enough otherwise worthless guns, someone else will come in and take all your nice stuff. I prefer to play in an all butter style, where you're competing over how well you develop yourself rather than how well you can balance an unfun military tax against fun development.
It is if he bought it under those restrictions.
Hang prints in a gallery and let's find out.
>You're right, we should put video trackers on all civilians so we can know what they're doing at all times.

Oh yes, I can see how you got that from what I wrote.
Missing on the list: http://neuralnetworksanddeeplearning.com/

Great book for learning concepts and for getting a generic overview (but goes deep enough that you can jump straight into implementation if you want). I recommend it highly.
Just pick something, internet and build a good structure on top of it. All this jquery-level bikeshedding is nice for your ad widgets and minimalistic web apps, but it won't help me replace proper GUI toolkits. And sadly, that seems to be in demand...

I'll cope with your ill-designed template language (heck, if I can cope with HTML, I can cope with anything) or your JS async abstraction du jour (promises, async await, that * crap), just give me something on the level of Tk or Swing. I feel like all we got in the last decade beyond e.g. Seaside is a bit less flicker and some more useless animations (looking at you, Material Design buttons).
> Virtual reality. There's still no killer app, and we're into the holiday shopping season. The hardware problem has been solved, and nobody cares. It's the new 3D TV.

The hardware problem is not yet solved until 8K (or even 4K) displays (and processing power for them) are widely available. The current generation uses too low-res displays for wide FOV.
There are a surprising number of users for ptrace. E.g. upstart uses it to count forks (presumably to mitigate fork bombs), as geofft has pointed out above.
Every now and then, a new app show up with the tagline „photoshop killer” or „photoshop done right” (or variation of this). Everytime I see this kind of promotion I smile and I'm pretty sure that would be a failure.

Anyhow, back to Photo Lemur: PS might be more than a photo enhancement solution, so although it might be useful (IF it works like marketed), it surely isn't a PS threat.
Show HN: Emoji Engine – A web keyboard and instant search tool for emojis
I also think there was a clearer bias towards mushroom shaped objects than O'Keef work. It made me wonder if nude men are considered more pornographic than men.
It's really a shame that Vue doesn't use standards like custom elements.
JSX is just a way to render data, so think like it's a templater, you can integrate it with any tool. React istelf is also just an advanced templater actually, it has no built-in data reactivity despite the name. In my opinion React is not needed in general and JSX is a back to the old fashion PHP coding (Facebook returns to its roots).
Unusable on mobile. In portrait, the sidebar covers everything; in landscape, it still covers half the viewport, and touch panning works but resets the position of the graph to what I assume is center or origin on every drag.

Hate to seem harsh, but I felt it worth mentioning, since it's why I'm unable to give any more substantive feedback on the project.
I'm guessing those 30 lines were for manipulating the DOM or getting the data from form elements. In Vue similarly like in Angular you don't need to write code for that, because the data is 2-way bound. You just do something like this.data = ... and you're done.
You might have had the wrong size. If the length of your body is mismatched to the chair then this can happen.
Also checkout 0 A.D. - https://play0ad.com/
The secret of successful humans -IQ/EQ/PQ/CQ/CRQ/IMQ – German
Living just miles away from one of the places with the heaviest annual snowfall in the world (Cascade mountain range in WA), I don't know if what I'd call a steep pitched roof is what you'd call a steep pitched roof.

There are other considerations to what makes a roof appear large. I'm not an architect, but as a designer I can at least point out that meaningful horizontal rhythm and the creation of positive and negative space through effective use of roof lines, dormers, and chimneys can all help make any practical roof space feel more utilized and be less eye-catching.

A good designer or architect can uphold "good taste" while accommodating real world constraints; it's one of the defining differences between those fields and fine art, and a requirement of anyone performing critique.
There are a couple of interesting infrastructure/business trends driving this across providers.

The call out of 12ct for throughput and 2ct for storage actually reflects a typical blended data environment. In short, data access frequency definitely follows the pareto principle. The vast majority of data is write only, with very little of it being accessed frequently. For those generalized storage populations the pricing actually aligns.

Related is the issue of "stalled" throughput of dense storage like HDD. 4 years ago it was 4TB spindles at 5-7,200 RPM. We're up to 10TB per spindle these days. But rotational latency is still 5-7K rpm, limiting throughput to say 20-200MB/s depending on how much you like latency and queueing. As I recall HDDs are going to be up to ~20TB per spindle over the next few years. And still 5-7K rpm. Storage keeps getting cheaper, throughput is not.

And lastly its really important that youre not paying for traffic. Youre paying for your providers network. That's their datacenters, their backbone, their leased fiber investments, their hundreds of millions in capital. It's not something as simple as "oh I can get cogent for $0.2/mbs." It's an old post, but for idea see https://news.ycombinator.com/item?id=7479030.
Can you generalize what exactly it is you like? How many small pointy roofs and different kinds of windows do you like? Is there an upper limit on how disney it can look, if we expanded the McMansion scale to 20 in photoshop?

Can you appreciate a reduced style in other things, say, the original Google.com or the first iPod?
UN Urges Greater Investment in the World's 10-Year-Old Girls
Another vote for the Leap. Just built out a new office, and while we don't have infinite amounts of money, I made sure that we got proper chairs.

Expensive artwork and overpriced lounge furniture don't improve productivity or morale. Proper work-chairs and desks, on the other hand, pay for themselves quickly.
>it's just that the brand seems tainted.

Only in the SV and startup echo-bubble. Which is some tens of thousands of people. In contrast, Herman Miller have sold million(s) of them all over the world (Wikipedia has the line "America's best-selling chair").
The open redirect on google.com has been known for a while: [1]

Google's official policy regarding open redirectors:
"Our take on this is that tooltips are not a reliable security indicator, and can be tampered with in many ways; so, we invest in technologies to detect and alert users about phishing and abuse, but we generally hold that a small number of properly monitored redirectors offers fairly clear benefits and poses very little practical risk." [2]

[1] http://seclists.org/bugtraq/2016/Apr/70

[2] https://sites.google.com/site/bughunteruniversity/nonvuln/op...
Microsoft shares at new high as cloud focus pays off
I don't think the VR hardware problem has been solved. Until there's very good inside-out tracking, I don't see this becoming a mass market technology.
It's sad that anyone should have to rely on security bugs to take ownership of their own phone...
So browser client time? Awesome! Although SF time is probably best for days of the week.
Perhaps that's closer to ClearScript (https://clearscript.codeplex.com/) in the .NET environment - although ClearScript has a broader area of application and supports multiple engines.