skysight-inc/HackerNews huggingface dataset:
"Source: I love cars and bikes and would go berserk if someone would tell me I am not allowed to drive anymore"

I get it.

I know how you feel.

My grandparents grew up on farms - and there were always rifles around. My grandfather hunted.

They never, ever talked about 'guns' for self protection, I never saw a gun outside of it's locker (unless in the field).

My grandfather was an extremely normal and nice, down to earth person.

And yet often these people are treated as pariahs. 'City people' just think 'gun owners' are crazy red-neck killers. They would ban them in a hearbeat.

I feel you may be part of the 'NRA of the future' - ie a group that will be positioned by the press and pop-culture as 'angry old men out of touch' yada yada.

Everyone that dies in a car crash - it will make headlines like the random person who got shot in an accident or whatever - even though you car-enthusists are probably the safest and most responsible people imaginable.

Anyhow - I'm not saying I support the NRA or whatever - I'm just saying I think there will be a really weird social dynamic.

But you are right - drivers are pretty crazy and would fight pretty hard!
Whatever relevant working group would be responsible for standard ratification within the IETF, much like RFCs 1459 and 2812?
The same thing has with palm oil plantations in Malaysia. It effects the air quality as far away as Singapore:

https://www.theguardian.com/sustainable-business/2015/nov/11...
No, Tesco Bank is wholly owned by Tesco; you're thinking of M&S Bank, which is a front end to HSBC.
“It’s not free trade, it’s stupid trade,” Donald Trump
has said during his presidential campaign — a slogan
that contradicts every tenet of mainstream economics, as
well as a quarter of a millennium of accumulated
economic data. [...] if you live in a one-industry town
and the main workplace has closed, you are unlikely to
agree with the professional consensus instead of your
own lived reality of loss and decline.

I'm going to be honest: When it comes to economics, I've read several popular books, and I know what consensus to parrot to sound well informed (Free trade is a net benefit! Ricardian comparative advantage!) but the truth is I don't really /understand/ any of that. Not enough to honestly claim I'm convinced by it.

I'm basically going with what the experts seem to say. If I was living in the Soviet Union I'm sure I'd be parroting the views of a different set of experts and saying completely different things with exactly the same conviction.
That still seems odd... phishing & malware attacks are going on all the time, so a targetted strike on Tesco bank users all at the same time would be a very 'restrained' attack. Phishing would take place over several days, so the attackers would be gathering account details piece by piece. Also, the first thing that banks tend to do when a large scale phishing attack has been successful is to re-issue new passwords and card numbers, yet Tesco haven't done this. So whatever avenue of attack the hackers had, Tesco must be confident that they have closed it off without needing to junk any compromised account details?
For that example the premise would then be that an organization large enough to throw away $48 million a year is incapable of seeking a sophisticated agent that will act in the interest of the organization.

Maybe the problem is that such an agent doesn't exist. But if such deals are really commonplace it's a pretty sweet opportunity for there to be no one taking advantage of it.
What Is the Future of Ethereum: Good, Bad or Ugly?
Fellow pass user here.

freepass [0] seems like it could be a potential candidate, somewhere between pass and LessPass, but I haven't tried it out for myself yet.

[0]: https://github.com/myfreeweb/freepass
Not on RBS platform anymore, they moved their current accounts off that to fiserv:

http://www.computerweekly.com/news/2240222351/Tesco-Bank-lau...
Perl is a hacker's language (not unlike e.g. Common Lisp). It brings maximum power to the fingertips of an individual. When you are alone, developing with Perl is a blissful joy of pure godlike power over your domain. Perl6 amplifies this feeling to eleven and beyond: there's almost nothing you couldn't do with a few lines of code.

The popularity of Perl coincides with the golden age of personal computing (and hackers culture). PCs got powerful enough that individuals could do the same things that were only available to big corporations and sometimes universities. Perl helped to harness this power, becoming the proverbial "Internet duct tape" to connect things (in the world of UNIX with emphasis on text protocols, the most powerful language for text processing won).

When lone hackers were no longer enough to satisfy the demand, the world had moved on to create _software industry_, and Perl's advantages (all power to the individual) started to be harmful. Different individuals have different preferences, and when you have to work in the team, reconciling your differences with your colleagues creates way too much friction. To facilitate teamwork, more uniform languages were deemed necessary, where understanding other people's code became a priority. Even open source software moves faster when anybody can read and participate in your code without fighting over style. This attitude was firstly exemplified with Java; now, we have Golang, which is a king of all languages optimized for team development. To facilitate this, the expression power available for individual developers had to be cut short.

As a consultant supporting my own code, I still use Perl, and if you are working alone, it's your fine bet. But as 99.9% of people work in teams, Perl6 is not the best choice for them.
How is this better/worse than https://addons.mozilla.org/en-US/firefox/addon/easy-password... which claims that "No web servers involved, the data never leaves your computer."?
You can probably also just pass -fno-strict-aliasing to gcc.
From the Article "I've not heard of an attack of this nature and scale on a UK bank where it appears that the bank's central system is the target"

Sounds like it's a breach from within (or at least not though compromised accounts), this would explain the lack of concern from Tesco about resting security (much to the chagrin of customers, i'm sure) and the huge numbers of affected accounts.
I interpreted "online payments" to mean payments to accounts via online banking, rather than credit/debit card payments online.

If it was a card details leak, I'd have expected cards to be cancelled, and not allowing them to continue to be used.
That email only involves Linus Torvalds and Chase Venters. I don't see anything about stallman and what he is supposed to be right about.
Stopping and starting a car may not require physical effort but it does burn more fuel, gives you a less even ride, and makes traffic flow less smoothly. When I'm driving I try quite hard to avoid having to stop at lights. (By slowing gradually as I approach them, not by going through them when red.) I warmly commend this policy to other drivers.
That hasn't been released, but I think it's interesting that the original press releases frames this as a matter of fraud rather than a breach.

I personally doubt this will be revealed to be a software security issue.
The Law of Demeter: How I Stopped Seeing Spots
Show HN: A chat+cards platform for teams that syncs with PouchDB over WebRTC
Meme warfare: how the power of mass replication has poisoned the US election
Excellent discussion, and your points are all very much spot-on. I just wanted to add this re: Windows and fibers/threads because it is very much relevant to the conversation:

https://blogs.msdn.microsoft.com/larryosterman/2005/01/05/wh...
I'm teaching a sophomore level web apps course in the spring semester. I'm torn between doing what I think will help them land an internship this summer or land a real job and on the other hand, teaching them something like Elm which makes much more sense to me. Anybody willing to weigh in on these? It would be greatly appreciated.
1. Would a course focussing on just the front end using HTML + CSS + JS + React be reasonable?
2. Is it reasonable to deal only with the front end?
3. If the answer to 2. is no, then what is most reasonable and likely to endure technology for the back end?
i can say for sure the few times ive had issues transferring money overseas tesco customer services claim to be checking the status on an hsbc system
Scaling a Startup: A Practical Report
I worked for a while with someone who grew up in soviet Poland. When the store had pickles and mustard and nothing else, they got the idea that maybe something was up.
Learning to Rank Sketchfab Models with LightFM
I highly recommend Economics In One Lesson by Henry Hazlitt.

Comprehensive economics 101 in simple language, probably middle-school level.
This is pretty typical for shy poeple.

"Just calling" means that you have to receive the reaction immediately, and moreover, that you have to react on that immediately, too. This is much more intimidating than waiting for a response, reading it whenever you feel like, and having enough time to think about your answer.

Even on chat or instant messaging, it is generally accepted that it may take half a minute, or even 5 minutes, to take for a reply. So even these so-called "real-time" services are about two orders of magnitude less "real-time" than a phone call (0.5-2.0 seconds versus 30-300 seconds).

Also, with text you can get help from trusted people that help you write answers, which is not so simple on a phone call.
Could use higher voltages instead.
Baby Boomers May Face Financial Instability in Retirement
definitely making card payments online is currently blocked. a text message ive received says SO and debit orders will continue as normal
You could encrypt the password store folder with another gpg container. That would be your master password.
Maybe their forex is via Hsbc?
Maybe you can put the whole .pass directory inside an encfs directory.

Encryption all the way down.
Updated. To my mind still relevant.
If I Reacted to Other People the Way They React to Me Being a Mathematician
Lastpass is free now for mobile devices. Enjoy!
random article about AI.
Janet Reno, First Woman to Serve as U.S. Attorney General, Dies at 78
That's a real problem which I forgot about. Sorry.
I've worked with a PCB layout designer, and one comment he made is that it's far easier to do a 'by eye' check of, firstly, the virtual layout in CAD, and then the assembled board when things are arranged neatly or at 'nice angles'. Having done some PCB layout myself - mostly through-hole, although with a large number of parts - I never found circumstances in which odd angles made it easier to do the layout. However, I concede it might be for reasons of short traces or making traces certain lengths if required for timing reasons.
> I would call it "bad image" instead of "bad reputation", because when you look into it, a lot of very stable and maintainable software is written in Perl.

Fair enough. I've written a lot of Perl code - some I'm still proud of! :)
I really dislike the copy/marketing of this tool. OK, so it doesn't sync? How does it work? reads whole front page and all features.
No sync, but access anywhere? How does it work?? *clicks the "How it works" link and reads another 5 paragraphs of "This is great. It's so simple. It works really really well. You can phone people and they'll tell you how well LessPass works". Finally, after clicking on the link and scrolling past a bullet list and stylised quotation, we get

"The trick is to compute passwords rather than generate and store random passwords.

LessPass generates unique passwords for websites, email accounts, or anything else based on a master password and information you know."

"Next-gen", "Anywhere, anytime", "Manage directly from your browser". These are all super cliched, really cheap phrases that I really dislike. The front page is full of them. If you're marketing a luxury yacht trip to people with more money than sense, then sure you're probably going to get good results by writing like this. But the folk reading about this are going to be pretty technical and I'm sure everyone would appreciate to see something like "We provide a function that generates a memorable password from the site name and your master password" on the front page, above the fold.

In terms of entropy, you may as well come up with your own function. Security through obscurity is bad (no one knows the function you use to generate site specific passwords) but it's better than security through less obscurity (use a public function that a bunch of other people are using).

You can't get free entropy. If you care about your passwords not being broken when a database of hashes is dumped, you need to use a long, securely generated, random password. Sure, this is better than using the same password everywhere, but it's not really an alternative to something that uses proven cryptography to generate secure unique passwords. Passwords generated using this are only as good as your master password, with some obscurity thrown in.
In C++11 there is a standard for this : http://en.cppreference.com/w/cpp/language/alignas
Lastpass is free now for mobile devices! If that is what you were willing to pay for!

It syncs seamlessly across all desktop browsers, iOS and Android devices without any issues.
Whoever downvotes this please give an explanation and a reasoning for why and how electron applications can beat, for example, QT apps.
Woman in Dress Found on Mars by Curiosity
We had this conversation when it was md5 vs sha2 and concluded sha2 was good enough. What changed?
Depends on where you're storing it. If you're using a sensible RDMS like Postgres, there's a 'Timestamp with Time Zone' data type which will internally store the time as UTC but keep track of the offset for you.
Statistically too dangerous.

Humans do immensely dangerous things for fun all the time[1]. That isn't going to stop. People will continue to drive on private roads pretty much forever.

[1] For example https://www.youtube.com/watch?v=-C_jPcUkVrM
Very nice. Would love support for German!
I'm not sure if i understand you right or if you don't see my point.

You think that LESS FEAR will be GOOD/will make our live easier (because we can focus on other thinks)?

Or are you more concerned about the "monetary/financial" aspect? Like more fear = more buying things to "get rid of fear" = more work for getting rid of fear that could be used more wisely?

To repeat my point of view:

More "rational" fear would be beneficial to you, your surrounding and in conclusion to the whole world.
China Adopts Cybersecurity Law Despite Foreign Opposition
Babel-plugin-shield – A babel plugin to shield code against undefined properties
Herman Miller Aeron, Steelcase Leap
Some of it is money. Installiing California emission equipment to all vehicles would cut pollution a lot... But if it raised vehicle cost by 50%, no one could afford it. I think we know how to fix it, but no one wants to start taking cars away from people or raising the prices 50%.
I've used it. It's a reasonable solution for a subset of the things you'd want to use a Debian chroot for.
Yoposts: Eight Football Fans Died in Bar Shooting
it seems to be money transferred from accounts (£600 mentioned as an amount). But to set up 20,000 new transfers, and extract money from them, without 2FA, and without tripping any number of alarms is a terrible failure in security.

This will massively affect their provider fiserv, their internal team will almost certainly have to be replaced and I would be surprised if they don't throw their hands up and go back to being grocers. Retail banking is wafer thin margins.

Edit: I cannot think of / find a similar case - this is amoungst the first if not the first mass account attack I know of.

To do this there is a trace. Potentially an insider at Tesco to turn off the 2FA etc, or possibly they have penetrated the systems totally. Not sure which is worse.

Also there must be some mule accounts - right now all the "Big Four" are scouring their customers accounts for unusual deposits. We will hopefully see where it went soon - presumably to several people who believed a Nigerian Prince was sending them cash, and then sent it into a wash of Russian accounts.

But I would be amazed if it all gets out the country. It would trip so many alarms. Of course if it did not trip alarms

Some predictions - Gov will enforce GPG level encryption for every bank interaction - 2FA with Time based OTP for example. This will force a huge upgrade in retail banking - and will be good for the economy.

And Apple IPhone is the perfect host for making time based two factor auth that smooth. Good for apple. Android might just see the whole UK market as large enough to get its act together.
having a solid IDEA/CLion plugin would be great.
RMS is the author of the GPL, so the mere existance of a GPLv3 means that he wasn't happy with v2. It's also a basic assmption that RMS thinks projects using GNU licensing should use GPLv3 when applicable.

See for instance https://en.wikipedia.org/wiki/GNU_General_Public_License#Ver....
In fact my lawn mower has 2 models... California and everywhere else.
Security Firm Shows How to Hack a US Voting Machine
7 Κοινοί λόγοι που πέσατε στη Google και πως να ανακάμψετε
No, the rdd interface has methods on it that directly relate to how data is processed.
And would you pick it up if it cost you $18 and been there for a week?

The meme of funny stories about economics professor wears a bit thin really. Its a harder degree than many people who create these stories have.

If these $20 bills pay off then do it for real not on top of another risky project of picking up a $50 bill for $45
Yoposts: Earthquake Hit the U.S. State of Oklahoma
Nope, that was wat Sony took for all kinds of rescue stuff. After that we were still looking at Windows and various Adobe Software plus scratch (working with external drives for storage, naturally).
I completely agree with your overall point, but in the OCM anecdote there was a near criminal level of incompetence on OCMs side as well. Their business became a currency swap business, literally they were not profitable without it, yet they did not know what a swap was.
Yes it doesn't look for fiserv either. There have been no password resets yet, so I doubt it's a mass user endpoint issue.
Doing things that are dangerous to yourself is fine. The problem with driving is that it's dangerous to your surroundings. I'm all for a future where driving on public roads is banned and driving on closed courses and race tracks is the worlds new favorite past time.
Improve Your Company Blog with These 7 Powerful Tips
Ask HN: Does starting early have positive impact on a tech team's productivity?
Hey,
I work at a fairly large startup and my management thinks tech team should start at 8.00 am in the morning. Every engineer in my team does not want to start at 8.00 am, although they have no problem working late.

1) How do make them understand they should measure the output and not the number of hours. 2) What kind of metrics/framework can I provide them to show the productivity of my team?

Thanks
State for password managers is almost always stored encrypted, i.e. in a form useless to the attacker.
Scientists at De Beers Fight the Growing Threat of Man-Made Diamonds
If it's open source, how can you hope you achieve security through obscurity?
Please blog and document the process. I'd love to read it.
Scaling knowledge at airbnb
I am not so good at coding. I'm a copywriter. I should write better than you. :)
The garden is their whole business so for the exact same reason you would not risk it.
Tweets point out that Trump is going to win
> I'm not remotely a conspiracy theorist ...
These things are becoming reality... so you are a "realist" now, and not a theorist...
> Your disappointments are not reflective of the Japanese industry. I can criticise Japan a lot, but honestly your complaints are only about Sony.

Sure, but I was still expecting to get a Sony

I love Japanese stuff in a lot of other categories. Can't beat Korg or Roland in terms of price and quality, even the cheapest stuff.
I think one of the more insidious problems with many of these unicorn startups is that there is no longer the fiduciary freedom to make "modest" plays like becoming a protocol.

A company with $1B in venture funding isn't allowed to aspire to being a $500M business. It must grow as big as the sun, or die trying.
User Forks FileZilla FTP Client After Getting Hacked
I think I can sympathise with people being distrustful of economics and finance (I say this as someone who works in the industry). When I read what economists have to say about free trade, for example, it makes me incredibly skeptical.

I admit I'm not up to date with the latest graduate-level economic models. But I have read about Ricardian comparative advantage. When I looked into the assumptions behind that model, I realised they were utter nonsense. In turn, that made me reluctant to believe anything else that economists wrote on the subject.

The same thing happened with banking. The standard macro model where banks lend out central bank reserves with the overall constraint on credit creation being 1/(reserve requirement) is kinda-sorta what happens, but the details are all wrong. As far as I can tell, economists don't want to change the details of this story because then they have to re-write another part of their theory (IS/LM), and that forms the keystone of a lot of standard theory.

To summarise, I haven't seen much from academic economics that inspires confidence. So why should I trust them?
> And will probably be less efficient.

they're not. gevent (and threads) are way faster than explicit asyncio, as all of asyncio's keywords / yields each have their own overhead. Here's my benches (disclaimer: for the "yield from" version of asyncio). http://techspot.zzzeek.org/2015/02/15/asynchronous-python-an...
You could feature extraction per target home. I wonder if you could use neighbors' information to have better posterior beliefs about the home in question.. Like, suppose Alice lives in the house you're trying to decide, and Bob, Cathy, ... Yvonne, and Zara are all benign 'adversaries' that are willing to help you learn about Alice's occupancy. Is there some kind of utility/wiring/plumbing/logical singleton shared across the whole neighborhood, which could be used for deductive purposes.
> seamlessly handle any alignment with perhaps an extra cycle

I'm not up to date on the latest mitigation strategies, but the hairball of cache implications caused by unaligned access make me suspicious of that claim. If you (or your compiler) signal that you want performance by using vector instructions, I think it's completely fair for Intel to demand that you pay attention to alignment.
Helping you decide who to vote for
I agree if we're talking about product support or warranties, but if someone accepts they're not going to get support and they're going to void the warranty I don't get why the manufacturer can decide how the product is used.
I know it's dumb but for some reason the large amounts of Rails people moving to Elixir bother me. I don't want the language to be synonymous with web devs :/
I thought we were finally done with perl. I know I was overjoyed when I could finally get rid of this horrible language in favor of python.
Perl was a mistake.
Oh I see, it's US QWERTY with labelled kana, as opposed to the Japanese layout, which adds some extra keys specific to Japanese (mostly for IME use).
So, you understand why Python 3 isn't leading yet, but you don't understand why Perl 6 isn't?
I agree with most of your comment, except the last part.

In my opinion if you actually ask for help to put together a written answer you are way beyond "shyness" and would have serious problems functioning in society.
(Also, how would you ask someone else for help? I mean, that would be beyond embarrassing in itself, don't you think?).