skysight-inc/HackerNews huggingface dataset:
I think XKCD is correct here.

If you choose four random words from a list of 2048 common words, and your attacker knows that's what you're doing, then your entropy is 4 * log_2(2048) = 44 bits. If the attacker didn't know your strategy and tried to brute force letter by letter it would be much higher - around 48log_2(26)=150 bits assuming around eight letters per word - but like you said, we should assume the attacker knows exactly what strategy we're using, so 44 bits is the better number to work with.

Since that's still more than 28 bits, a 'correct horse battery staple' type password is harder to crack then a short random string of mixed characters, even if the attacker knows exactly what your password generation strategy is.
NY (along with a few other northeast cities) is somewhat unique in that of people who have kids and then move to the suburbs nearby, which I assume is a pretty significant demographic, a lot of them end up in other states like NJ and CT. But this same cohort pretty much anywhere in, say, California or Texas would not leave the state.

Plus there are a lot of schools in NY and a lot of people go to them from far away, which doesn't count in this graphic, but then a bunch of those people move back home after school which does count.

And there's a question of how they treat people who move around multiple times, some people probably move away for a few years then come back.

Overall because of all the confounding factors, this really isn't a very interesting graph. States seem like a pretty arbitrary split when thinking about this, it would make a lot more sense to be looking at cities.
Sorry, should have said run better. There is support for latest 3.x branch, but everyone uses 2.7 as it's less bugguy.
I don't care much about code review, but it's a close enough attractor to the space of code reading that it seems to be draining attention. So let me hijack this topic and post a request for product (I'd write it myself, but priorities... adult life sucks hard).

--

I dream of a tool that facilitates code reading and exploration. It has some similar features with code review tools, namely:

- integration with version control systems

- basic semantic search/navigation

- looks clean

- not meant to be for writing code

But my dream tool also has following features I haven't seen implemented in any code review tool (or anywhere):

- annotations - not just "comments", but the ability to tag lines, to strike them out, highlight, color, scribble on them, etc. - basically anything you'd do with a printout of a code

- easy way to review history of a single file (with annotations)

- ability to easily bookmark areas / pieces of code and use those bookmarks in comments / annotations

- ability for viewing structural diagrams of the codebase

- full blown semantic search - who calls, calls who, etc.

- project-structure-oriented, not repository-history/commit-oriented

Basically, I'd love a tool not for collaboration, but for individual work - a tool that would facilitate exploring and familiarizing yourself with big codebases, as well as empower one when the time comes to do bigger refactorings.

Would be doubly useful if I could use it on a tablet, so that I could get up from in front of my computer to go and think about the changes I'm about to make (right now, I end up actually printing code if I have to refactor something very messy).
How impact investing can reach the mainstream
The alcohol and tobacco lobbyists will be dead set against the removal of prohibition. Although alcohol and other drugs tend to go together when binging, the amount of alcohol consumed will likely be less. Additionally a mild drug like Marijuana will likely be preferred by some people who would traditionally have a glass of wine or beer every day after work instead of a stronger and more dangerous drug like Alcohol.
GE Acquires Wise.io to Accelerate Machine Learning Efforts
> Python bytes are constrained to be 8-bits wide

??

Aren't all bytes 8 bits wide?
Much unjustified criticism from a ruby developer! I must say I'm surprised there aren't any swear words in the essay, well done Zed.
> I think XKCD is correct here.

> If you choose four random words from a list of 2048 common words, and your attacker knows that's what you're doing, then your entropy is 4 * log_2(2048) = 44 bits. If the attacker didn't know your strategy and tried to brute force letter by letter it would be much higher - around 48log_2(26)=150 bits assuming around eight letters per word - but like you said, we should assume the attacker knows exactly what strategy we're using, so 44 bits is the better number to work with.

> Since that's still more than 28 bits, a 'correct horse battery staple' type password is harder to crack then a short random string of mixed characters, even if the attacker knows exactly what your password generation strategy is.

Typo in the above but can't edit on my phone, the second sum should be 4 \* 8 \* log_2(26). Apologies.
I'm under impression that pulse dialing had been phased out in many countries, with tone dialing being the replacement.
No. Faithless electors nearly overturned a VP once, Richard Johnson, but the vote was tied and the Senate confirmed him anyway.
The decline of the West? Published in 1918 and followed by the best 100 years in human history?

I like the quote but the irony is just too big for me.
He better be right.

If he's wrong, the magnitude of direct and especially indirect consequences will be devastating.
I think "I would say" is meant as a stand-in for "in my opinion", which is entirely within their right.

It's easy to say you have to go a level deeper to get the truth, but at some level you have to accept the legitimacy of a source. If you don't trust Nate Silver, you can run the analysis yourself. You then have to choose whether to trust the source of the data. If you don't trust that, and you have the ability to to go the pre-aggregated data, you can go to that. Do you trust the people reporting that? At some point,it's not feasible to follow the chain of custody all the way back, so you have to make a call as to what level you are willing to go back before trusting the source.

If someone trusts the integrity and competency of Nate Silver, then they should be able to apply some level of assurance to his results based on that. If you don't trust Nate Silver's results because you doubt his integrity or competency, or even if you think it's just too important to trust to a single person, then speak to that, not to some simplistic and often impossible to satisfy ideal of determining everything yourself from pure sources.
Pretty sure there are police forces.
But how much have you really learned? And were you an end user or a system administrator? I work with people who have used UNIX for 20-30 years and still don't understand why configuration packages should automatically (re)start a service upon upgrade, stop the service before removal, and start it upon initial install of the configuration package. 30 years of using all kinds of UNIX operating systems and they haven't learned a thing beyond being an end user. And some of these people are developers. So the length of usage isn't crucial, but how much one has learned about the subject -- with an understanding of concepts and ideas behind it. I used all of those you list -- but as my breadth and usage deepened, I sought to understand the principles and ideas behind UNIX.
What is a legal latino? Is it illegal to be a particular kind of latino? Seems dehumanizing and hence dangerous to be labeling people, not actions, as "legal" or "illegal".
Not if your record is better than their's.
Nope! (TIL) http://stackoverflow.com/questions/5516044/system-where-1-by...

I think in the context of the original answer there's also the problem that char types aren't necessarily 8 bits wide, e.g. wchar etc.
Relevant xkcd: https://xkcd.com/936/
Shor has done it again!

I'm not an expert on quantum algorithms, but if you're wondering what the implications of this are, here's what I understand as a cryptographer: a lot of post-quantum cryptography (i.e., not anything we use now like RSA or ECC) relies on the hardness of the closest vector problem (given a real-valued vector, what is the closest vector in a discrete lattice to that real vector?).

This algorithm gets really close to invalidating the security assumption of this problem, which is the basis for a lot of modern post-quantum crypto (like a lot of fully homomorphic encryption schemes), so we might expect it to fall soon.

Also: this does not affect the security of symmetric schemes like AES at all, those are still safe in a quantum world.
But everybody is equal!
Lean Research
Khách sạn đà lạt giá rẻ
khách sạn đà lạt giá rẻ không có nhiều lựa chọn, đặc biệt ở phân khúc cao cấp (3 sao đến 5 sao). Các khách sạn nhỏ, giá rẻ thì nhiều hơn và không khác nhau lắm về tiện nghi và chất lượng. Đặc biệt là các khách sạn ở Đà Lạt hầu hết đều không có máy lạnh.

khách sạn đà lạt giá rẻ cũng mang vẻ đẹp mê hồn khiến bất kì du khách khó tính nào cũng phải ngẩn ngơ.
The recommendations are weak:

- "IoT Devices Should Ship with Reasonably Current Software" (Vague)

- "[Vendors] should design systems and processes to ensure
the automatic update of IoT device software, without requiring or expecting
any type of user action or even user opt-in." (Do not attempt to disconnect Big Brother.)

- "IoT devices be secured by default (e.g. password
protected) and not use common or easily guessable user names and
passwords (e.g., “admin”, “password”)." (Well, duh.)

- "When possible, devices should not be reachable via inbound connections by default." (Reasonable enough.)

- "An IoT device should be able to perform its primary
function or functions, even if it is not connected to the Internet." (Nest had some problems with this.)

- "Devices Should Continue to Function If the Cloud Back-End Fails" (They just assume there's a "cloud" back end, not a local server.)

- "Devices Should Ship with a Privacy Policy That is Easy to Find & Understand". (But it can be as intrusive as desired by the vendor.)

- IPv6 / DNSSEC. (Yes, definitely IPv6; way too many devices for IPv4.)

- "If the functionality of an IoT device can be remotely decreased by
a third party, such as by the manufacturer or IoT service provider, this possibility
should be made clear to the user at the time of purchase." (But it's OK if you tell the user.)

- "The IoT Device Industry Should Consider an Industry Cybersecurity Program" and "The IoT Supply Chain Should Play Their Part In Addressing IoT Security and
Privacy Issues" (The devil is in the details.)
Are you saying Capone didn't evade taxes?
After experience with several junior developers I plan to do the following to train the next one. First, let them solve an isolated problem in our code base. At pull request step comment excessively (this is what inevitably happens with all junior developers, the PR is so huge that GitHub chokes on it). Finally, pair them with a senior developer to solve the issues raised in the PR, rather than letting them fix them alone and engage in an endless loop of commits and comments.
No, you are wrong. The number of bits of entropy in "horsestaple..." is estimated by assuming the words where chosen at random from the 2^11=2048 most common words. 4*11=44 bits in total. In practice it is even better since a hacker would also try different kinds of passwords! So no, you do not need substitute characters.
I agree with you. I so wish that the microcomputer culture was based on Forth rather than BASIC. BASIC is a terrible language, but people do like it more than Forth for some weird reason.

(I started on ZX Spectrum in late 80s. If it had Forth, it could fit twice as much stuff into its ROM than it actually did.)

But, we live in a world where Javascript is having Haskell for a dinner. So I am not really sure why I am surprised.

(On the other hand, at least Python is a decent language, even though Lisp should have won in that particular space.)
Funny how Trump has a strategy of accusing people of doing the very thing he's busy doing. Think about all the places he does it. It's a great tactic.

I'll also add:

- I heard plenty of people in the Clinton camp who were concerned about a hacked vote before the election.

- There's more than one way a vote could be unfair. Historically, there has been very little of the kind that Republicans talk so much about (people voting twice, dead people voting, illegals voting, etc…). If there was a significant amount of it, I actually think most democrats would acknowledge it.

- Verifying the integrity of a massively important vote should be done regardless of which side wins. It doesn't have to be expensive to do it right. See also:

https://www.verifiedvoting.org

http://www.usatoday.com/story/opinion/2016/11/18/election-au...

Edited to add: The main reason I would want an auditable vote system, and a verification afterward if we didn't have that, even if I were in the Clinton camp is to help shut up all the people who would complain about her victory being illegitimate. If you can shut that kind of talk down, then the whole country can move on knowing their choice was their choice.
No, not really. Some stiles, maybe. Once you get past the newbie stage and develop some technique and related musculature it isn't all that strenuous for normal hobbyist playing. A professional who has to play for many hours, well, that's a different matter. The instrument almost doesn't matter at that level. I know both pianists and guitarists battling carpal tunnel and other repetitive motion issues.
Almost certainly an ulcer in the stomach or duodenum, especially given her medication use. If the ulcer erodes an artery, it can be catastrophic. Just not common to see it someone as young as she was. About 5-10% of "lower" GI bleeds are actually rapid upper GI bleeds. Easy to miss.
Mics have lower impedance than active speakers, which is the kind you plug into those jacks.
> the campaign has said nothing since learning of it last Thursday, should give you pause

That's not surprising at all - anything less than an outright win fails to give Hillary anything positive & that ship has sailed.

If the real goal is effective governance for 4 years and not just "winning the race", then they might weigh the possible outcomes differently from an activist.

And there would be pressure from the current Whitehouse to just "move on, folks", which is unsurprising.
Building these tools for the Chinese government would give every other government grounds to demand that Facebook provide the same.

It’s a step down a slippery slope toward worldwide total surveillance and censorship.

These tools can and will be used against activists, members of minority political parties, dissidents, business rivals, etc.

When some African dictatorship jails some journalist’s whole family without charges, the engineers at Facebook who built the surveillance software will be complicit.
Are there any remote startup accelerators / incubators?
Are there any remote startup accelerators / incubators for the roaming and remote startups?
One-Way Mars Mission Will Be World's Best Reality TV Show
From the article:

"
"[Six billion] sounds like a lot — and it is a lot — but imagine what will happen when the first people land on Mars. Literally every person on the globe will want to see it," Lansdorp said in Mars One's first press conference on Monday.

Lansdorp founded Mars One after seeing Olympic Games revenues. "Four billion dollars for four weeks, just because the world is watching," he said. (Editor's Note: Total broadcast revenue generated from each major program managed by the International Olympic Committee and the Organizing Committees for the Olympic Games was $3.9 billion for 2009-2012.)
"
Some countries are pretty straight forward about this. See Kazakhstan: https://bugzilla.mozilla.org/show_bug.cgi?id=1232689
Ask HN: Why is renormalization the same as deep learning?
Flying cars are closer than you think
I don't think so but there was an 1824 edge case with John Quincy Adams. He won neither the electoral college or popular vote but the Senate later decided to put him in office anyway. No word on what his rival thought about it!

Today I think there might be a fuss.

Also these are the fellows who didn't get the popular vote but got enough electoral college votes.

1876, Rutherford B. Hayes

1888, Benjamin Harrison

2000, George W. Bush

2016, Donald J. Trump
Think Python is pretty approachable for newcomers. It's also made available for free, and fwiw has a version for 2 and 3.

http://greenteapress.com/wp/think-python-2e/
Where does it require quarterly rotation? I'm not seeing any specific time limit in the PCI DSS, but I could have overlooked it.
Servant leadership
Ok, I should have been a bit more specific: aren't all bytes on machines that Python can realistically run on 8 bits wide?
I wish voting in some districts would move to apps and a blockchain.

Australia is already using Ranked Voting and now this is taking shape:

https://cointelegraph.com/news/australia-to-make-blockchain-...
somebody noted recently that when crack epidemics was ravaging black neighborhoods it was considered an issue of crime and WoD was unleashed against those neighborhoods, when today heroin and prescription drugs abuse hit white suburbs - it is a public health issue.

I for one is happy that it is started to be treated as public health issue, it is a long overdue approach, yet one can't not to see the race based disparity mentioned above.
Have you heard of "Countries that aren't the USA"? Many of them have politicians & have achieved those claims.
You could also help customers who apparently have trouble properly connecting to your APIs by giving better error returns (got type A, expected type B), providing client libraries or giving more extensive support (for a price).
Blaming the customer is easy, providing a way for even those "incompetent developers" to interface with you in a way that is easy to understand and debug for all parties is hard.
That sounds nice, How Does it cover HTML, JS and Ruby on Rails in Depth? I assume that would take a long time lol
I think you failed to think that through. Random alphanumeric input of that length would be 25log(36)=525=125 bits. It is 11 bits per word because it is chosen from a ~2000 words dictionary.

Edit: should have reloaded, said by enough people already :D
> What do you tell people when you don't use Facebook?

There are so many options.

* It's not 2006 anymore.

* That whole privacy thing, never can tell what they're doing with your data.

* I was creeped out when I saw a friend's face endorsing a product on a third party website thanks to FB. I couldn't be sure what my face was selling, so I dropped out.

* It's just gated internet, like AOL all over again. (Hat tip, Cringely.)

* People get addicted to FB, it's good to cut loose and experience the offline world every now and again, force real interactions.

* I think X social network is better.

* I'm a hipster / It's too popular.

* All my best friends use X instead.

* My whole family is on it.

* My whole family is not on it.

* Kept having fights with relatives.

* Spent too much time on it.

* Someone stole/hacked/forged my account once, it was a big hassle, so I've just stayed away.

* I stand with Native Americans / LGBT users / victims of abuse in protest of FB's true name policy.

* Facebook banned me after I [insert amusing story here].

* I don't want to upset Cameron Winklevoss.
You're welcome! Hope you enjoy the content!
I would love to see an explicit recommendation of "no disabling paste" in the NIST standard... so that I can contact companies that do so and drive me nuts. The article implies that disabling paste would run afoul of the NIST standards, but is there actual language I could point to?
Recover Photos, Contacts, SMS, WhatsApp, Viber from HTC Bolt Without Backup
how does this compare to www.codermanual.com?
I also saw that but gave the author benefit of doubt that may be the book was written years ago and not updated. I have completed switched to python3 for almost 2 years now.
They appear to be a 4 byte wide utf-8 characters
According to my hex editor the G character is F0 9D 99 B6 while the C is F0 9D 99 B2.
Here are the characters:
http://graphemica.com/%F0%9D%99%B6
http://graphemica.com/%F0%9D%99%B2
We’re the New Counterculture
I suspect that it corresponds to Newtonian Statics, the study of mass and forces. It's a subject area; an ignoring of changes. Not a state of nonmoving. The Newtonian Statics viewpoint involves summation of forces. It may also involve taking a snapshot at one point in time.

E.g., when a mass above Earth is in free fall, it still obeys Newtonian Statics: the weight/attraction force, easily analyzed from moment to moment. The resulting acceleration and trajectory then falls under "Dynamics."

In other words, electrostatics applies to capacitors and to the mechanical forces produced by electric fields. Even if currents are also present, and even if the e-fields are changing with time, electroSTATICS still applies. (A high voltage, high-amperes power line is very "electrostatic," because of the significant e-fields and resulting phenomena.)

Static Electricity then is a chapter title, with no existence in the real world. Neither can we fill a box with Newtonian Statics. To be consistent, we wouldn't say "electrostatic motor," instead call it a capacitor-motor, or an e-field motor. (Heh, a stretched spring is statically charged! Full of Newtonian-static energy!)
here's the thing: Facebook has always censored posts. Try posting a picture of a nipple -- will be removed instantly.

It's just that this is a form of censorship that most Americans find acceptable.

For example in Austria, where I live, most people have other standards, and Facebooks policies seem arbitrary. Recently, a story made the news where Facebook repeatedly refused to remove a harassing video of a girl being beaten by peers; we Austrians don't understand how Americans consider violent videos "free speech" while being super strict about policing anything related to sex.

Some things like Nazi symbolism that are considered free speech in the US are forbidden in most of Europe --- for a good reason! It took us a long time to get rid of the old ideologies, we don't want them coming back!
Reasonable enough. Good luck. I think your efforts will be rewarded.
>> Seed and Series-A are two entirely different games.

Are you actually in a position to offer advice? What you say seems outdated - seeds grew to multi-million figures such that "seed is the new series A" was a thing back in 2013 - firms now offer "pre-seed" funding and "second-seeds" seem increasingly common.

The assumption today seems to be that if you have no connections, you must self-fund / bootstrap / FFF your way to traction to even attract angel interest and for you, seed is for growth. However, if you have prior exits and connections then you play a different game and can probably raise a MM seed without even an idea of what your new business might be.
I thought PCI compliance required you to follow A standard (they didn't dictate which one) as long as it was a recognized industry standard and you were consistent with it. NIST would qualify...
True. It's surprising to optimize for such a rare kind of user.
On the other side of Nate Silver, you have J. Alex Halderman and Ron Rivest. I respect Nate Silver, but I think everyone can speak to the need to not trust a single person in this case.
Method Call Syntax in a JS-Like Language
But that'd happen anyway when the installed package gets executed.
> The war on drugs was never about health, but was about racism

Weren't bans on drugs pervasive throughout history?
Andrew Appel (CS Prof. at Princeton) also gave a very good talk earlier this year about the problems of electronic voting systems.

https://www.youtube.com/watch?v=abQCqIbBBeM

edit:

Also, Ron Rivest was recently on Numberphile, where he talked about using homomorphic encryption to enable end-to-end verifiable voting.

https://www.youtube.com/watch?v=BYRTvoZ3Rho