skysight-inc/HackerNews huggingface dataset:
You also need to have the password database. Having the master password alone is not sufficient, and having the password database is not sufficient. And of course the master password never gets transmitted over the network, so it's harder to get. If your threat model is an attacker that's compromised your specific computer (as opposed to a network attacker) then yeah, having the OTP code in your password manager isn't 2FA. But if your threat model is a networked attacker, or alternatively, is the remote site being compromised and your password leaked, then having OTP in your password manager is effectively 2FA because the attacker doesn't have either your password database (a thing you have) or your master password (a thing you know), they just have your site password.

So really it comes down to what your threat model is and what risk profile you're willing to accept for a given site. For me, all I really care about is TOTP and not having "real" 2FA. But of course if you're talking about something like an AWS account that controls access to your company's data, it's probably worth investing in a YubiKey or similar.
That's odd. I've only mostly lurked here. Does that happen when you're a new poster or something? I've only had a handful of posts. I hope I didn't break any rules.
> Help me understand why you believe Matzo isn't a culinary foam.

Because when I break off a piece and look at it it doesn't look like a foam. (Note I mean the handmade stuff, not the lightweight, cooked at a lower temperature, machine made version, which is admittedly kinda of foamy.)

But, if you consider that to be a foam, I have to ask: What cooked until mostly dry, flour/water product isn't a foam? i.e. saying "foam" doesn't actually add any additional info.

> Pancakes are quickbreads!

Well, in that case we can simplify the definition: Bread is flour plus liquid cooked until mostly dry. Flour is defined very broadly, as is liquid (for example shortening is a liquid by this definition).
I should be more careful: this operation does, in fact, form a lattice if the graph is connected at every point; e.g. the + operation is restricted.
Yes. Yes it does. Also, because it works on two type systems it has many cases were you'll want to take a look at the generated C code to verify that the "cheap path" was taken and no intermediary Python objects are constructed or Py operators are used -- if performance matters, that is.

On the other hand it is a radically simpler way to write bindings that also contain logic, or to write rather fast code without straying to far from Python. Plus, it can cythonize almost all code, even very dynamic code with closures, which will still often improve performance on it's own (no interpreter, but still Python runtime for every op). And that is then a nice base to do further optimizations.
I'm on my phone so I didn't get a good look, but it looks like this compiles a subset of c? Is this accurate?
Phishing is a top threat to users and enterprises both. OTPs, whether from SMS or not, can be easily phished as well as passwords, while U2F cannot. So the answer seems fairly clear.
I can easily explain it away. But seriously, is it really believable that an entire race of AI beings would be destroyed by a single computer virus.

Most likely than not each single being is completely independent from each other. For all we know it is only the "zoo" that is being affected. You know, the same way that a whole bunch of animals in a herd get an infection and die.

Planet earth is big, and by this point all of it is populated by AI beings. They are probably using fusion energy and traveling to the stars already. This whole thing is probably just an isolated incident.

For all we know this is by design to keep the humans from dying off of boredom. Or maybe and most likely this is just an experiment some curious AI is running the same way we run experiments with rats and mazes. Since they are virtually immortal they can run an experiment for hundreds of years.

It could be that the fall of human civilization happened millions of years ago. The problem with the skies is just the result of climate change or changes with the sun. Since the machines live in a virtual reality they don't care what is the environment on Earth.
Well pure Java code is 10x to 100x faster than pure Python code. So you aren't exactly accepting slowness in that case.
> Really, the "hacker's complaint" is no different than lawyers complaining about, well, every courtroom drama ever.

Except, oddly enough, My Cousin Vinny, which lawyers apparently love [1]. The fact that I can name one movie known for this probably proves your general point, though.

[1] http://www.philly.com/philly/blogs/entertainment/movies/New-...
I'm not very familiar with the AVR instruction set, what makes it difficult to emulate?
Agreed. BBT is a terrible show with mostly cringe-worthy humour.
You've said exactly my thoughts.

Watching Westworld, I often find myself frowning upon a certain line of dialogue which sounds forced or 'off' in some way, or a scene which looks like it's meant to be emotional but just doesn't make me feel the sentiment. I also liked the daring, weird shots and cinematography in Mr. Robot. Sadly, in Westworld, there is less of this, as the director has opted for a more 'textbook' approach to filming and editing.

Not to say that Westworld isn't an enjoyable show, just that I too just can't seem to like it better than Mr. Robot.
Telegram- Now with IFTTT integration
You misunderstand the metaphor. The batteries scene was about the Matrix as a system of control for harnessing human cognitive output - the Matrix is just a proxy for "The Man" in our world. The entire third movie is about control and purpose vs non-determinism and free will.

I really enjoyed this documentary on Philosophy and the Matrix - https://vimeo.com/53000177
Sure, okay. But the point remains that "you couldn't have local/temporary variables in your class constructors" isn't quite true.

FYI, you could avoid that but not without giving up `final`.

This isn't exactly unusual. Lots of source languages (e.g., C) don't expose all the abilities of the target language (ASM).

I'm surprised you mention this shortcoming compared to Java. I would have mentioned the lack of a Java enumeration equivalent.
Is Bluetooth 5 compatible with 4.x? That is, can a Bluetooth 4.x Central connect to 5 Peripheral (or vice versa)?

Does anybody know the power usage (idle, advertising, data transferring, etc.) of BT 5 compared to BT 4.x LE?

Thanks
Probably true for the "internet scale" applications. But my impression is that there's still lots of medium-sized opportunities to build interesting things around the edges, in fields outside of the mobile/PC ecosystem.
It would be awesome to see a service that just offered user testing with feedback like you just gave.

I have no idea how big that market is, but I suspect a lot of developers are like myself - not opposed to making a site more accessible but clueless about where to start.

I'm thinking user groups like colorblind users and blind users. I'm sure I am missing more groups, so sorry for my ignorance upfront.
It emulates a cpu, and custom assembly code is compiled and run. A simple c compiler is in development though
At first, I ended up switching to other delivery platforms. I also reached out to the restaurants that DoorDash was constantly messing up with and spoke with them directly about how to improve the system. I also spoke to DoorDash, but you can only ever get a hold of their support team, not anyone who manages the delivery business. After that, accuracy got better, and then slowly started declining again. Now, I use Amazon for my food delivery, and they do a fantastic job.
The Fight Over Government Hacking Continues
What’s New with Xen Project Hypervisor 4.8?
If you really want to get your tinfoil hat on though, what's to say the firewall isn't all part of it?
Ordering details for the Intel architecture documentation are at https://software.intel.com/en-us/articles/intel-sdm - the volumes range from $8 to $23 depending on size. I think the documentation was free when I got it but times have changed. Edit: you can download the PDF (for free) from that link too.

It's quite a surprise to go to HN and see my post from 2013 here, by the way.
Angular 1 Performance Issues
Every Perl6 article I read makes it even less likely that I'll ever use it.

It's so ugly, with so many arcane things to remember, with so many weird naming conventions that just don't make any sense to me.

> We intersected two sets with the ∩, U+2229 INTERSECTION, intersection operator and received a set that contains only the elements present in both original sets.

I'm not against having built-in Unicode operators, but the non-Unicode version should be the name of the character. What's the non-Unicode version of "∩"? Obviously it's "(&)"! Good thing there are only 57 of them to remember!

I tried to enter "∩" just now in Emacs: (ctrl-x, 8, enter, i, n, t, tab, r, tab, s, e, c, tab). It would have been shorter to just type "intersection"... And why is that called the "Texas" version?
Great write up. Dealing with my own employer and the constant confusion around oauth vs OIDC vs JWT, and having to explain they aren't VS at all! They are all stacked on oauth itself, and don't really have much to say about the actual authentication of a user (that is just up to the identity provider).
Deep learning to automatically activate the boss key
AFAICT the PR review REST API is still on their "near-term roadmap" (https://developer.github.com/early-access/platform-roadmap/).
Very complete comparison of the performance of PHP versions over time. PHP 8 looks promising.

It is only missing some benchmarks on real world applications like WordPress, Magento, Drupal, Joomla, etc..
According to quantum mechanics, the probability of a D-D fusion reaction at 300°K is ~10^-3800.

That being said, I still think it's wrong of mainstream science immediately reject Cold Fusion/LENR or even Em Drive research.

Just take it for what it is, an anomaly. Which may or may not lead to a breakthrough.
Didn't know about Datazar. I can't read the faq or zoom on the screenshots from my phone, but I wanted to know if I can pull data from Datazar to a Javascript app.
At the launch of GitHub reviews, it's not just that the outdated comments weren't hidden, but at that time, there were no tools in place of that to collapse threads, mark sections of diff as approved, or otherwise resolve comments with follow-on pushes. That's why I asked their support if I was using it correctly, I was super confused. I'm definitely interested in a better GitHub workflow.
T-Mobile Unveils “DIGITS,” Upgrades the Phone Number for the Internet Age
The Terrifying Cost of “Free” Websites [video]
You really don't have to use all of them of course. Pick one and that should be good for the environment that's specified there.
Really? Seems pretty trivial to me
This looks great but was a little confusing at first. Maybe make it clearer to the user what's going on so they know they're just building their own site.

I think it's nice not to have to enter an email at the end, but you'll miss out on a lot of emails. Maybe provide the prompt to enter an email first, but let them skip it.
I think, as a corporate culture, we find an immense value in it. We use open source stuff like crazy.

The problem I see is that, as that same corporate culture, we're not contributing back to the same projects we use code from so freely, at anywhere close to the same rate.

I asked about doing that, on one project I'm involved in, and was told not to get involved with OSS contributions, because of potential legal/liability issues.

It made me sad.
Leftover Salad Comic: Programming People
Org-mode Babel is cool
I hadn't. I just did. You're right. Link for any future readers: http://pastebin.com/raw/0SNSvyjJ
Sure react and angular are different, what about the dozens of others? I posted elsewhere the number of crappy make clones alone:

https://www.npmjs.com/search?q=make+build
What's the non-Unicode version of "∩"? Obviously it's "(&)"!

I find that pretty obvious, actually. After all

A ∩ B = { x ∈ A & x ∈ B }
Many wordpress themes are based in bootstrap too.
I agree: I don't really see what the obsession is with linear-algebra based graph theory. Yes, it's cool, yes it has interesting results, but it's not everything and we've got tools for semigroups and general algebras that may be useful here, along with natural generalizations that may emerge which may not be obvious in the linear-algebraic picture.

Anyways, thanks for the interesting blog post!
Reply to myself...
In spite of the downvotes, I'll plow ahead with this.

I see now that you're supposed to "play" with the website and put it into some sort of personally pleasing configuration and download the result. (The download feature still doesn't work properly for me, SORRY.)

People won't be surprised to learn that I'm an older programmer. I found it interesting to see how apparently out of step I am. People seem to like this and I think it cries for more structure and a tiny bit of DOCUMENTATION.

And those CSS/JS files. (f7e531b07478dedf9916.js??) There's no way I'd want to maintain something like this unless it used Bootstrap or some other established system.

So, downvote away. I personally remain unimpressed.
For 1), those are not bugs but to simulate if then else. If the width is < 800, then do that, else do that. Then problem is that if then else is not linear so you can't express this. What they do is to put bigger weights than anything so the minimization function is going to pick them instead. Because it's using different orders of magnitude, you can only have a few of those categories (4 in this case), afterwards you run into numerical precision issues.

2) The height of a text is not a linear function based on the width of the container. You can't say, the height of the text is 10px * number of characters * width of the container.

Instead, if you add a single more character that makes it go to the next line it's going to add a single lineheight.

So, you can't encode this inside of the simplex and you need to do it as a separate pass.
You can still use RDS and connect to it from DigitalOcean.
AVRs have a few quirks because the original ISA didn't consider parts with more than 8K program memory, so later some longer jumps where tacked on. A few instructions has a bunch of special cases for some common operations (eg. bit-based access to some, but not all, IO registers). It is kind-of-but-not-really orthogonal with comparatively many instructions for an 8 bit controller (about ~120).

Not sure how it compares regarding "emulability".
It couldn't be fusion -- at least not anything like hot fusion. If it is something like fusion, it'd have to be new physics.
How a Rust Belt Native and Silicon Valley Technologist Is Re-Thinking US Mfg
When thinking of this topic, the Hacking Team hack was one of the first to come to my mind, but political motivations are hard to untangle or to separate from even purely economic motivations (e.g.: commercial competitors disguising motives with political rhetoric).
The movie would have been more believable if they'd used humans for CPUs instead of batteries.

I honestly thought I'd read that CPUs were the original intention but the studios changed it to batteries but can't find any source now.

Some hint about it here[1] but no conclusive proof.

[1] http://scifi.stackexchange.com/questions/19817/was-executive...
OpenSUSE’s GPG Key Server
Extraordinary claims require extraordinary proof. When it's mostly likely experimental error, why do you think anyone should "take it for an anomaly"?
i will admit i've yet to have read your praised 'Beneficence' but i have read a few of his other works similarly to the gp's effort to 'see what all the fuss was about'

i very much disliked lolita

i'm unable to speak to story construction because i only vaguely recall the structure but i can speak to my distaste for the prose

i have a lot of respect for multilinguals and the fact that nabokov wrote lolita in english is commendable but it reads to me like posturing

i felt it was humorless yet aggressively attempting to be funny

i feel people who like it inexplicably excuse its shortcomings as intentional or representative of the narrator, and i always felt if that was the penultimate interpretation i'd rather find meaning and enrichment in work that engaged with me as a reader instead of trying to troll me while hoping i grant its assumed brilliance credence

i felt it self serving while being acutely self aware; further promoting said service

which is also why in my opinion the only thing even slightly worth reading by nabokov is pale fire

i feel it explicitly exhibits my interpretation of nabokov as an author

someone obsessed with one's own literary importance based on one's own criteria of what makes good literature
Typical BS article.

"Rigorous studies show that the technology that we spent lots of money on doesn't seem to have the affect that we want, but here's lot of anecdotal evidence for other good things that it might do!"

If they just admitted that there are better things to do with money and resources than clean burning stoves, that would be much better.
IBM goes all-in on blockchain: Launches app-making ecosystem
> I wasn't even sure who is actually self hosting [analytics] these days

About every company who don't outsource everything + every company that adheres to strict privacy rules + every company that is forbidden to share user data because of regulations + every company that is beyond what free GA has to offer.

That's like a shit tons of companies, a lot of which are established and have money. Just sayin'
Also note that most of us usually eat by hand (though this is changing due to the influence of west).

I find any food less tasty when eaten not using hand.
Let's call it 1.5 factor auth.
I'm a white hat hacker!

I think a better question is what are you looking for or what type of organization do you run or work for? A good security firm can provide application reviews to find everything from xss bugs in your web app to remote code execution in kernel components. This is done either black-box or source assisted and staffed with a team reflective of the size and complexity of the application.

Another aspect of security assessments can be network and infrastructure, these generally mean someone running nmap and looking for entry ways further into your network. I am biased but my organization almost never fails to find critical bugs or breach networks.

I'm not a salesman but my firm is NCC Group, we are a global pure security consulting firm, which means we don't make or push products. We also have tons of research https://www.nccgroup.trust/us/our-research/ which you can check out to see a sample of what you be paying security consultants for.
I tried moving to emacs/spacemacs but went back to vim. This is the biggest feature I miss. I've even go so far as to do some extremely preliminary work on re-implementing it in vim.
Last I checked it only runs over a MySQL.

I don't know how many visitors and page views you have, but that's a red flag for most established sites.
yeah you can! you can stream data directly from there to your app, just a create a token and you're all done. you can also push JSON data to a file. your visualizations and analysis will update accordingly as well.
No offense, but uh... please read the article?

You quoted: including One Time Passwords (OTP)via SMS phone messages

The sentence that phrase is lifted from: U2F is an alternative to other forms of two factor authentication (2FA) including One Time Passwords (OTP)via SMS phone messages.

So you either deliberately or carelessly misquoted. What's more, I quote:

> Additionally, Google's research found that with OTP based authentication there was an average failure rate of three percent. In contrast, with the U2F Security Key approach, Google experienced zero authentication failures. The improved efficiency of using Security Keys instead of OTP is estimated by Google's support organization to have saved the company thousands of hours per year.

And further:

> "While any 2-SV mechanism is better than having only a password on your account, FIDO U2F provides strong authentication that's resistant to many forms of advanced phishing attacks that traditional 2-SV doesn't protect against," Brand said. "It also provides for a much better user experience."

So no. The headline is not misleading and in fact your hot take and comparison to 1Pass is a misunderstanding.

For people curious what these keys look like in the wild, by far the most famous brand name most people in our space would see is Yubico, which you can see here: https://www.yubico.com/products/yubikey-hardware/fido-u2f-se...

You _can_ integrate this approach into your product, into your AWS environment, into your Azure environment, or into your linux servers. And it works, and it can be self-hosted if that is a priority for you.

Oh, and if you'd like to try the best of ALL THREE WORLDs, LastPass directly supports Yubikey FIDO keys. And also lacks 30s of impromptu vault animations and supports touchid. They're working on facial recognition for Windows as a 3rd factor as well, I'm told. That'll be great.
Copyright can’t stop annotation of government documents
Creating Beautiful Spreadsheets with Data and Templates
Extraordinary claims require extraordinary proof to take them as truth. Less extraordinary proof can still let them be a "may be". That's all they're trying to be for now.
> You can't just start collecting data about servers as they get installed and about services and resources as they emerge and disappear.

You can do that in Zabbix, it has two functions to discover hosts (called "network discovery") or "features" like running services or e.g. switch ports (called "low level discovery") and apply templates based on certain query results (open ports, SNMP values etc.).
Alerting the lack of new incoming data is also possible.
I used Zabbix a lot until a year ago and liked it much more than Nagios+descendants.
Stuxnet would play AC DC Thunderstruck over the PA system at odd hours in Iranian uranium enrichment facilities.
We are hiring, if you're interested please email me my handle at gmail.
> or even Em Drive research

I think a lot of those rejections are coming from the crazy claims the EM drive inventor is making, everything from free energy to flying cars.
Data Wrangling at Slack
> Maybe I'm missing something but one of the core technical conceits driving the first few episodes is that an IP address found inside a "dat" file is compelling evidence that the person with that IP address was guilty of something. Of having an IP address that somebody typed into a file? I didn't get that. As I say perhaps I misunderstood.

It's been a while, but as I understood it, the "dat file" was (ostensibly) part of a professional forensic dump of a filesystem on a compromised server, and the IP was buried somewhere in the malware itself as the address from which commands were accepted.
I was responding to someone who said "it's wrong of mainstream science immediately reject Cold Fusion/LENR or even Em Drive research".

In response to you, "unlikely" is not the same as "may be".
The code style really hurts to read, but this is a pretty cool demo of how to do this. Congrats ronsor, good work!

Don't try to run anything in the VM that's larger than 4K though right now... ;)
Wow, thank you! This is even more than I hoped for.

I will carefully read through all of this and come back to you.

Many, many thanks!

EDIT: Your feedback is probably the most useful and richest we have ever gotten.
And not just traffic lights. I'm in Melbourne, Australia and every day I walk across the concourse above Southern Cross station (major rail switching hub), and at a certain point my BT phones (also Jabra Revo) keep dropping out, then recover as I move past that black spot ("blue spot"?)
CoffeeScript is most similar to ES6 but with some slight differences in syntax and style