skysight-inc/HackerNews huggingface dataset:
I'm a total greenhorn when it comes to cryptography, but the difference between these two situations was totally lost on me until I read this comment. When I see, "It's easy to create MD5 collisions," my first thought is, "If you give me a hash, it's easy to find a string that results in an identical hash." If I'm understanding this right, that would be a "preimage attack," and would be bad for all the reasons being discussed in this thread.

However, it seems like "It's easy to create MD5 collisions," at least as it is true today, actually means something different: That, given a string, it's easy to find a second string that shares the same hash. If that's the case, I have two questions:

* I am totally lost as to how these are different scenarios. There's no difference I can see between "Here's string A" and "here's the hash of string A," if the goal is to find a "string B" that shares the hash. Are these "crafted collisions" generated by modifying string A and string B, until a collision pops out?

* If that's the case... what's everyone freaking out about? Why were people saying MD5 is unsafe 20 years ago, if even now, we can't achieve a preimage attack that can get you into an account based on the valid password's hash? Yahoo could have printed these hashes out and hung them up on posters in the mall and no one would have been able to get into accounts from it. There are dozens of comments lamenting how stupid this was, but... it seems like there's no actual problem?
Every hash has a finite output length, and therefore a finite number of possible outputs. 2^128 is a very large finite number. It's not that large in the grand scheme of things (there are over 2^260 or so atoms in the universe), and it's definitely better to use a hash with 2^256 outputs now that there exist good 256-bit hashes that are faster than MD5, but 2^128 is still quite a large number. The internets are quoting me about 10 billion hashes per second on a good GPU from a few years ago, which comes out to about one sextillion years to find an input for every possible output. (It divides linearly if you have more GPUs, but that clearly won't help very much.)

What's broken about MD5 is that, due to an algorithmic flaw, it's very easy to generate two inputs of your choice that have a matching output. That's great if you want to do things like spoof an SSL certificate (you generate two certificate signing requests, get one of them signed, apply the signature to the other), but not directly helpful for attacking a password hash where someone else chose the password.

What is conceptually broken is that such an algorithmic flaw exists, and also due to algorithmic flaws it takes a bit under 2^128 tries to find an input for a specific possible output. That worries mathematicians, because it's a sign the hash isn't behaving as randomly (speaking informally) as one would hope, and that people are starting to understand its structure. If that understanding continues, it might be broken more in the future, so you absolutely shouldn't build new systems on MD5 because we expect the research to happen at some point.

But, at least today, it's still true that you can have a password that can't be brute-forced despite the use of MD5. Maybe someone will present a paper tomorrow that disproves that.
Making money by what measure? Cash on cash return? Current cash flow? GAAP profits? Making investments with a positive expected value?

If I buy a government bond I won't "make money" until the principal is repaid. But that doesn't mean I acquired a liability - it means I invested money in something.

Likewise for buying real estate or any business that monetizes a capital asset. Are those not real businesses?

Investing today for uncertain earnings in the future is perfectly legitimate, in tech, in brick & mortar businesses, really in anything. It doesn't mean you can be unrealistic, but it does mean that you shouldn't be short-sighted.
You do realize every time you login to a website you are "send[ing] a password over the internet to verify it" ;)
"You don't know what you don't know". We have no idea how they selected, curated, pruned, or otherwise "cleaned" their data set to meet their needs. What we can say, definitively, is they DO have a bias to encourage more developers to move to the Bay Area.

"Do not put your faith in what statistics say until you have carefully considered what they do not say."
- William W. Watt
Amiga had datatypes.library, and also IFF filetypes (that were mostly lovely) designed be EA for DPaint. It's the way the world should work.

Let's say you're MS writing word for the Amiga.

They provide a datatypes description for doc files. this gives ability to read and write the format, and fingerprint it (not based on extension).

Now any program, old or new, that wants to read or write doc files can do. It's just there.
They should use IMAP labels. Their IMAP implementation has always been terrible and broken. Anything you label gets put into an IMAP folder and therefore you download it multiple times per label.

I agree; fuck everything about gmail usability. It was a cool trick when it came out. Now it's just overly bloated AJAX, non-standards compliant garbage.
I don't download my email. I have a webmail for a reason - I don't want a mail client with all its attendant files gumming up my PC. I moved off Netscape Communicator to webmail because it took up over 40% of my drive, and I've never regretted the decision.

And I don't like 2FA either. It's a hassle and never, ever, worth my time or energy. There was one gaming service (I think it was an MMO) that demanded 2FA or bust. I don't use that service and never will.
The Uber self-driving cars have a human in the driver's seat that is able to take control of the vehicle. It's not clear whether the computer or the human was in control when the car blew the red light.
But do we know whether it was under computer control at the time?
Maybe it learned a bit too much from San Francisco drivers?
Inside Opendoor: What Two Years of Transactions Say About Their Prospects
2017 Solar Eclipse Path of Totality
Typescript tutorials
Fully agreed that there are limitations, but I still think calling it an out-dated approach is unfair.

I don't see a simple, low on boilerplate, one-size-fits-all solution for reusable and separated components on Android at the moment. I love that the community didn't settle with just Activities or just Fragments and is actively trying new stuff (after all, if you look at React or Vue or even freaking backbone.marionette, the web is in a much better spot right now regarding UI composition), but right now the right solutions always seems to take the path of least resistance and use whatever mix of pattern that gets you to your goal as easily as possible.
I want self-driving cars to happen as quickly as possible, but Uber seems like they were extremely reckless and negligent here. Why not apply for a permit and stay on the safe side?

And with at least two reported incidents of these cars running red lights, it seems like driver training and attentiveness was lacking. If the software wasn't ready, fine, but you have to be aware of that and train your drivers to be 100% attentive to their surroundings, especially since it's the first day of real, commercial trials.
Stripe + patio11 = good^2

Thanks for writing this!
> What if the delete took place three commits ago?

The original command he was suggesting a replacement for used `-n 1`, so it seems kind of silly to point this out to him.
The NASA Scientific Visualization Studio, where I used to work, has published the most accurate map ever produced of a solar eclipse totality track. This animation combines Lunar geographic data from the LRO spacecraft with Earth geographic data to correctly model the edges of totality.

I'm in luck, the path of totality basically runs over my sister's house in East Tennessee! I hope the Great Smoky Mountains aren't so smoky on that day, August 21, 2017.
I believe that stability of the internal C++ APIs is a complete non-goal of LLVM/Clang.
Not wrecking bank account shouldn't be the only concern. Wrecking relationships by being absent should also be of concern.
If they are indeed running the self-driving car on Ubuntu, a full desktop operating system, then I think we're already way past moving fast and breaking things, and well into "how X11 can kill you" territory.

https://i.redd.it/nnvqmprcjj3y.png
Their IMAP implementation is anything but compliant or functional. They implement labels as folders. Every time you use a label, it downloads that message multiple times and puts it into folders.

Also when you try to write drafts in Thunderbird for Gmail, it stores them in such a way as each saved draft turns into part of the conversation (WTF?!) It makes conversations totally unreadable.

I quite gmail years ago and do not miss their broken IMAP implementation.
> Lastly (and I really hope this happens), Yahoo implodes/collapses (cause the average Joe won't migrate willingly) and leaves a vacuum for their 500+ million email users.

You do realize this makes you sound both terrible and ignorant, right? I happen to have a Yahoo account, which I registered way back when the options were that, Hotmail, and maybe AOL. I have self-hosted mail now, and a redirectable primary address, but that Yahoo address lives on in various address books.

If you want to realize your email dream, you should try to turn the Yahoo addresses into an eternal forwarding service for current accounts. Maybe you could sell space on the signup page to smaller providers.
Are you the only proprietor of your C-Corp?

"Corporations. Corporations (both C corporations and S corporations) have the strictest internal requirements, including holding initial and annual director and shareholder meetings, adopting and maintaining updated bylaws, issuing stock to shareholders, and recording all stock transfers.
...
Facing the consequences

If a corporation or LLC is sued and unable to show it met all corporate or LLC formalities and state requirements, a judge can rule that the company has been acting more like a sole proprietorship or general partnership. This can result in “piercing the corporate veil” meaning that limited liability protection disappears and leaves individual owner(s) assets vulnerable if a lawsuit judgment is made against the company."

Source:
http://www.bizfilings.com/learn/business-compliance.aspx

I've found that bizfilings has a wealth of high-quality information on incorporation and other requirements for starting a business
Totally. The nice thing about being in Portland is that the Bay Area is only an hour and a half flight. We still have family down there so we spend some time there, but we have kids. So one big reason we left the Bay Area was just to find better quality education and we definitely do not regret the move after finding amazing schools here.

But to your point, there are some great events and conferences which is probably the biggest thing missing from Portland. There are a few good events, but nothing at the scale of what happens in SF.
Angular cli and Twitter bootstrap integration
We have a workaround in place for 26492 (a program that just queries all containers, and there VETH info and checks if they are in the bridge, force adding them if they are not) luckily so we don't have to build custom versions of Systemd. We also instituted a similar fix for 28518 (we just kill the broken container when it's detected).

However, our integration suite repeatedly caught deadlocks and some panics in 1.12.* so we have yet to upgraded to that. I'll ask our infrastructure teams to do a custom CoreOS with 1.12.4 and run it through the paces; though, I know we've had issues with Kube in the CoreOS alpha channel so it may be a no go.

Thanks for the reply!
The video doesn't show if it was a person or computer driving. And Uber claim it was a human error though I'm not inclined to take that as proof.

https://techcrunch.com/2016/12/14/uber-looking-into-incident...
As someone who uses this cross-walk on occasion, I think the state is reacting just fine.
I think it simply means that the runtime and distribution platform are the typical browser technologies stack, namely JavaScript, HTTP, et al.
This of course has the challenge that you need a network, and if you're taking pictures in a hostile country such a network would be problematic. That said, there is an interesting fuzzing defense here.

Have the camera broadcast the image in parts with forward error correction to a set of passive listeners in innocuous gear distributed amongst the crew, perhaps an MP3 player, a vape stick, flashlight, a portable radio. Such that if enough of the listeners manage to get back across the border to home base they can be combined to recover the photos.
Uber released a statement saying that it was human error

https://techcrunch.com/2016/12/14/uber-looking-into-incident...
Yet, somehow they did get out.
No, Haskell can abstract across the callbacks/blocking choice and let you write straight-line code that works with either. I mean, that makes sense as the two are fundamentally the same thing at super-low levels anyway. Haskell just supports enough abstraction to allow you to do either with the same interface to higher-level code.
Not by several orders of magnitude.
Not at all. For example, if you already know the HSK1, feel free to start directly on the World 2. Each world = one HSK for now, and you can learn up to HSK 5 with the current application (HSK 6 on the way).

In case you stop in the middle of HSK 1, going through the stage should be very easy. I still think you should give it a try, as even if you know the word, you'll also make sentence and learn to talk (or listen if you don't like to talk). Review are only for words right now, and if you know them, they won't bother you a lot ^^

Let me know if you need any help!
I hate having a secondary system just to get access to my accounts. I use a password algorithm. This ensures I have a unique, easy to remember (or derive), hard to guess password for every account:

http://penguindreams.org/blog/my-accounts-been-hacked-no-it-...
Meh. I was in the Bay Area during the 89' quake. I'm not terribly worried about what would happen here. I remember hearing "the big one" was coming for the past 30 years.
Updated Uber statement:

"This incident was due to human error. This is why we believe so much in making the roads safer by building self-driving Ubers. This vehicle was not part of the pilot and was not carrying customers. The driver involved has been suspended while we continue to investigate."

https://techcrunch.com/2016/12/14/uber-looking-into-incident...
JS trickery for in-browser HTML templating
You don't like GMail, I understand that (I don't either), but why stick with Yahoo? There are more providers with "old-fashioned, boring" web interfaces...
Nope, that doesn't explain it. Without Yahoo! UDB access to get a couple values unique to your login, you can't forge a cookie that allows you access to Yahoo! Mail.
The best way to understand general intelligence is to understand why general intelligence is around and what phenomenon is explains.

It started long ago when everyone thought you could be good at Math, or good at History, or good at Science, and sometimes good at all 3.

One day Suzy(named changed and story overly simplified for explanatory purposes), a very smart math teacher, was promoted to principal. So she finally had the chance to look at students grades from every class. And she found something curious. Her students that succeeded in her Math class also succeeded at Science. And kids that did well at History, scored highly in English. So Suzy decided to call these newly discovered traits "Verbal Ability" and "Quantitative Ability" respectively.

But Suzy didn't stop there, her investigations found that Verbal and Quantitative were correlated with each other. So she invented a third trait which was the combination of Verbal and Quantitative ability and she called that g for General Intelligence. Of course Suzy wanted to measure this g with a test so she could predict(though by no means perfectly) a student's Math, Science, English, and History grades from just one score. She settled on IQ as the measure of this test, and thus IQ was born.

Basically when we give someone a whole bunch of different tests we find that if someone does well on one, they will probably do well on others. For instance if we know someone is really good at theoretical physics we know they'll be good at working memory, and solving silly matrix puzzles. But if we know someone is really good at poetry we don't know as much about how good their working memory is, or how good they are at solving silly matrix puzzles.
I hate it when I'm asked this in person at banks and shit.

"Your mother's maiden name has four numbers in it?"

"It's a password. You should never use real answers for security questions."
A culture of people with no kids doesn't sound like a real culture to me.
is this any good for python ?
I lived in Vienna, VA for a while, so I'm pretty familiar with all the failings of WMATA. And there are many. But...and it's a big "but", if you've lived in any major non-coastal city in the US you might think that DC's Metrorail is at least a public rail system, which is better than many cities have.

It's sad that in the US, you have to take what you can get, and the reasons why the US doesn't have good public transportation have been discussed here ad nauseum, so I won't even flog that dead horse again.
Yes, we've had issues like this when hiring offshore workers located in the US.
I solved this by keeping my Webpack build process in it's own repository, with a JSON file that dictates entry and exit points for builds. When doing a new frontend project, I use git submodules to import my build pipeline and just change a few variables and I'm set.
I have been but I don't put much stress of the fancier features of the IDE, mostly I just use it as a tabbed text editor with syntax highlighting and git support.

Racer (intelligent auto complete) has always been a bit flaky, but other than that it's been great.
HN submission of that video: https://news.ycombinator.com/item?id=13180172
Pretty much our experience. We didn't figure out what caused it, the same Instagram account sometimes works and sometimes doesn't without a change in code on different instances.

Apparently it happens from time to time, there are some posts about this problem on StackOverflow. No answers though.

We tried many things, including resetting our secret. It's working now, but it's hard to tell whether our actions had any effect.
Yes, I understand that reducing pollution by, for example, reducing emissions from coal-fired power plants will also affect climate change (assuming you believe reducing CO2 emissions will do that). That doesn't change the fact that pollution causing people to get sick or die is not the same as climate change causing people to get sick or die. If we want to fight pollution because it kills people, and help with climate change as a side effect, that's one thing; but the post I responded to was basically arguing that we should fight climate change and hope that it reduces pollution as a side effect, based on the fact that pollution kills people. That argument makes no sense.
Yeah, I'm with you. If I can't get done what I want with an app after half a dozen taps, the app has already failed.

The last thing I want, especially on mobile is to be typing out sentence long inquiries.
... "offshore workers" are not a race. You realize offshore workers could be the same race as the person posting right?
* Defending Against Hackers Took a Back Seat at Yahoo, Insiders Say - The New York Times || http://www.nytimes.com/2016/09/29/technology/yahoo-data-brea...

Time to update that article from September. Hooray for Yahoo, they made it 76 days without a 500M+ user security breach.

(No, I don't know the actual dates... just making a joke.)
To be fair to Musk he was managing two pretty revolutionary businesses at once, both of which where going through very very tough times. This puts strain on any marriage and his broke. During this tough times. He still managed to hold it together. That's superhuman.

It's not like he was a mid level white collar exec staying too long at the office.
> The state should be doing all it can to support, grow, and encourage this innovation.

I don't think anyone disagrees. California's been very proactive in promoting and allowing self-driving car trials.

But you can't allow just any driverless car on the road without ensuring that it's safe — that's why there's a permit process for it. This isn't just another app — people's lives are at stake here.
Yeah. I suspect that those currencies are so minuscule in volume compared to USD (and other currencies) that Stripe wouldn't even pay back the engineering cost of implementing those new currencies (at least, not in the next year or two)
This goes into the much bigger issues of there not being enough search engines. Back in the day if you couldn't find something, there was Lycos, Hotbot, AltaVista, MSN .. each had their own indexes (or they purchased access to a few major indexes).

Later we saw people ditch their indexes and just using a few big players. Now we have Google, Yandex ..and...Bing? DuckDuckGo uses a combination of Yandex and others, Microsoft has been found parsing Google to build their index ...

I want more options, but the search space barrier to entry is very high.
Actually, "entreprise individuelle" and "micro-entreprise" are almost the same status (the diff is the limited income for the latter).

The big diff apparently is that everyone in the US is sole proprietor by default, while in France you need to ask an agreement from the government.
My more intermediate-level cheat sheet: https://gingkoapp.com/git-notes
We should at least be able to execute them in Texas.
You're omitting MediCal. It ends up being about 13% (marginal) after it is added.
It baffles me that Yahoo continues to live an independent existence. It's like a Terminator that never had a clear mission and now just wanders around randomly banging into things.
US raises key interest rate by 0.25%
What were these great things Webpack introduced? Not HMR.
How else would you retrieve a drone delivered package on the 6th floor with a balcony too small to land on?
Easier to list who was not affected??!!
Uber just doesn't get the whole concept of regulations do they?

I understand violating ones that are "dumb" and hurt your business (e.g. taxi medallions) or those that it's easier to just do it and figure out hte results later (e.g. insurance) but this is literally "get the permit first".

They should process this nice and sloooooooooooow.
Apologies, I've heard the details at this point and I can't disclose them. The limit of what I can do is poke holes in the theories that are wrong.
If you can afford to pay a couple Chinese programmers this isn't a bad idea. You run the risk of your code just vanishing and a eerily similar Chinese product appearing a few months later, but depending on your financial situation you can be a sole funder in that case.

Not that I have anything against using out of country programmers, but it's a fact that China does not strongly enforce copyright and does not go out of its way to protect foreign businesses. I don't know about Russia, India, South America, etc, I'd be curious about anybody that's done this sort of thing before. Tim Ferris always talks about it for things like running his support and returns and whatnot.
Totally understand, now that webpack 2 is almost out the door, this is one of our top 5 overhauls we want to make.

"Can we make smarter defaults"

We support a lot of build targets and are agnostic to library and stack so it's going to be a challenge but with your help and the community I know we can get it done.