skysight-inc/HackerNews huggingface dataset:
We design a cryptographic protocol to setup Secure Websocket(alias SWS) over plain HTTP site between http client and http server, which includes Nacl-based Certificates Exchanges and Crypto-Keys Distribution.
A decent breakdown of all things real and fake news. – Imgur
Just wish resharper would get on the bandwagon.
We detached this subthread from https://news.ycombinator.com/item?id=13180911 and marked it off-topic.
See "Building web applications on top of encrypted data using Mylar" https://people.csail.mit.edu/nickolai/papers/popa-mylar-2016...

Mylar ensures
that client-side application code is authentic, even if the
server is malicious.
You don't have an average salary for your experience.

$4,000 * 12 is $48,000. Plus your $20k in purported savings is only $68k.

That's only $100k in gross pay, which is the bare minimum for a developer in SV. Most new grads make more than that.
You don't do backups?
Can you expound on that?
I wish I could upvote this thread 100x. Everyone should have to deal with global competition and everyone competitive should have commiserate compensation. Unfortunately there are barriers to that (informational and transactional).

I also think everyone uncompetitive should get basic income.
I'm guessing by your handle I know who you are :). Ex-Yahoo super chat moderating guy here, which should let you know me.

Wouldn't the upgrade require the accounts to actually login to migrate password? Last I was at Yahoo there was at least 3B junk accounts in UDB. With out knowing details I am guessing that many of the "compromised" accounts fall into that bucket.

I get that membership can't just trash junk accounts but marketing was very aware of them. Paranoids also can't just say a compromised junk account is not a compromise, they are too paranoid for that.

This unfortunately sounds bad PR wise, with little knowledge of actual impact. On the flip side I'm pretty sure I am not on the radar of the state actor since they would more then likely be looking at their own.
Ask HN: Any financially successful Meteor applications out there?
Building web applications on top of encrypted data using Mylar [pdf]
I went from a net worth of <$50k at age 20 to >$150k at 22, while never being particularly frugal at all. Heck, I didn't even have roommates. My monthly spending averaged $4k/m.

NYC, not SF, but the difference isn't huge.

Most people are atrocious with their money by either overspending or under-optimizing.
>Around here those tests seems to be careful to avoid maths

I was required to do mental calculation during the WAIS-IV I did.
Is it possible to add for a way for the user to have a custom CSS file? I really like how Atom provides such great visual customization by just giving the user a less file that they can edit.
Yes. You can be racist against your own race.
According to Consumer Reports the last I checked, State Farm is near the bottom of the pack in customer satisfaction among claimants.
As a sometimes fat runner, I cite myself.

Weight is won or lost in the kitchen. Full stop.

A 1 hour run might burn 500 calories. If you go and eat till you are not hungry, you can easily eat 800 or 900 calories. You are not going to lose much weight at the method.
Webpack has the very useful "chunking" system which is able to figure out common dependencies, and based on how often they are re-used across your app, determine whether they should be bundled separately. It's really good if you're trying to find an optimal balance between the number of files on a page and the cacheability of each one. I haven't seen that feature in Browserify or other module bundlers. Of course, with HTTP/2 server push hopefully a lot of these issues will go away.
Seems like your responsibility was just to get it to the destination you were given. He should have filed a claim against the forwarding service.
The difference between it being certainly a scam vs. not certainly a scam is much more than a pedantic nitpick.
Incumbent firms will always seek to prevent competition. This tax does exactly that. No matter how you slice it this just another in a long list of "happy accidents" that benefit the donor class.
Most insurers actually increase premiums over time regardless of whether you make any claims. In the past they offered longtime customer loyalty discounts but as some point some bean counters looked into consumer psychology and noticed exactly what you're talking about so now it's up every year.
This is an excellent guide, thank you for writing it! Could you talk about where DBA and DUNS numbers fit into the business/incorporated spectrum? If you distribute apps through Apple as a business you have to have a DUNS number.
> Why not apply for a permit and stay on the safe side?

When did Uber obey the law? Why would they start now?

Edit: Apologies for my tone, but Uber has demonstrated quite a few times in the past that they don't have any respect for the law.
Aldi is the way to go. Insanely cheap and without the temptations to dump half your paycheck every time you go. A lot of high quality genetics too.
Meg was before my time. I got to see the aftermath and I heard many of the stories. eBay's success was in spite of Meg Whitman. It was a money printing machine. The first employee was hired to be the full time check casher. In the early days managers and engineers got along - then management gave themselves a ton of options and cut out the engineers. She then hired in a bunch of professional management (Harvard people) and outsourced the engineers to India. That was a disaster so they insourced the Indians to the US. This continued to be a disaster. The Indians are very tribal so not only is there office politics there is also tribal politics. Certain casts will refuse to work with each other. So yeah, pretty toxic.
Personally, I walk to let my thoughts ramble. I run to run past my thoughts. In both cases it's both the journey and destination that counts, but in the case of running, it's a little bit more about the destination for me. I feel it in my whole body for the next 6-12 hours and it feels good. My mind also feels more focused as a side effect.
It's BS but the most effective negotiation tactic in salaries is "I make $X now so I want to make at least $X+Y."
Off topic, but I'm so glad that writing has gotten more concise over the last 40 years.
What's the reason to do that?
I love Portland. I might make more in SF, but I'm already making more than the median SF salary while living in Portland, and my house only cost me $350K or so. The cost of living is starkly lower here, and the city itself is much, much smaller and less hectic -- while still being big enough to have all the things you want and plenty of people if you want to be social. I can't see moving to SF unless I could earn $300K+, and even then it might not be enough to make me jump.
The convoluted wording of legalisms grew up around the necessity to hide from ourselves the violence we intend toward each other. Between depriving a man of one hour from his life and depriving him of his life there exists only a difference of degree. You have done violence to him, consumed his energy. Elaborate euphemisms may conceal your intent to kill, but behind any use of power over another the ultimate assumption remains: "I feed on your energy."

- Addenda to Orders in Council The Emperor Paul Muad'dib
Lots more open source Android apps on f-droid:

https://f-droid.org/
LLC members agreements, like any contract, are expensive to litigate and onerous to read, comprehend and retain. A twelve year old understands share ownership, a concept enshrined in law and precedent after centuries of use. I'm wiling to bet that on balance lawyers make more money off LLC disputes and creation than C-Corp's.
No. The housing market in SV makes renting cheaper than buying.

On an engineer's salary, it is very doable to pay rent and still save up enough to buy an entire house in cash elsewhere in the country.
Uber seems like they were extremely reckless

YES. I live 10 feet away from the garage. I've noticed over the past few months that they've been ramping in typical startup fashion: hockey stick growth.

After reading about Lyft's CEO, a narrative of "nice guys finishing last", I started realizing how unscrupulous Uber is. Sadly, cut-throat businesses win.

I recently took an Uber ride, where the driver was an un-retired man in his 70s. He recently just abandoned his failing dry clean business. This one hits close to home for me, because my parents are approaching their 70s, holding on to a failing dry clean business, too. For me, hardworking people like this, with arguably bad business acumen, are counter example to the notion of "if you're poor, it's because you didn't work hard enough." Before the dry clean business, the Uber driver ran a deli business, but that was a failure, too. No doubt he possesses an entrepreneurial spirit, albeit he probably shouldn't. I can't fault him for not being smarter. He proceeded to tell me about his idea to create a website where people upload images of their face, at different angle, and can get a custom printed 3d figurine, that he would hand paint them. I didn't have the heart to tell him that as someone in the top 1% income bracket of 20-something year olds, who consistently blows money on expensive toys / gadgets / dinners, I would never spend $300 bucks on a custom painted figurine. See, he was an artist before coming to America. He said "I want to be an artist before I die. I was too busy making a living when I came to America".

Uber gave this man a job. That's good. But he's being paid near minimum wage. To achieve that, he has to work 12+ hour days to acquire the bonuses that Uber uses to incentivize their drivers to become addicted. These are the kinds of risk Uber induces on its drivers, customers, and other people on the road. The sad reality is, he's going to be displaced from this minimum wage job by automation, much earlier than people expect. Uber doesn't care. I'm not saying Uber or any private company MUST care. I'm just illustrating how a company's values permeates itself, and precipitates to individuals' livelihoods.

I recently read an article about the unit economics of Uber. It doesn't work out. Uber, in it's current form is based on leveraging free VC money to subsidize and incentivize somewhat artificial demand. It's predatory monopolistic tactics. They won't be able to live up to their unicorn IPO valuation hype. They NEED to expand into other domains. Recently, Uber acquired an A.I. startup, which I think is an indicator of this. Alternatively, they can fix the unit economics equation to be profitable. Autonomous vehicles is the purported answer. This VC and unicorn valuation environment, I believe, is resulting in this kind of hastiness, at the increased risk of human lives.
Biking, swimming, and rowing are all better on the joints than the impact from running.

>P.S. Instead of getting your friends to downvote, how about suggesting an actually-healthy alternative?

Don't complain about downvotes, it makes for boring conversation.
I mean you only have to pay PMI till you have 20% equity, so it's not necessarily so bad.
What went down at Bangalore’s first bot hackathon
I think that whole ridiculous "cultural fit" nonsense is why I ignore jobs in the BA. What on earth do I care if my team listens to the same music that I do? or wants to eat the same food I do? Culture is best when it's infused with all kinds of outside sources. Having this homogeneous hive-mind isn't really good for any business. But trying to explain that to your average 20-something is typically not that easy.
It'd be hilarious if one of my co-workers tried to break out the ole Roberts Rules at a typical meeting.... Meetings are bad enough.
Ask HN: What percentage of teams do daily standups, do you think?
I currently work on a team doing blue sky research. We do daily standups. It's the lamest thing ever because everyone always wants to look like they know what they're doing so they always choose tasks that they already know how to do, so that they appear competent during the standup. No innovation actually ever gets done.

The thing is this seems to be fairly common, I see it a lot in other blue sky groups. Who also get nothing done...
This story has been submitted a few times already. Here's the one that had the most discussion:

https://news.ycombinator.com/item?id=13177971
Evernote's New Privacy Policy Allows Its Employees to Access Your 'Ideas'
That sounds like exactly the sort of magic they are talking about. I'll take predictable over magic any day, in this case it sounds like the sort of decision that's best left to people anyway.
Is it possible to first open a file, and then easily open the folder that contains the file?
It takes hours of running to offset a couple of beers worth of calories. If you're eating unhealthy and drinking a lot, there is no amount of running to undo it.
Nope, Running Isn't Going to Shorten Your Lifespan (2014)
> The reviewers receive no benefits or compensation from the journal for their time/effort.

Some of the ACM venues give five dollar coffee mugs to reviewers if they go to the actual conference. I wonder how much of a discount that works out to per hour of review time. :)
Why do you assume the password would be leaked eventually? Usually hashes are leaked (as in this case), not passwords.
I've run into off-by-one issues in password length requirements in the past, so if 32 characters is the stated maximum it might only be capable of 31 on the validation side.
Better technology through content marketing.
You need someone involved who is willing and able to cut through the bullshit and call people out for doing that then. Daily standups quickly devolve to status updates, when the true purpose is to identify blockers and dependencies before they become problems.

One quick trick is to eliminate the "what did you do yesterday" question. It doesn't really matter. What matters is if each person is on track with the work they committed to, and people aren't being lazy.

And also, if people are basically taking the easy way out, sounds like you have a really bad project manager/product owner who isn't keeping tabs on things.
Wonder what would happen if author filed a small claim in his local jurisdiction? (Against eBay)

I tend to think eBay would not even respond and lose by default
The lawsuit was a last resort. All of the organisations doing GPL compliance work in recent years have been after compliance first, following principles like these, even before those principles were written down:

https://sfconservancy.org/copyleft-compliance/principles.htm...
https://www.w3.org/Bugs/Public/show_bug.cgi?id=25345

It looks like they intentionally don't do that in order to prevent the illusion of security.
This URL gives me a 404 error (page does not exist).
I doubt the lawyers made much money off the creation of Matasano, since we 1-clicked it off an order form for Delaware LLCs offline.
Let's say you were on security on and found it on the network. Would you somehow be bound by a gag order about it, since you would never have seen said gag order?
Size of Wikipedia
bcrypt(md5(password)) allow the existing password hash to be reused.
Ask HN: Why do refugees in Sweden attack reporters going into the  no-go zones?
I second this request for discussion. Over the past 7 years we've accumulated contractors working regularly from 10+ countries. The complexities of sending/receiving payment with contractor status (and other employment ambiguities) are significant.
Movements of the Cold War: How the Soviets Revolutionized Wristwatches
You could always include a URL in your claim, to youtube or something else...
Unfortunately the devil will be in the details. If the sole prop has nothing and no obligations, you might be able to just incorporate. But if you have any contracts in place, or customers, or contractors etc, that requires some work - not difficult, but doing the right thing (eg. contract reassignment) is situation specific.

Personally I'd look for a solo small-business attorney, they should be able to do this for cheap. Definitely not a brand name startup law firm :)
Or just find a company that pays remote engineers SV salaries. They exist.
If they do not know how the adversaries got in, how do they know the adversaries are not still in to some degree?
Since forever. The human body is very efficient.

You have to run about 1 mile to burn 100 calories. Skipping a 1000 calorie lunch is the equivalent of running 10 miles when it comes to weight loss.

Put another way, without a diet change, you would have to run about 35 miles to lose just 1 pound of fat.

Running is good for the heart and lungs. For weight loss, not so much.
Can you give an example? It seems to work great for words at least in the same file.
Regardimg [0]: The entire open source industy. Voluntary fire brigades. And so on.

I'm surprised you ignore all those so easily.
Vote for the person you would with Plurality, plus everyone you like better. That's an easy approximation.

A formal statement is here.

https://sites.google.com/a/electology.org/www/threshold
it seems we nearly agree 100%. the comment about a crash/recession was because it seemed like you were interested in joining the company but were concerned about the repercussions of a bubble.

if you have coffee with the founder, instead of focusing on macro risks, perhaps focus on OD's models for risk, inventory, and cash flow. because they can cherry pick geographies, it's actually easier for them to grow now during a recession than when they're much larger and need more transactions to move the needle.

if you believe the models are sound, then focus on whether you believe the team can adhere to these models, that is whether they can resist the temptation to grow at all costs -- and thus place riskier bets.

we also agree OD could stop short of a marketplace and remain an attractive company. we only diverge on their marketplace ambitions.
It's possible that a contact of yours was compromised, and that contact had many contacts in common with you. And then they spoofed your address.
Why the panic? It's not like the FBI might try and throw an election or anything
Sorry, couldn't look it up very well from my phone. I'm fairly certain you're referring to Simon Marlow's "Fighting Spam with Haskell" from ICFP 2015.

Video: https://www.youtube.com/watch?v=IOEGfnjh92o

Abstract: http://cufp.org/2015/fighting-spam-with-haskell-at-facebook....
With the way the execs of Yahoo handled the 2015 back door, there is a likelihood that the 1 billion + 500 million compromised accounts were due to an exec decision that no one knew about. That individual or group of individuals may not be at Yahoo, and kept everything quiet. Or, the individuals may not even know that they did it!
Yeah that makes sense. I would say that everyone should know enough vi to get by, even if it's not their editor of choice, although I suppose there's _usually_ nano or pico.

After I posted my previous response I realized that I actually know a few emacs keybindings thanks to tmux, even though I've never used the editor. I use a lightly modified vim on my laptop, but I think it's best to learn enough of the defaults (of any application/utility) to speed up your workflow on a new host.
Diet Coke and Mentos eruption
This is an old story that was discussed extensively when it was new (in October):

https://news.ycombinator.com/item?id=12637126
They will run you over because you were classified by the AI as fog.
Several purposes:

- get a SIRET code [1] (id of your business, needed to make invoices)

- declare your income to pay your income tax and your social taxes

- be eligible to the national health insurance

- increment your rights for the social pension

- update the national statistics [2]

- be eligible to the ACCRE [3] (tax reduction during 1 year)

- be eligible to the ARCE [4] (a capital equals to 45% of your unemployment indemnities, from the social taxes you paid from your previous jobs)

And probably other things.

[1] https://en.wikipedia.org/wiki/SIRET_code

[2] https://en.wikipedia.org/wiki/Institut_national_de_la_statis...

[3] https://www.service-public.fr/particuliers/vosdroits/F11677

[4] https://www.service-public.fr/particuliers/vosdroits/F15252
Funny, but it is actually the CIA that is attempting to throw the election. Proof is needed to change this opinion though...
> The right way to solve this is to stop sharing a JS environment with libraries you don't trust. I don't know how you can protect yourself from malicious extensions, but you can stop pulling in a kitchen sink of JS libraries by being super selective about what you pull in from NPM. (Which you really should be doing anyway.)

Well that's just the thing; it's far more likely that a user would encounter either a malicious script on the web, a virus that modifies the browser environment, or a browser that doesn't implement the Crypto API. Relying on the Crypto API for security is irresponsible in a production environment.
the managerial overhead is not worth the difference (remember the professional fees required to run all this stuff). if my company made more revenue, i'd probably feel differently.

at the end of the day it comes down to how much revenue vs. overhead vs. capital structure you feel comfortable with.
I've been referred to this paper before when asking this question.

Whilst it does discuss that Amazon used TLA+ in nontrivial circumstances, it's still a long mental leap to me to get to "TLA+ for AWS S3 looked like this, and this is the sort of bug it helped quash".

It'd be great to see some of that sort of thing.
You are describing a first preimage attack. There have not been any computable first (or second) preimage attacks on md5.

https://stackoverflow.com/questions/822638/does-any-publishe...

There are collision attacks, but that is not relevant for password cracking.
Also, i don't understand it because I'm not a neuroscientist but are the brain networks they're talking about in the abstract of the research related to conscious thinking? I find these kind of articles so frustrating, the articles themselves imply these big dubious claims, then you try to read the research and you don't know what the fk they're talking about.
https://news.ycombinator.com/item?id=13177318
Fuck Yahoo, AOL and Verizon.
The New Microsoft Translator
> Once you get a license you never get retested for vision or driving ability

If you are in California, you will occasionally be required to go to an office in-person for DL renewals where your vision will be tested as part of the process. Many insurance companies also incentivize older drivers taking "mature driver improvement" courses every few years as a refresher. Then of course there's things like traffic school if you are driving and receive a moving traffic violation. This seems straightforward...

Also, I might note this because I went through this process with my father... when your vision is bad enough to fail the DMV's criteria of 20/40 corrected vision with either or both eyes, they have a whole load of things they make you do. With my father he could theoretically hit the 20/40 vision requirement but made mistakes due to scarring from surgeries that blurred vision in only certain areas. He had to get documentation from his doctor as to what kind of driving he could potentially do (e.g. no night driving), got additional mirrors installed in the car, went through a special drive test (after he did his own refresher driving class voluntarily), and had a whole load of restrictions added to his already limited term license (e.g. he had to get a new license after only a couple of years, and every renewal would require a drive test). In the end, it was such a hassle despite zero functional issues driving that he ended up giving up his DL at the last renewal. If his vision had declined significantly from there, DMV would have immediately revoked the license and suspended his ability to receive a new one.

So, sure, seniors and teens alike cause a lot of accidents, but we're not exactly lacking on trying to reduce problems.