skysight-inc/HackerNews huggingface dataset:
> But what happens when you lose that security token?

Pretty simple: you use your backup key to revoke the lost key. This is possible with e.g. Lastpass and Google. Of course, if the attacker logs in before you revoke the key, you are hosed, but the same would be true in your car analogy.

> i.e. "Honey! I can't find the car keys, have you seen them?"

With car keys, too, you have a backup key. Arguably, the physical car keys are easier to copy.

> I would be in favor of an implantable RFID chip or whatever 'better' tech comes around.

Nothing new, see this article from 2004 [1]. As you can read in the article, its first headline was even in 2001 (to put in perspective this is 15 to 16 years ago). Company's name is VeriChip.

The problem is that the signal can be intercepted (AFAIK it doesn't use a form of OTP), and the key cannot be easily replaced/revoked. A YubiKey doesn't suffer from this issue. The issue a YubiKey has is that it can be easier lost than an implant.

The YubiKey Neo ('large' version, not the 'laptop' version) supports NFC.

> We desperately need _BETTER_ 2FA.

Why? How?

[1] http://www.wnd.com/2004/04/24179/
CA would be the 7th largest economy in the world if it were its own country. NY would be 11th. But yes, let's just pretend like they don't matter when it comes to the US as a whole.
What Is a Framework?
Your Pages/Day should probably be Pages/Month. You are solving a very very time consuming problem to fix.
I imagine this Razer "laptop" will have a price-tag of at least $5,000 and will have a battery life of less than a movie. This is a dogshow hardware to give to a few enthusiasts, industry people, and trade floors to build up the brand; it's more of a "we're enthusiasts too" brand pitch than it is a product.
I'm American, and I'd definitely agree with that assessment. I think a lot of people in the US would probably refuse to vote for a self-described atheist on principle regardless of any of the other characteristics and views of the candidate. Things have been changing for a while, but I don't think we're there yet.
> The money raised is consistent with the kind of site he had envisioned, the issue is that there isn't a market for it.

It seems that it wasn't necessarily too much money but too much too soon. It's like Tumblr redux: the product was (intentionally or not) built to put ads in front of lots of loyal eyes, but the founder refuses. In that sense, they lack real product-market fit.
> In Nuclear Throne you can get shot up off screen, and lose any amount of your HP in a second

I have the same problem with it. I mostly play local co-op and it's even worse because you often at the edge of the screen.

From similar games I can recommend Rampage Knights, although there aren't many weapon/item synergies it's got pretty fair and fun combat.
Thanks for the suggestions. Regarding your questions:

I don't even know what I'm looking for. So, on some level I'm looking to begin addressing my broad ignorance of human history, and then see where that takes me.
Honest non-nvestor question: How is it that investors valuate and front hundreds of millions into companies with a functioning app, a user base and no clear path on how to monetize? I saw this recently with yik yak as well and it confuses me.
CAR-T-cell therapy is very promising but the salient quote here is this:

"You need a good target, and that's probably the biggest obstacle to this kind of therapy," Cohen said. "We found a good target in leukemias and lymphomas. In solid tumors, it's been a bit more evasive."

The target protein has to be exclusively associated with the type of cancer cell that the treatment is designed to kill. If it occurs in other types of cells, the results could be disastrous. Even successful immunotherapy treatments can destroy healthy cells, and researchers concede that achieving pinpoint accuracy remains a major challenge. Unfortunately, there have already been cases in which CAR-T patients have died.

This is always the problem. It's always hard to have pinpoint accuracy in biology, and hopefully we'll get better at it but it's a hard slog.

Also remember that while this is promising, remember that this approach is only going to work with surface-available targets. They won't work looking at cell-internal targets, which is obviously where a lot of cancer has gone wrong.
Right on schedule!

Time to finally switch from ircII?? /s
The more I am studying React + Redux, the more it becomes apparent to me that it's over engineered for an individual and even a small team. It feels like the Java Swing days where verbosity and architectural opinion dominates all in the name of cross-platformity.

Another minus is that you no longer use the existing conventions that stood the test of time, HTML and CSS. It's now JSX and you have to write boilerplate JS code just to show a simple hello world example. On top of that it poses barriers for designers who only had to worry about how the HTML/CSS looks, now additional work has to go into splitting everything into myriad logical pieces which really have no impact on the overall productivity or quality. And that's only for the React view side, the real beast is Redux. That simple grid table you could get away with using jqGrid is now a 10 week job involving multiple engineers.

I'm curious to know if anyone found any enlightment working with Vue.js and whether something like Redux makes sense to hold states of the app or if they got away with it.
These situations are awkward because any other resolution would've made GNU look like an aggressor. This response acknowledges that GNU isn't a fan of the maintainer's choice, but all other outcomes are sub-par, and they don't want to fork or engage this topic further. The maintainer wins by default.
What I really want is not USB-C but rather a Yubikey 4 the supports NFC. None of the sticks support all features, is quite vexing. Now I have to carry different sticks for different reasons.
Seems like a good call by rms to drop the matter instead of insisting on a permanent feud over a project that GNU is apparently not very interested in.
The reason is "exposure". Big companies want someone whom they believe has experience, and whom they can hold liable if there are problems. It's not the company spending the money - it is a collection of corporate people spending a budget allotted to them, who want a promotion.
I'm working for a small (<50 employees) company, and I'm pretty lucky to have a management that cares about this.

Stuff we've got:

- weekly all hands meetings where people talk about what makes them excited
- lots of non-work-related chat rooms
- 2-3 meetup opportunities per year
- culture of quick ad-hoc synchronous meetings

We also had a board game night via Tabletop Simulator (http://berserk-games.com/tabletop-simulator/)

It also helps massively if the company is remote-first. We've got a central office where several employees are based but you never feel like you're missing out if you're based elsewhere.
The attitude that comes across in this message... this is the problem with GNU and that whole sector of the OSS community that seems to follow the 'Stallman' way.

"you aren't allowed your freedom because <incomprehensible jibberish>" from people who advocate software freedom is a total headfuck
nothing changed. instead of a racist white old billionaire buying a candidate, they just decided to run themselves.
I suppose that what surprise me is the contradiction between the optimism about the future of HN crowd and their pessimism in this issue, as if nothing could be done (in the case that you think something should be done, of course).

The inequality thing is far from unavoidable. In a democracy, at least, a society perceived as more fair for the majority should be attainable.
Show HN: JQuery Multiple Range Interface
One caveat. A married couple where the other person doesn't work can still contribute to a traditional IRA and the couple gets to deduct it on their taxes. The limit for this is 186k and it is called a spousal IRA.
Worth mentioning that it seems that the USB-C OpenPGP app may support RSA 4096. I'd love to upgrade my yubikey ssh key from RSA 2048 -> 4096.

Currently my YubiKey Neo only supports RSA 2048 as it's a hardware limitation of the NXP A700x chip used inside.

[0] https://www.yubico.com/2015/02/big-debate-2048-4096-yubicos-...
This might be when calling something a notebook instead of a laptop and making a big deal about the name is worthwhile.

I can't really imagine trying to use this on my lap.
Smartphones are a very high target for everyone, from the FBI on down, and their attack surface is very large. So there is always (and will likely always be) security vulnerabilities in any smartphone, regardless of the brand/vendor/etc. These can be gotten at remotely because these devices have WiFI, bluetooth, etc in them, making them much more accessible remotely.

Yubikey's and the like are a high target item, but probably only for government-level adversaries, in general you have to be pretty well funded to attack these things, plus their attack surface is very very small, and most all of the attack surface is physical (i.e. you have to physically get the yubikey device to attempt any hacks on it). These devices generally only have a USB port, so to get at them remotely you have to first get remote access to the device(computer) they are plugged into, making it even harder of a target.

That's the general overview. Specifically, SMS received tokens are not secure (because of the SMS part not being secure). NIST recently declared SMS based 2FA to be a bad idea, for instance.
> Empire collapse (has happened with every single empire in history - what makes the U.S. exempt?)

The US isn't anything like traditional historical empires for one. It hasn't built its prosperity on invading other nations to annex them and plunder their national wealth, which is traditionally how empires temporarily sustain themselves. The US built its immense wealth today (just under half of all private wealth on earth is owned by Americans) overwhelmingly through invention, engineering, industry, trade, manufacturing, radical productivity gains spanning two centuries, and lots of immigration. Historical empires have always run out of lands to conquer and wealth to steal from other nations, and then they collapse as they fail to placate their own people or get defeated militarily by the lands they previously conquered.

The USD global reserve is a vulnerability? That's one potential issue. However, the US was the world's largest economy - by about 1890 - long before it had the global reserve currency. Japan has a disastrous situation on its hands economically, and a currency they're very aggressively abusing, and yet they're still the world's #3 economy with a substantial GDP per capita. The notion the US would just wilt without the global reserve currency, is absurd.

What lands has the US annexed that it's going to get pushed out of (and lose the plunder/tax from said nations)? What nation/s is the US stealing all of its prosperity from, such that that is going to end soon? Are we taking $5 trillion annually from Vietnam and Mexico (it's actually the other way around given the vast US trade deficit, we're sending hundreds of billions to the rest of the world)?

Further, the US was the first Capitalist nation. From day one it was heavily built on the principles of the free market and trade, not invasion and plunder. (and before anyone chimes in to loudly proclaim that the US has never been a perfect Capitalist nation: no kidding, such wasn't implied) Otherwise there would be no Canada, at some point in the last century we would have invaded for their natural resources. The US also would have pulled a Russia, and taken Japan and parts of Europe, using its rather wild military & resource advantage at the end of WW2.
But you can extend it. I know that recently vim has added python support, but people used vim script to do amazing things, and look at the OS we know as emacs.
Not that I disagree with you, but Tumblr, among others, disproves that money can be made on sites that focus on the "low effort" content.
After seeing this I installed AdNauseam. Google just gave them the best kind of marketing possible.
Well they do support Thunderbolt 3 too, so they're not just USB.
Defraud: illegally obtain money from (someone) by deception.

That does not describe the situation in the least. AdNauseum is more akin mailing junk back to junk mailers using their paid postage. You show me an ad, which I did not ask to see? Fine, I'll click it, automatically. Enjoy.
Thanks for mentioning that aha. So true.
I really like hand drawn graphs in articles like these, but couldn't say whether it's because they're drawn by hand, or whether computer generated graphs are often much harder to get "right".
Social security is not a savings account. It's not "you paying for future you". It's you paying for others now, and later, others will be paying for you.
The chip in my Yubikey Neo appears to be a NXP A700x[0][1]. The datasheet so short it's almost useless, but it's at least something.

[0] https://www.yubico.com/2015/02/big-debate-2048-4096-yubicos-...

[1] http://www.nxp.com/documents/short_data_sheet/A700X_FAM_SDS....
> Who has more power over a longer period of time: Bill Clinton or Bill Gates? I argue Gates.

Right, but Clinton wasn't a CEO of a tech company before he was president. A better analogy would be who would have had more period over a longer period of time, Bill Gates as he is now, or Bill Gates if he had become president after stepping down as CEO of Microsoft?
> I wonder what the best way of coordination would be.

They would have to use a software to divide the search tree between them and collect their judgements.

I'm wondering how would a mixed team of AIs and humans fare? For example, a team of 1 AI and 4 humans against a team of similar setup. Humans could be assigned to judge parts of the search tree and their inputs aggregated by the AI.
Externally, it's mainly marketing: the stated mission of a nonprofit with the equity and operating ability of a C-Corp (and the taxation that goes along with the latter).

Internally, being a PBC adds "protection" of the mission in two ways:

1. Directors are protected from shareholders (e.g., VCs). Since shareholders are not primary to stakeholders in a PBC, directors can make business decisions that may not be in the "best interests" of shareholders and be protected from lawsuits.

2. Shareholders are protected from directors doing the same. Shareholders are able to demand external auditing of the mission and bring lawsuits alleging breach of the mission.

There are a ton of details depending on the state of incorporation.
Sam here, using Python 3 it took me weeks to get this done in a big company that does not focus on software development
I remember reading that there is a correlation with height and longevity [1]. He is only 5' tall. His height is probably easier on his heart.

[1]: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC1071721/
Wikipedia summarizes fruad as "In law, fraud is deliberate deception to secure unfair or unlawful gain, or to deprive a victim of a legal right." The user does not unlawfully gain and the ad provider doesn't have a legal right that's being infringed on here.

Some legal resource I found online says that in the US fraud requires: (1) a false statement of a material fact, (2) knowledge on the part of the defendant that the statement is untrue, (3) intent on the part of the defendant to deceive the alleged victim, (4) justifiable reliance by the alleged victim on the statement, and (5) injury to the alleged victim as a result. [1] Note that "material fact" here is a legally significant phrase, and implies a written agreement or some other mutually agreed to terms that establish the expectation - which never happened between you and the ad provider.

No matter how you slice it the user of ad nauseum is not committing fraud. This misinformation needs to stop.

[1] http://legal-dictionary.thefreedictionary.com/fraud
Walmart has acquired a Zappos competitor to boost Jet.com’s shoe business
I can't tell you (yet) exactly what interests me. I'm definitely concerned about my poor mental model of human civilization, particularly pre-classical Greece. I'm looking to start with something of an overview and then figure out what rabbit holes make sense!
> Social Security is an authoritarian play, or a power play

A more charitable view would be that social security is an attempt to provide a minimum standard of living for all seniors and the disabled. How do you propose that society cares for these people, particularly the disabled, if it's not done at a societal level?

Retirement also benefits the young/middle aged by ensuring jobs open up.
Show HN: Halfchess – Twenty20 of the chess world (apps)
There is also the mega-backdoor Roth, but your 401k plan needs to support it.
I really with that browsers didn't autocomplete ever. I've had instances where they will happily auto-complete my entire credit card number. Usually, they'll only memorize the first 4 digits, but sometimes they memorize the entire thing.
obviously alabama and wisconsin need their votes to count much more than california or new york. rednecks deserve their voice to be heard 10x more than well educated tolerant people on the coasts.
AFAIK, about 40% of Firefox users don't have any add-ons.
YubiKey 4 supports 4096-bit RSA. But it's not USB-C.
The Ultimate Guide to Using Influencer Marketing
Engineers create flexible printed circuits
There's always some way to get around this kind of thing. If nothing else you could start a C corp and sell off the "profitable division" of the PBC to the C corp, etc.
Firefox doesn't exhibit this behavior, but the site doesn't specifically state which browsers this affects.
A phishing page can simply imitate the 2FA step in the login process and ask for the OTP to be entered, and then use it for its own login attempt. With U2F, the site basically authenticates itself as well, so a third-party phishing page wouldn't get anywhere.
Hehe; no worries. You do make a compelling case in the post.
I signed up to Unwaffle a few days ago and hadn't had the time to figure it out, yet.

Looks great, though!
I've been thinking about 2 as a potential path forward for journalists/journalism. Is there a reason to continue the monolithic paper over directly funding individual journalists?

I think there's a cool idea in a platform designed like this... somewhere in between Kickstarter, Patreon, and NPR, but with a whole bunch of tools for news consumers to discover, read, and support both journalists and stories they're interested in. Things like supporting and discovering topics like "local region politics", "travel", or "technology", while allowing journalists to describe their backgrounds, political leanings, etc, might be a way of addressing trust and transparency in journalism and journalistic leanings while also allowing a range of opinions and perspectives on one platform, rather than being driven solely by editorial control.
How ironic that Windows is the only major platform that doesn't try to force its way between you and your computer. Still, I bet someone inside MS is dreaming up plans to install a toll booth on Windows eventually.
For a suprise: compare Dem. Rep. Congo to Alaska.
You can even generalize that statement to "If you don't think about the social impact of what you do then you're being irresponsible."
This is why I don't like autofill in web forms
> The climate change consequences big enough to cause a long-term economic malaise are far enough out to not affect most of today's workers.

Source?
You're trying to use Google, Amazon, Facebook, as an example of a company that has no external customers and takes no risk when deploying untested features???

You must be kidding.
A classroom that knows when you are bored
Ah you're right, I went in a bit later than the start of the year, looks like it took a dive a bit and then went back up. So I'm up ~20% following the S&P500, just not for the full calendar year.
Wow, this seems like such an obvious attack vector that I just assumed it was somehow mitigated (somewhere, magically, I suppose). Does it even require the user to press the Submit button, i.e. could the site's JS trigger the POST request after the event of the autofill?
I do wonder if that could be mimicked by rendering at 4K and antialiasing down to 1080. After all, if we don't notice in live video which is naturally antialiased, it would follow that we wouldn't notice in antialiased games.
It might be just you... :-/
In their infinite wisdom, engineers replaced a large number of incompatible, different looking cables (HDMI, USB, power, etc) with a ton of incompatible, identical looking cables.

At least in the past it was easy to eyeball the connectors and pick the right cable.
Right, but the reason it was set to 8 and not 4, 7 or 6 or 10 is that this is a "natural" (using the word in quotes because it isn't quite so) balancing point that came to be understood over centuries, way before these laws were passed. The numbers were not pulled out of thin air.

I don't know the answer to this. It'd be interesting to understand how long the work day was in ancient times. Egypt, Greece, Rome, etc.

Even with slavery, there had to be a forced optimization of labor hours simply due to the fact that people would get sick or even die if subjected to unreasonable schedules.

The world somehow seems to have achieved labor balance at eight hours per day. It's interesting that this seems to be the case in most nations and cultures on the planet. That's what I mean by it being the "natural" work day.

To force something different at a national level (less or more hours) would put that particular nation at odds with other nations. It would also have detrimental effects at all levels, from the individual to the nation itself.

I insist these changes are possible but not through forced legislative approaches. This is where I think, in the long term, robotics and AI will have a positive effect on society. If less people can produce more in less time and we can figure out how to cope with the societal changes this will spur, we could be on a path where people will be able to exist with much less (in financial terms) yet have good lives and achieve balance.

I can almost see an evolutionary path towards what today looks like utopia. I just don't know how to get there. Being in robotics myself I always worry about what it means to make machines that can displace humans. Not sure where the answers on that might lie.
MongoDB and Ransomware
SANS HolidayHack 2016 Full Writeup
I thought for sure this was an exaggeration but you are absolutely correct. I couldn't find anything in two minutes either.

I have Chromium installed on a my Ubuntu desktop but I think I had to add a PPA to get it.
Ideally the same people whose taxes Reagan lowered https://upload.wikimedia.org/wikipedia/commons/8/8c/Historic...
Sure, I totally understand that! My advice is just to work on a really, really small project. Something that you could finish in a couple weeks, then you can bounce to the next thing with no guilt.
Not a lawyer. Itemize the list and costs. Gather up any emails, letters, contracts, agreements, etc.

You can potentially pursue them in small claims court (limits may be higher then you think), where the costs are relatively small, or talk to a lawyer, an initial consultation may be free.

You can also send a letter to the company, saying that you relied on that offer of a job for a specific period and suffered financial damage (detailing it) because of there misrepresentation or omission of material facts, and requesting they pay such and such an amount to compensate you.

Finally your state labor relation board or whatever may agree you have some claim on your one day's wages.