skysight-inc/HackerNews huggingface dataset:
> Assuming attacker has root while the customer is logging in. But what if the attacker only has access to the file system (e.g. in the case of a stolen phone, or a broken jail/sandbox)? In that case, requiring a password/PIN to unlock the stored credentials does provide some protection to the user.

Has such a case ever occurred? I can't think of one. Of course, if you have filesystem access you can replace the application on disk, patch it to steal the password easily.

> Ultimately, the answer is very simple: if you can't store credentials securely, then don't store them at all!

Many users want it anyways, and it's secure enough that unless you have remote attacks or the security level of Windows desktops with people downloading executables and running them constantly, it's unlikely to be an issue.

It's a trade-off, of course, but I don't think that means it's an unreasonable one to make.

Of course, you should probably go ahead and tell this to browser vendors. Script kiddies are running around selling accounts because of how they store passwords - encrypted, but in a total half measure way. Personally, I don't think it's reasonable to hold D-Link liable for a trade-off that even the biggest companies in tech make all the time. And one which is much more costly in those cases too!

There's just no secure way to do this on today's computers, we must rely on the security of the platform here. If storing passwords in this way is a problem, it's a platform security issue or a user issue, not an application issue.

TPMs have the potential to solve this, but at some scary costs which may adversely impact security in other ways, like preventing reverse engineering.
Forged Alliance Forever is about as close to the TA experience as you will get - coming from another hardcore TA fan.

It's of course not quite the same, but the community work on SC:FA has really made the game quite polished.

I too am still waiting on another modern TA-like flow economy game, but supreme commander is still by far the closest and best there is. In some ways it's better.

Remember Supcom 2 is in no way affiliated with the TA franchise like supcom 1 (and expac) was. It's an entirely different (and bad) game imo.

https://www.faforever.com/
Wow, I am definitely the target for this. I often have tmux panes watching fast-scrolling log files while trying to continue to work in another pane. I've been trying to tweak tmux to perform better, but it really is the rendering speed that's holding it back.

The lack of scrollback/tabs/etc doesn't bother me at all - I use tmux for this exactly as suggested.

Thank you for this!
What do you think about the use of technologies like Kafka which enable what is effectively an event sourced architecture without all of the buzzwords? Not everyone uses it that way, obviously, but there is plenty of discussion about it.
ODNI Statement on Russian Activities and Intentions in Recent U.S. Elections
a slew of headsets from major PC vendors (HP, Dell, Lenovo, etc.) starting at $300.

Wonder if that will help or hinder VR. Personally I think the Vive is just about the bare minimum needed for VR to barely be acceptable. If peoples first impression of VR is something less than that I doubt they'll be impressed enough to actually use VR for more than 15 minutes over the first 2 weeks after purchase.
As a trained writer but not a journalist, I feel there are two noteworthy points to consider in this rebuttal.

The first is what set me off so terribly at Avi Selk, formerly of the Dallas Morning News, and now at the Washington Post, based on his framing of the Ahmed Mohamed "Clock Boy" story at first [1]. Here's the admission:

>I simplified Pieter's story to fit the narrative I thought I saw. I was blinded by what I thought sounded like a good story.

...which is an admission I think is about on par with Stephen Glass-level of integrity, and should be a footer on any resume sent out to potential editors in the future, enjoined with the second:

>Pieter implied in this comment that I didn't write the truth and that I am embody what is wrong with journalism today. He compared my story to "fake news." I think this is a stretch.

...which basically shows there is an integral lack of self-critical thinking, because the first quote is essentially an admission that the second quote can't bear to live with.

Again, I look at these situations as an outsider; I am grateful to not be involved in the business of "reporting" or "journalism" because in modern times I think they have very little inherent credibility prima face. Major news trends and outlets are running with emotionally charged, "I feel this is the story" which isn't journalism. I know when I'm writing an emotionally based hypothesis and try to frame it as such - unfounded speculation, idle musings...

This back and forth is unfortunate but enlightening in how there are a whole lot more details to a story than what one person believes is "the right story" by way of writing. I suppose that's why "marketing" and "journalism" are kind of sort of screwing each other without second thought.

[1] https://artplusmarketing.com/the-clock-boy-critical-thinking...
If kernel uses some kind of callbaks internally, why this callback API isn't directly presented to userspace API? Callback API is easier to use than select. I remember emulating callback API on top of select and if kernel emulating select on top of callbacks, it seems pretty weird.
> (that gets opened everytime)

If I were an editor, I would simply blackhole all personal mails which include tracking pixels.
Run some kind of a brick and mortar: a place to relax.
eg: Float tanks, hot-cold spa/sauna house, kava/kratom bar, ASMR type stuff, meditation, massages. Anything which has been shown to help people relax.
I want to be a Lion Tamer.
I haven't quit altogether, but I have left my job every 18 months or so to take a few months off. Spent 3 months in Europe this past time and now just starting up a new job search. When working I save more than enough money to cover the cost of the months without work.

So far it's provided a very relaxing pace of life giving me a nice break from the office grind every time I start to get fed up with it.

I figure sooner or later it will get hard to find jobs with a work history like that, but we'll see how this round goes.
Why do you feel that people are primed to expect a ".io" in a gaming context to link to a multiplayer game?
While philosophically time is invaluable, I bet people would rather spend their time earning money if they don't have other options.
Nice, but:

thread 'pty reader' panicked at 'index out of bounds: the len is 24 but the index is 24', /buildslave/rust-buildbot/slave/nightly-dist-rustc-linux/build/src/libcollections/vec.rs:1371

or

thread 'pty reader' panicked at 'cursor fell off grid', src/term/mod.rs:634
>Communication is a mental process, transportation is not, so they're not really comparable areas of change.

Transportation changes the psychology of individuals and the social dynamics. It affects mental processes, so yes, they are comparable.

> The point I'm getting at is that remote work partisans often have a over-simplified model that misses the benefits of in-person presence. Human beings have a lot of support for communicating with each other in-person, verbally, non-verbally, unintentionally, etc. which often doesn't translate well to remote work scenarios.

Fair enough. I agree with that statement, though I still strongly prefer remote work for myself. Some other thoughts:

1. No technology is going to completely replace in-person presence. Rather than trying to work around it, one should be looking for what remote work enables that cannot be done with in-person presence.

2. Philosophical questions about worth has a lot to do with this topic, even if it does not seem like it to you. There is a bias towards in-person work because there is a conflation and confusion on what work is about, and what communication is about.

3. The same with meditation. The ground state in which one can see a lot of narratives and hangups clearly also reveals a lot of weird things underpinning a lot of people's motives for working onsite or working remotely. However, I don't expect this to be convincing to you or anyone else. It is something to be experienced rather than read about.

Thanks for engaging, it's been fun chatting.
And yet they don't offer wireless charging.
What is your experience with doing schema upgrades across many databases? Is it usually possible to break up schema changes in small pieces, so that it works across multiple versions of your software?
Or death? That is a bit dramatic...
Untold Benefits of a Software Blog
Renewing Medium's focus [including laying off 1/3 of staff]
But most people aren't buying an iPhone 7 and a MacBook at the same time, and Apple only had one laptop with USB-C ports until a month after the iPhone's release.

An iPhone 7 buyer is far more likely to find a USB-A port to plug into. Your idea would be to make the masses buy a dongle, instead of the minority who own brand new laptops.
Good luck charging your phone wirelessly
Would love to hear about your experience and why CQRS/ES failed those projects, and what type of technical complexities it introduced.
>"Tech workers today are doing alright. We make six-figure salaries, have our health care paid for, and, because we are in demand at them moment, are frequently pampered by our employers."

You may and I may, but the vast majority of tech workers do not make six-figure salaries. Ironically, you may be insulated from that fact due to limited geographic mobility in terms of professional life.
if you use TS, you don't really need Babel at all.

However, if you don't (I used TS, it was great, but I had some weird issues so I moved back to JS), Babel is awesome!

I just use Babel (with gulp - backend or webpack - frontend) and use just one preset - babel-preset-latest and never worry about ES(x).

Not because ES(x) is not important, but because if you keep reading more and more features, you'll get stuck on just those. ES(x) should be more natural...

As an example, a function in ES5 would be along the lines of

function () { //your_stuff_here }

but in ES6 it's more like

() => { //your_stuff_here }

which is a lot less typing.

Also, I'd advice you to use ESlint from the very beginning as it helps you maintain a good coding style from the start.
Try using space bar
Recent html5 multi-player games have used .io e.g. slither.io
Probably not, but Netflix has so many shows now that it's kind of nice to get reminders about certain content. I had totally forgotten about Macro Polo.
Buzzfeed analysis: https://www.buzzfeed.com/charliewarzel/when-you-launch-your-...
Sounds fun. How long have you been sailing? Where did you learn how to sail? Is that what you plan on doing forever or is this a temporary excursion?
They make billions off gaming...
If it was a fair salary. A lot of places try to pay low and give shares for payout in the future. Many young and techie people go for that if they are enthusiastic about the idea.
>If you don't agree, the civil suit you lose will convince you.

There you go. This is how you deal with the trajedy of the commons, punish the overgrazers. Industries that neglect civic responsibility get regulated. Particularly bad actors get punished.
Is consciousness research on your radar?

What would make you say, "Wow, that's some consciousness research I want to fund!"?
Nice Jeep, what was the total cost to have it configured like that?
Personally, I can't do without Tree Style Tabs: https://addons.mozilla.org/en-US/firefox/addon/tree-style-ta...
Notes;

1. Serving from github still shares the tracking information. It can be argued that github is better than cloudflare/facebook, however bear in mind github has politically motivated staff. Long cache is a great idea. Alternatively cut out unnecessary js.

2. Nice idea, it does hamper the ease of use of your blog though - I would never click to view, though I did read some that were visible when I finished the article.

3. Do you find the information from this useful? In a way that isn't trivially parsable from server logs? I ask because we are reviewing the quality of our user analytics, and our ga seems rather pointless atm.
Amazingly represented data: Pornhub’s 2016 Year in Review
Link: http://www.pornhub.com/insights/2016-year-in-review

Not sure if its NSFW but the way the data has been represented and the amount of data is fascinating.
I want to buy a VR headset but I currently cannot justify it due to the cost+use of the device.

I, and I think enough other people, already have a $1k+ PC for the huge amount of non-VR games it gives access to.

But the big catch for me is that there just doesn't seem to be enough content that will work with and (more importantly) be enhanced by a VR experience. I simply don't have the cash-on-hand to justify spending ~$800 to make Elite Dangerous slightly more immersive. But if a good VR headset was more in the $200 range (like the very similarly limited hotas I bought for the same reason) I would probably jump.

It does seem like this year may bring the cost of the devices down low enough that more devs and more audience can get on board and bring it in to the main stream because it is very nearly there already.
The irony is that say she has a macbook pro and a google pixel phone, its trivial to plug the pixel phone into the usb c port on the mac book pro without any dongles, using the cable that came with your phone.
- Apple had Siri out and was in the lead with voice control, then they wasted it.
- Home automation was supposed to get better with HomeKit but arrived basically stalled.
- Apple's cloud offering is confusing and hard to manage
- AppleTv is a great product but Apple can't seem to really work with partners

3 out of 4 of the above has to do with UX and software. Apple is losing its way with UX with particular pieces of software. In the old days, the errant groups would get spanked by Steve Jobs or his chosen lieutenants. In the old days, the last one would also be brought home by Steve Jobs or his chosen lieutenants.
You're right, the article is talking about seems to be talking about sending the audio wholesale, which would be cheaper from a CPU perspective, but sending the data would probably be noticeable both from a data use and battery perspective.

Having said that, quite a few people have their phones connected to wifi at home, which could mitigate these issues due to both less conspicuous data and power usage.
Perhaps allowing someone who works at Netflix to create and publish this kind of thing makes existing employees happy.
Isnt most of your points just the relative newness of rust?

I could rewind a few years, replace [rust] with other platforms like [node] or [erlang] and the same statements apply.

I'm not disagreeing with you, I'm just pointing out that it seems to be the stage an a natural progression of platforms.
These tutorials look really helpful, thanks.
The neural net is 99% of the work - if all they share is a particular GPU model, but each have "their own" neural net made on their own training data, then you can pretty much treat it as a completely separate, different system.

The quality and performance of the system is mostly determined by the data, not the raw computing power, so it's worth comparing them as they can be very different.
I thought that's what the music was from. Another of their original TV series, Travelers, has an amazing (if subtle) electronic music score.
Xbox one can be controlled remotely with Xbox mobile app, you might find that useful. I didn't get the Kinect by the way.
French authorities gas 800,000 of ducks after bird flu outbreaks
I certainly do not have this expectation. What makes you think "people worldwide" do?
Good observation. I will make the recovery much faster with gRPC calls, which can detect broken network much faster than http heartbeats.
1 - they think they will need more than 2 years to be in a stage where they run tests. And I'd bet they can test in the meantime, just not do human diagnostic tests, ie no treatment decisions based on the test.

2 - they will sell the lab devices and so won't do any testing themselves
I think you are right that is is a small market. However I think the "recurring" usage of the site involves business opportunities and connections beyond just finding cofounders. Sure, LinkedIn sort of does this, but the problem is akin to your description of Angellist as only connecting people who are already somehow connected. There must be some way to create connections out of the blue, and more importantly target your connections better (you don't know which people on LinkedIn are interested in founding a startup at the present time).
Exactly like the FireWire ports on my older macs.
Ask HN: How to chose a price for your digital product?
Hello HN,
So the question I want to ask is: If you are selling a product, how do you know how much you'll price it?

Thank you :)
Upvoted because you're dead inside
I'm doing the exact same thing! (quitting end of this month too). While I haven't decided to completely leave tech, I'm planning to do a couple of 3-month furniture intensive classes for my sabbatical this year. I'm also going to apply to the College of the Redwoods. It's kind of a moonshot though, given my limited woodworking experience, but I figured it's worth a try. What's the duration of your entire course?
This site crashed my mobile chrome 3 times :(

Did they get smaller?

I'm using BlazeCSS right now because it's very small.
The headset jack issues on the iPhone 7 make me more angry about a product I own than anything I can recall in recent memory.

Utterly frustrating.
I never managed to actually like tmux. It breaks too much of what I'm used to, like mouse wheel scrolling, Ctrl-arrows, ESC in Vim and a lot of other small things.

The ESC thing is fixable by configuration, at least, but I really doubt I can make tmux behave like my native terminal.
This reads like it should go in a grad school statement of purpose :)
It's more of a user comfort / perception thing. Using a slow terminal is basically like playing a game with really inconsistent frame rates. It's a distraction and can cause you to make mistakes from mistimed inputs. In both cases what you're really looking for is consistency more than raw speed.
You can test that hypothesis using http://www.fast.com
If Microsoft keeps support up for it long enough that the CAD program developers are willing to take the plunge on the new features and integrate them into their programs, it will completely displace Apple with the high-end professionals.

I think it has huge potential outside of CAD. Anything that deals with complex flows of data/material would benefit from such an interface.
The difference there is that Rust is directly targeting the ecosystem where this C and C++ stuff is being written; Node or Erlang never were.
One of the projects did use Kafka as the "event log". There were stability issues with the version of Zookeeper that was used. From a writer/reader perspective Kafka was sufficiently performant when it was up. (The Zookeeper issue was eventually fixed as I recall, but by then the damage was done in terms of political capital spent and lost.)

The big issues didn't really have that much to do with the persistent store of events. The bigger issue was the fact that as new features get added to your application, your event payloads change. Well, in order for projection (particularly re-projection in the case of an issue) to work, your code needs to know how to read and process all versions of every event. Of course, there are techniques like snapshotting to give you point in time "good states" so you can eventually deprecate some of these events, but thinking about it is challenging.

Additionally, most folks argue that the event store should be immutable. This is great until some kind of bad event gets in there. Now your code needs to know how read, and discard, this bad event forever (or until a snapshotted point in time).

Finally, projection is not the panacea the evangelists will have you believe. Inevitably there will syncing issues between the event store and the projected database/elasticsearch cluster/mongo instance whatever. And what do you do then? Re-project! But that is not easy :)
I've owned several boats and I'm done with that. I now belong to a coop where I pay $650 a year and have access to a 30' Catalina and 24' C&C that I can use almost as much as I want.

There is no such thing as a cheap boat. The maintaince is a constant time and money suck.
This is a great article if somebody has unlimited resources to pay rent, buy food, and focus on obtaining a basically temporal literary achievement; however, it offers no practical utility with respect to actually getting paid to write and earn a living by way of the craft, so...uhh...if you need a textbook fluff piece, here ya go.
Fair enough. They've never cared about the sort of gaming commonly done on the sort of computers that will be able to do VR in 2017. When we get to the point where the iPad/iPhone can do high quality VR then I'll re-evaluate my statement.
Most of those cables are "stationary" though (quotes because your car moves). And a stationary cable isn't that much hassle or friction.

I have a cable that never moves from my bedside, it plugs my Pixel C-to-C into the brick. I have C-to-A cables at my desk at work and at home, neither moves. Your car's C-to-A cable (presumably) doesn't leave your car.

The move to C on the host end is something that hasn't happened recently (not since A took off >10 years ago), but the move to C on the device-end is comparable to the move to the original 30-pin i-device cable, Mini/Micro-USB, or Lightning. It's obnoxious but inevitable.
>I’m certain Disqus could fix this,

most likely they are getting paid for this tracking
> unelected government dictating coding standards by fiat

An elected congress gives agencies regulatory authority and provides over-sight. If Congress chooses, it can dismantle the FTC or pass a law stating that DLink cannot be held liable.

Congress enables regulators to do things you don't like, because it's impossible for Congress to micro-manage the entire Federal bureaucracy and military. Congress is well within its Constitutional rights to empower third parties to enact enforce certain classes of regulations.

I understand why you find that frustrating, but it's dishonest to characterize that situation as an "unelected government". The government is elected, and regulatory agencies must answer to those elected governments.

> This precedent creates unlimited liability for so much software and hardware that gets created.

You know what? Tough luck.

Most people who build things professionally and sell those things are held liable for their work. Take a look at what DLink actually did, and tell me that their engineers/management was behaving in a responsible and reasonable manner.

Maybe it's a good thing that the gov't is forcing software and hardware companies to start taking ownership of their craft. The market is certainly failing to price in security.

> It is the ability to warranty against this type of stuff that has let OSS take off. I expect this to have a chilling effect.

On the other hand, I highly doubt this case or any resulting precedent (if any) will have a noticeable chilling effect in OSS.

I guess time will tell which of us was correct...

> damage is the result of malicious attack by criminal actors

And yet, those attacks were completely foreseeable since at least the early 00's... I could've told you the day that DLink released these webcams exactly what would happen. I'm sure plenty of DLink's engineers tried to tell their own management...

> Just because as devs we are mad when our bosses make stupid security decisions, doesn't mean this is the way to handle it.

Perhaps this is the best jumping off point for a productive conversation -- what's your proposed solution?