skysight-inc/HackerNews huggingface dataset:
> Google does let you have 2 factor setup without a phone number as a factor, but strangely you need a phone number temporarily.

I finally set up 2FA on my Google account this weekend.

It struck me as incredibly odd that Google requires a phone number to enable 2FA. NIST recently advocated against using SMS for OoB auth. [0]

If I had been an account hijacker with the password (e.g. obtained via phishing) it would have been ludicrously simple for me to enable 2FA on someone else's account.

I don't understand, I already have an Android phone with Google Play Services installed. Why isn't pressing "Okay" on my phone sufficient? It's certainly not any more insecure than an SMS.

What I view as even worse is on the first attempt the SMS didn't go through, so I asked Google to give me a call. Evidently my provider blocks whatever number they're using to call out of, so my phone never rang. But Google left the verification code anyway, AS A VOICEMAIL!

My inner tin foil hat says Google wants a phone number for other purposes.

[0] www.securityweek.com/nist-denounces-sms-2fa-what-are-alternatives
EU economies auctioned off 3G spectrum at the same time. The ones with sloppily designed allocation rules raised far less money (controlling for GDP).
Well, you can basically do it once with the restaurants in your new neighborhood. Otherwise it would probably ring the alarm bells for someone if the same guys are complaining and receiving vouchers multiple times. Anyway, it's a scam.
Major news outlets in Germany publish unverifiable news from undisclosed sources as well. I fail to see why Facebook should get a special treatment in this regard.
I appreciate that I may come across as personally irritated - I am indeed a bit. Quebec bashing does get tiring, and your condescending tone and seemingly facile arguments did annoy me.

I don't understand the logic of people who hold the arguments you bring forth. It's as if because you're not "elite" (whatever that means) now, you will never be.

Yoshua Bengio's dream (if I may) is to make Montreal a global hotspot of AI research. That's all. Now you (and others) can bash it all you want, blame the local population, blame the language, blame the education system - whatever.

To me, the fact that some people are reacting the way you are is actually confirmation that things are doing well - quite contrary to your frankly misguided assumption that I have a defeatist opinion of the city and the province in general.
Prosecutor seeks arrest of Samsung head as part of spiraling corruption scandal
I can recommend radicale [1]. It's very simple and doesn't need a lot of resources. It also supports authentication via an IMAP server so you don't have to keep a separate user database.

1: http://radicale.org/
Leonard Susskind's "Quantum Mechanics: The Theoretical Minimum" as well as Nielsen & Chuang's "Quantum Computation and Quantum Information" are also fantastic resources. I've got both sitting here on my desk :)
Game theory gave us minimax, which is a major part of any top chess engine.

https://en.m.wikipedia.org/wiki/Minimax
Drug approval agencies are country specific.
Telemetry meets HBase (again)
What to Do When You Can’t Upgrade Oh My Zsh
https://hn.algolia.com/?query=superbug&sort=byPopularity&pre...

This story has been posted a handful of times now. See link for other discussions ^.
Inability to reliably send messages to gmail is huge. I'm using my own server, I own my domain for years, I asked a lot of people to remove "Spam" label from my messages, I did everything (reverse DNS, DKIM, SPF, checked that Gmail likes it all) I could, yet for new recipients gmail might mark my e-mail as spam. Gmail is worse e-mail provider, I liked it before, but I really don't like it, because it seems to punish people for decentralization. And I don't have this problem with other e-mail providers that I checked, they are happy to receive my e-mails.
2017 predictions for web design and technology trends
From yesterday -

https://news.ycombinator.com/item?id=13391886

https://news.ycombinator.com/item?id=13402726
Phages are being researched. This literally comes up in every single HN thread on antibiotics, so once more, posting my "Why Phages Aren't the Answer" shortlist. Note that I love phage therapy - this is the problems as seen by someone who doesn't think it's a dead end:

Phage therapy is neat, it really is, but there are a couple major issues:

- There is no such thing as a "broad spectrum" phage. You can't do empirical treatment using phages, and there's not really "off the shelf" phage therapy - it tends to be a bespoke creation for a particular infection.

- There's some serious regulatory problems, similar to those experienced by fecal transplant treatments. We're not yet really equipped to think about handling evolving, custom microbes as a treatment. - Because of the first, it's going to require a considerable amount more lab capacity than most clinical settings currently have, and considerable delays until treatment.

- There's also some biosafety issues around phage prep, but those are easily solvable.
It's a great way to treat particularly resistant or hard to treat infections, but it's not a particularly great general solution. There's a reason it was abandoned in countries with easy access to antibiotics - they're just roundly superior in basically every respect.
The file is newline-delimited. The strings themselves are base64 encoded, so they could contain newlines.
24k in Slovenia sounds equivalent to 125k in the Valley though, ...

The bottom line might also be "migrate to a richer country"
> My inner tin foil hat says Google wants a phone number for other purposes.

Just like Twitter these days. "Telephone number is optional and for your security". 2 minutes later my new accounts are always locked and i need to provide a telephone number to enable it again. They used SMS until recently, now they use a call service which only works with a fraction of numbers. (Tried 2 thai, 1 cambodian number, none accepted)

I seriously dont get what they are trying to do other than creating a database of telephone numbers and locking users in third world countries out.

Also agree with that Google actually knows enough to just verifiy it based on my phone. Telephone number is not necessary, especially i "verified" my account in the past with a phone call, why again?
Though we're not particularly heavy users of colistin in livestock, unlike China, which is specifically called out in the article.
No, in most countries it's not illegal. It may be a violation of the Terms of Service or other contracts, but that doesn't apply if you didn't have to sign it to get the APK.
And how is this different than US foreign policy?
Not a company, but I run https://blogspam.net/ which is a real-time API for testing comment-submissions for spam.

It uses a bunch of (naive) rules to classify content, and also allows (re)training.
Artificial Intelligence: A Modern Approach is a great read!
Sometimes we fail even if the stars are aligned. It sucks, but the market is irrational.
Store the third-party credentials server-side, and send or proxy the requests that need it through your own server (authenticated with user-specific credentials).
Did you register with https://www.dnswl.org/? That should help with deliverability (in general, don't know about Gmail).
You can expect a fresh IP from one of the cloud hosting services to be spam filtered out of the box by Google et al these days.

If you’re lucky, the IP in question hasn’t previously been used to spam & by very slowly ramping up your email rate Google will eventually decide that you’re probably OK. Getting this right appears to be something of a black art however :(
You don't have to return the API keys to the user's phone. You could set up a proxy API that will call the third-party service on behalf of an authenticated user.
A Saga on Sagas
Sure, but the most interesting interpretations are usually based on aprioris learned in this universe.
You can generate keys for S3 on your server, allowing temporary upload or download access to specific files. Generating an IAM role per app user is not practical.
Arguably, bioinformatics was one of the driving forces which differentiated early machine learning methods from classical statistical methods.
My Long and Winding Road to NDC
http://money.cnn.com/2016/11/21/news/protecting-donald-trump...
I agree with the fact that the President should probably not visit foreign cities unless absolutely necessary.

In our case, President Obama (and I am a full supporter of his) visited our little town here in Australia (pop: ~100,000) back in 2011 to meet with our Prime Minister to ratify a deal to station about 10,000 US Marines in our town.

He was on the ground here for about 6 hours. For the whole day (and most of the day preceding), major roads were blocked and citizens could not get in or out of the city. RAAF fighter jets criss crossed our skies constantly during his stay, and the police kept all the local citizens out of parks and recreational areas near the airport.

It was a major PITA, to say the least, as commerce and general activity ground to a halt for everyone in our city.

During the same visit, President Obama also met with the Governor General of Australia in Canberra. Watching the televised meeting, I was amused to see that at the end of it, the president was whisked away by his security team in his motorcade, with police escort, whereas the Governor General simply walked back to his home along the river by himself.

The irony that the leader of the free world is probably the least free person in it...
most of the office jobs are really irrelevant, you can either get in peace with that or change profession if you wanna do really something meaningful or try to find positives how your affect people's lives in some small way even through some office job

i used to work in call center, it was not 911 life saving line, just insurance claim registration, though even it was bad pay it was sort of satisfactory to help people who experienced disaster or accident and talk them through it when they were in stress, at least i knew i calmed down some people and checked their priorities that maybe they crashed their car but they are not injured

higher i went with salary later in IT less satisfactory was the job, because in the end of the day what will be difference if there will be minor bug in mobile phone OS, i always found it funny how serious newcomers took it, they think we are saving lives by fixing crashing so under certain scenario? in this regard bakers job is much more important than mine

nowadays i just don't care, job doesn't really fulfill me, or better said i can enjoy it despite knowing it's pretty much irrelevant

if you really feel the urge to do something meaningful switch progression, those important are actually usually very easy to enter, i am seriously considering now if i should become policeman since police have trouble to find people with offered salary, it would be pretty useful job, though i guess not so good to provide for my family
I don't know why, but I have a faint hope that some day AI and Machine learning will help solve these problems. Problems like these, and selectively killing cancer cells. Of course, just a hope.
Even if we manage to reduce poverty by half, someone will always find a way to write "Eight billionaires 'as rich as world's poorest quarter"
Nice project. What do all the

//> SomeName not-yet

in the code mean? Are they meant for some kind of automatic processing? Its a bit hard to read with all of them there...
Also, that tech team might in another large organization (not McDonald's) in another part of the world, where any work they do has to be budgeted for, agreed on, spec'd, tested, and released through a tedious process.

Someone might be casually thinking "hmmm this doesn't seem quite right" but there would be a dozen hurdles to jump from that suspicion to getting anything done about it, so they keep quiet and move onto the next project. They might never even know or care if their code went live.
we have those, the amount of invalid clicks in adwords does not mach the ones i see in my logs, there 20-40% difference where adwords shows less.
i cannot fix that from my site. i block ip ranges when i find them but they can just move.
@OP: What's the product? I get that its a newsletter but I can't figure out the content from the copy. Why dont you test putting sample content on the landing page? :)
Yes. It says "Cell search and synchronization procedure for the UE" under features (UE stands for User Equipment, e.g. a LTE modem).

edit: cell search example https://github.com/srsLTE/srsLTE/blob/master/srslte/examples...
Internetworking with TCP/IP by Dr. Douglas Comer.
Title: Researcher Translation

Alt: "A technology that is '20 years away' will be 20 years away indefinitely."
7 Top CRM Trends for 2017
With the growing appreciation of existing customers’ role in today’s super-competitive digital markets, the CRM space is experiencing an unprecedented growth surge. CRM technologies have become an essential component for marketing departments, helping marketers in every vertical cater to their loyal customers. In the dynamic digital marketplace, this means that each year sees new trends and tendencies. Read our blog to know what to look for from your CRM technology as 2017 approaches
Reading this is somewhat painful thanks to the social sharing buttons on the left which hover on top of the text.
PeepWhen is a one-button messaging app
Hi all ;)

Just wanted to show you my latest work:

PeepWhen is a one-button messaging app (for habitual patterned communication).

For instance, we're gym buddies and I want to ask you to join me today – I just hold a button and with the time I hold the button, you can immediately understand how much I want you to go with me.

No more overloading group chats in WhatsApp. Less time wasted with elaborate texting, more time spent with your friends.

Join our Beta @ http://peepwhen.com

Thanks in advance! Please share our story and leave me a comment :)
Puerto Rico turns to tech and entrepreneurialism to revitalize the economy
The name De Bruijn has two words.
Good point. How many people with actual bad grades even make it to Google?

Yet, even if they just found that the difference between 99% grade and 100% grade did not translate to the workplace, that's an interesting result. It's not something I would have guessed at with confidence.
Isn't that what OAuth keys are explicitly there to PREVENT? Letting application developers unlimited access to your accounts on their backend servers.
I think that the risk arises from the bad practice of hardcoding any keys in your mobile app. Hardcoding Twitter keys can extend to AWS or say Stripe for example, which can lead to serious security breaches.
This post could be meant to warn developers against using this practice going forward, and like others have suggested, storing third party credentials server-side, making the call on behalf of the client app and then returning the results to the client.
Why would it be illegal to look at code on your own device and see what kind of personal data your device sends to companies?
Let's be clear here, she was in her 70's and received a majority of her care in India, not the US.
Thanks for your feedback. The linked_lists can definitely be replaced, and I am working on finding a suitable data structure to maintain the individual buckets.
However, the "unordered_map" with one global mutex will not achieve what I am trying to do, i.e., allow multiple threads to simultaneously write into the same hash_map, unless two (or more) of them collide on the same bucket at the same time.
>>It doesn't matter to you, but I am sure it matters a whole lot to the people of Poland (but fuck them, I guess?).

Well, I am Polish, and "a whole lot of people in Poland" want things that I absolutely disagree with(prohibition of gay marriage, abortion, they want the church to meddle with politics etc etc). So while I wouldn't say "fuck them", I would say that I disagree with their opinion strongly.

>>Then send them to Germany or Sweden. They love the refugees!

There's no need to go from one extreme to another. Basically the options are:

1) Send them back where they came from

2) Try to house them where they arrive

3) Try to distribute them around the EU evenly so that the burden on each country is minimal

Option 1 is probably what most people would want, but that doesn't make it feasible. Even if we assume that we know exactly where they are from, which is not always true, we could probably send back people to countries which are not torn by war. But that still leaves you with people who are genuienly fleeing war, and if you are advocating sending them back there, then well....I think we can finish the discussion here.

Second option is terrible, because neither Italy nor Greece have the capacity to handle this many immigrants. The best they(or anyone) could do is built a huge camp for them, but as you can imagine that would be a distaster very quickly, if done at that scale.

Option number 3 evokes a lot of negative emotions, but unless someone comes up with a better solution, it seems like the best way to go.
Can you please elaborate, if there is a bug I would definitely like to know about it and fix it.
This rant is exactly why phone numbers are a good way to do two-factor. The author lost control of their phone number ("as i quit the account shortly...") and subsequently had an extremely hard time authenticating to their bank, Google, Twitter, etc.

Getting a new phone number set up is time consuming, even with a Twilio-like service. This is a good thing. Your IMEI number isn't portable, and until there is a physical token on your phone that is also portable, a phone number is the next best option.
I've had the same mobile number for the last fifteen years too. In NZ at least (not sure about other countries) it's trivial to take your number with you when you get a new SIM from any mobile provider. Though this wouldn't work across countries obviously.
Ask HN: My new manager has no IT/SWE experience – how to help her help us
My new manager has a solid business analysis background and managed a large call center team before being assigned as manager for me and a few other internal IT consultants, but she has no IT or software engineering experience. Leave aside how this situation came to be; it is what it is.

What can she read to better understand what we do and what we need from a manager? I've already ordered "The Mythical Man-Month" for her. I have high hopes for her - she now understands and accepts that having me bring a team member with little scripting experience into my automation tasks now will be a short-term burden rather than a help, and is more of a long-term investment in the team.
Id like to add, make your bed to the first step of the routine, it seems somewhat silly but I have found that it really helps.

No matter how bad the day goes you still did one thing and it's nice to come home to a well made bed
I'm not sure, where I've read it specifically, but it was a feature I was looking fore before switching to zsh about 5 years ago. What I found now is this: https://wiki.archlinux.org/index.php/zsh

Anyways. The core point is that compatibility often means compatible in 90%-99% of the cases. It's really really hard to be 100% compatible, which also requires one to emulate bugs etc.
MacPaint and QuickDraw Source Code
Career Path: How Big Data Insights Can Steer Decisions
Godot: advanced, feature-packed, multi-platform 2D/3D open source game engine
1 person out of 300,000,000 has died that's linked to drug resistant superbug.

Hardly a problem.

Of course AI could also just solve the problem by killing anyone who has superbugs, so that the spread of such things is eradicated.
Nothing really new for the pharmaceutical community tbh. The MRSA - which is probably the most well known superbug - has been around for years and claimed more deaths than AIDS per year in the US last time I checked.

There was an article pointing out that a techniques based on combination of ATBs + Bacteriophages might be a possible replacement. Another possible counter-measure is nano-tech.

If states do not jump-in funding various research groups, it's highly unlikely that humanity will be given another "Aha!" moment a-la Fleming.
"My inner tin foil hat says Google wants a phone number for other purposes."

"I already have an Android phone with Google Play Services installed."

Guess what - Google already has your phone number before asking for it via the 2FA form. My guess is that the reason they have one platform-independent process for setting up 2FA is for iOS users.
Driver Easy Professional 5.1.5.5598 Serial Key Free Get Here
Have you ever heard that they saw you on Google at all? I feel like a lot of people fail to remember the distinction between ad results and search results.
A JSON-based standard for resumes
Author here. I dont have a fixed telephone number anymore. How to handle that? I dont see why i would need one except for authentification purposes ether. My point is that depending on people have a phone number, and even more one that is widely supported (which my current numbers are not) is simply wrong.

Sure i could call my bank one a month to change my telephone number, which i loose control of shortly after that (only valid for a few months, prepaid). This is hardly a solution.

On the other side i control my email address, my private key, my home address to a degree, but never my telephone number.
Current 2.10 chagelog : https://wiki.gimp.org/wiki/Release:2.10_changelog
Structured Parallel Programming: Patterns for Efficient Computation by von Michael McCool, James Reinders, Arch D. Robison

It introduces some important parallel patters, explains what makes
them tick and how to make them efficient. The book makes a strong case for using parallel frameworks, namely TBB and Cilk+ to create general and portable solutions.

There's also a set of slide available,
- http://ipcc.cs.uoregon.edu/curriculum.html
SpaceX lands its Falcon 9 rocket at sea
Nobody in China uses Google other than English speakers. Google is notoriously bad at breaking Chinese characters up into words.

Few people in Russia use Google for Russian language searches, this is because Google is not as good at declining Russian nouns and conjugating Russian verbs. Yandex gives more results of a higher quality for certain searches.
Expert Interview with Steve Benson, CEO of Badger Maps
One of the most important books ever written on software engineering practice. Author Frederick Brooks won the Turing Award for this book and for his work on IBM's System/360 (the main example project used in the book).

http://amturing.acm.org/award_winners/brooks_1002187.cfm
Accurate how?
At the time Medvedev was President of Russia, and Putin was Prime Minister. Since he was President before that, it's ok for him to be referred as President, like any former President of country.
Take Twitter keys for example (the most shared secrets, according to the article). Instead of hard-coding the secret in the app, just implement the Oauth authentification as it should be done: You store the secret key on your server, and issue the get request token from your server, then redirect the user to Twitter authorization page, instead of issuing the request to twitter from the app itself.
You will say: why should i do that if an attacker could just issue requests to my server and still get credentials using my app credentials? Here are some reasons:

1. You now have control over accepting the requests or not (ban ips, etc). If your app is pretty popular, spammers may try to use your app credentials to interact with Twitter as you will have a better reputation than newly generated credentials.

2. If your key is disabled by twitter for abuse, you can replace it with a new one without having to update the app itself.

This applies to the other services too.