skysight-inc/HackerNews huggingface dataset:
Interesting! It only took an hour for this criticism of a column which happened to be written by a woman to produce an accusation of misogyny as well as another ad hominem. I didn't think there was much of a gender component here, and there certainly isn't anything related to platform or framework zealotry, so IMO those comments say more about their authors than they do about me or the article.

If a man had written this article it would have been no more or less awful. Had this been a same sex couple, still awful. It amounts to a defense of spousal neglect and how, apparently, the fact that your spouse puts up with your negligence is what makes marriage so great. We of course don't get to hear from the spouse about their take on this.

Every couple is entitled to carry out their marriage however they like. I'm simply expressing my opinion that the "I've thrown in the towel on romance, sex, and treating my partner well" approach isn't for me.
So Lyft spends 1 billion 300m, in a quest to monopoly.

How can I short them? /honest question/
Liri – An OS and apps built with modern design and features
Well this https://en.wikipedia.org/wiki/Elephant_goad is what is used to get elephants to do circus tricks, FWIW.

(Ignoring the concerns of taking a highly social animal with a natural range of 500,000 or so acres and shackling them and confining them to a few square feet...)
but if you are trying to learn code and goto code school and the url higher.team/apply looks at your user-agent for the word "windows" and gives you a task, surely the student needs to be able to find a way around this?
Awesome. Is Elixir prevalent in production yet? Will it be?

I think I want to learn either OCaml or Elixir next.
The term for this is "Magpie-driven development".
Astronaut Chris Hadfield Explains the Power of Negative Thinking
Here’s a Good Reason to Be Wary of Overly Polite People
Where's the trigger warning? I thought HN was a safe-space where the inherent unfairness of existence was suspended.

And since when was jumping on a grenade anything but a valiant, selfless act worthy of extreme praise?

Sheesh, I'd probably do it given no practical alternative.
And the US goes to war over and over without congress approval.
I think by "can't" he means "shouldn't."
Nice theory but there are a lot of people in Africa without a lot of money who are looking for things to eat. No safaris etc. means no justification for some of these pristine parks, least of all for enforcement.

Witness the scores of elephant poisonings in Zimbabwe for poaching purposes. If you view people as contradictory to Nature, your efforts on the largest of continents will come to naught.

It's so easy to argue for ideological purity when it doesn't directly affect you or your family (abstract you, for all I know you may live down the road from Kruger). Ultimately though there has to be an incentive for the people affected to part with the resources and opportunity offered by the big animals. Safaris are one (not terribly effective) compromise that at least justifies economically why big animals need to be preserved (no animals means no safaris means a lot less rich visitors).
> All the slights about 'kids these days' with their TV, YouTube, Pokémon Go, and short attention spans seem pretty unfounded

...and people have been saying it for years. The distracting thing has changed over time.

http://www.slate.com/articles/health_and_science/science/201...
Right, minicomputers were the fridge-sized Vaxen and their ilk.

(Speaking of fridges, that was the era of 'computer rooms' with raised floors and positive pressure air conditioning at a fairly small scale - might have one serving one or two dozen people. Comms were poor.)
The Case for Ubuntu Phone
And yet, the original article attempts to do the same kind of generalized painting as well :/
Global sea ice records broken again
True, at some point you just stick to it and that's that.

That said, the grenade thing happened because, well, that's what some of us (internally) actually call that sort of outage situation sometimes -- you didn't make it happen, but you're there and are able to do something to fix it, so you do.

It doesn't work nearly as well on the outside, so I changed it and admitted my error. That's about the best you can do in a world where we're all speaking slightly different languages.
Royal de Luxe seems to do well with their giant elephant puppet.

https://en.wikipedia.org/wiki/Royal_de_Luxe

https://en.wikipedia.org/wiki/File:Royal_de_luxe_%C3%A0_Amie...
Good. No one stops Apple from supporting free codecs. Google should have done something of the sort a long time ago. But they didn't, and proliferated H.264 usage.
I realised I was guilty of this in 2016 so for 2017 I've made a few simple changes, the primary one being how I write my "project" name in OmniFocus.

For instance, I had "Learn how to use bash properly". Well, what does that mean? When is that finished? It never is. Now, that project is called "Read 'Learning the bash shell'".

Immediately, that's attainable. When I've finished reading the book, perhaps I'll want to do more, perhaps I won't. But at least I know that I'll have completed that project.
I more often

:make

nowadays rather than

:!make
Exactly. They influence but not in a good way.
That's obvious. What's not obvious is whether donatj's 30 characters are individually random or composed of words. And 'individually random' could mean anything between the 4 bits of hex and the >7.7 bits of codepage 1252.
But long before that these companies will be dumped into all our index funds and 401ks.
Put the tab strip below the URL bar. This used to be the case in the past.

That'll leave plenty of room to have things drop down from the URL bar without much ambiguity.
What if the prisoners draw inspiration from Sirius Black or Edmond Dantes and attempt an escape? Banning these books ensures that such thoughts never occur to the inmates. Clearly the wardens have learned the correct lessons from the Shawshank Redemption [1]

[1] - https://youtu.be/_359l_9Wyhg?t=48s
Probably true, but these companies will be among the first to deploy; no need to measure against general "widespread deployment". There are autonomous taxis already, albeit not quite yet in the wild.
When you say Web of Trust, I'd say quite a few think of the troublesome browser extension [0], not the theory [1].

A key point in the theory, is that it is decentralised. Keybase isn't.

What you're enjoying is just public key infrastructure, and GitHub integrating it well.

It's cool it exists, and works well. But it's hardly a Web of Trust.

[0] http://lifehacker.com/web-of-trust-sells-your-browsing-histo...

[1] https://en.wikipedia.org/wiki/Web_of_trust
More data and charts here: https://sites.google.com/site/arctischepinguin/home/global-s...
Monday Vision, Daily Outcomes, Friday Reflection for Remote Team Management
Do you know the name of the incubator?
Real Hide IP 4.5.7.8 Crack GET Free Here
Seeing the quantum future literally
What I urgently need to see before I can buy an Ubuntu phone is an integrated 1-click backup solution:

I want to connect my Ubuntu phone to my Ubuntu notebook and click "Backup now", to have everything I need synced to my notebook (and not to some "cloud"/somebody else's server).
Thinking about this some more, if there were a product that did slave records from a hidden master and replicated to route53 - or some other big provider - would you pay for it?

It sounds like your personal domains you're happy enough as-is, and for an ISP I expect you'd not want to outsource something so critical as DNS..
- It's still #5 in the Alexa website ranks. That's HUGE. Huge huge huge.

- Trumblr is still huge (arguably mismanaged but still huge)

- Their fantasy football is the largest in the world as far as I can tell. Huge user base.

- Yahoo mail is also huge.

Their core strength is their hugely popular front page and their web applications. Sorta similar to Google in a way. Or even Microsoft and some of its properties. Arguably they could focus on these web products and continue making cash though they'd likely need to downsize a bit.
> and the messages also have to be sent while the user is offline, otherwise there is no vulnerability

a) the notification and concomitant irritation to non-technical users is there when the other user switches phone, whether they were online or not

b) the vulnerability is there when the server is compromised, whether the other user is online or not (can just filter out "delivery receipts")
Webapps, in my opinion. See: https://news.ycombinator.com/item?id=13403404
>The [owners] say their existing animals — lions, tigers, camels, donkeys, alpacas, kangaroos and llamas — will go to suitable homes... the company will continue operating the Center for Elephant Conservation.
Honest question: how else do you pay the bills?
I'm sorry that I'm off-topic, but let's have a cultural minute here: while you're there, I've never succeded to locate the industries when I lived in Sydney. Does Australia get much of its energy from nuclear? Where are the plants located in NSW? Do you also have some petroleum industries like refineries? I've never seen refinery-type landscape (kilometers of stack chimneys). Do you have industrial landscapes in Australia, like we have in Europe with kilometers of factories, low-income workers, areas which are monitored for huge industrial risks? My question is as much about the geography of NSW as about the industrial sector of Australia.
This is not correct, of course.

One 256-bit sample of entropy from hardware can be expanded into endless stream of unpredictable keys. The whitening and cryptographic pseudorandomness gives security that is indistinguishable from true randomness, entropy pool is needed just to seed the process.

Only case for /dev/random would be break-in recovery security. If someone has momentary access to the internal state of RNG just before /dev/urandom is called, they can predict the output of /dev/urandom that comes next until entropy pool is updated. But if someone is able to do that, generating random numbers is probably the least of your problems.
With the likes of

:cfile
:cbuffer

one can turn that file/buffer directly into a quickfix list, where simply enter will take one to the relevant position. Messages with column positions are recognized in quickfix lists (:help errorformat).
Steed: Rust's standard library, free of C dependencies, for Linux systems
I think the closest I experienced to this was when I first discovered Second Life. My dreams after an evening on Second Life were insanely realistic. That thrill of addiction sounds familiar, almost like a dopamine chasing rat.
In that setup, how do you handle needing passwords on your phone?
It's "funny" how Obama chooses his decisive moments:

He signed the NDAA act [0] into law on New Year's Eve a few years ago while every one was out partying. And now this. Do you see the pattern?

[0] Military can detain any American citizen and put them in a secret prison facility indefinitely. The President can order a US citizen's assassination - on US soil - with no oversight.
Where can I read more about Linux internals? Any good resource with design decisions and algorithms?
I didn't want you to kill yourself or others by electrocution or house fire because you fiddled around with a cable designed and built to meet some important safety specifications.
If one wants something that isn't limited to one shell, and invokes the interactive shell that the user has chosen, there is of course

:shell
Protein clumps in the brain can tell us the ‘type’ of Alzheimer’s
No, it's not all misogyny, just a great deal of it.
Asking something here with genuine interest: I interpreted your comment about "self-aware point scoring" to mean that you shouldn't think of relationships as transactional, or be too concerned with whether your contributions to them are reciprocated.

My practical question here is if you live that way, how do you avoid getting screwed over by opportunists?

My ethical question is wouldn't a society based on this principle create inequality through winners becoming bigger winners, because they're the ones who can most afford to give stuff away without expecting a return (whether it is money, emotional energy, or anything else)?
Take a look at:

http://httpredir.debian.org

to get optimal sources.list (automatically gives the best mirror depending on your location among other things).
Every person can not give explicit consent to every law and still form a society. That much should be self evident.

How do we reconcile this with the unjust regimes practicing things such as slavery or capital punishment? It's not an obvious question, but one must be able to reason about it without resorting to trivialities such as universal unanimous consent.
In the case you what to use the some passwords on iDevices, what would you recommend for password db?

EDIT: irremediable posed the same question at the same time ;-)
I think the problem is the historical fact that cost of negative externalities of nuclear projects don't get built into these projects are borne by tax payers and people with significantly disrupted lives in very short durations. The two big meltdowns Fukushima and Chernobyl have left large areas necessarily depopulated and certainly have raised cancer risks. No one seems to have a realistic end of life plan for nuclear sites and the next generation inherits the problem.

If we mandate nuclear plants buy enough insurance cover to deal with Fukushima/ Chernobyl type disasters, they would likely be completely uncompetitive with other power sources.
Only if you're limiting your words to those in a small dictionary - or regenerating until they're "common" words, which is the same thing (fwiw, "staple" isn't in the Google list of top 10,000 English words that they're using).
You are incorrect. The documentation supplied with the C64 detailed schematics and ROM routines:

C64: http://www.classiccmp.org/cini/pdf/Commodore/C64%20Programme...

C128: http://www.pagetable.com/docs/Commodore%20128%20Programmer's...
HN: would you use Angular 2.1 and JS to develop a mobile game?
We´re looking into A2.1 + JS for a mobile game to run in both iOS & Android, pros and cons. Could you pls provide some / any advise: it would really help. Thanks HN!
God, i feel so sorry for your wife.
Sounds like a very hacky way to avoid little Bobby Tables...
I can't tell if it's a lot, or not...

... but wouldn't it be a hint that there is a market for a cool P2P share riding system?
It's long forgotten, but literal ride sharing is how Lyft got started. They were called Zimride at the time, and it connected people genuinely going places (a bit like craigslist ride shares) who wanted others to chip in towards expenses.

Lyft was released as an app to make finding a ride on Zimride easier, and quickly eclipsed Zimride.
Rogue One: an “engineering ethics” case-study disguised as a Star Wars movie
FYI: According to wikipedia: "Perl supported tainting from at least 1989 as the -T switch was included in Perl 3."

https://en.wikipedia.org/wiki/Taint_checking
I read Understanding The Linux Kernel 3rd edition a couple of years ago and that book covers quite a lot of it.
You're the one splitting hairs here.

There's a well-known standard of "probable cause". A cop is supposed to know what that standard is, it's part of their job description, and it pertains directly to what they do every day.

When a cop is asked to claim that there's probable cause when said standard isn't met, it's clearly and plainly an illegal order, because they're asked to lie. Doing so under penalty of perjury is doubly illegal. He doesn't need to be a constitutional lawyer to determine that this is illegal and cannot be obeyed.

This is exactly the same as doing a search without warrant, or arresting someone without reading them their Miranda rights, or lying under oath (something that the cop had also admitted to doing, by the way).

That this also happens to be unconstitutional is coincidental. It suffices for the cop to know it's illegal, and act accordingly.

And if they do know their orders are illegal, but follow them anyway, they should be held responsible accordingly.
Because by default Chrome/Firefox/Edge support VP9 but Safari does not. By extension, if you aren't blocking VP9, and most people aren't, Chrome/Firefox/Edge get VP9 = 4K and Safari gets H264 = no 4K.
Munroe uses 4 words as an example, which is a shame because 4 words are very weak.

If you pick 6 words, even from a limited set such as Diceware your phrase is good enough.

I'd be interested to read about any successful attacks against 6- or 7- word diceware phrases.

http://arstechnica.com/information-technology/2014/03/dicewa...

> Even a GPU cluster from December 2012 could, depending on the cryptographic hashing algorithm used to protect plain-text passwords, cycle through 350 billion guesses per second. Referring to that project, Reinhold wrote, "They claim they can crack a random 8-character password in under six hours. At that speed, attacking a 5-word Diceware passphrase would take on average of 7,300 hours or 10 months to find the correct passphrase, assuming they knew you were using Diceware and developed equally efficient software designed to try only valid Diceware words."

> Further, he noted that "Criminal gangs have built botnets from thousands of computers infected with their malware. Marshaling large numbers of these computers they control might allow them to crack a five word passphrase in a reasonable amount of time." (Gosney's 25-GPU cluster attacked the NTLM cryptographic algorithm that Microsoft has included in every version of Windows since Server 2003. It's known to be much more vulnerable to cracking than other algorithms. Gosney's machine wouldn't perform as fast against PBKDF2, for instance.)

[...]

> UPDATE: In a followup e-mail to Ars, Gosney noted that "The figures are based on a brute-force attack that targets a single hash. Due to the nature of GPU computing, attacks that combined multiple words are potentially much slower." At the moment, "Since there are no tools that currently combine three or more words, we don't really know for sure how much slower it would be."
In general package maintainers only take existing software projects, and apply some glue to make them fit into the Debian distribution (think: build framework, file system location policies, documentation policies, etc.) so that the whole open-source ecosystem can be presented in a uniform distribution.

Rewriting the ecosystem in Rust would require no small effort. Luckily Debian isn't a giant monolith, and you can focus on one package at a time. If you're really serious about digging in, then choose a package that you think would be a good balance between security gain (e.g. something with a history of memory-type security bugs) and effort required, start with that.

The existing maintainer of that project (I mean the software maintainer, not the Debian package maintainer) may or may not be open to a Rust rewrite. But this is open-source, and if they aren't, you can just fork (if calling a rewrite a 'fork' makes sense...) and publish your code somewhere. Then you can work with Debian folks to get your version packaged, and it will be available as a safer alternative for people who want to use it.

Over time, and as this starts happening to more and more software, Debian can start migrating to using these packages by default instead of the older unsafe ones.

And if they don't, again, it's open-source. Someone can make a Debian derivative (there are many already, including most famously Ubuntu) that uses the Rust versions of all packages when possible by default.

Disclaimer: this post presents just one possible version of future events, with the goal of clarifying what steps are required if you really believe in this, and want to see it happen. I am not affiliated with the Debian project other than as a user and software author with packages in the Debian archive.
In lieu of such a tool, I wrote a crappy shell script to backup my Ubuntu Phones. :)

https://github.com/popey/buds
Would it be actually allowed to connect to any cellphone system?
What matters is what frequency distribution the characters were drawn from.
I think there is one.
It's really quite an achievement - Lyft and Uber screw traditionally taxi companies, they screw their drivers, and they screw their investors, too. Sign me up.
Ploutus-D, a new variant of Ploutus ATM malware spotted in the wild
Yeah, I meant "shouldn't". Sorry about that.
The Rule of Law by Lord Thomas Bingham appears to be a book adaptation of this short lecture: https://www.youtube.com/watch?v=XlMCCGD2TeM

After watching it I can definitely see why they would view these ideas as 'dangerous.'
That's not true. Driver's share of a car's annual revenue is necessarily greater, actually significantly greater than annual depreciation on the car. With autonomous cars, the driver's share goes to Uber, as does cost of depreciation. But that cost is only a small fraction of the additional revenue coming to Uber.

In fact, I'd go as far as to say that, at current ride rates, Uber/Lyft would be able to replace/refurbish autonomous cars on an annual basis. Of course, rates will fall with autonomous cars, but not below the cost of depreciation.
Drone Weekly: The week's top Drone news, reviews and videos in your inbox
"I agree that XKCD's password strength cartoon of four random words is sound but only for non-fast hashing algorithms like bcrypt"

Nobody competent will use md5 and no hash to store password. And even if you are not competent, most frameworks providing auth will have sane default today.

So "correcthorsebatterystaple" is still a very good practice:

- if the auth is correctly implemented, it's still the best ratio for price/safety.
- if the auth is not, you are fucked in so many ways that you password size is the least of your concern.
> on the other hand Amazon decided to massively dispatch counterfeited products together with merchant-originated ones, casting a doubt on the brand and tainting all their providers together.

Does this happen even with products "shipped from and sold by Amazon"?
Ironically ride sharing was supposed to democratize the taxi industry. It did and we got two major players instead of thousands of small and medium sized players.
The Information’s Jessica Lessin: Facebook-Media Relations Will Worsen
At least riders seem to win?!
https://www.gitbook.com/book/0xax/linux-insides
Heuristically, I suppose, if the "skew" is so obvious that you can see it without "score-keeping", then you avail yourself of a different approach.

Which one? I'm not your marriage counselor. But talking about it is probably a good start.
Have you checked out Syncthing?
> Only if you're limiting your words to those in a small dictionary

Diceware uses a 7776 word dictionary. How insecure is a 6 word diceware passphrase? That should give 77 bits of entropy.
Those Emacs commands you mention for moving around on the line also work in a lot of other text fields, in a lot of other programs.

Notably they don't work in MS Office, but they work in web browsers and practically every other app I have on my Mac.
I highly, highly doubt that anybody is going to do that as a general attack vector. Computers change, but people are people and are not like, in great numbers, to suddenly start having good passwords, just as they are not likely to suddenly start exercising.
Thanks. It's just that the average user will never accept such hurdles. An automated backup solution is really one of the most important things to have in phones. No backup solution means one must be OK with losing all the data as soon as the phone gets stolen or lost.
Today I aim to post on HN.

Get in!
How many libraries you use today that you already used ten years ago? Is there more than a handful?
Building NoterBox: note-taking web app with file attachments
I don't know the stats but 3 out of 10 people I know use Wubi for input instead of Pinyin. Wubi needs to be learned from the ground up but is faster to type by a half.