skysight-inc/HackerNews huggingface dataset:
I, a software developer who is also a national competitive bodybuilder. And my business partner, an LPT, RN, and bodybuilder decided to take an online approach to our effective in-person weekly boot-camps.

We took the 3 elements required to get in shape and made them part of a subscription system.
- Custom meal plans
- Workout programs
- Consistency through an accountability chat-bot

I would love some feedback if you have the time. Thank you for your time.

Currently on Product Hunt as well https://www.producthunt.com/posts/dollar-lean-club
What is your threat model?

Is a TLA going to MITM all connections to incoherency.co.uk in order to read OpenGPG-encrypted mails? That's not very realistic.

I'm not saying that the way the key is being distributed is perfect, but I wouldn't say it's "completely useless".
I know what I'm writing my systems science paper on.
If a Russian-backed Syrian regime gets frisky against Israel again....
AI and Bitcoin Are Driving the Next Big Hedge Fund Wave
Having recently "invented" and manufactured a physical product, I can attest to how much time and effort is put into seemingly inconsequential product features. Coming from tech/services like many of you I had no idea how much time I'd spend on minor features that happened to be critical to bringing the product to market.

That being said, when coding software or accomplishing a purely "tech" task, most of my time is usually spent on the "minor details" so I guess it isn't all that much different.
The Trouble with Experts
No, this is not a very abstract way of saying that. You straw-manned my argument.
I am stating my views on state violence, and what power the state should have over others. And the state should never use violence, physical or psychological, to "compel" people to do anything. If they are a danger to society, then they can be locked away, but if they are not provably a danger to society in an uncompromised court of law, then that's it. Indefinite incarceration without legitimate reason is torture.

Are you telling me if I have a problem with the way my state is run I should call my local Republican state representatives and not discuss my views on a mature open forum? Gtfo with that shit, this isn't your forum my dude.
I can't speak to current day, but in the past it's been very easy to social engineer telecoms. So especially for high value accounts this shouldn't be used.
> if you can throw someone with gdb at the problem and get essentially the same "safety".

That's an odd tradeoff. That time of debugging could be significantly longer than just writing the software in a safe language. Seems like a bad tradeoff, and in many scenarios, bugs can lead to very bad things that you can't recover from. I've experienced all of these, having to fix them over long periods of time (not all my code, but sadly some was): data loss, concurrency (tough to debug in gdb), major memory leaks (even from std libs), corrupted data because of misused non null terminated c strings, array out of bound issues. Each one of these took weeks to track down, maybe because I'm not smart, which is a valid criticism; with Rust I've never had issues with any of those (2 years and running), and given that I'm not smart, it helps me by telling me where I got something wrong.

Be safe out there people...
Will they pay their writers or is this a magazine staffed by crowdsourced unpaid interns?
It's a quote from 1984...
4 mois de voyage
Show HN: Prep 100GB in 70 Seconds for RedShift – Serverless MapReduce
No, defeating SMS security is not a state-level-adversary task.
I bought a HyperFido but it just doesn't work on Ubuntu...

Was expecting to be able to use it to log in to Google using their 2FA key.. but only works on Windows from what I can see...

Anyone know anything about this?
heh, Workday is big boy status and convoluted go thru a 3rd-party to acquire the software method.
GCE does not have RDS, RDS is AWS.

GCE only has CloudSQL which is MySQL.
I have first discovered Eckhart Tolle, then Krishnamurti. Great insights, he always talks about the root of the problems.
It is legal to fix your tractor. I work for John Deere (though of course do not speak for them), and we are proud that you can by the repair manuals for every tractor we ever made, and most parts are still available. We are made at the computer industry because some of our newer (We consider a 15 year old tractor fairly new though realistically it is probably worn out) tractors have chips that cannot be bought anymore.

When I challenge people on this I eventually get down to what people really want: they want to disable the emissions controls. A qualified engineer (which most mechanics are not - but I suspect those reading this are) given the source code we don't give out can get our engines a little more fuel efficient at the expense of not meeting emissions, or a little more powerful at the expensive of being less reliable. When you read the above you will begin to understand why we made the engineering compromises we did, and see why we don't really want to give out the requested information. It isn't necessary to do repairs, but it is necessary to do things that you shouldn't do.

That is not to say I'm against the idea of this bill, just that the justification you are being sold is built on a lie. I think this bill needs to be carefully written to address this.
It all depends on how the gun is modeled. If, which seems likely, it is as simple as push-button-receive-bacon, then there are no consequences to pushing the button.

It's difficult to characterize that as aggression, especially if the system has no built in notion of harm or other-like-me.

That is what is actually scarier: Violence as paperwork.
Well, we pushed NATO onto the borders of Russia. I can't imagine the US would be too happy with Russian military bases on our borders.
> Yes, but it's not ethnically Georgian, which was sort of the problem.

This is the Russian argument, if a sovereign country has a majority of ethnic Russians, it's ok to invade that country on their behalf.

As a neutral, do you actually agree with this? It seems crazy.
Freedom From The Known is much more actual.)
That would be in the headers and prior to protocol breakout. I'm talking about after that. Why does web sockets have an extra layer of framing and other nonsense? Not to mention other "modes of operation." It's a socket. Give me a socket.
Prediction or self-fulfilling prophecy? Sounds like he's determined to force it to happen whether or not the average person wants it.

I was disturbed by the notion of an RFID in my dog. I am even more disturbed by having one in my daughter. Having a brain implant so billionaires can maximize my profitability (for their own gain) - take a hike! I'll go back to hunting and growing before participating in that economy.

I wish we'd spend more time trying to get software to work right rather than creating cyborgs. The idea of having a "blue screen of death" happen in my head is terrifying.
Hangouts (which I think GTalk turned into) still has some usage - certainly as a quick video conf call solution, and somewhat for text messaging. It definitely doesn't seem to have much of a future though since Google released a bunch of other competing chat applications.
This is the right way to analyze the situation, except we must remember that CP is of instrumental value to the legal racket, which is closely allied to MIC. CP gets them in all sorts of dubious positions, and spending lots of sweet taxpayer money, that they otherwise couldn't justify. "Legalizing CP" wouldn't have the effects we seek on the legal system as a whole, because they'd substitute some other issue (if one had to guess, "intellectual property" probably has the interest of various power players...) so they could continue business as usual.
I don't think there is an issue with email per se. It's more that there hasn't been much "evolution" in its use.

Though, Google and other companies have definitely tried to make email "better".

After an elaborate phase of talking to hundreds of companies, I've created a platform that has the approach of "collaborative email". It's providing an additional layer to email that helps companies to keep track of all those customer emails (you can check it out at http://helpmonks.com).

In any case, I think in adding additional service around email is where the real disruption lies.
Consumers are going to love the end of Net Neutrality – at first
Hong Kong used to be a Chinese fishing village. I can't believe people use this argument with a straight face.
Baby Alive Gabriela brincando com o Toilet trouble
I'm Australian. We tend to understate things as our way of expression. If you nit pick on words, you miss the theme. I find this is a good chuck of the internets problem in exploring a high emotion topic. The old cant see the forest for the trees.
What’s the Average JavaScript Developer Salary? Job Market Trends
Don't use either. I tried and failed with both. Expensive hardware and a PhD required to go through all the config options. When I did get both to work, they were very slow and I kept getting replication issues and bricks that wouldn't heal.

This cost two months of my life and I was not flavur of the month with my employer.

I eventually tried lsyncd ( https://axkibe.github.io/lsyncd/) and it works like a charm. It took me about a week to get a decent setup going, but it has never let me down since, can handle large numbers of small files (similar to yours) and smaller numbers of large files. I use unison ( https://www.howtoforge.com/tutorial/unison-file-sync-between...) for web server pairs.
Have a look at the Nitrokey, it's completely Open Source: https://www.nitrokey.com/
I've a yubikey4 but i'm not sure how/why i should use it. I get the 2FA case, where it provides the One Time Password to login in some services, sort of what the phone does with the authy app (or am I wrong?). But, what about the ssh access? Should the key be used to decrypt the ssh key when accessing a server? so that, if i grab anycomputer i can login on my server if I've the yubikey with me? if so, how should this work and how can I set it up?
Scratch all that, if you're able to stimulate dopamine production in the brain, you have the perfect product. I'm guessing creating bliss will be a lot simpler than creating visual stimuli.
3 Things I learnt while giving feedback
The bigger problem for SMS-based 2FA are social engineering attacks on the support personnel of mobile network operators. They typically don't have fancy authentication schemes - it's fairly easy to get them to redirect messages to a different SIM or something like that.
Boston University | Lead Designer | Boston, MA USA

Interactive Design is a piece of Boston University’s award-winning Creative Services group. We are looking for both designers and developers.

Currently hiring: Lead Designer, Web Developer II, Web Producer.

Lead Designer:
If you’re passionate, conscientious and love to concept, design, prototype, test, & launch interactive projects from large websites to editorial stories to mobile applications, this is a place for you. You’ll work closely with a team of copywriters, project managers, photographers, and developers while ensuring the project meets high standards of quality and addresses the client’s strategic goals. All while being around some really nice people.

What you’ll do:

You’ll work on designing interactive projects of many different sizes and complexities. For some of our largest, and most immersive projects you’ll take the lead and create great sites like the College of Communications (http://www.bu.edu/com), or Questrom School of Business (http://www.bu.edu/questrom). You’ll design stories like this one about searching for new physics at the LHC (http://www.bu.edu/research/articles/new-physics-large-hadron...) or explain climate change lessons from Venice (http://www.bu.edu/bostonia/fall14/lessons-from-venice/).

* Participate in all aspects of the interactive design process: Information Architecture, Wireframing, Prototyping, User Experience, Visual Design, and Frontend markup.

* Collaborate with developers to build complex functionality.

* Supervise the work of collaborating team members to ensure that client and institutional branding objectives are achieved;

* Maintain a state-of-the-art understanding of current and emerging tools and technology.

* Design both small to large university sites and longform, highly interactive, narrative editorial stories for several in-house editorial channels.

* Create great design, while still having a life beyond the office.

See full descriptions and apply: http://www.bu.edu/interactive-design/join-our-team/
Why this instead libsodium?
Show HN: Yamaha Extended Control Python API – Ver. 0.1
It's kinda both. Since module names are identifiers, you can't use -s in them. You can still make it work, I believe, with the path attribute, but you'd need to do it on every mod declaration.
I'd love some statistics on this - what is the proportion of immigrants who are doctors, and how does that compare to the native population (for Germany, the U.K., etc..)? How does it depend on the immigrant's country of origin? And, if the goal is to reduce medical costs - why not accept only doctors?
So... any chances of a market on propeller-driven airliners opening up?
To argue that, you'd have to demonstrate that the fats in animals raised on what you call healthy food differ chemically from the fats you'd find in animals fed otherwise.

Related example: The glucose from sugar beets is chemically identical to and indistinguishable from the glucose from sugar cane or corn. Animal fat tends to be a more complex mix, but while no expert I suspect there's only so many different lipid compounds produced and stored in animal cells. After all, the energy currency in any animal's bloodstream is mainly glucose - the source information is lost.

There are excellent _ethical_ reasons not to mistreat animals as is today often the case. I'm not sure that there are chemical reasons related to nutrition.
Adaptive windshield wiping? Shit, I'm just hoping automatic headlights become standard. I had two Camaros, one from the late 90s and one from 2002. They both had auto lights.

My 2008 Prius? Nope. My sister has a 2007 Honda Odyssey, no auto lights either. How much difficulty is it to add a damn photosensor and a switch?
The Mesa project began as an open-source implementation of the OpenGL specification - a system for rendering interactive 3D graphics.

https://www.mesa3d.org/intro.html
and I am also Digital Ocean customer. It has meant I can completely remove a whole storage layer and has reduced my droplet bill overall by 20%.
to me, this accurately describes most user experiences of most open source software.

its not just gpg and mail encryption, this sort of experience describes a lot of tools - and not too long ago just installing linux was a considerably worse nightmare of usability fails than this (it has greatly improved, i'm happy to say)
Show HN: Digital agency website – would you hire us?
I don't see why repeating the US's current governing party line requires a sarcasm tag. 40% of American voters agree with everything I'm saying and they decide what the US government does
What betrayal? The UK and France did go to war against Germany, but they were not in a position to invade Germany in 1939. France suffered more than 4 years of German occupation as a result of its decision to declare war on Germany, a pretty high price for honoring its obligations to Poland.
Saved you a click: it's many of the same ideas as libsodium, but mostly with ChaCha and allegedly easier to deploy. I'm not sure I believe the latter, and my recommendation to use libsodium stands. ChaCha20 is also available (but only in AEAD mode with Poly1305) in libsodium, if you really need it. I think XSalsa20 is a reasonable default: if you had a protocol where there's an obvious sequence number to use as a nonce, you probably should already be using TLS anyway; most of the things where libsodium is your best option is precisely in the cases where you don't have the luxury of solving that sort of coordination problem, and you want a random nonce (and hence, extended-nonce versions like XSalsa20 or XChaCha20. I don't know of anyone who has deployed XChaCha20, although the construction is "obvious".)

I've previously criticized a blog by the same author called Rolling Your Own Crypto, which had serious flaws.

AFAICT, this is ostensibly cryptographically fine (modulo some safeguards that probably only matter if you're Doing It Wrong already anyway), even though the final recommendation is still "avoid". There are many things I disagree with (don't put the documentation for the internal hash for ChaCha20 before the authenticated encryption API!), and using TweetNaCl as a base is less interesting than using libsodium which is both fast and has a lot more eyeballs on it.
Two things.

First: it needs to be made clearer why anyone would use this rather than Nacl/Sodium.

Second: this statement does not inspire confidence:

"The current code is fairly rigorously tested. Every primitive match their respective test vectors, and most constructions are tested for consistency. The entire test suite is Valgrind clean."

If your primitives don't match their test vectors, your tool doesn't work at all, so pretty much every crypto tool, including MiLiTARY-GRADE-CRYPTO v20 GOLD on the Android store or whatever, achieves this level of rigor.

Here's a good Reddit comment on the last crypto thing the author wrote, a few weeks ago:

https://www.reddit.com/r/programming/comments/5iv1ti/rolling...
I've seen that article and it's a heap of crap. There's no reason they couldn't make the firmware read-only so you could verify it, then publish the source to audit and verify against.

>Reminder that open source projects are not provably more secure, nor is it easy (or even possible in many cases) to assert the source you see made the binary in question.

I can (and do) read the code for security-related software, and I can at least check for obvious backdoors and flaws myself. With reproducable builds it is possible to assert the source you see made the binary in question (and security related software must support reproducable builds for this reason).

If you want to convince yourself the product is secure, that's up to you, but it's not.
Learn Elixir in 30 days
"These people overcame heat-death with this one simple tr-"
As a friend of a few mechanics, i find this hard to swallow. The cars of the 50s are a joy to work on compared to most modern systems. Many will jump to work on a classic for that reason. Only chains are likely to turn an old car away, and you shouldnt be going there to service a classic anyway.
Especially when readers go and highlight random spaces…
Boston University | Web Developer II | Boston, MA USA

Interactive Design is a piece of Boston University’s award-winning Creative Services group. We are looking for both designers and developers.

Web Developer II:

We are looking for a Web Developer II who’ll contribute to the development and deployment of both websites built with a content management system (WordPress) and static websites. If you’re passionate, conscientious and love to innovate, test, and launch interactive projects from large websites to editorial stories to mobile applications this is the place for you. What you’ll do: You’ll work with the project team to fulfill requirements based on scope, wireframes, and design comps, optimize code within the code base, collaborate on QA testing and bug-fixing, and assist with implementation and deployment. You’ll collaborate with other developers, designers, project managers, and photographers to build complex functionality–all while being around some really nice people. You’ll determine appropriate tools, methods, and solutions for projects, help inform project scope, and estimate effort to inform project managers in setting project schedule and deadlines. If you want to work with a creative team of professionals to develop engaging, results-oriented online products for high-visibility, high priority areas of Boston University, we want to hear from you!

See full descriptions and apply: http://www.bu.edu/interactive-design/join-our-team/
What I've been wondering is: What, if anything, did they do during all of these years of drought in order to ensure dams and all required mechanism remained sound and ready for when rains returned?

The lake near my house was down 120 feet. You could see land and structures never seen in decades. Prime opportunity to get in there to inspect and maintain said infrastructure. Not sure anything was done at all.

I am no expert in concrete but I would like to think the break in the Oroville spillway could have been detected and dealt with with cursory inspections over the last several years, when access was easy due to the drought.

I don't like it when folks are put in danger because other folks who are supposed to be working for us don't do their jobs. Not saying this is what's happening here, I don't know, but the question needs to be asked.
> Russia has good reason to be worried about their defense. The western powers have been doing most of the invading lately.

Who is under a greater threat of being invaded: Russian by the west or a ex-Soviet Union Baltic state by Russia?
I have read through this thread and I have concluded that it is unlikely for me to make meaningful connections at our stage, or any stage, in Europe.

For the people wondering, we are building a connected device that users want and which poops money for us and for users. Based on my research this is not a value proposition that is of interest to venture capitalists.
Stephen Hawking-style tech helped convict ex-vicar of child abuse
Right there with you. A question that helped answer this for me personally: does this library need to exist given that libsodium already exists?

The answer seems "no" to me.
Optimizing for this sort of thing will end up with your brain in a vat. It's a fool's errand and Elon is an idiot for trying to open up this avenue for economic competition, as it's a race to the bottom. And it ends with human being as merely components to a machine utilized by those with capital to make more money.

We need to rethink a lot of things about being human outside of one-dimensional economic man.
Exactly. It works fine for most tasks, of course, but if you ever want to process the contents of the S3 bucket in bulk, nothing will ever be able to parallelize that one list request to /path/to/big-dir.

If you don't use the evenly-distributed-prefix trick, your only chance of speeding it up is knowing the file names beforehand. If they're all sequentially numbered, you might do that, of course.

The shardable prefix doesn't need to be at the top level. So you could also organize it like so, for example:

/secret/documents/2016-01-01/00000001.doc
thanks. Just what I was looking for (couldn't find the upvote button)
Two AWS Years by Tim Bray
You can use it as 2FA for your SSH installation too[1].

[1] https://www.yubico.com/why-yubico/for-businesses/computer-lo...
LOL - Sorry, this is another form of enslavement that he is proposing.

Nobody should be allowed to determine the destiny of another Human Being. It is in our very own nature to be free, to explore and not be shackled by any mechanism imposed by another human.
As with all enlightened superstar spiritual teachers, just don't look his life too closely or you will be disappointed. Even people who start good and their feet on the ground (like Krishnamurti) end up full of shit when they get too much wrong kind of attention. https://tricycle.org/magazine/the-shadow-side-krishnamurti/

“If you want to lose your religion, make friends with the priest.”

As someone who's second career is basically meditating (in terms of time and effort) I acknowledge the value and importance of having personal teacher as a guide. On the other hand I strongly warn about getting into trap of thinking them as something else than specialists that can help you with some issues.

'After the Ecstasy, the Laundry: How the Heart Grows Wise on the Spiritual Path' by Jack Kornfield is essential reading on the subject.