skysight-inc/HackerNews huggingface dataset:
You can have a security key on Google without a phone number, but you have to enroll with a phone number and then remove it. Google won't allow you to remove the phone number unless you have some other backup 2FA method available.

The best Google (actually: everywhere) 2FA "stack" in Q1 2017 is:

1. Hardware U2F

2. Software TOTP (Authenticator app on your phone)

3. Physically secured backup codes

4. Disabled SMS

My experience with the Y4 hardware and, particularly, software has not been great. I'm using the Y4 for SSH access (through ssh-compat mode on gpg-agent) and it's mostly OK, but if I try to use PIV mode on the same token I run into all sorts of problems. I'm bullish on U2F, but bearish on Unix token applications.
A good way to find out is to put all your stuff in storage boxes, and only take it out when you absolutely need it.
http://new-app-site.herokuapp.com/

It's a way for app developers (and iMessage app developers) to promote their apps without making a whole website themselves.
How Facebook and Google could disrupt the subscription model for news
"It’s way too easy to accidentally activate something"

Despite author's belief in haptic feedback, it cannot actually fix this problem. Touch bar is always going to be like that, always slower to use than physical keys.
Overcast 3: Design walkthrough
As I always like to say... "No, everything doesn't happen for a reason, but, you can always find a reason for everything that happens".
My elementary school library class teacher is turning over in her grave.
Anatomy of a production stack (2015)
Clearly nothing prevents it from being both. That may be how it began.
"DevBot in Driverless mode — scanning the Donington Park circuit in England"

https://www.youtube.com/watch?v=xrfCQ7qwPh8
I've been using mine since december. I love the way the keys feel but I have started developing some painful CTS in my left thumb due to hitting the cmd key a lot (coding, terminal stuff, etc). It pains me even now writing this.

So i started remapping everything to fn + control so my pinky can start doing the heavy lifting (like on windows) and vow to never use the cmd key again.
For Google 2FA, I'm pretty sure that it lets you remove the phone number once you've added a 2nd 2FA mechanism. Eg, once you've setup Google Authenticator and a Yubikey. At least that's how it worked when I set it up a while ago.

Given that Ted uses OpenBSD, I'm surprised that he has not mentioned the dumpster fire that is U2F on Chromium for BSD. This bug details the issue: https://bugs.chromium.org/p/chromium/issues/detail?id=451248. The last I checked, (~2 months ago), it was still a problem on FreeBSD. In order to avoid the crashes, I needed to set a user-agent spoofer to Firefox, so that I would not get a u2f prompt (and would instead be prompted for a Google Authenticator code).

That became frustrating enough that I decided to try switching from Chrome to Firefox so that I could use my Yubikey. I had to setup a u2f plugin for firefox to use u2f on FreeBSD. And to even get u2f requests, I had to install a user agent spoofer, and spoof a chrome user agent. Argh! So now I was spoofing Firefox on Chromium, and spoofing Chrome on Firefox. My head was spinning, and (because the spoofer spoofed old agent strings), I was getting nastygrams from corp. sec. for running out of date, insecure browsers.

I finally just threw in the towel, and set up a Linux bhyve VM to run Chrome under linux. The performance sucks, but at least I can finally use my Yubikeys. On the plus side, I can use PCI-passthru to pass in a webcam, and actually do hangouts on my desktop now.
Use Floyd Warshall if you can pre-compute.

It pre-computes all the paths from all nodes to all nodes, and it's incredibly efficient.

Most awesome algorithm ever :D

https://en.wikipedia.org/wiki/Floyd%E2%80%93Warshall_algorit...
Launch of the Robot Times
If this is the case then yes, skipping 3 years of new features might break many sites. That's should be expected.
Don't get me started...there's always someone (many someones, usually) arguing that cities shouldn't spend money on more bike lanes, when the auto traffic is so bad and there should be more car lanes. The cost of bike lanes is a rounding error compared to auto lanes; literally, foregoing adding a couple miles of additional highway lanes would pay for a whole small city to get bike lanes crisscrossing it, and could support more people.

And, I definitely attribute my good health (well into middle age) at least partially to biking so much throughout my life. Getting a few percent more people out of cars and onto bikes would help save the world in all sorts of ways, IMHO.
Back in the old days, it was pretty standard that the letter "i" was distinguished with serifs, but (and I found this perplexing) there was a lot of argument whether zero or "O" should have a slash. It was rather critical in the old, old days of filling out keypunch sheets.
I owe my legible handwriting to the drafting courses I took in high school. Before we were allowed to draw anything, we had to get a perfect score on one lettering assignment. It involved filling an A-size sheet (9" x 12"?) with many lines of alphabet and prose.

You'd finish, walk it up to the teacher, and he'd look it over. He'd give lots of praise, find one tiny little mistake, then mark it a '9' (10 needed) and cheerfully hand it back, "Almost there!"

It was weeks of this before the actual drawing started for some students. And they'd be expected to catch up to everyone else.
It's almost as if the framers didn't invent the Federal Reserve, FTC, FBI, etc.
The problem with `reject!` is that it's too ad-hoc: the more fundamental operation is to filter the elements of a stream. The input stream could be generated from any data structure (not necessarily an array), and the output stream could similarly be redirected into any data structure (not necessarily an array, let alone physically the same array).
FWIW, "runtime.GOMAXPROCS(runtime.NumCPU())" has been done automatically for you since Go 1.5, so there's no need to include it.
GNU Guix is also working towards full reproducibility, and has an up-to-date (but incomplete) list at https://www.gnu.org/software/guix/packages/reproducibility.h...
Just to second that - Nick and the team at ChartMogul have been awesome to work with. The product has evolved in leaps and bounds over the last couple of years.

We tried Baremetrics originally but when we dug into the nitty gritty of the numbers, there was a lot missing. To be fair, this was 2 years ago so I'm sure it's changed a lot.
Can you defend that, or are you trolling?
You have a small farm community of four houses, a few hundred/thousands years ago. One of the families has a animal die and is in dire need for help. Who do they ask for help?

Some warrior, sitting on a iron throne and passing down judgment from high in one the houses, or is it the old women of the village who carries the memories of who did whom a favor and is responsible for the community threads that binds the families together. Who has the power to make the decision?
Planning on doing the same. Just refreshed my desktop and plan to get a refurb MBP or wait another year.

Hell its almost worth it to do a hackintosh laptop and desktop but I don't want to have to deal with supporting it. I like at least one of my machines to "just work" and Apple hardware is nice.

Regardless I'm not buying new until the price goes back down!
Occam's Razor points to The Iron Law of Oligarchies/Institutions much more than "bad luck."
Same, though in my case it's entirely a result of me putting off the implementation of the networking stack in my game.
> Now it really suffices if make triggers a target if one of the inputs changed.

This is exactly how Nix and Guix works. If any inputs change, it will force a rebuild of all dependent packages.
This is what farms, or many family businesses in general, look like.

A light truck or small tractor is five figures. A larger truck or tractor can be a quarter of a million. A combine harvester is half a million. Livestock would add six figures. The land itself will typically be worth seven figures. Add these together, more than one of some, plus sprayers and irrigation systems and various other pieces of farm equipment each in the five to six figure range, farmhouse, feed and crop storage and other structures, you can easily exceed five million dollars. Many businesses are very capital-intensive.

And a farm is just an example. A family construction business is going to own the same sort of expensive industrial equipment. A family that owns and operates residential apartments could exceed that amount with one building in many cities.

The only reason very few family businesses are impacted is that the ones who failed to engage in tax planning to avoid it were dismantled by the tax a generation or more ago and the remaining families do the tax planning. But what's the point of specifically screwing over the families without the civic disloyalty to rearrange their affairs that way?
It would be much nicer if everything were on one page instead of 12. Scrolling down is easy and relaxing, moving your mouse and clicking on the next link breaks the flow.
Not a Google employee, but I reckon ranking down sites with shared IP addresses would disproportionately impact sites on shared servers regardless of the reason. Plenty of websites out there rely on cheap/free hosting providers that shove everything behind an Apache or nginx instance with a single address. This is especially common/useful now that SNI is mainstream and widely supported.
I think the argument here is to embrace the immutability of arrays in Ruby. The reason why this is called `reject!` rather than `reject` is because the designers of Ruby wanted you to favor returning new objects rather than mutating objects in place. Sure, you might need to do it from time-to-time and I'm really happy we have methods that enable such behavior, but this brings to mind the old adage "just because you can, doesn't mean you should". The author might have been trying to say in that quote that app developers should find other ways of solving whatever problem they have without resorting to mutating objects in place. I don't think we should go as far as to not include such methods in Ruby if everyone finds them useful from time-to-time, but I also think we should be staying away from mutating objects in place, rather than returning new versions of said objects and using that.
The only people who seem to be saying this are the insurance companies who would be hurt the most. And I think that even if this were true, you're leaving out the opportunity for innovation in other fields which are stymied by people who are too scared to leave a job with secure insurance to go on their own. This was one of the huge benefits to ACA even, and that plan still had alot of tradeoffs.

If America is moving more toward a "gig" economy, we are going to require a healthcare system that is no longer tied to a single job to make it work.
Who Are the Richest of the Rich?
From what I understand, inlining is the key optimization that compilers make to speed up code. Once inlined, the excess computations of a function body can be removed or shortened, based on the calling context. With that in mind, how can the decompiler identify such "magic multiplication" division given that the compiler might mutate the division code at the callsite?
Oh it goes way deeper than that. I used to work at a mid-sized business, maybe 220 staff at peak and they wanted SAP as a straight up CRM - cost for the building was about $120k + licencing (I don't know how much that was).

But there is a huge amount of customising you can do, the biggest part I've found is normally the integration with existing systems/data sets/data sources. As far as I'm aware, it will integrate with just about anything - I've seen it pull data from Access 2002 databases, proprietary analytics tools, in-house software that was completely undocumented etc etc. It costs many many $$'s though, good example of how throwing money at a problem can eventually fix it.
> Both C++ and rust encourage exclusive ownership. And that's a good thing.

It's not. It makes lots of important things unnecessarily hard and often leads to unnecessary copying [1]. It makes it hard to even do something like OCaml's List.filter and Array.filter properly. It gets in the way of doing functional data structures (ex: binary decision diagrams). Lots of common design patterns also require shared ownership.

> HOF tie resources to lexical scope; RAII ties them to object lifetimes, recursively. In turn lifetimes may be bound to a lexical scope, but often is not the case.

No, higher order functions don't per se tie resource management to lexical scope (though that's the easiest application). You can build an entire transactional model on top of higher order functions.

Second, tying resource management to object lifetime is dangerous, as object lifetime can exceed the intended life of a resource (ex: closures, storing debugging information on the heap).

Third, RAII is in practice little more powerful than lexical scoping. RAII works poorly for global variables (problems with initialization/destruction order) and thus is in practice limited to automatic and heap storage. Using heap storage leads to the aforementioned problems, where object lifetime can become unpredictable.

[1] https://news.ycombinator.com/item?id=8704318
Jaxn, just curious what books would you recommend to read to get into accounting? Because of hacknews i've been introduced into double entry book keeping using ledger (that I found really really useful). Kind of want to expand on the knowledge base (Not with ledger).
It seems like short messages are a perfect case for onion routing (not The Onion Router, but the general idea of onion routing).
And if you need dynamic graph with variable weighting and nodes, that's a case for D*

Mostly used for drone/rover/robot navigation in open environments, with the graphs evolving as the robot discover the environment.

https://en.wikipedia.org/wiki/D*
I've been doing this since I switched from Windows to Mac a few years ago. The cmd is in a very awkward spot to me.
What about the picts?

Women in Pictish society were regarded as the equal of men and succession in leadership (later kingship) was matrilineal (through the mother's side), with the reigning chief succeeded by either his brother or perhaps a nephew but not through patrilineal succession of father to son. [0]

[0]http://www.ancient.eu/picts/
Go grab Armbian for your Pine64, its the least worst thing you can put on it. The Pine64 itself is a terrible board, its limited to 1 USB port, the light on it doesn't tell the user whether the OS actually booted, and the microUSB connector allows people to use crap cables that don't provide enough power for it to boot, but provide enough power for the stupid LED to come on.

You could likely build a working image running kernel 4.10, Armbian has a build system for that or you can just use qemu-debootstrap.

https://www.armbian.com/pine64/
If it can take down your webserver due to unexpected CPU overload, then I would consider it bug
>even if that code has visible side effects

The argument is that you told it to do that. "Just print whenever", and whenever can mean never if the world dies prematurely.
Fruit Fly Brain Hackathon 2017 – Brain Circuit, Memory and Computation
As Tom Lehrer wrote about his college years,

"Hearts full of youth,
Hearts full of truth,
Six parts gin to one part vermouth!"
This is unfair, I think. Go offers strong guarantees that C does not. It has fewer sharp edges than C; it also asserts a principle of not polishing away sharp edges with concurrency.

You don't have to do everything better than C to be a huge improvement over C.
You can't have a U2F Key and a Mobile Phone Authentication at the same time with Google.
We've banned this account for repeatedly reposting its flagged comments.
While we are at it why not the indestructable g-shock for a few extra tens of quid? DW-5600?

http://www.g-shock.eu/global/images/lineup/zoom/DW-5600E-1VE...
Flagged because the title of the actual article is "How to Add PayPal Donation Link to GitHub Repo" and that is its exact scope. Title on HN is not representative.
That is both added cost and your still missing cooling the underside of the SOC. Most people will not take steps like that, so you end up with boards clocked at 900mhz instead of 1200mhz cause groups like Armbian don't want to burn up the SOC on users boards that don't have a heatsink.

Other bad moves are dumping 1.3v or 1.4v into the SOC and not allowing the user to adjust that voltage, cause then the board is just generating heat needlessly instead of running at 1.1v or so.
Agreed, this is probably my #1 pet hate on any modern OS, along with the "web page loads a new element somewhere above the cursor just as I click, sending my click to a new and unwanted place."
On the contrary, I'm significantly more conservative than most of my friends (heck, I shared a post from National Review yesterday), and don't prescribe to either party. I have a hit and miss chance of reading WSJ because of their paywall.
I need a grid component that supports single cell value re-computation.

Trying to display data that is computed (think Excel formulas) with react-data-grid and others is very complicated. I still am not satisfied with my current use of weird memoized selectors and a custom table.
The 1992 Cable Act made exclusive franchises illegal, but does not retroactively apply to pre-1992 contracts. Almost all of those contracts have since expired and been renewed as non-exclusive contracts under the 1992 Act. Hazelton, for example, granted an exclusive franchise before 1992, which expired in 2005: http://articles.mcall.com/2004-03-25/business/3517245_1_fibe.... The suit in 2004 was over the last year of exclusivity.

I imagine there are some 30-year exclusive franchises granted in 1991 that are still in effect. I don't actually know of any.
Epileptic Woman Raped, Tortured and Denied Medication Over a Minor Drug Charge
It's not so much a number of heads, but what I reject is the common notion that somebody can be so many levels above a problem that they are absolved of responsibility.

Let me ask you this: How many people in the HR department would you need to see leave before you'd feel comfortable having your sister work at Uber? What would you need to see to have trust?
I only use it as an SMS replacement.

Really, as long as you have mobile data, there's no difference between supporting SMS encryption and not - you can only talk encrypted to other Signal users anyway, and other Signal users will get your non-SMS-routed encrypted message just fine.

The use case for Signal-encrypted-SMS is continuing to send encrypted while you have no IP connectivity, but thankfully that is becoming a rarer corner-case. The last time I had SMS but no IP was on a cruise ship.
If the title needs correcting, you can email the mods via the Contact link in the footer. They're quite responsive and often fix titles.
Whereas I can barely read my own name if I write it #digitalchild
Why would it be surprising to you that two different sets of people have two different attitudes?
Are you joking ?
I truly believe I am now dumber for having read that. (I read it all just too see if it got any better, it doesn't. It gets a lot worse)
Not legal advice, but fun reading: http://nissan.com/
If that's true, it's a good argument for hiring minorities and women, since you would not be burdened by incompetent leaders.
Agreed. It's worth noting that Arduinos, by default, are programmed in C++ (thanks the AVR port of GCC), and it's been this way more or less since their first version, which (as far as I recall) was a fairly small 8-bit micro. There's plenty of even less powerful micros, but it seems like architecture and tooling are really more of a constraint than capacity (e.g. low-end PIC micros have a less C-friendly architecture).
Spammers are already doing what they do. I have rudimentary measures in place, but additional data will enable a more sophisticated response. I use the service myself and find spam to be crazy-making. So... ;)
Ah, datagrids...

- The 'Platonic Ideal' data grid implements 100% of all features that could ever be needed of a datagrid.

- All implementations of the Platonic Ideal only implement between 50% and 70% of the features.

- Your requirements cover somewhere between 60% to 80% of the features exposed by the Platonic Ideal.

- The set of features you need vs those that are provided by the available datagrids are disjoint, implementing the remaining required features is a hellscape of custom extensions...
Yes, it's really good! Makes it feasible to "sat first, ask questions later", especially for bit trickery.
This really isn’t a problem from a security standpoint because everyone expects screening; no “bad actor” will count on the possibility of an abandoned checkpoint. The 11 people who went through simply saw a weird situation and decided that they wanted to be on their way. Frankly, any attempt to “find” these people or “identify” them is a waste of time.

The only issue here is managing employees. And sometimes I see so many TSA agents that I’m astounded there could ever be a case where there aren’t enough of these people around to keep a checkpoint running.
On top of it, in cases where you would actually want focus stolen, or at least pushing a window to the front, is Outlook reminders. But no, in the case of a fricking reminder, Microsoft seems to have thought keeping that hidden was the best user experience.
It's not neo-cons. It's liberals too. God forbid we raise water rates so the water utility can replace aging lead pipes--"what will happen to grandma if water rates go up???!"
Emotional self-control and consistency within a narrative adds huge credibility
For anyone else looking into recurring billing I'd highly recommend Chargebee (not affiliated at all).

We've tried a few different solutions and were a little apprehensive at first because it looked a bit clunky but it's actually one of the best bits of software I've used. You don't realise the number of features a subscription billing platform needs until you use something like chargebee and discover how wonderful it is to have someone do it all for you. What's really great is before changing anything they give you a pop up showing what's going to be billed now, what will happen in the future etc. We used stripe before switching and I was a nervous wreck before ever pushing any buttons.

My co-founder and I were saying just the other day that we think it's one of the best investments we've made as a company.

https://www.chargebee.com
I can relate to that.

As we run > 500 instances on AWS and GCP combined, we gave K8S a try, to see if we can get a shorter+simpler+cheaper way for our production.

K8S on GKE (Google Container Engine) turned out not to be a good fit for our needs at the moment. Instead, we found ways to get more efficient with platfrom's provided provisioning API to gain all what we wanted with K8S in a far mature env.
The post itself has a pretty good list of 10 sources of non-determinism:

1. timestamps
2. dates/times/authors etc. embedded in source files
3. timezone sensitive code
4. directory order/build order
5. non-sanitized data stored into files
6. symbolic links/paths
7. general tool inconsistencies
8. toolchain
9. build information / tunables / environment
10. making sure that the source tree has no local changes

With a bit of info on each.
Just note that Yalp is storing the username and password you give it server side.
Battery life + Microsoft Office + iMessage integrations are the big ones but there are other niceties that Mac has.
>known scammy field

It really isn't, though. It's not a scam to publish with a p>.05 standard and get false positives. It just means you need to take studies with a grain of salt.

Note that this is a replication of a similar technique used in fMRI, but this time in a different modality (=> different signal space). [See Owen, 2012]. Unless you think the academic field of machine-learning is a "scam", then this is starting to look somewhat credible. It's getting interesting, let's say.