skysight-inc/HackerNews huggingface dataset:
I would subscribe to Watchtower, or, heck, probably even 1Password Famlies, if AgileBits took a more aggressive/proactive approach to password updates:
1. Prompt batch password resets for services whose vulnerabilities have been exposed before those exposed admit their breach to consumers (e.g. All services compromised by the Cloudflare dump - usually consumers are the last to know).
2. Preformed all password resets in a secure AgileBits browser (assuming the browser built-in to 1Password on iOS is secure).
3. Had an optional prompt to prevent unintentionally syncing/backing-up 1Password data, and accessing said secure browser without first confirming VPN status with the operating system (maybe even prompt user to connect to VPN before unlocking if VPN connection isn't established)

Alternatively, I'd subscribe for integration of a 1Password browser extension for a reputable (regularly high, multiplatform AV-Test/NSS performance) internet security service's browser, and Watchtower was as sensitive as mentioned above and integrated with said internet security service.

This is coming from a longtime 1Password Pro user (3-6 yrs) who recently got his family on the 1Password bandwagon.
> Would the British have invaded India had everyone been armed like the US citizenry is? I seriously doubt it. The army would have been liquidated by the people in short order. It would be suicide to invade a country of that many armed people.

The British never "invaded" India. This is a common misconception about Colonial Rule in India. Read about the "Company Rule in India" to understand better: https://en.wikipedia.org/wiki/Company_rule_in_India

TLDR: The British established the "English East India Company" in 1600 to trade with India and did well for almost 150 years. The British had made friends with local princes and nawabs promising them protection if they allowed them to establish their Company. During the same time, the Portuguese, French, Dutch and Danish began to establish their businesses in other princely states of India. This caused friction between the British and the rest causing civil wars to break out. These wars continued for almost 200 years more and involved princely states fighting each other for the benefit of the foreign companies established in their states.

This in turn caused weakening of the princely rulers and strengthening of the foreign companies which commanded garrisons (supplied by the princely rulers) and funded by their business. This shift in power was instrumental in the British devising the Annexation policy called "Doctrine of Lapse" which was signed by these unsuspecting satraps. The doctrine basically stated: "Any princely state or territory under the direct influence of the British East India Company, as a vassal state under the British subsidiary system, would automatically be annexed if the ruler was either "manifestly incompetent or died without a male heir"." This along with the "Divide and Rule policy" enabled the British to establish a Colonial rule in India. All battles the British fought were through proxies (loyal princely satraps) and very rarely did the British actually involve in the fight. Once the Colonial rule was established (powers of the Company were transferred back to the Crown), the British started abusing their powers which in turn caused a surge in Nationalism (read about the First War of Indian Independence of 1857) which eventually ended in the Independence of India (in 1947).

The British technically never waged a single War (there were small skirmishes/battles) with India because that would have triggered all princely states to come together and fight them.
Embark launches as a competitor to Ubers Otto in the self driving truck space
Maybe stated in a different way, how good do your priors have to be to learn and understand a language? With an infinite amount of training data, any language can be learned. The question is what prior assumptions are required to learn a language in a reasonable amount of time?
It's not.

I'll clarify, to help.

The reason not to trust polling data presented today is that the probabilities presented in the past were not accurate.
Yeah I think if the idea took off it could work but the actual payment screen and entering cc info would turn off >99% of users.
Fluxion: A easy to use wifi cracker, to test your own network
That's strange. Gamers have been complaining that games have been getting easier over time, to the point that 'normal' difficulty on many games (especially heavily marketed ones) is too easy.
Python Programming Tools for MCUs, Featured on Microchip Digital Magazine
Good point. However cargo-culting other surgeons subtly and fashionably and well enough to fool promotion committees into overlooking mediocre performance might take more creativity than you think. For one thing surgeons are intelligent, status-oriented, complicated creatures. It's not just about picking the right clothing. Not giving the game away by your demeanour may require that you fool yourself too. Such narcissism might take a herculean effort to maintain because your ideas about yourself are connected to other, more objective, ideas. You might have to organise professional conferences and get involved in politics, which always take a psychological toll. If your attention is on the wrong things this could indicate that privately you don't believe your surgical performance is up to much or that it can be improved. Which may turn out to be a self-fulfilling prophecy.
Assuming you meant "hide behind", his original attitude seems to be more like "this is sufficiently unlikely in practice that I consider attempting to mitigate it in advance to be overengineering with a higher opportunity cost than it's worth". Which, well, I think when it comes to security stuff he has a nasty tendency to underestimate the risks and thereby pick the wrong side of the trade-off, but to me it's clearly a trade-off rather than something to hide behind.
R is good for statistics and nothing else. It is, however, really good at statistics.

Python in more general purpose. If you want to do things that are not statistics in the future, python makes more sense.

If you're going to get started with python, get started with python 3.
Android libs from GitHub or other websites
I think strgrd must be from the future, I strongly agree with your prediction of the future.

There feels like there is an analogy to our civilization. We existed as very primal beings operating in a world of high anonymity. A real world with high anonymity meant a more dangerous environment (theft, murder, assault, etc). In order for us to congregate & live a collectively improved life, we decreased anonymity. We did this with the idea of names, roles (sheriff), & printed records.

New complexity emerged from this. We needed to collect funds via taxes, make and enforce rules. We needed to know who each other were in order to give the rules some repercussions. Eye witnesses were crucial because of their "ability" to remove anonymity.

These steps of stripping anonymity were done with the intention of improving society. This point here is debateable, feel free to challenge.

We're at a unique moment in time where there's a highly dense "locale" that has full anonymity. What's even more interesting about this locale is that it's permeated across our "real world" society. The implications of this reality are immense, we live in two worlds that are interwoven — one that has little anonymity & the other with abundant anonymity.

As technology increases in power & importance (it will) this is tipping the scales. In general, I don't have much faith in humanity's ability to live within an anonymous world without devolving into very primal pre-civilization behavior (see: 4chan /b/).

I'm not sure this is a stoppable (or advisable to stop) process.
this isn't equivalent. In your scenario the single employee is choosing to take advantage of the company's hospitality and I think their manager would be right to either deny that or speak to them afterwards.
Sorry to be blunt but if you consider a difference of $1.95 to be "a ripoff" then that doesn't leave a lot of options. The only cheaper alternative I can think of is hosting directly on Wordpress.com for $2.99/month: https://wordpress.com/pricing/
Right. This also means that you can't currently trust code that runs on the blockchain since there are likely more bugs like the one that was exploited. Thoughts on that?

The change in Ethereum was "voted" for by a majority of hash power (but of course as influenced by the Ethereum leadership, so people had the popup in the client along with a recommendation what to vote for). So isn't that correction also in the spirit of Ethereum? Miners decide.

How about fixing obvious bugs, but otherwise upholding contracts?
And about this you cannot lie, even though you're a lawyer.
That is the legit case, but I would still trade that for security that iOS offers. I am sorry that I didn't make it clear, but with that sentence I was referring more on those people that talk about aesthetics, widgets, launchers, etc, etc...
How about when Matty got hacked and 4chan was defaced? While the technical details differ, the situation itself was almost equally bad.
Yes, you absolutely want a truncated version of SHA2 if you're going to be upgrading.
The premise that HN is not monetizing is implicit in the question. Because it is part of Ycombinator, that implicit premise may not be sound.
That's just an ad hominem. Try addressing his arguments instead of his lifestyle.
"..so I don't allow myself to buy a console." this is common with so many other people I know (and try to convince to game with me as Adults).

I think its all too common to watch Nextflix & HBO for 20 hours in a week, but video games are taboo, despite being more social and cognitively enhancing.
SHA-1 certificates issued by public CA will no longer be accepted
I was about to disagree with you, but reread the original comment and it indeed can be read that way.

At first I read it as if the commenter were complaining of the closedsourcedness of DatoCMS.
1. Make the website invite-only.

2. Give out X invites to everyone.

3. Every user now has a reference pointing to who invited them.

4. Require that you must vouch for the behavior of the people you invite, and their behavior may impact your participation.

5. Use tree traversal and analysis for pruning bad sections of the population of users. (i.e. If you see a series of bad users, go up the tree to find the source and prune it there.)

6. Work on algorithms and moderator tools to improve said analysis.

7. Give merit and incentive to those who contribute. (See: Slashdot and Everything2 systems.)

8. Add anonymous meta-moderation. (Again, see Slashdot.)

9. Give ranks and small power to users based on their merit and participation, and somewhat based on their invited friends.

I can keep going. It's a bit harsh, but I feel it'd work.

I've considered making an example app, but the hard part would be getting a critical mass of users and content. Reddit, for example, faked posting content for their first few years to seed their community. It's hard to grow a new community, if even possible.

P.S. If anyone has a lobste.rs's invite, lemme know. Curious to see how their invite-only website has progressed.
Except the world isn't run by some computer blindly following a strict set of rules. Obviously if someone orders a steak and lobster meal, they might not deserve the same treatment. If someone orders a vegetarian meal, or a kosher meal, etc, then they probably _should_ be covered. It's a judgement call with shades of grey, yes, but it's not too difficult to see which side is "right"
"it is not a stupid person ... It is a person who almost certainly has no indication that he will suffer any negative consequences"

Jackets and sexual advances are likely just the symptoms. From Fowler's account it sounds like root cause is a political culture where individuals (esp management) are incentivized to act in their own self interest. Any employee can safely ignore another if that other employee is not politically tied to their personal advancement.

I'd like to think this is the wrong side of history, and that smart people should put their self-worth in acting in ways that optimize the benefit for all stakeholders. However, many political science theories predict just the opposite in large political organizations where selfish actors aggregating power end up at the top.

I know very little about Uber's org, but a leader with a Machiavellian hat on would likely focus on hiring management that are adept at acting politically. A political culture will eventually weed out those who are not.
Without instruction? They are watching people speak for years. They even have people "teach" it to them. Can you say, "Daddy"? While slowing down and enunciating.

We are unfortunately very aware that when isolated, kids don't learn to speak. So it isn't innate.
During the Ryzen launch announcement GCP was listed on their partners, this may only be due to the availability of AMD GPU's but considering this was a CPU-specific talk I'd guess the magic 8-ball says "outlook good".
Wordbank: An open database of children's vocabulary development
Yes. Learn R. Download RStudio. If you do statistics nothing beats it.
I'd rather join the headless chickens, actually. True, it took a year's worth of computation with incredibly stock hardware now. But that's only going to get cheaper.

By the way, nation-states won't use GPUs. They'll use ASIC. They tend to be 4-6 orders of magnitude more energy efficient than GPU for this kind of things (at least they are for Bitcoin mining). I just hope nobody succeeded in the business of selling MD5 colliders —it would mean the same could work with SHA-1.
I really want to love ReST. Part of that is that I like writing in text but having it look good. Part of it is non-technical; I've known the ReST developer forever. And if you need to do something complex, ReST is definitely the way to go.

If I was writing a technical book, I'd probably use ReST.

But, 99.9% of the time, my needs are much more mundane and fit well within the limitations of Markdown. Usually I can just sit down and write Markdown, sometimes I need to bring up a cheatsheet. When I just need to add some documentation related to my work, Markdown is perfect.

What I'd really like is something where I can write Markdown, but if I run into needing something it can't do then switch over to ReST. Because of the overlap, that seems like it should be doable. I was looking at some static site generators that might do that, but I had limited time to evaluate them and couldn't get my existing ReST documents directly to render there so I had to get back to work.

If anyone has had any success with that, I'd love to hear about it.

Oh, that and a way to see the results without having to render and load the results (which currently involves mercurial, fabric, sphinx, and a browser for me). I don't need WYSIWIG, but a quick render would be nice.
This is a fun subreddit to subscribe to: https://www.reddit.com/r/HailCorporate/
I don't think that's what he meant. As someone who has done some development on Windows, doing anything was a pain, even getting .NET packages wasn't as easy and intuitive as a Linux package manager is, pretty much every JS framework is easier to get, update, configure in Linux etc. Even working with PATHs on Windows seems harder than on Linux.

It's the overall experience.
What you choose to order at the restaurant is very different from what size or shape you happen to be.
'Slow slip' earthquake season raises risk of 'The Big One'
Ha! Yeah, I probably wouldn't take that bet...too short term.

Long term...I might be right though, assuming a few things...

1) The product category goes main stream, which it hasn't even touched yet.

2) The government uses it as source of information over and over.

3) The mass media actually covers it.

I have changed my behavior based on court cases. The government can force me to touch my phone to login, but I don't have to give up my passcode. So I always turn off my phone when going through TSA, which forces it to require my passcode on restart. I realize I'm probably in the minority here.
You'd either use the ansible or salt recipes for k8s to install.
Everything is nicely documented there.

There are a few very nasty pitfalls on the way to your k8s install in production though...

We deploy kubernetes on hundreds of nodes in multiple locations and i've to say i've never ever looked at any install docs.
ACK, they are basically useless, but overall i find the documentation quite good (except not up to date with the code on may locations).

What's severly missing is the overall picture!

But lets not stop there, if you want to have k8s running properly in production you practically have to make all containers yourself, otherwise some shitty container from dockerhub will bring your node down one after another (hint: read-only containers).
Dowjones is advancing the conspiracy theory that The sinister BigTaxiCartel want to see Uber done in, so they pay for writers to create blog posts for disgruntled ex-employees.

(It's not something I believe).
On a news or politics subreddit? Sure. I haven't seen much astroturfing on ELI5, or Askscience. Reddit is a big place... fortunately bigger than the various news and politics cesspools that inevitably emerge and rise to popularity.
Didn't know about this spec/format (i know they called a protocol, m not so sure it can be accurately called that way) seems cool until you have to realize that you must support all hashes or at least a handful of that in your app which is convenient from the developer POV but wasteful from the database-administrator because you must either future-proof that column size or drop performance altogether and start using "document-db" for authentication which is kinda odd.

IMHO you should not "future-proof" password hashes, collision attacks for passwords are more difficult to achieve than many people realize. What you should as a developer do, is stop using the hash and only migrate systems that actually required in a case by case basis.
I thought that phrase was relative to financial markets, not a general thing.

My feeling is that things will get worse. But by then we will have climate change starting to hit, and an unsustainable population. I guess I am pretty skeptical about the future overall.
I'm curious about how those numbers break down by type of game. 3 hours of casual phone gaming, e.g. playing Candy Crush while waiting in line, feels different from 3 hours of sitting in front of dedicated console/computer.

It's analogous to saying X% of adults read 3 hours per week, outside of work. Reading hacker news for 3 hours is different from reading US Weekly is different from reading a novel, etc.

I'm not passing judgement on any of those activities or saying any aren't worthwhile or whatevs. I'm just saying the broad category of "video games" or "reading" is so vague as to be almost useless. The consumers have different motivations and desires.

Sorry if this is addressed in TFA; I only skimmed it.

Edit: Also, an opinion question: I play the NY Times crossword puzzle on my phone; would that be considered playing a video game? I wouldn't categorize it that way, but I don't have a logical reason when I really think about it.
Just because you don't like a headline is not evidence that it was paid for. The main organic bias in crowdsourced news sites are clickbait headlines and it affects all political view points.
Women's jackets tend to have small changes, like shorter length and zippers on the left. The small changes make the jacket fit and look better.
Prose.io does nothing GitHub itself doesn't offer.

But hey, maybe someone will write something like what I described. Maybe I will.
>these kinds of behavior have been extensively documented inside and outside this industry for nearly a hundred years now

Holy crap computers have been around for 100 years?

> (generally white, straight men)

Citation needed. Also, think about this. What other sort of adjective used to describe people or sexual orientation would be acceptable to describe people fitting a bad image? If you said the same thing about hispanic bisexual women, would that be socially acceptable?
Wow, that's much worse than I would have guessed. I would have assumed 10:1, tops. We get security reports, and sometimes they ask for a bounty, and only a very small number are bogus (but we don't have a formal bounty program). Less than half of our security issue reports are totally bogus, and another quarter are theoretical issues, but result in some sort of clean up in the code (e.g. no one can figure out how it could be exploited, but it gets refactored anyway).

I've been meaning to try a formal bounty program, as our software is a high value target (administrative tool running on over a million systems), but we're Open Source and don't have a lot of budget for bounties or anything else. If it produced hundreds of reports for every valid issue, it'd be counter-productive, for sure.
Most likely they had to ask every applicant the same list of questions.
The checklist is not required to be on such level of detail. It just has to exist and it has to be generic enough. It's interesting to see here example with fire alarm: to me existence of such factors is the smoking gun of potential improvements to the experimental environment. Why not excluding ALL stress factors by designing something like sound-proof cage? Needs extra budget? Probably, but how about some another unaccounted noise that will ruin the experiment? This gives us an idea of better checklist: ensure that experiment provides stressless environment by eliminating sound, vibration, smells etc.
I think that oversimplifies the ways that Rust (and Java and Go) are safer than C and C++. Of course in any language, the code that handles a buffer can accidentally send that buffer to someone it shouldn't. The problem with unsafe code, though, is that mistakes anywhere in your program can leak the contents of any buffer. Languages that make unsafe code rare are much less exposed to that sort of chaos.

This was the case here. An unsafe parser leaked memory that had nothing to do with what it was parsing.

Related: https://tonyarcieri.com/would-rust-have-prevented-heartbleed...
Almost none. Put CoreOS on both, pull yourself a HA database and install Rancher which creates a ipsec network overlay (both hosts), set up your containers on both hosts, set up HAProxy on both hosts (configuration is done only once), then set up an external DNS service from the library that updates your DNS when a host goes down. I even run a small DNS server in 2 containers on both hosts so I don't need the external stuff, that updates automatically once hosts go down and also does some GeoIP resolution. Not complicated any more.
There's also probably going to be a huge market in making games that older people can play when this generation hits retirement age.
Depending on the application the overhead of 512 bits vs 256 bits is significant. In these applications SHA-512-256 and BLAKE2b-256 are my go-to recommendations. I don't recommend SHA-3; it's design is obviously considered very solid, but it's performance characteristics make it uninteresting for software compared to both SHA-2 and BLAKE2.
Interestingly, you decided to frame this as "treating [the women] differently on the basis of sex". Why not "treating [the men] differently on the basis of sex"?
That's great except these women didn't choose to be women. Picking a sandwich is a trivial decision and not the basis of who you are. It's telling that your immediate response to this is to concoct some specious argument to show how there maybe wasn't bias.
as an American, I didn't realize it was a UK Gov website until you pointed it out.
For a beginner trying to decide between Python 2 and 3, 'learn Go' doesn't seem like useful advice. One good thing about Python is the gobs of educational material available, much of it free. If the person is looking to make this a career, they'll end up learning a bunch of languages as a matter of course anyway.