skysight-inc/HackerNews huggingface dataset:
Ask HN: How to minimize risk when having to disclose passwords on US border?
The word on the street seems to be that no matter what, you can be asked your passwords if you want to enter USA nowadays and if you don't comply the best you can hope for is to be sent back. Until now I've read here on HN mostly some strategies on how to not comply with plausible deniability. But how about another assumption?

Assuming Joe

* is not a security expert
* doesn't know its passwords and uses a password manager
* has 2nd factor authentication enabled (but only) on some of the logins (some tokens, some TOTP, some sms)
* doesn't want to deceive or lie to the requester (border agent?) and doesn't want to give the agent reasons to detain Joe, confiscate Joe's devices... and so he's willing to comply

how does Joe even reduce risk in his compliance?

Is changing all passwords as soon as possible after crossing borders the best risk reduction he can do? (Considering he just gave up a lot of passwords just because he unlocked the password manager it's already a pretty exhausting burden IMHO). Maybe having a list of required logins, one could have a separate temporary "vault" of logins just for the required accounts, hence avoiding compromising all other logins (and change the temp vault's passwords asap)?

What about the 2nd factors? will the software ones require a refresh? How about the hardware ones or the U2F ones (I don't think you can refresh them)? Maybe disabling 2nd factors until border is crossed? Possibly even not bring the hardware ones and re-enabling them after crossing with a new one that wasn't "imported" while traveling?

Thanks for your opinions
Ask HN: Really afraid to start my own technical blog, any tips?
I want to start my own technical blog and share all the things I learned, but I am too afraid that I might write something wrong and fail my readers. Any tips on how to overcome this fear?
Great design & feature set.

Feedback: the navigation bar at the top is quite unusable from an UE point of view. The positions of the icons (and therefore the hovering position) change as the mouse hovers them. It is quite annoying.

Also, in the FAQ: "How can this be a free service? Magic"
This sounds to me as: "stfu, don't ask, you are not clever enough to understand" or "there is some dirty way to get money from you, better don't ask".
Drop a buoy with a sensor to reflect off the bottom of the "Creek" or different bands ultrasound/vs other frequencies to tell ground vs. Water I don't know.
Well, do you have any readers now? Aren't you a professional procrastinator.
Even if they were sound asleep; what Echo recorded may be incredibly damning - a muffled voice, screams, no evidence of someone sleeping nor of an intruder, yet enough to pull a Jury's emotions that a conviction is needed and the death penalty is merited.
You are completely right.

As Hoare so elegantly described at his Turing award speech, regarding Algol compilers, back in 1981.

"Many years later we asked our customers whether they wished us to provide an option to switch off these checks in the interests of efficiency on production runs. Unanimously, they urged us not to--they already knew how frequently subscript errors occur on production runs where failure to detect them could be disastrous. I note with fear and horror that even in 1980, language designers and users have not learned this lesson. In any respectable branch of engineering, failure to observe such elementary precautions would have long been against the law. "

Full speech here:

http://www.labouseur.com/projects/codeReckon/papers/The-Empe...
How is echo audio data substantially different than something like a tape recorder that was live in the man's home? What about a cell phone that was on a call at the time of the alleged murder?

I definitely understand wanting to ensure reasonable privacy for users, but to me it feels an awful lot of a stretch to say that the echo is off-limits in this case.
At the bottom of the page, you'll find a link to a Medium post that explains YC Remix in more detail.
Would be better to have a stick with a camera. Or many sticks with cameras.
North Korea's value to China is that the Korean peninsula is the historical invasion route into China.
Connectify Hotspot Pro 2017 Full Crack and License Key Free Download
Seems to me that if you use compressed air to displace water within the sphere, you could actually store more energy this way... That would require the air to drive electric generators when the sphere is being filled with water though.
other names for it:

http://wiki.c2.com/?ArrowAntiPattern

http://thedailywtf.com/articles/Coding-Like-the-Tour-de-Fran...
Only very serious cases can get free heroin in The Netherlands. Some of the criteria: you have to be at least 5 years addicted, you need to have tried methadon to get over your addiction first, you need to be a daily user and need to have bad physical or mental health.

None of those people quit after having been admitted to the program. But they do get a better life and are not forced to be criminals anymore.
Warren Buffett and Charlie Munger – 2016 Berkshire Hathaway Shareholder Meeting
Famous Russian hacker Kris Kaspersky passed away
The cost of the F-35 program shows how good that decision has been.
I work for a Fortune 100 size company that treats women and under-represented groups with respect & dignity (from every interaction I've seen). The pay and benefits are excellent as well. I'd rather convince women to join my company than a company that mistreats them. Your argument about a rocket ship lottery ticket isn't worth much compared to mistreatment.
More links (in Russian): http://rsdn.org/forum/life/6717583 + https://xakep.ru/2017/03/07/kris-kasperski-rip/

Wiki page about Kris https://en.wikipedia.org/wiki/Kris_Kaspersky
That was my first thought. Why should the defendant have a say in what evidence can be collected? Did the Feds ask if they could take DNA samples from the scene, for example?
I have become a bit of an IBM skeptic, what with excessive IBM Watson hype, but this seems like a really good idea. A distributed and secure blackboard type system seems like the way to go, rather than using a database that one of many parties is trusted to maintain.

I just looked at the Java SimpleExample code in the repo and it did not look too difficult to use.
I suspect that it is as much about PR as anything else. Amazon probably has no qualms handing over the data per se. But they also realize that doing so without first putting up a 'fight' would look very bad.
Without knowing the particulars about your situation. My best advice is to have a proven track record of being able to deliver code.

Easiest way is have OSS contributions.

A resume means nothing without some code to back it up
You already assume that the scale of the retention will be in years.

What makes you think that ? It may be days, where "as long as possible is "we hope to keep the files a few weeks".

Without some sort of project plan you don't know if NoFile.io is aiming at snapchat for file, or S3 for everyday Joe.
R/AskHistorians Goodreads Bookshelves (200 books)
Google Assistant on phones can finally read and interact with text messages
Wouldn't a jurisdiction without 5th amendment protections be unconstitutional?
Can you call emergency services via Amazon Echo? I've read on a car forum I'm part of about someone who was working on their vehicle without jack stands and got trapped when their jack slipped. They used Siri to call their wife and jack the car back up. They probably would have died without it.

I can easily forsee a future where consumers ask companies for voice assistants that turn on automatically when they detect duress (not needing to say "Alexa ...") before one where governments actually compel product manufacturers to do this.
Using compressables lowers the efficiency because compression leads to heating.
This argument would hold water if there was a common pattern of discouraging women or other tech minorities to avoid early stage startups. AFAIK this is solely an Uber thing though, because Uber is that much worse than the status quo.

Also, this seems like maybe it would be a relevant consideration for joining Uber in 2010 - nobody joining in 2017 is hitting the lottery and contributing to a virtuous cycle.
I used to agree with you but now I resoundingly do not. The only compelling reason I have left is still quite compelling: testability. Without breaking your code I to subroutines it becomes orders of magnitude harder to test effectively or at all.
No, there is no dynamic checking that guards against iterator invalidation in general. You can't make it memory safe with gcc or clang.
Worth noting, it is possible to disable this on certain systems that come with Intel ME out of the box:

https://libreboot.org/docs/hcl/gm45_remove_me.html

There's work in progress on removing the ME blob on the Thinkpad x220 and the Librem 13.

But for most modern systems, yes, you're right.
It's about normal. And you've not had to deal with multiple project changes (including technology changes) yet, due to pivoting. Be happy! This is what you're learning!

The other extreme, is development at NASA, where productivity is 100 LOC per programmer per year. Can you imagine working one year on the same 100 Lines of Code, fine tuning them, testing them, debugging them, documenting them for one year?

When you'll feel better and unchallenged at this startup, you'll have the choice with a new startup with new challenge, or a normal programming job in the middle.

Or if the startup grows, eventually it should stabilize, with bigger teams, more communication, ie. more documentation will be needed, with more process to still keep the teams efficient (so you don't have to wait on colleagues to finish), etc.
Worst case scenario, you write something wrong and somebody notices and put a comment. Simply acknowledge, correct the post and carry on.

Remember that many scientific papers published in peer-reviewed journals turn out to be wrong/not reproducible or contain errors .
Cool C++ Tricks to use in competitions
How do you propose one creates Zcoin then?
Where the data is stored is a fundamental difference.

That was one of Amazon's primary arguments, that they had not received a warrant valid in a relevant jurisdiction.
Amazon hands over Echo 'murder' data
It's a difficult question to answer exactly how long a file would be kept as the deletion is based on two factors:

- How active the file is (e.g if the file isn't downloaded in X days).

- How much space that's available on the storage servers.

As mentioned in a previous comment, the site's operating on small margins so the majority of the income will go to expanding the storage in order to make sure that your file is never deleted (unless you request).

At the current rate your file would never be deleted (again, unless you request it) and at a bare minimum your file will be stored for at least a week without downloads so you don't have to worry about your file being deleted before your downloaders get to it.

This will be updated in the FAQ section to avoid confusion as well, thanks for pointing it out.
That is just the point watwut made. The jump to definition function in vim or sublime is not quite as good as a (correctly configured) full-blown IDE. They search for something like a definition, but do not understand the code on the same level as an IDE that has all the build information. On the other hand, IDEs force you to spend time configuring it, or there will be red squiggles under everything.
In my experience it's generally not the case, you generally do these tests if you're about to truncate a value or do sanity checks. If the value is too big to fit the variable then it should've been caught earlier, when the value was loaded in the first place (i.e. strtol or whatever).
Count-Based Exploration with Neural Density Models
Each sphere is only worth 5 MW (for 4 hours, totalling 20 MW·h worth of electricity). 80 spheres were not meant to cover the entire base load, but just to make them a relevant factor in the grid.
and prescribe you Oxy for the pain...
The layoffs continue at Oracle, specifically in Hardware ("converged infrastructure" too), as our HW revenue has shrunk from 5b per year in 2010 to 1.7b roughly this year.

Margin had dropped drastically as well, from 1.9b in profit to -45m (!) in the same time period. All data taken from our public SEC filings.

While this doesn't truly affect Oracle and its stock that much, our overall revenue continues to shrink globally. As such there have been thousands of people who have been laid off in the past two years, some silently, some in the WARN act.

Countless others have seen their roles relocated to India and Romania, which helps the company save on salaries, benefits, and commissions. By lowering cost of sales by hundreds of millions USD, the company has maintained its margin of roughly 30% per year.

But the layoffs will continue, and if the "Enterprise Hardware amd Software" market ever truly does ship out to the cloud, it probably won't be Oracle that is there to service those customers.

: many of my friends are Indian and Romanian and I am very glad they have decent jobs in their countries. I do not share the xenophobic sentiments of many of those who resent those countries that are receiving jobs from laid off roles in the US
There were other ones like {CODE} for inline assembly, if I remmeber correctly.

In any case feel free to browse the code or play with Blue OS.

https://github.com/Ignat99/a2

http://oberoncore.ru/_media/wiki/lang/reali_p.active_oberon_...
This is not Kaspersky Lab's Antivirus creator Eugene Kaspersky.
I just do this when I don't want to handle a checked exception.

throw new RuntimeException(e);
If there's more crime, that means you can shout louder about law and order next election cycle. It doesn't matter that the crime was your fault and that you're going to make it worse. What matters is that you buy the police more guns and shake hands with local police chiefs a lot.
I like https://nim-lang.org more.
Show HN: PJON communication through the human body
Even in Haskell, writing state is as easy as += or <- and this is used in nearly every actual program.

A cryptocurrency implementation like this doesn't need a language that makes state impossible. It needs static analysis, model checking, and proofs. This would be true even if it were written in your favorite functional language.
The sleep sub-process of time is not part of the pipeline, however. It will exit after the requested time has passed.
Could this be used as a more general CI service without deploying docker containers as the end result?

For example to build a C++ project, run tests, and publish resulting artefacts (binaries, tarballs) in some release repository?
Interesting, thanks for letting me know.

Jurisdiction seems like a concept that is going to change a lot in the next decade if that's the basis for argument.
Add to the 6,500 the million or so children who died during the proceeding decade of sanctions.

If only all those who were pro-war could see innocent children operated on without anaesthetic, if they could see the true brutality of war then perhaps we would live on a more peaceful planet.

Unfortunately it is more likely to be more of the same as the war mongers can be heard quite loudly rattling their sabres ready to send the sons and daughters of others out to slaughter
They certainly do. And yet people still buy heroin. Keep Googling...
We do not all live in the USA.
In the recent AMD AMA thread on Reddit there was a highly upvoted comment asking AMD to look into working with the Coreboot/Libreboot community to improve the PSP situation. It's nothing solid but the AMD guys did answer and say that they would discuss it internally. Better than nothing I guess.
Parse error: syntax error, unexpected '!' in /home/nofile/public_html/download.php on line 382
Don't mix MWh and MW (it's commonly used to mislead, but not here). The article is declaring 20MHh of storage while using 5MW power turbine. 5MW output from 20MWh storage gives you 4h output.

Edit to add: If you want to make proper calculations, don't forget that these types of storages are very inefficient. You can't compare them with pumped hydro.
I own an Echo and this is part of the reason it now sits unplugged. To be honest, it doesn't provide enough value for me to consider potentially compromising the privacy of my home.
I find it a bit ironical to have this FakeHtop showing most CPU time wasted as system time (the red bars) just below the tagline ”Seamlessly distribute your services across 96 ARM cores” :o)
A couple months ago I asked this question on Reddit:

> Does anyone have ideas how to write a utopia that would fulfill people's need to be needed by each other, rather than just their material needs?

And got an amazing response from user "fubo":

> Cross OKCupid with TaskRabbit: the AI tells you what favors to do for people to get you to love each other.

I wish the internet would grow into something like that, instead of making people more isolated under the guise of "social", "sharing" etc.
I read my previous post again and just wanted to make clear that this "morass" was referring specifically to the JavaScript "landscape", not the paradigms in general...

And yeah, I remember Native Oberon, too. In the mid-90s it seemed much more open about what OS was taking over. Win95 just came out, OS/2 was still an alternative (Warp), Linux was making the rounds, and then some oddballs like Oberon or QNX...

Marrying Oberon with the browse feels a bit weird, though. The ETHZ workstations were rather reductionist, and hosting that on a modern browser stack...
(For a double whammy, one could write the backend in Go, the mirror universe Oberon)
It makes sense that it would. But should it also make it difficult for him to find housing, to benefit from aid programs like food stamps, or to flip burgers for minimum wage?

If John Steele can't get housing, can't get food, and can't get a job, but is also supposed to obey the law on penalty of more jail time or another felony on his record, what's he likely to do?
for certain conditions 3 months wait can be very serious.
Might take a look at the book, "Technical Blogging: Turn Your Expertise into a Remarkable Online Presence"

https://www.amazon.com/Technical-Blogging-Expertise-Remarkab...

You could always publish under an pseudonym, then if things go well claim it under your real name.

Key really is getting people to read what you're postings and getting feedback. You might consider starting or including an option to get the posts via email, which will give you a direct way of contacting readers.
Facebook reports BBC to police after requesting sexualised pictures of children
CIA malware and hacking tools
Isn't storing and serving terabytes of stuff pretty expensive? How many heavy users do you think you'll manage to win over in the first place, much less convince them to pay for the privilege of uploading their 100GB of illicit car diagnostic software to your website? Do you have an actual niche you plan to target?

I don't mean to be negative, it's just that I've seen the transition from free to freemium to ad-supported to Rapidshare to dead happen over and over again. These services don't seem to operate with large margins - from the outside, it looks more like all of them are on the brink of bankruptcy.
Clever idea but I tend to disapprove of using things like this in practice. Formatting (or rejection of poor formatting) should be handled in CI.
Could these captions be crowd sourced, and then attached indirectly via a player?
Without trying being rude, surely this was obvious before you purchased it?
That reminds me of this blog post about inlining code based on a John Carmack email.

http://number-none.com/blow/blog/programming/2014/09/26/carm...
They can only reveal voice data IF the victim said "Alexa" when the crime was taking place. If the victim didn't say "Alexa" that day, then there's nothing to reveal. Your example about encryption doesn't make sense in the context of the Echo.
Just to clarify: are you saying Bitcoin is a Ponzi scheme?
User-Transparent Translation of Machine Instructions to Hardware
The Third Wave (Experiment)
This book for "International Edition" costs roughly $35 in Asia. ($35 vs. $280)

So I don't believe the reason for "the production budget".

These "International Edition" usually marked by something "Not allowed in USA" slogan.
Java 8: Creating a custom Collector for your Stream
Wikileaks: Disclosure of Dozens of CIA ZeroDays
There's already procedures to deal with it.

I think it isn't the same (hacking vs a provider handing over data), but the FBI has been working to assert broad jurisdiction:

http://www.reuters.com/article/us-usa-cyber-congress-idUSKBN...
Nice work, looks like an interesting project. I do think your site copy could do with some work though. It's not entirely clear from the current text what the service actually is - is it for sharing files with others, is it a Dropbox competitor or is it an S3 competitor?

The following phrase made me feel a little uncomfortable about using the product.

"How can this be a free service? Magic. In the future a paid service will be introduced offering more awesome features, but don't worry it shouldn't affect the free service."

I'd rephrase this - definitely remove the shouldn't as that tells me that while my files shouldn't be deleted, they might be.

Finally, just a minor thing, but the down arrow under the "Click Here Or Drag & Drop To Start Uploading" doesn't work for me (latest Chrome on Mac). I assume it should scroll down the page but it didn't for me at least.
Mentioned this in another comment, but they can only reveal voice data IF the victim said "Alexa" when the crime was taking place. If the victim didn't say "Alexa" that day, then there's nothing to reveal.
Only the Rich Are Poisoned: The Preference of Others (Nassim Taleb)
At this point I assume they have a warrant, so I don't understand what the problem is. People should assume their devices can and will be used against them.
A much more tricky conversation is when a friend of mine discovered that fragments of his a session with his psychologist recorded by his Android Wear watch.
Ok you can wangle your way out of it. But if you're doing something like `grep "$something" | /usr/bin/time some_job` then generally you're fine.
>If you're running things yourself and control the encryption keys required to access your data, then your service provider can't be compelled to release your data as it's not possible

The court can just hold you in contempt until you do[1]. They also probably won't buy "I forgot".

[1]: https://arstechnica.com/tech-policy/2016/04/child-porn-suspe...
Volume of a sphere enclosure with radius 15.5 meters and a hollow center sphere 15 meter radius is around 1100 cubic meters. Specific weight of concrete is 2.4 g/cm^3. This monstrosity will weight between 2500 and 3000 tons. It will gain buoyancy when filled with air but the need for maintenance might be due to not being able to move water into and out of the sphere in which case you can add 10^5 more tons to what you need to lift out of the water (in which case I think making repairs at depth might look favorable).

It's probably doable. But it's going to cost a pretty penny.