skysight-inc/HackerNews huggingface dataset:
As a young-ish person (technically a Millennial, born in 1984) who also grew up in the suburbs, you literally couldn't pay me enough to leave the suburbs. I don't care if you're offering me seven figures; I won't live in the city.

I detest noise, grime, and crowds. I like having lots and lots of space all to myself. I worked in the city once; I got sick to death of hobos on the streets shouting at me and demanding I give them money (and then having to listen to them calling me a liar when I say I don't carry cash, which is 100% true), and I got sick to death of working in a tall building where the elevators would break down all the time. Working in the city also had me constantly on edge and worrying that I was going to get gang-raped, and I'm glad I don't have to deal with that anymore.

It's not just me, either. Most of the people I went to college with and still keep in touch with now have houses in the suburbs, and those who don't have houses per se live in two-story suburban apartment complexes. I only know one guy who lives in a more urbanized area (and even then, he's in a mixed-use master-planned development in a suburb), and that's only because he's legally blind and can't drive. A good way to make him angry is to say "you're so lucky you don't have to deal with the hassle of driving"; he will remind people at the top of his lungs that he would love to drive everywhere if he had fully-functional retinas.

My friends and I are the kind of people who make fun of hipsters and mock people who are pro-homeopathy, anti-vaccine, anti-GMO, anti-gluten, vegan, Bernie bros, etc. Trust me when I say that an urban lifestyle isn't for us.

I think there are a lot more culturally conservative young people than you think. Not conservative in the political sense ("liberal but not leftist" and "Clinton Democrats" apply to me and most of my friends), but conservative in the sense that they want to live a traditional lifestyle.
Promises are cool. Here's how they're described in the the classic book "Structure and Interpretation of Computer Programs" (SICP), first published in 1985:

https://mitpress.mit.edu/sicp/full-text/sicp/book/node70.htm...

If you read this book, you'll soon start to see a lot of the concepts its presents manifested in many places. And a lot of those come from well before the book itself was published, in some cases by decades (Lisp and Lambda calculus for example).
My black hat method is much easier than that, and it doesn't even require a black hat skillset.

1) Download two datasets from different massive breaches. You can find plenty of them with plaintext passwords on any torrent tracker.

2) Correlate email and password combos across datasets. Don't worry, you'll find 10s of millions of people who don't use password managers and reuse passwords.

3) profit

If you have reason to believe you're being targeted, any breach is a problem. But until my method no longer produces results, theres no reason to believe black hats will go through any additional effort to obtain the average person's creds.
or

3) Large websites using Symantec certs start telling users Chrome is "broken" and we find out if users will switch browsers, not care about the security, and/or complain to the sites.

I definitely find any variation of #3 to be more likely than #2. I see it as a battle between #1 and #3.
If that were true then every javascript coder would need to "understand" every javascript runtime. And every Ruby coder would need to understand C in case their libraries break. Every Java programmer would need to know the implementation of their JVM. Every ...

In practice when the tools we rely on break, we have other alternatives. We tend to start with web searches and asking questions on SO. We can try different versions or libraries. Most problems have workarounds that may or may not be applicable.

Sometimes deep knowledge helps and I will tend to advocate for it. In the case of template metaprogramming, deep knowledge gains you very little and a common breakage will add 2 extra instructions to your runtime execution. If that matters you are already watching for it. As soon as you use COM, RPC, a web API or any scripting language you have already done something that would blow this cost away for an abstraction.

Knowing enough to fix a problem doesn't always mean a deep understanding of every library and tool even in C and C++ land. There is simply too much for any 1 person or any dedicated team to know, we must rely on division of labor. That is why we find abstractions like COM, RPC, web APIs and scripting languages worthwhile, they allow someone else to handle some part of our cognitive load at the cost of runtime performance.
It's honestly going to depend. In some cases you don't really have a choice. For example if you want to limit an S3 bucket to an IAM group, since S3/Resource Policies don't support IAM groups ARNs in the principal, the only solution is to apply the permissions around access to that S3 bucket to the IAM group (as opposed to the bucket).

As for which direction, this is going to be a bit of preference and need. Do you want permissions to begin at the user or at the resource? For scenarios, like a bucket controlling access to non-aws users, it makes sense to have it on the resource. For others, like delegating bucket access to certain EC2 instances, it makes more sense to keep it on the role user.

The fuzzy lines of gray are only exaggerated by the fact that the docs love doing stuff like: "These two policies are equivalent!" And showing examples that accomplish both.

Tl;dr, (a) pick the permission direction that makes sense (b) set a standard for your team and infrastructure and stick with it (c) try to not use NotVersions of actions
The schedule they're proposing tries to specifically avoid as much of this as possible. This is probably as close to "no impact for average users" as you can get if you don't want to accept that too-big-to-fail is a thing in the Web PKI.
Trump’s Tax Returns Raise a Decade’s Worth of Questions
> Embedded journalists, activists, people with sensitive medical information.

This reference sample is very small if compared to the possibilities.

Everybody has something private that can be used to extort informations, to gain privileges or what-else.

The US is not in the position to assure the current surveillance infrastructure (and so the confidentiality of the data) will endure the centuries.

An example ? ...

When you read [https://byparker.com/blog/2016/tim-cook-s-privacy-battle-is-...],

knowing that back during the cold war the stasi used to target `a certain kind of people` (with romeos and wiretapping),

knowing that the stasi lost control of what are called "the pink files" and that we currently have no idea of whoever is benefiting from them,

you start to realise that what currently can be considered a non-issue may in the future be something very dangerous.
I'd be super happy if Dwarf Fortress managed to make canal locks navigable by the AI.
What's Mozilla doing?
big cities on the coasts, and the Southwest, and the Southeast, so, everywhere except the Plains states

Also, Palo Alto is a big city on the coast.
If Jesus Was a Black Dancer
> I think the idea is that if advertising on the web respected users, they wouldn't feel the need to block ads.

True and more than this, advertising could be a service to me.

Advertising has multiple functions. One is helping with discovery. Users have some problem they don't know someone is solving. Another is branding. Shove brand recognition down people's throats until they automatically reach for your product.

I use friends to discover new products and services, because they provide reliable suggestions and don't water down their reputation through brand building.

I was excited for the targeted ads movement, because of what it promised. I really want a recommendation engine that is smarter than everyone I know. That would be amazing. It's a giant world with lots of startups and makers, surely my monkey brain cannot possibly know enough people to track every one of these. So I'm ready, have the grand AI tell me what people are making and how it helps my life!

In practice, they didn't deliver. Targeted ads are like an idiot savant. I basically just get recommendations to buy whatever I just bought, even if that makes no sense. (You just bought a blender, why don't you buy two of them so you can have one on every counter!?)

It's the simplest logic that would work on a plurality of sales. Most people who buy paper towels later buy them again. Ok, new rule: people like buying what they just bought. No exceptions, logic done.

I know incredibly smart people work on targeted ads, so I can't imagine they're missing this. My best guess is that there's too much low hanging fruit to improve a recommendation engine, or that the other lucrative aspects of advertising (brand building) chase out any funding or development for a 100% user-interest focused ad-engine, er, recommendation-engine for products.

So I actually respect the impossible bar that BAT sets for itself. If we have an advertising system people will actually install a browser for (or pay a monthly subscription for), then we will have fixed advertising. Not before.

It's a good finish line. Whoever can cross it definitely wins.
Curious. How is it more luxurious? Say I have $2000 extra at the end of the month in EU and in US. Where the difference comes from?
Interesting, I didn't know that.

I tend to follow varied media accounts though, so it's tough to tell from my media consumption where I'm likely to stand politically.
I'm super interested in this. After a super brief Google search, I was unable to find Tavis's results. Could you kindly direct me to them?
Well, Comodo's had an okay track-record, if I recall correctly. But I also don't recall them being cheap.
I have a general rule to ignore everything on Medium, saves even more time.
Not to defend Electron (I use neither VSCode nor Atom), but meanwhile I'm over here watching the JVM consume a constant 10% of my CPU thanks to having a single 60-line file open in the official Arduino editor (which isn't even an IDE, it's a glorified GUI for compiler flags with a built-in syntax highlighter).
Agreed, though I keep wanting to take the time to get VRRP working with a web server to have redundancy. OpenBSD uses this to coordinate stateful firewalls with 2 or more systems, if 1 goes down all state info is present on the second node which takes over.
Mortality and morbidity in the 21st century
It’s Not Wiretapping–It’s Network Tapping
Android O is getting an Autofill API [0], which should be very useful for apps like LastPass.

[0]https://arstechnica.com/gadgets/2017/03/the-android-o-develo...
Can you please provide a source for this? The 1Password only bug I can find filed by tavis is [0], in which 1Password were very responsive and thankful of tavis' efforts.

I note that can't find anything on twitter that even remotely supports your allegations either.

0: https://bugs.chromium.org/p/project-zero/issues/detail?id=88...
It's a little difficult because there are a lot of publications that I'd like to read a few articles from, but not enough to warrant a subscription. Micro-payments seems like an interesting solution to this, but I haven't seen it fully worked out. Right now, advertising serves this niche.

I don't really see the need to trust advertisers in Brave's scheme here, either. You need to trust the browser to judge which ads are acceptable, but alternatively you need to trust the ad blocker to know which things are ads.
Pretty cool. Similar to www.archive.is.
Tuition used to be very low. When we adopted a culture of "college is everything" that's when tuitions rose rapidly to meet what could be maximally extracted from the middle class. We've now reached that point so they will rise slowly now - only to meet increases in government aid (direct and indirect aid) and increases in middle class incomes.
It is easy to do screen redrawing wrong. Intellij Idea had similar problem:

https://blog.jetbrains.com/idea/2015/08/experimental-zero-la...
I noticed you didn't launch to the web. Any comments there? This seems like a common line-of-business tool that would traditionally make sense for a simple web application.

Did you do your desktop apps using electron?
That sounds reasonable, but my point is that we all (or most of us, myself included) are ignorant and speculating, and so are the reporter, the article, and possibly everyone quoted in it.

You wouldn't believe a story about the costs, feasibility, impact, etc. of an IT project if the reporter only talked to people in the construction industry and not to any IT professionals.
It's interface and usability is also ridiculous on windows, and it's the most expensive of all.
Well, true, I suppose. Demand directly is driving up rents. And San Francisco is a special case because of its geographic constraints. It is almost like a literal geographic bubble that formed on the bay there. My conclusions reflect more generally I'm seeing and experience in Southern California, which isn't quite so geographically constrained.

I agree it's not the same kind of bubble we saw when strippers (to borrow the example from The Big Short) were carrying 5 mortgages in Florida. And it explains why housing prices never fell there or really here in Southern California to the extent I was expecting (and really hoping) back after the crash.

Still, I imagine most of that private wealth that is pouring in there and here is either connected with the financial industry directly or indirectly. At one end, you've got the financial industry financing everything, from mattresses to cars to college education, which spurs demand and price inflation.

On the other end, you've got a global wealthy elite for whom all real estate is local. They are small proportionally but still large enough in aggregate to quickly exhaust limited edition luxury items like residential property offerings in San Francisco, Vancouver, London, etc.

Anyway, that's the simplified model I've been operating on for the last few years. A weird combination of the super rich shopping where they please and local middle class Americans, hopped up on credit, trying to compete with them in select desirable areas.
I work on multiple AWS installations and we use the approach you describe of only defining IAM Policies and avoiding resource-based policies where possible. The one exception is KMS Keys, which require a KMS Key Policy.

That being said, I've found IAM's power impressive but ultimately complex. If you're really serious about isolating users from certain resources, separate AWS accounts for each environment may well be the best way to do this. This way, you can grant "admin" access to users in your "stage" AWS account, they get all the permissions they need to do their work, and have no permissions to the more sensitive "prod" account.
Right, but now you're forced to get a new job in a new place, or at the very least have a very lengthy commute. What's the point of having a family and kids if you're spending 3-4 hours a day just commuting to work? Or worse, having to live in Texas? This of course assumes that there's even jobs for you in TX or other low-cost locations.

Basically, if you want to be a decently-paid professional and have a rewarding career, location is going to be very important to you, and you're not going to have time or money for kids. If you really want kids, you should make that your priority, and forget about education and career, and just work on having a stable job in a low-cost place, perhaps working in fast food and trying to work your way into managing a McDonald's where you might be able to get $40k. With kids and working at McD's as a cook in your younger years, you should qualify for tax benefits and probably some social programs like SNAP to help make ends meet.
If only it was all about speed :-)

These days it's all about the customer/user. And that user wants functionality!
Insane Light System Blasts the Energy of 10,000 Suns
Since the USA does not have a long history of legal segregation against Hispanics, there are no Hispanic colleges.

However, there are Hispanic Serving Insitutions: https://en.wikipedia.org/wiki/Hispanic-serving_institution

I also wonder how much you cared about Hispanic schools before you heard about someone helping a Black school. Why the sudden interest?
> City centers simply get voided of average earning people and replaced by high earning ones. As soon as they are the average earners, even more wealthy people move

okay but how do you run a city like San Francisco once all of the service industry workers get priced out? Do you start paying people 6 figures to clerk a convenience store?
Wow, seriously? Google is out to get poor people?

Let's not talk about how Google made access to an entire world of information 100x easier and cheaper, so anyone with a cheap tablet or phone can get information you used to need a $1k encyclopedia for.

Let's not talk about how Google drove Android, a platform which gave a huge number of people internet access by giving them $100 phones or tablets.

Let's not talk about how Google has (done its best) to scan every book ever written to make books available online and free.

Google has done vast amounts to level the playing field, making top-tier services like Gmail and Google maps free, where previously people had to pay for Garmin navigation or Outlook or w/e.

The kind of argument the OP makes is shallow, petty, and out to use a hammer for every grudge. Yeah, Google makes money via ads. No, that doesn't mean they are racist, sexist, or whatever the hell you feel like making up just to complain about advertising.
US Senate votes to undo FCC internet privacy rules
Perhaps you might consider switching if that is the only way that you can get control over the information about you that leaks out on many pages that you visit, words on pages that your mouse hovers over, words that you type in, friends you make, and so on.

Do you think that it might be impossible to get control over all of that information?

It is possible, and it is happening.
Run it through PVS-Studio or some other static analysis tool
It's not a bad idea. It's a hard problem that hinges on several issues:

1. Trust.

2. Liquidity.

If the buyer and the seller both have to perform full due diligence before the transaction, there is little advantage to using the platform except for buyers and sellers who are already able and willing to perform due diligence.

If there is a low probability that a buyer will find what they are looking for there is a low probability that they will use the platform. If there is a low probability that buyers will use the platform, there is a low probability that sellers will sell on it. For sellers, the time and effort that goes into creating a presence is probably better spent on a platform more likely to produce sales...such as an owned website.

To put it another way, the challenges for the project as a business are not technical. The challenges are overcoming the adverse economic incentives and alternative approaches by the parties. The existing platforms that we have all heard about have overcome those challenges and part of 'what sucks' about them is due to what is required to overcome them.
Grow vertically. I saw this regularly when I was living in Hong Kong - 50 year old 5-15 story apartment buildings being bought out by developers, demolished, and replaced with something 30-40 stories tall.

High speed rail into the city (see tokyo). You can travel enormous distances in 40 minutes on HSR.
The Cypress FX2 boards from eBay/Aliexpress seem popular for streaming logic analysers too. I bought a variant which uses the FX2 chip along with an FPGA.
The statvfs system call indicates the preferred block size of the filesystem. It is a very large value on zfs, for example.

https://docs.python.org/2/library/statvfs.html#statvfs.F_BSI...
On a related note, it seems crazy to me that for actively maintained, cross-platform, native widget GUI libraries, your options are… Qt.

(Not that Qt is a bad library, but it's bizarre that such an important area is so neglected by our industry).
I think this is part of the implicit contract of the American 'melting pot'. A vanishing percentage of Americans are actually descended from America, and for better or worse, integrating or failing to integrate people has been a major part of our history-- from slavery and genocide to New York being arguably the most important city in the world.

So, what could be seen as white people seeming to have a pathological need to observe those with different melanin is, I'd argue, a representation of our awareness of that compact. If we're all living here, and they're all living there, is it possible that they're not too happy, or that they're being forced to live with substandard lives or living situations? If that's the case, that could potentially breed societal instability and rupture, as happened in the '60's and '70's.

From my personal perspective, I don't necessarily want to live in Compton or Camden, but it's certainly the case that I want people who live there to be able to move to where they want in America-- "not judged by the color of their skin but by the content of their character".
> Going to windowing GUIs from character-mode DOS was a massive usability improvement. No more exotic ctl-alt-function key combos

cough Blender ...
"Altogether it looks like LastPass is a lot better at PR than they are at security. Yes, that’s harsh but this is what I’ve seen so far."

No, it's not harsh enough for a program that knows the right password, shows it to you, but then inputs the wrong one in the password field. Of course, compared to these security issues, such UI issues are almost irrelevant. With such a simple UI to program, you'd think they'd at least get that right or fix it. And if they don't, it's likely they have much bigger problems under the hood. Over and over.

Unfortunately, all the reviews of Lastpass I read gave it 4-5 stars and it was often a recommended or editor's choice pick. Clearly, those reviewers and their publications are just a bunch of shit words to attract advertising (that includes pretty much every article on password managers I managed to read). This is a pretty important part of security. If it takes someone with expert skills in computers almost a year to find a good password manager program, not to mention days worth of work importing into and testing various solutions, what chance does your everyday computer user stand?

The way things stand with password managers right now, I'm not sure we're advising ordinary computer users correctly in telling them to use one.
The issue was fixed. Thank you
It must be noted that the author of this article has a competing project, and in an article so deeply critical of LastPass, it seems like a disclaimer should be prominent. Wladimir does disclose this on the previous article: https://palant.de/2016/09/16/more-last-pass-security-vulnera...

As a fairly happy LastPass user, I would certainly like to know what ongoing threats there are here, and what the real-world likelihood that I might be exposed to those threats. Would anyone care to summarize? The linked issues have been fixed, even in Firefox, and the claim that vulnerabilities still exist are unsourced.

*EDIT: disclaimer has been added! My comment is now out of date.
like the post linked says, Mozilla(and the other browsers) have yet to announce/decide anything.
Nikola Tesla was supposedly working on the production and wireless transmission of power -- including a "death beam". After his death, many of his papers were claimed to be missing:

http://www.pbs.org/tesla/ll/ll_mispapers.html

Interestingly, one of the main investigators into the incident was Dr. John G. Trump (uncle of President Trump).
I'm a long time lastpass user, it does enough for me.
Different strong password for every website I use except but never store email, banking or hosting accounts.
On another note the cheapest premium 1password is three times the cost of premium lastpass.

Thinking about it I'm really only using it for convenience, security/strong passwords is in second place.
Imagine selecting two nodes and getting a Lissajous figure out of it...