skysight-inc/HackerNews huggingface dataset:
In most cases, you can use an email address as the account name, and send a confirmation email containing a link they can use to sign up.

If the account already exists, you send an email saying something like "Hey, you tried to sign up but you already have an account. If you need to reset your password, follow this link." If the account doesn't already exist, you send the normal "follow this link to confirm your account" email.

From the attacker's point of view all they get told is "Check your email to continue" whether or not the account is already registered, so it doesn't leak this information.

This isn't always suitable – a mail provider like Gmail is an obvious example – but it would work for the vast majority of websites / web applications.

To be honest, I don't really rate username enumeration as a severe problem for most projects – obviously it's a problem if you can determine whether an email address is registered on, e.g. Ashley Madison or similar though. But it's simply not the case that "nobody else acknowledges it as a problem" – it's a very widely used test, even if the severity is usually considered low.
You're forgetting huge numbers of retired people.
Having an MRI machine that doesn't see nearly 24/7 use is a complete waste of someones money. It's either the patients money or the governmenbts money - but it's a huge waste of resources.

This is why waiting times isn't a bad thing but actually a requirement for efficient resource use. The number of MRI machines for example should be enough to meet just above average demand so that queue times are acceptable while machines are used efficiently, and queues don't grow longer. If the machines are sitting idle - then that money could have been put to better use elsewhere.
I'm a bit the same. Never committing fully. It doesn't have to be immediate in today's age, but I want to be better at not waiting until the last minute to say I wont come. I know how annoying that is when I'm the one taking initiative to a get-together.
You cannot kill story-telling, that's for sure, but the medium certainly changes.

TV didn't kill radio, and the Internet won't kill TV, but it will lessen its role and importance significantly, with the physical TV essentially being relegated to the role of a large, communal monitor as TV content moves to an Internet first model.

I basically watch zero over-the-air TV these days, and if there is anything of interest it will also be online (either legitimately or not) if I really want to watch something.
I've found that you can coax some extra heat from an uncooperative oven via a cast iron "cookie sheet" (flat side of a griddle). https://www.amazon.com/Lodge-LDP3-Reversible-9-5-inch-16-75-... (flat side)

Preheat the oven with the cookie sheet inside, prepare your pizza on a lightweight cutting board. The trick is to slide the uncooked pizza onto the hot sheet. A dusting of cornmeal on the cutting board will make the pizza positively glide off, but purists will bicker…
We run both CDH and Cassandra at my employer. DataStax made a play, but they were Oracle level expensive, so we stuck with OSS.

CDH provides benefits in the early days, but at this point it feels more constraining. Their release cadence is slow, so we're stuck writing long term workarounds for bugs that we're fixed two years ago in the upstream project. The stuff that they are working on is half-baked and doesn't support what would seem to be trivial use cases.

I wouldn't be surprised if their ecosystem calcifies now that they are public.
In many parts of the US there is no real choice.
By default libstdc++ stopped using the pooling allocator in 2005: https://gcc.gnu.org/r106665

That's one year after the ancient, bitrotted, unofficial copy of the libstdc++ documentation that the blog post links to, but still ancient history.
It could work like that if you have a choice in ISPs in your area. Many people don't and are subject to the whims of the single ISP that serves their area.
Automating app assets with Inkscape
In some places, you don't have a choice of which ISP you use. It's comcast or nothing. The free market doesn't automatically fix everything, because of the high cost to entry related to infrastructure.
I agree. Moreover, one of the thing that surprise me is when someone tries to make a clone of HN and totally forget about the moderation work that is necessary.
> I do think there is a big hole for a cross-platform DAW that's at least halfway decent

well there's Renoise ( http://renoise.com ), which is IMHO, amazing.

it's just that, it's based on the old-school trackers paradigm (like Fast Tracker, Impulse Tracker, etc), which not everybody likes (but is actually a great fit for cutting up breakbeats and stuff that fit step-sequencer like workflows). Enhanced with support for VSTs, LADSPA etc (and built-in effects of course) and a sampler interface to design instruments that kinda blows the socks off just about anything.

so there's that. and I love it :)

but I do agree there's a big hole for a DAW with a good piano-roll and "stretchy" timelines like the arrangement view in Ableton. especially the way you can navigate the timeline by dragging on it left and right, but dragging up and down to zoom, such an intuitive way to navigate in sonic material where you often want to be able to zoom from hawks-eye overview to dive straight down and adjust some detail in the 10s of milliseconds, and back. I don't get why nobody has copied this way of navigation, it's IMHO right up there with ableton's timestretch/markers features that make it great. Yes Bitwig copied it, but that's partially Ableton's team.

Bitwig is crossplatform, btw. But I never could get it do what I wanted. But I had a sort of temporary/educational license which expired and wowww was that program ever completely useless in demo-version.

Speaking of that, it's the main reason why I started using Renoise. It was the only program that was even remotely useful in demo-version (just disabled export-to-wav and render-to-sample, inconvenient, but doesn't make the program useless, you can always record your sound in another way). Of course I got it licensed by now, having had way too much fun with it. It's only like 85 euros (including tax), compare to what you pay for Ableton nowadays, which doesn't even run on Linux.

Oh and we all know there's no "best" DAW, right? No shame in using multiple tools, each for which is best at what it does, and just bounce the audio through your OS audio framework (there's equivalents for JACK on Windows and Mac, right?)
http://www.webmhs.com/2017/05/prediksi-chelsea-vs-middlesbro...
I live in an area with one ISP. What do I do? Please do not tell me to 'start my own'.
whats wrong with anki again?
For a few months I worked 3 days a week. It's decadent, maybe, but it's awesome. By the time Monday came I was thirsty to get back to work.

The only problem was - it's harder to keep in mind what you worked on the last week when you get back, but it's not a big deal (just make more notes, commit more often, and hibernate computer instead of shutting it down).
interestingly, the most intense clusters of robots are in Michigan, Delaware and Texas.

by contrast, there's not so much robotic clustering in California.

also, this optimistic note: Some of the sectors with the biggest job losses were ones that didn't automate intensively, like textiles and paper products. That goes to show that keeping out robots won't necessarily protect your job.
New VPN provider focused on privacy
Because the telcos in America have legislated the market away. If you live in a major city like New York, you probably have many options - which boil down to the big 3 telcos and their resellers. If you live in a city of under 3 million, you likely don't even get this illusion of choice.
As if evolution required reasons to settle on stuff.
More and more people are moving into condos in cities where a board picks one ISP and that's what you get. Are you really going to move just to switch ISP's?
They're also only getting metrics from people willing to be Neilsen reporters. What kind of compensation do they offer to do this? How many people refuse, because they can't be bothered with it? Is someone who makes $150k going to have any interest in being a part of this? If not, then the results are skewed because you're only getting the lower-income people. What about people who don't have a TV; how are they measuring that?

I posit that viewership numbers have been "robust and consistent" because they're picking people who fit that.
>Just do it

Yes you can!
It doesn't offer great flexibility though. It has characteristics that made it useful on ancient versions of DOS and now it only offers annoyances that we have to deal with.
Another programming UI: I have been designing a graphic based programming language: xol. In xol code is represented with graphical elements instead of text. A prototype of the first version (partially working code editor) can be seen here: https://github.com/lignixz/xra9

There is already a second version design, 2x better looking, not revealed yet. I also have some additional ideas that may improve the language further.
Is the share of older people higher and are premature newborns more likely to die in Europe? I find that hard to believe.

And don't forget that an efficient market needs price transparency. Everybody who has tried asking "How much does this procedure cost" beforehand knows that's far from being there in the US. How can consumers factor in prices in their decision when they simply don't have the ability to compare suppliers (plus people usually want the best and not cheapest healthcare). There is simply no incentive for healthcare provider to lower their cost. Would that bring more patients?

Monopsonies have been well-studied and lower prices without any competition on the buyer's side.
Phoenix is definitely inspired by Rails.
I'm rapidly approaching 50 and I've never been more excited to write code. With things like cloud computing and the Rust language, everyday feels like an adventure. I hope I never have to retire. That said, I think I might enjoy working from the beach in my later years. :)
Are there any good explanations of Reed-Solomon? The mathematics look a bit hairy..
Show HN: Awesome-indie – Resources for independent developers to make money
Surely we all understand what you're pointing out, but the idea of looking back at this is to see what we've forgotten and to learn something of value from the past, which surely does have a lot to offer. If we ignore the wisdom of the past because there are so many mistakes included, we throw the baby out with the bath water.
What makes this all worse is that companies like Auth0 and Stormpath have flooded search results with self promoting blog posts masked as tutorials. This just makes it harder for developers to learn the basics without getting product shoved in their face.
Profession: Web Developer, self employed working remote with startups and creative agencies.

Workday:

- [08:00] Wake up in a daze and make my wife and son tea and breakfast

- [08:30] Shower, get dressed and ready

- [09:15] After prepping water canister and tea caddy, head to garden office.

- [09:30] Procrastinate

- [14:00] Realise the work day is nearly over. Panic. Cram work in.

- [17:00] Finish work, make son dinner and play with him.

- [19:00] Put son to bed and start making wife and I dinner.

- [20:30] Watch Parks and Recreation whilst contemplating an entire career change.
I disagree with most of his points, but what really bothers me is the underlying message of his article. I don't think we should fool ourselves into thinking we can design a protocol that isn't susceptible to implementation problems.

Did we get SSL/TLS right? No, we've failed a few times, but we're doing better. Why is that? People are paying attention more that ever to OpenSSL and now we have competition with LibreSSL and the like.

Side note: The irony of his coupler example; it's a flawed spec, not flawed implementations... the implementations followed the spec but the spec was dangerous from the start. JWT is the opposite: good spec, but a long time ago some early adopters didn't get things right.
Even if you want to keep it finite, it would still be better to have the body of a twenty-five year old for ~sixty years and then die.
Protestantism was a phase we needed to get from Catholicism to secular humanism.
I agree with the distinction, but I'm not sure it matters much to those being plundered.
someone i once knew used to call the ambulance so that they could get into the emergency room at Kaiser and therefore get some treatment. otherwise, it took forever to get in and be seen by a doctor.
I don't think it's absurd at all. In previous years, the sports fans were getting their addiction subsidized by other viewers by having ESPN packaged in with basic cable. Now with more and more people cutting the cord, their subsidy is evaporating, so they're having to pay closer to the true cost of getting that entertainment. If they don't like it, no one's forcing them to stay subscribed to cable TV.
Saw this the other day. Someone working on making Wikipedia on MaidSafe

https://safenetforum.org/t/safe-drive-wikipedia-on-safe-tech...

https://github.com/loureirorg/wikirofs

Not sure how far along it is, but it looks interesting.
Marginally related: https://news.ycombinator.com/item?id=12837454

In-browser, zero-config, JS-based Asciidoc renderer.
How many ISPs do you have to choose from? Personally, I have two: Comcast and AT&T. Comcast has been a nightmare recently, with almost weekly outages and frequent periods of severely degraded bandwidth. AT&T (even their supposed "Fiber" offering) requires a working copper twisted-pair RJ11 outlet where the gateway is to be installed, which I don't have and which would require an electrician and multiple holes in my walls to supply.

So I'm on Comcast. Reluctantly. Now what if Comcast decided to charge more for access to HN?

Where's your free market god now?
Real Estate Market Sees Increase in Sales Volume
Lessons from the Military on Winning Funding Battles
I just had my first read of Kubernates. Looks doable. Time to jump on the bandwagon.
Yes, but what's at issue is the opening comment:

> Surprising how relevant most of that still is.

...and how some of these rules, even if they were established in reaction to possible real-world consequences, can be perpetuated long after better methods have been invented to protect against harm.
I had a slice of pizza from the 99 cent pizza place across the street from my apartment in Queens. It's still really good. After living in rural Pennsylvania, I don't get why other areas of the country have such a hard time making decent pizza.
Possible.

It presumes, of course, that there aren't multiple ways that viewership is measured beyond just nielsen, and that in 50 years no one considered this possibility and developed methods to unskew the data.

Possible? Yes. Likely? I struggle to believe it.
Well, a legal minimum of 20 vacation days (and 30 being the norm for full-time work), plus 9-10 public holidays that fall on workdays, plus as many days of paid sick leave as the doctor asks for.

So maybe 220 days at work per year? I guess that is 6-10% less than in the US.
You can be a contractor. This way politics will not matter/touch you since you are on-off type of employee anyway.

Even if you build your own company there still will be a lot of politics. And I don't really see how it is "get out of tech" related. You can hate and ignore politics all you want, but the politics won't ignore you.
If you want people to take your article seriously, then maybe you shouldn't put a pointless animated GIF in it.
Curious to know if this is the same every day?

Work remotely for a great company, other than scheduled meetings, work to my own time which tends to be split up to AM/PM and also, each day is a different schedule.

The lack of routine is great, I get to work and live at the same time, rather than feeling like my life is dominated by office hours.
One should always validate algorithm before doing anything with JWT on the server side.
My wife was a teacher for middle school youth who were in state custody (or had other behavioral issues), and all of her students were raised with the exact same approach to healthcare as your co-worker. "Why pay for anything when you don't have to?"

When my wife was about to deliver our first child, she mentioned to her students how the hospital bills can be expensive. Her students were absolutely dumbfounded that anyone would actually pay out-of-pocket (with or without insurance) for a baby delivery. They almost couldn't comprehend the idea that anyone other than the government actually pays for this stuff. Many of those same students came from large families where a single mother literally chose to have many children (with random fathers) in order to qualify for more state-funded entitlements, and unfortunately, that whole mindset evidently perpetuates itself through the generations as kids grow up and expect to repeat the process.

And of course, their votes count the same as my vote.
Project Manager - Large tech company.

- 6:30AM Awake

- 7:00AM Leave home, work on transit if needed

- 9:00AM Arrive at office

No typical day, but typical activities. Day is divided into about a dozen 30-minute and 1-hour chunks )(so, no getting into The Zone like programming), mostly dictated by existing meeting schedules:

~60% meetings

~20% communication, solving things over E-mail when I can, hounding people in person only when I must.

~10% going over the issue tracker, to get a picture of project health, look for warning signs, stay on top of things

~5% writing various reports

~5% working on automation to help me do more of the above

- 6:00PM Leave office, work on transit if needed

- 8:00-8:30PM Arrive at home and collapse
I tried commenting on the proceeding at the FCC site but I keep getting service unavailable errors. The FCC site itself is up but conveniently we the public cannot comment on the issue.
The HTML of the page doesn't contain "888". This makes it impossible for some disabled people to get the number at all.

This makes it a practical concern in addition to bad taste.
> "It is first necessary to ask what is meant by mathematics in general. Illustrious scholars have debated this matter until they were blue in the face, and yet no consensus has been reached about whether mathematics is a natural science, a branch of the humanities, or an art form."

There isn't yet a concensus as to whether mathematics is a science or not.

You may not think so, but it is currently a point of contention.
I was part of a club in college, we did salsa, waltz, cha cha, rumba, tango, swing, jive.
And when all else fails.. there's the rat:
http://www.bigskyballoons.com/ratpack.html
Username enumeration is useful against a system with 10 or 1000 accounts, but absolutely meaningless on a system with 1,000,000,000 regular users.
I'll also mention excel now supports models, for proper table relations, avoiding the INDEX/MATCH function nonsense.
I would have liked a summary of the idea/usage/strengths of the various screenshots. Just by looking at them I can understand something, but I think there may be many interesting concepts here.
No citation needed, it's the truth. But of course it's subjective, just like any opinion, which is why asking for a citation is simply absurd. That's like asking for a citation when someone says "I like ham sandwiches".
You are choosing to not use AT&T over holes in the walls of your dwelling required for installation. The free market is working as intended in this case.

Most people really don't have a choice. You're just being a prick.
Ironically... these all apply to the modern dance floor at most places you can two-step or swing these days (yes we two-step out in the midwest)
> they'll soon start charging $50/mo, which will remove them as a tool for hobbyists.

What's wrong with paying for something as a hobby?
Ah! You're right, my bad, I was thinking about VRFY command!
Are there any examples of big JWT hacks which took place due to a vulnerability
That really sucks!

The level of dissonance in this is overwhelming.

In March - You need to work shoulder to shoulder "https://qz.com/924167/ibm-remote-work-pioneer-is-calling-tho...

In May - we have a survey and a study and a panel that proves remote working is great!

I don't envy the guy in IBM who has to sell Kenexa (https://www.ibm.com/blogs/smarter-workforce/2017/05/making-t...).
Le Startupshow – Pourquoi Vendre Votre Startup?
>> Where's your free market god now?

Most places I've lived, the primary issue has been whether or not local government will allow additional networks. Mine is very set on "You can have Comcast or CenturyLink at DSL speeds". So I get DMV-like service anyway.
I don't understand QM, and no self-respecting physicist claims to understand it either. The consensus is pretty strong on this. QM is strange, the Standard Model is strange, but it works. I'm kinda surprised people like you are not aware of this simple fact. We don't live in 1700s anymore, and aren't in the world of high-school physics. Things are strange now, and the data-backed equations have replaced understanding. I can understand that people want science to explain things, but that's simply not the reality any more.
I'm an engineer at one of those YC companies.

I begin my morning working on a priority-sorted list of tasks. Then at some point, a 25-year-old DMs me on Slack to do something urgent and fucks up my entire day/week.
I decided to do a Google newspaper archive survey just to see what people were saying back then. I'll be honest, the articles seem pretty close to the mark from what I see.

For instance, a 1988 article says scientists warn that pollutants already have committed the planet in "30 years to 50 year to its highest temperatures in 10,000 years"; in 2017 I would say that (based on our reconstructed temperature estimates) this prediction is likely (https://en.wikipedia.org/wiki/Temperature_record_of_the_past...).

There is an article in 1983 predicting a 3.6 degree rise by 2040 (https://news.google.com/newspapers?nid=1928&dat=19831019&id=...) and one in 1982 predicting a 4 to 5 degree temperature rise in 50 years (https://news.google.com/newspapers?nid=1946&dat=19820326&id=...). Being American articles, you convert Fahrenheit to Celsius; this seems very consistent with modern predictions on the climate. The current temperature anomaly is about 1C (https://www2.ucar.edu/climate/faq/what-average-global-temper... an additional 1C by 2040-2050 is within the scope of current climate change models, as far as I know.

I don't doubt that there were some people that projected overly pessimistic doomsday scenarios of flooded cities by the end of 2000 (though to be honest most of the articles I'm encountering more warn of 2100), but for me this is actually is an interesting confirmation; even 30 years ago, the scientists had a model in place that has proven to be way more resilient than some of the deniers would have it.
The actual fake news problem is purely a product of the internet though. Traditional media often contains biases of some kind, it's inevitable, but good journalists genuinely try to minimise the impact of that.

Previously the only way to get news was through these slow, controlled channels. And the people controlling these channels were responsible for the content being delivered, so if a slanderous lie was published they could be held accountable.

But with Facebook I can make up anything I want, frame it as fact, and get it seen by millions of people. Many of whom will believe it if it is convenient for them to believe it. And many of whom will never realise or accept that is a lie. And nothing bad happens to me for sharing these lies, I just make a bit of money from the ads.

This is a phenomenon that can only happen with the awesome communication enabled by the internet. And it's much worse than minor press bias.
Trumps appointees disappoint me a lot. This guy and the one over the EPA