skysight-inc/HackerNews huggingface dataset:
If a car almost hits me and I feel scared, that's an understandable reaction. But if I'm scared by the idea of thinking a different way than I'm used to, or doing something differently than I've always done it, that's less likely to be an understandable reaction, therefore worth interrogating.

If we stop at "it makes me scared", without asking why, how can we grow? If we don't know what part of ourselves we are protecting by avoiding change, how do we change?
Order of the Phoenix gets a high spot on every list.

For example: https://www.goodreads.com/list/show/1.Best_Books_Ever

#2 on that list. I always wondered the same, but could never reach a conclusion why it seemed like it was always rated above the rest of the series.

It is definitely the one that turned the series from "saving the school" to "saving the world" and the series made a sharp turn after that one. That's the best reason I could come up with.
HBR is essentially a pop-business publication with little connection to the school. In 2009 they brought in the editor of Time to shift to a more mainstream publishing style and hence why the content is no different from the type you can read on any generic "business" publication.

Also, deferring profits for growth has been a valid strategy since the beginning of commerce itself. SV didn't invent it, nor is it a "bad" thing. It's typically how all companies grow. Do you think Ford Motor Company was profitable from Day 1?
Thank you very much! I'll give it a look.
That would possibly work in the case of locked files, but not in the case in the submission, where it was about the public release of files. There's no way to ensure they blackmailer didn't keep a copy, and won't threaten again or release anyway.

Also, I'm not familiar enough with ethereum to know whether there are downsides to using it, such as it leaving a trail until laundered (like bitcoin).
It's not a stand-alone chart-drawing API, like Google Charts, but here's where AWS is getting into the "lines and bars" business: https://quicksight.aws/
I'm pretty disappointed in the performance just from poking around a little.

There's a noticeable delay switch from Most Read to Most Sold and from Fiction to Nonfiction.

My Dev Tools are showing it takes ~500-700ms for that switch to occur.
As someone who has been here for >= 6 months, I welcome this change. There's an incredible amount of bloat here, including the datacenter we run to the managers we have. I'm hoping these top level changes can help bring a more accountable culture. Btw, people make fun of #blameless internally now because it literally means you can be sloppy and get away with it.
No way. The number of reported cases of passwords being stolen simply by physical proximity is enough to make this a sensible default. I agree that there should be an option to show the password as you're typing or, at a minimum, once you're done typing (less secure) but making that the default is unreasonable.
Ah modern technology: using 1000x faster hardware to run 30 year old code at the same speed, but in a browser!
I think the parent is too pessimistic. You are right, and Nigeria and Kenya would be acceptable choices too.
Well Google and Facebook are building their insanely large ad empires. Not a great future to be honest
There's plugins for most (all?) browsers to not hide password fields
It should be noted that this is a rather poor benchmark, comparing multiprocess SO_REUSEPORT and single process multithreading, as well as no consistent header set. Note that the crystal implementation is outputting about 92 bytes per request, whereas Go put out 142 bytes per request. Also, Go stdlib was tested with different settings then any of the others.
Is it sensible to implement math heavy part of C application in Fortran and call it via FFI? Or is -Ofast enough in most cases without the costs (multiple, because performance may be one of them) of FFI?
That's what I would define as a "some obscure edge case", see my comment above.
Adylkuzz Cryptocurrency Mining Malware Spreading for Weeks
Schneier often has great insight but this blog post was pretty much the opposite of that. I think I recall reading the original post from the guy who found that NYU info; and I def. read the Intercept piece.

Schneier's post quotes the original article and says unfortunately we don't know more. Literally over 50% of it is a quote from another article which he derides for it's lack of substance. Not sure what the point is.
Like biological infections, the ones that do not kill their hosts survive better.
So you think they would put a humorous reference to a TV show in the synopsis of their groundbreaking image compression paper and again as an academic reference in their paper?

This whole thread is like being the only sane person in an asylum.

Also, it isn't a 'real implementation' since there isn't any source code to reproduce the results.
> Whatever the details, this is exactly the sort of thing the NSA should be spending their money. Breaking the cryptography used by other nations is squarely in the NSA's mission.

I can't tell if it's sarcasm. (it's a serious question)
Yes the military is investigating performance enhancing drugs.

http://www.defensenews.com/articles/special-operations-comma...
I think the use cases there is more accurately, if the user doesn't paste into the first box AND copies the content, don't let them paste into the second.

I would paste into both boxes and resort to developer tools if I am not allowed.
Show HN: Hacker News with real name
MBAs at work. Care only about the financials and never mind the institutional knowledge.
Not just JavaScript: https://mohd-akram.github.io/languages/?source=LLVM%20IR
Here is a more informative article on the subject; https://www.nytimes.com/2017/04/24/books/review/golden-passp...

The critique of the moral underpinnings of the faculty, teachers and students seems legit and a a noticeable break off from earlier times, like when Harvard Business School (HBS) was founded. The critique in its essens is basically accusations of decadece. This "post-modern decadence" is in reality a much wider phenomenon that not only has affected the globalised business schools, but also the humanities and social sciences. If business schools have contributed to the weakening of business morals, then humanities and social sciences have weaken the social cohesion by pursuing cultural nihilism that rejects the national community and responsibility that for long was an essential part of citizenship. I hope these new realisations critiques will be used constructively.
What, you think Richard Hendricks or someone on his team can't put together a Hackintosh?
If I have a camera I don't know about in my home then I have bigger issues than a password field on hacker news no?
Asus ZenFone AR Will Come with Tango This Summer – Confirmed by Google
Sure. There are good universities all over the planet. The US is by far the best.
Let's Elect an AI as President
I started off in .net, where historically all functionality not provided by the .net framework is offered at a financial cost.

if you don't have a large team (who can help with bouncing ideas, etc), the benefits you get from using module ecosystems like npm or pip can not be understated.
Having most read vs most sold is an interesting delta that only Amazon can really do. It would be interesting if they publicized other stats like "most/least completed"...
When I've seen that "your password is too similar..." warning, it was with a system that required entering my current password to set a new password, so no need to store a previous version in plaintext.

Though another way around it is to apply a set of common transformations to your new password, hash it and see if it matches the previous one. I.e. if your current password is "Password123" and you try to set it to "Password1234", the system could truncate the last digit on the new password and see if it matches the current one.
Automate things and make people's jobs easier. Then you're valuable.
Demystifying RxJava Backpressure on Android at Uber Engineering
They had to if they wanted to spend someone else's money...
I printed this XKCD specifically to remind myself that some things aren't worth automating!

https://xkcd.com/1205/

On the other hand, sometimes you're automating for reasons other than time savings. Maybe reproducibility or auditability.
That's fine. They can still reset their password and type it in properly. It's a minor inconvenience for the really, really rare use case where this happens. For one, you can't copy from a password field so it would have to be typed and copied from an external source. As long as it doesn't leave them in a locked-out state, I see no issues with this.
You are largely correct.

Passwords operate under the principle "something you know". (Unfortunately operating under this principle on the Internet is quite hard, but that's a different story). When you save passwords somewhere it's no longer with the assumption of being just "something you know", but more "something you have". Of course passwords are even less apt as "something you have", because they are hard to secure, both in storage and in use.

Nothing has fundamentally changed. That people can't imagine why someone would want to keep passwords "something you know" is because they don't understand they theory behind passwords. A password manager might seem like a solution, but in reality what you're getting is the worst of both worlds. You don't get the security of "something you have", like a key that can be stored in hardware and verified with disclosing it to the host. Nor do you get the flexibility, at least not as a user, of "something you know".

I actually think it would be a great idea to block password managers and offer an alternative protocol for authentication. That way if they want to keep their users they would have to implement that protocol. Suddenly you would have quite a lot of users using something more secure.

(just a random text on the subject: https://www.cs.cornell.edu/courses/cs513/2005fa/NNLauthPeopl...)
Nobody in the US is going to check the overseas origin very thoroughly,

Well, plenty of people would very much like to. But in practice this is often quite difficult in many high-value jurisdictions, for various reasons.
Nobody should be using IB at all for iOS development. Ever.
Most Fortran programmers are scientists or engineers. So you could become a computational scientist. Materials science (density-functional theory, computational chemistry), climate/weather modeling, computational mechanics, fluid dynamics, etc. are all fields where Fortran usage is strong.

If you're not interested in science, I guess you could contribute to GCC or LLVM and try to make Fortran benchmarks run faster.
Simplest thing there is to split zones across two providers - e.g. Route53 + DNS Made Easy, etc.

(DO do have their own DNS API, but it is terrible to program against.)
It's probably easier to use a standard algorithm in a way that can't be attacked by this machine (e.g. use AES-256 with a properly random key) than it is to create a non-standard algorithm that doesn't have vulnerabilities.
The same argument could be made about online banking or any other high-risk online service. Really though, your average manager far more likely to have their machine compromised with malware or fall for a spear phishing attack. There will always be ways to circumvent security, but password managers solve more problems than they create. Regardless if it was your password manager which was compromised, or any other sort of password leak, it's really easy to quickly change all of your passwords once it's secured again. Eschewing good because it's not perfect is a losing strategy.
Has anyone called James Randi yet?
Lossy codec being lossy is a feature, not a drawback.
For the highly customizable text editor like emacs (the better one) or vim, start with a the editor from scratch and build it out. Look for the 'popular' configurations in the editor's community and glean cool snippets from it. That is what I did with emacs and once you get in that discovery and tinker state of mind, you will always learn something new that just blows your mind and makes your life easier.

The TL;DR: dive head first into some editor and try to immerse yourself in the thinking of the editor.
Namibia is supposedly good as well

https://www.indexmundi.com/facts/indicators/IC.ELC.OUTG/rank...
For those not familiar with the rubber-hose method: https://xkcd.com/538/
Any chance the Smart Routing would be available as a TCP/UDP proxy service? It would be great to take advantage of Cloudflare's network without having to hand over your SSL keys.
I personally like that about scala. If I decide an IndexedSeq is better than my original choice of List, it is just a rename, not a syntax change.
While it's understood that generalized benchmarks will never be representative, it's usually nice to see at least a few different examples (eg; parse/process/return large JSON blob, read objects from a db, do some math).

Regardless, I appreciate the author's taking the time to run these and share.
This a really good point that I've realized just recently. I'd also like to add that integrating your build system with your editor can be a great productivity boost. If you watch someone like Gary Bernhardt program, you can see that good editing skills and build/test integration allows for very quick edit-build-test cycles. You can iterate fast and catch stupid mistakes early.
My wife hates it when I say this. (She's QA, I'm dev.)

One of my best skills is assuming. I have to make tons of assumptions, and if I stopped working whenever I didn't know the answer for sure, I'd never get anything done.

Instead, I make my best guess. If I'm unsure enough, I'll also send off an email stating my assumption and asking for direction, but I'll still keep coding based on that assumption.

I am almost always right, and I get a lot more done because of it. Even if I'm wrong, it's going to be a lot quicker to rewrite what I've done than to have done nothing and have to do it all after I get the reply.

I'll answer a question you didn't ask, too: What do my bosses wish I'd known when I started?

That saying, "no," isn't a good answer. Never just reply "no" when someone asks if something can be done. Find out what they're actually trying to do, or suggest an alternate way to accomplish it that can be done.
I have a background in Electrical Engineering, and six months ago I made the jump into my first pure software role. I worked up to it, doing lots of projects on my own time. Just a data point, that if you want to get somewhere you have to start wherever you are.
As soon as Postgres adds the "random data loss" feature they will have a full superset of Mongo.
Did anyone else think this would be a javascript library?
I knew you were joking when you said our field used to be a meritocracy.
Unrelated, but the forced scrolling on that site broke my two finger slide trackpad go back gesture. I hate it when website's do that.
Isn't it curious that folks like kim dotcom who do not hold hospitals or anyone to ransom earn global notoriety, are raided by swat teams and face the full force of the law while those that hold hospitals to ransom can operate with impunity with people reduced to tracking their bitcoin earnings on twitter.

Is it the job of NSA and all the global security services with their overarching reach, resources and power to warn, track and disable these activities or is to spy on citizens?

Half or more of these activities are used by agencies to shut down or sabotage unfriendly interests and I suspect that's the only reason these shady figures are allowed to exist, treated with kid gloves, operate with near impunity and rarely see consequences. They serve as 'assets' to provide cover. Without consequences these activities will spiral.

Things like ddos ultimately benefit companies like cloudflare. And the preponderance of these kind of worms force people to move their data to the cloud or give up more control to large companies who promise security. This is a subtle form of extortion. We don't know the extortionists but we do know the beneficiaries.

This slowly but surely disempowers individuals and takes control away and shifts it to large companies.

Holding a hospital ransom whatever its security policies is a serious crime and treating it as just another hack rather than extreme criminality and blaming the victims is an extremely self serving technical perspective.
Umm, it was explained well in the story. Hooli was supposedly a major customer of all cloud providers and Gavin had pressured them to not sell VMs to Pied Piper. So they had no other option.

The only hole in that story is that there's always too many hosting providers, you can't pressure all of them. But hey, it's a TV show.
That's a lie. Kenya, Nigeria, Morocco, Egypt are just as adept to cloud as South Africa is.

EDIT:Screw the 'groupthink' on HN. Why would you downvote a simple non-offensive comment like this? Africa and its technology are my specific area for research. I know what I am talking about.
Why not keep the numerical code on the sever?
Bot-Killers Unite: Distil Buys Are You a Human
This is written in a very messy manner. The author clearly had gaps in their expertise, it was pointed to them and they made a mess of stikethroughs and updates. I'd rather people fully explore the areas they intend to write on, instead of mission out fundamentals and coming out with misleading results.
Would you think that it's not sexyness, but applicability? What values do you bring to the table that a SW company would need?

Because I bet you that you could find some if you switched from targeting straight dev roles to something else that is part of a SW org.
I find it interesting that the price of ByteCoin hasn't crashed yet.

https://poloniex.com/exchange#btc_bcn
This can't be new can it? I assumed something like this had been out for a while; maybe novel because it's weekly?
Yelp is a very interesting example. It's hard to make the analogy work because there's an asymmetry to the transaction between restaurant owners and restaurant customers (you don't have to be a customer to leave a review).

Even so, Yelp is renowned for extorting restaurant owners for money (whether or not illegal, and officially extortion)[1]. That's in a market where all participants are supposedly acting legally. Why am I to believe that illegal, anonymous entities won't be willing to burn their reputation (which may only exist for this scam) when they decide to stop?

1: https://www.google.com/search?q=q=yelp+extortion
The sets Arbitrary code execution and Security vulnerability have a significant overlap; and much of the decision "do I want the program to do what it's about to do?" is in the eye of the user (e.g. the excellent tools by Nir Sofer could be used for Good or for Evil: "Does the user actually want to list their WiFi network passwords, or is this an evil code the user was tricked into running?" The code has no way of deciding.).

However, I see some hope in https://www.qubes-os.org/ - alas, setting it up is not quite as convenient as "meh, open everything everywhere to everyone."
There is also fun things with movement like using M-f and M-b to jump forward and backward words.
You talked about not even looking at generated passwords, which is different from client's passwords. That's the part I didn't understand.

Although, honestly, the other part seems more bizarre. Gov't agencies and other clients are just giving you their sensitive passwords, and trusting you to delete them after the project, at your leisure? How is that not terrible security? Revoking a consultant's security needs to be in the hands of the employers.
Don't become a language elitist. Love all the languages -- there is something to learn from each...except Objective-C.
Household Debt Has Not Set a New Record
They agreed to pursue profits back in 2006 when they raised a Series A and then affirmed this when they raised Series B, C, D, E, and F rounds. It's unfair to pin this on going public. Profit and growth has been the name of the game since they first raised outside capital from VCs. If employees didn't want to be part of capitalism, they probably should have picked a non-profit or a private company that didn't raise >$100M in VC funding.
What if the paper was generated using the codec and it is a multilevel joke?
That's ludicrous. Is your workstation covered in sticky notes and knickknacks? Are you re-using these passwords? Do you have to buy a new knickknack for every new website you visit that requires a password?
I don't like them because they make it difficult to copy and paste the whole of the content.
The most odd bit about that UCL password policy is that it said "your password change has been submitted and may take up to 24 hours to take effect." To this day I'm not sure if they were just displayed in cleartext and someone just typed them in by hand
APT3 Is Boyusec, a Chinese Intelligence Contractor
One of the creators of Launchpad here, happy to answer any questions! If you're looking for some examples to get started with, you can find those here: https://github.com/apollographql/awesome-launchpad

Please add your own if you build something cool!
I am wondering if, indeed, there are only a few real unicorns: Google, Microsoft, Amazon, and Facebook. Other companies are having a hard time: Twitter, Zynga (remember it?), Etsy, etc.
The Wells Fargo CEO portal makes me change my password every 90 days, won't let me paste and accepts some special characters but not others. How is it that a bank can get it so wrong?
I don't get it. Why is there no price for any edition of the books listed?

Also, the two buttons (one shaped like a shopping cart, the second one shaped like a book) made me think that the first one is to add the book directly to a cart, and the second one to download a sample to my Kindle. But nope, the first one brings you to an actual Amazon page about the book, and the second one, even though it's located on read.amazon.com subdomain (the same one used for Kindle's Cloud Reader) has a different interface underneath it, not tied to your Kindle account. I've noticed that because Chromium is "not supported" while read.amazon.com is supported just fine when viewing it in Chromium.

Hovering over these buttons gives me no indication of what those buttons were and I had to apply the "click and see what happens" tactic.
Another useless benchmark!
Not for speed reasons alone. It's certainly possible to tune C code to have roughly equivalent performance to Fortran.

The real appeal for using Fortran is that for beginners it's a much easier language to pick up than C (much less footguns, for one), and that working with (dense) multidimensional arrays is very nice, roughly on par with high-level languages like numpy, R, or MATLAB.
Personally, I always thought the phrase ought to be "brutish-force cracking," like "brute force", but that's just me...
Simple models should run performantly, we're all thinking of CNNs and RNNs, but a simple Logistic Regression will probably the most ubiquitous application.
I've never seriously considered using Azure, I'm quite happy with AWS. Problem is the closest zone to South Africa is EU. This might make me consider using Azure. I hope Amazon has similar plans in the works.