skysight-inc/HackerNews huggingface dataset:
We had a gem at my last university (UCL): you must rotate your password every few months, your password can't be anything like any of the previous ones (i.e. previous ones are stored, and they're not hashed), your password must contain special characters etc.

Except.. it can only be 8 characters long. Anything else gets truncated (they explicitly said so). The mind boggles.

I have no idea where this limitation comes from, do people just set an 8 character field in their database? Was this a problem decades ago that they figured they'd save a few megabytes of storage space?

I think they've finally changed it so that the reset period is determined on your password complexity, no length limitations, and you can have 2FA (or at least mobile password reset).
Please enlighten me : I'm French and the only good tomatoes I eat are the ones my parents are growing in their garden.

Unless you live next where they grow and can consume them ripe, I don't see how you can find any good tomato in the world.
Why the dig at passphrases?
Only AdSense.
Incidentally, what are these APIs? I am building a rich content app (SVG editor) and have been starting to think about what copy + paste will look like.
The most important part of the announcement seems to be about hardware acceleration. Maybe it's something like Qualcomm NPE?

https://developer.qualcomm.com/software/snapdragon-neural-pr...
"The entitled employee comments at the bottom made me literally groan."

What comments? All I see is an eternally-extending page, typical of news sites that tack every story on to the end of the prior one. In fact, when I scroll to the bottom of the story, the URL itself in my URL/search bar changes to match the title of the story.
For those who want to see how Delphi GUI design is:
https://www.youtube.com/watch?v=BRMo5JSA9rw
How does the student loan system work? Isn't it that students pay back a percentage of their income? If that is the case, how can it become problematic?
It's worth noting that when a similar issue happened to me and went on their "unofficial" IRC channel to raise awareness and ask questions; I was faced with arrogant staff members that didn't want to restart the servers or mitigate the DDoS attack. I was banned on the spot. Then the Customer Service tickets were ignored in a similar manner too. I had a growing startup at the time. Needless to say I've been doing everything I can to destroy their reputation ever since.
This is great advice. I'd go one further and select some DO competitor to deliver some part of your app. Even if it's just the backend for static assets that you're pointing a CDN at.

Then, if you run into issues with either DO or the competitor, you already have an account and familiarity with how things work.

Also, don't host the DNS records at either place. Put them somewhere else so that your DNS records aren't held hostage if there's an account issue.
The native table partitioning makes me so happy. I'd been doing this for years with really hacky external modules and tons of triggers. Sadly, even then there were always weird edge cases.

Postgres really has become the most versatile database out there. I cringe whenever I have to work with MySQL again...
Chris Cornell of Soundgarden dead at age 52
Pasting the password from an authoritative source like a password manager also eliminates that mistake, and works safely whether there's a password confirmation field or not. Even better if your password manager can generate a new password, fill it into all applicable spots on a registration form and save it into its database from a single button press so you have no chance to screw anything up.
>> Market failure: not the "best" product wins, but the one with the biggest advertisement budget behind it

I think this is the most important point.
It changes the competitive landscape from being quality-based to being awareness-based.

By driving attention towards their own products, big companies are shifting attention away from more deserving competing products which have a smaller marketing budget.

I think this explains why big companies are so inefficient and yet still maintain their market share.

Advertising allows companies to substitute real quality with perceived quality in order to increase profit margins.
It's interesting that a lot of us are assuming that pasting encourages the use of password managers.

However; I worry that this is a very BIG assumption.

Even in my IT-literate circles password management usage is low.

In my non-IT circles it is non-existent, and not because of SPP particularly; I suspect SPP (which I agree is silly) derived from an understanding that allowing an average person to paste passwords meant they stored them in passwords.txt on their desktop.

Naturally the population here is technical so it can be hard to see that as a common and sensible thought process. But never underestimate the capacity of the average person (who's IT capability you and I don't represent) to make mistakes like this and never see the problem/risk.

It's odd that the article explicitly mentions this near the start but then doesn't address it in the Justifications section.
given that DO doesn't charge for transfer (the limits are officially unenforced for the time being), "all you can push through 200mbit" is actually quite attractive depending on your use case.
I wished they would implement more from SQL:2011. I have a lot of applications that would benefit from system versioned tables.

This is a good sum up of useful modern SQL features: https://www.slideshare.net/MarkusWinand/modern-sql
I use a password manager to generate long, complex passwords for every service I use (as complex as the service will allow).

For sites that disable pasting, I have developed quite a skill at copying the password character by character from my PM into the password field. I'm even starting to remember a couple of them.

Incredibly frustrating.
In a lot of other countries education is a lot cheaper

US has become a country where profit runs everything. What happens when a large percentage of youth don't get education and make enough to buy a house?
> the right fix would have been an online UPS here with an app that shuts the machine down on power loss.

That's my thought.

I've done enough end-user work to know I really should try to avoid all possible issues relating the user, assuming my work allows a timeline to do so.
Clash of Mechs we aren't really sure what to do with this game
IanCal's and a_bonobo's answers are correct, but to go further back along the line of causality: all of this is a holdover from the pre-internet days, when publication in paper journals was arguably the only or most efficient way to disseminate research results. Journal publishers were thus able to establish themselves as the gatekeepers in all the ways IanCal and a_bonobo described.
ASICs are not reprogrammable. And they're expensive to build, but the NSA apparently has the resources to build new ones at semi-regular intervals, so I don't know if switching algorithms would really slow them down that much.
Sorry, I just now realized that. I thought that was the end of the article because I was distracted and saw the big image.
The Future of Advertising: Brave and the Basic Attention Token
My grandmother always used to make applesauce with Winesaps. There's a little orchard around here that always kept a couple trees for her and they're still there. Every season we go and get some to make applesauce out of em. Always better than store-bought, plus I can't for the life of me find a store-bought chunky applesauce that doesn't have sweeteners and all that in it.
Impressive! I think a "Lathe" tool could be made from your "Draw" shape tool fairly easily.

Interesting problems you have... Balancing flexibility/power/precision and simplicity/low learning curve/finger input.

I'd be tempted to go more the flexibility route... but what is essential? for who?
Where's the line drawn for "dead simple"?

Would precision for the "drafters" slow down/confuse the "doodlers"?... Could build flexibility underneath and carefully build an advanced UX that people can graduate to, but at what costs?... At what point is the focus lost?
> your password can't be anything like any of the previous ones (i.e. they're not stored hashed)

That's... not necessarily the case. You can implement that check by only storing hashes of previous passwords, or of patterns derived form them that are also forbidden (e.g. store a bcrypt of every previous password converted to all lowercase and with numbers and symbols removed).
> "with multiple hashing iterations and individual salt per password."

If your username is...
Please note that Fincher disowned the movie and walked away due to his claim of studio interference. He wasn't involved in the final production of the film. I haven't seen it in a while but I believe Fincher's name is not in the credits.
I have noticed there is a stark contrast between those who are aware of the political environment and those who aren't. You seem to be hyper aware and 'plugged in' to hear these stories. Most developers just write code and post memes on the team slack/hipchat channel, completely oblivious to things going on around them.

You should blog about some of this, changing names and obfuscating to "protect the innocent" so to speak. Also, read up on the Gervais Principal if you have not :)
That's why they had to build the platform!
As someone with little to no Postgres experience, it seems like they are heading in the direction of providing the type of massively parallel, scale out features that Citus provides.

Would love to hear thoughts from someone with real expertise.
Transfer learning is great, but is still pretty limited; the main success stories are retraining CNNs from ImageNet to other datasets and word2vec/GloVE.

In the space of all the things you would want to do with ML, this is pretty limited.

[EDIT]: I stumbled upon a transfer learning for NER paper a second ago: https://arxiv.org/abs/1705.06273v1 And the results are not conclusive. You can can improve your results in truly data impoverished regimes, but you get diminishing returns as you add more data, so the only way to catch up is to get more data.

So, you may be able to get reasonable performance with fewer samples, but you will still get better performance with more samples, and the more samples you get, the less benefit you get from transfer learning.

This may not always hold, and I wonder if active learning paired with transfer learning would do better, but at the moment it's not convincing.
I'm an INTJ and I...
...have been excited by computational thinking ever since I read The Computational Beauty Of Nature whilst in High School in 1998
...am an avid Mathematica user
...found Wolfram's arguments pretty trite and obvious, couched in self-aggrandising hand-waving
...found the book's prose style to be absolutely maddening
...slogged through the whole damned tome (footnotes included) in a desperate attempt to extract some insight from it
they show an example of ML when selecting a text in android and how it predicts how much text should it select depending on what it is (a full address, an email etc).. don't know how they made it but it was almost instant, I'm sure the users wont care.
If I had a good idea I would have provided it. I wish I had one.

What I am saying is that from a regular user's perspective there is no viable way to do it right and we shouldn't be surprised if people follow bad practices. We can't just tell people to:

- don't write down passowrds
- have unique strong passwords for dozens of sites
- always type them in

It's not going to happen.
Playstation VR Aim Controller Teardown
I think the OPs context for "good company" is "good company _for coders/hackers_". You can have a company behaving in an anti-trustworthy way, but their software still be _good_.

Also, their antitrust violations was due to the Windows OS and anti-competitive behaviours, if i'm not mistaken? If so, then this is not really relevant to their software or OP's post, but more their business approach of locking out competition, which is a question of legality and economics.
By "internet circles I run in" I'm talking about the ball-jointed doll hobby, so probably 90% of the products we're talking about are handmade doll clothes and wigs. The dolls themselves are usually made of polyurethane resin, which I don't think could be considered harmful once it's cured.

Most of the other hand-crafted things I would consider checking Etsy for first are things like jewelry and pottery. Unless you're using lead-based glazes, I think those sellers are all pretty safe going to Storenvy.

I just know that a large percentage of the makers I follow on social media have been complaining about these new payment policies in the past few weeks, and many of them have already opened Storenvy shops.
It's much easier to recover from lock out (without losing data) than decrypting the file.
I like your page about making Android executables, especially the quote from Carmac and comment about the vurtues of being control freak. Have you tried to do the same thing for iOS? What is the current file and directory count for Xcode?
> Why assume he was using it for personal DVD ripping when you literally provided a legitimate business use in your own comment?

Because IMHO that's the most likely reason for a developer to have Handbrake installed. It's not the only reason, as I noted, but I believe it's the most likely one.
I thought password cracking machines now guess words as well as characters? Like they will guess all 8 character passwords and will also guess all 6 word passwords using common words like they guess characters? Therefore using just a few common words stuck together with nothing else is no longer secure? (This is a genuine question because I could be totally wrong on that, I can't even remember where I heard it)
> You can find these with a minimum of research

The problem is that many consumers might not even be aware that its a decision worth researching. For example, in some areas of the US it is cheaper and quicker to order online through Walmart than it is through Amazon. But most users order through Amazon by reflex, not even considering if there is an alternative.

Advertising helps here. It tells them "look there is an alternative. Consider it!"
I've come to be a big fan of diceware-style passphrases. I even wrote a generator for them based upon the EFF's wordlist: https://spg.brashear.me
> “There is one and only one social responsibility of business,” the economist Milton Friedman famously wrote in 1962. And that is “to use its resources and engage in activities designed to increase its profits.”

It's strange to me that Friedman is viewed (at least by economists and "business" folk) as a paragon of logical reasoning and empiricism, all the while his views reek so strongly of ideology. There are tons of reasons why the quoted statement might be false whether you're a policy maker (negative externalities) or even the most cold-hearted capitalist (short-term incentives).

Perhaps relatedly, it's actually not true that corporate responsibility to profit is codified in the law. See e.g. https://en.wikipedia.org/wiki/Shlensky_v._Wrigley (discussed further in https://www.amazon.co.uk/Shareholder-Value-Myth-Shareholders...)
LinkedIn Data Reveals the Hottest Companies to Work for Right Now
> If they break, screw them, I'll go elsewhere.

I think that option is going to greatly constrain where you are able to go on the web. The vast majority of ecommerce sites I visit will break with JS completely turned off.
The Comprehensive Ethereum Reading List
> Their machines are more like just gateways to the internet than anything.

I've been in the same boat and how absolutely right you are. Generally everything they do online is tied to their webmail-based, ISP-supplied email address too, making for a total nightmare when they want/need to change ISP.
Mathematica is pretty great, but just about any Turing-complete non-esoteric language will suffice for concisely expressing his ’insights’ and doing his ’experiments’. I suppose the lack of boilerplate code made possible by the behind-the-scenes environment is useful (from a practical standpoint), though.
"None of these decisions are forced by the advertiser"

Pavements don't force you to walk on them, but I'd bet you tend not to stray off them. Pathways through the park don't force you to stay on them, but most people tend to stick to them.

By escalating the bar that advertising needs to reach to influence agents to "force", you're proposing a binary relation where there is a continuum. I think it's disingenuous.
1. Maybe, hard to tell at this point.
2. Probably not.
3. Unlikely, there are too many other factors (e.g. UV radiation is unaffected).
There's also an "admin PIN" that can be used to unlock the key if something goes wrong. It's more complicated than my regular PIN and I didn't memorize it so that should be enough as a defensive measure against drunk me.

Well, unless I'm silly enough to try and bruteforce that PIN as well, after 3 failures I'd be left with an expensive piece of plastic... Fortunately I'm rarely that drunk.

EDIT: Actually as the sibling comment points out you can still reset the token even if you mess up the admin PIN. So at least you won't "brick" your token completely.
Here's a good chart illustrating domestic market share in European countries:

http://www.anna.aero/2011/02/02/aegean-olympic-merger-denied...

A part from Air France almost every country's dominating carrier has around 60% or less. And this is for domestic travel only, which is not very extensive due to the smaller size of European countries and the vast reach of high-speed rail.

If you look at international travel the main carriers have massive amount of competition from low-cost carriers as well as airlines from other European countries:

http://www.anna.aero/wp-content/uploads/2011/03/air-france-3...
Who's profiting from these 110M? :3
Blocking pasting in a password confirmation input accomplishes nothing because you're already blocked from copying the contents of the first password input anyways. All it does is inconvenience people who use password managers.
Hi folks - this is jim @ wasabi.com Sorry to come late to this thread but I wanted to try to help with some info. Anyway, below is some feedback on the Qs so far in the thread:

- The $.0039 is for the storage itself and does not include egress transfer charges. These transfer charges are $.04 / GB (which includes AWS Direct Connect fees for fast interconnect with EC2 compute resources if needed). Both $ numbers are lower than S3. Lastly, we don't charge for PUTs / GETs etc. (like most storage providers do) so you may realize some cost savings in that area as well.

- There is some info our durability, HA, etc. in the FAQ section of wasabi.com/why (We do offer eleven 9s of durability (same as S3) and do have multiple data centers.)

- The points about Wasabi being "new" are valid but please understand that our dev team has been working on cloud storage since the start of Carbonite (over 10 years ago) and in some cases, even before that. So, we like to think we have some useful experience in this area and welcome the chance to work with any interested parties to demonstrate this.

Happy to help with any direct inquiries....respectfully, jim at wasabi.com
FASTEST Cadillac CTSV in the World – 106mm TURBO
Multi-Layer Neural Network in Swift
That's a fair point...though the bar for Akamai is a lot higher than that of CF as it relates to their customer base...let's just say when your clients include some of the most renowned companies in the world, top US government agencies, the US military...the people you let on your platform becomes a matter of concern.
I think there's a real danger to underestimating small % improvements over time, depending on how you're measuring.

Especially if you're looking at error rates; 99% accuracy is very different to 95% accuracy is very different to 90% etc.
The Computational Beauty of Nature (as I have remarked ad nauseam elsewhere) is my all-time favourite book and reading it proved to be a pivotal watershed event in my life (back in 1998 when I was in high school). I'm glad I'm not the only person to constantly recommend it!
I have used Storenvy before to buy alpacasso plushes because my then-girlfriend liked them very much and I did too. But those plushes are not made by the sellers, they are just resellers because the plushes are only available in Japan. But the sellers I had business with often gave gifts and handwritten card/letter to thank me for the business. This is an important thing to note when comparing the products being sold on either site.
Chance favors the prepared mind.
It took you 10 years to understand this?
Anything you can do, I can do better. Swift and Kotlin
Fetchr Raises $41M to Expand in the Middle East
If I got ransomwared I would definitely reformat the drive and reinstall the OS. There's no telling what kind of malware garbage they leave behind. Seems like it would make a lot of sense for the criminal to add you to their botnet, even after decrypting your files.
Would using something like http://cloudcheckr.com/ or https://www.cloudability.com/ have worked, too?
Bizarre. I've only tried to use Etsy once, figuring it'd be a great place to get some sort of unique jewellery as a gift. It's filled with junk, both of the super-manufactured kind and of the "modern art" kind (someone glues 2 pieces of crap together and wants $500.) I haven't gone back, though I did enjoy the Regretsy blog while it was up.

>Etsy’s insistence on running its own servers rather than using cloud-based services and software offered by companies such as Google and Amazon—an emphasis that was known, under Dickerson, as “code as craft”

That reminds me of the silly StackOverflow "if you are a real <hacker/programmer/developer/whatever> you must setup your own servers". There are certain benefits of cloud or not, but this kind of thinking confuses me. Why stop there? Do they build their own Ethernet cables? Racks? Make their own distros, compilers, etc.? Build their own network -- after all, your network is critical in delivering pages to your users, why outsource this to XO and Cogent and so on?

Edit: Yes, I understand the pricing differences of cloud. So just say "it's cheaper to run our own stuff", don't pretend its due to some desire for "craft".

>food scraps were packed onto a Dutch cargo bike, which an “office ecologist” would pedal several miles to a Brooklyn farm

It's like they want to parody themselves?

>Senior Engineer..."I’m just allergic to capitalism"

But presumably not allergic to using capitalists money to hire people to bike your leftovers around town.
The C++11 thread library (http://en.cppreference.com/w/cpp/thread) is at least not insane, and at best you might even like it. In my view it's certainly a better bet than pthreads, because it runs on Windows too.
Yup. The most email validation I evern implement is "there must be an @ sign with stuff before and after the @ sign". Maybe require a dot in the latter space.
Even if you mess that up, you can reset it, but it'll wipe. Then you restore from cold backup.