skysight-inc/HackerNews huggingface dataset:
My biggest worry with this checklist is that while it helps already security-minded people and web developer professionals remember what they should already be doing, it doesn't really help security novices (who may search for something like this) make their app more secure. Why?

1. The checklist tells me what I need to do, but not how to do it right.

I could imagine many security novices reading one of these items, implementing the first solution they find on StackOverflow, and checking it off in a "fixed it, boss" kind of manner. That may lead them to thinking their app is more secure than they should, and is then a detriment to the security of their app.

2. The checklist doesn't really help me decide in what order to do things, and what perceived increase in security I'll receive

Storing sensitive data in the database using bcrypt is pretty easy to implement (many times baked into web frameworks), and provides a good amount of security for the time it takes. Compare that to something like implementing CSP however, which may involve moving a ton of files around your app, adding nonces/hashes, etc, and it gets me an A+ on secureheaders.io, but I'm not sure if all the pain was worth it for my basic application.

3. The checklist makes things way harder for a developer to think about.

Anyone wanting to build a web app looking at this list would probably be too overloaded with information to want to implement much of this, when in reality, they could start off with something like Heroku where they just push it up and it works, and many of the security concerns have been taken care of for them.
I'd rather work from home, and have done for decades.

I'm not convinced it's a beautiful building. It's a very careful building, trying to be a temple and - IMO - failing.

What's missing? Randomness. Playfulness. Quirkiness. Fun. Colour. Warmth.

Individuality. Art.

At Pixar, everyone was encouraged to personalise their work space in a creative way.

I can't imagine that happening here, because it would be a mortal wound to the purity.

My guess is that it will feel very subtly oppressive rather than delightfully liberating. It'll be a quietly productive environment, in a slightly manic way, but it's hard to be creative when everything and everyone around you has the same company standard officially-approved look and feel.
Not sure how storing the secret in the user's environment helps. At the end of the day, you're still distributing a secret to an untrusted end user.
Medicare isn't private. If it were, the premiums would be so high, that people would be forced to choose...
Past 20 submissions in the last 4 months by 2 multi-accounts + 2 "normals"! Interesting to see the different spins.
Source code here https://github.com/jnordberg/dreamcanvas
Considering its longevity as compared with other 'standards' that came around 40 years ago, I'd say it is in fact, a great standard.
The parent didn't react emotionally and didn't even attack deep learning as a subject. He said deep learning gurus are failing to make it understandable.

Here's someone else who cherry-picked a quote and ignored the central argument: https://news.ycombinator.com/item?id=14347068

Almost every one of your sentences are talking past the parent. If you want to be argumentative instead of helping the parent as he asked, then it might be best to find actual quotes to disagree with.
The Stupid Idea We Shipped to 20 countries and 40+ states
As a Reddit alternative, and given that the domain name is in Spanish, at least they could make the rest of the site in Spanish.

Make it useful for people in Venezuela.

It is the only reason I would use it over Reddit.
A doctor implying that they're not speaking out "totally" against cigarettes.
I think they've passed the point where the majority of things to control are now easily accessible in Windows 10's Settings app. Certainly I've switched my habits to start there when looking for a setting and very rarely ever see the Control Panel, but I know it will take a while for everyone to pick up that habit.
Thanks for that. A very interesting story it is as well, with a strong element of judicial murder: https://en.wikipedia.org/wiki/John_Byng
I no longer work for COS, but I was their first dev hire. I assure you that COS is not unduly influenced by Elsevier. Their funding and direction come from elsewhere.
I don't work for a big company. Every morning I take my daughter to daycare before going to work. Although not far from where we live (2 km), I still need to drive in the opposite direction. This means an extra ~20 minutes per morning. That's just the trip. Add to it the lack of parking spaces and rapidly decreasing chance of finding one after a certain time point. Not to mention that I need wake up a 3 year old at an unreasonably early hour for any child... Having an on-site childcare center would make a lot of things more simple and pleasant for my entire family.
Are you referring to a Thousand Plateaus?
Well they probably don't know much about architecture either, that's why they hired Norman Foster.
Still waiting on a Neuromancer film or better yet, a mini-series.
I would love to look at the source code for this!
You can’t give this to your kid that’s heading off to college — or even high school — and expect them to manage. It’s also not really a replacement for a low-end Chromebook, the desktop is sufficiently sluggish that I’d be wary of recommending it as a cheap web browsing laptop for the sofa.

Okay, well, that's not great. I guess...

On the other hand, I must admit, I rather like it. It’s a lot better put together than a $89 laptop has any right to be, and despite the battery there’s a lot of space inside for adding things. Quite what things I’m not entirely clear on, in the same way I’m just not sure what I’m going to do with it quite yet. But I’ll figure something out.

Okay, now I'm confused... he likes it, but doesn't know why, and doesn't know what he'd do with it because it's unsuitable for the things he'd normally use a laptop for.
Doesn't the next sentence answer your question?
The performance of a website during high-stress load really, really does not have much to do with anything else a company does.
> have a bias for full-width sites and browsers.

Ah, of course. He's using it wrong!
Mini.css – Lightweight, mobile-first, customizable css framework
I remember reading this script on a Usenet Newsgroup a long time ago. I think it was rec.arts.sf.movies. A quick search returns https://groups.google.com/forum/#!msg/rec.arts.sf.movies/XqL... with some comments. It seems like a place called the "Pix Poster Cellar" was selling "a photostat of a photostat of a typewritten screen-play" but the store burned down in 1993.
Error Handling in C++: Why You Should Use Eithers Not Exceptions and Error-Codes
I can strongly recommend "The Silent Deep" about the Royal Navy submarine service. The parts describing the Perisher course are fascinating (the author, perhaps because he is a Peer, actually got to go on subs during the course) - imagine a training course where if you deemed to have failed you are immediately removed from the training area (by helicopter) and never allowed to work in that area of the Navy again! Mind you, apparently you do get a bottle of whisky to make up for your career being in shreds.

https://www.penguin.co.uk/books/183977/the-silent-deep/
Why do some tech companies seem to hate their customers?
Full Disclosure, I am a coding bootcamp Campus Director.

I can't speak for the UC Berkeley program, but we do have another Trilogy Education Services program run through the University of Texas here in Houston. I believe the program (at least, the web dev one) is identical.

I've met with several students of these Trilogy courses and attended their first graduation event here. By all accounts, the program is solid. However, I would always recommend getting specific info on who would be teaching your cohort since that is the most important point to consider for any course.

I would suggest going on LinkedIn and doing a search for people who have done the course. Most of these people will also have public portfolios or repos that should include some contact info. Here are a bunch of them https://www.linkedin.com/search/results/index/?keywords=berk...
Original posting:

https://pastebin.com/zHffB8rA

This contains a bit more data than they were suggesting and a tar file for a .mozilla directory, possibly containing some saved passwords?

It appears to include b1* usernames and maybe passwords (Used for Bell PPPoE credentials), might be enough to steal someone's bandwidth or make it look like someone else downloaded something rather illegal.
https://en.wikipedia.org/wiki/Pre-echo is the usual example. I did hear it in that audio example on Wikipedia, but I doubt I'd hear it under realistic circumstances.
Lowe’s prototype exoskeletons give warehouse workers a boost
How do I read forbes articles?

I only get a blurred page with a "Quote of the Day" that I can't close, navigating to the original URL of course redirects me back to this nonsense page, and trying to delete the covering elements with the inspector does not yield results. WTF?

If they don't want people to read their articles, they could just make it "HTTP 403 Forbidden, Status Code of the Day".
I find it no worse than Alien 3, at least it had some aesthetic style.
I often say that bad management makes good people go bad. Which covers a whole gamut of personal and career dysfunction...even when you know it's happening and try to fight it you can still be suborned into burnout and depression. After 30+ years in the biz I became acutely aware of this.
the landing page is just a registration form, it gives me no idea what the site is about or why i should give you my email address to register
Also, a couple of the images leave me wondering. The walk with orange and black walls? The iPad, keyboard, mouse and pen? And no alt text? Strange.
I could see a use case to see which emails are from what TLD.

For instance, all @gmail, all @yahoo, all @aol.

Maybe you want to do the cool "hey we noticed your email on haveibeenpwnd, you should change you password here just in case". In which case, anything other than plain text could prevent that from happening.

Hashing an email in that sense gets much more difficult, no?
Your recollection is pretty accurate for today, but it's even denser in all the little towns - almost every single vacant lot is now built up on the main thoroughfares, saw them getting built up over the last fifteen years.

Closer to Apple the two exits on 280 backup all the way down the onramp from about 8 to 10 every weekday morning. Still bikeable but have to be very alert when on the main streets in the bike lanes.
It's a quote by Tobias Funke, a character from Arrested Development. You associated my username with the person I replied to. Technically you insulted them. I am flagging your comment about flagging my comment.
From what I've heard they definitely did the pattern search before arriving at "Fluent" this time because they didn't want a repeat of the "Metro" problem. (Rumor has it that the project name of "Neon" also didn't pass a trademark search, though I'm not sure they would have contemplated that as a final name because I'm not sure it fits well with what they've released.)
That was rather unflattering.

Pine still have software issues:

* Audio out doesn't work

* Video out doesn't work

* 11" screen flickers

* Reduced battery life
General guidance mostly, nothing too deep, seems suited for C-level since there is no discussion on securing the infrastructure (as in hardware, not in software), deployment and way too heavy on looking at the world "from the clouds".
On Firefox that's "View ... Page Style ... No style." And I do that enough times per day (precious snowflake designers, take note) that I installed the Firefox addon "Disable Style button" which adds a red/white "CSS" stop sign button. https://addons.mozilla.org/en-US/firefox/addon/disable-style...

Honestly, that one button fixes almost every UI/UX problem I encounter. I never use Reader Mode, I never open developer tools, I just nuke styles, read the site and move on.
> Capitalism is the normal mode of human interaction

There is simply no evidence available to support this claim, and this is only recent human history. Capitalism is the normal mode of human interaction in our own limited scope of history. Indeed my own personal beliefs is that it s a mix of capitalism, socialism, and communism. Many argue our pre-modern social structures were very much founded on the basis of egalitarian social relations and common ownership, such as the hunter-gatherers. What are we to say about the monarchies, kingdoms, and dynasties that reigned for so much of human history? How about the early nomads which are a type of primitive minimalist society? To sit here and argue that any one of these is the "normal mode of human interaction" is absurd. Capitalism happens to be an OK system, for now.
There are 168 comments on this thread all earnestly discussing what is pretty clearly a marketing document written by someone without a firm grip on most of the bullets they've written.

Is there that much of a need for another "security checklist", that we'll dive in this deep on a really bad one? Seriously asking!

Finally: if you're worried about "APTification" or whatever it is this company is talking about, and you're deploying in AWS or GCP, do what Ryan's team at Slack did and get auditd monitoring on all your servers, and perhaps get osquery instrumentation set up as well. Attack detection systems like the product this post sells are pretty far down the list of things you should be considering.
So, like a raspberry Pi? It's a computer, but it's quite crappy at being a "normal computer", but it is flexible, so you'll come up with something cool that you couldn't do otherwise?
But then the attackers know your origin IP from before you turned on MITM and can just DDOS it directly.
Ice+Cream+Maker+-+The+Best+Choice?+-+Ice+Cream+Maker+2017
A real-time music composer based on the tunes, input and states of a game
Dude, there's no nice way to tell you this: you're going to have to finish reading sentences.
How would you go about finding a 17y/o college graduate in the first place?
Okay, now I'm confused

If you're the sort of person who needs a laptop to do the sort of things most normal people use a laptop for then this probably isn't for you. If you're the sort of person who might consider taking a laptop apart and trying to make it do weird and wonderful things the creators had never thought of and realize there is a good chance you'll end up bricking it in the process (and thus don't want to spend too much money on it) then this might just be the laptop you've been looking for
I do like the chip's game library
I'd say the changes aren't responsible for the "hate and anger", but the growth and natural drift of users.

Undermoderated websites gradually radicalize as the heat and rage drives away moderates. 4chan is the extreme example of this, but Reddit's culture slowly lumbers in the same direction.
The Stack You Need to Be an Expert with Account-Based Sales
Is 404 sufficient?
There's a whole lot of difference between two colleagues consensually sneaking off to have sex and having a fucking designated sex room in the office for everyone to see.

You clearly never understood the phrase 'hostile work environment'.
A Pi is a flexible, small form factor kit computer that has a very clear set of use cases in home automation, robotics, and other embedded applications, among many other things.

The author couldn't come up with a use case for this contraption.

Quite honestly, what would you do with it? Back in the day I might've said thinclient X terminal but those days are long gone, and besides, I could buy a far more powerful used laptop at the same price for that purpose, so... I'm at a loss.

What would you do with this that you wouldn't just do with a Pi or similar?
Because shouldn't matter if you're judging things by merit.
I'm actually quite bullish about Boeing, Lockheed and the other big space contractors even if SpaceX and BO (ho, ho) do eat their lunch on boosters. If access to space costs peanuts, companies and governments are going to want to put a heck of a lot more stuff up there. That means someone is going to have to build it all.

Even if SpaceX themselves have no interest in going to The Moon, they're not going to say no to a contract to put a Lockheed/ Boeing/ etc NASA funded Moon mission into orbit for them.
FRom a series of Google searches and webcrawls i maintain for myself for my middle and upper managers. So this is not technical stuff
http://www.infoworld.com/article/3123747/data-center/faster-...

https://blazingdb.com

http://diginomica.com/2016/04/11/do-gpu-optimized-databases-...

https://www.kinetica.com

https://www.mapd.com

and of course many many more scholarly articles through arxiv
A lot of people are questioning the coroners conclusions because they don't believe that the dose could be harmful. But he makes it clear that the issue is not the dose but the speed at which the drinks were consumed:

>"We're not saying that it was the total amount of caffeine in the system, it was just the way that it was ingested over that short period of time, and the chugging of the energy drink at the end was what the issue was with the cardiac arrhythmia."

Energy drinks weren't all that popular until recently, we we can expect that we are only now going to see the effects of high levels of caffeine intake on the general population.
>Quite what things [will be added inside] I’m not entirely clear on.

That's Hackaday. The fact this laptop is seemingly an answer to a question we didn't need asked, doesn't mean the hardware hacking community won't find a killer use for it.
OMG yes, to your last sentence at least.

I like an attractive web site, but only as long as I can read it instantly.
It's only spamming if you get caught. Otherwise it's growth hacking.
Source of the article, https://stanford.edu/~jlmcc/papers/PublicationFiles/MISC_man...
Source: Apple to discontinue iPad mini
I recommend https://github.com/wix/react-native-navigation for now, the docs is well done and makes it easier to integrate with. The UI part is implemented natively, but you interact with it on the JavaScript side.

AirBnB just started working on one too that seems promising, but it's not ready for primetime yet.
> Which is what Amazon has blundered on, badly: they've created a lot of "Day 2" features that are clearly anti-consumer and it's tarnishing their brand, even as many of their metrics look good.

Can you clarify what this means / give some examples of what you're referring to? I'm not sure what would a consumer-facing day 2 feature would be other than returns or shipment tracking, which I think they handle well--but I also just learned the term after looking it up upon reading your comment. :-)
IN NEED OF a ETHICAL HACKER?
I read a post i came across on a forum by Tania jones about a professional hacker then i got captivated by her testimony which made me contact spystealth.org@gmail.com for help in changing my school grades. To my surprise he hacked into the school website and got it all done in less time than i expected. He is indeed one of the best hackers there is, Go for the best and you'll never be disappointed.
It's an established manufacturer, but they seem to use indiegogo for some reason as a launch platform.

they are in china so maybe that the best way they do it, create a few prototypes and then have the assembly lines to allocate later.
California Authorities Are Failing to Track and Prevent Abuse of Police Databases
Google's game is planet scale systems. Cloud SQL is woefully inadequate, basically a single machine DB with replication. Datastore is built on Megastore, which is the precursor to Spanner, largely confined to a handful of nearly located datacenters [think US-East].

Google's internal data will be stored on / migrated to Spanner, I expect sooner rather than later. We'll be using Spanner whenever we'll be using Google. Furthermore, it's likely we'll use Spanner whenever we use a planet scale system built on GCP, say Spotify.
Apple makes employees pay for the company cafeteria.
Wow. I've just visited Voat. You were not kidding about their userbase.
I'd use it as a thin client.

My core i5 8GB laptop is slower when surfing the web in a local web browser than using it to remote-desktop to my workstation over wifi (all thanks to the power of javascript!).

I doubt the Pinebook would be as good for that purpose but it might work decently, and for terminal use it will of course be just fine.

This is all excellent when you want to travel and have the option to do light remote work but not the bulk or risk damaging a real laptop (or maybe you just want to travel to the US but still want some digital privacy).
Thanks for your well structured comments.

The purpose of the checklist was to get people to think. It is really hard to do much more without going very long.

A number of people have suggested that I link implementation background off each item. I think that can work and layer the info as well.
That's interesting. In a bigger company how much of a responsibility should the CTO have to handle harassment incidents. Imo, as long as he or she hands off to the coo (say), or hr chief, the responsibility is complete. The CTO should not be regularly dealing with these sorts of issues, that's not what they were hired for.... (With understanding that legally that may not be the case)
> That's their problem, not mine. You shouldn't be using old web browsers and outdated systems on the web. That makes you vulnerable.

You wouldn't host a page if you didn't want to share its content, doesn't failing to do so make it atleast partially your problem?

You are ignoring the list of encodings the client gives you, you are paying attention to some and not all. If we all did the web wouldn't work.

Maybe they have good reasons, you aren't them and you don't know their situation. But you have chosen to not share with people with tech older than one year...

Step back, and try to take an objective look at this. Do you know what percentage of web browsers actually in use will work? Do you know what percentage of people visiting your page see only gibberish?

Finally, Why are so many of your comments in the gray and everyone else's not in the gray? Why do so many of your technical peers disagree with you?
Intel needs to double or quadruple their processor's AVX width, add 8 bit instructions and make it slightly more power efficient (for AVX) and it will easily beat many of these TPUs. Of course this is easier said than done but I am really surprised they haven't done it so far and instead bought Nervana and other hardware chip startups.
There are a ton of them, that's true. I do have one issue with a lot of them though. Many of them try to come into the US system just for the pay and they don't have a debt burden at all. For example, many of the FMG I have spoken with actually have their medical education subsidized by their home country, and then they leave for the US. I feel like doing that is unethical. Their home countries are making a direct investment via their taxpayers' dollars to educate medical doctors for their underserved populations. And then the FMGs try to leave as soon as they can without ever serving the communities that need them.

I have 250k in debt from undergrad+medical school, almost all of it loaned to me by the department of education. If I saw some international position open that was high paying and I could just desert my debt and the US, would that be right? I don't think so, that seems like a morally bankrupt thing to do.
Andrei Alexandrescu discusses Design by Introspection as a design methodology to create full featured abstractions without the kitchen sink style fat interfaces.
No, it doesn't.

All of a sudden, Asian people become a minority when it suits the narrative.

There are plenty of Asians (South and East) at all the tech companies being castigated for lack of ethnic diversity. You can't have it both ways.
More Than Half the Population of Nepal Uses Internet