skysight-inc/HackerNews huggingface dataset:
• Password requirements outside of length really don't do squat except make it harder for people to remember their already weak passwords

• Using the same short passwords over and over again.

• Using short passwords <8 characters

• Using very commonly used passwords (password123)

• Security questions

Just use a password manager. Choose one strong 10+ character password that you can remember. Choose the first letter of every word from song lyrics you like if you have to.

Example: lwbeiycwlmdrgag (loving would be easy if your colors were like my dreams red gold and green).

It would take the standard web hack billions of years to figure out that password. Even if someone had massive computing resources behind the crack (not typical, and very expensive) it would take over a week. Password123 or Fido16 might take a minute.
Although, I cannot comment personally on what employment chances are after serving in prison, I can state with confidence that having a single, felony drug conviction [0] doesn't automatically result in a denial of employment all of the time.

The largest, single reason which I could see as an automatic rejection for chances of employment is the prior criminal history [1]. It's much easier to explain (and look past) a single offense, versus multiple offenses - especially if they're all in the same vein.

My most recent major job search a few years ago (Texas and Florida, ~8 years post-conviction) was basically 50/50, in terms of offers of employment after criminal history was disclosed. The irony is that the majority of potential employers who asked for details were the ones that sent the job offers.

I know that no two situations are exactly the same (I'll provide details if you want them), but hopefully this is proof that there is light at the end of the tunnel.

[0] Conspiracy to deliver heroin (4-14 grams) & and V.O.P. (dirty urine).
[1] https://news.ycombinator.com/item?id=14017760
Isn't there that famous quote "Praise in public criticize in private."?

Seems apt here.
> The average web developer writing Ruby or Node in Atom on their Macbook Pro

It does not matter who it was designed for, git is the de-facto VCS that almost everyone uses today. And people are having trouble using it because there is no better alternative: it is fast and powerful and used by many companies.

But it's UX is terrible: I use git for 10 years and I have to Google every time I need to make a branch tracking a remote one. git reset does different things based on what type of object you pass.

This has nothing to do with knowing how internals work, it is a question of consistency and providing a small non-overlapping set of tools to do my job.
I'm not the precious snowflake worried about how acknowledging the reality of racism in society will hurt my feelings.
Sure but if you setup a system that encourages leak reporting by your employees and then unjustly fire an innocent person claiming they leaked data, wouldn't that be a big deal?
Mouse, headset, keyboard, gamepad, bluetooth receiver, USB sticks, and yes a phone charger.

I have no intention of replacing any of these things until they break, that could be a long, long time.
There's a deterrence effect though.
NIST just updated their guidelines, removing the requirement to change passwords, for that very reason. :)
Microsoft Appeals in Federal Court Over Hacked Xbox Accounts
>> We use Confluence, Bitbucket... Asana (instead of Jira)

This is the thing with the Atlassian ecosystem. Whether you are pro-Atlassian or anti-Atlassian, there are only two sane options: you either all-in with everything Atlassian, or you are better off with nothing Atlassian. Mixing and matching products when Atlassian is involved is the wrong choice, every time.

The Atlassian suite as a whole is fantastic when the integrations are set up properly. If you dislike Atlassian's licensing or even one of their products, then you should not be using them at all. Don't take on 1-2 of their products, and then replace one of their other core products with an unintegrated competitor. Having a partial Atlassian setup is frustrating as hell to work with.
Show HN: Pendulum – Python datetimes made easy
False accusations are also harassment.
Not all of us are social animals, especially not 8 hours a day.

Also, often the problem I'm working on requires focus. For example, how much talking has occurred during ANY math test you have ever taken?
It’s been months since I first showcased Pendulum on HN (https://news.ycombinator.com/item?id=12299013). At the time it was not stable but I received a lot of valuable feedback to shape it to what it is now.

It’s now stable (since January actually) and has gain traction since I first introduced it, so I thought I’d share it here again so that it can be of use to more people.

For those wondering, Pendulum is a library for Python to ease datetimes, timedeltas and timezones manipulation.

Each Pendulum classes are subclasses of the standard classes so you can use them as drop-in replacements in your code (some exceptions exist, see https://pendulum.eustace.io/docs/#limitations)

Link to the official website: https://pendulum.eustace.io

Link to the official documentation: https://pendulum.eustace.io/docs/

Link to the github project: https://github.com/sdispater/pendulum
Do you walk around all day perpetually offended at everything, or are you just like this on tuesdays?

You have to see the irony in making this comment while whining about SJWs and comparing them to 'soviets'.
Jass – a tool to share secrets using SSH keys (and GitHub)
Sadly those flocking to Go think otherwise, for them Java is already a programming language for advanced developers.
Introducing the Blockstack Browser: A Gateway to a New, Decentralized Internet
Ask HN: Facebook.com inserts strange link when loaded over Verizon LTE
Screenshot: https://imgur.com/gallery/agE5q

When I load Facebook mobile over Verizon LTE connection, I see this link in the footer to "VZWToday Home" which links to a seemingly unused domain in German language.

Has anybody seen this? Curious how the link is appearing there. Is Facebook inserting it for all Verizon users, or is Verizon somehow modifying the content of the page?
I'm not a marketer, but I think there are some important differences worth examining here...

First, there is clearly a big difference between marketing to a technical crowd like HN, and marketing to the general public. Also, marketing products that are 99.9% similar will probably be bused on non-technical features exactly because the products are so similar.

Also, I think benefits are more broad and emotional. For example, a lot of auto ads are clearly about how a certain car will, for example, get you laid. Or at least get you an attractive female companion. that's the benefit. Not that it is more reliable, or scores higher in Consumer Reports ratings. The HN crowd is more technical, so puts more value in Consumer Reports ratings, but many people don't actually care. They may think they do, but, when it comes to actually spending money, they don't.
So true, I dare to say that even Asp.Net Core 2.0 is caching up with Spring boot in some things.
Clickable screenshot link: https://imgur.com/gallery/agE5q
"I consider political thoughts and communicating them very much my more human experiences."

Thats why labeling anything as more of a human experience than something else is bullshit. He obviously prefers his human experience to be pictures, you, political thought expressed in writing. Maybe someyimes people should think more, if theyre saying something for the purpose of being right then just making noise. Itd be cool if most of the time people were trying to do the latter. Unfortunately most, if not all the time, people are talking like retards, AND , they actually DO think theyre right. The knowing your wrong but just talking because anyway is a rarity if it ever happens at all.
Fanduel investor Pentech raises new £88M fund for more early stage startups
I didn't want to say, as most languages have their fans. But anything missing the features ML had; any language with null, without memory safety checking, without sum types and pattern matching, without type safety or generics (really any language without HKT, though I guess you don't need it for small programs).
You'd think so, but iPhones are incredibly useful to blind people.

https://finance.yahoo.com/news/david-pogue-on-iphone-voiceov...
Until the Arabs came up with the concept of zero, no human had any idea about zero, nor did mathematicians use the zero. Nevertheless, zero has always existed. Just because humans didn't know about it doesn't mean zero didn't matter. Likewise, all human beings have always had fundamental rights, and that was true during the era when people did not spend much time talking about rights. You assume this when you write "Those were won by sweat and blood." The point is, why did people fight for them? Why did people think they had any right to fight for them?

More so, you are wrong that the discussion of rights has only happened in the modern era. Elaine Pagels, a historian of early Christianity, has studied why women and slaves were often the strongest supporters of early Christianity -- part of the answer is the Christian church fought for their rights. Pagels offers, as an example, a priest in North Africa who felt that slave owners should be punished if they raped their slaves. At the time, the idea was counter to Roman law, but of course the millions of slaves in the Empire were supportive of such ideas.
Any experiences with using GuixSD as a main distribution for a standard laptop working environment? I have been using Debian Sid for more than a decade but the idea of having a system fully configured via reproducible pure Scheme functions is tempting for sure...
I suppose it's a signal-detection problem.

One would need to understand the frequency at which misses vs false-alarms happen to judge whether this is a big deal or not.

From one data-point alone, this is absolutely a "non-story".
You don't have Stack Overflow built into the whiteboard.
It doesn't seem that simple. It sounds as if the scope includes more than just products.

> The lawsuit alleges that Google’s leaks policy covers essentially all company information and prohibits reasonable discussion about company activities.

...

> One policy allegedly even prevents employees from writing a novel about working for a large Silicon Valley corporation — like, for instance, Dave Eggers’ dystopian novel, The Circle — without first getting final draft approval from Google.

John Doe v. Google, Inc [1].

[1] https://www.scribd.com/document/334736972/John-Doe-vs-Google...
China’s LeEco to Cut Jobs in US Amidst Cash Crunch
The great thing is that there is more than one company, so people can choose their preferred environment. I suspect there are still many businesses were uniforms are the norm, so you can apply to one of those. You can wear your uniform, but you don't have to make all companies uniform.
Not sanitizing user inputs and whitelisting query parameters. Also sharing private keys over emails or through file sharing.
Absolutely agree with this, I've come to realize I was addicted to the feed. It took, and still does, a significant effort to control the effect (mostly by regulating access on a scheduled basis).
Vanguard's Irritating Perch on the Moral High Ground
>To say Java is badly designed, is to say human is an evolution failure

I love lines that say so much with so little. Well said.

Java was the right language at the right time. That's why it was so successful.
Not to mention how many liberals take smug joy in mocking Trump's skin tone, without the least bit of irony..
it's also now getting towards time to retire my SP3
12.3 screen, no thank you, I'd rather take the new 14" Lenovo X1 Yoga 2nd gen, which also has a 3 USB + 2 TB3 ports (amazing ports set for such a slim form factor).
Great blog post, looking forward to the upcoming blog posts you mentioned at the end.

Could you explain "sending messages to other keys in the same group via a loopback topic, e.g., useful in machine learning applications" briefly if you wouldn't mind? I understood the rest of the article but this sounds interesting and I'm not quite sure what you mean! Thanks

Also: I'm curious what you think of zetcd that coreos recently blogged about, given that you use kafka in production and use go? Something that's put me off kafka in the past is managing zookeeper, and also less support in go. I'm excited that soon I might be able to use kubernetes + etcd + etcd operator + zetcd + kafka + goka.
Sure, but so what?
Oh right, sorry! Yeah I imagine it exists but couldn't point at any tangible examples.
Theres a famous anecdote by Kitani Minoru, a famous Go player from the early 1900's that made a go school where every major 70's japanese player came from.

He would scout talent in the country and once found a couple of brothers that played go. He played a game with the eldest, and he beat the eldest. He accepted his defeat quickly and offered Kitani to play again, that he wanted revenge.

Kitani politely refused and played his younger brother. Kitan wins again, but the youngest bursts into crying. He was deeply upset at the loss and could not play another game even if he wanted to.

Who do you think Kitani recommended to follow the path of a professional Go Player?
The best thing about using ImageOptim[1] is that it keeps up with all these latest encoders and uses the best one. And it Just Works™ on a folder of images.

And it looks like their latest beta includes Guetzli support.

1: https://imageoptim.com/mac
Ask HN: Good book to start programming for 15 yo?
I'm looking for good book for my cousin (15 yo) to infect him with programming. What would you recommend?
From the article:

> But my data is more than 5TB! Your life now sucks - you are stuck with Hadoop. You don't have many other choices (big servers with many hard drives might still be in play), and most of your other choices are considerably more expensive.
The regulations in the Eyre peninsula, and SA in general, benefit the single boat owner over the corporate fisheries and I think that's really cool. The strange side effect of the free market eventually benefiting large corporate entities makes the concept of a meritocracy somewhat warped. It's hard to pull yourself up from your bootstraps if your competitor has ten boats full of cheap boots. With just the right amount of regulation, you can make something that works well for many as opposed to very well for few.

Anecdotally: My father was a skipper on a cray boat, catching crayfish in the south east of South Australia. The boat owners in those towns were essentially the wealthy elite. But the work was tough and most of my fathers friends hit 50 with significant ailments. One has an elevator in his house as he can't ascend stairs, the other suffered a stroke at 48 and is constantly in agonising back pain, and I bumped into one more in a neck brace who was doped up on opiates to cope. They made their money and retired early, but there was definitely a cost and perhaps they never got to truly enjoy the fruits of their labour.
DSE 5.1 comes with a highly-available, scalable, shared-nothing, distributed fs
How do you ever criticize somebody in such a friendly office? I suppose the need just never arises, because HR only hires flawless, swell people to begin with? So that if ever somebody takes a disliking to somebody else, it must be because of racism or sexism?
It has vents. It may even have active cooling by other means (e.g. Lumia 950 smartphones are water-cooled).

Don't think dust will gather inside the device that easily if there is no fan to suck it in.
My deceased Cockatiel (Sarafina) would sit on her eggs for about a week. After a week she would start to lighten up, and move around. I would always check for embryo, but there was never any. (After she abandoned them)

There was a male Cockateil was in the cage, but she wanted noting to do with him--Ben. Ben tried for years to warm up to her, but she would just shoo him away. Ben was in the Freind Zone, I guess? Ben is still the sweetest bird. I think he's over 40 years old?

She must have laid over 400 eggs. She died unexpectedly. I sometimes think because she laid so many eggs. I did give her a enhanced nutritional diet. I remember a vet saying he could give her a shot to stop the egg laying. I just didn't think it was physically taxing on her.
Why do you need accounting software?
It's not a given that the input is infinite. If the used types in "Rob" then goes away forever, the program will neither terminate nor process an infinite number of non-"Ralph" strings. It will sit just sit there waiting (possibly in a loop, possibly not) for a hardware interrupt that will never arrive.
Modules: the other kind of JavaScript fatigue
Show HN: A Babel plugin which removes all bugs from your code automatically
> A counter-example would be a pro Soccer playing saying he never plays casual matches with his friends anymore because he earns to do it. That does not happen and I believe it's the same with you guys in Go, right?

OTOH, I know collegiate soccer players that can't handle "stepping down" to local rec leagues. They learn an aggressiveness appropriate to the one domain, and can't turn it off in the other. I consider that a maturity issue, but it is an issue for people accustomed to one level of performance and competition trying to step into another.
I too would be very interested in understanding more about the Kafka hype. Its everywhere lately.
Password reuse and easy-to-guess passwords. Most of the time, it's not even the users themselves who are to blame but non-sensical password policies (like "Password must contain characters XYZ and be no longer than 8 characters" and "Password must be renewed after 30 days.").
I'm also a Googler. Unlike you, I'm forced to comment anonymously, using a throwaway I just created using Tor. Why? Because I'm a member of one of the "privileged" groups that many think make up too great a portion of Google's employee base, and because some people (especially the ones graduating from college these days) think I'm an oppressor just because of my race and gender.

Nevertheless, I need to pipe up and express that g/yes-at-google makes me feel terrified. I'm not alone either. Some people have expressed that they plan on discontinuing all non-work communication. I've done the same, but not announced it. I've also started scrubbing all my technical communication. Anything I say might be interpreted in the worst possible light as taken as evidence of deep-seated bigotry and bias. I've never had to be this paranoid before in my life.

The scariest thing is that I've seen people "called out" for comments that would have passed even my paranoid-mode filter, even on purely technical subjects. At this point, I'm scared of making too much or too little eye contact. (Either one might be a micro-aggression.) I feel that no matter how careful I am about what I say and no matter how little bias is in my heart, it's only a matter of time before I land in front of HR for something I didn't intend to say.

Programs like YAG sensitize people to these sorts of uncharitable interpretations of others' speech. They encourage a kind of paranoid bunker mentality when it comes to social interaction. They teach people that their experiences are particular to their identity, not universal among their colleagues. They teach people to punish the wicked, not work together to solve problems.

Is this the kind of company we want to have? Is this the kind of culture that any organization should foster?
Spark compares itself to Hadoop in its own marketing: http://spark.apache.org
I've tried a similar approach in the past and it just does not work for me. Besides the fact that it is very tedious, I don't retain any of the knowledge because it's like reading a dictionary. It's impossible to absorb that much information, for me at least.

My approach to learning a new codebase has always been to do a general overview of the structure while taking notes. Then just assign myself some easier bugs and start working on them, and then slowly moving up in complexity.
I am pretty sure firing requires much more than reporting by employees. It just gives them a place to look. Given the verbosity of the logging they collect on employee laptops, as seen in the Levandowski/Uber case, I am sure they can get solid evidence leading up to a firing.
27MB of images on a webpage is inexcusable! You don't need better compression. You need to reconsider what you are doing with your life (and your poor users' data allowance). Visiting your site once would use up about 1% of AT&T 4G user's monthly data!

How do you justify this?
As a pen tester, the biggest problem is management not caring or understanding. If there is a budget for pen tests, there are failsafes for data loss (offline, so they can't be cryptolocked), monitoring is in active use, developers are given time to learn about and write secure software, and sysadmins given the time and budget needed, then it's usually quite alright. That might sound like a lot, but to most people here it's basic stuff. There are many companies that get it right, though of course I have a biased point of view (and I'm aware of it) because the ones I see have a budget for security tests.

As for a single, common mistake for iot/apps/firmware altogether, that's an overly broad question. I think the best answer I can give is not updating things when updates are available. That's the easiest way to get compromised without even writing a single line of vulnerable code.
There is. The question is how much. There are various studies regarding this, I haven't read them (any of them):

https://scholar.google.com/scholar?q=heritability+of+moral+s...
> Time tracking by the hour...

How is that a difficult idea to get around? As a contractor I'm expected to keep track of my hours and what I'm working on. Lucky it's just a chrome extension that I click to start and click to stop. Boom, tracking by hour of what I work on.
Well, people get fired for wrong/incomplete reasons all the time. And if the employer can't proof it well enough he just needs to pay more. Most of us are happy to get 50-200% of a year's salary for no work. That's why it's not really a big deal or a problem for society.
What liquidity issues have there ever been with the big index funds?
A Visualized IDE for React Developers, RomeJS
Spark is a fairly generic data processing engine with excellent SQL support, and its DataFrame structure is pretty similar to a pandas DataFrame. It can be really useful even on a single node with a bunch of cores. Spark's MLLib also has distributed training algorithms for most standard models (notably excluding nonlinear SVMs). It also has fantastic streaming support. So Spark is good for a lot more than straight-up map-reduce jobs these days.
Actually, HN has an excellent editorial staff in the form of moderators who routinely remove, or reduce visibility of, highly-voted content for not complying with site guidelines.
I think it was on metafilter
This seems fair; the last time I did a take home I was asked to build a complete application (full stack) in 2-3 hours. At the time I viewed this as a failing on my part. In retrospect, I feel this is unreasonable on its face. Through the grapevine I've heard that the position has not been filled more than a year later, so I can't be the only one.
In my case, I bought a Surface 3 via an employee discount program and it didn't come with English-capable Windows. It was a PITA, Microsoft doesn't do international as well as Apple.
Hrm, so a premium, tiered access for the "last mile" to your house?