skysight-inc/HackerNews huggingface dataset:
I like the idea, but the master password scares me a bit. So if I accidentally type my master password into Slack one day (not that that has ever happened), it seems anyone who saw it would then immediately be able to log into every website using SecureLogin as me.

The README addresses a concern about "Master password is single point of failure in this system", but it talks about the case of a user forgetting it, not accidentally disclosing it.
Authy service (one where they send you SMS) is centralized. It's not that it's safe or unsafe, but generally decentralized is better option.
> because “engagement” is the metric, Facebook inevitably selects for the shocking and the outrageous.

Anecdotally, I've noticed this myself. Anything I post that's related to politics get lots of likes and comments, while it's crickets for everything else.
Domestic investors bought 1-in-5 Vancouver homes
Without active sonar? Not at a reasonable distance.

Active Sonar can detect the water void/material difference with reasonable accuracy.

U.S. sub streamlining and cavitation avoidance makes them nearly undetectable under running, much less full stop, and that's with a large prop rotating.
We Have an Empathy Imbalance, Not an Empathy Deficit
So DoubleSign is pretty cool for financial apps because it signs `scope` on two devices. First prototype had that feature. But it was very unclear to the users. So it was removed, but will be added back if this 1.0 version gets used by well... anyone at all :)
I wrote this primarily for tech blogs. For example: http://rickyhan.com/blog/k8s.html
An initial idea: yet again realism raises it's head. The idea of applying a property like happiness to non-existent, hypothetical people sounds sketchy.
It's essentially the offline password manager idea with some kinks worked out.

The offline password doesn't use an encrypted database, but instead used a key-derivation function based on a master password and e.g. the service name to get deterministic passwords.

In the case of a password manager, there are issues with password requirements and service name reuse. Here, by switching to a signing protocol, those issues are mitigated. At the same time, because this isn't the password protocol, it forces users to use this app. Meanwhile, you can't force users to use a password manager, leading to horrible password reuse.

The big downside I see is the immediate compromise upon revealing your master password. In the case of a PW manager, your opponent needs to get to your database first. This might give you time to roll-over your passwords.

Another thing I don't see is key-revocation. What to do when you fear your master password is compromised? That might just be done by essentially the same as a password change though.
https://archive.org/details/easyintroduction00isaa
Ah, okay.

I knew about the AGPL and I thought it was merged into the GPL with v3.
Authy also can backup your TOTP tokens (encrypted with passphrase on device). This is super handy when switching devices, but weaker than Google Auth where the TOTP private bits never go back to Google in any form.
No, it's decentralized as in "no central authority" not as in blockchain "many centers". It's a local client side app.
Ask HN: Launching a socially responsible ICO, suggestions to spread the word?
Here is more information about it https://mpk.impak.eco/en. But I am really interested in your opinion. It is listed on things such as smith and crown but wondering if you think of crafty things we haven't thought of
% of German newspapers publishing them > % of English/US newspapers publishing these
The device is maintaining a short (<1 sec) buffer at all times. The device is Echo; Alexa is the cloud-side service, which is definitely not getting the audio until the wake-word is spotted and then streaming begins (backing up to the beginning of the buffer).
The point of delegating decision making to an algorithm should not be to maximise profit when people are dying or to absolve yourself from the responsibility of being a decent human being. Developers at Uber should be ashamed of the system they've built.
There have been quite a few cases where SMS authentication proved unsafe. It's gone so far as NIST recommending against SMS as a 2nd factor.

In short, providers are rather too willing to transfer a mobile phone number.
It's more about password hygiene. Do you have any advice how to prevent disclosing not making UX harder? I would happily implement it.
Think people on Mars that find they enjoy the independence of being 4 to 20 light minutes from Earth will spread the word and that distance will be seen as a positive, not a negative.
The magnetic field of an electric motor only does any useful work when it is inside the motor. There is no stray flux that would be usefully detectable.

Also, magnetic fields don't self propagate, really. That means they fall off extremely quickly with distance unlike electromagnetic waves.
Yes, it's all detailed in Hatching Twitter which is written by a NY Times columnist. Basically, when Ev was CEO, the board told him to his face he was doing a fantastic job. He had turned around the product org and gotten user growth back on track. At the same time, Fred and a few of the other investors met secretly with Jack and came up with a plan to push Ev out and, bring Jack back with Dick Costolo as interim CEO.

Excerpt from the book after Ev was told he was out:

Williams, stunned, picked up the phone and began dialing. Bijan Sabet was apologetic and insisted that they wanted to keep him on in a product-advisory role. According to several people at the company, Fred Wilson, however, said he thought Williams had always been a terrible C.E.O. “I never considered you a founder,” he said. “Jack founded Twitter.”

Other portfolio investments of his have followed a similar pattern of having the original CEO pushed out once they get to a certain level of success.
I think the important question is whether a Chinese reader would understand the character脂 (also 'fat') on its own without the whole phrase, the way we would understand 'carb' or 'cal'.
Yes, sorry, that TOTP backup thing is great. Always hated that GAuth cannot back up.

But what was meant is the SMS service they make money on.
They may allow you to do that. If you are on an IP that they deem not trustable enough, like if you are on a dynamic IP or come from the wrong country, they'll refuse to create the account without some phone verification (to hinder spammers)
Is Solvespace history based parametric CAD?

FreeCAD's architecture that combines history based modeling with inferior kernel (Open CASCADE) is about the worst choice from a reliability standpoint.

The best kernel, Parasolid, only started to get good when mainstream Unigraphics went history based parametric in 1992. The reason is that all of sudden Parasolid has to be able to correctly rebuild every model ever made in Unigraphics, SolidEdge and SOLIDWORKS - including bug-for-bug compatibility. That's an extremely hostile evolutionary environment, and to survive Parasolid had to get extremely good.

OpenCASCADE in contrast only has to replay FreeCAD models, and there are modulo zero of those, and actually zero paying customers.

SpaceClaim has things the right way round to built a reliable CAD system: direct modeling X still v good b-rep kernel (ACIS).

Free/open source doesn't have a good curved surface kernel.

To build one is difficult. Every time you add a new surface or curve type, then case analysis for the intersection algorithms goes up with the square, so the key is to limit severely the number of surface types. One though I had was to just use Dupin cyclides (which covers the quadrics) and approximate everything else with cyclide sheets. There are some architectural CAD papers on these.

Disclaimer: Parasolid dev 1989-1995.

Edit: maybe that's what Solvespace does - limit to just NURB surfaces? Way to go! The Dupin cyclide approach would have to approximate NURBS with cyclide sheets, but the intersection algorithms could be easier to implement because they are implicit quartic surfaces.
I'll be honest. I use tmux everyday as an integral part of my workflow, but I find this whole idea of Windows and panes extremely cumbersome and complex. I just stick to a one-server-one-window/pane model, and create a new server for every new "window" that I want. I then connect to these multiple servers using multiple tabs on my terminal app, which I can then freely drag-drop-resize to my heart's content. If someone's looking for an entry-drug into screen/tmux, this is the easiest way to get started.
Rationality is much more technical and precise than HPMOR, and covers topics that you couldn't easily cover in fiction. I've read both, and would recommend each even if you've read the other.
> But 50% of C is great.

But 50% (2x) was the lower bound of the slowdown, it was at least twice as slow (from that article), and in the Turing Award lecture Stonebraker mentions an order of magnitude.

Once again, I agree with most of your points, I just think the "we have magical compilers that make the overhead go away" (paraphrasing) is a bit too glib.
The system should, at the very least, notify a human when there's a sudden surge so someone can check why and override it in this sort of circumstance. Uber chose not to do that. They are responsible. This is not merely "technology".
I have some things to say – Core i9 and X299 [video]
"Does Goldman Sachs value a small sliver of profit over the opportunity to create a sustainable economy that works for everyone?"

Duh! Not just Goldman but pretty much every corporate entity out there. The irony is that corporations like Goldman Sachs do not have to exist. The sad part is that our society not only allows them to exist, but encourages them at the expense of real people's lives. One day, people might be smart enough to realize we have a choice, that we don't have to let these amoral entities dictate our lives. Oh, who am I kidding? People are too stupid for them to see what's literally happening in front of their eyes.
None of these are unique to C++ so I recommend simplifying the title. Even compile time recommendations apply to many languages.

Also, it is strange for maintainability to be #4 when correctness is #1 because it is equally important for code to remain correct over time. There is nothing more frustrating than reopening issues over and over because people keep accidentally breaking things in unmaintainable code.
I bought a condo on a 100-year flood plain back in the day.

Had 2 100-year floods, the first 2 springs I owned it.
There are many many games that embody small parts of economic theory, but few that bother with a "full" simulation. I'd suspect it's a little too fragile to guarantee a fun gameplay (as in, many logical economic outcomes might not be thrilling to simulate). Here's some notables off the top of my head though:

- Food Chain Magnate - interesting recent game that explores some aspects of pricing, marketing, and management structure. A lot is abstracted away, but it does a great job of creating strategic depth off of a few basic tenets.

- Container - cutthroat pricing and resource delivery game about shipping/manufacturing companies. Players must sell to each other and cooperate somewhat to keep the economy viable. One of the harder simulations I've seen; the market definitely can crash or stall in this game, which some people complain about but I find very interesting.

- Stockpile - very basic game about information in the stock market, but handles the ideas quite elegantly.

- Power Grid - one of the best-known and highest-rated of realistic auction games, also features a resource market. To me, Power Grid is most notable as an economic game on a meta level: it's spawned many different maps and expansions and each one plays differently, usually only based on small tweaks to the power plants available or the arrangement of the network or 1 or 2 rules twists.

- "18XX games" - this is an entire genre of "train games" that are generally about building rail lines in the early days or railroad expansion, but often include additional "hard" economic aspects, like the ownership and valuation of stock in the companies (some of them even grant most of the traditional player agency to the companies themselves, and then control is inherited by the majority shareholder, so depending on stock, 1 player could control multiple companies and another could control none). I'm just starting to play these games so I can't give much more detail yet but they are definitely worth looking into.

- Acquire - a downright classic game about mergers and acquisitions between hotel / real estate companies.

- Modern Art - another classic about emergent value in the art industry; very simple design begats complex play.

There's also a whole slate of more generic eurogames that breach into interesting economic areas, Brass, Panamax, Arkwright, and Kanban are some jumping off points there. Even less economic-themed games breach many cool concepts; certainly whenever I play my favorite game, Keyflower, I'm thinking about how to value actions over goods and how the global value of the different currencies (meeple colors) is fluctuating and how much game-end wealth delta an early denial to my opponent is worth to me...
Batman archetype
> The strong drive to adapt the world to what we see fit is literally what separates us from animals...

You are saying animals does not have the drive to adapt the world to what they see fit?

I would say that the bigger differentiator is that human beings can, to an extent, control their drives.
> in most games you can build additional factories

You can't just buy addition execution units? Sure there are limiting factors - in games as well.
Fred A. Kummerow, an Early Opponent of Trans Fats, Dies at 102
It's only slightly related, but I had this thought about setting up a wireless alternative to old BBS systems using only WiFi hotspots without an Internet connection.

https://www.joeldare.com/blog/post/wireless-bbs/
"Trustworthy" computing is not about security, but about platform control. You can still exploit a computer, whether it has TPM & accessories or not.

If the Windows was immune to Wannacry, we would not hear about it in the first place. You might argue, that it was the operators who failed to update, but there was already a discussion, that due to Microsoft abusing the Windows Update in the past, many people had many good reasons to disable it.
In life in general sure but in cases like these a blind review process (that I think they used) should be good enough.

I mean it is pretty odd that you would do a call for papers and pick out those you liked the most without knowing race or gender but then replace some just because it turns out they had the wrong gender/skin color/whatever.
I think that, with the emergence of OpenCapi and the like of CCIX, we will see more and more offloading to specialised HW as generic CPU are not able to cope with the required performance and amount of data.
If you look at Infiniband roadmap, they plan to hit 1 Tb/S within a couple of years. And no core dedication a la DPDK will allow generic CPU to handle that.
The heterogeneous hardware platforms are becoming the norm really quickly.
Keeping something dead for the sake of beauty is a very sad argument when the alternative is the potential for another living planet.
Thomas, many times I made a point that if auth solution is not enforceable it's not going to be popular. You like 1Password and it has reasons to be loved.

But let's take it real and look at password reuse problem. Can you admit that password managers and/or 2fa are not what we need and where we should stop for securing users?

We always needed an __enforceable__ protocol that has clear flow for the user. Button. Download, Generate profile, use to login anywhere.

I thought it was made clear that it has nothing to do with password managers. It's an authentication protocol that's 1) decentralized 2) extremely usable 3) scalable. That's all it is.
I'm not too familiar with ruby/rails, but does this mean the HTTP request just sits open for up to 20 seconds? Is this common/acceptable practice?

# user is given 20 seconds to approve the request
20.times{
sleep 1
sltoken = REDIS.get("sl:#{state}")
break if sltoken
}

https://github.com/homakov/cobased/blob/master/app/controlle...
Completely off topic, I saw your 150 days old link: Why does unsupervised deep learning work? (arxiv.org), I wonder if you have more links, it seems interesting. Also the Diaconis article you link to is one of my prefered one. I wonder if group theory can help to illustrate why deep learning works.
No Excuses!: The Power of Self-Discipline by Brian Tracy.
It's so good. I keep rereading it. Does wonders to my motivation and productivity.
I think it was "safe and performant without a GC" because both Nim and D have C++ level performance while being memory safe as any GCd language is.
You joke.

But there might be a time in not so distant future where you (or your successors) might really wish this was the case!
Clojure: Enemy of the State
I find that having to internalise the rules & quickly explain them to a group really helps improves my teaching skills. Plus, since we're not always going to get everything right, we get to practice polite correction & acknowledging mistakes!

I'm fortunate that our group is extremely cluey and can pick up new games after 15 minute rules summaries.

> I don't find the new stream of games to be all that compelling. I don't get who will be picking up all of these new games.

I feel the same, certainly for the flood of KS games. There's so many great games already published!
Thanks so much for this answer, I just learned a lot.

> There is no guarantee that the attempt to measure or detect faults won't hide them...

I got completely stuck on this in my original ponderings. I totally didn't think of sprinkling instrumentation instructions into the code and seeing if the bug still fired. If it did, the approach you described would certainly work very well (and, indeed, you describe it being widely used).

Major TIL with the address-based tracing hardware idea. That's an awesome approach, to do it that way... wow. :)

Building something like this would actually be a really cool challenge in designing a really fast piece of hardware. Considering the kind of access speed needed, though (particularly with the memory bus approach)... would a custom ASIC be required? :/ Or could I get away with using a (perhaps decent/pricey) FPGA?

I say this because it would be awesome to make something like this inexpensively available for people to put in their workstations. I can totally see a device like this also having some fast, nonvolatile* memory-mapped storage for things like infinite logging, as well. For example, the way Linux handles crashes is to kexec into a new kernel that hopefully fishes the log out of RAM and saves it. Very clunky. This approach also does not handle early kernel bringup - or even BIOS/EFI bringup, the libreboot folks would probably love something like this.

(*By "fast, nonvolatile" I mean something that writes straight to a large DDR-backed buffer and is then quickly yanked onto something like an NVMe disk.)
Good question, seems like someone answered here

https://www.quora.com/Why-are-board-games-particularly-popul...
They are calling them a "threat" to equity valuations. The job of a sell-side analyst is assess upside and downside risks to equity market returns, and in this case, the analyst is contending that a potential decline corporate profit margin driven by an increase in wages is a "threat" to _equity valuations_, and not so to society at large (one can make arguments about the interaction between society and equity markets, but that is not the point they are making here).

I would recommend that you spend some time learning a little more about the sell-side world before throwing barbs at internet strangers. I'm not currently associated with that world in any way, shape or form, but I know enough to question the "Finance is evil/Goldman is the devil" meme.
It's not common, but the quickest way I could find to reduce # of roundtrip requests. Happy to hear why unacceptable.
AT&T Web-based chat support will do it in about 5 minutes. Ask for a "port block" so other carriers can't port your number away from AT&T.

Even if you don't use SMS as a second factor, unless you regularly switch carriers, there's no downside to doing this.
We're biological life forms, it's literally our prime directive. Besides that though is there a rational reason to do anything? Ultimately the universe doesn't care so why bother?
Lol, thanks for calling that one out. When I talk about "counters" here, what I mean is all those tokens players use to track 17 kinds of "resources" in the stereotypical modern eurogame. I mean, are we really at the point where board games are distinguished by the way you navigate the board and the name/number of resources you have to manage?

I haven't played Legacy, because on principle I won't buy a game that can only be played a set number of times.

In conclusion, get off my lawn, I guess.
3 Types of Computer Hacking – The Difference Between White and Black Hat Hacker
I think it's also the degree of flexibility. Typesetting is itself a creative process as much as a technical one. When I do technical writing with LaTeX (and I do a lot) I'm usually ok with about 99% of what it outputs, but then I have the ability to fiddle around and make that one table have the borders exactly how I like them and that picture caption to be spaced just a little differently etc; I want to indulge my sense of aesthetics just a bit.

It's the combination of (mostly works by default) and (I can make it look just right) that is appealing. It gives me just enough stuff to play with to be satisfying and even a bit fun, without having to tweak so many things that it gets frustrating.
>> Customers are price-sensitive [with varying levels of sensitivity for varying aspects of the service]

That is the source of price elasticity of demand. Customers are not identical.

Some people value convenience of only checking one app more than a small price difference.
Some people value the speed of getting a car and if Uber can provide a car 3 minutes faster, may be willing to pay a few percent more.
Some people prefer the UX of the Uber app and how fast it is to actually compute a trip / connect to a driver compared to Lyft.
Some people are submitting expense reports and would prefer to have all their car service expenses from the same provider, for convenience.

And some people don't.

Just because Uber hasn't turned a profit (which they may have, in local areas, for all we know), doesn't mean they couldn't. It's completely rational for them to price low and attract more customers if they are more able to raise capital than their competitor in order to make it harder for their competitor to stay in business.
This argument treats local knowledge as worthless. Wouldn't most US graduates be more or less helpless there, without knowing the language or customs? At least in the short term, you'd need a guide and translator, which makes you a tourist (someone being taken care of for the money it brings) rather someone contributing through your work. A recent emigrant seems likely to have a more valuable combination of skills.
CCIX, GEN-Z, OpenCAPI: Overview and Comparison [pdf]
Embrace the future and never look back.
Exactly - everything can be derived from password. It's simplest backup strategy possible.
I've been following the development of Cemu (http://cemu.info/), the Wii U emulator that I'd consider the equivalent of Dolphin if it were closed-source.

One big difference I've noticed is regressions. While Dolphin has an insanely strong regression suite and plenty of people testing for regressions, Cemu seems to randomly go back and forth on support for games.

If you look at this unoffical "change report" you see a lot of comments mentioning that: https://www.reddit.com/r/cemu/comments/6d3nwc/180_megathread...

Part of it is probably how early in the game it is compared to Dolphin, but part of me wonders if being closed source means it's development won't ever reach Dolphin levels of quality