skysight-inc/HackerNews huggingface dataset:
I'm comfortable using passwords <20 characters distributed among a range of sites because I have a realistic view: if one gets compromised, not every account does, and most accounts are not critical. Some are luggage keys, some are Medeco.

But those are bad comparisons. A key and lock is an asynchronous single use authentication+authorization mechanism. Passwords are just the authentication part, so trying to replace these just requires we have a secure way to authenticate ourselves.

We have the benefit that we are using digital systems, so our authentication can be digital, too. We can also rely on multiple factors to improve how authentic this process is. Biometrics, digital files, access to other accounts and networks, offline code generators, and personal information all provide lots of authentication data and multiply the effort needed to defeat the system. By combining all these factors, we can create a new digital key that is far more difficult to defeat than old methods by themselves, and ultimately is more flexible because it can be made up of any of these things.

The problem mainly seems to be that we live in a world of different locks, and most locks don't accept this particular kind of digital key. We've hacked around this problem and made some attempts at more compatible solutions, but they really fall short of their true potential.

In the future, you should simply be able to use any system and know that it will authenticate you in a way that can't be copied or cracked. Today that just isn't the case. So for now, maybe we should move the goal posts. We can keep making our keys more unwieldy, but we can also get more guard dogs.

The guard dogs need to exist not only to protect the locks, but the keys, too. If you go to unlock a door, a thief can knock you out and steal your key. Each aspect of our digital access needs guard dogs. We can no longer accept insecure communication methods, nor insecure computing platforms, to exchange our authentication. I think the real challenge going forward is rethinking how we process data altogether.
Trump misunderstood MIT climate research, university officials say
> EU combined is ~510 million people. More than the US and while there are differnt amounts of variation when it comes to how much countries spend to fight climate change there is practially no different in the agreement that it is real and we must all work together to fight it.

Southeast Asia contains most of the world's people and a huge fraction of the world's GDP. Apart from China, however, it's uncoördinated. A small action by the United States means more than many large actions by smaller European states. This makes sense from game theoretic as well as simple sociopolitical perspectives. This is part of the package one takes when choosing the confederated structure the EU has opted for.
You quite literally took the words from my mouth/keyboard.
The key is effective product management, which can then lead to effective project management. Specifically, someone needs to know what the product is and where the product is going (road map). Often the product is at the mercy of the loudest sales person, demanding the feature to make their sale. SalesPersonX needs FeatureY to close a $50,000 deal, when CustomerA, CustomerB, and CustomerC have all requested ImprovementD, maybe they'll renew without it, maybe not.

Someone needs to make this call: prioritize ImprovementD or FeatureY. Maybe they can both get done this year, maybe not. It's a business decision, either keep current customer happy or drive for sales. Usually SalesPersonX knows RockstarZ's number and calls him directly. RockstarZ get's burned out from the constant pressure and quits.

So, someone needs to be gathering feedback from customers and prospects, build a roadmap, then project management can concentrate on delivering features.

I have worked at one company that got this right and it was a joy. I didn't realize it at the time, but I've since come to regret leaving there.

Edit; I just realized OP asked for reading material, I opined instead. Sorry, leaving this here anyway
There is still convenient Google+ with its Communities.

Or you can make your own social network with Diaspora* (https://diasporafoundation.org) or GNU Social (https://news.ycombinator.com/item?id=11062757)
Accessibility of global wealth seems more important.

In the age of sail, I'm sure one could have stashed gold in some backwater city, which would have hidden it very effectively from any government. But then you couldn't use it.

The international banking & legal systems now enable those with means to both keep wealth away from governments while still maintaining access to it for practical purposes.
It's not a distribution issue - he already listens to the same music through Google Music scubscription as would be provided by Google Red, if it were available.

Google Red can still impose territorial restrictions.
That's seriously cool!

I was reading about something similar for CI servers to compare the stdout/err to the values of all initialized secrets and if any strings match, filter them out. It's a simple way to block "echo $SECRET_STUFF" from publishing to a public log. It doesn't catch everything as it'd still be possible to curl out to transmit information, but it does work quite well for the more common case of "*Let me dump all environment cars to debug why this isn't working...".
Well, if every asset class was equitably 'overvalued' then we are at an equilibrium and there's no problem.
TERMINATOR 2 JD (GTAV Cover) FULL FILM 2017
I am not saying this in any diminutive context. For some of my friends, all these are the points of pride.
Where you use this is important, too. Accounts that can provide remote access or admin rights should be scrutinized heavily, whereas an office temp with an email address (and no access from the outside world) isn't much of a threat.
Microsoft Azure inclines towards Kubernetes
That probably is just an QR-code login, but not the same as SQRL login. In the SQRL standard you also have an solution to revoke your identities for each site/app and recover when your device gets stollen.
Chrome is the googlebot crawler so they can't bin it. Is it a non-profit? No. Is it a profit center? Potentially. It saves them money using their own machines to do it and has powerful lock in and tracking ramifications.

> Mozilla is a non-profit

Ya. They don't run an ad network or search engine. This doesn't make any sense. Basically:

Is MacOS a non-profit because Linux is free? Apple does not charge for it but it's the bloody platform
I'm not seeing an issue. How is it worse than ad blockers?
Muut (https://muut.com) is another alternative to Facebook comments.
Enthusiastic individuals. I personally have content which I host on Digital Ocean droplets and which do not generate any kind of revenue for me.
Make Planet Earth Great Again
Wealthport.com | Senior Front-End Web Engineer, Data Preparation Expert, Senior Computer Science Researcher | Zurich | SALARY: 100k-120k CHF | ONSITE

Using machine learning an nlp, we merge trashy, badly-labeled excel sheets into useable, categorised and normalized data. We are obsessed with functional programming and we are using mainly Scala and Javascript. We look for:

0) Senior Computer Science Researcher - you will read & write papers on nlp and ml and implement algorithms in our core product.

1) Senior Front-End Web Engineer - you will build our customer dashboard that enables input of unstructured data.

2) Data Preparation Export (Data Science) - you will help our customers adjust their data to our platform.

The interview process:

0) 15 min call with our tech recruiter (who is a former engineer)

1) Technical call with CTO

2) Onsite day solving a programming task with us.

Send us a short intro about yourself to:

hiring@wealthport.tech
Yes, definitely. You can almost trick your mind into believing it's a high-res photo of blue jello.
That probably is just an second factor QR-code login, but not the same as SQRL login. In the open source SQRL standard you also have an solution to revoke your identities for each site/app and recover when your device gets stollen.
Latest BlackHat Arsenal USA 2017 Tools and Their GitHub Repositories
Energy distribution, be it from solar/wind/water/natural gas, is a question of logistics.
Show HN: StockNerd – A community for index fund investors
Show HN: OppsList – A small, but growing list of software opportunities
That's just plain v.icio.us
> When these were taken into account, only Sweden’s record was judged compatible with the Paris goals.

https://www.theguardian.com/environment/2017/mar/28/only-swe...

People can claim a lot about other countries and there is a lot of things we do shittier than others. But in fighting climate change, there is no better country than Sweden.

Since we can, you can as well. Taking leadership is possible as a little country. We can show you all that it is possible and that you can gain economical benefits from it. In Sweden, fighting climate change is a cultural thing like it should be in the entire world.
> Seems to me as though Bitcoin mining is kind of a backdoor way to move Chinese money offshore

Which is why China is trying desperately to get control. They limit how much money their citizens can move around, whether it's Yuan, stocks or foreign currency, everything is limited and monitored. Bitcoin is no exception. Except, I think it's more nefarious than that. Bitcoin stands for everything China is against. A (mostly) anonymous currency which is decentralized? It's practically the opposite of China's ideology, a country which has strict controls on just about everything within their borders.

If I was the PRC, I'd move to damage, corrupt or if possible, destroy bitcoin. At the very least, I'd dig my claws in somehow, someway so I had some (even if it's just a little) control. But if I was China, how would I do it? I couldn't just create "The Exchange of the People's Republic of China". I'd have to do it through a proxy of some sort. There were some rumors on reddit about Chinese nationalist Jihan and his company Bitmain being such a front. I'm no tinfoil hat kind of guy, but the more I think on it, the less of stretch it seems...
I'd add very long hours sat (or even stood) at a desk. Coding on the beach is less depressing.
After all pensioners aren't likely to riot.

I would highly recommend reading The Road To Serfdom (https://en.wikipedia.org/wiki/The_Road_to_Serfdom). It details precisely why a right wing government needs to invest in welfare and social care for this exact reason; when a government fails the poor (or the poor's parents I imagine) they have a tendency to rise up and kill all the rich people.
While this is true, sometimes you work on a very large project, the end goal of which you will never see and don't really understand. The abstractness of the work you are doing can be challenging for people who like to be excited about the end product.

For instance, a while ago, I was working on a large industrial project.

Between me and the customer were a layer of business analysts who figured out what the system did, and a layer of systems engineers who worked out the specifics of the system in terms of components with interfaces, and logic flow charts for what those components did in different situations.

For one assignment, I needed to make a value returned by a webservice change when a GPIO was toggled to indicate a button had been pressed. I didn't know what the button did, or what the result meant, and communication with the systems engineers far away was through JIRA tickets. I didn't even ask because the management didn't like off topic comments on the tickets. I think it was a custom feature for an oil tanker, but who knows what I made...

While that way of working was very productive, and produced reliable software built to validated designs - with lovely code because we could really focus on it - it was really hard for me personally to feel any passion there.
Predicting time series
Show HN: Easy State: replace ReactJS's setState with direct state manipulation
Your last paragraph reminded me on the verses of this guy Avdić.

The rest is politics - in 20th society turned a deaf ear to the hint of the holocaust and artist like Dylan had well shaped our souls afterwards.

At the end of that century there was a war in the middle of Europe only few understood at that time and those few are even decimated these days.

Zaev took the cabinet yesterday and there's no link on HN about that and that's fine. Still, don't think because of that that Zaev wasn't the greatest news in European politics this year.

And about daily politics, what you guys think it would have greater impact on US economy: Paris withdrawn or Riyadh drawn?
Statement on QuadrigaCX Ether contract error
That's a common criticism of any stateless system, like the Master Password algorithm.

I made https://github.com/myfreeweb/freepass which is based on that algorithm but also generates keys, not just passwords — Ed25519 keys for SSH, signify, and I wanted to add SQRL but haven't got around to that yet.

Some people like to say that "omg if your master password gets stolen with this, that's it, but with a classic file-based password manager they also have to steal the database file". However…

If the stealing happens via keylogger malware, THAT MALWARE CAN ALSO STEAL THE DB FILE, for fuck's sake.

If the stealing happens via someone looking over your shoulder / recording how you enter the password with a surveillance camera, they also have to know your "full name" which can be whatever string you want, it's stored on your device and isn't visible when entering the password.
Same for me, although I studied computer science.
I enjoy to read such nice written articles about technology.
Even though most of the text was about stuff I already knew, there still was something new (maybe I just forgot?) for me: retransmission via ACK messages.
But even if not, I still appreciate reading about this stuff again to freshen my knowledge.
If I don't work on/with these topics regularly, I tend to forget about some of the details.
This. There's no global bargaining chip to be gained here: if anything, the rest of the world has now fully realized that American exceptionalism is in rapid decline. Witness, for instance, the global reaction to Trump's decision, which has essentially been "that's nice, we'll stick with the agreement". This looks less like a savvy political move and more like a petulant child lashing out because Germany stated the US can't be completely trusted anymore.

Maybe this will garner some points with his most fervent backers, but that set's growing smaller by the day.

The most charitable spin I can think to put on this is that he made an enormously risky bet on a) the rise of populism in Europe and b) the ability of America to cash in on its supposed position of leadership. Turns out a) failed and b) is worth less than we imagined.
Catching pointer overflow bugs
I found Sinatra fairly easy to understand, and they were happy to take a patch. I don't know Ruby, but I am also an experienced developer, so YMMV.
Fire FB Messenger Chatbot from YouTube,Instagram,Twitter,Facebook and Web Links
Show HN: OneGram – A backed by gold and shariah-compliant cryptocurrency
The QR code just makes signing in with a different device possible. With SQRL, the QR code is supposed to be clickable for when you're browsing on your smartphone and want to sign in with the app that's on it.
How to set your $PATH
And who pays for the investigative reports?

Who pays for the academics who spend their lifetimes researching the field we're reading about?

Who pays salaries so the best people can make a living doing what they're truly great at?

Who makes enough money to get big and old enough to gain a reputation? Without which, the news is a hail of unsubstantiated bulletins from semianonymous writers, a wilderness of mirrors and fake news amped up to eleven?

Believing that we can make content totally free is utopian. You might as well ask why to bother paying software engineers large salaries when open source software exists.

In a world where content is free, all that happens is that newspapers become the organs of plutocrats and political groups. If you want to imagine how the internet looks when content is totally free, imagine a Facebook news feed written by the Koch brothers.
It also makes you wonder how they know what the third, fifth, or seventh characters of your password are...

I suppose they could create multiple hashes each time you change your password, but I'm not optimistic.
>There are several big reasons why Europe's politicians, and career bureaucrats from all over the developed world, love to focus on climate change. First and foremost, it's one of those problems that's hard to define. They even changed the name of the problem from "global warming" to "climate change" to further muddy those waters.

In other words, any politician claiming that he's made a dent in the climate change problem is pretty hard to refute while any politician claiming her opponent has failed to make real climate change progress is similarly hard to debunk.

Meanwhile, a growing number of career bureaucrats get to keep on "working" for environmental improvements with almost no accountability. Compared to the war on terror, which does demand more tangible results, this is a much more politically pliable issue. For the political class, this is a win/win in perpetuity.

http://www.cnbc.com/2017/05/30/trump-threatens-the-failing-e...
If you like the book, you'll love the code!

http://www.ddlab.com/

http://www.ddlab.com/screensave3.png

http://uncomp.uwe.ac.uk/wuensche/2006_ddlab_slides1.pdf

http://uncomp.uwe.ac.uk/wuensche/meta.html

http://uncomp.uwe.ac.uk/wuensche/boa_idea.html

http://uncomp.uwe.ac.uk/wuensche/downloads/papers/2008_dd_ov...
It can work that way and is described right below the xkcd comic. He does it with a separate process running on the local machine and the javascript uses a localhost connection to talk with it.
Sorry, I meant Taler not Flattr in the last line. Taler uses blind signatures to protect the spending habits of users from being discoverable by vendors or mints.
Pointer overflow UB checks recently got merged into clang.

https://reviews.llvm.org/D33305
News-audit: Fake news detection
So much better. I spent a minute waiting for the original to load and only got ads.
How did this get upvotes.
Why Whistleblowers Get Paid in the U.S. But Not in Britain
We are debating under which conditions it might be permissible to kill your own citizens. Reasonable people could have different answers to that question. "Never" is certainly one answer, and a principled one, but also one that is not implemented by any existing state that I know of.
Yandex.Key too https://yandex.com/support/passport/authorization/twofa-on.h...

but I'm like 99% sure it's a proprietary protocol, not SQRL
Am I correct in my recollection that the sound represented by "b" is actually closer to the unaspirated "p" in words like "spin" and "spot"?
Steve is writing an official reference implementation for Windows. He is trying to get everything right and updates the spec with what he learns. I believe there are other unofficial implementations currently.
It's not irresponsible to keep discussions in their right place, of course politics will seep in everywhere but if I want to talk about the US pulling out of the Paris agreement (and I do) then there are better places to do that than here.
> Just because 70% did not want to pull out does not mean they don't buy the idea that the US should renegotiate to get a better deal.

What "better deal"? The Paris climate agreement is entirely voluntary; each country determines its own contribution to reducing global warming and there is no enforcement mechanism. It's aspirational and America gains nothing by pulling out of it.
wtf... uneducated? that's whoever wrote that page, not the users. the question specifically asks about the users
The problem I have with the tax simplification folks is that they're generally disingenuous about the fact that they're proposing moving from a progressive to a much flatter tax code. Or at least ignorant about the differences.

I'm sure a lot of the language and ideas they're parroting are coming from conservative talk radio, hence the blind spots. But it really soured me on the US tax simplification debate.
Its truly tragic that the US and US medias are clouded by solipsism that they phrase their sentences like that.
I use enpass, which supports Linux. It's not open source, but it's built on an open source sqlite extension called SqlCipher. That doesn't guarantee the applications that use it are solid, but I like the tradeoff it provides.
wtf... is this an uneducated reddit user that stumbled upon HN?
Many pension obligations are inflation indexed and high levels of inflation distort the economy. At some point producers start hoarding raw material (or leave it in the ground) because it's more profitable to do so in the long run. This is currently what Venezuela is experiencing and rioting is the outcome.
And it should be a larger concern for bitcoin proponents, too. Imagine if China decided to wage a covert war on bitcoin. I mean, is it really so hard to believe that China wouldn't like bitcoin because it literally (not figuratively) runs antithesis to their own fiscal policies?

And how would they run a covert war against it? An open war or public attack would immediately raise the defenses of everyone involved, from miners to developers, to bitcoin holders. But what if they played nice while all the while poisoning the well or setting the stage to gain trust. They could do this through third party companies (cough bitmain cough) which could cause damage to bitcoin by delaying vital upgrades and sowing the seeds of uncertainty and doubt.
What, like steal one from another browser. That seems unlikely
If you believe in "green" power so much, start using it for everything in your daily life.

Also, stop importing energy from other states, while essentially banning energy development in your own (cough... Calfornia).
In Texas, Some Rare Good News About Cities with Pension Woes
Imagine a desert island with three inhabitants: W, P, & U.

W climbs trees every day to fetch coconuts and then swims them across the channel to a neighboring island where she barters them away for drinking water and then swims back with jugs full of water.

P used to help W with the tree climbing, but is now too old to do the work. However, he long ago made a deal with W, and she's a man of her word, so she keeps him supplied with enough fresh water to get by every day. Still, when the yield of coconuts becomes bad, or when there's a glut of coconuts on the neighboring island, she is liable to feel that there is an excess of pensioners on the island.

U is in desperate need of water and would do almost anything, but he doesn't know how to swim or climb trees.

Now, tell me: How does the existence of U help get the fresh water that P needs? How does the existence of P help U find a way to earn his water?
As physical books, 'Becoming a Technical Leader', 'Quality Software Management, vols 1-4' and others condensed Jerry Weinberg's experiences as a software developer, manager, and consultant down to practical, thoughtful suggestions for managing software projects by managing yourself and others. He's now bundled the writing as the 'Quality Software' e-book bundle [0]. One stop shopping for a lifetime's worth of suggestions.

I'd add, as others have or will, 'Peopleware', 'The Mythical Man Month', 'Code Complete', and 'Making Software', but Weinberg not only presents information and tells stories, he gives practical suggestions on how to 'check your work', adapted to your situation.

[0] https://leanpub.com/b/qualitysoftware