skysight-inc/HackerNews huggingface dataset:
Does the session key hash help if the attacker guessed the code correctly?
I started using these services (originally Blue Apron; more recently Hello Fresh) with the express goal of learning to cook. I originally planned to continue the service until I had a catalog of recipes I knew I liked and enough skill to do for myself. I met my initial goal six months ago, cancelled my subscription, then restarted it a couple of months after that.

I found that when I had to choose a recipe to cook, I just wouldn't end up doing it. I'd forget, or put it off, or make some excuse. I know I'm happier when I cook, I have enough skill now, and I go to the grocery store at least once a week anyway. But it turns out it just didn't happen most weeks. I ordered pizza or microwaved frozen food or ate out and felt like crap for not eating well.

There's something incredibly powerful about defaults. I'm not paying for recipes and ingredients. I'm paying for someone to tell me "cook this tonight". And I do. I cook more often, eat healthier, and end up happier at the end of the week. And maybe that's not true for everyone, but I'm more than happy to pay an extra $20 or so over sticker cost for the nudge.
I think the definition of availability is due to Brewer. The weird part of the 'theorem' due to Lynch and Gilbert is the definition ood consistency: in I recall correctly, it's linearizability, which is somewhat stronger than any guarantee that and DB actuality makes.
Did you read the article? It didn't talk about currency replacement, and it's about vacuous statements like the one you just made.
> I think it is an overreach to go from 'access to' to 'influence over'

Facebook is a lot of people's primary source of news or even communication.

Humans are a social species and massively influenced by what they hear from others.
For me Vuejs is one example of the "no innovation" part.
I wonder if we'll start seeing want ads for Olympian level coders (instead of mere rock stars).
One of the biggest issues is complexity. Sure you can make some fairly complex things within an FPGA fabric, like a CPU or GPU. However, you'll see a slow down in two areas. The first is routing, whereas an IC would just have a wire between two components, FGPAs have to route further and through different interchanges. Second, components can only be built up through the basic components of the FGPA, typically a LUT and FFs. The more complex components, the more small parts. Another aspect is memory; blockram works decent but it's an explicit design choice, DRAM via DMA is also a pain too.
Every time I see stuff like this I think of Grandma Moses, an accomplished artist who started painting at 78: https://en.wikipedia.org/wiki/Grandma_Moses
Have you ever tried a boogie board? https://www.myboogieboard.com/

Writing on it is very natural/paper feeling, there's no erasing or anything. With the more expensive models, it can sync the notes to a computer/cloud service.
The google fine is the new record, but 9/10ths of the previous largest antitrust fines were given to EU companies.
I'm in sales for a surveying/feedback SaaS co. Before demos I brand the survey/account with the prospect's company's colors & logo. During the demo I send custom branded, inline email surveys to a test gmail account to help my prospect understand the survey respondent POV. I also have to delete that test-survey email every hour so that the next prospect I demo isn't privy to who is exploring us. I often have to do 4-8 demos a day so as you can imagine that got old fast.

I wipe the inbox for my test gmail account every hour at the :45 minute mark using a ruby script. I don't automate the sending because it's part of the education of the prospect.
I call this blingle. I call it after any long running operation that I want to be notified of. It pops a desktop notification and sends a push message to my phone.

eg: make deploy; blingle

#!/bin/bash

MSG=${@:-"Job complete"}

notify-send "$MSG"

curl -s \

--form-string "token=TOKEN" \

--form-string "user=UID" \

--form-string "message=$MSG" \

https://api.pushover.net/1/messages.json
Do most programming jobs expect that? I think not.

It's like interviewing a doctor who will be someone's primary care physician. Give him/her a set of symptoms, and fail him if he doesn't diagnose it inside of 10 minutes. And then justify it with the expectations in surgery or ER.
This is just choosing CP: "In the event of a partition, it's okay to lose availability, and this is okay because the likelihood of a partition is small."

AP would be to keep trying to run the chip with severed connections between cores.
Wow, nice! How did you find that page? http://www.rsync.net/products/platform.html doesn't link to it
Ask HN: Open source projects that need UI/UX help?
In the UX community I've found many people who would like to offer UI/UX help for FOSS projects. But its not easy to find out what projects are willing to accept these improvements. If you are involved with FOSS and need UX help, please let me know.
Canon Cat Resources – Jef Raskin's Forth-Powered Word Processing Appliance
Blue moon, which I prefer, sits right at 3.2%.
upvote, upvote, upvote, upvote, upvote
Tech writers are certainly asked to create technical documents to demonstrate their skills. Chefs might be a good model too; it absolutely the case that before hiring a chef they have to plan a menu and cook.

We aren't business people: we do actual productive things.
Soups are another one of the classic solutions to this problem. A large variety of random leftover ingredients can be mixed-and-matched into a soup, and it solves the stale leftover bread problem too. Plus you can be doing something else while it cooks, as it is not a style of cooking that requires a lot of active attention. And as one more bonus, leftover soup often tastes even better the next day.
It operates over the Internet instead of Wi-Fi / Bluetooth and it initializes transfers by a code.
Sorry, how in the world does this shut down debate? One should be able to say "Because of X, Y and Z, it is wrong," without worrying that somebody else won't even respond with "but what about A, B, and C, which mitigate the wrongness?" Or "but it is not wrong because D E F."

Your blanket statement seems to shut down debate far more than OP's original comment.
So do bootcamps teach data structures and algorithms?
It is.

In 2008 I downloaded 30 MB Firefox nightly on a ThinkPad whilst roaming in Serbia. Bad move. Set me back ~600 EUR.

I didn't know this beforehand, but I was 'lucky' to struck a deal with Vodafone to cut the cost in half.

Serbia isn't in EU though, and this was in 2008.
> I'm not actually sure if this is Facebook's doing, a carrier agreement, etc

This is absolutely in part Facebook's doing. They've struck numerous deals.
I wonder how much the hectic pace of logging in the US contributed to that difference.

http://geo.msu.edu/extra/geogmich/rr-logging.html

Land purchased for the timber would be a prime candidate for disposal once it was cleared.
FSB lol

Even if FSB found hackers, they would take a share of profit and close the case.
> it's linearizability, which is somewhat stronger than any guarantee that and DB actuality makes.

Isn't that equivalent to serializability, which is a guarantee that lots of DBs offer (though you can choose weaker ones instead.)
So true. I have thus far, seen the following comments in my (Mountain View) NextDoor feed, made by the anti-growth brigade:

-Complaints about the removal of trees to accommodate bicycle lanes

-Complaints about restriping/widening of bicycle lanes

-Complaints about how the architecture of new apt buildings on El Camino Real is ruining the character of MV

-Complaints about how the removal of historic buildings in downtown MV (by their landlords, who can no longer afford to maintain them) is also ruining the character of MV

-Complaints about why are there so many RVs and campers parked on Shoreline

-Complaints about why so many restaurants in downtown MV have a hiring shortage and quick turnover

-Complaints about why the checkout lines in Safeway are so long and there aren't enough checkers

-Complaints about the traffic on Shoreline (i.e. near Google)

-Complaints about Google's attempt to add pre-fab housing

And of course, if you imply that they should sell their $$$ house and move elsewhere, it becomes a discussion of how "my family has lived in MV for 3 generations, etc, who gives you the right to tell me how/when to move"
Interesting. Would it be possible to use it on Android and IOS?
> I have no idea why this is the top most upvoted comment

HN thinks if you can shoot something down it means you're smarter than that thing. Therefore the most negative sentiment is the most intelligent, and should be voted to the top.
Why? Everyone has some things that are "common knowledge" that they don't know. Trivia isn't called "trivia" because it matters.
I used to know the answer to this...
Giving the homeless a one-way ticket to the city of their choice is a very effective homeless removal strategy that a lot of cities employ. Guess where a lot of homeless people choose to go. SF would literally be paying to ship the Horne less away to a city that will simply ship them back.
Human consumption of clickbait seems to have strong similarities to our outsized appetites for fat and sugar. In regards to the tempting foods, these cravings are presumably artifacts of slow evolution; we evolved to an environment where we should seize every opportunity to consume these scarce, high-energy foods, and we have not yet adapted to the new reality where many people have plenty to eat.

I wonder if there's some similar primitive drive behind the unhealthy appetite for clickbait; a yearning for information that may help us to survive and reproduce. Some of the high-performing headlines seem to frame the information as something that will affect the reader personally.
I prefer https://www.justbeamit.com/
The Stanford Student Space Initiative's valbal is an interesting project where they add a lightweight set of ballast and a valve to a weather balloon so it can maintain an altitude. They're limited by power, the amount of ballast, and how much gas they can bleed but they can get flight times of days. https://stanfordssi.org/blog/ssi-52-breaks-world-record-agai...
Watch the movie "Real Genius" for a humorous take on the subject.
Tales from the intersection of science and airport security
The attacker still just gets 1 guess per wormhole / send request. Each send-request / wormhole is its own separate thing.
The two sides exchange IP addresses (inside the encrypted channel), and try to connect to all of them. If that fails to produce a successful handshake, they fall back to a "Transit Relay Server" that I run. So they'll manage a direct connection if one of the machines has a public IP address, or if they're both on the same LAN.

I'm hoping to add NAT/UPnP support, but it's not there yet.. still looking for an easy library with Python support.
If they're using auto-incrementing IDs, they will have broke past that number some time ago. 2bn is monthly active users, which implies there's many dead or inactive accounts.
I'm homeless. I have been for 5.5 years. I am author of the blogs "What helps the homeless" and "San Diego homeless survival guide."

I have a bunch of blogs because of the free service BlogSpot. I have an earned income because of an online writing service. I have social contact and an intellectual outlet because of free forums, like Hacker News. I do most of my banking online. I am paying down debt and my earned income is gradually going up.

I could really use more traffic for my websites, more customers for my resume editing service and access to decent basic housing that doesn't cost an insane amount. If I could find a simple 2 bedroom place for about $400/month, I could get off the street in the very near future. I can't seem to find that. I am in the Central Valley, not SF and I am willing to potentially move to another state, though not just ANY state. I am still finding it incredibly hard to locate a potential viable housing solution for me.

While I agree that some things add more value to the world than others, there aren't really any clear cut boundaries. Some of the people on the street are, for example, cancer survivors who are broke in part because they got treatment that saved their life (so far) but it cost a helluva lot. We really need a few more basic things solved, like universal access to basic healthcare. More cancer solutions can potentially just put more people on the street. It doesn't necessarily fix this problem.

Homelessness isn't a simple problem space to solve. There is no one thing that causes it. Some things that would help enormously:

More affordable housing, which has been in short supply for decades and getting worse.

More middle class employment options. These seem to be going the way of the dinosaur.

Single payer health care system to provide universal coverage.
file.pizza requires WebRTC support so I can't use it.
I think it's more that “if you wish to convince people of your point, you can't ask them to go find the supporting evidence and reasoning, you need to provide the reasoning and identify the evidence.”
I think much of that is around knowing that these tools exist, understanding their benefits (to the point of recognising the ROI in spending the money on a quality knife, a mandolin, etc), and then using them to the point where the ROI starts to pay off.
I think this is a tonic in contrast to the current hype, if a bit over-bitter. The larger problem that blockchain addresses, though, is, as quantdev alludes, is a way for actors outside of a firm to collaborate at scales previously only available to governments and (for some value of large) large firms.

In the parking car example, for instance, it is true that implementing a system to do that requires only RFID and servers. This means that at one time it was only plausible for Interstate System to use them, with the technology cheapening to the point that parking garage operators install them. Blockchain steps this down the next level allowing everyone using the system to also own the system.
They scrapped the compiling to C++ part long ago, HipHop is now HHVM.
That's a pretty succinct summary of the gzip thing.

There is still worth mentioning the issue of executing code once it's decompressed - so properly scoping a var is always better value for money than global.ancestor.foo.bar etc.
Here's a funny one
http://www.nationalgeographic.com/magazine/2017/07/under-ant...
It was more an attempt at light humor than sarcasm. :-)

(Not to mention I thought it was hard to imagine anybody around here being unaware of the most capitalized company in the world. Aside from maybe Saudi Aramco.)
>We just broke the production database, we need to figure out how to recover the data ASAP

I know you did not mean it this way, but in some ways that's even worse. If that type of thing were routine enough to merit asking every interviewee that question, I would seriously reconsider working there.
I've always heard that TI-BASIC conformed to a "strict ANSI BASIC" standard, whereas almost everyone else licensed Microsoft's version of BASIC.

Maybe that's why?
> Oh please loosen the yoga pants.

Please be civil. We are not here to attack others. We are here to discuss the topic.
Yup, it still does. In the face of a lucky-guessing attacker, PAKE basically degenerates down into plain unauthenticated Diffie-Hellman, which means Alice-Mallory has one key, and Mallory-Bob has a different key. Mallory could decrypt the messages from Alice and then reencrypt them for Bob, but Alice and Bob will still both see different keys. If they have some out-of-band means to compare those keys (which Mallory can't corrupt), then they can detect the attack.
When I was a kid, my mom was teaching high school, and thought that she might get laid off due to declining school enrollment in the rust belt. She took a year of programming courses at a community college. The next year, they asked her to teach the course, which she did.

Most of her students were 30+, many were working in the auto industry, including assembly line workers. At the time, there were a lot of bright people working the lines because it had always been possible to skip college and land a decent middle class job at the car plants. But that was coming to an end.

Her students were taking one year of CS and getting hired into reasonably decent programming jobs.

In fact, I was also interested in programming, and learned it in school. When I went to college, my mom discouraged me from majoring in CS because she literally thought programming was too easy to justify 4 years of classroom training, and she thought that the job market for programmers would quickly saturate.

Let's just say we guessed wrong. ;-)

But at the time, college level CS was still maturing as a discipline. Many of the 4 year colleges didn't have full blown CS major programs. I'm betting it's harder now, but I honestly don't know if programming per se has fundamentally gotten any harder.

Edit: Noting some of the comments, I certainly don't want to disparage the CS degree. After all, I majored in math and physics -- hardly a turn towards a practical training. I think these are fields where you have to be interested enough in the subject matter, to study it as an end unto itself. Being able to do actual practical work in a so called real world setting is always its own beast, no matter what you study.
Not really. The problem in general is that there are very few active "junior" level positions about, and a lot of people wanting to break in - see /r/cscareerquestions. For later learners especially self taught learners the problem really comes from finding the FIRST job, not the second when they have professional experience.

Coming out of college though is a different experience. If you're 33 and just finished a BS in CS you could probably make a run at most jobs. But self taught at 33 requires a lot more to get in the door than self taught at 25.
0.0.0.0 is a better target than localhost, because it means the connection fails immediately rather than possibly timing out, and it won't accidentally succeed if you're running a local server.

The IPv6 variant (two colons, ::) is shorter still.
You probably got downvoted for sounding like one of those "craft beers are good and everyone else drinks crap/I'm so tasteful" hipsters
Global Ransomware Strikes Again
> Buy big bags of proper basmati or jasmine rice at Asian stores, put in cold water to soak in the morning, boil for 10 minutes, perfect rice that mops the floor with Uncle Ben's.

This is like the best advice ever for rice lovers. I made the switch after being underwhelmed by small batch, Indian-named but made in US Basmati rice...it just had no flavor or taste. After using the rice from the bags.... HOLY COW, so much difference in flavor!
I'm not sure what you're getting at. The first is a clear example of a permissible R&D credit activity if it otherwise satisfies the 4 requirements, and courts have found that the second activity generally would also be permissible for R&D credits if the integration involved additional software development by the bank (though this is more of a facts-based determination).
That's not a winning solution either.

When Anonymous ran some anti-ISIS operation, they accused CloudFlare of "hosting" dozens of pro-ISIS sites[1]. It turns out Anonymous was entirely wrong about the CloudFlare customer sites (confirmed by DHS) and hypocritical (because CloudFlare tried to remain content-indifferent and, as such, protects lots of Anonymous sites). But their image took a spanking for it in the news, despite (1) investigating the claims, (2) contacting DHS to confirm they were in the right, (3) having a rational counterargument (even if it wasn't as simply as "TERRORISTS!!!!1!!1one").

Remaining quiet isn't the solution either. @eastdakota was actively corresponding with the HN community while his security+product teams were actively mitigating the "CloudBleed" damage.

Sometimes you will lose the news cycle, even if you are in the right and did everything right as a company should.

[1] https://www.theregister.co.uk/2015/11/18/cloudflare_ceo_rubb...
Sorry, this is just Democratic voters tearing themselves apart. Appalachia used to be a democratic stronghold. These are people don't want to live on welfare generation after generation, and that's what they tried to vote for.

https://thinkprogress.org/appalachia-used-to-be-a-democratic...
Here's a longer great Wired article about (I think) the same group of coders

https://www.wired.com/2015/11/can-you-teach-a-coal-miner-to-...
CTR and OPEN RATES FOR ORDER CONFIRMATION EMAILS
"doesn't have a produce market a mile away"

I have a produce market 10 minutes walk from my home - unfortunately, my working patterns prevent me from using it except on extremely rare occasions.

Supermarkets do have much longer opening hours that fit with my working patterns, but sadly don't have the quality of produce as my local farmers' market.
So, basically, scp (with a 16-bit session key that has to be exchanged oob)?
I think Synergy does that as well.
I dont know about society as a whole, but it certainly improves the lives of those who work for facebook.
>"It is all "rulebreakers brought this on themselves" nowadays."

Whether you display them publicly or not, if they broke the law, they should be punished. We can't live in some magical limbo situation where we simultaneously have laws and not enforce them most of the time. I.e.: If the tech is there to apply the laws that have currently been "agreed" by the public, then there should be no question or overriding factors to consider.

Talk of privacy and "individual rights" is just distracting fluff in that context. We've already decided that certain actions merit punishment. We're just now upset that the coming omnipotent presence of surveillance can actually make us adhere to the things we've been whacking other people over the head with. You know, the ones that "got caught" doing it.

Either that, or simply start repealing all these non-sense laws that we don't actually want to punish people for. The third alternative is a gigantic mess of exceptions and "buts" that want to enable us to eat our surveillance cake, and sometimes keep it. Make no mistake, that is exactly what the "privacy" folks are advocating for. More bureaucracy.
Syncing current dev directory to my webserver using rsync multiple times a day:

rsync -rlptvDC --progress --rsh="ssh -l username" * myserver.com
Debian had non-US repositories in the past and it didn't "ruin it for linux". Perhaps they could be brought back, with the addition of geoblocking US clients from accessing the non-US repository.
Precisely. Facebook is a black hole, nothing comes out of it and onto the wider web. We are all familiar with people moaning about articles being posted on HN from paywalled sites, but when was the last time you saw an article on HN that originated on Facebook? (With people moaning about it).

Sometimes you will get a Facebook 'tech' story posted, e.g. that compiled PHP thing they did or how 'fake news' is to be dealt with, but these stories - if they make it to HN - will be Facebook's own pages, not Facebook user 'pages'.

I don't know why this is, Twitter stories make it into 'journalism' all the time, Facebook? Never!
Heh... I knew my Slashdot ID was pretty low (~32K), but had no idea I'd been around here that long. Now I feel old. :-)

Speaking of old, I used Reddit as my main news source for a while, and I remember /r/programming having a post celebrating 65,536 users. Now it's over 10 times that, and there are more than three subreddits.
Draught beer is served in 25cL in France. But the alcool unit is not defined as in the UK. 1 unit is 10g of ethanol, not 10mL, so I don't know about a European standard. Alcool has a density of 0.789, so about 12.7mL. So just over 5% alcool for 25cL. It's possible to find lager beer at 5%, but the trend is for stronger beer.
But a bottled 33cL 7.5% craft beer would be about 2 french units.

*edit: there is no EU standard, UK 8g, France 10g, Germany 14g
https://en.wikipedia.org/wiki/Standard_drink#Definitions_in_...