skysight-inc/HackerNews huggingface dataset:
Disadvantage: If any website you use has it's password database leaked, an attacker can then do an offline brute force attack to recover your master password. Then, the attacker can then generate your password to every other site you use, such as banks and email, just by trying a couple values of n.
There is also a relatively well-known startup called Quid. They are doing something with data visualization. I first though this was them.
Well pandas iterates through every row anyway, just in native-land rather than pure Python. That's not the difference.

The trouble with this code was the choice of the quadratic algorithm (which the idiomatic pandas version avoids). You could achieve a similar speed-up as OP for the pure Python code too, by dropping the doubly-nested loop.

The point stands as usual: better algo > clever tricks :) Personally, I find the code brevity that pandas offers does not outweigh the added complexity and cognitive load of its (IMO hard to remember and reason about) API.

EDIT: pure Python version

def gen_stats_python2(dataset_python):
aggr = {}
for product_id, product_order_num, quantity, price in dataset_python:
item = aggr.get(product_id, [0, []])
item[0] += quantity
item[1].append(price)
aggr[product_id] = item
return [
(int(product_id), len(prices), int(quantity), round(float(sum(prices)) / len(prices), 2))
for product_id, (quantity, prices) in aggr.items()
]

761x speedup!

%timeit gen_stats_python(dataset_python)
1 loops, best of 3: 36.3 s per loop

%timeit gen_stats_python2(dataset_python)
10 loops, best of 3: 47.7 ms per loop
There's no street called "Broadway Ave" in NYC, so I think you might be full of shit.
Well "safe". Once your written down password is compromised (e.g. with a photo of a page), the entropy for cracking the password is tremendously minimized. In combination with dumped hashes of the site in question even more.

Maybe a password card is a better solution? [1]

[1]: https://www.passwordcard.org/en
this is by far the dumbest article i've ever seen on HN, reddit, anywhere..
TIO: Try it online
Three Things I Learned from Teaching Happiness – Greater Good Magazine
How tragic.
I memorized 1024 digits of pi in high school. I can deal with a strong password.

Keep in mind that most password managers also encrypt your password database with your master password, so my solution isn't any worse than those.

Memorizing a even a 16-character (upper/lower + symbols) random string as your master password would be 16*6 = 96 bits of entropy which is more than enough.

Dealing with memorizing ONE good 16-character random string is within the abilities of most people. Dealing with multiple ones is what is hard.
Yes, but people could still be ordered to give up their encryption keys.

https://www.techdirt.com/articles/20140116/09195525902/uk-ma...
Will you support other cloud platforms?
It's hardly "out there" though. A hacker would still need to hack dropbox before they could access your keepass db and begin brute forcing. What makes your own private server more secure than dropbox's network?
Okay, but I really wanted to show a broader issue which targeted us (Iranian students who have trouble getting visa from USA, when some terrorist can do).

And remember Mirzakhani was in a position exactly like myself in one day. She was from iran, finished her bachelor and was applying to USA universities.

I bet u she had trouble getting visas because of what we discussed already.

Anyway in respect to HN and to show my good intention i am not going to comment in this topic any further, thank u and RIP Mirzakhani.
Almost no 18 year olds are self disciplined enough to do that without structure. That's the point of college.

If you spend 5 years only playing your favorite parts of your favorite songs on a guitar, you're not going to be a good musician.

Just like if you spend five years doing the fun parts of programming or engineering or history, you won't be a good programmer, engineer, or historian.

College (or an apprenticeship, or trade school) isn't required to learn the hard/boring parts, but very few people are capable of doing so on their own at that age.
My best solution is to not discuss password management on public forums...
That's the point of using PBKDF-HMAC-SHA256. As long as your master password is strong it's not going to be brute forceable for the forseeable future.
'go test -race' Under the Hood [video]
> I've spotted tens of times more ticks on me than I've actually been bitten

How many total is that?

Never mind. You convinced me to never go outside, even if you were advocating the opposite.
UI Automation vs API Automation
Not really. That's the word for a female steward. It lets the reader know they were females. Yeah yeah patriarchy, why are gendered words even a thing in 2017, let me save you the trouble.
But who would pay for DHS? The means have become the ends.
> Cherry-picking and un-charitably attacking someones statements is a human flaw

I don't think that's exactly the situation Antirez describes. The way I see it, he's saying that Twitter makes it too easy for people to inadvertently pick isolated tweets out of context, mistakenly thinking they are seeing the whole context (because tracking down the full discussion on Twitter is very cumbersome and time-consuming), and then reply to something different than what was actually argued in the broader context.

That's different than cherry-picking on purpose in order to "win" an argument, which is indeed a human flaw and not a technological one.
> encryption is a check on government overreach

It's necessary, but certainly not sufficient. There are tons of ways that the 5-eyes nations' mass surveillance agencies can get even to those who do use end-to-end encryption.
Or to go along further,

Do you know what they call the guy who got last place at the 100m dash in the olympics? Last place / slowest / loser

Despite being the 8th fastest person on the planet.
Learn JS, React, Angular, Vue – Weekly Newsletter
I don't get it, so why can't they just put a $2 bolt lock on the release mechanism (the big handle thing) while in-flight and call it a day? What am I missing here?
You're misinterpreting my post. At my current job we are flexible -- people come in and leave at different times, eat lunch at different times, etc. I'm not expecting everyone to be at their desks from 10-6 all day every day. That's why I said "core business hours". There's a difference between someone who is unavailable because they're off eating lunch and someone who is incommunicado for many hours at a time and impedes progress. I've seen remote workers drastically slow down progress by simply being unavailable while all of the non-remote workers are present and blocked on them for something. In theory an onsite worker could do this too, but in practice they don't simply disappear for hours at a time at the office.
Seafile has an iOS client.
Flight attendants have pushed pretty hard to get rid of the term over a long time period, and have been pretty successful with it. For reasons beyond gender.
The "backlash" was from former Democrats who were brainwashed for decades to hate the blacks who then decided to support the Republican party as a revenge because they felt betrayed by the Democratic Party when they switched their position on black people... not very different from some former Bernie supporters voting Trump.

If Republicans as a whole are now "afraid of blacks" because a small southern group joined it as a revenge then would you also say that now they are also afraid of capitalism because some Bernie supporters joined it?
To clarify: I'm not advocating for a stateless society. I'm advocating for the right to personal autonomy and privacy. That means ending taxes on private transactions, not all taxes.
"1. They quickly and clearly told the employee of the problem."

As a general rule, if you wish to keep the employee, you should start with an informal warning that their behavior is unsatisfactory rather than a formal procedure.
I'm a remote worker and I'm sure it's occasionally a pain that I'm at the gym, or sleeping, or otherwise not responding on Slack or whatever.

However, like many remote workers I work in a distributed team across several time zones. So it's not just "he goes to the gym in the afternoon," it's more like one person leaves the office in one time zone in order to beat the traffic jams, while another person in another time zone has to pick his daughter up from school, another in a third time zone gets up really early but can't do night calls because of family life, and so on. Slightly wonky schedules actually give us more coverage in case of crises, and the only way we could ever line everybody up for the same work hours would be to fire half the team.

We manage it all pretty well by scheduling our meetings in advance, not being afraid to pick up the phone, taking ownership of our work, and having senior people in different zones who can help fix urgent problems.

(However I totally agree with the "need for trust" comment above. I worked locally before going remote in this job, and also in two of the three other remote jobs I had in the past.)
I feel like many of the commenters here are missing the point of the post.

> My takeaway from pondering this today is pretty straightforward:

> Talk to your people. Don’t wait. Do it now, and never stop. If they are meeting expectations, thank them regularly. If they aren’t meeting your needs or the needs of others in the company, tell them now. Don’t wait until you find yourself identifying “patterns”.

and then a little later:

> If you can identify an incompatibility like this early enough, it doesn’t even have to be rancorous. Incompatibility happens. Nobody needs to feel like a failure over it.

When the author is relating his own experience, he's not saying there was no problem to be addressed. What he's saying is he thinks that situation (and many others like it in our industry) can be handled better, and he wraps up the post by taking about what some of those ways might be.
Because the door needs to be opened in an emergency, and being locked would prevent that.
That's a good theory!
How is the async web server story looking? I keep thinking I'd like to port a small tornado app to Rust, but I'd rather it was fairly easy for some to verify it was behavioural similar.

(Literally, I don't care about the performance, I just want that style of API.)
And I thought my memorizing 100 digits was an achievement
Which technique did you use? I made it to around 150 using the memory palace technique from the excellent book Moonwalking with Einstein.
Rax: A radix tree implementation in ANSI C for Redis
I don't question your memory, that is not my point. How long do you think it takes to crack a password that consists of digits of Pi or anything derived from it? And it's not about Pi either, it's just that you can't beat a computer in that regard.

For me, playing around with hashcat, was an eye opening experience and I truly believe in the Schneier quote from above.
I'd suggest lecture 14 of the fast.ai mooc on some advice on feature engineering for timeseries data to make it possible to model with something like regression (or a non-recurrent neural net - can work surprisingly well)
The scope was the general labour market where established employers compete over a limited pool of
eligible candidates.

If the other guy does not bring that much to the equation then it might be he was not that valuable after all.

Both guys lose if they need to duke out their differences in court, IMO.
Flying Money to Blockchain: How Remittance Industry Has Reached Turning Point
They are definitely different options - and I think that is a good thing. I figure that some folks are good without the structured college environment, and some folks are truly self-starters or simply interested in things that college will help them little with (wanting to own a restaurant, for example). I think a few would be good with either option.

I'm also a fan of affordable trade schools and different types of apprenticeships or work/school combinations. They sometimes like comparing apples to oranges, but I also think they give more of the population viable options for their life.

But you are correct, it does depend on the person and what, exactly, they want to do. I'd not just give the money without strings attached: After all, college funds depend on the person getting into college. Startup funds would depend on them learning the skills they need, have a seemingly viable business plan, and possibly a backup plan in case it goes awry.
The standard password manager is slightly better because the password database works like a 2nd factor.

Also, a character has at most 8 bits of entropy, not 64. If you use base 64 its only 6 bits of entropy. 16 x 6 = 96 bits is still more than enough though.

A downside if everyone used this scheme would be parallelized attacks on reversing the hash for the key. If you find a key that, with this scheme, creates a password for your service, you found the corresponding secret key. This then compromises all of that users passwords.
It sounds more like a case for contractual/IP law than for an employment non-compete. In other words, even in places where non-competes are illegal (like California), this issue can still be mitigated, so using them as an example to justify non-competes seems misguided.
This is what I do. Music lyrics with characters mixed in. I have the alternates memorized so it's fairly easy to remember. Ex: 5, S, and $ are all interchangeable.
Scientists are working on testing this claim in central Italy, where a destructive earthquake struck last year and lots of minor seismic activity is still present.

The article is pretty informative, I just like to report here the closing remark from the Principal Investigator: "It’s a huge claim, so we’d better have good proof for it".

https://www.nytimes.com/2017/06/17/world/europe/italy-earthq...
There is a pretty good chance that the term "flight attendant" has been preferred for longer than you are alive. https://en.wikipedia.org/wiki/Flight_attendant says "By the end of the 1970s, the term stewardess had generally been replaced by the gender-neutral alternative flight attendant."
Same, but using Keepassdroid + DropSync use it on, and sync it to, my Android phone.

Crashplan is my backup tool of choice and also backs up the Dropbox, just in case...
I have not looked at mix tasks. It depends on its characteristics. FAAS isn't exactly a one-off thing and falls under a "serverless" paradigm. (I am a bit skeptical of FAAS myself). Mix tasks might have characteristics that makes it suitable for FAAS, or it might not.
(Using an alt account for obvious reasons)

One thing I wish that I had been prepared for out of university is that there is just a lot less feedback on how good of a job you're doing. Nobody grades your work and there is a skill to getting specific feedback on your performance.

Asking "how am I doing?" at a weekly or fortnightly 1-on-1 isn't going to get you anything useful. You need to ask someone you're working with directly and frame a question in terms of situation-action-?impact?. So "When you submitted that PR and I pointed out two cases that I thought could use additional tests, was that useful?"
> It's not perfect, put it is pretty bloody good.

Just to round out my thoughts here, I mainly agree! I lived in London for two years and I was always pleased with the NHS overall.

My main point is that, based on my experience in the USA, advocates of moving to an NHS-style system tend to underplay the fact that there is genuinely a different set of costs, and it is not a magical solution.

I spend lots of time in both the USA and in Greece (which has a mostly-NHS-style system), and I have gotten health treatment in both places throughout my life. Both systems have strengths and weaknesses, and I can totally understand someone advocating for an NHS-style system as the best overall set of tradeoffs available. It's just not without some downsides, and I wanted to point out that waiting times can be a real problem.
Look up international college rankings. The US is vastly overrepresented in terms of quality of higher education.
Disney Paris is awful compared to most others I have been. Taste maybe, but still.
Yep, but it is not like there is infinite supply of (assumed earlier by me) US$ 200,000 packets.

There is just one, and if your kid burned it, there is no more for the college.
Summary of the pouet.net comments: Proof of concept DX12 engine by chaos. One effect, no post processing. Still pretty cool though.
Want Your Employees to Trust You? Show You Trust Them
What is the cause for your paranoia about keeping your keyfile in your Dropbox? I have used and advocated this model for years with no ill effects.

My Dropbox is secured by MFA, with the Dropbox password itself being a random password within the KeePass keyfile. I store the whole Keepass program for Windows inside the same Dropbox account, feel free to indicate that as a security gap. On mobile I use the KeePass2Android app.
When I was 20, I was a lead engineer on a project with an upcoming deadline. There was a disagreement on how to implement something. As the lead engineer on the project, it was my job to break these "ties" so to speak, especially in the wake of a deadline.
I thought about and made my decision. When the next meeting about this disagreement occurred, I informed them of my decision. I expressed my frustrations in the decision in solidarity with my team (there was no perfect solution), but said we don't have any more time to budget for this issue.

I was calm, but assertive. I also express myself whilst talking by using my hands. Apparently, the older engineer was upset and informed my manager about my "tone". My manager was in the meeting and disagreed that my tone was bad and said it was up to me if I wanted to apologize.

So I did. Even though I felt I was perfectly fine, I apologized. The reason why I did was for team cohesion. If it means that I can work well with that engineer again and not have them hold something over me, I'll suck up my pride and apologize for something that I feel I didn't do.
One problem I had when using a similar technique is how to change passwords. Some services require regular password changes, security breaches require it, etc.

So I needed some additional piece of information, namely how many times I've had to change passwords, so a new function argument.

Eventually I gave up and started using a password manager.
Frugal enough to shut off their computer when they're not using it (to "save power"), so the rebalancing won't have time to complete in the background?
"The problem isn't that one person makes $10,000 while another makes $40,000. Those people are both struggling. The problem is that one person makes $10,000 (or $40,000) while another makes $10,000,000."

No, the real problem is that the one making $10,000,000, (or ten billion), gets away with murder. Anything they do can be excused, and anything done to the one making ten thousand can be excused. Inequality as it pertains to those real social consequences of money is the problem, not who has how much of it.
> That's different than cherry-picking on purpose in order to "win" an argument, which is indeed a human flaw and not a technological one.

As much as I want to believe that, it has not been my experience. I've found that if there's a possible way to misinterpret a statement, somebody on the internet will misinterpret it. They don't do it on purpose to win an argument most of the time, either. It happens everywhere on the internet (HN, Reddit, twitter, even blog comment sections) because communication is difficult and internet increases the exposed surface area of a statement. The more people to read a thing, the more likely it is somebody will interpret something that wasn't intended.
I take it you didn't read the article. The whole point is to provide more options than the single track path that has dominated the post high school mindset, not to say they have to go one way or another.

Plenty of great entrepreneurs start their company with little to no experience. Having done both, I think you can learn a lot more starting a company than you can at college.
Distributed teams across multiple timezones is a bit of a different situation though; you're naturally going to be more asynchronous there, and the team structure will be different. All of my experience with remote coworkers has been on collocated teams with the occasional remote worker in the same timezone. I don't have any interest in being on a fully distributed team; I like being physically present with my coworkers and I tend to get depressed ("cabin fever") if I'm alone all day every day. I realize that that might work for others, but it doesn't work for me, so I'd never do it.
Ah, for those sorts of things, they probably wouldn't work SUPER well, though I can see them made to work. Spinning up the BEAM is much cheaper than spinning up a JVM, though it is very much server-ey by design.
It's generally held that government is a local monopoly on violence. Anarchy is in these terms an unstable local minimum, and the first two thugs who agree not to plunder each other's pockets have started the cycle of government again. Generally I think corporations and (other) criminal organizations rely fairly heavily on the existence of some state, even a nominal one. Criminal activity when you are the law is simply bad governance. Either way, you can't construct a society based on a logical contradiction.
Actually, it depends on the industry you are applying for. If you are OK with something like retail management - something that is generally a path for folks without college anyway - you can generally hire in above entry level. Same with some other industries and jobs - mostly because you are more likely to meet the experience requirements. Your pay might or might not be on par with someone with a degree, but at that point you might be able to remedy that.
> I would say engineers have little to say about decisions in a huge company like ATT.

The AT&T of the Bell Labs days was not like a modern telco that just takes bids for everything from Cisco et al. AT&T designed their own phones, phone switches, computers, microprocessors, programming languages, operating systems, etc.

> I must confess that when I read Shannon's seminal paper out of curiosity in the 2000', I was hugely disappointed.

That's always the way with seminal papers. The ideas are by now so integrated into modern society that we can't even imagine what it was like for that to be a revolutionary concept.
The entropy in that is actually quite low, especially if you have even just a slight bias towards popular poems. Given this info I think it'd be quite easy for a dedicated person to reverse a password hash of yours.
>"I cannot imagine any complex non-linearities involved in your sales process"

Knowing nothing about his sales process and features, I would assume there are many complex non-linearities (to be possibly leveraged for better predictions). I find this statement bizarre.
Frictonless is interesting but 1) doesn't handle serialization (which is essential for performance); 2) requires users to hand annotate schemas (we think schemas should be auto-generated whenever possible).
I switched from LastPass to KeePassXC a few months ago after reading about some LastPass security problems. I really like KeePassXC.
Sorry for being edgy, but please tell me where I can get jobs training for being a doctor, lawyer, etc. that isn't college. Regardless of what you think college is, college currently is primarily jobs training.
They always say they want limited government, but they also say they want government to control who you can marry, who you can have sex with, what drugs you can take, and what women can do with their own bodies. And they say these things completely oblivious to the hypocrisy involved.
Sounds like a good start to a sci-fi novel.
China also quickly reestablished relations with Norway when it needed a foothold in Europe against incumbent Trump.