skysight-inc/HackerNews huggingface dataset:
This could be misleading. It is analogous to first projecting movie clips onto 3 different slightly distorted mirrors, then map the output of each individual mirror (the dictionary for that individual mirror). Finally, project a new movie clip onto one of the slightly distorted mirrors, use the dictionary for that mirror to reconstruct something resembling the original input to the mirror.

Is a mirror image real? It can give the semblance of something real, but most people can distinguish between the real and a mirror image; often scientist cannot.
Yeah, it's a bullshit argument. "We won't do this, unless "appropirate procedures"" ... guess what, they define appropriate procedures.

So if interviewed by Congress, or newscasters, or anyone, they'll say "We follow appropriate procedures" all day long and never reveal exactly how those procedures work.
Even if you save up the money to not be desperate in these situations they still have a very high cost. Say you’re 30 and invest in a big index mutual fund. Having to use these funds means shaving 8x as many months off your retirement.
Yes, they also want that. I'm speaking mostly about Idaho, where the religious influence is very strong in the southern half (Mormonism) and the neo-nazi influences in the northern half (Ruby Ridge).

Most will say limited gov and then in the same breath talk about how Christianity should be enforced as the nation's official religion, and how 2A laws should be expanded upon, both requiring bigger gov.
If you have an opportunity to make money, it can be a great motivator to take risk and innovate. Without that increase in compensation, the risk/reward calculation changes, making it less likely to justify innovation.
Disadvantages:

- You have to keep track of n for every site.

- If the master password is compromised, you have to change each password manually.

- Not well-integrated with browsers.

- Far less convenience on a phone.
Non-competes are a great example of why "pro-business" isn't the same as "pro-capitalism" or "pro-economy". Making all your best qualified people unemployable is a great way to ruin your country.
May wanna look at Phased LSTMs: https://arxiv.org/abs/1610.09513
The problem they are trying to solve is not the problem that they say they are trying to solve.
It depends on what the work is like, too. In practice all of the most successful teams I've been on have been highly collaborative (i.e. reachable). The kind of team where everyone goes incommunicado for days on end working on independent deliverables tends to suffer from low velocity, poor team cohesion, and ultimately inferior quality. I'm collaborating with coworkers constantly throughout the day, including occasionally sitting in front of the same computer to work through something. Change latency from seconds to days and everything suffers.
I like your comment, and thank you for citing specific authorities. However, I don't see how open borders are compatible with the prosperity enjoyed by America and much of Europe. As an ethical matter I'm inclined to agree; but as a practical matter, it would appear to me that there are only two ways to create wealth: inequality within one nation, wherein a comparative few enjoy significant advantages over many, or inequality within nations, wherein a comparative few nations enjoy significant advantages over others ("wealth" is defined here as quality of life, like highly available healthcare and other resources, not just significant capital).

I don't feel educated enough on this matter to have a qualified opinion, so this is just me responding for the sake of discussion and in the interest of learning more. I'd like to hear counterpoints to what I just said. Intuitively I feel that any discussion of the ethics of open borders must (as a practical matter) include the socioeconomic ramifications (more generally, I think any discussion of ethics should include practical implications). To put it succinctly, it is not obvious to me that the quality of life enjoyed by e.g. Americans or Western Europeans can be evenly distributed.
> What makes you think this deserves more compensation?

They deserve more compensation because their work is worth more. It is that simple. Not everyone produces the same amount of value - in fact, how much value people produce at work usually diffes by a lot!

Someone who shovels dirt by hand moves less dirt in a year than one person with machines in a day. The idea that everyone produces equal value is not only ludicrous, it is deeply toxic and removes any incentive for individuals to excel and solve problems in a productive and creative way.
I've seen parents essentially drive kids into liberal arts by pressuring kids to try everything else.

Pointing a kid in the right direction is high art.
> The only downside is no access from my phone.

On Android, I use Password Store to sync my `pass` directory and use it from the phone. It a very high quality app, I had no issues after years of usage.

https://github.com/zeapo/Android-Password-Store
make it available for other countries as well in a machine 'Language' learning mode. The seeing crowd could train it the local terms, pointing at the fridge and dictating Kühlschrank.
This would be a cool project to help others. I would enjoy doing that, maybe gamify it.
If you need a personal day then use one of your allocated vacation days. It's still unprofessional to be springing these on people at a moment's notice rather than communicating them ahead of time, though.

If you aren't using a vacation day then you should absolutely be reachable throughout the entire work day, and disappearing for a day at a time is unacceptable.
The Texas Penal Code ;)
A more equal union: of husbands and wives
Enpass, all the way. Free (Gratis) on Mac, Windows & Linux, US$10 for iPhone or Android.

100% local storage, or sync the encrypted file via Dropbox.
I use https://pwdhash.com algorithmic password generator. It is the sweet spot of more security without too much added frustration.

Usually I use the Chrome extension, but when that fails I built a more user friendly web interface: https://ph.leftium.com

To avoid having to change all my passwords at once when one password must be changed, I suffix my master password with a sequential suffix. In the worst case, the last few suffixes don't work and I use the service's password reset feature to update the password to the latest suffix.
Plasma Wayland and Qt 5.9 and beyond
Oh, I see. The cultural difference between Julius the labrador, living here, never having hurt a living being in his ten years of life, and the yapping terrier living next door, killing cats and rodents on an industrial scale.
If it were me I'd add a bit of salt (some random string) to those...
I have seen national borders being called "world-wide caste system".

I'm not sure if it's exactly right, but I am sure that our notions of what nationality means will be challenged in the coming decades.
If you're not learning anything, that's your own decision. Paying for education is paying for access. If you're paying for access to people that you choose not to interact with, then that's it's own brand of stupid.
> he thinks being against using goto in C/C++ is dogmatic, and that there is no need to develop a testing framework until the software is developed

The important thing missing here - context. There are perfectly valid situations where your friend could be right.

> he felt like one of those types who are more interested in their career bottomline than in developing good principles and practices of the work they do (something that disappointed me coming from him based on the person I knew for many years).

Maybe he wants to become a manager with good developped principles?

Of course you know your friend much better than we do. It's hard for outsiders to judge the situation.
Yeah, I don't much care about "stalking". I care about _stalking_ quite a lot.
If I were the parent I'd provide my kid with both options simultaneously: Money for college and additionally money to take two years off after college to do a startup.
I currently have 1password and 1password 6 installed. At some point I followed an "upgrade" suggestion, found out I don't get the upgrade for free and I had put new passwords into what is now an expired version.

Nothing about that made me happy.
A Killer Amiga Emulator with the Raspberry Pi 3 for Under $100
Can you build your rerouting function as part of an in-app purchase and then use the code to activate it?
That doesn't really explain the difference in behaviour in the experiment, though, because the money was explained as being dealt randomly. In the game, we know exactly how both parties came to wealth - the point is that people still value that wealth despite it being random.
These rules: https://news.ycombinator.com/newsguidelines.html. Especially the rules regarding civility, politics, and intellectual curiosity, which are the most important ones. Nationalistic flamewar—which you started—is the essence of all that we don't want here, regardless of how well-intentioned you are.

Life-and-death questions of national identity are far stronger and more important than the things that gratify intellectual curiosity. For that reason, we all (and you in particular) need to bracket those stronger topics and stronger emotions when commenting here. To do anything else is to give up on having a site dedicated to intellectual curiosity at all, and given that that's the raison d'etre of Hacker News, we can't allow that.

It's time for you to stop commenting now and really take this in.
Farbrausch has made some of the coolest demos I've ever seen.
It's interesting that we have such reverence for statements of ethics like this when they are essentially opinions and they can vary depending upon the values of the people who hold them. There should be no pretense to objectivity in ethics.
Probably not all BCM43xx devices are affected, though. This product line spans over 10 years and all 802.11 revisions since a/b with various firmwares and internal CPUs, from custom cores to ARM.

The issue likely exists in a limited number of chips, possibly only FullMAC ones, like similar bug found earlier by Google:

https://googleprojectzero.blogspot.com/2017/04/over-air-expl...

edit:

Actually NIST lists the vulnerable NICs: BCM4354, BCM4358, BCM4359.
I've got a Macbook Pro from 2011 with BCM4331. So there must be a metric f ton of hardware affected.

The firmware is embedded in the closed source drivers, it's not available separately. It's uncertain how far back Broadcom will update their driver packages.

On Linux if you want to use the open source driver, either the distro or user must extract the firmware from the closed source driver using b43-fwcutter. I don't know what the license restrictions are that apply to distros that appear to include it in the base installs, and therefore probably get updated. But distros like Fedora don't include it due to license restrictions. Therefore it won't get updated automatically.

I think the kernel driver should warn, if not refuse to use without a force option, on firmware versions below a certain value.
> I'm a bit unhappy with 1Password. I don't want a subscription service, I want something that keeps an encrypted file that I can put in dropbox.

> What is everyone else using these days?

I use a self made password matrix in paper.
> Free migration is the most effective way to reduce world poverty.

Temporarily, yes, and it often comes with the burden of providing for the migrant for the rest of their life.

the most effective way to end poverty long-term is to create conditions in which populations of impoverished nations fix their own problems on their own soil "over there".
I agree with you but this tar is so sticky that any trace of it, even one brought up to negate it, will only attract more of the same and start the cycle all over again. Therefore I need to detach this subthread from https://news.ycombinator.com/item?id=14776588 and mark it off-topic (as of course I mark my own comments that go into this). You're welcome to post another comment upthread that's on topic and tar-free.
Design Lesson from a Post Apocalyptic Fairground and Beer Garden
Although export restrictions on encryption were eased after Bernstein v United States and the political fight over the 'international edition" of Netscape/etc, I believe encryption for military purposes is still on the Munitions List.

Therefor, the 2nd Amendment should apply.
I use this feature on my laptop. Without it I would accidentally touch the touchpad and insert characters where there aren't supposed to be.
I use passpack.com.
You say this as though liberal arts is bad, perhaps that's what some people want to do. Don't see anything wrong with it.
This largely depends on the company. Once you have been PIPed often transfer options are limited. Personally by the time I get to the point where I am going to PIP someone I have already invested significant time and energy trying to help them through 1 on 1s, getting input from my boss, and trying to work with all tools at my disposal. If I need to get HR involved I have already made up my mind that they will no longer work for me. Once HR is involved in many ways what happens next is out of a managers hands. I view the creation of the PIP as the train leaving the station. The tracks lead to a specific outcome.

All that said I suppose if things really did change I would approach what happened next with an open mind.

In at least one company I worked at having PIP in your file meant that it would be impossible to switch teams ever again. What manager wants the potential liability.

Also if there are is stack ranking with a curve people are going to have to be PIPed just to make the numbers work (not justifying it, just saying it happens). Having watched people be hired on to teams for the sole purpose of being let go it is really important to know what is actually going on.
I use https://pwdhash.com with _n_ suffixed to the master password.

- If last few recent n's don't work, I just reset the password to the most recent n.

- There are browser extensions

- There are apps, and my web UI (https://ph.leftium.com) works OK (and a bookmarklet adds more convenience)
…Or move to California — Job Hopping, A California Right and Non Compete Agreements: http://www.rhdtlaw.com/job-hopping-california-right/
Zoom, bang! Straight to the endgame!
How did London become an education superpower?
That's a very good point; even if it's possible to detect steganography of encrypted messages it's probably expensive to do so, especially in the torrent of digital traffic online.

I guess it will only impact law abiding citizens then.
> offering an exploratory period of life that is college (socially and intellectually)

That is exactly what college is, and is supposed to be.

Many people make the mistake of thinking that college is a jobs training program, or a career readiness program - it's not. It was never intended to be. College is supposed to give someone a broader perspective, a more complex worldview, exposure to a vast array of topics and ideas, and to develop habits that are generally beneficial to any life or intellectual pursuit. That's it.

Entrepreneurship is great, and it will teach you many different things and some hard lessons as well, but it's not going to even remotely offer the same sort of experience or exposure. It's not college, you're not reading classical literature as part of a startup grind.

Also, society needs to accept that for some people, neither college, nor "starting something", is well suited or an appropriate expectation. Some people just aren't cut out for either, and there is nothing wrong with that. Some people would be better off learning a trade, or going through an apprenticeship, or being self taught, or any number of other means of learning and developing skills.
The problem with this solution is that it is only as strong as your master password. Because you suggest to 'never write or store [it] anywhere' it can't be strong enough. To say it in Bruce Schneier's words: "Pretty much anything that can be remembered can be cracked."[1]

[1] https://boingboing.net/2014/02/25/choosing-a-secure-password...
What saddens is that I thought (after talking to many cancer institutes) that breast cancer was one potentially favorable case. Alas cancer is random.
ARKit and Vision: An intriguing combination
Note that the algorithm used by pwdhash is very weak. It uses just one round of 1 round of HMAC-MD5. Not even a slow hash function.

See https://github.com/dannysu/hash0 for comparison of other similar sites that all have the same flaw and the reason I coded hash0 (no longer maintained though).
It's also not clear to me how pay-for-performance and promote-for-performance is supposed to work without some kind of systematized performance review system. And I will say that, at least in my personal experience, pay-and-promote-for-performance is hugely important in getting the most out of your software engineers.
https://www.youtube.com/watch?v=ll5nY8qMbO8
I use Universal Password Manager (UPM). It runs everywhere, syncs to dropbox (or wherever), pretty fast start time even though it's java. Github link: https://github.com/adrian/upm-swing
I use keeweb as a desktop app, and I save the file locally, backing up to gdrive and cold storage hard drive weekly.

My laptop is my primary device so I'm not too concerned with logging into accounts on mobile, but if I really needed to get my passwords without my laptop, I could get use the keeweb web app with my gdrive backup.

https://keeweb.info/
Road tax proposal based on distance, weight and emissions wins £250k Wolfson prize
This isn't a really great solution, in my opinion. Anyone with access to your google account, or anyone with physical access to any of your synced devices could lift your passwords easily.
> There are perfectly valid situations where your friend could be right.

I didn't say he thinks banning goto is dogmatic (and I never heard him say that his team completely disallows any use of it). You could be against goto and still be okay with its occasional use.

He seemed to be of the opinion that there is no reason to be against goto in the first place, because he never felt goto's use hurting his productivity. (and his use of goto, the way he explained it, definitely was more complicated than the rare cases where I think you could let it slide, e.g., the way it's used in the linux kernel code to get to the bottom of a function in case of failure, etc).

And why should we be against goto in the first place? Unfortunately, you cannot answer this question in one sentence, or a paragraph. "Go To Statement Considered Harmful" is not a theorem that has a proof. You have to read about it, and ideally, you have to experience what spaghetti code feels like, and what a goto-free codebase feels like. If you're not willing to take such a dive, you would never find out the answer. And if you have opinions in favor of goto without taking such a dive, don't be surprised if I lower my opinion about you as a scientist/engineer.

> Maybe he wants to become a manager with good developped principles?

And call me a negative nancy but your chances of developing good practices have diminished if your bad coding practices are reinforced through internal awards and the like. And I have no doubt his contributions may have felt significant to the higher ups enough to decide this deserves an award. But only in the short term. If this code gives problems in the next quarter or something, do they go back and review if the hasty implementation in the last quarter and liberal use of goto had anything to do with it? Likely not if your company doesn't even have a coding-conventions document.
Maybe you have something that calculates what is strong enough? Is there some online calculator?
Everyone "needs improvement"

Yes, even if you're the top performer or you think you're the smartest person on your team.
Clove is an acaricide, so dilute some clove oil with jojoba or some other carrier oil and use that. I used clove and avocado oil to get rid of scabies (which are tiny arachnids). I also supplemented with coconut oil and diatomaceous earth.
>I despair of the intelligence of human beings. I had to change what I wrote several times, because it was too filled with expletives.

That's because you don't have an actual argument. Only strongly worded statements devoid of any data or reasoning from first principles while you call other people stupid.
Lots of places offer flexible business hours, even for people coming in the office. Not everyone always takes lunch at the same time either. Even people in the office are not 100% available all the time. Your attitude towards remote workers seems unnecessarily hostile.
You don't have to do I worldwide, which is the problem for Uber. As a passenger, I only need a ride in one place; as a driver, I can only drive in one place. It doesn't cost a lot (for a company with deep pockets) to build the peer to peer stuff, but also lease a hundred cars and temp hire a few hundred people to seed the driver side of the marketplace in a smallish city. If you're Google and can easily drive the passenger side with Google maps integration, great. If you're someone else, get into the ride comparison apps, and put up some local ads. "Tired of Uber? Try Lesser!"

Take a smaller margin (or subsidize more, if the margin is already negative), build the driver side to be aware of and compatible with the reality that drivers are going to be driving for multiple services at once (with the exception of your seed drivers, maybe)
The repeated use of the word "stewardess" in the article is somewhat interesting.
So it can only really happen at low altitudes, and at low altitudes, planes are designed so that an open door is not catastrophic.

I don't know about you but I actually find this story reassuring, despite the sensationalism.

tldr: if someone is about to open the cabin door mid flight, and it's actually going to open, buckle up your seat belt and you will be fine.
That seems reasonable, but it would be potentially costly and so it's unlikely to happen.
The project's security sucked across the board. They didn't care or know how to do it. One hacker here even appeared to hack them in mid-discussion and post database credentials that showed they were using defaults. They then implemented a mitigation after bad press and soul searching. The thing I'm doing isn't smearing the project: it's letting people know not to trust its security without 3rd party verification (esp pen tests). That's because (a) it's a sane default for any project and (b) this one failed hard on the basics at least once.

So, I advise caution until I see a 3rd party evaluation showing their security is good now. You apparently followed them carefully. Did any security professionals look at their site/db/whatever after the fixes and give independent confirmation? That's all I'd need to stop reminding people of this.
> - You have to keep track of n for every site.

I consider this far better than having to keep a password manager's database. n = 0 for the vast majority of sites without sensitive personal data. For the small handful that need to change, I usually sync them all to the same value of n about once or twice a year.

> - Not well-integrated with browsers.

I use Chrome's password-saving feature for websites that don't store sensitive personal data. For websites that I consider sensitive, I actually like that it isn't integrated with the browser.

> - Far less convenience on a phone.

This is true. If my laptop can act as a bluetooth keyboard to my phone it might make life easier.
I'd rather live in a stateless society too however it's all I've ever known. That's not the case for private communication and to be fair banned private communication makes changing the status quo practically impossible. It sits on a layer above everything else.
I guess you also need a device that is already supported by LineageOS, right? I have a damaged Huawei Ascend P7 Mini that I would love to try postmarketOS on, but having to port LineageOS first makes it seem like more of a long-term effort than a weekend hack.