skysight-inc/HackerNews huggingface dataset:
Yeah, I got that problem because I knew who Piet Mondrian was, so I took an educated guess.
That's an interesting idea. I wonder what Apple would think. On one hand, they still get their cut. On the other hand, they like having full control over the experience. On the gripping hand, how could they even stop it?
> That is a terrible idea because agencies like the NSA or GCHQ with unfathomable resources and techniques will crack them and never tell anyone.

Chances are they already have 'em, from a compromised employee, a zero-day exploit, or a SQL injection hole. Far more likely than them having cracked bcrypt.
Nepotism is the opposite of hustle.
The flip side of market rate is what employers can afford to pay while staying solvent. We are in the midst of a huge technology disruption affecting all aspects of retail and manufacturing.

What happens to the mom and pop coffee shop or the grocery store that charges more than Amazon Fresh?

Enployment has a bid and offer, both sides are reluctant to cross without desperation.
No, it's all about feel good, especially about YOU feeling good that you did something. Kind of like people signing Internet petition or wear awareness bracelets.

The problem with it is that you did ABSOLUTELY NOTHING, except making yourself feel better.

Want to help? Contribute to something that actually matters.
No, not always. There were matriarchal societies in ancient times where women had multiple partners. You're looking at thing through the lens of western history.

Besides, what does it matter? We're talking about the future here, not the past. Contraceptive technology isn't going away.
The foundation of modern ecommerce rests on the belief that your credit card information won't be stolen and used to cause great harm. Similar belief systems exist for online dating, social media, etc.
As far as getting better as an engineer in some domain-- how does a program like this compare to hacking on and contributing to a FLOSS project in that same domain for a similar total number of hours?
Who funds/pays for research like this? I get it, history is important, but maybe we reached a level where there has been enough books, articles, and texts written on the Soviet / Nazi area?
And thanks to technology a lot of us are working on this level of surveillance can be done cheaply on a large scale.
At first I thought this was going to be some kind of sketchy "keygen" thing, but I was glad to see they've just deciphered the way to make your own iTunes-scannable promo code printouts! Very cool. :)
One reason: you'd be surprised how many companies allow entering the hash as an alternative password to login to customers' accounts in production. Lazy method for customer support teams who don't have support tools to access customer information. Also frequently done to allow developers to debug problems on a customer's account when a bug cannot be reproduced elsewhere.

If such a company's database of hashed passwords is leaked, then an attacker doesn't even have to crack the hashes - the hash itself is a valid version of the password. Yet I've seen this behavior at multiple companies; only one of them pushed back against my request to remove that "feature", and I didn't stay with them much longer after that.
That's what I thought when I read the title.

There's probably some reason it wouldn't work. Dictionary attacks are an obvious possibility; if your password is "password" the only thing you're depending on is nobody being able to get at the hashes. It might also expose password reuse, though nonces/salts might solve that. Hrm.

This smells a bit like public crypto - public database of public keys (hashes), on login you're challenged to produce proof that you have the private key (the password), and the transformation provides you a means to do that without exposing the private key itself.
Agreed. A bit ranty - but still a good analysis of what constitutes bad design when "disrupting".
The author of Rocket explicitly wants to use Rocket to experiment with new features. A lot of the stuff could be done on stable (but in a more annoying way), but it's easier with experimental features. (I discussed moving it to stable with the author)
And yet buy-and-hold is a thing in investment world.
It's only 1 PM in California. This will be funded before sundown.
If you're writing an article, is it really that hard to do a little research? Most of this piece is just "I didn't even bother to look up a teardown photo, but here's how I assume they must have designed it".
Has anyone tried one of the newer revisions of the Protect and had any experiences, positive or negative, with it? I was initially excited when I heard about the product announcement. It seemed like everything I wanted in a smoke detector: remote monitoring, ability to silence, starting with voice before blaring and getting my adrenaline up, and, well, a smoke detector. But Amazon reviews and the infamous video later, I backed quickly away. I've been awoken by a false-positive smoke detector before and the experience is panic inducing on top of outright annoying.
Which scenario is more likely:

(1) Thrive capital becomes the top firm for supporting startups that want to disrupt govn-related industries. It will become common knowledge that the Kushner-Kushner direct channel will be shamelessly exploited by Thrive and their portfolio.

(2) Thrive capital becomes associated with incompetence and dumb money, the type of ignorant bravado that begets wars, environmental disasters, haphazard vetting, creation of opacity instead of transparency, and corruption. Sensible startups will avoid this money because of the taint it will leave on them in 3-4 years when they are seeking public markets.
Sure, in an ideal world: post the hashes, the salts, the hash algorithm, everything. If it's done "right" (e.g., the hash function has enough complexity), then brute force cracking, rainbow tables, etc. would take so long that it wouldn't be feasible to crack them with any volume.

Of course, you could still crack some (problem), so keeping multiple secrets hidden through obscurity (the hashes, the salts, etc.) is another layer of security.

This doesn't guarantee security, but it's certainly more secure. But it is additive: there's no reason to just use MD5 (or plaintext) because "my hashes are secret".
For me it sounds awesome, what do you prefer: working on one real problem in an open source project or working on a fictional white board problem?

Think it lilke this: if you do a whiteboard interview, you have to solve the a problem each time you go to a new interview (loosing time in a problem nobody cares). But if you solve a problem in an open source project you can show it to every company you want to apply (and a lot of people will benefit from your contribution).

I would love this model to be more wildly used.
That doesn't describe law school at all. In fact, what you claim would violate ABA curriculum requirements.

The bar exam tests what you learn in law school. However, that is only the bare minimum for what you actually need to know to practice law.
Leaving aside the fact that changing my password doesn't mean I have a new identity, having the hash $2y$10$/Aglzm2zpHO7m1dIv5vSp.GHPUd1D8uODn/jtBv3gpe8yS5e/D9PW doesn't tell you my password is "tinkerbell".
and none of what you posted has anything to do with what we are talking about when it comes to EME or DRM

HBO does not need either to protect me from selling Copies of their content on iTunes.

EME and DRM is about preventing users from utilizing their rights under copyright law to format shift, time shift or consume content they paid for on the devices they desire, instead Hollywood wants to be able to charge the consumer no only for access to the content, but seperatly for each device, each view, each access, and be able to control when and where they view said content preventing users from view their content if they happen to travel internationally, or buy a device not blessed by Hollywood

none of which is allowed under Copyright law directly, but because of the provisions in DMCA preventing breaking of DRM they have illegitimately gained these rights and are using it to violate consumers fair use rights wholesale
Employees of LeEco sues company over labor arbitrage
My point is, this is not a technical issue. S3 is a fundamental design flaw and/or not an appropriate location for sensitive data and/or a PsyOp. They are teaching people to put sensitive data that is one API mistake away from mass exposure.
The problem is that the device is the result of a flawed process. If the process isn't fixed to be more conservative, it will continue to produce flawed devices.
That sounds like something that I am looking for. I'm interested in a "CS fundamentals" bootcamp. I have years of web development experience and while I could take a React bootcamp that would make me more marketable for that particular area, I'd like to increase my scope beyond web dev or mobile dev. Work on massive systems, and places where they need smart ways to move mountains of data.

In college I graduated in a digital media like program, and took a "super minor" in Computer Science- one Data Structures and Discrete Math class, and two courses on OOP software design. I have familiarity with some structures, understand the general concept of Big O but I'd like to fill in some gaps.
$225k?? For 5 years experience? Not a chance.

You might get somewhere around $100k though which is still a very nice salary in most places. Up to $150k in major hubs.
I don't have any experience in Rust. From what I read, Rust is a low level / system programming language. Comparing to dynamic languages like Python, I understand that Rust is much faster. However, Python is fast enough for most web applications. So why should I use Rust in web development? Even if the library ecosystem were mature enough, could I expect my productivity could become nearly high as in Python?
I have a few of them. I like them, and haven't encountered any issues with them. I also had a first gen and didn't have any problems with that. That's not to discount that other people did have problems, or the fact that it's critically important for a safety device to be reliable. But I think that the problems are vastly overblown, and calling it a "fiasco" is hyperbole.
I think I'd call it cronyism or nepotism.

If his company isn't qualified or they are getting overpaid then I'd call it corruption.

It stinks either way.
Do you two not have any other friends? You don't even have to have sex with other people: add up all the time you spend taking care of kids without any help from extended family. Now imagine you join up with another couple just like you that you're great friends with, and you move in together into a bigger house, each couple with their own master bedroom. Now you have 4 adults taking care of all the kids, as well as doing household chores. Is it not obvious how this is useful?

As for extended family, what if they suck? A lot of people don't get along with their extended family. Why be stuck with your blood relatives when you can choose the people you live with instead?
> Rocket says it requires a nightly version of rust[0] - why is that necessary

I often joke that Rocket deliberately uses every single unstable feature solely to stymie the Rust developers' attempt to prioritize which features to stabilize. :P I'm kidding of course (hi, sbenitez!), but it's true that I've never seen any Rust project so taken with nightly features as Rocket is.
Isn't that more or less what blockchain-based encrypted storage is? I feel like I saw an HN post on something like that within the last couple months.
Philanthropic contribution to wikipedia through performance art? The selected examples section for nepotism was looking pretty thin and they are DOING something about that! (https://en.wikipedia.org/wiki/Nepotism)
It's hard to imagine worse, except maybe putting the passwords in the clear...

Single unsalted broken MD5 is a far cry from scrypt... and even scrypt is probably a bad idea with all this crypto currency hashing hardware out there, unless you have a seriously strong password.

Just don't publish hashes.
That's why you always want to generate a different salt for each password, which fully prevents rainbow table attacks.
A hustle is lying about your abilities to trick weaker opponents into taking bad bets. Nepotism is getting a job because you are related to somone in an organization. So, I wouldn't call them opposites of each other...
The package metadata is stored in JSON so that should be pretty easy to access in either Ruby or Go. Tabular data is stored in Parquet by default. Do you know of any good libraries for reading and writing Parquet in Ruby and Go? Do either of those languages have a DataFrame-like class/struct?
Someone on Twitter suggested he use x.com as his Alphabet type of holding company, and he agreed that might be the best idea for it.
It's also nice enough to mention the hashing algorithm used - MD5, just so you don't have waste time guessing.
Except ... they are the ones lending you the money, so they would be the ones paying that high price now for the comparatively low future interest payments from you?
This is horrific. The description of the assault made me so uncomfortable I had trouble finishing reading the article.
The U.S. economy is about 65% driven by domestic consumer spending.

(Source? But reasonable.) The effect is that GDP is limited by domestic consumer income, which is driven by total wages paid. Without higher wages, the U.S. economy cannot grow. More productive capacity does not help.
THIS. If richer people can automate their lifestyles, the companies selling automation technologies would definitely sell these automation technologies cheaply to the masses (specially given that because of automation, mass producing automation technologies would also be cheap) and everyone would be able to automate everything that can be automated.

I think this would eventually lead to less inequality, not more.
Something like those two rollers on the top of old soviet washing machine: http://www.automaticwasher.info/TD/AWJPEG/VINTAGE/2013/mecha...
I have tried to google for the English name of that mechanism, without much luck. I guess it was not so common in the West.
Ask HN: Why is Hacker News so incredibly boring?
I couldn't find a single link today worth posting on voat.co.
+500 Small Business Opportunities for Young Entrepreneurs in the USA
> California has differences in its laws that make it naturally harder than the "collective norm."

To expand on this, as a non-lawyer who pays lawyers, I absolutely refuse to sign anything under California law which doesn't have to be. The courts take three to 4 times longer than Delaware's [1], there are a bunch of BS rules you have to spend ten pages having both parties mutually agree to exculpate from their proceedings and the lawyers, given all this and the difficulty of the exam, are a time and a half as expensive as New York's.

[1] "For fiscal year 2014, the average elapsed from filing to disposition [for the Delaware Supreme Court] was only 154.2 days, and the average elapsed time from submission to disposition was only 27.3 days" [a]. Meanwhile, in California, the median time to process an appeal, statewide, is 518 days, ranging from 423 in Ventura to 693 in Sacramento [b].

[a] http://courts.delaware.gov/AOC/docs/ACTL-DSBA-Full-Report.pd... pages 2 and 3

[b] http://www.courts.ca.gov/documents/2016-Court-Statistics-Rep... page 28
Here in the US Virgin Islands two of my friends are attempting to monetize drone videos/content creation along with underwater camera/go pro footage for charter boats, real estate, and other businesses. With the tourist industry, it's a viable business here.

They've got some cool content. They just did a shoot with a charter that came out really well, it's only on FB right now though.

Here's their youtube link if your interested.
https://www.youtube.com/watch?v=O2Cr2QDdHtA
How to safely enjoy the 2017 solar eclipse, a buyer’s guide for normal people
I think not having enough breadth in "one skull" is largely created by psychology and structure at companies and less by curriculum deficiencies. When I used to manage developers, most of them told me that they were pained by how little they were expected to interface with non-developers. These were very technical people, but they still wanted variety and connection/relevance to the product.

Even developers with good interpersonal skills or business sense are discouraged from participating in more producty discussion. They may be encouraged by way of somebody taking them aside early in their career and saying "Hey kid, you really _get it_. You're not like the rest of these nerds. How about you start calling shots on what to build and switch to a product role?" But they'll rarely be encouraged to stay as technical while simply getting listened to more by management. Management may argue that after 2 or 3 years of getting one's hands dirty, you understand programming as well as you need to, and that for the rest of your career, persuasion trumps skill acquisition. It's somewhat taboo to cultivate both skill sets at the same time. So, I think even if you got more "people people" to study CS/whatever, a reverence for specialization will silence a lot of voices.
Yeah it is mainly a Japanese product. I just do all of the copy in English first since that's my first language. Really the service can be used by anyone seeking a marriage partner. From my research I think Japan and east Asia in general is the bigger opportunity.
Well, I do believe LaTeX was available.

The cobble-together part, to be successful, would pull the text out reliably. And the format is readily documented, and Open/Libre office processes it as well. The code to do the extract might be ugly, but so long as it reliably produced the text in a CI/CD environment, that would be OK.
>> it doesn't matter if globalization is good or bad. It is our reality because individual companies will always be looking to gain an advantage...

these companies don't operate in a vacuum though and have to abide by rules and regulation that either impact them directly (like tariffs on their products when importing them into the country) or "indirectly" by tax breaks or other benefits provided to their competitors who favor domestic labor etc.
Gateway from Frederik Pohl. Also the others books that follows this series, I can't recommend this enough.

https://www.theguardian.com/books/2012/jan/19/back-to-the-hu...
> I think I'd call it cronyism or nepotism.

I'd call those specific forms of corruption.

It's possible to hire friends/family without it being cronyism/nepotism, if they're as qualified (or more) than other job applicants.
Ask HN: A simple workout tracker
Hi,

I recently got back to the gym and I was really happy to have my old training plans. Are any simple workout trackers that I could use to record these plans?

I'd like something that is:
- usable via the web and mobile
- has some basic tracking
- flexible in allowing me to input data the way I want it
- something better than excel :)
Ubuntu Server Development Summary – 14 Jul 2017
Great points from OP and above comments ..

> the software development process is exploratory by nature

>> customer/client does not have requirements, they have PROBLEMS. You will NOT DISCOVER all the requirements until you start SOLVING SOME of the problems and providing solutions.

> "The most valuable asset in the software industry is the synthesis of programming skill and deep context in the business problem domain, in one skull."

> But If Someone Else Knows the Business, Why Can't They Can’t They Just Give Me a Spec?

> The Unmapped Road

>Miles and miles of a software project are spent roving this vast territory that is not exactly computer related, nor exactly business related. Rather, it is a new and emergent problem space that explodes into existence while bridging the middle distance between the business problem and the technology.

> In reality, this vast field of micro-problems was there all along. But the only way to discover them was to encounter them one at a time, like boulders in the path of a road-laying crew

> What is Deep Context?

> Deep context is the state of having achieved a kind of mental fluency in some large percentage of this immense field of micro-problems that appears in the space between technology and a business domain.
UnHackMe 8.90 Registration Code with Crack Full Free Download
Isn't that more of public key crypto? So the secret isn't just a password, but also a key. I think it'd be a lot harder to crack.

Really it points to the idea that we should be moving in that direction for auth. Here's one project I've heard about: https://www.grc.com/sqrl/sqrl.htm
Not sure why you're getting down-voted, you're absoluteley right.
Password "hashes" are generally just cryptographic hashes run multiple times (known as key stretching). Cryptographic hashes are also designed to be slow. A key stretching algorithm will only be slow if the underlying cryptographic hashes are sufficiently slow.
Yes, as many have pointed out. It's ideal for coordinating a cluster doing machine learning, but ANN code itself should not be in Erlang.
But have you ever actually tried to implement anything complex in LabVIEW? I have (didn't have a choice due to environment limitations) and the resulting monstrosity was not only slow, but impossible to refactor or maintain.

I ended up rewriting key components in C# just to speed it up and make maintenance bearable.
I just bought a house that has two 2nd gen protects along with traditional style detectors, So far so good! No false positives so far. I reset both detectors and had them go through their self test when we moved in and they both report being fully operational.

Neither of the protects are near the kitchen or regular smoke producing spaces though. However They are near bathrooms. I hear steam can set these off pretty easily but I have not had that experience.

I might buy more protects to replace the other detectors but I want to wait a bit and see if nest comes out with any other products.
I highly recommend teachyourselfcs.com. It is by far the best self-taught cs resource online!
Yes, this was particularly evident at Adobe where they were scratching around adding features to justify the upgrade costs.
Reminds me of the listing "When Insults had Class":

http://allowe.com/laughs/book/When%20Insults%20Had%20Class.h...

Some of those are pretty targeted and cut rather close...
Say Hello to HTTP/2 for Node.js Core
I'd say it's true that Python is fast enough for most web servers. Rather than strictly considering performance, I'd guess that people seeking to do webdev in Rust are looking to leverage Rust's static analysis to improve resilience, trading off up-front productivity for long-term maintainability (which isn't to denigrate Python, which I love, but fearless refactoring really is something that compiled langs excel at). It's not the right tradeoff for everyone or every application, certainly. And maybe other people just really like Rust. :P
> This is already partially the case since no court would ever enforce this part of the contract so you can more or less safely ignore it.

At least in US law, that doesn't necessarily invalidate anything else in a contract. Also, the enforceability of any clause in a contract is subject to local laws, jurisprudence, and whether the plaintiff can make a reasonable argument for why precedence might no longer apply.

Additionally, everything is in question when there is a binding arbitration clause. The ToS company usually pays the arbitrator (far more than any one defendant) and the arbitrator may not be bound by local laws to decide if a clause is enforceable or not. Also, you may have no legal civil recourse if an arbitrator judges that a clause is enforceable and you suspect it isn't.

I don't know if I agree that "we should do away with ToS and ToU contracts", but I think they should be trimmed back from what they are now. And I certainly don't think it's "more or less safe to ignore" a clause unless you discuss with your attorney.

IANAL
AWS has it's own internal one too...

https://aws.amazon.com/elastictranscoder/