skysight-inc/HackerNews huggingface dataset:
I'd offer to go out to coffee or lunch with this person, open up and ask if you could be of help. Just opening the door might be helpful. If the person isn't doing well, they are most likely getting feedback from their manager, or feel it in some way. If you open up and show you care, you set yourself up as someone who matters to this person, and then you set yourself up for giving candid feedback. I recommend reading everything by Kim Scott on this. It has helped me https://www.radicalcandor.com/

If this person's poor work is impacting yours, tell your manager. If this person's poor work is impacting your team, address it with their manager. If they come to you for advice on their performance, then give them feedback.
Words I didn't know, in case it saves others a couple minutes...

Infarction - Tissue death due to inadequate blood supply

Edema - Abnormal build up up fluid within the body

Cortex - Wrinkly, outermost layer of the brain.

Thalamus - Part of the brain relating to sensory and motor signals.

DWI - Form of MRI. Measures Brownian motion of water molecules. Does not necessarily involve driving while intoxicated
Apparentle the Alphabay moron had his real hotmail address in the welcome e-mail they used to send and the same nick on another message board with more personal details as well. Massive OPSEC failure.
Why should I have to call them? This is a giant company that has plenty of programmers on staff. Their site hasn't changed much in years. What have all their programmers been working on?
Surely we can acknowledge that JS is not the cause, just as HTTP is not the real cause of all those ads you see.

The problem is shortsighted business and design decisions that have prioritized squeezing every last fraction of a penny out of the page, borrowing against the user's perception of the site. In the long run, that debt is going to come due and the user is going to stop coming back to your site from lack of cost/benefit.
For Windows, there is "1Password for Windows" and 1Password 4. I've never used the "for Windows" version, but I believe it's cloud only. 1Password 4 allows local vaults. However 1Password 4 is in maintenance mode and missing lots of nice features, like searching two vaults at once.
I think the problem is, to some degree, psychological. While the rational me knows there is very rarely any reason to prefer terseness over clarity of expression, the emotional me still gets a little thrill from one-liners and unconventional solutions (it can sometimes last right up until the point where I have to modify or debug code containing the damn things.)

I think it is a pathological corner-case in an otherwise generally useful interest in, and appreciation of, innovative and economical problem solving.
I'm in the startup world, and it definitely does still exist. You're probably just working at a bad company.
How do you feel about in-browser password managers--Chrome in particular?
I wouldn't say most Arizona homeowners had grass lawns, as far as Phoenix goes, there are districts such as arcadia that have very large lawns, but I would say that is limited to specific areas.

There are many plants that are not native that still grow very well ranging from Mediterranean species to some that are from the desert regions of Asia.

*edit (Thu Jul 20 13:35:05 EDT 2017) I about parts of Chandler and Gilbert still have water rights tied to the property.
Thanks, I just wished more people got to enjoy your casts. It will happen eventually :)
It's not quite ready for prime time yet, but my company is working on Passit[0], which is going to do open source cloud-based password management. Feel free to check it out; we hope to do a 1.0 release soon.

I've been working on the marketing a bit, and the sense I get in this space is that, like home security, password security is a series of trade-offs. One size doesn't fit all; different situations require different needs, and everyone tries to balance the safety they want to feel with convenience that they desire.

So, in our case, there are a couple of good options. You could operate on a hosted service and get the cloud-based benefits without needing to worry about infrastructure or updates, or you could self-host and trade a bit of hassle in exchange for trusting the host and verifying that the updates will do what they say they're going to do.

[0]: http://passit.io
That script is how the signature is attached to the data and is how the transaction is verified, though; it is no different at a conceptual level than "someone decided to attach the signature to the data using JSON and didn't realize that the order of the two fields mattered". Instead of using JSON, they are using a virtual machine, but that just provides even more opportunity for shenanigans ;P.
How an ex-FBI profiler helped put an innocent man behind bars
You're right. But even in terms of unrefined carbs like certain sugary fruits I couldn't have without it affecting my blood sugar levels.
I will wait till final confirmation. Maybe he forgot to mention to Trump it won't be running with clean coal technology and it might get axed.
And I'm saying that it sounds like you think "the kinds of organizations" are using drug money to enable worse crimes. I mean, it's no secret that the purpose of certain laws are to prevent anybody from making "that kind of money," but to me your comment read as if there was more to it.
I feel like I've seen a lot more "why are we wasting huge amounts of electricity calculating *-illions of SHA256 hashes for an imaginary currency used to buy drugs and guns" type comments lately. They're almost as annoying as the "Bitcoin will replace fiat and bring about the new libertarian-formalist era!" people.
By default the browser plugin is configured in such a way that 2FA is completely bypassed for a second when logging in. This is officially documented, so we can likely assume that it will never be fixed.

https://lastpass.com/support.php?cmd=showfaq&id=2775
I have thinking about this and I don't think it really has to do with location of your servers, it is the coding and architecture of the server environment along with server operators OPSEC.

All of the Dark Net drug website busts I have seen over the last few years are because of poor coding, poor architecture, poor security and even worse OPSEC. The people who run these sites are not professionals.
> ...It's legal to think about murder as long as you don't behave that way.

Sort of. https://www.law.cornell.edu/uscode/text/18/1117 ("conspiracy to commit murder") only requires one person to take action and everyone in the group that did the thinking with them is guilty of a crime. This is in the US, but I would be quite surprised if various other countries did not have similar statutes.

More generally, there are all sorts of laws out there that effectively criminalize thoughtcrime rather than behavior. Of course behavior might be needed for anyone to _discover_ the thoughtcrime.
Unfortunately I guess I need to become a business leader before being able to suggest suitable topics, if that is the intended audience.
Brightness contrast is important, but so is color contrast. As readers of early WiReD magazine (ca. 1998) well know, reading orange text on a yellow background is just as painful as light gray on medium gray.

The same goes for font size. Due to the range of device sizes and display dot densities, small fonts can easily become unreadable. Mobile versions of web sites helps only so much. I find at least half of Apple's system menus to be unreadably small on my iMac 5K monitor and my Macbook retina. This illegibility needs to be user-fixable in a systematic way, and ASAP. Just telling the user, "Use an Accessibility service", is NOT the right response.
Eric Phillips, the press secretary for New York City's mayor, says "This is news to City Hall.": https://twitter.com/EricFPhillips/status/888081761086955521
I think there's more algebra in frontend development. For example: CSS or SVG gradients, JavaScript animations and fades, the occasional clever data visualization. Heck, even the CSS box model?

Backend or frontend, if you use any quantitative metrics in your year-end performance evals, then some algebra is going to be helpful!

And you never know what will come up. I was once contracted by a regional government to write some code to correct hourly sensor readings (water levels in wells) based on a monthly manual human reading (ground truth). When it was done my boss remarked, "oh, this is just a linear transformation."
False

color: #000;
I work. Now, there are a couple of caveats here that are integral to what I've said. First is that I love programming. I actually go home at night -- well, I work from home, but you know what I mean -- and I write code for side projects or contribute to other open source projects. I also love my job and the people I work with. I would not do this for a company that shit all over me or didn't go the extra mile for employees. Having worked for startups my entire life, I've never actually been in a work environment where the work ran out -- there is always something to upgrade, refactor, or fix -- but I suppose if it did, I'd use that time to research things related to work I see in the future.
It does not-- we've been using graphql intensively with relationship-heavy graph data and join-monster seems handle this gracefully.

join-monster.readthedocs.io
Not positive, but guessing David Foster Wallace
Bluetooth Mesh is built on BLE. The proprietary meshes that existed before the standard was released also were flood mainly flood meshes on BLE.
Viper's inspired by Python, which (for all the nice things we can say about it) is a _terrible_ place to go for inspiration for this kind of task.
There have been a lot of modifications to TCP since the 1980's to allow it to push a lot more bandwidth on faster networks. Most notably perhaps window scaling.

How does BBR avoid killing other streams that happen to share the same pipe? It seems it would consume more than its fair share if the other TCP streams are using older algorithms.

p.s. presumably if you get 1% loss with no congestion there's wireless/mobile involved?
This has me curious (as a complete crypto noob): how would one defend against such a MITM attack in general?

Only send messages to vendors with known "trusted" keys and don't trust new keys? So in general, use a trusted channel for key exchange separate from the communication channel so that a MITM needs to control both channels?
Try to go out with 45 degrees, with direct sunlight, etc. Some people will even faint within minutes. Because remember you don't get teleported to the shop, you have to walk.
I think your confusion is that you think the immutability mechanism is a flaw. Addressing the fraud should be done via insurance, since otherwise we need to trust yet another party to be sure transactions can't be mutated/reversed.

I think if you examine all the assumptions leading up to your conclusion you may find that it is erroneous.
> Bonus: we don't add chorizo to the paella. The chorizo is mostly for the bbq

You should try it here in Germany, I was astonied the first time I saw them adding mayonnaise to the paella.
> Im from spain btw.

I can tell. Your command of English grammar and vocabulary is atrocious, man.
Nine lifestyle changes can reduce dementia risk
It's really interesting and awesome to see channels like Every Frame a Painting putting out videos with better production value/editing/content quality than what you'd get from most serious networks with millions in funding. And these are typically solo creators writing, narrating, producing, and editing everything themselves or with 1-2 others.
Data Structures Related to Machine Learning Algorithms
Especially as Google have locked whole accounts because it was found to violate the TOS for one of their services...
Would it be too much to ask Arizona to change, then ?
One of the motivations I've heard bandied about is that reducing the contrast of content allows sites to increase the perceived contrast of calls to action without making them garish. If everything is grey on grey, the dark bold "Buy me now" button stands out.
Postgres Randomized Primary Keys
Great running into you at Shizen @steveklabnik!

Just started using Rust in a serious capacity this month to secure some C++ functions that are called by our Erlang apps, with great assistance from Rustler [1]. Several people have complained to me about the decision to remove async IO from Rust, but I'm really grateful that it happened, because it lets Rust focus on being the best at what it is. Erlang's concurrency primitives and Rust's performance & security are a match made in heaven.

[1] https://github.com/hansihe/rustler
and then:
make it distributed, make it serverless :D
Cargo wants to put a vending machine in every Uber
Pulled right out of a Grey's Anatomy episode (or vice versa is more likely):

http://www.avclub.com/tvclub/wilmer-valderrama-says-good-day...
I think you're conflating design and engineering.

It's rarely the case that you change design because you selected a new technology; rather you usually select a new technology to enable changes in design.

If I switched from React to Vue for a Hacker News viewer I'm not also going to change the design of the project just because. But if I wanted a dashboard to become dynamic and allow for smoother user experiences without a full page refresh each time chances are I'm going to introduce JavaScript to a page that was previously just HTML and CSS.
They can't MITM secure email from buyers to vendors (the direction with actual physical addresses) unless they subvert either the buyers or vendors email server. The actual email does not go through the site.
Amtrak outside of the NE corridor is a huge subsidy for the companies who own the rails, who do make a profit on using it for freight.
"We knew we wanted to build a single page application (SPA) in order to have more control over the user experience of our website, making it as smooth as possible. On top of this, it also helps speed our website up since there’s no longer a need for full page reloads. We only need to load the data that we don’t have yet, and then re-render the page."

I'm bothered by this perception that SPAs inherently provide a better user experience. They certainly can provide a different user experience, but "better" is entirely up to the developers. I'd argue its actually quite hard to create a better UX in an SPA than the simple page based UX metaphor everyone is used to that the browser provides. Netflix is an example of a great UX from an SPA, nba leaguepass is an example of a disaster SPA.

Also there is no inherent speed boost from an SPA. Anything that is slow on the server will still be slow, and its up to the developer to create a good UX for latency. In page driven applications, the browser provides a fairly standard UX for page loading that most people are used to. In SPA apps, the developer needs to roll this themselves. Widgets popping in all over the place at different times, moving things all over the page, is a common UX I see in SPAs that is not good.
I guess you're referring to http://electrospaces.blogspot.de/2017/06/dutch-russian-cyber... https://www.volkskrant.nl/4497360/ https://www.volkskrant.nl/kijkverder/2017/hacker/

To me this paints a pretty realistic picture of how difficult it is for western LE to co-operate with Russia, it's not impossible but it certainly isn't easy. Both sides will be cherry-picking the things they share, with the Russian cops facing ever-increasing pressure from the intelligence side of things.

It's worth remembering that this story ended with Sergei Mikhailov in a Russian jail cell facing charges of treason.

No, I don't believe hosting in Russia will magically solve all of your problems. I however do believe that it'll make LE co-operation significantly more difficult, especially after the recent events.
Password managers are indeed a dramatic quality-of-life boost. Social security numbers for important family members, software license keys...one stop shopping for any sensitive or easily-misplaced information in my life.
The impression that I get is that after they busted Alphabay, they nabbed a number of sellers and possibly some large buyers, who were held incommunicado. When there was a big migration from Alphabay to Hansa of both customers and sellers, there was an opportunity to set up many of those sellers' entire presence from scratch there. So it wasn't just the site that was compromised, but many of the largest individual sellers themselves, physically.

Of course, I know nothing and have just heard of either of those sites this morning.
Except for the fact that it drastically lowers the amount of manual props passing you have to do, and allows you to achieve much better separation of concerns. It is essentially Redux, only much worse the more complex your app is.
And the added billions from the taxation of the now-legal drug market.
I've recently installed Enpass and I'm currently in the process of evaluating it. I really like the idea so far. My main concern is that they're not charging enough and wonder if the business model is sustainable.
> Why not 8-6 Monday-Thursday

There is no one reason why not. For some people it's because they need to work the same schedule as the people they regularly interface with. For some others there is no problem and they do work that schedule. Just depends on the requirements of the job, really.
> Pro tip: when your arguments are to literally start questioning reality

Saying "reality isn't stable" is a description of the dynamics of reality, not a claim that realty doesn't exist.

> However it is refreshing to see a libertarian actually admit the sort of mental gymnastics their worldview requires.

I've yet to see any evidence you think would change your view.

The evidence that would change my view on this is simple: bitcoin fails completely, with a price going to zero.

Is there evidence that would change your view?
I wonder how cannabis dealers based in Holland would be prosecuted. Doing a quick search shows that cannabis distribution/growing is still illegal under NL law. [1]

I thought this excerpt was interesting:

"The sale of small quantities of cannabis in coffeeshops is therefore technically an offence, but prosecution proceedings are only instituted if the operator or owner of the shop does not meet the criteria issued by the Prosecutor General:

no more than five grams per person may be sold in any one transaction and the coffeeshop is not allowed to keep more than 500 grams of cannabis in stock;

no hard drugs may be sold;
drugs may not be advertised;
the coffee shop must not cause any nuisance;

they are not allowed to sell alcoholic beverages;
no drugs may be sold to minors (under the age of 18), nor may minors be admitted to the premises."

Could an implicated dealer use the legal defense that they were operating a coffee shop online? (Provided that they didn't sell > 5 grams of cannabis)

[1] http://www.emcdda.europa.eu//html.cfm//index5174EN.html?#
You go where people are at least moderately cooperative. If Beverly Hills wants to fight to such an extreme, you avoid their political fiefdom. Simple.
Object Detection Performance as a Function of Imaging Bands in Satellite Imagery
It depends what simplicity you mean. The Solidity compiler is very far from simple, so if you consider that part of the complexity incurred by using Solidity, then a reasonably small bytecode program might be much easier to audit. Consider that a typical smart contract is as simple as "if four out of these six addresses make the same proposal then execute it." You can basically write these things in hexadecimal without too much trouble.
What I don't like about the hyperloop is its focus on cars as a solution to the transportation problem. Mass transit can be way more efficient and desirable, as well as allow pedestrians to take back city life.

A great book on topics related to this is "The Great Good Place" https://en.wikipedia.org/wiki/The_Great_Good_Place_(Oldenbur...
> Sort of. https://www.law.cornell.edu/uscode/text/18/1117 ("conspiracy to commit murder") only requires one person to take action and everyone in the group that did the thinking with them is guilty of a crime.

Wrong. It requires all the people to have taken action to communicate their intention to collaborate on the plan, and only one of them to have taken additional action toward acheiving it.

People don't think in groups; thoughts have to manifest as action for people to conspire.
I'm using Enpass, too. Your sentiments mirror mine exactly. In general I'm surprised they are not getting more press. Perhaps if they were more explicit and open about their underlying data format (the SQLite+SQLCipher database)?
Plus the priest thing is very cultural and nothing to do with cars in specific. A lot of Indians typically do ritualistic ceremonies (pooja) for any slightly major life event. And for most Indians buying a car qualifies (even the cheapest car is a fundamentally aspirational purchase for the lower and the lower middle class).

I dunno if it's standard in the US, but Indians typically also distribute sweets to friends and neighbors to 'celebrate' the purchase.
The difference is in a scatternet, each move between piconets had to create a new connection (1. master1 -> slave, 2. slave -> master2)

The new mesh standard, I believe, is a flood mesh. There is no new connections required because all messages are broadcast on the advertising channels and each node rebroadcasts when it receives it. (with some log of previously rebroadcast messages to avoid infinite loops)
Lets not forget the 123173817381 unions who may or may not have existing contracts or are hoping to gain new ones by this change..
To be fair I'm not sure the author is in control of this.
Many, many code horrors exist today due to a deep and abiding fear developers have of appearing insufficiently smart.

Most of the web apps that are being built today have no need for a complex front end and, if they do, it's only in a few places. But, as you quote, programming is pop culture, so every new Form => Datastore app is going to be built using a toolchain more complicated than quake was built with.
That's... That is a good point. Damn. I suppose the best bet for the admin would be to give the private key as part of a plea deal.

Well, it would work for people who build Tor sites for moral/ethical purposes
Wow! Thank you, I have been looking for something like this. I use mostly NoSQL which typically doesn't do joins (unless it is a graph database) but this looks really usefully for when I do have a SQL database to work with.
It's a lib working at a higher level so things like n+1 are left to be solved by the user since the implementation details depend very much on the underlying data storage.

If you use PostgreSQL however, i solve that problem :) https://subzero.cloud (GraphQL & REST api for your database)
It's still in private beta but you can get a sense of how things are put together by looking a this OS project (just REST) https://github.com/subzerocloud/postgrest-starter-kit
I could have worded that better, but my phrasing was meant to say that Overwatch is the competitive game and Dark Souls is the difficult one.

Edit - To clarify, I think competitive games (like Overwatch) stimulate the brain just like playing a heated game of basketball stimulates the brain even though it's a physical activity. Competition makes you concentrate.
Why should the price move in response to this? They'll just change the rules and print more.
OverLeaf user here. Thank you. It's awesome.
As a layman, I wonder about the connection between primes and random numbers. Obviously, the primes are not actually random, but they seem to exhibit a lot similarity to random numbers in that they are chaotic over short intervals, but seem smoother and better behaved over long intervals.