skysight-inc/HackerNews huggingface dataset:
Passwords are often already on the users phone. Such as if you use say Authy or Google Authenticator for your 2 factor, your phone if say an iPhone already stores all your passwords in your keychain which is accessible on your iPhone just like on your computer. Or if you use 1Password your passwords are accessible on your phone just like on your desktop. So still comes down to you having a strong master password for your keychain and or 1Password, etc that only you know.

If you use Authy on your phone, they have long had a chrome extension that allows you to get your codes on your computer, already for years and that works with all your existing codes rather than this which is limited to just GitHub currently it sounds.

But hopefully someone else can comment on the security improvements of Soft U2F or if its more just building a standard rather than people having to rely on Authy or such.
Digital copies on iTunes are priced somewhere near "highway robbery". Because of the lack of retail-style transactions, there's no price competition on digital copies. What's funny, it's usually cheaper to buy the Blu-ray/DVD/digital copy combo packs... even if you just want the digital copy.

Recently I picked up a couple Blu-rays with digital copies for $3 at Fry's. Vudu had one of them on a huuuuuuuge sale this weekend, digital copy only, for $5. The iTunes price is $14.99. Again, I got that $15 iTunes price... for $3 as physical copy with a digital code. And if I wanted, I could sell the disc at a resale shop and get back a buck or two. Buying video on demand online right now makes no financial sense whatsoever.
Facts or accuracy are not a strong suit of the current guy in office. /s

Also, he doesn't seam to care much for independent journalism... which WaPo is. Anytime Amazon is discussed in the WaPo, they do mention in interest of disclosure that Jeff Bezos is the owner of WaPo and Amazon.

Got karma to burn so why not.
chanterelles look nothing like an amanita :\
463 points, 332 days ago submitted http://hackernewsbooks.com

Got ~1500 active subscribers on the newsletter, some web traffic, some passive income, a lot of interesting contacts, met some cool people in Zurich, where I live. Overall, really glad I did it.

Original post here - https://news.ycombinator.com/item?id=12365693
Yes, definitely. Early in my career I had a coach, a very impressive, productive person.

I started using the pomodoro technique, and I brought up the fact that I felt unproductive because I was having a lot of trouble achieving my goal of 11-12 pomodoros per day.

She was like, "you realize 11 is a very hard goal, right? When I was using pomodoros I was usually doing 8 per days. Most people struggle to do a single one when they start."

It was illuminating.

In grad school my adviser was seen as the most productive, intense person in my department. We got on pretty good terms, and when I was struggling he started telling me about how much time he spends doing e-mail and reading random books (if you paid attention you might notice the arts and philosophy books laying around on his desk; he's an engineering prof.)
Firefox support is coming. Looks like there's been a bit of activity on the ticket:

https://bugzilla.mozilla.org/show_bug.cgi?id=1294490
Success like Facebook's cafeteria workers' only happens with bad luck?
I don't like Facebook, and I don't particularly like Zuckerberg, but I highly respect the guy. He's clearly a very smart person.

But I think the leader of a country needs to live life a bit more before leading a country. If he does want to be president someday, I think 2020 is way too early.
Possibly -- but AFAIK liberals are generally the ones who favour busting up large corporations.
I'm not sure it's "signal processing" as much as it is the actual things that people would call "signals" in the first place.
I also still have my Freerunner in a drawer somewhere. I bought the phone early on and then ended up starting the android-on-freerunner project[1], when Koolu, the company that had begun an Android port, abandoned the project. I used the Cupcake version as a daily driver for quite a while, but it was never anywhere near as stable as a "real" phone.

1 - https://gitlab.com/android-on-freerunner/android-on-freerunn...
So the implication in the title is almost certainly false. There are columns and layers in areas of cortex that are responsible for processing sensory modalities that are not inherently 3d in nature. If I had to guess (from my vague recollection of the literature) the current thinking is that laminar structures are a nice way to build things developmentally, and columns arise in part from development but also because of *otopic mapping, which is to say that many sensory modalities have a reasonable mapping into two dimensions that have correlations in their inputs based on the destance their sensors are from each other. Obviously not the whole story, but laminar and columnar structures are very likely not 'just' about building 3d representations.

All that said, I could buy an argument that cortex has settled on a 3d representation because, even though the exact encoding of muscle movements is most certainly not in x,y,z or other 3 vector representations, a large portion of the motor actions that we make are indeed in 3d space (a good counter example being language which has representations in cortex and acts on a very high dimensional space of our vocal and facial muscles).
San Diego Comic Con Gets Gag Order on Salt Lake Comic Con
What is East Menlo Park? Do you mean East Palo Alto?
How to Start an Online T-Shirt Business
Similar experience w/ twins in the NICU. when you have 2 employer paid insurance plans, the two insurers fight over who pays and the hospital doesn't get paid, which leads to them coming after you.
> Please don't bait other users by inviting them to downvote you or proclaim that you expect to get downvoted.

https://news.ycombinator.com/newsguidelines.html
I dunno. Decent cans don't generally drive well from phones anyway - so you're stuck with an external amp. Many amps have integrated DACs... why not just feed digital audio to the amp/dac via lightning?
HEIF already exists as a standard [1] with comparable compression [2]. What does Pik hope to do better?

(And please don't say "patent free" unless you are certain Pik will not infringe on those same patents)

[1] https://en.wikipedia.org/wiki/High_Efficiency_Image_File_For...

[2] https://nokiatech.github.io/heif/technical.html
We still have 3 more years of the current administration, that's an eternity (figuratively) in politics. Predicting who will be a legitimate contender at this point is a fool's errand.
I think the greatest practical threat to TOTP is phishing. U2F, regardless of where keys are stored, binds a keypair to an origin. Only authentication requests from `github.com` can use the `github.com` keys. For my money, any U2F implementation is a win over any TOTP.
Why doesn't this happen more often?
No, not yet, but good idea!
This is my uninformed impression of the matter as well, and if true (please, anyone with a rebuttal please weigh in), to me it is further proof that the true motive of the ACA is to line the pockets of health care provider donors, by spreading the costs over the entire population and get rid of the politically damaging stories of overcharges causing individual bankruptcy.

Socializing this theft turns it into Just Another Crisis among the hundreds of others the US has.
People here in the comments are so insensitive.

I got from the article that Mark Zuckerberg is traveling the US to find people struggling, while a person like that serves him food every day. He's a hypocrite, no need to look for a different meaning in the article.
The power of minimalism in UI design
Microsoft Plans to Stop Actively Developing Paint
The Beautiful Mathematical Explorations of Maryam Mirzakhani
Now if APNG would gather some steam, high quality animated fully alpha transparent images would be nice. Gif's 256 color and 1 level transparency is ok, but to do better work we need something like APNG, although not sure how well it compresses.
There isn't even a clear consensus with professional economists today on this topic, let alone what it meant 80 years ago. It requires some very strong research to back up that the workers rights movement achieved the results unions claimed.

One of the greatest advancements in worker well being in the US was done by Ford pioneering well paid and well rested employees.

I live in a country that had a certain amount of economic prosperity and it has been under clear economic crippling since the last constitutional amendment that expanded workers rights. Coincidence or causality? It's very hard to say, but the fact that union leaders are richer than CEO's and company founders makes the whole thing suspicious.

Modern unions definitely sell a lot of kool-aid.
As someone who has removed my fair share of spyware infections I'll say "easy now".

I think I'll be happy the day EU and American consumer protection agencies start looking closer into Googles business.

I'd also applaud even more visible information about what exactly gets collected and sent (the old gds "Read very carefully - this is not the usual yadda yadda" would be a good start).

However IMO we shouldn't call legitimate telemetry "spyware". I thing that is what you call "crying wolf".
This isn't also backed-up by SMS, is it? Because the majority of U2F-supporting services seem to be doing that - even Google (and for its own Google Prompt, too).
Hey! I've been using ReadMe FOSS and had no idea that you were a show HN project. Congrats on your success! Super, super happy with it and love using it! Thank you!
To Github people: I ordered your yubikey token but stayed away from U2F out of fear that I'd be locked out if I lost the hardware token.

But I didn't realize you could setup U2F and TOTP as a backup.
I bought it the other day :)
The range extension and lock circumvention is bad, but only weakens back to a regular handgun. The jamming is more scary to me as it makes the product actively worse than if it wasn't smart at all.
I'm not a crypto expert and I'm sure even if I was it would be difficult to explain. Wiki page on SRP has a good description though:

Like all PAKE protocols, an eavesdropper or man in the middle cannot obtain enough information to be able to brute force guess a password without further interactions with the parties for each guess.

In layman's terms, given two parties who both know a password, SRP (or any other PAKE protocol) is a way for one party (the "client" or "user") to demonstrate to another party (the "server") that they know the password, without sending the password itself, nor any other information from which the password can be broken. Further, it is not possible to conduct an offline brute force search for the password.

https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...
School is an expensive endeavor, you'd have to shell out thousands of dollars or go into debt for years just to get a respectable degree. Without the degree, most employers wouldn't give these people the time of the day.
The tipping point of AI having human-equivalent capability in specialized area is coming.

The past industrial transformation has never had that trait.
You can buy it. You just have to bring your own software: https://www.microsoft.com/en-us/hololens/buy
Yes, though these days the term 'signal processing' is usually only used for operations on the signal in digital form, ie after sampling. Since this works for the propagation of the signal in analog form, it is more useful for doing calculations about propagation of signals in waveguides or in a TWT or something.
Bright City: A Highly Insecure Police and Municipal Government App
> more often then not, VPN is used to circumvent something they shouldn't be accessing

Who knew Cisco was selling enterprise-grade circumvention devices to the world's corporations? Somebody better notify the MPAA!

More seriously, this type of thinking is pernicious. It demands "consumers" simply "consume" is easy-to-control ways, stay in their lanes and not be suspicious.

There would be no internet if people did that. Don't get me wrong; if people want to be sheep, they can be. I will happily encrypt, tunnel, send weird packets and otherwise play on the net the way it was intended, and anyone with a problem with that can chose not to do business with me if they prefer more tractable clientele who will shut up and eat what they're fed.
The issue now is that the cost of getting the training to find a new job is going to be substantially higher than it has been during previous iterations of automation. The market is already falling short here -- there's a lot of people doing stuff that falls way short of their potential. If we're going to make it through the next few decades without substantial increases in the welfare state, that's a problem we need to solve before it gets to be too late and the political scales have tipped past the point of no return.
Thanks a lot, will try it out.

btw https://uber.github.io/jaeger/ still mentions "Backend components are implemented in Go (will be open sourced soon)" ...in the meantime the code go published as it seems: https://github.com/uber/jaeger
Nexus 6P Bootloop Fix Has Been Found, Makes Your Phone Use 4 Cores
Running & losing can be preparation for running again & winning
Except the whole reason it's outrageous is that the domain is not being used other than to market the domain as a for-sale product.
People respond to incentives. If you make it easy for homeless people to sleep on benches, that's what they'll do. If you make it difficult, they'll go somewhere else. It absolutely is solving the problem as far as keeping them from sleeping on the benches.
Remember Trump also accused Amazon of "not paying internet taxes," so facts are not his strong suit. (Although he is correct only in that there is no such thing as internet taxes)
What do you define as “the right way” and how hard is it for the average person to follow?

Given the high opsec requirements, I think it's irresponsible to advertise an anonymity service which fails in a way which provides an irrevocable public record of every transaction.
A bit more than 1/4 of hospitals (with emergency departments) are designated as critical access hospitals. They are in most states:

http://www.flexmonitoring.org/wp-content/uploads/2013/06/CAH...

(in high population areas it doesn't make sense to comply with the limits imposed by the program, for instance, only having 25 beds, that's why there aren't any in Connecticut and such)

(Just adding a bit of info, I think CAHs are pretty high jargon)
> And Netflix is blocking VPN's. The original reason was it didn't have licenses for certain regions, but then what of original content?

This is a good point, but note that a bunch of the special "Netflix" content is actually licensed from another country. Also some of "their" content is stuff funded in concert with others, who will have retained certain restrictions (bogusly called "rights" in legalese)

So the total amount of material Netflix owns free and clear probably isn't big enough for them to bother with special-casing. If it were it would be in their interest to do so as a way of putting pressure on others.
It's not like said contractors get paid more anywhere else? While the situation those folks from the article in is horrible, Facebook isn't a charity.
My understanding is that the FF softtoken was intended to be temporary while they worked on their HID support. That might not be the case any longer though.
I've done staff aug work for plenty of large companies and definitely had access to facilities and amenities.
Seems like the only thing sillier than social darwinism is its polar opposite.
CGP Grey has a video that discusses the automation issue, including the "Why is it different this time?" question.

https://www.youtube.com/watch?v=7Pq-S557XQU
Is publishing honeymoon photos illegal? (I'm presuming nothing compromising.) If the photos were taken in a public place, then they are legal, and then therefore no harm done, right?
It's almost like market demands them to be seen as progressive.
There are like 50 different toolkits...

I exagerate, but: win32 GDI, windows.forms, MFCs, ATL and that is just from microsoft off the top of my head. There are way more when you start looking at all the solutions that a typical user might actually have running on their machine.
It sounds like "dick" in Brazilian-Portuguese too.
You still have to configure TOTP (SMS or App) 2FA before you can add a U2F device. That might change in the future.
> but the fact that union leaders are richer than CEO's and company founders makes the whole thing suspicious.

Although I don't think it is better to have richer CEO's is better than rich Union leaders, this is not true unless you live in Cuba.
That's just marketing hype mixed with a little bit of goalpost moving. "Has never been more secure than it is now" != secure.

> A while back Apple started pulling anti-virus apps from the app store presumably because they aren't needed.

I think you presume too much. An effective antivirus program cannot run in a sandbox that isolates it from other processes. If Apple pulled 3rd party antivirus apps, I bet it was because they could not both work as advertised and simultaneously obey the sandbox, not because they "aren't needed" (presumably because the platform is "secure").

As for your original statement:

>> You can't get viruses on iOS unless you're jailbroken - Apple's walled garden pretty much guarantees that.

Here's a counterexample: https://www.kaspersky.com/blog/pegasus-spyware/14604/
If you give too many benefits to contractors, they become de-facto full time employees, and you have to pay for benefits and health insurance and all that stuff.

That happened back in the day with engineers at Google also. They hired a lot of contractors, but you could really only work 6 months out of the year, or else they'd have to classify you as full time with all the attendant benefits.

The food and fitness center costs are really a rounding error. Contractors also have to pay to use the shuttle, because again with the benefits/full-time or contractor designation.
Linux has a huge advantage in that it has a very wide array of variants, kernels, library configurations through many standard distros and further customizations. It makes it much harder to write distribute complex malware than a standardized OS like Windows.
It's kinda weird because they both just occupy small niches in the business. My guess is that even if they combine they won't occupy a huge part of the market.
If you look at the screenshot posted by one of their founders it lists the user directory as the default whitelist: https://user-images.githubusercontent.com/87728/28395021-e04... and isn't clear on uploading everything from there
Yeah, really the chief use for an app like this would probably wind up as, how confident are you that this mushroom will not kill me which is a slightly different problem.
BCBS IL is super straightforward. Every doctor is $20, unless it's a specialist, then it is $40. I've never actually been billed $40, despite seeing many specialists, so I'm not sure what actually qualifies. I've been hospitalized and paid <$1000 for an overnight stay, with visits from specialists, etc, so I'm pretty happy altogether.

My biggest complaint about the medical industry is the cost of prescription drugs. It's ridiculous how much we pay for drugs in this country.
As long as Windows still tries to hide file extensions, the rest of its security barely matters. And in what way would its security model be better than MacOS or Linux? I'd say they are about the same nowadays.
Ask HN: How well documented are the codebases you work on?
I'm playing code detective today, and it got me wondering how common good documentation really is.
The funniest part of this is that Facebook provides almost no value to society, while the food service workers do.
What is "fairly and equitably"? If I choose to live in the most expensive metro area in the country, have ten kids, and then kill my wife so there's no one else to help support them, is it my employer's fault I'm struggling? At what point do people's situations stop being other people's fault?
I've been a full-time consultant/contractor since 2005 and felt like I was pretty familiar with the IRS classification rules, and this is new to me. Can you cite where you read this?
You can also order as many of the U2F devices as you wish and associate them all with any number of accounts. Yes, they do cost money, but the cheapest today is $10 shipped on Amazon. Even if you prefer the ergonomics of the more expensive ones, it's fine as a backup you keep locked in a safe at home.
Ask HN: What career path is better. Bleeding edge or niche?
I want to become an expert at a specific technology but I'm wondering what's better...

Working on greenfield projects withe the latest tech or maintaining legacy products

For example should I learn and master ASP.net completely and find jobs there or should I learn the latest javascript framework and find jobs there.

Which path would give more satisfaction and job security and money?
Yeah, LeoCAD has much nicer UI. I should have added that on my Geforce 1080 GPU it was smoother with big models.

I hope LeoCAD will become more robust with bigger models, having an open source solution is really a big plus.
It's not hard to use SRCSET to put WebP + JPEG2000 + JPEGXR images which covers Chrome, Safari and IE, and fallbacks for old browsers / FF. Hardly ideal but easy to get pretty good results.
Nitpick: SD DVD is be 576p at best.
Holy smokes this is awesome!
Indeed it doesn't take much imagination: chronic illness + prescriptions + high deductibles. Worse if multiple family members are sick (so many problems are inheritable and so on).

Also worth mentioning, it's been broken for a while (e.g.: ACA is not even broken in yet).
13 Video Marketing Trends That Will Shake Up Your Content Strategy
Your argument is at least as wrong as mine, though, while you seek to reduce the numbers, you are not also seeking to increase the scope of the cost from JUST the hardware depreciation and monthly fiber cost of the interconnect to the actual cost of the interconnect. The point is, it's not even close to "negligible"
Will Paint live as long as edlin?
Interactive Mind Map for Learning Reinforcement Learning
Yes, that's true. But I don't think that's legit within the technical and absolute definition of REST. Perhaps they used that strict definition in order to differentiate the product?
Public option is unlikely to happen in the near future. Too many people start frothing at the mouth and yelling "socialism!" every time it is proposed.
Alphabet keeps printing money despite a hefty $2.7B fine from the EU
Google photos "high quality" means downscaling to 16MP if larger and compressing at 85% libjpeg quality level. I don't believe it uses exotic codecs.
The consensus seems to be that he's aiming for a 2024 run. Although if Bernie isn't running in 2020, I think he'd be the one to beat in a Democratic primary. And he'd have a much better chance at beating Trump than anyone else that seems likely to run, in my opinion. At least when I've seen him speak about anything, he generally comes off as intelligent and relatively sincere.
What a great fluff piece. I'm guessing the blogger here will get an inside scoop when Zuck runs for office.

It's interesting how Zuck seems so generous when it comes to politics yet doesn't apply that same mentality to his cafeteria workers.
I'd rather not vote third party for the second election in a row, but it looks like I'll have no other option if it comes down to Trump versus Zuckerberg.
Please include example images from an excluded test set for demonstration. I'd rather not have to google for pictures, download one, upload it, ...
Question - Why is this down voted? Isn't living within your means a basic idea in major parts of the world?
The proposed SpaceX satellite network is in low earth orbit unlike traditional satellite Internet, so it should provide decent latencies (25ms vs 600+ms):

https://arstechnica.com/information-technology/2016/11/space...