skysight-inc/HackerNews huggingface dataset:
Limiting character is wrong because the space is totally limited. Plenty of "important" websites do that and I go sigh. I use different password for different types of services for that reason.

If we don't limit number of characters (but seriously I'd say on average password lengh would be 8-10; I go a lot beyond that). In practice forcing to have combinations of various character sets increase search space, but in practice I bet most users are likely to use @ for a, l for 1, or captialize either first initial, or first initial of every word.

Or worse, just append, preappend, or modify one or two characters because some other websites decided to have a more unique password policy, and users hate to reinvent a whole new password. Then imagine one website got hacked, the next is easy..

So essentially if we can gather sufficent data about a target, then the brute force search space is now hammered and reduced.

In any case, I am a big believer of no restriction, because of what I said above. The behavior of choosing password is not too random so we can predict and infer from whatever we know. Password and passphrase are the same shit because "ILoveTacoAndBurgersWhatever1984" is a legitmate password. Good luck guessing that because I am not a huge fan of Taco, and I bet you no machine brute force this in any reasonable time.

The whole password vs passphrase is a campaign to get rid of the sophicated password policy, so people came up with a new name.

In the end, I believe having a 2-auth and allowing users to freely choose whatever passwors they want is better than forcing them to choose whatever we think is best. Education is the key, both on social engineering and on choosing passwords. We as software technologists have the responsibility to make dangerous / "i am not sure if that's a good thing to do" warning more obvious.

Of course I am aware there are other alternative proposals to replace pwd but for now password is not going anywhere soon.
I think you might gain a lot from taking a closer look at CoffeeScript.
I think if you find a very healthy fellow human being, and eat him, you'll be in the sweet spot.
If your tools don't generate useful insights, then you are not using them right. A properly designed study, employing high-dimensional genomics data, can for sure generate mechanistic insights, not just correlations. It's all about your study design.
Something, of course, subjective, that makes me think in causality is that you can appreciate changes that are not present in other people with mental problems.

Just to be clear, I'm talking about heavy users here, not occasional users.

I don't think is a so strange prior to have. After all, heavy use of almost anything, have secondary effects.

I understand, this is an observation, not an experiment.

Anyway, as a follower of Bayes, I have updated my probabilities.
This is ridiculous. Most people have cars because they need them. Try raising kids without a car to move them around, its a lot trickier than you can imagine.
It's not about how stupid Americans are but the insane vilification of anything that reeks like socialism. You (*see edit below) live in the richest country on the planet which is incapable of providing clean drinking water to all of its citizens. That's unfathomable to me.

Some context; I know the USA better than most Europeans, having lived and paid taxes there for three years, whilst working and traveling all over the USA. I would never call Americans stupid. I've met some stupid ones though obviously. But Americans as a whole are as interesting and diverse and awesome and loathsome and everything in between as any other countries' citizens.

The collective results of the media, political developments of the past few decades, the countries' legal makeup (local, state and federal law) and what not more together result in stupid situations. One of them being that the USA is incapable of providing clean and affordable drinking water to all of its citizens.

And if you have to resort to compare yourself to Venezuela you're losing anyway. It's a bit like the: "hey, at least we're not THAT bad". But you STILL cannot provide clean drinking water to your citizens. What's that saying again?
Never be the smartest guy in the room? Maybe compare yourself with countries doing better than the USA and then try to improve things?

And no, not everything is that bad and there are tons of things I like way better in the USA than in Europe. Things are hardly ever that black and white. But comparing yourself to Venezuela is one of the weaker arguments here.

EDIT: just realized that parent comment stated he's not American; doesn't take away from any of my points regarding the Steinbeck quote and the Venezuela comparison.
Do you use any modern JS tools? Webpack? Require or import? Babel? In my experience any es6 tooling is much of a bigger pain compared to coffeescript tooling.
Oh! I see DrRacket is open in that screen recording.

Is there any public information on using Racket with oculus yet?
10 talks you won't be able to stop thinking about
I'm wondering where all these props end up after movie is done. There is so many things usually get created from costumes to props even in average movie which usually get disappear. Wouldn't it be good startup that works with producers to collect all these material and puts in some online shop? It doesn't have to be for fans for specific movie. For example, if I wanted shoes, I can just look up that website to see if anything used in movie is available in my size. It reduces burden of finding cool stuff on customer part.
I don't see any way to win that war. The IP oligarchs have won it. They own the W3C now.

But there is clearly a demand for DRM-free browsers. And if the worst fears are realized, and mainstream browsers won't display media without DRM, or become snooping devices for IP oligarchs, that demand will increase.

Sure, it'll never be more than a niche, but DRM-free browsers will be there for those who want them.
Partial application is applied on call site, currying at definition.

Currying:

const f = x => y => x + y;

const g = f(1);

const sum = g(2);

Partial application:

const f = (x, y) => x + y;

const g = _ => f(1, _);

const sum = g(2);

Most FP languages have nicer syntax for this.
>>professional nutritionist

Was pretty sure this was going to be followed up with nonsense.

>>Apparently at the current moment the best is to keep your PH value in the body neutral

Right, it was.

If that was best, then why has the body not evolved into this pattern after millions of years, especially considering that diet prior to the agricultural revolution was almost certainly more acidic than ours today?

Read Alan Aragon's monthly research review for data-driven ideas on nutrition and exercise. A "professional nutritionist" is almost certainly going to have - at the very best - outdated ideas from decades ago seared into their brains. The truth is that we know vanishingly little about nutrition from a micro perspective; any strong claims beyond that are exceptionally suspect.
The deep rooted fear of 'socialism' in the US, as a response to the 'red scare', doesn't show how amazing America is, merely how the population was manipulated to shore up support against a perceived enemy.
Show HN: SendFly – Contact form endpoints
iOS 11: Available 9.19
I've used email addresses as source dictionaries. Turns out people see both choosing an email address and choosing a password as a kind of personality test, meaning there's a lot of overlap.
Yeah, it's far from perfect, and I wasn't saying it's ready for prime time. However, it's a much more complex piece of engineering, being a P2P messenger. I'm impressed with the development even considering all the bugs.
Some cities yes, and you can honestly count them on not too many hands for the ones which have adequate public transportation.
This year there has been a lot of bad press for cyclists in the UK as one 20 year old biker hit and killed a lady.

Lots of negative emotions and bad blood exposed, the court case got nationwide attention for weeks.

However nobody seemed to realise the dissonance that whilst 1 cyclist caused death is the ultimate heresy, drivers kill people daily without us batting an eye.

It's all a bit frustrating, I don't understand where this bias comes from - is it latent auto industry propaganda?
Yuki Chan – Automate Pentest Tool – Hack4Net
Best Chance to Complete Your Dream Job – Winter Internship in Jaipur
At least in Flow it's actually possible to properly type curried functions!

Here's a gist of the type definitions I'm using: https://gist.github.com/noppa/c600cc43fd44e33768efe6c6eec4a9...

I think something similar might work in TS too.

Demo: https://goo.gl/w3aPsw
I'm studying CRDTs so that I can finally add sync and real-time collaboration to my apps without having to run my own servers. If all goes well, I'll be able to simply push my files to any old database (e.g. CloudKit) and have the merge conflicts always resolve deterministically for any arbitrary number of users. Proof-of-concept using Victor Grishchenko's Causal Trees algorithm is already working — just need to add a few refinements and write up a nice blog post!

https://github.com/archagon/crdt-playground
What stops anyone from soldering (the USB) and/or hot-glueing those parts on? The tradeoff between customizability and ruggedness is quite easy to fix.

In my experience the buttons most likely to break are the LB and RB shoulder ones, since if the controller falls it might take out the switch on direct impact with it's full weight.
I don't know about US, but over here with my Polish bank I have 100% control over the limits for each type of transaction possible with my card, I can set them myself through the web portal of my bank - the types are:

1) transactions with card present(chip+pin or signature)

2) transactions with card not present(someone types in your card number into the terminal)

3) internet transactions(card number + CVV from the back).

I can set any of them to zero, effectively blocking the transaction type completely. So yes, while you can read the card number and exp date from the chip, you can't get the CVV number from the back of the card, which means it's only useful for the second type of transactions - and I don't see any reason to ever change the limit on that to anything other than zero - so any information gained from just skimming the chip/magstripe is effectively useless without the CVV written on the back.
This and TiltBrush are the only reasons I'm considering a headset at all, tried 3D sculpting unsuccessfully in 2D so would love to try it in 3D.

Medium looks excellent but yeah not amazing enough to outweigh being owned by FB. Still pretty disappointed VR tech innovations are just being locked up into proprietary camps.
I think this exact problem is what makes currying in JS and dynamically typed languages not very practical.

In JS is even worse because of the weak typing, if by mistake you get a curried function instead of a value, JS will happily operate on it giving you things like "hellofunction () {}". When you realize that there is a problem, it would be hard to find the actual cause of the error.

I think this is the reason why dynamic functional languages such as Clojure don't use auto-currying. I a static typed world, like Haskell's this is not a problem at all.

Partial application on the other hand is very useful and practical in JS and other dynamic languages.
Yes but that's not in relation to the hour but in relation to the sub unit of minutes.

How often do you talk about 20 minutes because you can neatly stuff 3 of those time periods in one hour?
Which is problematic when you visit with a European card where only the chip works (swiping always gets declined). Luckily, some have contactless (mostly without the staff knowing about it) and for others it usually turns out that the chip reader does actually work.
I suspect the 360 controller being available in a wired-only version is a factor (also as to why 360 and not One)
They could definitely hurt Netflix by making it a shitty, barely workable experience.
Had the same at a McDonald's in Boston. They even called the manager to show him what happened. Turned out that no one working there was aware that they had contactless functions, despite the advertisement at the machine.
Liability will start once you start loaning them out to others and package the loans to other investors who them show them as assets to borrow something from someone else :).
A New Way to Sell More Trucks?
I hope we can now get back and fight DRM where it makes a real difference: In the parliaments, on the streets.
> The JMLR has the great unspoken advantage that all of the people involved in its production have a job that allows (or encourages) them to pursue this project also. That won't always be the case.

I'm not sure what you're saying here. The vast majority of hours have always been donated by referees. Then there are the editors, who are either volunteers or paid only a small amount. Aside from that, it's a matter of posting the papers on a website.
An interesting history fact I didn't know -- thank you. But I doubt one election, which results were immediately negated anyway, is enough to call Russia "a democracy". It looks like it was just a (failed) attempt of bolsheviks to get an international legitimacy.
Thanks from me too, very interesting. I'm also no professional expert, but it looks to me like this can be non-intuitive because borrowing "creates money" only when said borrowing is linked to an asset bubble.

Case in point: if my house appreciates on the market by $100K, I am $100K "richer"; this by itself doesn't increase the circulating money. But if I'm able to borrow $100K by mortgaging the increased value of my house, now I have $100K more to spend. The lender has $100K less in their bank account, but they now have a mortgage-backed security which is worth $100K and that, if there is a liquid market for such securities, can be almost as good as actual dollars for trading. The circulating money has increased.

It gets even worse. If the lender and/or the borrower use even just a part of those $100K to speculate in the housing market, the bubble will accelerate... until, at some point, enough people actually want to use their new riches to buy products that aren't part of the asset bubble, and producers of those products don't accept those inflated securities as payment. Then, the bubble bursts.

And, by the way, this whole mechanism has nothing to do with bad central banks or fiat money. It's perfectly consistent with a perfect free market AFAIK, and the only (not easy at all) way to prevent it is regulation.
Student loans are becoming insane.

My own loan was initially government issued with a reasonable interest rate, but a year after finishing uni, it was sold off to a private fund that decided to jack up the interest rate to nearly 7%! In the UK, education used to be free. Now kids are leaving 3rd grade universities with 50k GBP debt, a ridiculously high interest rate and no quality job prospects. That's a lot of pressure on young shoulders (my sibling is going through this currently, and I can see how distressing it is).

And they wonder why young people can't get on the property ladder! The ignorance on behalf of the government is astounding! I'm not sure I'd want my kids to go through that, even if it means missing out on the social experiences of university.
Ask HN: What are the best tools for sentiment analysis on Twitter?
> Rather, they take calculated risk.

And credit-cards are a testament to that.
Concurrent Programming with Effect Handlers in OCaml
Hmmm, a brief search reveals this; https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3195546/

I'm not really equipped to review, but it does make some interesting points that while the body strongly maintains blood PH of between 7.35 and 7.45 the mechanisms of doing this can cause more stress on other systems in the body depending on your diet. It's also interesting that we used to have pre agriculture a 10:1 rather than a 1:3 K:Na balance.

Anyway, the article is an interesting read - maybe supply some counter evidence that Alkaline diets have zero supporting evidence.
I suspect that rather than quibbling on the historical facts of the prizes award, the person you're responding to doesn't consider the Swedish National Bank's Prize in Economic Sciences in Memory of Alfred Nobel to be a genuine Nobel Prize.
I certainly don't wish to be rude, but if your emails are anything like the material you posted below I can pretty much promise nobody has ever bothered to read them.

There is a time for long, flowing prose. Cold emails to people whose time is worth a lot of money isn't one of them.
Are you sure that the expiration date is not checked for any vendor? I recently paid online (Mastercard I think) and the transaction got declined because I entered the wrong expiration date. The date was in the future, I just entered a wrong month. So there must've been a check. But could be that they used 3D secure (or equivalent) and it got declined there, the check often happens too fast to notice.
I'd have two big reservations about this.

1. The Virginia class was first commissioned in 2004, with a 33 year design life. The XBox 360 was first shown in public in 2005, with a design life of ...? Yup, it's consumer electronics, with a design life of much less than 33 years. Even though there are on the order of 80-100M of them in the wild, by and by XBox 360s and replacement parts will be getting scarce.

(If you think this is an exaggeration, consider the availability of spare parts today for a computer system commissioned 33 years ago, in 1984 — an original IBM PC XT, perhaps, or an original Macintosh, both of which were manufactured in — for the time — high volume. Things like 5.25" floppy disks, or a replacement M-series IBM keyboard with the original DIN plug, were once ubiquitous, but today they're rarities.)

2. A second concern is that these days everything comes with an embedded processor and an enterprising hostile entity might try to sneak malware on board a fast attack submarine via the periscope controller handset. (I've no idea what form such malware might take, or what it might accomplish, but that's not the point: it's that using cheap commercial handsets widens the threat surface of the submarine's sensor suite arbitrarily.)
That's a gross oversimplification: Flash and Silverlight were rich platforms with complexity on the same order as the entire browser. EME has a much narrower interface which provides stream decryption – it doesn't even have the video codec, whereas Flash/Silverlight had complex video, audio, image, PDF, font, etc. implementations with a long history of exploits.

This really matters because so many of those exploits relied on other features to actually run the payload. Not having any of those in the first place is a big attack surface reduction, even if the politics are legitimately debatable.
The xkcd comic doesn't claim that "correct horse battery staple" is a completely secure password, it just shows that it's so much better than weird passwords that people tend to generate by themselves, like "k@tApU1t2143", and also how much easier it is to remember. So the suggestion is, if you're gonna use a password that you're going to remember, it's better to use a long one than a "complex" one. But yes, if the attacker knows that you're using English words for your passwords, the English language has about 170.000 words according to Oxford English Dict, and if you consider 1/10 of them to be known enough to be used in a password by you, if you use 4 words you have about 80.000.000.000.000.000 combinations, or about a day of brute-forcing with JTR. (Someone correct me if I'm wrong).

Five words makes it a lot more secure, or using more obscure words. Coming up with a "random" method of choosing some 5-6 words out of a dictionary, using dice or coin flips, can go a long way to make your "phrase" password more secure against these kinds of attacks.

Of course, the best approach is to use such a password, and use a password manager.

As for your second question, I believe it doesn't reduce the time it takes to guess some user's password. The restriction to include capital letters or special characters forces users to introduce more entropy in their password, and thus prevents a lot of common password usage. An attacker knowing that the site's password must be at least 8 characters long is not that helpful. Checking all the 1-7 character long passwords is trivial compared to checking all the 8-10 character long passwords. So it is helpful, since it prevents a lot of users from using simple, guessable passwords. In short, the restrictions introduce more complexity than they subtract for most users.

Edit: Having read the other replies, yes, it does technically reduce the search space, and it might be a bad thing (due to users adding simple common symbols, which are again easily guessed). So it probably isn't good practice.
Presumably the Countach 20th Anniversary.
This could be awesome, being able to inspect and make changes to your 3D models as if standing right next to them.

I mean, it would even have applications for sculptors. Actual materials to sculpt with are not cheap as far as I know, and it could streamline the training process.
Don't you have (shouldn't you have) a "certified parts library" so you don't need to go through the process of studying which material is needed for a handle, use standard and pre-certified screws to affix them, which you already know won't come off due to vibrations during launch, and won't accidentally fuse once in space (https://www.quora.com/If-two-metals-touch-in-space-they-fuse...).
Basically do it right, so you only do it once, like software libraries (in an ideal world). Unless you really really have a damn good reason to not pick an existing handle from the library.
Been looking for this for a while, but couldn't remember anything specific. So, thanks for the link :)
Beautiful!

http://www.imcdb.org/vehicle_43840-Rover-Mini-Chic-ADO20-199...

For images like this one, make a submit/suggest/correct button, without having to register. I don't see the BMW 7 and Peugeot 406 mentioned.
You say "...less gold per unit of national currency, which meant deflation" I think that would mean inflation not deflation. Why do you say that?
Why there is so much negative PR going around about Bitcoin suddenly? I believe that people like Jamie Dimon trying to lower the price by creating these kind of stories to buy more.

Bitcoin will rise no matter what. Atleast for 5 more years.
I switched my codebase from 1 to 2 and didn't notice a single syntax issue or a failed test. So not such a big "breaking" change after all.
>It's a stupid idea to run a country with a fixed amount of currency - as the economy expands, more currency is needed - either that - or all prices of everything need to adjust because the 'stupid currency' is fixed.

All prices are already being adjusted all the time - what is the problem?
Sure. But it is not the bitcoin that is the liability, it is the loan contract.
so what i should use if not bitcoin to buy online??? im jomeless and banks dont let me use them???
In Paris, because no fatal collision of a cyclist with a pedestrian has occurred last year, that category has been removed from the yearly report : https://twitter.com/EmmanuelSPV/status/909330409099530245 - the killers of pedestrians are the motorized vehicles.
About twice slower than in HLL, with code reusing of course.

But the code is more reliable and the debugging process is much easier. After some short debugging stage, most of the projects runs for years without single bug report or other support issues.

I am not talking about the significantly higher speed, lower memory footprint and better UX (especially the response time of the UI is really much faster).

As a whole the advantages are more than disadvantages IMHO.
And in Sweden they're enjoying both record economic growth and free education and healthcare. I guess socialism is not a monolithic bogeyman after all.