skysight-inc/HackerNews huggingface dataset:
Thanks, both of you.

Seems 2FA (YubiKey) costs 10 USD/year instead of 24 USD/year which LastPass costs.

I've been looking for a recent feature comparison, the Wikipedia one is rather shallow and incomplete [1] [2].

My (incomplete) take on feature comparison:

Both are relatively cross-platform, widely supported by what I consider status quo platforms (Windows, Linux, Android, macOS, iOS, Chrome, Firefox).

Advantages of Bitwarden are open source and public development, approx half the price (and approx same as Lastpass before purchased by Logmein), and the ability to self-host.

Advantages of Lastpass are different login for accessing to account and decrypting database. This is important because without this, a MITM attack gets access to the master password.

I also found the announcement of Bitwarden, approx 1 year old now, on HN [3]. It includes some feedback about the software. Bitwarden uses AES256-CBC. How secure is AES256-CBC in this case, and what does Lastpass use? Another criticism is usage of Google Analytics. This can be disabled in the application, but I don't feel it serves a purpose for the user. It should never have been included in the first place. I also don't think either software is audited.

[1] https://en.wikipedia.org/wiki/List_of_password_managers

[2] https://en.wikipedia.org/wiki/Comparison_of_password_manager...

[3] https://news.ycombinator.com/item?id=12676979
Cool idea. When I read the title I thought that maybe they have discovered a practical private information retrieval method or some oblivious transfer-based method after all since their 2014 blog post (well, they kinda do something like that with oblivious accesses to the RAM I guess), but using the secure enclaves for running verifiable code seems like a very pragmatic and creative solution too.

Granted, how secure those enclaves against state-level attackers also remains to be seen (that recent attack on ARM Trustzone was pretty cool and effective), but it surely is an improvement after all if you want some defense in depth.
That's just an argument for not cutting funding of government regulators. It's also a solid point against the little-to-no regulation folks who think the free market will solve every problem.
The degree was. And on-the-job experience is a thing.

Your responses strongly suggest a failure to grant charitable consideration:

Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize.

https://news.ycombinator.com/newsguidelines.html
I think his intention in stating that was only trying to focus on the objective, informational debate at hand, and not devolve into complaints about him being a 'white supremacist', which people often use in debate to prematurely dispel arguments without considering their logic or point of view.

Ironically enough, his attempt at focusing on the objective led to you solely responding with accusations about how 'being white etc etc etc'.

Take arguments at face value; they can only be fully dispelled after reasoned, objective consideration.

Also: I will say that your point is a really interesting one re: racial privilege, but it's not relevant to the validity of his immigration stance.
If you have a Pi already and a kid I recommend an install of the os. They have really done a great job, learn the command line as part a game etc.

http://developers.kano.me/downloads/
Wiki says (though who wrote it?) 'It (wechat) is widely known as one of the world's most innovative and versatile app, as well as China's "App For Everything", with numerous unique functions and platforms ranging from 'payment' to 'social media' to 'services' to 'shopping' and more, that are equivalent to multiple Google Play or App Store's apps, but merged into one.

Is it that impressive vis a vis Western Tech?
What other frameworks have you worked with?

I used to be strongly in favor of Meteor as a time-saver but as I got more exposure, I realized how weak and annoying it is to work with.

You are largely stuck into Meteor's ecosystem and at their whim, meaning you have to do things "the meteor way". Things like methods and promises ("Futures") are annoying to me because they abstract away so much.

Maybe it is just a matter of "growing up", but I think I am going towards more non-framework frameworks like Choo.js in the future. I used to think Meteor was a quick prototyper, but Choo is infinitely quicker.
> Did you ever consider that it OK to select people in a way that manifests as privilege?

I never said it wasn't. I simply said that your parents being “first generation legal immigrants” does not serve as an effective preemptive rebuttal to accusations of white supremacy or privilege directed at you, because the legal immigration system selects for privilege and includes (and in some sense advantages) whites (and does not systematically exclude whites who might later have offspring who might become white supremacists.)

Whether it is good or bad that the system has selective features that create their own privilege classes and align with existing socio-economic privilege is a separate and unrelated question.

> And here you've made the assumption that I am white.

No, I have not. I've merely pointed out that the preemptive defense against claims of white supremacy and/or privilege that you have offered doesn't actually defend in any way against those claims. I've stated nothing that makes any presumption about your race, which I'm not even remotely interested in.

> Also, I love how you're lumping in privilege of white immigrants with that of "white privilege" in the U.S.. It is a remarkably miopic view, as whites are not a powerful minority everywhere.

That's true, there are many places (like the US) where they are the dominant and privileged majority rather than any kind of minority.

Though, as you note, it's your parents, not you, who are immigrants, so, insofar as the position of the White race would be relevant at all to your experience, it would be the position of the White race in the US, not in some hypothetical place where White privilege does not exist.

> I cannot believe someone is seriously arguing about white privilege

But you are the one who—preemptively, without provocation—raised the issue of white privilege. All I've done is pointed out that your preemptive defense completely fails to defend against the imagined future attack against which you deployed it.

> If people like you didnt make certain research topics forbidden

What people have made which research topic forbidden, and in what way are those people like me? You seem to be engaged in a feverish debate against positions you’ve only imagined exist.

> You dont even know my ethnicity

Nor do I care.

> you fucking racist.

What, precisely, have I said that is even remotely “racist”? All I've said is that your claim to have first-generation immigrant parents is not any kind of rebuttal to the accusations of white supremacy or privilege against whose imagined future occurence you offered it.

> And how deep do you want to go down this rabbit hole?

Not as deep as you've already gone on your own, thanks.

> Fuck you and your divisive politicking.

I'm not sure exactly how pointing out that your statement about your parentage was not even germane to the point you offered it for is “divisive politicking”, but, yeah, whatever.
Sure. The basic answer is that I use a good running backpack and it's easy for me to carry all that stuff. When I first started, I was sparring (boxing) in the morning before work, so I used a eagle creek overnight hiking pack. it was bulky but not too bad for a 3 mile run.

Once I stopped sparring in the morning, I switched to a Black Diamond Dart. Easy to run with, and ample room for all the stuff you mentioned.

I now use a super light pack, and only pack my lunch, pants/shirt/socks/underwear. I live in SF, and generally don't shower unless I get really sweaty. Some people find this gross in theory but I don't, people in NYC get sweaty as hell walking from the subway to work in the summer in their regular clothes, so I've never really seen the difference.

Two big things I do come to mind: I never take my laptop to/from work everyday. I also keep dress shoes at work under my desk.
Thats also what the evaluation of an ML model is for.
The problem is, Uber is lobbying for it's drivers to be exempt. Not lobbying for the regulation to be dropped altogether.

"To speak of this as 'about training' I think misses the point that this is entirely political: medallion owners want to keep the value of their medallions up, and have used a 'legal' and 'populist' angle to protect their medallion-oligarchy. That's what's going on."

I completely disagree. Uber right now has an advantage in that they don't require their drivers to undergo the training. Their competitors are required to. So I see absolutely nothing wrong with those competitors complaining that Uber gets an unfair advantage.

"And FYI - you don't need any training to open a store and offer a service - if people don't like the merchandise or quality of service they go elsewhere - that model works well. If people thought Uber was crap, they wouldn't use it."

A store is HUGELY different than a transportation service.
How to Make a Paper Airplane – Best Paper Airplane in the World
That makes sense. In this case I think it would be interesting to analyze the state space for the network protocol involved.
At CppCon2017 Google announced they're open-sourcing their core libraries Abseil
Introducing the Release of Roguelytics Ruby Gem
Introducing the release of Roguelytics Ruby Gem: https://rubygems.org/gems/roguelytics

Roguelytics is a real-time, on-page web analytics package for those who don’t have a PhD in Data Science.

For years, we’ve seen businesses and developers struggle to answer basic questions about the performance of their websites. At Rogue, we’ve emphasized structuring data and pages to gain meaningful business insights from opaque web data, particularly for startups looking to raise capital.

Now, we’ve spun off our proprietary analytics into a standalone platform called Roguelytics.

About the Platform:
•	Real-time on-page analytics – displayed as an expandable/collapsible drawer, providing actionable and insightful data at your fingertips.
•	No separate site or portal login required.
•	User-friendly simplifying data and tools that track, forecast, and interpret user behavior and activity – in REAL TIME!
•	Quickly make more accurate business decisions through clarified and simple metrics.
•	Fast and easy set up - simply drop two lines of code into your WordPress, WIX, SquareSpace, Rails and/or custom sites.

You can install manually or download our Ruby Gem here.

Sign up today at https://www.roguelytics.com/sign_up

To learn more, send us an email: contact@roguestudios.io. For developers interested in deeper integration: developers@roguestudios.io.
Yup: https://guide.meteor.com/security.html#allow-deny

I just submitted a PR to the main Meteor docs pointing there: https://github.com/meteor/docs/pull/164
Shopify launches new Partner Program 2.0 for freelancers and agencies
Google sends free location-tracking beacons to AdWords customers
Twitter coverage of the keynote: https://twitter.com/CppCon/status/912742896905863168
Engineering Restaurant Manager, Our UberEATS Analytics Dashboard
I don't really know what you mean by evaluation. But you need to be able to (faithfully) generate all the positions your system would take through time, and also to generate all the returns you would have made through time.

Aside from pure P&L, you should be looking at how much risk your system is taking, and under what conditions it's doing badly. All backtests are overfit: their use is mostly in identifying problems with your strategy, rather than predicting how much money you'll make.

One question you'd get asked if you were proposing this in a real trading environment is this: what is it about the QM emini contract that makes this work? Does it work for other energy contracts? For other commodities? For bonds, or equities? If not, why not?
Congratulations and thank you! It's not an easy choice to abandon self developed and very powerful Cattle orchestration in favor of k8s, but it was a right move!
Ok... how does that answer the question about why Uber should get away with not having their drivers go through the training, but their competitors are required to? Remember, Uber is only lobbying to have their drivers exempt, not for the training to be dropped for everyone.
Social engineering is responsible for in part or entirety many hacks. I'm not arguing that technical solutions will "fix everything". Technical stability is on aspect of secure systems.

The video is arguing: why should a doorbell have the ability to set your house on fire? (Metaphorically).

Heartbleed was an issue of exactly this

"The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software"

Architecturally, this should never have been possible.

http://www.pl-enthusiast.net/2014/07/01/how-did-heartbleed-r...

http://heartbleed.com/

Obviously attackers are going to look for the weakest point, but your agument sounds like "social engineering should happen, so don't bother locking your doors at all".
Smaller companies can quickly fare better than bigger ones, see Nintendo: http://quotes.wsj.com/NTDOY/financials
Moshe Hogeg's Sirin announces new $999 'Finney' smartphone (WTF?)
Pretty sure that will be good to have support for repetitive tasks, like every sunday or every 3rd day of month.

I know I know, I can use postpone to the same task, but I think that a "task generator" will be a good feature =)
This looks pretty cool!

What's the business model going to be? The ToU are quite far-reaching regarding user content: "By submitting User Content through the Services, you hereby do and shall grant us a worldwide, non-exclusive, perpetual, royalty-free, fully paid, sublicensable and transferable license to use, edit, modify, truncate, aggregate, reproduce, distribute, prepare derivative works of, display, perform, and otherwise fully exploit the User Content".

Also, are there other ways to browse, search, etc., the highlights in addition to the daily email?
'neoliberal' is not directly related to 'liberal' (in the sense that, in the US, 'liberal' basically refers to democrats). many of both republicans and democrats can be considered neoliberal.

neoliberalism is notionally centered on things like free markets, globalization, free-trade, privatization, deregulation, etc. and can be seen as a sort of pro-business or pro-corporate philosophy.

i'd say 'conservative' is really a question of preferring the status-quo, or perhaps traditionalism. consider that 'conservative' can imply potentially very different views if you contrast US and EU conservatives (or elsewhere). a conservative is better contrasted with a 'progressive' who enthusiastically seeks (perceived) beneficial changes to the status-quo or traditions.
I don't really understand why this is an improvement on the existing architecture.

In the current contact discovery implementation you need to fully trust the server, namely the open source component that is the contact discovery service.

In this proposed new implementation, you still have to trust the server; you need to trust closed source processor hardware offering the Software Guard Extensions.

Those extensions need necessarily be kept away from user control, because otherwise you could pretend to attest a particular program, while actually running a different program. So this encourages a centralization of trust into a private key managed by processor manufacturers, which with server hardware is primarily Intel.

(note that you fully need to trust the processor hardware in both cases; I'm only arguing that this scheme possibly isn't an improvement)

Could anyone shed some light onto why this is an improvement, assuming you don't trust the CPU manufacturer? This is kind of the premise of the article, which notes that "more fundamentally for us, we simply don’t want people to have to trust us", "that’s not what privacy is about".
I'm not sure what the specifics would be, but it would very likely be related to the emails that contained ongoing FBI investigations. (Which, for the record, is deleted and unshared.)
A very common pattern that's been found vulnerable. Glad to see it mentioned here.

To the larger point: It's great to see that people are still taking Meteor seriously (there are dozens of us! dozens!). If you're willing to use Mongo - which is VERY flexible if you use it as a materialized view that's fed by other processes, rather than the canonical source of CRUD data - then there's still no better way in 2017 than Meteor/React to prototype a real-time interface whose infrastructure you control. Almost all the code is regular old React, and there's minimal impedance mismatch moving from Meteor HOCs that grab a nested Mongo object, to HOCs that grab a nested object from GraphQL/Apollo allowing you to use other databases.
Something that takes into account those things I said, and allows tipping. If you don't want to tip, that's fine, but disallowing those people from making that extra income is just wrong.
More like a sigh of relief.
Agreed. Microsoft Azure Portal is taking up 934 MB, Gmail is 502 MB, Pocket is 309 Mb. Google Keep takes 180 Mb or so.
True but Haskell's type declarations let you skip reading the actual implementations. You can skim through the type declarations only and know what it does, and that it won't compile if the implementations don't do exactly what the type declarations do. Saves a few brain cycles.
Since RN is using 16 for a while now, they already did, or am I wrong?
It is a feature of privacy that he cannot login without you giving that information.

You need to change it now.
Novice American cyclist here: what makes a set of gears "good" for usage in Swiss cities?
When I think of SEO, I think of doing a lot of the work you just described. Performance optimization, responsiveness, and especially content are things that SEOs advise on or even do the work directly. You even mention SEO activities of value such as reaching out to trustworthy sites for promotion, or using webmaster tools. These are the exact things that SEOs do - either you've had a bad experience or you're just misinformed. And to say that anyone could do this for stuff is moot - anyone can do anything if they have the time to learn and desire to do it. Most clients have neither when it comes to SEO.
Get ahold of random sounds, then mix them together in Audacity. Apply effects. Reverse them in time. Also, there is: bfxr / sfxr

http://www.bfxr.net/
This is great. I would love to see the source for this. Would you consider posting it?
Are there any plans to have Firefox throttle background tabs? This is one feature from Chrome that is currently stopping me from switching. It's very useful for laptops with lots of open tabs. The current rate of progress is definitely impressive though.
Thank you. I think I'll just submit it tomorrow. I just need to come up with very long password which I don't forget :)
This idea that "truth" and "facts" was ever a profitable business comes from a very naive place. With the exception of encyclopedias (and even then...), newspapers (owned by robber barons since day one, and then later mega-corps), text books (read "lies my teacher told me") etc have always been about profit.

Newspapers historically were not driven by facts but by classified ads and cartoons.

TV, even in its golden age, was always about advertisement. And as much as we pine for the days of Walter Cronkite etc, the truth perpetuated in media has always skewed white (fear of the minorities), status quo (fear of a revolution), and capitalist (fear of commies).

Tweet storms and pontifications like these are grand standing but devoid of any real grounded perspective. Just because you're 40 now, and realizing that there's a bunch of bad shit that you don't have control over (and maybe even contributed to) doesn't mean that "tech" or "media" has "gone away from truth."
Vulkan should help with mobile battery life though.
The point is nothing in her resume shows she has any experience in the field.

While I don't expect an exec to be at the same level as current researchers, they should know something about the field.

Her music degree is not completely relevant, tho it is concerning. The rest of her resume (and total lack of relevant experience) is more damning.

Look, I personally know someone who's a C level in a tech company, with a political science degree. But his resume shows 15 years of full-time employment in his current field, plus summer jobs in university, and going back to high school. So with 20 years of experience in the field, his degree doesn't matter so much.

Your counter position seems to say that execs can manage a division while knowing nothing about what the division does. There's just no way that's true. The exec must know something in order to be able to prioritize projects, set goals, mediate disagreements, etc.

Or would you say that someone who has no education in a field, and no experience in a field, is qualified to be an executive-level manager for that field?

That's just hard to believe.
this is very interesting..
Ask HN: Is namecheap.com selling my data?
I just bought a domain name. Today alone, I have received 9 (NINE!!!) robocalls, 3 text messages, & 2 emails offering everything from logo creation to website design, to SEO services. Yesterday I received none.

What's going on? Is namecheap.com selling my data (the same way that water companies used to sell a list of "new connections" to churches and salesmen)? Is someone watching for changes in the DNS entries? My domain name is obscure and not in use yet, so I don't know how anyone would even know to look for it.

Is there something about the technology & workflow that I don't know yet?

Obviously, I know that my info is in the DNS entries, even on a parked page (and I refuse to pay for "private listings" on principle), but how do these leaches know about it in the first place?
Epic takedown brah.
No, it shouldn't. If the junction is marked as a stop, all users should stop. If you have a low traffic junction like that, then the stop sign Shouldn't be there. But that's a different argument to allowing vehicles/bikes to blow a stop sign.
Payment Software to Accept Customer Payments by Phone, Text or Web
> Perhaps Intel is banking on the Z370 chipsets being the Intel equivalent of AMD's AM4 -- a chipset that sees support until the introduction of DDR5 memory.

Hah, you wish. It's already been leaked [1] that next year's 8 core desktop CPUs will require a yet another chipset - the Z390.

[1] https://www.custompcreview.com/news/intel-chipset-roadmap-re...
Microsoft refreshes Azure Logo
Removing FUD to sleep better.
Tracing High Volume Services
Your future cloud is hybrid, and so is Azure
Mobile-Deep-learning – Mobile Deep Learning Framework by Baidu
I run a very small (1 node) Kubernetes cluster for my projects, and I was looking into Rancher when I was setting it up. At first I chose to go with just Kubernetes to make sure I understood the concepts. I've written about my adventures with kubernetes here on my blog (https://vadosware.io/post/fresh-dedicated-server-to-single-n...), and am in the middle of a ton of posts about what I did when I started using Kubernetes.

I just watched the demo, but I wasn't quite sure how Rancher would deal with specifying Kubernetes Ingresses and Kubernetes Deployments/Pods -- I assume they map the DNS tab and "stacks". Also, I see that you can upload a docker compose file, but I have quite a few kubernetes resource configurations that I'm using for everything right now, I assume you can just as easily upload a resource config? (from somewhere like the stack creation page/menu?)

I have an already running kubernetes cluster and I'm going to give Rancher a go tomorrow, if it's as easy as the demo has made it seem I'm going to be very pleased.
Well, search engine can rank high-quality facts higher and low-quality facts lower. It's rather intractable in general, but Google Scholar is one approximation, I think mostly using citation.