skysight-inc/HackerNews huggingface dataset:
Can you suggest a good password manager?

Ideally, I'd really like something that's deterministic - ie, I can provide a seed, and then that seed plus the domain name becomes the basis for the password.

That way, it's trivial to recover passwords when sitting at a new computer. And I imagine if the seed is sufficiently long (say, a 10-word sentence that includes 2 or 3 non-dictionary words) then it'd be highly impractical to force.

Right?
That kind of falls apart in this context because a set of mysterious unreachable AIs bearing gifts are a de facto foreign nation and would be treated appropriately.
Slack has an 'online indicator' and even AIM-style away messages.
That's a fair point.

In practicality, I don't see a need for this .txt file to be present. There are other .txt files, such as humans.txt, that don't have widespread adoption, due to lack of generated value.

While there are many issues inherent in reporting vulnerabilities, this .txt file will not solve them. Not only is the file's existence error-prone from a maintenance perspective, but my experience has shown me that such a file is not needed.

Due to these factors, I believe that the existence of such a file is unwarranted complexity without a corresponding level of benefit.
It sucks that you have to deal with this (I've been there) but I appreciate the added detail. Along with a few other stories I've heard, this has me leery of upgrading to High Sierra in the near future (although my MBP doesn't really have anything of importance on it).

Good luck, hopefully you can get everything back in order before the weekend is over.
Ironically, https://www.theguardian.com/commentisfree/2017/oct/05/matt-l...

The comedians themselves are contradicting you.

Re-watch many comedians from the 80s and 90s and they're just being close-minded rather than actually being funny.

The worst I remember was when in the office we'd all call each other gay for silly things. "You not coming out tonight drinking? Are you gay?".

Then we hired a homosexual.

For months we still all made 'gay' jokes. He said he didn't mind. They would just slip out, that's how we talked to each other. "ah man, who would write a function like that? It's so gay!".

I still feel ashamed today thinking back on actually how hostile that workplace actually was to him. Even if he really didn't care, we were still basically constantly saying Gay Is Wrong. We were idiots. We were wrong.

It's not being sensitive, it's simply being close-minded.
Main Ceme Keliling Judi Online – Ceme Terbaik – Dominoqq81
Man, that's like trying to move to a state that has less nitrogen in its atmosphere. Rent-seekers are everywhere. If you go anywhere they currently are not, they will follow the scent of your wallet to wherever you end up.
> Maybe any entity significantly smarter than a human being would be crippled by existential despair

This was addressed in a Spider-Man story where a villain enhances his intelligence, then first becomes a very successful crime boss, then writes novels and music, and then falls into existential despair.

https://en.wikipedia.org/wiki/Flowers_for_Rhino
I personally think that more-or-less sentient AIs appearing eventually (on a long enough timescale) is likely, but the idea of some endless ability to self-upgrade (beyond simply buying more RAM and processors like the rest of us) is extremely unlikely.
The 2nd amendment is worthless without the 1st, 4th, 5th and 6th, 7th and 8th.
Again, HN, please explain to me why “This.” was downvoted here.

Why is it wrong for somome to acknowledge and undersore what somone else says?

It’s the kind of thing that happens in real world conversation and we don’t rebuke people for agreeing and underscoring what somone else says in that context so why do it here?

I’m genuinely curious.
wow, had to come here and figure out what the last part of this comment is (being read aloud) was like "what is up with this long delay between numbers/underscore) hmm
If the muon is 400x more massive, then is there not a f(400x) error rate, which has to be imputed to the radius of the proton, influenced by the significantly larger mass being made to act as an electron in orbit around it?

Radius being understood to be somewhat metaphorical here.
Exactly, do people even engage in critical thought or is all their thinking done for them via identity politics and media.
Someone please build this if it doesn't exist already!
Except this all but negates the benefits of a password manager. Now if someone steals your master password, they can generate every single password you use.

Use something like Keepass / KeepassXC. Yes, it's somewhat less convenient, but remember that security and convenience are always a trade-off.
Common Lisp: An Interactive Approach [pdf]
I actually remember the (impossible!) age test a lot more than I remember the gameplay, though I think my friend and I played it quite a bit on his dad's 3-foot-tall 486 tower. I think we were ~5th grade at the time. We also kept a list of correct age test answers.
default port speed was 100Mbps as of 10 months ago
How Ta-Nehisi Coates Gives Whiteness Power
If it's deterministic then anyone who gets your seed has all your passwords.
It adds nothing and wastes space. If you agree, just upvote.
At the risk of increasing an unnecessary thread, the parent comment adds nothing to the discussion and the upvote exists for this purpose.
You can do the equivalent lines with:

ddp

dd deletes a line and p pastes the deleted line below the current line. Since your cursor ends up in the line after the line you just deleted, this ends up effectively exchanging the lines.
The difference is that environmental protection evangelists never literally just reinvented Pascal's wager except with an all-powerful AI instead.

https://rationalwiki.org/wiki/Roko's_basilisk
icq... 6 digits
Simplifying Boolean Expressions and Conditionals
From the philosophical point of view, we cannot avoid these security breaches in the digital world. We need to leap forward to analog or quantum computing to leak proof our information.

I wonder if there will be any information private by then.
Check out his YouTube channel, he explains things quite often: https://www.youtube.com/channel/UCD6MWz4A61JaeGrvyoYl-rQ

And many blog posts explains what how he does it: https://www.troyhunt.com/

Pretty sure this is the one he mentioned in his video today as having been given to him by someone else.
I've tried Developer's Edition, but gave up when I saw that Vimperator would not work on it.
"... And then the child proceeded to give the man a hand job"

Welcome to 15 years in jail.

Oh is that unreasonable? Thought crime 101.
I don't understand this question. Why would the muon's mass change the error rate?
React, Inline Functions, and Performance
They don't mention countersignaling:
https://en.wikipedia.org/wiki/Countersignaling
So we can participate in Swiss-style militias in defense of our country?
> Except this all but negates the benefits of a password manager.

It preserves the main benefit: that I no longer need to remember a separate password for each domain in order to stop sharing passwords across them.

> Now if someone steals your master password, they can generate every single password you use.

So it's just a matter of keeping the seed in the user's head and nowhere else. Right?

That doesn't seem to be any more serious a security challenge than keeping secure an encrypted datastore full of passwords.
I agree with your point, that a certain level of social skills is a must, although in my experience, when people start competing over making the best impression, many choices that improve it would be disadvantageous when it comes to execution.

The simplest example I could think of is typically being relaxed and simply agreeing with everything that your opponent says gives better surface impression than being focused on understanding your opponent and actually trying to defend your point (the classical salesperson vs engineer case). Except that approach would deadlock your execution, but nonetheless I see many people successfully using it to gain one's trust and get preferred over someone who pushed back too much.
But it's the same in any case, right? It's always, "if an attacker gets your <x>, they have all of your passwords."

The question is: are they any more likely to gain a seed that I keep only in my head vs. a list of passwords in an encrypted datastore?
Aren't there employees at facebook and NSA and the like who have to spend all day looking at material that might be child pornography to verify it is indeed such? Do they have to get special clearance or something so it's guaranteed they'll never be prosecuted for it?
My first computer science lecture in 1979 was on digital convergence and my lecturer said there, it was actually to all intents and purposes already over, we were just living through a long tail transition. He put it back to 1962 and telstar, although doubtless you could push back further.

So if you want to say Jobs was 'visionary' in '85, remember he had 6 years of lead time, if all he did was pay attention to what was being said in academia about ubiquitous networks.

The mouse was demo'd in 1968 at the mother by Engelbart. So Again, Jobs was really just doing a good sell job on something we had pretty deep long insight into.

Respect is due, but lets temper it. Standing on the shoulders of giants is for physics. In computer science we stand on each others toes..
Will the reciprocal license be GPL-compatible? That's my biggest issue with licenses like these - they effectively lock out a big chunk of the FOSS ecosystem.
Here's a question: how can an AI tell whether you liked the game it made? You can't just measure engagement: you'll end up with something addictive, but not necessarily something you'd enjoy playing long-term. Asking the person directly might work, but it's easy for people to lie if there's anything actually at stake (e.g., the tactical way some Steam users give low ratings to "punish" developers).

Here's another question: what distinguishes an AI optimizing engagement from a corporation optimizing engagement? Doesn't Facebook already embody an engagement-optimizing process?
It seems that you might not need a good password manager for this type of scenario. Password manager for me is the one that stores unique passwords for each login. I don't know the majority of my passowrds
looks solid, but seems to lack a few features I would want in a modern C replacement: if-expressions, tagged unions, immutability by default.
Well, I agree that I got a bit off-topic. The general analogy is still there but you're right about the details.

That being said, the author handled the problem you outlined with the simple premise of -- that humanity wouldn't be able to even survive as a whole if it delayed the decision how to treat the AI nation.

Without giving spoilers, the fledgling AI nation planned and executed things so well that humanity either had to embrace them and let its core be governed by black-box (and backdoored) tech like teleporters and miniscule personal assistants, or face literal extinction. Needless to say, the humans made a Faustian deal.

Co-evolution of species with wildly different values is the core of the conflict in these books, and even as a fanboy I dare saying it has great value outside of a sci-fi / space opera book.
For a long time people didn't care because they thought it couldn't happen or wouldn't affect them but I'm optimistic that people are learning, albeit slowly.
>Eddie was never mainstream

Oh please. I had a "Raw" poster on my closet door I got from the video rental place in Portsmouth, Rhode Island in the '80s. He was pretty mainstream at that point. It's hard to tease apart the fact some of "Delirious" is about how crappy he was as a comedian at the start because he just made poop jokes vs. him talking about Mr. T rodgering people.
So, ya, isn't this post about making terrorism illegal? I feel like we've come full circle at this post.
"Capitalism"
It's just a default nginx page.
Hi yes! They are available for Mac OS High Sierra from release 0.03 onwards

Working on others too!
Not really, he was talking about Amazon's solution.
The prize went to Roshbash. I knew a Rasbash at university. Doubtless different people, but is this name a shared root in some distant migration?
That is very serious punishment for just watching the videos. Does it mean that government cannot cope with growing terrorist activity and wants to make it easier to put people they don't like to jail without having to prove that they were actually planning something or otherwise related to terrorism?
Now that you mention it, it's also in my left pocket.
Because they're more comfortable with it
What if you need to update the password of one of the sites (e. g. this disqus breach) ? What if the domain name changes?
because the imputed 'radius' of the proton in normal matter is a function of its interactions with electrons in orbit and its own properties. If you replace an electron with a Muon which orbits but is 400x more massive, then some element of distortion has to come into play. Its radii is now a function of its innate properties and an orbiting body 400x more massive than normal.

Therefore, I posit (plausibly wrongly btw, I am not a physicist)_ that there is some measurement inaccuracy which stems from this, which is a function of this 400x size difference.
IIRC Someone has before, either here or reddit but it was terribly implemented.

Use LastPass, 1Password, or KeePass.
Pinpointing Racial Discrimination by Government Officials
The reason he overpowers her is because she's a thing, not a person. Deckard doesn't kill replicants, he retires them.

The guilt, along with his confrontation with the other Nexuses and the (ambiguous) realization he's the one doing the dangerous work because he too is not a person, is what changes him.
Except you won't keep it only in your head: you'll be typing it into a computer at some point. Really, in either case, you should also be using token-based 2FA as well.
I love SRV records but they are really just TXT with an API! PTR is A in a weirdly named domain ...

SNI avoidance is a weird one and you are probably right but SNI is only important (hah!) if you consider that we should all be using IPv6 by now and have billions of address per host to play with 8)

The rest of the world gets uptight about TLDs but there is one - relating to ENUM - that no one seems to mention and get upset about. If they did, instead of crapping on about whether Brazil or a US company owned "amazon" for example, then I'll give you (nearly) free telephone calls and a load of big Telcos will implode. Except they wont and the world will move on to the next logical step where all internet connections are no longer considered a sub-function of a telephone connection and the notion of a "leased line" is an anomaly.

Whoops, got carried away there. As you say - SRV should get more love.
I feel it necessary to point out that the proton is only an aggregate of three other particles on average. It's three quarks, plus several gluons mediating interactions between the quarks, and lots of virtual quark-antiquark pairs.
If you're just starting, here's some guidance on setting up a password manager.

First of all: Don't be afraid of using one. It's not just more secure, it's super convenient. Never again will you ask yourself: Did I make an account for this website/service? What email did I use? Never again will you have to remember a password. Using a password manager is a quality of life improvement.

KeepassXC is what I recommend to people at this point. It's free and you own your data (your passwords). They live wherever you want them to live. There are plenty of online services that are supposedly more convenient but I have to say I trust them less -- YMMV (1Password is the best I'm aware of).

https://keepassxc.org

If you do use keepassxc, you get the added benefit of being able to store 2FA settings in it as well (if you store them in the same database as your passwords, be aware that you lose the security benefit of a second factor, however it is still more secure than not having 2FA enabled due to the One-time password component).

Put every account you ever made and ever make into keepass. Enable 2fa wherever you don't have it enabled. Add login URLs and notes. Generate your passwords from keepass itself; the password generator is really powerful and lets you very easily deal with site-specific shitty password limitations. I'm telling you this because, seriously, it's incredibly convenient to have this stuff as long as you're rigorous about maintaining it.

Oh, also, keepass has the full history of all your passwords. Need to look up an old password? Go into details and look at "History". You can also attach files to items (items don't have to be accounts at all, you can use keepassxc as a simple encrypted storage db).

Mobile support: Keepass2Android. Best android client, with google drive support. iOS I have no idea, suggestions welcome.

IMPORTANT: BE STUPIDLY PARANOID AND RIGOROUSLY CAREFUL ABOUT YOUR MASTER PASSWORD. That thing, together with your keepass database, unlocks all your accounts ever. Use a really long passphrase that you will never have to write down (if you do decide to write it down because you don't trust yourself, store it in a safety deposit box, don't put it in a bloody drawer). Make sure the device you unlock the database on is malware-free.

PS: Wondering what's up with Keepass vs. KeepassX vs. KeepassXC? Keepass is the original app, written in .NET but with poor multi-platform support. KeepassX is a rewrite in Qt and is a fantastic password manager, but has gone unmaintained recently. The open source community picked up the slack in the KeepassXC fork (after continuing countless attempts to upstream the patches) and has implemented lots of powerful features. I've switched to it and at this point I strongly believe it's the better client.
Consistency would be nice. I'll even give you a stronger word for it: integrity.

But you didn't ask for consistency. You asked for one specific thing. Why that one thing rather than something else? Why not something more general?

It sounds like you don't just want him to be consistent. It sounds like you want him to grind the axe that you want him to grind, or else like you want to discredit him while he's grinding the axe that he wants to grind. And it sounds like you want to hide that behind asking for consistency, which is a really dishonest and cheap rhetorical trick.

Now, it's possible that I'm misreading what you're trying to do. But you sure come across that way, at least to me.
I don't think Hall "needs to be told" anything.

The people who lost out here aren't Hall and the academics who can't get funding. Hall is doing fine in the private sector. The people who lose in this situation are the public, who no longer own the research output, and who no longer benefit from the long-term gains made by primary research.

We should create, for ourselves, a sustainable research economy. We've failed to do that. Are you suggesting it's impossible because you think "reality isn't fair" or "people suck"? I don't think the latter entails the former.
Sorry. Replied to the wrong comment.
> It’s the kind of thing that happens in real world conversation

HN isn't real world conversation. These link comment threads do not function at all like conversations in the real world.

And if they did.... Where in the real world would you walk into a physical space, in which a crowd of 187 people are gathered to read and discuss an article (or broadly a topic), and then pull out a bullhorn and declare one word: "this" and then walk back out the door? Your premise doesn't make sense.
...and another relatively compact and simple binary protocol dies, displaced by the bloated Web-biased XML/HTML/etc. protocols.

At least IRC is still around...
The problem with the seed-only approach is you have to remember the password policy of every website, at the time you registered, in order to regenerate the password used.
I didn't know actually, so thanks. Let's hope my toread list dissolves fast enough :)
I've just started to enjoy IPAs. I used to drink only dark beer. Like what you like, drink the one you like at the time.
There is a significant difference between HN and real life; in real life, there are both a limited number of participants, and you are more likely to be interested in what each participant thinks. But consider a very large group, like hundreds of people, in a room. One person gets their turn to speak, and merely says "I agree with the previous speaker" and leaves the podium. Did this unknown person contribute meaningfully to the debate, or did they just senselessly waste everybody’s time? It’s obviously the latter, and it’s the same here on HN; nobody knows who you are, and merely agreeing or disagreeing without backing it up with arguments is a waste of everybody’s time.
A better argument against deterministic password generators than the current replies to your post is that if you have to change your password on a given site - due to password expiration, ‘forgot password’, security breaches, etc. - you have to change the seed, and remember which seed you’re using for which site.

There are some others:

https://tonyarcieri.com/4-fatal-flaws-in-deterministic-passw...

But if you want to use one anyway, that blog post links to a bunch of them.
Right now there isn’t any evidence of unauthorized logins occurring in relation to this. No plain text passwords were exposed, but it is possible for this data to be decrypted (even if unlikely)

Where by "unlikely" we mean "with almost complete certainty".
Bingo. There were a whole lot of informed people running around Apple. Jobs and his like have a knack of picking up ideas, and then spin round and present them as their own without ever giving a hit of attribution.
OK, so a surreptitious keylogger still defeats this config. I'm OK with that. My entire life presumes trust from my keyboard to my computer.

I mean, if that were my main concerns, I'd have to rethink most of the bedrock security precautions I take, like passphrases for private SSH keys, etc.

At the end of the day: I understand the risks and view them as absolutely acceptable in order to gain reasonable portability in a password manager.
I agree. in substance, this is what the '84 RAND study said about imputed meaning in emails and flame wars. But, that said, there is a very definite trend in written discourse online about the poor: that trend is, to say they are only to blame themselves. We see it in 'fat people with diabetes who are poor caused it themselves' or 'if you stopped smoking you'd be healthier and richer' -both are true, but both are narrow, and un-empathetic statements. SO, I make a generalization which is perfectly capable of being wrong, but none the less I make it: the lack of visible empathy from people who make single-issue statements of 'self blame' for poor people, very probably implies a lack empathy. [edited]
It is in fact not significantly better, for this purpose, than MD5.
In the case of a password manager they would need the database and the master password. In the deterministic case they only need the seed.
To Recovery, a Brighter 2018, and Applying to Law School
Lunar volcanism produced a transient atmosphere around the ancient Moon
It's not just your passwords of course but also email and sometimes phone and credit cards you have potentially stored at sites as well.
We also have virus botnets
Succinctly summarises the modus-operandi of the UK Home Office's policymaking: Reactionary and fear-driven, where "fear" is defined as the current black-top newspaper headlines.
Depends on how much one read into the whole "merging" thing.

Hindsight is 20/20 as they say...
That’s a very good answer to a genuine question, thanks!
A lot of those are things we've fixed since we published that app. We're just not very good about publishing updates to the play store. I'll see if we can get an update out soon.