skysight-inc/HackerNews huggingface dataset:
I wrote a simple python program a while ago where it takes my master pw, domain of the site, and an answer to a personal question to create my password for a given site using a custom cypher.

Has actually worked really well for me, though the annoying part comes when you need to login to something on your phone and the cypher program is on your desktop PC.

Though this likely wouldn't be an issue if I had an android phone and could easily make a small application for it.
Yes, love is sacrifice, that's my point.
> Expecting a club administrator to be able to drop a uniqueness key from their database in order to resolve this situation is not a reasonable solution!

Especially since if you have any FK relationships, and that was the only candidate key for the members relation (and why have such a bad key if it's not the only one), you then need to add new attributes to create a new key, populate it to all existing roles, change all existing FK relationships and associated queries, on top of the easy part, which is dropping the old unique constraint.
I seriously need a browser extension to not render "characters" in color. How the hell did this happen anyway?
https://a16z.com/2014/09/05/why-amazon-has-no-profits-and-wh...
For #2, the "if len(a) == 0" clause is totally non-sense.

I hope Go supports "append(nil, data[:2]...)", which will make code much cleaner.
As always, people think their sphere of influence is larger than it actually is. Even for tech.

Social problems are not caused by tech, so tech might not be able to solve them.

Head out into the poorer parts of SF and the surrounding area, and see how very little is shared in common with SF other than geography.
Fit Text seems to work, thanks!
Could this be possibly fixed with a microcode update in the future (at least for most recent models for which Intel is still bound to some kind of warranty)?
You might not be advocating for those policies but it's disingenuous to use them as arguments for why the war on drugs was not a real war.

The United States could have won the Vietnam War overnight by dropping nuclear bombs over every inch of Indochina and then repopulating it with new citizens. Just because the United States didn't do the "obvious" solution to win a war doesn't mean the Vietnam War wasn't real.

Waging and winning war has little to do with all out tactics. It's funny because the brains behind the American Vietnam War did almost everything SHORT of dropping nuclear bombs on indochina and still failed. Proof that hearts and minds often matter more than threats of violence.
Trust me you'll come across examples like this one day if you make a concerted effort to automate a test for every story. It's a rough guess but I'd say I don't automate 1 out of 20 stories - I'm not exactly blithely unaware of the benefits an automated test suite brings.

Most of the examples that require "days" (or weeks) for the test and 5 minutes for the test would involve the building or amending an elaborate mock/stub.

Some examples where this happens include rare interactions with weird hardware, odd legacy APIs that are scheduled to be replaced, race conditions and obscure edge cases with mocked services.

I document all of these special cases and they should clearly remain special but I'm not going to blindly assume that automating the story will have a positive ROI.
I use a formula that I can figure out in my head and I just remeber that. I don’t know any of my passwords, but I can figure out my password when I need it.

It has problems on sites that have shitty password rules. But for those sites, i just mash the keyboard then rely on the forgotten password link.
And then what? Do you bus them back to the city to panhandle on weekends or are they just supposed to stay in their new cheap and isolated housing twiddling their thumbs? Will you bring them snacks?
15-Year-Old Apple MacOS 0-Day Kernel Flaw Disclosed
I use a small truecrypt file containing text files with passwords generated randomly which is available online on some of my servers. Not perfectly secure nor the best ease of use but good enough for me and not using a third party.

Note: as TC has been discontinued, using VeraCrypt would be a good idea.
in addition, each had an separate graphics api. Which was imperative, not as stable nor backward compatible nor as battlefield-tested as html. Each keyword is a difference
between all previous approaches versus html. And sometimes/often regarded as better.

Every programmer knows html though not the frameworks. But these are seperate.
There are two things this article could point out:

The difference between centralized, distributed and decentralized primary keys.

And how public/private key encryption should be a natural part of every primary key.

The problem is all SQL databases uses sync clients which make them completely useless in any distributed or decentralized setting.

The real tension here is that there is no guarantee that a large UUIDs are unique, and we have not embraced the random occurrence of a collision.
Ask HN: Where to start with computer vision for sumo robot competition?
I'm going to create autonomous robot for sumo robot competition. Main goal of the robot is to stay within the circular playing field while pushing the other robot out. Cameras will be the only input of the robot.

I have completely zero knowledge about computer vision and about processing data from camera.

Could you please point me to some materials explaining how to process video data so robot will be able to find out its position within the playing field? Also how to recognize other objects and their movement?
The "smart" in "smart quotes" mean that they hurt, not that they're intelligent.
It's from the August 1989 edition of Byte magazine, which has some more articles about neural networks: https://archive.org/stream/byte-magazine-1989-08/1989_08_BYT...
I’ve done webrtc “servers” (in C, not some nodejs bindings for the chromium implementation) and webrtc P2P. It really is “good enough” for a lot of things.

But not game developers, who are used to dealing with a very forgiving environment that will let them do stupid things quickly.

I have watched game developers in earnest busy wait a network thread “for speed reasons” but also derive approximate linear solutions to nonlinear problems using overflow, wraparound, and so on.

Some of the dumbest guys I’ve ever met doing some of the cleverest things, or the smartest guys showing off just how dumb sleep deprivation makes you. I’ve never been quite sure.

Games are beautiful. Game developers are beautiful. Game code almost never is.[1]

Joining a new game dev team you think this is going to be it, finally some clean code the way the masters do it, but then it isn’t.

That is to say: Games aren’t how to do software development, but proof of how far you can get by doing software development wrong.

I have thought about packaging my webrtc “server” as a library and selling it to game dev shops, but I don’t think the professional browser market is there yet.

[1]: I’m aware of a small number of examples to the contrary, but there are many more counter examples.
"when ibuprofen+paracetamol is just as effective"

Liver says no.
dashlane is interesting as i has a one button password regeneration that logs into sites uses the change password functionality for you.
The METAL (proposed by Gary Bernhardt) is not about running in CPU, but running all software in byte code and render native code obsolete, by implementing software process isolation and save the overhead of syscalls, memory mapping and protection rings.
Got it. So if you were given the job to fix US unemployment of 6.6 million(likely more since this is just reported numbers), you would begin by focusing on the 1% bucket and then continue to refine the solution within that bucket.
The big difference is that the "Browser VM" has well defined permissions to access resources on the host machine. Just like phone OSes do today. Bluetooth API, Files API, Location API, etc.
How would one produce low gravity on earth?
Drug and alcohol.dependency are the things you need to worry about, not mental illness.

http://research.bmh.manchester.ac.uk/cmhs/research/centrefor...

Page 5:

> xx. In all four UK countries, most patients convicted of homicide also have a history of alcohol or drug misuse, between 88% in England and 100% in N Ireland. In other words it is unusual for mental health patients to commit homicide unless there is a coexisting problem of substance misuse.
I was prescribed buproprion to help me quit tobacco. It was extremely effective. I don't think the reduction in aniexty was the main driver though. In my experience, I physically felt sick every time I tried to smoke. It was a really unpleasant experience, but it helped immensely.
Workarounds for shitty EA game engines?
Vertical onboarding in UX is overrated
The disk is encrypted when it is asleep. The key to decrypt its content is available to the OS after it wakes up, but if you don’t know the account password, you can’t log in to access it.

What exploits am I missing?
How is this a tough one? What I mean by that is that any marketing & comms person worth their salt would have prevented this employee from ever making this statement in the first place.
I agree a lot with your comment. But it should also be noted that users have very little choice on what code they run when surfing the web. So in one way, browsers cause the problem they then have to solve.
So we could finally port windows93(.net) to C++?
1. Ableton is a great DAW with a long history used by many well-known producers. They can and deserve to charge more than 15 bucks. It's laughable to think that anything other than a todo app would cost so little.

2. It's not $750, there are multiple editions available, the more expensive ones include more plugins, instruments, loops, etc.

3. Cloud-based startups are nice until they reach the end of their wonderful journey, sell out and you're out of a tool.

Soundtrap is charging $15 because that's what it's worth. Although if the cloud is mandatory it's worth zero in my opinion.
Start your dropship clothing business today
Do you want to start your dropship clothing business today? My Online Fashion Store carries huge selection in wholesale clothes and can provide you at lowest price to start your dropship business. More details at: https://www.myonlinefashionstore.com/pages/dropship-clothing
Ember 2.18 and 3.0 Beta Released
I believe putting all your eggs in a single basket isn't typically regarded as the most safe approach.

Though typically your machine gets compromised and doesn't really matter if you type something from memory or copy paste it from a password manager, you are screwed. A proper way to restore your access that only you can do seems more safe. A password or login can be compromised, but as long as you have a way to regain (sole) access to your account, I think that is more valuable.
"Other problems with the latest driver included glitching, flickering, screen going blank for several seconds, radeon settings manager crashing, relive failing to load, severe drops in fps..."
The design for #1 is good and consistent. There are not reference values in Go. All assignments in Go are value copies.

BTW, in fact, the ", _" in the author's code can be omitted.

for idx := range zoo {
zoo[idx].legs = 999
}
> The thing about the “War on Drugs” is it has never been a real war,

Like the “War on Poverty”, the “War on Drugs” was using a popular metaphor in domestic policy, it wasn't intended to refer to a literal war (though, in fact, there have been real literal wars—international armed conflicts—tied into that domestic policy.)
This seems like one of the simpler solutions on here, what's your process of dealing with sites that require special characters etc?
It looks like a well built product. Its just there should be more products and alternatives in every niche.

I'd personally like to see a simpler version that offers a free plan too which students can use. Just like how many B2B and developer targeted SaaS apps offer a free plan that has some limitations but help people to get started.

Students globally are not documenting their code, projects and startups because there is no simple and more importantly free/cheap alternative that they are aware of.

Readme.io is pricey and is simply beyond the reach of students and developers of developing/underdeveloped countries.

Their is no Readme.io like SaaS app for small and budget-sensitive projects as far as I know.
> I think my list of password would not be the main target of an attack.

I used to have a little notebook with everything, tucked 'securely' out of the way. I mean, even in a robbery somebody isn't going to rifle through some junk on a shelf right? I came to think though, that in that situation of course a list of passwords is not the target but if the robber has a small amount of technical knowledge (getting more likely, these days) then the risk is that they recognize the value of something like a book of passwords and just take it along. All of a sudden, their technology aware friend has access to my bank account!

So, I use Keepass now with a long passphrase, and syncthing keeps copies of the database distributed across several devices in several locations for me and I have access from all the various operating systems that I use. I am thinking about giving the passphrase to a friend also, as I have known him for 30+ years but I do not work with him or live near him and see him only yearly or less.
4 books to kick start 2018
There is too much Bill Walton in that review. We have an X and it isn’t life changing.
I have a folder with encrypted text files containing a password for each service. It is available locally and backed up to the cloud (with another layer of encryption). The key is in my head, no backup.

A script lists all files through fzf[1] which lets me find and select the right one very quickly, then copy to clipboard (expires after a few s). In a laptop the whole process of switching to terminal and grabbing a password takes a couple seconds, slightly longer on an ipad due to app switching.

Downside: no access via mobile (though I could have).

[1] https://github.com/junegunn/fzf/
What is software testing and how do we run it
At which point you have an OS... except adding the word ‘webassembly’ somehow imbues it with properties OS’s don’t already because somehow web assembly compiles to assembly with extra security with no performance reduction.
> Because most of the time, it reduces "test precision". Which means when such a test detects an issue, there's now a bigger area of the code where the issue could be located.

Tests are not a debug tool. Tests are here to tell you when you broke something.

When this happen you can get your debugging toolbox out: stack traces, profilers and things like GDB. And then follow the steps your test script did.
This is really neat, it seems to me like they use a see through material of some sort that scatters light randomly as a filter in front of the camera. They then move around a small light and use that to figure out the pattern that the light is scattered in by the material?
TL;DR: this is an approach that simplifies the production of light field cameras (cameras that measure both color and angle of incoming light beams): instead of building a grid of microscopic lenses, you use a "random" piece of opaque plastic like scotch tape, and figure out how it modifies incoming light using a calibration phase.
Yes, just like all the other US tech startups/companies
This is about politics and nothing else. I hope, and believe, AMD will fix this.

The main issue is probably due to a bug in the old driver. After a while, bugs become a feature, and it's not uncommon to implement bugs to retain backwards compatibility. This is where the politics enter the scene. Some engineers believe that all bugs must be squashed, while others have a more pragmatic approach. IMO, any behavior that is a problematic deviation from the old drivers, should be changed. Otherwise there is no backwards compatibility, only a best effort approach, which is unacceptable for something as crucial as a graphics card driver.
Angular-cache is a very useful replacement for the Angular 1 $cacheFactory
Yes one can do a poor job in pretty much any situation, I'm afraid that's not an argument for anything though.

Here we're talking about average or best-effort: large code bases are complex in spite of the best intentions of their maintainers, so using tools that can manage that conplexity in an easier way through e.g their type systems could lead to better results.
Go to its center?
If you use Visual Studio Code or Sublime Text, there are extensions to highlight characters like that:

https://marketplace.visualstudio.com/items?itemName=nhoizey....
I think probably not, I think it may be too fundamental. But perhaps there is a mitigation if only a few instructions cause the leak and they can disable those in speculation. Performance hit could be bad though, worse than the Linux fix.
I use Linux, Windows, and Android. I decided on Pass [1] and it's been working really well for me. I have a dedicated PGP key that encrypts all my passwords, and they're stored on my own git server.

On Linux I use the pass command, on Windows I use QtPass [2], and on Android I use Password Store [3] and OpenKeychain [4] (for the PGP key).

My "master password" is the password for the PGP key, and I type it each time I want a password. Git keeps everything in sync. If one of my devices is compromised, you still need the password for the PGP key. If my git server is compromised, you'd need the PGP key (which isn't on the server).

[1]: https://www.passwordstore.org/

[2]: https://qtpass.org/

[3]: https://github.com/zeapo/Android-Password-Store

[4]: https://www.openkeychain.org/
1. Am I paid to write tests?
IBM’s AS/400=eServer is basically implemented this way since 1988 years (some of it going back to 1979). Everything old is new again.

(It has 128 but pointers, btw - so it’s future proof for at least 20 more years)
7 Good Resolutions to Write Better Code This Year
> And in my view the current Attorney General is carrying out the same old ideas and policy effects, which is why he's so neurotically anti-weed, conflating it at every turn with opioid addiction

Sessions has made statements in line with that description, but as yet they don't seem to have manifested in substantive DoJ action.

Of course, part of it may be that while posturing is supported by the administration, a major new FBI law enforcement initiative would be incompatible with the Administration’s propaganda war on the FBI, making it hard for it to get the green light.
So... your passwords are 15 characters of the combination 0-9, a-f?
2 easy ways to check code coverage
I use the same, stored with git to allow me to share the "store" across a small number of hosts.

If you use git to store your passwords you can use that to see the age of entries neatly too:

https://blog.steve.fi/rotating_passwords.html
Rust and functional programming?
Unless you're talking about an extremely small subset of the population, like 5% or less, I think that would be a pretty bad prediction. Whole fruits, vegetables, legumes, leafy greens are all recommended by virtually all doctors and official dietary guidelines. And each of those are all high in carbohydrates.
If this is about shitty workarounds that AMD had to add to their drivers to fix bad programming from an EA studio, well, too bad for AMD (Btw, I'm aware that all driver developers seem to have to add shitty workarounds for AAA games).

This is all about expectation management. The moment you implement a workaround for a buggy game you set expectations. Now it's AMD's problem, not EA's. If the game claims to run with DX9, and your driver claims to support DX9, and you implemented a shitty workaround to make the game work with your driver back in 2007, you better be prepared to support this workaround for as long as you claim to support DX9 with your drivers. If your drivers once worked with a game and then a new driver breaks that, it's most definitely your problem and not EA's.
If I need to make a post every time my wife was shocked by something on the internet, the internet would be twice as big.

I still use email if I want to share a picture with somebody? I must be old school.
A system I've used happily for many years is as follows:

I have a function which is easily computable by hand but uses information only known to myself, which converts the website into a pseudo-random password.

Obviously I can't tell you the actual function I use as this would reveal all my passwords, but for example, you could use ROT13 on odd numbered characters in the domain name and then add a fixed string to make up the password length.

I still use the browser password store with non-critical websites for speed, but can still get into any site where I have an account from any machine by re-calculating the password in my head.

Of course, this isn't secure enough if you're someone who might be individually targeted by hackers (eg: if you work at a large company or in government) - if they obtained a few of your passwords, they could reverse engineer your password function and get into the rest of your accounts. You can mitigate this by separating the sites you use into different 'security clearance' levels (eg: those with access to your money, those with access to your personal info, etc) and having different password functions for each level.
Yes. You are paid to write working software.
Old thread, but GP probably talked about a different thing. Not MAC as in Ethernet..

https://en.m.wikipedia.org/wiki/Message_authentication_code
> Often, because the assumption that it can exist only once is wrong; this is particularly true of instances of some descriptive class of interface to an external hardware resource, which covers all of your examples.

The key here is how to understand the word "can". It's "only" a design decision! Of course you can do almost anything on a computer. However, most programs don't make sense with two sound modules or network modules or graphics modules. So "can" here means, "it absolutely makes no sense, and I'm never realistically going to instance two or more of this thing". (And if I really want to do that later, 1 in 1000 times, I'll just edit the code).

> it usually isn't the whole difference between the desirable modular code and the bad global-using code that should be made, and quite often if you aren't writing it as a global resource in the first place, you never make the other wrong decisions that would need to be changed.

Give an example: I don't think there are any. I can easily give you some bad things that happen when avoiding globals to represent static resources: Much more input and output arguments to type. Then, the syntactically ugly, useless, meaningless Singleton. I've seen it many times, and it is the best proof that it made no sense to avoid the global in the first place, and it even potentially leads to nondeterministic initialization.

And more importantly, an occasional reader has a much harder time browsing through the code because she never knows where the local variables are pointing at.