skysight-inc/HackerNews huggingface dataset:
You can't fight your own population the same way you fight a foreign population.

Could you imagine what would happen if it got out that the US government was doing any of these options? There would be armed riots in the street the next day. It would trigger a civil war and you might damn well lose.

You can't hide a conspiracy of this magnitude. The only way anyone in America could possibly prosecute the drug war in the way you are suggesting would be if the population at large was also in support of scorched earth drug war.
Always going to be a security/convenience tradeoff to some extent. If you expect to be targeted by The Baddies (tm), you want to tradeoff convenience for security. Spend some time every day memorizing long random strings and hope you never get hacked using the Wrench method[0].

If you're not expecting to be specifically targeted, then "modify a single password per service" can be surprisingly secure. Don't just add "tw" "fb", but memorize a more complicated algorithm that's not obvious from inspecting two or three leaked passwords. e.g. Basic Caesar Cipher on the odd characters of the passwords using some part of the service name (fb, tw) as a key. Memorize a single algorithm that you can do mentally. Use something completely different for primary accounts (probably bank + main email that allows you to reset other accounts' passwords).

Some people will disagree and say "just use a secure password manager", but there is a valid argument that managers are not necessarily the best solution, depending on your use case.

[0] https://xkcd.com/538/
I run a company which provides a credit scoring system for banks which helps them include environmental and climate criteria in credit decisions. Our underlying motivation is that if we want to create sustainable supply chains, the incentives which shape them need to line up with our objectives for them. Credit scoring which compels businesses to behave more sustainably is a massive incentive towards this.

We have had recent success with big banks starting pilots with the system. But it's been a big struggle.

How would I encourage new ventures in this space. Very simple: make money available in the same way YC does. A veritable spigot of seed, early stage and growth capital that isn't always looking for immediate returns, but for new ventures to demonstrate their assumptions hold true.

When I sell my business, which is my aim, this is what my profits will fund.
Nice. I didn't know they where working on self driving cars back in 1989! There's probably a lot to be learned. Today all the computing power of those racks can probably fit on a respery /nuc. Eg, you do not need a van, you could use an RC!
Rather than having 3 different business logic methods that call out to the database, you have each construct a command object and then have a separate service that calls out to the database based on these commands. You can then test the 3 business logic methods by testing that they construct the correct commands based on their parameters.
By companies like Flipkart, do you mean companies which have never turned a profit and are unlikely to do so anytime soon?
Next we'll get to a webassembly-only VM that will replace the OS. All 'apps' will run on this VM instead of being native, and most will be cross platform. They'll talk to each other via messaging (using Javascript semantics) instead of bytes-over-pipes as they do today. An integrated globally available, namespaced data store API might replace the filesystem. Each app+version will be accessible by a distinct URL. 'My computer' will finally be fully virtual - a well defined collection of 'apps/data' URLs that materializes wherever I can open one of these webassembly VMs.

With this webassembly VM, early bound (precompiled) lower level languages may not have a strong advantage over late bound, dynamic ones, because the compiler is part of the OS layer (as it should be).

The world seems to be slowly moving, in a roundabout way, towards the OS-browser idea from Alan Kay.
This is a tough one for AMD, because while the number of gamers directly affected is low (~1500 daily players on Steam), it hurts the brand badly - people will think other games might lose support also. That kind of FUD is gold for a competitor.
One of the “few abstractions to work comfortably with the SVG DOM” that “you can easily write […] as you need them” would be a layout engine. You need one to adjust your UI to the user’s screen size.

Another, I think, is that, to add scroll bars to a view, you have to write SVG scroll bars, make them respond to the mouse scroll wheel, be accessible, etc.

Even if we will get them, eventually, it won’t be “easily”.

I think it is easier to use HTML for layout, and SVG (or canvas) for those views that need it. You can do that now.
Intel with Radeon RX Vega Graphics: Core I7-8809G with 3.1 GHz Base, 100W TDP
Completely agree. Adding a proper primary key e.g. from a sequence involves very little extra overhead and protects against this. Asking them to drop the constraint in the future sounds a bit silly as that may mean two members get deleted when you intended only one. Plus your foreign keys now have to be maintained. So if a member changes their name you have to update all foreign keys. Also if the hobbyist club then builds a website to view members the URLs can use the primary key e.g. a long / bigint, rather than names. The names may introduce further complexity with having to escape the URL etc. I am all for keeping it simple, but all relations should have a guaranteed unique primary key.

I know the author is talking about a small scale project here, but shortcuts like this (in my experience) just lead to a mess later on; irrespective of the complexity of the problem being solved.
Ruby instagram bot and scrapper
We really need passchange.js: an open source collection of headless JS scripts that can programmatically change your password on a given website. Then you would continuously rotate _all_ your managed passwords as well as your master.

Not a panacea, but significantly minimizes the length of a theoretical breach.
Really hot doesn't begin to say it. 45c (113f) temperatures are regular occurrence. I think it hit 54c (130f) on the hottest day this past summer. These kinds of temperatures can dehydrate you in a hour or two if you're sweating.
What do you do differently since reading the book?
Or directly into the cpu. Since there already is a web server in the cpu [1], adding a browser might enable us to run and use web applications without even installing an operating system.

[1] https://www.networkworld.com/article/3236064
Issues of Employee GPS Tracking
"This article was first published by Wellcome on Mosaic and is republished here under a Creative Commons license"
> there is a valid argument that managers are not necessarily the best solution

What is that argument?
Try samsung browser if you have a galaxy device. It's smoother and faster than chrome and supports adblock extensions.
Strongly reminds me of another country in central Europe. And not incidentally, that country is one of the poorest and least developed EU countries, where young qualified people are emigrating in droves.

Nepotism is an extremely destructive toxin to a country and her people.
How to Find Arbitrage Opportunities in Python
I have a folder in which each text file contains the username and password(s) for a particular domain/service. The hard drive is encrypted and its backups (on geographically spread external drives) are also encrypted.

I let Keychain (MacOS) remember the passwords, so I never really think about them.
It is a VM, stack-based like the JVM. It is called a "WebAssembly VM" in the document.
I have a couple scripts, 'add' and 'get', which respectively add or get an entry associated with some keys to a text file.

An example line in the text file looks like this:

facebook password: [base64:U2FsdGVkX1/T8CoWmfDOoaapE5lGj/fqHE3s8NohnriGajnPrCzWikCneU/u7]

Anyone thinking of trying to crack that, well good luck. I removed and twiddled a few characters from it, as if it wasn't hard enough already. Oh but here's how to decrypt if you really want to try:

echo "$data" | openssl enc -d -aes-256-cbc -a -salt -pass env:MY_PASS

That's not a script, it's just an excerpt. You'll have to guess the password. You should probably do something else with your time.

Since the text file is encrypted, I store it on Dropbox. Then I can access this from any computer where I log into Dropbox, provided I know my main password for decryption.

Later I can type 'get facebook pass' on the command line and the get script will retrieve the best matching entry, decrypt the value, and put it in my copy paste buffer ready to paste.

The biggest problem with this system is sometimes when two or more entries are a close match to whatever keywords I input, it may pick the wrong match. I need to improve it to show a list to pick from in those cases, or work on better ways to remember the right keywords for each item. Also my matching heuristics could be improved.

I use this in conjunction with a command line script for generating strong passwords. Most accounts have different passwords at this point and they are all strong. One problem with the script is I sometimes have to tweak the resulting password by hand to match whatever (generally dumb) rules are in place at a new site... when I say dumb, I mean for example, '!' not allowed, etc.

For sharing web passwords with my phone, I just allow Safari to remember them and then trust iCloud, for better or worse.

Overall this is not a pain, and pretty successful. But if someone got terminal access in my account on my computer, it would be game over... so I try not to allow that.
There's a simple solution... build dense cities. San Francisco feels like country side if you've lived in an actual dense city.
It is not for the lack of money spent. San Francisco spent $300 million on housing homeless people in 2017. That’s $40k per homeless person in the city.

I think benioffs solution of spending by relocating homeless and vulnerable families outside the city is quite promising. Instead of the $500k per unit in SF it is conceivable to build more than 10 times more for the same prize elsewhere.

In one years city budget for homeless housing we could conceivably build housing for all if we are willing to follow benioffs solution, making necessary housing less of a lottery.
Wait what am I into?
OAuth or OTP to email comes to mind for now.
Have to start somewhere and go from there. At least it would be a start; it could be refined over time.
The actual attack to be worried about is that an adversary copies the sheet of paper without your knowledge. There's no need for an attacker to remove the physical list or to be a burglar. It could be someone you know.
As I understand it, not really, unless management or the board were freely mixing personal and company assets, for example using a company credit card to pay personal expenses. No evidence that took place here.

Reading the law at the link, it says you’re only liable if there was no “reasonable chance” of avoiding insolvency. The sale they were pursuing would have provided enough cash to pay debts so I don’t think it would even pass that test. Poor management is not a crime, unfortunately.
The article doesn't really quite get to this, though it hints at it in parts, but largely because San Francisco’s tech culture is a symptom of, and largely oriented toward reinforcing, the economic conditions underlying the social problems.
Real-estate tycoon, Dubai, 3-months-old startup, take on Amazon.

I get that he is a billionaire, but IMO this is not newsworthy.
Very interesting. Incidentally, about 70% of Hawaii's electricity is generated with oil: https://en.wikipedia.org/wiki/Energy_in_Hawaii?wprov=sfla1
Why Calendars Are More Effective Than to Do Lists
Replace “WebAssembly VM” with “JVM” and you will see how it’s already available, and why it won’t catch on.
I let Google Chrome generate my passwords (You can enable password generator from chrome://flags/ ) and save them to the browser.

If I need to see the password for some reason you can find it from browser settings.
If you specialize on your core competencies you can avoid a lot of these issues. Does every 10+ person business need to have janitors, and other support personnel as employees? Does every large business need to own real estate?
Not a stupid question at all. The answer is the mice are genetically engineered to overexpress beta-amaloid (or sometimes Tau).
Written in 1939 by an author who died 26 years ago, yet still not in the public domain, so you need to fork over $11 if you want to actually read the damn letters. Thank you, Sonny Bono and Disney.
Topological data analysis[0] is a new application of topology.

[0] https://en.wikipedia.org/wiki/Topological_data_analysis
Some of the problems that I, personally, see/face in the world:

(They may just be problems with me and not necessarily the World™️, but I wish there were [better] services and tools to help with them.)

• It's too hard for [self-employed] people in "third-world" countries to relocate to and contribute to better countries if they don't have all the paperwork (employment and sponsorship from companies, college degrees), often not even if they do have the paperwork, even if they're willing to pay exorbitant money for long-term residency and can prove they can support themselves.

• It's too hard for introverted people, with no social life, to find partners.

• For quite some time, the amount of "content" – art, fiction, other media – available in the world has long since exceeded what one person can discover and peruse in the average human lifespan.

• The success and failure of everything is determined on how much money it makes. Too many good things get aborted because they can't make enough money fast enough, and the definition of "enough" keeps increasing at an unrealistic rate.

• Not enough people are asking "What are we doing to ensure that we expand beyond our home planet?" and "What are we doing to ensure we don't destroy ourselves?" – Questions I believe every intelligent civilization must keep asking itself if it is to be "successful."
Fac – CUI for fixing Git conflicts
Expert publicly disclosed a #macOS #0day that allows local privilege escalation
You buy mice that are likely to develop it, for example at https://www.jax.org/mouse-search (I notice they offer a service to use CRISPR to design a mouse strain for you, too)
The idea is awesome but i think it lacks usability on mobile.
Yes, the marshmallow experiment is avout self control and not trust or love.
No he didn't. The "first name/last name" constraint is a straw man for didactic purposes. He's explaining why it never made sense.
I also use pass and sync it with my android phone using OpenKeychain to manage GPG keys and PasswordStore as the actual password browser. Copy/pasting randomised passwords on both desktop and mobile is easy once these are set up.
You're talking about mitigating the risk of break-in by using an alternative to a password manager.

I'd rather propse to use a self-hosted password manager on a VPS or in a cloud service.

As long as that password manager is hosted securely, VPS for example, and uses your login password to help decrypt the stored passwords.

Perhaps some HMAC required too.

Anyone know if this exists in the open source world?
Some years ago my solution was a notebook in a physical safe. Not recommending this, but I already had the safe and I reasoned that for the assets I was protecting, it was unlikely that a thief or anyone who might gain physical access would be interested.
Because, half a century later, it's not any cheaper to do it than it was then.
It's also worth noting that the same is true for email addresses. People share them, so two people can have the same address.
This would be great news if we have not cured mice many times before of Alzheimer's. Unfortunatly all the drugs that have worked in mice failed when tested in humans.

It appears that the mouse model is a very poor model for the human form of the disease. I would go so far as to say it is worse than useless and actively leads us astray.
Second this. Domain should generate chiper for a password. You get unique password for every website and you dont have to remember it
I wonder if the parent's reply is actually a joke based on paraphrasing Groucho Marx (the statement itself doesn't have much logical sense).
> Why not stop using poison and just let some cats lose

Fast forward 5 years, you got yourself a healthy plague of feral cats - plus complaints from regular cat owners that the ferals pick fights with their cats. In addition introducing mass numbers of cats causes a rapid uptick in bird deaths (cats can eat islands virtually birdfree) and they're a considerable risk for accidents with vehicles or small kids.
I'm not comfortable with a company like noon being called a startup. They're not really cash strapped (billion dollars went right in), granted building a logistics company isn't cheap but it's not like they went through phases of operation and testing the market/product, they just launched straight in like a regular business.

On another note, their glassdoor reviews are outright scary. Granted there are only 7 reviews but it sounds like typical dubai: throw money acquiring the best (in this case talent) then screw up the execution.
Even though I understood less than 50% of that I am still very excited about reading more about whatever the real issue is. If somebody can pwn aws from a random instance that would be highly amusing to me :D
5x 5 minute manual test < 1 day

Automatd test fundamentalists are subject to the same kinds of folly that other fundamentalists are.
I disagree.

Simple rule: Don’t allow visas for client projects. If companies need people let them hire directly at market rates.

It’s weird that you work with organization A and your paycheck comes from organization B.
Some lesser known gems:
exurb1a - https://www.youtube.com/channel/UCimiUgDLbi6P17BdaCZpVbg
Strange Parts - https://www.youtube.com/channel/UCO8DQrSp5yEP937qNqTooOw
bill wurtz - https://www.youtube.com/channel/UCq6aw03lNILzV96UvEAASfQ

Science stuff:
Veritasium - https://www.youtube.com/channel/UCHnyfMqiRRG1u-2MsSQLbXA
I would suggest Bitward[0]. I used Lastpass (premium) for 3 years but when I switched from Chrome to Firefox Nightly a few months ago I learnt that Lastpass didn't have a web-extension for Firefox (it was the old extension which wasn't compatible anymore). I waited a few months hoping they would release it quickly since there's very little difference between a Chrome and Firefox extension but nope. So I canceled my plan, exported my data to Bitwarden and went with it instead. I haven't been disappointed.

[0] https://bitwarden.com/
working in car industry for about 3-4 yrs. I can assure you these jobs are not mythical.

read this article - https://www.digitaltrends.com/cars/harman-wants-quiet-ride-u...

skills required - fundamentals of acoustics, vibrations, signal processing, algorithms, coding, managing huge amounts of data, optimization, controls etc.....

this is just one technology. there are many more things that go in a car and are way more complex than active noise cancellation.
If the benefit of manufacturing optical fibre cables in a low gravity environment was so great, would it be more economically viable to build a 'low gravity' factory on earth?
Response doesn't make sense at all

"This title is from 2007, so we are unlikely to devote any valuable engineering resources to this issue, which is most likely caused by outdated API modules"

Doesn't make sense #1: Reason to not fix because it is from 2007, what about counter strike?

Doesn't make sense #2: Fixing the issue implies devoting "valuable" engineering resource, does it mean they don't have enough engineers or such issue is extremely difficult?

Doesn't make sense #3: "outdated API modules" was that likely from an educated guess and what does it mean even.

It sounds really foolish for a reply of this calibre to a community of supporters. I love AMD for what they're doing technically but I hope someone can at least promise to fix it soon before this hits the larger community.
Cross platform for Windows and Mac are there today. "Red" does make searches tough, we know. Red currently has backers, and Linux GUI hasn't been on their priority list. Android will come before Linux, and is far along already. For Linux, today, Wine is the suggested approach.
Closest I can think of is Vault from Hashicorp[0] other than that there are options for online password managers but they all use websites and are very obtrusive. (Like Thycotic secret server[1])

[0]: https://www.vaultproject.io/

[1]: https://thycotic.com/products/secret-server/
Oh for sure. We live in the middle east for 9 months of the year, and learned pretty quickly that if you're going to do anything in these kinds of temperatures, you do it late at night when temperatures are more reasonable and less likely to kill you!
I am not advocating for any of these policies, just that this is what a real war on drugs would mean.

I think you might be surprised how much public support such policies would have. You only have to look at the Philippines to see the wide support even the crudest of these ideas has.
Good, stop these companies from using this old crap.
I do believe in unconditional love -- in fact it's my whole point. How can you not trust your kids?

The case of mental imparemeent is interesting and I had not considered it. It would be possible to argue that the person isn't there anymore if they're crazy, and there needs to be someone to exercise love against. I'm not sure.

Also, maybe persons with mental illnesses could be trusted more in our society.
Antidepressants don't make people happy, they stop people being depressed.
To mitigate the single-point-of-failure steganography (hidden containers) would help. That would offer compartmentization and deniability. One tool that implements this: https://github.com/bwesterb/pol
I've made a living using Rebol for 16 years, with other things when I have to. :^)
Aren't you the same guy who kept posting articles about Google AMP to gain upvotes on HN?

Sensing a clear agenda here.

Edit: looking at your submission history -- wow. I'm surprised you haven't been dinged for spamming.
None of these things were new, more inbox space and better spam protection were available for real email services. But the point of every other free email service at the time, including Hotmail post acquisition, was to upsell you their paid service.

They were therefore crippled in these ways, and purposefully limited to a storage space just large enough to be useful if you went to the trouble of cleaning out large emails regularly. They were also plastered in ads in every way imaginable.

Gmail was a long bet that Google could, with a bit of help from Moore's law, finance a premium email service using the same methods they financed their search engine.

This strategy could absolutely win again, in a market where crippled consumer tools exists for the upsell. For example entry level project tools could easily be something Google could integrate with their office tools. Or indeed if Google crippled their office tools in their ad financed version, someone else could use this strategy against them.
Doesn't geothermal work for Hawaii? It works just fine for the Azores.
Maybe the above comment is unclear. By "let alone" I mean "including, of course", not "excluding".
Never seen that before, thanks!
I use a script that generates passwords based on a master password and a "site tag" (originally used for web based logins, but the site tag can be any word really, eg "somepieceofsoftwareyouuse").

You can find a web version here:
https://milliways.cryptomilk.org/passhash.html
You can save the page locally (it's only a piece of javascript), or extract the functionality to build your own command line tool with nodejs from it, like I did.

(not my code, and I shamelessly grabbed the pieces from the js code for my own fork of it)

This way I have a new password for every use case but only need to remember one master password, which should be pretty hard to reverse engineer. I hope.