skysight-inc/HackerNews huggingface dataset:
Funny, I am doing something like that now, but using an smartphone with a fingerprint reader, instead of a Pi and sending the password through Bluetooth (adding USB might be a good idea, though). My problem with the Pi is that it is another bulky device to carry or loose, even the Pi Zero.

My implementation still has lots of security breaches and I don't want to publish something so fragile. I still need to implement fingerprint and time-based authentication. Therefore it still is vulnerable to MITM attacks.

As soon as I have something more robust I'll post it here.

Do you have more ideas to suggest?
So here's the second question I'd ask: what happens if there was already a black pawn on the white queen's column?
Not sure it holds any more, I got these results

$ go test -bench=.
goos: darwin
goarch: amd64
Benchmark_AllocWithMake-4	1000	1626664 ns/op
Benchmark_AllocWithAppend-4	1000	1574720 ns/op
That isn't related to dma-buf-type usage, though. That would be purely one of the drivers not signalling the end of the frame to the other (since all graphical APIs have suitable methods for this, and WDDM itself natively understands the concept).

Also, in Windows 10, the window manager's compositor (equivalent thereof) does all the event signaling fine; ie, you could easily have a situation where a game is rendered on one GPU, displayed on the other, and the display GPU + monitor has VESA Adaptive-sync enabled, and the game correctly triggers new sync windows as if it had been running on the same GPU.

Does this work in practice? Who knows, but its supposed to, especially with fixes that 1703 and 1709 added.
Gaming addiction classified as disorder by WHO
No way on this earth, $150,000 is anywhere near normal in the Bay Area, let alone in other less expensive metros. Most people are absolutely not making that much money writing code. People have serious tunnel vision on HN.
GameMaker Studio Ultimate 2.1.3.273 Crack Free Download
Awesome art style, but I wish the toolbox had labels, after I watered the plant, it transformed into a pumpkin and gave an unknown item. No idea what to do with that :X
Show HN: Long Weekend Calendar – Alexa Skill
I used to use asciiflow for some of my network sketching, and it can be enjoyable to play with. That said, I have been thinking about the subject of network maps for quite some time now as a senior sysadmin, and I no longer use it for a couple of reasons.

First, I don't like the idea of being tied to a webservice for my map drawing tools. I would really like the source code so I can self-host. I looked around the new updated asciiflow website and didn't see any links to source so correct me if I'm wrong.

Second, and most importantly, as a senior sysadmin over the years I have seen hundreds of network maps, the vast majority of them being in visio due to it having market dominance, and there is a problem that neither visio or it's competitors has addressed, and that's automated network mapping with versioning so you can diff and walk back in time. It's the thing even the best automappers still don't do right because they tend to get the topology wrong (such as one of my favorite automappers like librenms's).

This is why one of the utilities I have been working on is a bash-script cobbling together nwdiag (http://blockdiag.com/en/nwdiag/index.html), a subset of the blockdiag, with nmap and (h/f)ping scanners as the generating input and cronified daily versionable text output with checksums, with bonus things like new kea-dhcp lease triggering rescan via the kea restful api.

I think the future of network maps needs to be both automated and text based to enable admins and executives the ability to fully visualize the network at any given state in time, with the ability to walk the cat back with confidence in the accuracy of the map you are looking at(I would like to integrate gpg as well).

It's not quite ready for release, (sitting in my github projects folder waiting for push), but I lazily named it anmap for automated-network-mapper.

So right now how I use it personally is I have an emacs-org mode file that is cronified to output daily latex pdf reports that calls the bash script and generates the output map which is then listed inside the rest of the org-mode systems report which does other stuff like give me go-no-go on system usage via stuff like lynis, rkhunter, ckrootkit, and ossec.

tldr - Basicallly the network map industry is extremely ripe for competition and all these web-based network mapping tools are still not addressing a core needs usecase for sysadmins.
You can't blindly overwrite existing data based on the UUID, sure.

But I find that the security checks against "stealing UUIDs" are much simpler to implement than a system of composite primary keys (deviceid+autoincrement or userid+autoincrement) or some sort of temporary primary keys. If you see suspicious UUIDs, you can just discard the data.

Having the client generate the "final" IDs for objects is particularly convenient when the client can produce a complex graph of objects offline, for example an order + order items + comments + more. If using temporary IDs until first contact with server, all these links would have to be patched up when the objects get real server-side-assigned IDs.
* without
Did you get this to work on a modern emacs ?
But this is the equivalent of net neutrality. There is no such thing as fast lanes, there are only prioritized lanes.

Queueing theory says that if you dedicate the 2nd line back to the single line, then you can process more people more quickly.
I might get downvoted for this but I don't feel sorry for these guys as they have made their choice. Over the years, I have routinely seen people who make this exact choice - join the US arm of the outsourcing company for depressed wages. They do it because of the "onsite" allure.

I am not judging. I understand why people make this choice - Better life in US. Unfortunately, this comes at a price which no one is liking.
GPD Pocket: The Nokia N810/n900 Lives
I love the animation of the books as they turn, appreciate the time and effort this took to get working, let alone all the great reviews you have written!
One commercially supported Windows [browser] application virtualization (-ish, pretty much Docker-grade security for end users) option, $35 for personal use: https://www.sandboxie.com

Most similar tools are marketed as antivirus products, and are only available via enterprise licensing and/or SaaS reporting. An example of a hardware virtualization based option: https://www.bromium.com/platform/our-technology.html
It won't load for me on Firefox, linux, disabled ad blockers. Works on Chrome.

edit: Well I guess not. I can't click on anything but the hint cabinet. Clicking on the bottom left corner of the moved me to a new room once, but I could not reproduce it.
Or one of my personal favourites: The Binding of Isaac
pass-rotate[0] by @Sir_Cmpwn does this, is open source (Python), and accepts pull requests to add more services.

0. https://github.com/SirCmpwn/pass-rotate
Whenever I read pieces like this on these nuts in the CIA, I start to think that if they weren't the ones creating the conspiracies, they'd be in some asylum imagining them anyway.
It will disney-ify netflix.
I would certainly look to add not-null and uniqueness constraints, although you might find that by now your data is actually violating some of those constraints!

A lot of people take the view that the application code is sufficient proof against bad data getting into your database, but this ignores (a) bugs and (b) back-door data loading, which in most applications will almost certainly be happening at some point.

The data in your database is the crown jewels (the application that fronts it is by comparison a piece of crap that you can replace at any time), so put guards on that gate ...
This definitely would sound like a very plausible theory, except most times it's for companies which have only one (or maybe two) products. To me, it seems more likely that they are getting swindled by some ad company helping manage their campaigns, but that could be my bias against many of those types of companies showing.
Reminded me we hired an indian android developer (contractor) through a phone interview (in US). When “he” showed up for work, it wasn’t him. The contractor who actually showed up couldn’t answer the same questions.
There is absolutely no bashing of H1B done here. What you say about multidisciplinary knowledge is true. I bet many of the Indian CEOs and co-founders came via H1B itself. But that was not the point. The majority of H1B holders are low paid workers bought here not just because of lack of skills, but also due to low pay and willingness to work shifts etc etc.. We can't deny that.
World Map Creator
Read quite some. Here are my favourites:
-Poor dad rich dad
-Elon Musk's biography
-The republic (Plato)
-Man's search for meaning
-Autobiography of a yogi
I've been happily using 1Password 4 for many years, my credentials are encrypted and synced via Dropbox. But I hear the latest versions require you to use their cloud service, the self-hosted version is no longer available. Is that true?

I use 1Password for not only credentials but as a document vault for everything from passports, birth certificates, anything else that falls under "needed after the house burns down". It's one of the most elegant pieces of software I've ever used.
How to Download and use SDK in android studio?
I know it doesn't answer the question, but it does hit at the heart of the issue. I use Enpass - the only password manager I could find that doesn't store your info for you--because I was also concerned about breakins and single points of failure. I am able to keep my entire password collection on my local hard drive and in whatever online storage tools I'm using currently (onedrive, google drive, etc). This seems to fit well while removing the issue with online password managers.
I am not sure what is the data source on statista but the last census happened in 2011:

http://www.simplydecoded.com/wp-content/uploads/2013/09/TH01...

The last decade was the only one where the population growth has slowed. And even then the growth was ~17% in 10 years.
.Net Core and SQL Server in Docker – Part 1: Building the Service
Maybe ideally on some macro level that's how it works out. In the meantime, on the micro level, many people are in competition with their coworkers and it seems kind of blind to the realities of the workplace to pretend otherwise. Everybody here has heard of stack ranking, right?
So does that include the coins that were suggested by the hacker?

https://www.rt.com/news/414604-mcafee-hacking-cryptocurrency...
EbolaCheck test kits now ready for field trials
I'd like to see more simulation in future prediction. Or a bracketing of worst/best cases based on different scenarios.
I was rolling my eyes at the subtitle. The article devolved from there.

Some great (sometimes indirect) information on why the 747 and to a lesser extent the A380 are being phased out, from my new favorite YouTube channel, Wendover Productions:

The Economics of Long-Haul Flights:
https://www.youtube.com/watch?v=NlIdzF1_b5M

ETOPS: Explained
https://www.youtube.com/watch?v=HSxSgbNQi-g

Politics of Aviation / 5 Freedoms of Aviation:
https://www.youtube.com/watch?v=thqbjA2DC-E
Still has the issue of a password manager. Compromise the machine, record the "secret".
tricky grammar. You mean formal, mathematical verification instead of simulation, I suppose, but I am not aware of any different method.
It was generic Oxycodone. No name brand, no fancy time release, in both aforementioned cases. The first being in 2011.
Click Tips: Writing Advanced Python Command-Line Apps
He conjectured that each particle is composed of other particles, and those others are held together by exchanging the first particle in a process that conveys a force. Thus, particles’ properties are generated by self-consistent feedback loops.

Can someone rephrase that to me?
> wherein it becomes politically possible to eliminate all social programmes altogether

.. but not, as you pointed out, the biggest expense of all in the military.

The way back to the moon is the same reason as America went to the moon in the first place: competition and colonialism. As soon as China or India look like they might go back to the moon, the space race will resume.
Not willingly. The rumor is, none of the Chinese carriers wanted to buy 380, but the Chinese govt sorta promised the French govt. In the end China Southern agreed to take them, in exchange for some hot international routes like Beijing to Paris. By the time the planes were delivered, the official who promised the routes were long gone, and the new one refused to honor the deal. In the end, the poor carrier is stuck with those huge planes and no suitable routes to fly them. They are apparently bleeding money.
I have been lied to on the way in. You hear about all this incredible stuff coming down the pipe that just needs a little more work. After a few months you figure out that that cashflow was 1/10th of what was implied and the pipe is dry.
Shapa’s scale swaps numbers for psychology to help with weight loss
In case you hadn't seen this yet: https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-u...
I haven't tried it, but could it be this one? https://github.com/lewish/asciiflow2
> One thing which is never talked about in these articles is the failure of Indian government (past and present) to find effective family planning policies. Population growth is through the roof and hence unemployment is huge.

Looking at the actual data https://data.worldbank.org/indicator/SP.DYN.TFRT.IN?location...
it's not clear that the government could have found more effective family planning policies, save for rather draconic China-like measures.
Exploring Public Data with Pandas
What We Learned in 10 years
> With not much left in terms of job prospects lot of people turn to shady stuff.

Plenty of opportunity out there in the farms, most of my friends have moved back to India to start (new-ish) farming practices.

It's this pervasive attitude that cities will provide you with growth, a big salary package and all for a degree that you've not been trained well in. Only a few universities in India are actually universities. The others are just as abhorrent money making scams as these call centers, comparable to Trump's University.

I propose we train them in maintaining our agrarian economy well, we're still reliant on the monsoon for many crops, which is not acceptable for this day and age. And most of all, this will get you votes, this will get you the MOST votes.
Spreadsheet that's encrypted inside an encrypted drive (veracrypt). If I can't remember the password I used, I just open everything up then copy/paste. Use 2FA where possible and have never answered a "security question" without some ridiculous bullshit answer (that is also stored in the spreadsheet in case I have to look it up).

The only issue is when I try to do shit on my phone, but that's never been critical as I'm in front of computers 12-16 hours a day.
UUIDs are the best choice when developer time is more important than space usage. Also, they can be generated and used by the client when the connection to the db is frequently down (eg: clients store/query data locally in SQLlite and replicate to master).
They chose to do it their way and not make incremental improvements. It's America - Land of dreams - right?
Quantum computing:
https://en.wikipedia.org/wiki/Quantum_computing

Quantum algorithm: https://en.wikipedia.org/wiki/Quantum_algorithm

Quantum Algorithm Zoo:
http://math.nist.gov/quantum/zoo/

Jupyter notebooks:

* QISKit/qiskit-tutorial >
"Exploring Quantum Information Concepts"
https://nbviewer.jupyter.org/github/QISKit/qiskit-tutorial/b...

* jrjohansson/qutip-lectures >
"Lecture 0 - Introduction to QuTiP - The Quantum Toolbox in Python" https://nbviewer.jupyter.org/github/jrjohansson/qutip-lectur...

http://qutip.org/tutorials.html

* sympy/quantum_notebooks https://nbviewer.jupyter.org/github/sympy/quantum_notebooks/...

https://github.com/topics/quantum

krishnakumarsekar/awesome-quantum-machine-learning:
https://github.com/krishnakumarsekar/awesome-quantum-machine...

arxiv quant-ph:
https://arxiv.org/list/quant-ph/recent
Wow! Works very well on my iPhone, too! Great work.
Whilst they do have a cloud-hosted subscription service, the self hosted version is still available.
Monodraw is incredible, and vastly more useful than ASCIIFlow just by dint of the fact that objects remain objects after drawn - you can drag them around and the graph remains intact.
>This reply doesn't address the principle that there must be issues which can be addressed using unit tests but not integration tests.

Well, that's asking me to disprove a negative. All I can say is that I don't think that principle is true.

One counter-example of a scenario that is impossible to integration test but possible to unit test would be sufficient to disprove my hypothesis, but I don't think it exists and I don't think you can provide it.

>Even if you take every example I give and claim "doesn't count, I'd test for that", you're just writing unit-tests-once-removed using an integration testing framework.

I'm really not. I can test disconnection scenarios in an integration test without even coupling to the language under test by running a service that intercepts network traffic. It's obviously not a "unit test once removed" if I can literally swap out the entire language under test and not have to change the test.
Perhaps this part is not clear / well defined, but roughly, I meant that code coverage is (about) 100% for the lines added/changed, and some "reasonable" subset of possible breaking changes would be picked up by failing tests.

What I had in mind specifically in the answer, was the case of changing "interfaces" between parts of code. For example, the case of changing a function's arguments, or how it uses them, but omitting to change a call site. Checking that the call site just calls the function would not be enough to produce a failing test, especially without type safety. The test would actually need to assert on what the function does, e.g. its return value for a pure function.

Yes, I think trying to test against every single possible breaking change is not valuable.
They're long-haul airliners though. They're not economic to run on short routes. For the routes you're describing, running more A320s (or similar) would be much more economic and would be better for passengers since flights would depart more often, giving more flexibility in travel plans.

There isn't a jet in existence that's optimized for ultra-high capacity and short routes, and there isn't a market for one either. You can count on one hand the number of airports in the world that are seriously limited by number of arrival/departure pairs. Heathrow is #1.
Doesn't this compromise all of your passwords if one of your passwords is discovered? Sure, it would take a bit of thinking to realize what each part refers to and even realize that your password has some sort of generation algorithm, but it would be a bit more secure to hash that password in some way.

That's why I like using LessPass (even though people talk a bit of shit about it whenever it's mentioned on HackerNews). I have a single master password, the rest of my passwords aren't compromised if I accidentally expose one of them, and I can log in to any site from any device with a browser. Of course, use 2FA when you can, but it's nice to have a secure first layer of defense.
Exploiting remote execution vulnerabilities is doable, but why do that when one has the easy route of exploiting gullible users instead?
It's good to have a comprehensive document like this.

The document itself could be made more readable by choosing to break lines at word boundaries, not in the middle of words.
Same. It's only 16 frames.
> You can write a seperate function that handles database query, then call this function in your code under test

You can, but that still requires that you mock that call in order to test the method that calls your database query method. But, if you make it such that your method takes the result of the database query as a parameter, then you can test your method without having to use a mock. In other words, you can change this (which requires mocking get_db_result to test):

def a_method_to_test(param1, param2):
db_result = get_db_result(param1)
# do something with db_result

to this:

def a_method_to_test(param1, param2, db_result)
# do something with db_result

Now you can test a_method_to_test without having to mock out the call to get_db_result by just passing in whatever you want as the db_result parameter.

Basically, doing this will separate code that manipulates data from code that either writes or reads data. You can unit test methods that manipulate data, but you will need to do functional/integration testing of code that writes or reads data from other sources.
I'm a long time Linux Journal columnist, and I'm equal parts delighted and surprised by this news.

Thanks to PIA and Carlie for the work that went into this deal.
This seems to me like a very clean solution, is there a Chrome extension version of something like this? I'd love to tap on a password field, enter my secret key, and have it autofill based on the domain of the page.
Safety. Back then it was basically part of the Cold War. Today, what are you asking the people to risk their lives for? Making things civilian-safe is expensive.
This is accurate. I migrated to the cloud service when I wanted to add my wife to my account.

It was not an elegant process, and the friction kept me from following through for more than a few months.

I finally pulled the trigger, spent the time and hassle migrating everything, and am now glad that I did.
Not to mention killing your car. DV is amazing for many reasons, but one that people ignore to their peril is that there is a TON of elevation gain as you drive through the park. If you enter from the amargosa side, you won't see it much, but if you enter from the west (through Panamint valley) you will drop from ~4000' to 1000', then gain it all back over a 10 mile stretch, and then go back down to -280 feet when you reach the badwater. These passes on hot days can overtax radiators and cause breakdowns. They can also overheat brakes, etc.

Having visited several times myself, I encourage October-November as the best timeframe to visit.
It's definitely by him. There's even a link to his site in the corner... https://davidope.com/
What do you do for forced password change requirements?

Does your threat model include anything NOT bulk, ie where a human would see a password and guess the pattern?

Have you tried any of the password managers that have integrations, to automate password changes in case of failure?

Have you ever heard of the security concept of minimizing your attack surface?
How to CODE IOT WITH GE PREDIX. BEGINNING
No constraints will often be faster, but your data will not be 100% consistent.

Over time you _will_ have child child records pointing to non existing parents and the same with foreign keys. These often don't really hurt anything, until they do. Since most of the testing is with clean data, most issues due to bad data are in production and reported by end users.

I've worked successfully on systems without any real constraints and it is usually much better to start with and remove them later as needed. Adding them later is a pain as you first have to clean up the data and fix the code issues that created the bad data in the first place.
Show HN: Mask R-CNN Neural Network for Mapping Sport Fields in OpenStreetMap
So... knockout?
Build your own Blockchain in JavaScript
"Yeah the Bay Area is expensive but the tech salaries make up for it."

This could be good for people who send some money back home (e.g. Indians). If you have a high number is absolute terms, then you can send more money to family.
Re-learning Linux: Train yourself to type apt without -get