skysight-inc/HackerNews huggingface dataset:
I have a plain-text file storing various important information, amongst it passwords, on an encrypted LUKS volume at a server running in my basement that I can access via SSH from anywhere in the world. The "password manager" for that is a simple bash wrapper around an awk one-liner that's called `secret` and placed in my $PATH.

#!/bin/bash
secrets_source='/home/colo/.path_to_secrets_file'
[[ -z ${1} ]] && {
echo "Missing subject."
exit 1
}

[[ ${1} = -e ]] && exec /usr/bin/vim "${secrets_source}"
exec /usr/bin/awk 'tolower($0) ~ /^= .*'"${1}"'/,/^$/' "${secrets_source}"

The ad-hoc format for records stored in the secrets_source is:

= some identifier
free text
more free text
blah blah foobar

= another identifier
more free text
fizzbuzz

An empty line (or EOF) concludes a record.

`secret <some-regexe>` performs a regex search over all identifiers and prints all matching records found. `secret -e` invokes my editor to add new records/view all records in vim.

If someone were to extend this with GPG, they could have encrypted data at rest while the host is up with the LUKS volume's contained fs mounted. I don't feel a pressing need for that, however.
Insertion/generation don't prompt you for your password.
> sounds absolutely bonkers to me. You own something and then suddenly you no longer own it.

The fact that companies can own IDEAS don't sound bonkers to you? We should begin the conversation at that, not at the fact that the owning of ideas expires after some time.

> It would be like if you woke up one day to see a family of squatters living in your house

It's definitely nothing like that. A proper analogy would be saying you woke up one day to see someone else has the permission to copy (and sell copies of) your house. While you might not like it, it doesn't take away things you already have.
I don’t know why you are being down-voted but here’s my modest +1 of moral support for having made a factual statement and paid the bitter price for it...
I use the same algorithm and am very happy with it.
I wanna go on a geek cruise!!
I guess that it can be partly attributed to the fact that Indians don't doubt anything even if it's too good to be true.

A few years back a neighbor called upon us with his young son who had just completed his graduation. It turned out that wanted to seek my opinion on a job offer his son had received. His son had graduated from a tier-III institute in India; below average academically and all that. Apparently he received an email offering him a job in London, some 110K pounds/annum, all without an interview.

I attempted to explain that it sounded fishy if not outright scam, but they weren't ready to listen.

A couple of weeks later these guys told my Dad that the ones who offered the job were asking for money under some pretext or the other and that they've decided not to move ahead with it.

----

The scammers realize that people are desperate, gullible and keep on tricking people for years, even decades. Just like the Nigerian prince who was finally nabbed last week [0] after a couple of decades.

[0] https://www.theroot.com/white-nigerian-prince-email-scammer-...
many places in the US are like this as well. trains used to criss-cross many cities and towns, but those lines have since been paved over for roads or just fallen out of use altogether.
This is like the boiler room stuff from "Wolf of Wall Street". Unfortunately it is not reviled rather held in awe.

One thing which is never talked about in these articles is the failure of Indian government (past and present) to find effective family planning policies. Population growth is through the roof and hence unemployment is huge. With not much left in terms of job prospects lot of people turn to shady stuff.

And while the article makes a case for IRS and Microsoft scams, slowly these guys are running domestic scams too. Lot of people receive calls claiming to be from a particular bank/digital wallet company/phone provider. The victims are asked to share the OTP sent to their mobile for "verification". These OTPs are mainly for digital wallets. Once the scammers reset the password they withdraw or spend most of the money in the wallets.
Authorization Code Authentication Flow in Python
Out of curiosity, how many of your co-workers use adblocking plugins/extensions? Also do you use it at work and do you whitelist Google?
I understand. I also understand that even with a psychiatrist prescribing it appropriately, with full evaluation and diagnosis for depression, a particular SSRI can make the patient worse, not better. I've had friends spend years working through various prescriptions (and combinations) to find what worked, and it often included some hellish periods when they felt far worse until they hit on the right drug(s).
The death and life of the 13-month calendar
Guns aren't dangerous! It's the bullets that will get you!
The question is why would we put a man on the moon?

I grew up with Moonbase Alpha (although I am not expecting to be thrown into space by a major explosion) and want this as much as anyone else but is there any reason (mining, strategic, know benefits to research) which justifies the price?
I think the real question is why we want to put a man on the moon. Imagine you climbed mount Everest with no climbing equipment and then 30 years later someone asked you why you haven't done it again.
From a memetic/selection perspective, the war has been phenomenally successful in perpetuating its own existence.
Being able to run tests in a random order is indeed pretty important. It is not only an indicator that the features were written with high quality, but that the tests are high quality as well. Things such as the mocks mutating happen and the developer writing the tests should avoid those kinds of things happening.
Reporting and journalism are not the say thing. They are not synonyms. Yet, in a very Orwellian sort of way, that's how they are used. It's so effective that you are pushing back against me for stating the obvious. If that's what you consider arrogance then yes, we're done here. I can't help you. You're been sucked into the void.
It's a good question and I think strikes at the heart of the idea.

A lens transforms a family of rays to a pixel location. Given knowledge of that pixel's intensity there is a degenerate solution for the original ray (in terms of it's location and direction at some plane). This degeneracy is one thing that leads to blurry photos.

The micro lens camera referenced in the article spreads this family over more pixels in a known, analytic way to make the solution more unique. In principle it suffers from the same degeneracy but each micro lens limits the possible location of rays so if any of the pixels under it are hit then the general location is set and the exact pixel in the group determines the direction.

The diffuser works similarly but spreads direction and position location over many pixels and in a random way (seeded by the material and it's precise placement). While this spread can not be calculated it can be discovered through calibration with known point sources.

In both these latter cases one inverts this analytic or calibrated ray->pixel matrix and applies that to the measured pixels to reconstruct the rays that have likely caused the measurement.

In the case of the diffuse "lens", the required matrix inversion can be computationally expensive at best and impossible at worse. However, the methods of compressed sensing (in particular L1 regularization) allow an approximate inversion to be done in a relatively fast manner.
Chauvinism has blinded lots of people around the world and there is no difference b/w killing innocent people or killing terrorist. Cross shelling and killing innocent people is not heroic. I ll tell you what is heroic in this fragmented world - peace ,love and respect for humanity
Sure SQL is pretty good as far as entrenched 70s techs go, but that's a pretty low bar to clear for design (separate from making something which people actually use).

My immediate follow-up post https://news.ycombinator.com/item?id=16050403 had some pretty concrete starting points. What more do you want to envision the entire language?
Free Modified Synthetic SgRNA for CRISPR
Thoughts on attracting clients as a freelance developer in 2018
The Origin of Stimulus
Yes, I really do this. No one said that this method isn't without its disadvantages.
Yes, but what happens when everyone is on the short run?
People die in the hundreds in India everyday (52 Accidental, and 32 Un-Natural every hour [0])

These ARE due to the sheer population numbers, but you cannot ignore the fact that everyone is on a very quick race, you can run it and die in the process, or you can scam some guy with a bicycle/scooter/car/heli/jet and get there quicker + safer.

[0] http://ncrb.nic.in/StatPublications/ADSI/ADSI2014/adsi-2014%...
> At the heart of the upper deck was, thus, a kind of louche and tragic nihilism.

Also aerodynamics.
26 Lessons from Being a Developer at a Startup
For the same reason companies make SoCs. It saves money. Intel's idea with EMIB (multiple dies in one package) is to save money by using older semiconductor process for things such as the southbridge (ex: USB) that don't need the latest and most expensive process. This way, they'll also get more value from their investment in previous process nodes.

Routing HBM to the GPU using PCB traces is expensive, and in the low-to-mid end, saving money on PCB and cooling matters. If EMIB is going to be used anyway, why not have the GPU in there as well. With 1024-bit 4GB HBM on package, memory bandwidth won't be a problem, and the i7-8809G will likely be faster than a PS4, which means it'll be good enough for 1080p gaming.

KabyLake was probably chosen because this design was finalized before Coffee Lake. The next iteration will likely have more cores.
I use my browser’s password manager, which works across devices. It’s Mozilla, so I trust that they take the security of my data very seriously.
Yeah. In fact, I think psychotic prescription is a trial and error treatment. It sucks.
We Need to Stop Watching the News
John Hammond used a tiny genetically-engineered elephant to impress investors in "Jurassic Park".

http://jurassicpark.wikia.com/wiki/Pachyderm_Portfolio
I got a 502 trying to visit, I suppose having robust JS doesn't mean much if your backend is not robust! lol
Does it? Are you including vested stock at a large company? The proportion of talent in the Bay Area is the same - from my experience interviewing people - in other tech hubs.

Edit: made less jerky
Good enough MEMS aren’t good as laser ring gyros, a single sensor isn’t even good as fiber optics but multiple sensors with per sensor drift bias taken into account is good enough.

You can’t strap a 150,000 INS on every shell you can’t even strap a 30,000 FOG INS on a shell.

Basically since we now want INS and GPS on every bloody field equipment and anything above a 20mm grenade should be guided muinitions you have to make some compromises.
And MEMS aren’t that bad yes they drift but for their usecases the drift is negligible.
Chevrotain – Parser Building Toolkit for JavaScript
Sure but shouldn't those drugs undergo FDA approval for those uses? You make it sound as if they're very effective without many side effects so (as far as FDA approvals go) it shouldn't be too hard.
I think that is changing, as more opening in Seattle, Washington, New York, Boston, Denver and Austin. If I am based in SF/North Cal, yeah, I am okay working in Bay area. Since Bay area is getting more expensive to recruit, companies seem to be more willing to accept more remote workers (but usually limited to senior positions).
I use https://bixense.com/pwcalculator/ (GUI for hashing alias + site) and dedicated passwords for services I need to access more often.
Download list of Twitter followers
Hahaha. The funniest conversations I’ve read this year!!! Poor spammers. LOL
Yeah, when we moved to Texas from the North, we noticed that cars rusted from the top down, rather than the bottom up.
I think that one business model that will never get old is information spread. Most (all?) of the problems we see in the world today could possibly be fixed if people were more knowledgeable. And I don't mean necessarily textbook knowledge, but common stuff as well.

For example, I live in a somewhat small city and it's not easy to know where can I go to have swimming classes. Google could help me with that, but usually these places aren't very tech-savvy (or they do have a certain presence, but they don't keep it updated).

Another great example: https://www.pointy.com/.
The arrogance is that you aren't actually arguing your case you just keep repeating the same thing without anything to back it up.

It might be your personal opinion that they should be separated but you haven't actually provided any evidence.

I don't need your help as I am well aware of what journalism is and came to my conclusion based on my own thinking not on what I read.

You on the other hand seems to be caught up in some conspiracy theory of your own making.

You are basically saying that a launching a space ship and space travel is not the same thing which is a trivial and useless observation.
Emacs has a built-in mode for doing this - picture-mode
That's the conclusion I also came up with. It's pretty clear that the browser is the new platform for apps.

Though I wonder why Firefox OS has failed this hard. I never looked more into it, but isn't it a platform centered around having web apps as native apps? I think some day every OS will be similar, so was it ahead of time?
Welcome to Linux Journal 2.0 It's not dead after all
Oh yeah, this combo is actually one of the better modes in Emac-land. Whenever I see yet another ASCII art link posted here, I just gaggle cos Artist mode is that good.
I'm so jaded by expert opinion these days. For decades doctors have been recommending a low-fat, high carb diet and saying things like saturated fats are bad for you. It's becoming very clear that there's no evidence this is considered healthy. If anything, the demonization of fats around the 80s coincides with increasing obesity rates in the US.

The American Heart Association literally has an infographic on their website that tells people to eat more polyunsaturated fats (i.e. vegetable oils) and completely avoid coconut oil (https://healthyforgood.heart.org/eat-smart/infographics/the-...). Anyone who has studied the science behind ketosis knows this is completely bonkers.
If you can read a wsj article, why can't you read it?
India only has a 1.2% population growth rate including an aging population (https://www.statista.com/statistics/254469/median-age-of-the...) which is down from 2.2% in 1980 and well below it's ~7% GDP growth rate.

They are simply dealing with the normal issues for a rapidly developing nation. Plus the new generation entering the work force is based on their population growth rate ~20 years ago.
Thanks for sharing this; I've been doing the same thing mentally for years to get around a memory issue and a need for unique passwords.
Pen and paper. I keep a small notebook wedged under my desk and a back-up in a fire safe.
Stimulus: A modest JavaScript framework for the HTML you already have
Not a doctor, but: it seems the real problem with your claim is that it's patently absurd to say that a symptom can only be a symptom if it has no cause. Symptoms present themselves that we might find the cause of the problem.

Do you mean no cause other than a chemical imbalance? I still think that's shaky ground, but I don't really know enough to say.
I agree that many companies should pay more competitive salaries , but doesn't this disproportionately hurt people in higher cost of living areas? Everyone else gets a pay increase, the company's bottom line tightens, and higher cost of living area folks get nothing for it. I live in an area with a relatively low cost of living, and the only way I would consider moving elsewhere would be if the salary were increased proportionately to that higher cost of living such that I could maintain a similar level of comfort (beach+not negative degree temperatures ~ a couple $K).
I'm surprised at how little advocacy there is for 1password.

Yes, it's a single point of failure (probably more, depending on how you choose to define them) but it is invariably more secure than me remembering my super-nifty password algorithm.

It's not perfect, but I trivially generate very long passwords for every service, and have to remember the master password only of my email and my 1password account.

If anything is truly important, it will have 2 factor authentication.

If someone has access to my unlocked physical machine and an unlocked 1password UI, I'm screwed. Additionally, they could use the wrench approach [0] to gain my credentials.

This is not a use-case I'm actively trying to prevent. Nor is protection against state-level actors targeting me in particular.

Further benefit of 1password: my wife and I both use certain shared logins to access things like credit card accounts.

Instead of me having to get her on board with my password book, or special algorithm, I can just move a login into our shared password vault.

I suspect most people reading this are in a similar boat - we're more than happy to pay a few dollars to hire millions of dollars of specialized security knowledge to outsource this problem for us.

This is just too mundane a solution for most people to comment on.

Long live 1Password!

[0] https://xkcd.com/538/
Sustaining and growing LoopBack as a successful open source project
Man why you are sharking all 'crooked' links from Indian MSM?
Any agenda or just killing time ?
https://news.ycombinator.com/item?id=16050437
Thanks for the links! Do you have any recommendations for short stories and books in general that you find cool? I haven't been reading much and I want to change that.
The overall benefits are huge: we also generate thousands of hours of volunteer service a year by helping people stay active by putting in time at foodbanks, cleaning thrift stores, what have you. Keeps everybody healthier, reduces cost to Medicaid on the back end taking care of these folks' medical needs.
The point of steadily increasing the fees for renewal is that you can't profit indefinitely. You can own something forever, but eventually you'll have to pay fortunes for it.
> Both of these arguments were put before the Supreme Court in 2003 (https://en.wikipedia.org/wiki/Eldred_v._Ashcroft), and the argument lost 7-2. Somewhat unusually, the it was not a party-line decision.

Can the Supreme Court be lobbied to act in favor of the uber-rich copyright holders? Are they disclosing their conflicts of interest?
I used pen and paper for a decade now. I have a folder and preprinted forms where I note passwords with pens. The folder had like 20 sheets. This worked pretty well and is without doubt the most secure variant -- I always have my folder with me. Note that this only stores the important passwords. I use weak and dumb passwords for non-important services (similar to disposable email boxes).

Anyway I want to change to a paperless variant due to the increasing amount of "important" services.
What undefined behaviours are those?
I'm happy to take hug's claim that there is no such evidence at face value. What I'm really interested in, however, is whether the absence of such evidence causes him/her to believe that there is no difference.
why would somebody hate HN?
But this could be seen from another POV: if you live in a high cost region, it’s your choice. Is it worth it?
Humble Bundle: Python
My wife and I do the same which is hugely convenient. You can store more than website logins as well, such as credit card numbers, drivers license details or our passport information.

We do a lot of travel and financial witchcraft so having full access to each other’s into at the unlock of a thumbprint is extremely convenient.

We also have a team vault at FarmLogs which is hugely helpful for sharing access to singular accounts.

It’s such a valuable tool that I don’t even think about paying for it.
I have no idea whether this will work or not, or if it will have unintended side effects.

I'm more interested in another topic briefly touched on in the article. Has anyone produced a theoretical map of a post-apocalyptic "hot Earth?"
It is interesting to read Lessigs view and how he thought he lost the case:

http://www.legalaffairs.org/issues/March-April-2004/story_le...

-------------------------------

There were two points in this argument when I should have seen where the court was going. The first was a question by Kennedy, who observed,

"Well, I suppose implicit in the argument that the '76 act, too, should have been declared void, and that we might leave it alone because of the disruption, is that for all these years the act has impeded progress in science and the useful arts. I just don't see any empirical evidence for that."

Here follows my clear mistake. Like a professor correcting a student, I answered,

"Justice, we are not making an empirical claim at all. Nothing in our copyright clause claim hangs upon the empirical assertion about impeding progress. Our only argument is, this is a structural limit necessary to assure that what would be an effectively perpetual term not be permitted under the copyright laws."

That was a correct answer, but it wasn't the right answer. The right answer was to say that there was an obvious and profound harm. Any number of briefs had been written about it. Kennedy wanted to hear it. And here was where Don Ayer's advice should have mattered. This was a softball; my answer was a swing and a miss.
Most people don't have TSA precheck because they don't fly enough to bother doing it or don't know anything about it so don't research it further.

If you are rich you're flying in business/first class or have elite airline status as it is, so you'll get priority screening regardless of whether you have precheck or not. If anything the biggest cheerleaders for TSA precheck are the airlines because speedier security means fewer people missing their flight due to long security lines.
>> login names

> This makes user names static.

Does it? I can understand why making it a foreign key would make it static, but why would making it a normal key make it static? It seems to me that making login names unique would be preferable, same with emails.
I have the exact same issue, mine also being over 20 characters which used to be above the length limit on a Microsoft account used to be 16 characters, so glad they changed that
One possible vector suggested by Matt Tait (pwnallthethings) on Twitter: if speculative operations can influence what the processor does with the cache, the results can be observed with cache timing attacks. If the branch predictor reads the results of speculative operations, it's real easy, as he suggests here:

https://twitter.com/pwnallthethings/status/94797892728438374...

but (as he notes elsewhere) there are plenty of other channels in an Intel processor for information to leak...
Journalism is a lot of things. Seeking the truth might be a goal for some journalists but the be all end all definition of journalism it certainly aint.

Furthermore making truth the only way to define journalism basically render it non-existing as there is no objective way to define "The Truth". On top of that even if we interpret "seeking the truth" liberally you still end up agreeing with what I wrote as seeking is not the same as finding and thuse we are back to it just being interpretations.

You are proving my point and is in fact one of those who keep discussion journalism as something with some higher goal than what people want to pay for.

Again the market has spoken it doesn't care about your version of "high quality".

It's no ones fault it's just how it is and you just can't get to terms with that. That's a 'you' problem, nothing else.
That's an interesting link, but I think it's sort of the wrong question to ask. The last question of 10 unmanned vs 1 manned is closer to the the real question, but I think these operators are not used to making tough resource decisions because our military is so over funded.