skysight-inc/HackerNews huggingface dataset:
JWT is pretty easy to understand.

Create a token, put your userId in it, set an expiry date.

If a request comes with a token check if token is valid, check the userId & expiry date otherwise throw error.
Do you consider it likely that the poster I replied to routinely uses the dialectal variant rackless over the common spelling reckless?
That is not related to the search engine itself, this is due to the amount of content available now compared to the 90s.
Nice, move... But you also have to choose the right shampoo :)

And some shampoos might have organic ingredients, while the contents is manufactured in an environmental damaging fashion... Others might be environmentally responsible, but not organic. Some might be both, but nighter of those is a guarantee that it's good for you. Organic snake poison, might be organic, but it's still very unhealthy :)

Point being that consumer choice is not a good way to solve these problems.

That said, eating less meat is generally a good approach. But replacing it with organic free range meat is not a perfect solution without a study. Could we feed the entire planet this way? Is it as efficient in terms of fodder needed? Is free range better than caged in terms of animal welfare (usually, yes, but there could be caveats).
Bitcoin Cash skipped activating segwit, so they seem to be on track to avoid any of the existing long term solutions which require segwit.
GNU Ring is also worth mentioning here as an alternative to Jitsi etc.: https://ring.cx/

Pro: does not depend on Java

Con: still buggy
By "contribute to society" they mean companies should help advance the gay agenda?
The Washington Cannabis Business Executive Convention
Why is the crypto market so down today?
In which case you're really getting rich off ownership of companies in the index.
People keep saying that. I wonder if they have actually read the white paper. The lightning network will only work for exchanges who will keep channels open between them. Getting a graph of every wallet connected to every other wallet is a mathematical impossibility.

The lightning network is essentially instituting central banking all over again, this time with bitcoin. "Oh so you want to transfer coins quickly? Better keep them at well connected exchange so it can be instantaneous, and you'll only be transferring between exchanges by the way."
Is the loss for Airbus really so dramatic? Maybe having a complete line-up and being prepared in case demand had developed differently made it worth having this loss. Car manufacturers also don't run all models at a profit but still need a full line-up to retain customers. I don't think it's that different for airlines. Airbus makes their money with A320 (plus some from A330 and maybe at some point A350).
I read an article in FT this morning about how the Carillion problems were hinted in annual reports going back to 2011 (and also how shorting them was popular throughout 2016 and 2017). Hindsight is 20/20, but there's a real chance that Blackrock are just pretty good at what they do.
Sure, the cop should be charged. But why should the caller not be similarly liable?

The fake situation called in was so serious (something like being armed and holding hostages, having already murded multiple of them if I recall correctly) that the caller should have reasonably expected a lethal response was possible. The law generally regards getting somebody to kill somebody for you as being the same as pulling the trigger yourself, so at least a manslaughter charge for both would be more than reasonable.
Seemed it's going to be end...
Optimal chess performance is not remotely achievable by humans.
I think that Auth Tokens are easy to understand, use, and implement. They can generally be invalidated if the developer feels that they have been compromised.

Some APIs also use self-invalidating auth tokens based on an expiry date. For more secure data, I'd prefer that.
Quote:

> The symptoms can last from weeks to years, and in extreme cases as long as 20 years, often leading to long-term disability. Most people do recover slowly over time.

Doesn't look like the same thing.
Yarn Workspaces
I wrote about this when I dropped a lot of content from my site: https://petermolnar.net/making-things-private/
I’d say it depends a lot.

If your API just serves public non-user-specific data, a simple API key might be okay. The obvious downside of this method is that a user leaking their client API key is a big problem, especially if your users are likely to distribute code that makes requests (e.g. a mobile app that makes requests to your API).

The state of the art is probably still OAuth, where clients regularly request session keys. This means a leaked key probably won’t cause problems for very long. The obvious downside of this is complexity, but that can be mitigated by releasing client libraries that smooth over the process.
I would suggest everyone to stay away from jwt unless they're willing to spend the time to learn how it works.

I believe the meta is that jwt is solid itself but allows doing things "wrong". Guardrails so to speak are insufficient if not outright lacking.

I'd say just go with plain text token for a web app. I don't like the idea of trusting the client because I don't understand how jwt works.
That is a personal attack and insubstantive comment.
> Think you might have a mild superiority complex going on there, buddy.

Same to you.
Is there an ETA for the Lightning Network? It seems to have been 'coming soon' for a while.
It didn't detract anything for me. I'm able to read, comprehend, and digest any wisdom even if it's written with language which I wouldn't use myself. I think it's a really useful skill because you'll find most people do use different language to you.
There are many cryptocurrency exchanges that don't accept real money (because then they'd be subject to regulation), so to trade there, you need to buy some cryptocurrency elsewhere and move it there before you can trade.

Many sites recommend buying Litecoin or Ether for that rather than Bitcoin, exactly because Bitcoin is so impractical. Bitcoin is failing as a currency even in the cryptocurrency market.

Recently there was a bitcoin conference that stopped accepting bitcoin as payment because processing was too expensive.

Cryptocurrencies might become mainstream payment systems some day, but it's not going to be Bitcoin. Ether is probably the most likely candidate.
The 2017 madagascar one might actually have been a combination of rats and pneumonic plague. But yeah, it is good to pay attention to all possible routes of transmission and see where you can intervene.
Interesting idea...

Catching things with blind tests as a way to increase compliance while reducing the burden of documentation.

If it could be done efficiently, that would certainly be better.. I suspect that tests might be expensive to scale, and not offer sufficient precision... Antibiotics might disappear over time, for example.

IMO we should always strive to improve regulation and make it more efficient.
> the good that Gates has done with his foundation has far exceeded any bad that was done through MS business practices

Do you realize that the money $billionaire using were taken away from $company customers? Those money were not created out of thin air by $company. They would have been used in many other ways by the customers - including making the world a better place.

The only value $company really creates is in the products and the company behavior - everything else is just transferring money.

Now, transferring money from large masses to socially beneficial organizations it's done by taxation through a democratic process or by voluntary contribution.

Individuals having the power to grab your money and decide how to spend it, like kings in a feudal society, can easily do more harm than good.
>> However, there seems to be enough smoke to assume "some kind of deliberate attack".

I strongly disagree. Its highly irresponsible to claim an illness of unknown source is an attack and turn ignorance into casus belli. The unquestioning certainty of an attack absent of evidence has fuelled my skepticism. I'd consider self-inflicted foolishness from US's own incompetent secret services more likely than an "attack".
No: in other countries, they wouldn't send trigger-happy ninjas based solely on a dubious phone call.

In the few worse cases, it will mean some lost time, because the first responder cops will have to wait for assault teams. But in the 95% cases were a SWAT team wasn't need, it prevents unnecessarily violence escalation. And there are many more lives saved by non-escalation than lives lost to intervention delays.

Also, SWAT teams are considered elite forces (almost?) everywhere; but in some countries, elitism is based on sharpshooting abilities, in some others it's based on good judgement, clear-headedness and restrain.
>> SWAT teams cannot be expected to be fully prepared for both a hostage situation and a so-called prank.

Long as it does not happen to you. Now, imagine someone sends a SWAT team to your house, and the SWAT shoots your kids because... they moved?

Would you, then, show up on HN telling us that is OK? "Yeah they shot my kids, but... it is A-OK because... "SWAT teams cannot be expected to be fully prepared..."?
There isn't a clear set of policies that will put an end to mass shootings, at least not without overhauls in the current interpretation of the US constitution.

America Uncovered (same crew as China Uncensored) made a pretty-balanced video on the topic https://youtube.com/watch?v=hAtLnTyimT0
We use it for all production workloads together with API Gateway in the frontend, AWS Batch and RDS in the backend.
Building a niche product sounds mostly enjoyable and seems like a happier, less stressful lifestyle.

What's the person doing the startup working towards? A happier life? Why not just go directly to that?
OAuth(Robust, Many Libraries), JWT(Easy to understand and implement), API Keys/Tokens(Simple and fast)
well after hearing that you managed to burn your screen with your game I'm not exceedingly inclined to try it to be honest :D
But how else will I buy cryptokitties??!?
What Should You Know When You Hook Up with a Sexy BBW
Man ruptures throat by stifling a sneeze
He's really good but often overly bullish on Boeing. Just because B787 and A380 were developed at the same time doesn't make them comparable. He nearly ignores the A321LR (which is successful because of the new model) and somewhat downplays that the B747-8 (the actual competitor to A380) isn't doing well either. Boeing didn't invest as much money in the B748 so it's not as severe but comparing the A380 with B787 is misleading.
Black Mirror should do a modern take on this one day.
That indeed could be. We didn't test mixed models of transmission, but we took the first step here by testing all three models independently.

Xavier Didelot did some work on testing mixed models for two cities, 17th century Eyam and 19th century Cairo. He did have to further simplify the models though - there are some restrictions on how many floating parameters you can have while the models are trying to converge to the parameter set that results in the best match with the observations.

Epidemiological analysis of the Eyam plague outbreak of 1665–1666:
http://rspb.royalsocietypublishing.org/content/283/1830/2016...

Model-based analysis of an outbreak of bubonic plague in Cairo in 1801:
http://rsif.royalsocietypublishing.org/content/14/131/201701...
My reply is to this:

One reason swatting is not done so much in Europe

Swatting is the act of making the prank call. It has nothing to do with how the SWAT team handles it. Nowhere have I argued that European police wouldn't have handled it better. That is a completely separate question from the question of how often these calls get made and why.
The creators have also pretty much premined or own all the "coin".

They even warned people on the Ripple website not to speculate on it.
I've never seen such a distinct pattern for display burn-in. What monitor do you use? That's quite interesting.
Frankfurt is nowhere near runway capacity. They built another runway <10yrs ago for that reason. Munich is the only airport in Germany somewhat restricted by runway capacity at the moment.
It seems to be an internet myth that Poland was laregly spared. Some guy over at AskHistorians actully dug into the evidence: https://www.reddit.com/r/AskHistorians/comments/79dwua/why_d... - it is a fascinating writeup.
> I frequently swipe "See you soon." It always, always renders as "See you son"

This works fine for me with GBoard. Are you drawing a little circle on the o to indicate you want the double letter?
Not invented here syndrome IRL
What Will Be the Top Tech Hiring Trends in 2018? An Interview with Jurgen Delfos
I'm suspicious of growth curves that are still supra-linear when plotted in log scale...
I'd like a view of the technology keywords on the front page for tech stories. Sort of a buzz metric for things gaining traction and things that are fading away.
It currently looks like you'll get more direct connections and thus fewer hubs. Some routes will never be direct (rural US to rural Europe) but it's enough to have 1-2 hubs serving those. All major city connections can be direct. However, that will not necessarily reduce congestion for large airports, the NYC area then has to serve more destinations than before (by shifting away from hub traffic to LHR).
OpenId its an extension of OAuth. OpenID provides "Authentication" while OAuth or JWT provides "Authorization." But the real question is what language are you using? If you are using ASP.NET I'd recommend reading this: https://docs.microsoft.com/en-us/aspnet/web-api/overview/sec...
Picking up speed... upwards? At the moment you posted it turned around, and 31 minutes later it's at 11.9k.

Trying to read this short-term things is uninformative.

Oh, in the time I typed the sentence above it went from 11.94k to 11.99k.
Trusting in what sense? If my token only has the userId as data, what kind of trust is needed?
Muhtar 68 yaşında 5. evliliğini 19 yaşındaki kızla yaptı – Actualtr
You can tell a sociopath to not only do thing A but also B, but that won't necessarily mean that both thing A and B will receive the same effort.

To benefit society, one has to be capable of empathy. Whilst human individuals often are capable, the plural of human is cattle.
So I hear you want to talk about zoning...
All modern planes are similarly advanced. B787 and A350 are as well. A380 is just better known so that more people have flown with it. It's certainly not the best technical solution (designed for larger size which makes it inefficient). Many passengers love it because it's so huge but that doesn't help airlines. Same as with comfort in economy, people like to complain about standards but still end up booking the cheapest flight.
Anyone know amy good resources for the following scenario:

WEB API that a device needs to authenticate to.
Can't store password on device (it's a device we don't control).
No user, so authentication has to be all autommated.

i.e. we need to run software on a clients machine, and it has to authenticate to our web api to send us data.

We obviously don't want to hard code the credentials in the software as that can be trivially extracted.
Yes, in YU they used both. It was localized to member states tho. Croatia used mostly Latin, and Serbs used mostly Cyrillic. They often were able to read and write both non the less.
I had completely forgotten about that "crushed" business, but you just reminded me.

If I am remembering correctly, we used uncrushed binaries and a non-crushing kernel while developing on our own PCs. (We used plain-vanilla garden-variety Intel PCs to develop on. Very few developers needed to interact with the actual BeIA devices.) The crushing part didn't happen until somebody on the build team was building the final binaries to go onto the BeIA devices.

Sometimes, the crushed build process wouldn't work! It was super finicky. That would prevent a test build from going out when it was supposed to, and the testers would have to twiddle their thumbs for awhile.

Other than that, I can't tell you much about it. I was a lowly application engineer. I didn't have to get into all the picky details about how the kernel interacted with apps.
I've found a Brit involved in a US swatting: http://www.independent.co.uk/news/uk/home-news/robert-mcdaid...

And someone swatted Mumsnet: https://www.newstatesman.com/sci-tech/2015/08/troll-hacked-m...

But generally the lack of trigger-happy police makes it much less likely in the UK. I suspect a lot of protocol was built up in the era of regular (most, but not all false) bomb threats from the IRA.
When trying to convert currencies, try using three-letter codes for the currency. To take something a bit more obscure than dollars and rupees as an example, "500 PLN to RSD" (Polish zloty to Serbian dinar) will definitely work in every search engine.

As far as I understand it (I never actually looked it up to confirm), currency codes = two letter country codes + first letter of the noun from the currency name, so they're relatively easy to guess right.
My argument here is that it is not reasonable to let the caller off with a slap on the wrist and then in an environment where prank calls are increasingly the norm, hold the police solely responsible for the outcome. That is a broken model that will only create trouble. Whatever problems the US police force already has, it only gets worse if you say "Totes fine for someone to make prank swatting calls, but fry the police every time they mess up."

I cannot fathom why that isn't obvious on the face of it. Setting people up to fail is a thing. How can so many people apparently not see that?
Roadless Forest
Some libraries don't make it easy (or possible) to check that the algorithm used by the JWT sent by the client is in fact the algorithm you're using and want the client to come back with, see i.e. https://auth0.com/blog/critical-vulnerabilities-in-json-web-...
Well, its kind of personal, but not meant as an attack. I find this style of communications dishonest, since non of what you wrote was reflected in either of the parent statements. You comments usually tend to be more thoughtful and reflected than that.
The emphasis would be incorrect if the term were reversed - RankBrain is a Brain for Ranking like PageRank is a Rank for Pages.

No doubt there is someone in Google, however, who has a project for ranking AIs called BrainRank for their own amusement.

Anyway, your observation is also an amusing interpretation.
It’s amazing how many people are against crypto currencies for some odd reason. A correction is being called a collapse, this is just pathetic.
Passengers prefer frequency over aircraft size. DEL-BOM is like JFK-LAX. If capacity allows, airlines should (and do) fly 30 daily A320 instead of 10 daily A380. Fuel consumption of A320neo is lower (esp if you can push utilisation higher) so that there's no real reason to use A380.

Runway capacity also isn't really, A320s (and B737) can be spaced very closely on approach and departure, up to a third of that of a A380.
My problem with the comment was not the dirty words (I love me some George Carlin and Louis Black), but the act of name-calling. The very first sentence of the hacker news guidelines for comments is "Be civil" [1].

[1] https://news.ycombinator.com/newsguidelines.html
Coinmarketcap shows prices in USD while most cryptos are trading against BTC, so what you’re seeing is mainly the drop of BTC against the dollar. Coins are also dropping against BTC of course, but not all of them, you can see that in an exchange like binance
"Seen from Europe, this is ludicrous."

What? Seen from Europe, by someone with a Dutch law degree, this is perfectly expected and reasonable. I mean, if this surprises you, look up 'eggshell skull' (or 'pantoffelarrest' if you speak Dutch) which, while not the same nor directly applicable here, is a good illustration for how much the nerd concept of 'guilt' deviates from what is under the law seen as 'guilty of creating the circumstances that lead to a certain outcome'.
> The police are trained to wound you and take you alive.

Police should be trained not to rely on firearms. The gun is a last-ditch option to protect the cop's life, not a way to neutralise citizens.

When a police officer shoots, he ought to shoot to kill, because there are very few and extreme situations that grant him the legitimacy to shoot. Very few officers experience such situations, not even once in their career.

Policing has very little in common with soldiering, and vice-versa (although we wrongfully use our soldiers as cops in foreign countries, with unsurprisingly poor results).
While the economies of scale often offer a discount, there are some possibilities here, power cost increases when demand at a single location increases beyond a certain factor, inherent network capabilities suit a decentralized service, network services can route around censorship and handling heat and safety cost are not linear when resources are centralized.

So perhaps switch the laptop for a wall based crypto-heater packed with silicon (see here for the heat output of a gaming pc vs a space heater https://www.pugetsystems.com/labs/articles/Gaming-PC-vs-Spac...) and there may be some potential there, maybe Elon can throw a battery in there too...

It's certainly fascinating that for all the talk about blockchains and ICO's I've read very little about the fact that the internet has been augmented by a distributed cryptographic system available for rent, altcoins that rely more on CPU and memory and therefore discourage GPU and ASIC use might mean the network moves to more general computing power for rent, interesting times as they say.
Look at the headers on the OP page. Those are the percentage for 1h, 24h, and 7d changes.

cryptowat.ch only shows the 24 hour change and that matches coinmarketcap.com's value.
There was a time when autocorrect on phones was moderately useful. That time has past. One of the first things I do with a new phone now is turn off autocorrect completely. It doesn't bother me to manually correct my own mistakes, but it bugs me a lot to have to correct the mistakes of the freaking robot that's supposed to be saving me time.
It's possible that a smaller install base would lead to less software being developed though (even if the games would sell for use on emulators, that's harder to predict), so hardware sales induce software profits to some extent.
If you can do that at Google's scale I'm sure they'd be happy to hear your proposal. I really doubt Google's engineer wanted to give up the precision (they'll use it for their daily job as well), I just think they couldn't justify the additional resources.
Within your own network a simple key/secret combination is enough, as the secret can just be stored as an environment variable, for example.

For users you'd need some way for the users to "fetch the secret", which is effectively what logging in is. At that point you should just use JWT or oAuth.
> We won't see big businesses support mainstream crypto payments until the demand is high enough to justify the risk.

There is also a risk with accepting credit card payments, which is part of the reason why businesses don't actually process credit card payments themselves. They outsource that to a specialized third party that deals with the risks, like Stripe. The same thing is true for Bitcoin; almost every online store uses BitPay, who take care of the claimed volatility risk.

(Also, there was a pretty stable three-year period for Bitcoin from early 2014 to late 2016 or so. Widespread adoption failed to materialize, so it's not like "once it's stable it will miraculously be adopted by everyone".)

> the fees are very high

Yep. Fees, delays, and unreliability are the actual problems of the moment.
Is it a multi-dimensional database?https://en.wikipedia.org/wiki/Data_cube
PAST looks good.

https://github.com/paragonie/past

Basically JWT but without the pitfalls as far as I can see.
Gosh, thanks for recognizing that I am usually thoughtful and then not giving me the benefit of the doubt before launching a dismissive volley.