skysight-inc/HackerNews huggingface dataset:
Trying to make kids comforatable enough to come forward is an after the fact action.

There are people who are REALLY good at acting. As adults we get to choose what risks to take. Kids have that choice made for them. Also, kids who are too young might not even fully understand what's going on, so they might not be actively searching for a way out.

I like your mentality of growing relationships with people, but when it comes to protecting kids i feel you owe it to them to be sceptical of others. The risk just isnt worth the free babysitter.
It's not just a static bit of text, theres a decision tree you can traverse by answering some questions. They don't all lead to "NO" - my second attempt at random clicking took me to an answer like "probably"
It’s team- and manager-dependent. I’ve seen good and bad security in cloud and on-prem. The key is management recognizes and budgets for the fat tail risk, just like the fat tail risk of financial fraud is treated by the finance teams. Much of the response is proforma, and only intended to secure from drive-by opportunistic raids, and insider attacks are still difficult to defend against, for example, so no silver bullets in this story.
"Samsung Group's strategy is very clear - it wants the fridge, the cooker, the AC unit and the dishwasher all to use the Samsung voice assistant, "

You mean the voice assistant that literally failed 3 times during the live presentation?

I cannot imagine many things that I would like less in my house than voice-assisted smart devices. Huge spiders, possibly.
"Oh, and if you do happen to find a site with an odd number for the minimum length, leave a comment below because I'm kinda curious now"

Not a "web site", but Microsoft does recommend a minimum of 7 characters for Windows 10 logins, and it's the default for domain policy, so that's pretty common.

https://docs.microsoft.com/en-us/windows/device-security/sec...
Activist investor is minority investor who puts pressure on management and generally campaigns to change something about a company - for their own goals.
This bothers me to no end. Generate a new password, everything seems fine. A week later when I want to login again, suddenly the password doesn't work. After resetting the password and changing it again, I notice the little "max 12 characters length" message but it doesn't warn you, just silently truncates.

So nowadays, when I change my passwords, I have to make sure I don't hit the length limit, and after changing the password, confirm that it really changed to what I want to. In the few cases where it doesn't, I need to go through the entire dance to reset my password again...
Dye kills malaria parasites at speed not seen before
Japanese Airline Soon to Accept BTC Payments
>"Can you use an always online trusted third party?"

Real life example at the moment IOTA is working like that, there is one coordinator that works as trusted party (in my honest opinion they will never be able to shut it, but let's wait and see), another example is byteballs another DAG implementation works with 12 witnesses (at the moment controlled by a single physical entity, but in the future can be distributed)
It's little surprise to find someone billing themselves as a 'distributed systems engineer' disliking a tool that helps regular people choose simple designs where appropriate.

From the perspective of a regular user, many "always only trusted third parties" exist - in the western world, for all intents and purposes, they include their utility suppliers, banks, telephone companies, email providers, and chat services.

This site is perfect for someone like my sister who is constantly forwarding blockchain-related junk to me, because her (non technical) job brought her to a few conferences about such things. Yet she doesn't understand the design tradeoffs of such an approach, she only sees the buzz.
The scaling problems between small senders and a potentially huge crowd of receivers can be solved with immutable, hash-addressed resources + proxies/caches and best effort multicast. The former would at least require changes at several levels in the protocol stack, which is difficult when most changes happen incrementally one level at a time. The latter I believe faces real hardware design problems in network equipment AND incentive problems on the ISP sides.

So large collective action is required. Or we continue to pay cloudflare.
There is going to be a lot of blue-bloods now. Nice discovery, lets see if this is widely safe to humans.
Effects of Copyrights on Science-Evidence from the US Book Republication Program [pdf]
You're limited to the other Platonic solids [1] for dice having more than the standard 6 faces if you want the odds to be the same, aren't you though?

[1]: https://en.wikipedia.org/wiki/Platonic_solid
This is bullshit. Plain bullshit. Tor is decentralized and censorship resistant. I am not 100% whether Kademlia networks are censorship resistant but I think so.
It’s a cost/staffing issue. The cost to serve password resets due to forgotten passwords is lower than the cost to respond to “My account got hax0red!” customer service requests (which usually boil down to messy identity management issues).
In case anyone didn't know, since Typescript 2 there is a compiler option to enable strict null checking.

https://blog.mariusschulz.com/2016/09/27/typescript-2-0-non-...
I like Jeff Atwood's writing on the topic:

https://blog.codinghorror.com/your-password-is-too-damn-shor...

https://blog.codinghorror.com/password-rules-are-bullshit/
And where did you see me advocating in this thread that they should not exercise editorial control?

I merely pointed out the consequences of exercising editorial control: that once you show you can do it you lose any kind of argument based on your ability to do it or that you are only taking down content when the law requires it, such as when ordered to do so on account of a ruling by a judge.

My position is pretty consistent:

- Cloudflare for the longest used a broken argument to leave all kinds of crap websites up longer than they should have (for instance: booter sites)

- Their argumentation was that they would not censor sites based on content unless a court order was presented to them

- And so they were aiding and abetting many illegal schemes, which were too costly for the people suffering from those schemes to prosecute (for instance: because they were abroad)

- But when the Daily Stormer thing happened Cloudflare crossed their self imposed line

- At the time I pointed out that they would regret this, just like Slashdot folding for Scientology would regret it.

- And now we've come to the end of that line and Cloudflare now takes down sites because some vested commercial interest is harmed, as predicted.

So, I argue that they should exercise editorial control, and that they never had any shot at achieving common carrier protection (because (a) they are not a phone company and (b) because they are not essential, and (c) they never litigated that).

In this case it would have been nice for them to make a stand. Unfortunately for Cloudflare the publishing houses can now point at Cloudflare taking down the Daily Stormer without a court order, and there is no helping them for that. But just like before, Cloudflare simply is a commercial service, they have the ability (and sometimes the responsibility) to take down content. They are simply bad at picking their battles.

Then finally, I see the likes of Cloudflare as a cancer on the web. Way too much power in the hands of one entity in a jurisdiction that is too expensive to litigate in for the vast majority of the world. I hope the net/webservers will get fast enough and that bandwidth on the server side will get cheap enough that we do not need CDNs anymore.
"How Long is Long Enough?" is an incorrect way to think about password security. In 2018 64 characters is a completely reasonable minimum standard. Nobody should be remembering their passwords anymore so why does it matter how long it is? 128 characters is reasonable. 256 characters is reasonable. 1,024 characters is reasonable. It's all handled by the password manager and typed in for you.

Allowing shorter passwords has the effect of throwing foolish people under the bus for the benefit of increased entropy.

I would have posted this on Troy Hunt's blog but he banned me for disagreeing with him in the past. Because he's an entertainer in a technology show business and not the amazing genius expert that people seem to think he is.
Ooooh man, I'm getting chills just reading the intro.
Last week, I finished Reinhold Messner's book "Wild" which is an excellent narration of Shakleton's (and Frank Wild's) adventures in the Antarctica.

This sparked my interest in pole expeditions, and I was surprised to learn that:

1) Amundsen was not only the first person to reach the geographic south pole, but also most likely the first to reach the geographic north pole. Today, the two expeditions that claimed to have reached the north pole prior to him are both thought to have missed the pole by several hundred kilometers.

2) He reached the north pole in a rigid air ship with Umberto Nobile, my new explorer hero, who later rescued his Jewish girlfriend in fascist Italy and went on to build air ships for the Soviet Union and later teach aerodynamics in the United States.

EDIT: And I'm getting more chills just thinking about Sjaak Lucasson's planned north pole expedition with a modified Yamaha R1 motorcycle pulling a huge sled full of fuel [1]

EDIT 2: Funnily enough, the navigator on Shackleton's boat sailing to the attempted pole traversal was also called Worsley.

[1] http://www.sjaaklucassen.nl/en/noordpool-2017-intro/
Because (two off the top of my head) if your account is compromised in some cases it may allow misuse of the provider's resources, or even be used to attack third parties.
Once you achieve the right result from the function you are writing, you just add that REPL invocation to your test suite. Then you just re-run your tests from time to time as you change the code further.

A REPL makes writing both code and tests easier.
"everyone decided"

It takes very few people to move the market. To dramatically oversimplify, if there are 1 million buyers and 1 million and 1 sellers, the market goes down until the number of buyers and sellers are equal again.
Social Champ Launched on Product Hunt
Have you heard the news?

Today, we are excited to share that we have launched Social Champ on Product Hunt

Starting from bottom, this feat was achieved by the guidance, contributions and follow ups by Social Media Influencers, most notably Guy Kawasaki, Peg Fritzberg, Neal Schaffer, Ian Anderson Gray, Akex Khan, and all our valuble Social Champions who have been using our Super tool.

This is not all, We are also offering upto 50% lifetime discount on any of our packages.

It doesn’t stop here.

If you like our ‘Professional’ package it can be yours in just $49 - forever!

Check it out on Product Hunt and share your love at
https://www.producthunt.com/posts/social-champ-1

Thank You for your support and love.
Yes I did. And where do you see me arguing for the opposite?
There are also plenty of existing tools for turning Photoshop mockups into HTML/CSS using hard coded assumptions about HTML structure and appropriate ways to slice images, with tradeoffs involving clunkier code, lack of intelligent support for other devices and window sizes and inability to change the shade of aqua at 3am unless you have a basic idea of how the output is structured.

From what I can see the Deep Learning process tried here needs a lot more technical knowledge to create a suitable training set for the type of output you want, a lot of iterations to converge on anything vaguely suitable, and even when it gets to what's considered an end product you're likely going to have to dive into the output code to correct button colours and text before we even start to think about its behaviour at different window sizes. As an experiment it's very interesting, as a replacement for the designer it's probably behind non-AI approaches to turning pics to code.
Oh well, I'm not assuming that they weren't (I wrote equally "photoshopped", in proportion); also, I think it's a bit more complicated than a spectrum not retouched at all/complete fake.

Specifically, my suspect is that easy of retouching has a snowball effect in the culture. By lowering the barrier to retouch, there will be a competitive incentive to be more and more aggressive with the tools.

However, interesting book. I'd be curious to read what it says about Ansel Adams.
Ask HN: Why is okay for third-party keyboards to know our passwords?
Virtually every keyboard available on Android that I am aware of has internet access, and openly sends ALL text inputed by users to their servers for "pattern analytics." "Better autocorrect" is probably one of the features I care the least about in this world, and certainly one I'd be more than happy to do without at the expense of privacy. What's crazy to me is that not only do these keyboard applications know our passwords to absolutely every application, but all of our inputs and communication, period.

I even have a few privacy-conscious friends who will attempt to use encrypted communications like Signal, without realizing that their input is captured and sent to the keyboard application's servers before their end-to-end encryption even gets its mitts on it.

Why do we trust these companies? Are Swiftkey, Swype, Samsung, Google, etc responsible stewards of the open access to your bank accounts, social media, and otherwise encrypted communications?
Federal Court Upholds Rhode Island's Retroactive Pension Cut [pdf]
It does make me hope that BMW are working on another i3 style car that isn't so damn ugly.
It makes me think of the scenes of the last Star Wars movie on the salt flats with the red underlayers, perhaps they were inspired by Europa.
A needed reference to the Hitchiker's Guide to the Galaxy, actually about the possible consequences of "careless talk", but that fits nicely on misundrstandings/mistranslating:

"I seem to be having tremendous difficulty with my lifestyle."

http://www.mostly-harmless.de/crllstlk.htm

An actual one Italian/French is the expression (once rather common in Italian) "La bellezza dell'asino", literally "The beauty of the donkey" used to decribe the beauty of a young girl, coming assertedly by a mistyping/misunderstanding of the intended French "La beauté de l'âge" (literally "The beauty of the age") into "La beauté de l'âne" that was consequently mistranslated:

https://books.google.it/books?id=7zYrDwAAQBAJ&pg=PA205&lpg=P...
Answer to all of those is: "it depends". It all depends on the company and contact you negotiate and whether your remote position is a unique one or the standard way of working.

A lot depends on what you accept as ok. I'd reject any offer that involves webcam/screen recording. Both because it's creepy and because the company defaults to no trust. If the manager can't figure out if you're doing a good work or not by looking only at your work output, that manager is useless.

Time difference is annoying. Small shifts shouldn't matter. For big shifts like US/EU you have to learn to communicate in large batches that people can respond to overnight completely and without a need to clarify more details.

If you never worked remotely before and the company doesn't have at least half of the team in remote positions, you'll likely struggle. There's going to be too much ad-hoc communication you're not involved in.
I'll be honest, as I saw the big "NO", I thought "not another one of these" and closed the tab.

Perhaps seemingly showing a result before I've answered questions is an anti-pattern.
Perhaps you can explain how everyone can save in aggregate?

Where do people get this idea that "saving" is somehow virtuous?
I was annoyed too with the password creation. Too much to think. Now I installed this addon[1] and I use a password manager to save it. I don't even know my passwords myself.

[1]https://addons.mozilla.org/en-US/firefox/addon/pwgen-reloade...
mods: I think it is a deeply embarrassing indicator of the state of our industry that a balanced, well-referenced, academically framed discussion of the tradeoffs of a buzz-laden technology should be allowed to be flagged like this.

At the least, replace the site with a link to the PDF. It seems the average user here is incapable of reading as far as the second link on the page.

> The choice between a permissionless, permissioned or centralized database is not trivial. While this question has been discussed before [15], to the best of our knowledge, we provide in this article the first structured methodology to decide which technological
solution is the most appropriate depending on which application scenario
If you don't want the money right now then you want a stock market to go down so that you can buy stocks at a discount.
I've found DropBox's zxcvbn system to be ideal. Instead of requiring passwords to fit a set of arcane rules, it requires passwords to meet a threshold of entropy.

Is there a reason this isn't more widespread?

https://blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-pass...
Extending GopherJS
It's not just "most likely", you're guaranteed to have duplicate characters in anything longer than 16 digits.
Taking that line of thought further, that means if bonds and stocks are both down, then cash is a good place to be...when inflation is up? Investing is hard.
Space is only a concern if they store the password in plaintext.
In rural Vermont, which is clearly not where most people live, we lose power for hours or days (or even weeks) every year. I imagine there are many communities throughout the world with similar types of power interruptions. Anything that is "mission critical" for survival (heat, water, and the ability to enter our home) must be as reliable and robust as possible. The idea of replacing the perfectly functional metal-key technology, for example, with some door-lock device that depended on a temperamental electrical grid would be a strategically unwise decision. Big risks, little rewards. What is the fail-safe plan for these sorts of smart home devices when there's an earthquake or hurricane or something?
I can't decide if that's cute, or eye-bleedingly criminal.

Neat though, and I haven't seen it before.
How are rising interest rates a risk?
The Fed has been telling us they are coming for years. Long rates are finally moving up.

I think people are going to be surprised about the coming global growth, just like they said the Fed moves would cause massive inflation, or that interest rates would never go beyond zero.
If you see reports of screen recording I’d avoid that company completely. I’ve never heard of it as common practice for remote jobs and more something that has come out of Upwork.

The best remote jobs focus on output not time anyway, and everything else is to facilitate that so they’re best suited to independently motivated people.

Pay seems comparable to local jobs, unless I guess you’re getting US/Bay Area salaries and you don’t live there.
Problems enabling subscription billing system
What problems would you face when you have to manage an in-built or external subscription billing system?
Looking forward to this being a photoshop plugin.
> Instead of fighting this scourge facing Europe, European politicians are only limited to verbal condemnation

As usual for those articles they limit themselves condemning the phenomena but skip on the causes of the resurgence of the far right nationalistic ideals. Without understanding, the ultra-nationalistic parties will only gain in power.

The situation is ripe for populist politicians to gambit on the populace resentment to cut new slices of power out of the moderate parties, setting up for a feedback cycle that will only get worse.

Why is the population resenting the current situation? It's a complex and deep topic that goes largely undebated because everyone just point fingers and attacks those groups with an empty dialect, which only makes them stronger.

Can the phenomena be fought? Hope so. But the problem with politician when confronted with the rise of populist movement, right wing or otherwise, is that they try to compete with them over-promising and stepping out their party lines, which only help further the populist party cause threefold: one makes their concern legitimate, two moves the moderate voters away, three they, still holding the majority, now are faced with electoral promises they cannot keep, moving even more votes to the populists.

The traditional solution - exposing those ideas to public scrutiny and putting them under the light to show the hows and the whys those are bad, won't work and won't help to solve the situation at hand doesn't really work in a period where people are used to fast news optimized for piecemeal consumption.

So, what's left to do with them? No idea. But shunning them doesn't look like is going to work. Maybe let them know you're open to debate their idea and have an honest chat explaining the ramification of the simplistic slogans the neonazi throw at them? No idea if that'd work either, since everyone today seems to instantly radicalize.

But I'd like to see more on the news than ostracizing.
> I think you’re confused as to what return type polymorphism is, though. It’s the ability to have the compiler infer the type of something from its site of use.

I think you may be confused about what return type polymorphism is tbh. Type inference != polymorphism. Polymorphism is a type-system feature. Type inference is a separate process to ascertain concrete types at compile time.

For example, the only type inference that C# really does is `var`:

var x = foo();

That is no different to me writing:

int x = foo();

(assuming that foo returns an int that is).

The compiled version of both of those code snippets are the same. The fact that I specified the `int` directly doesn't make those chunks of code any different. Or, make one less valid.

You're right it's absolutely the case that to do this I'd need to specify the types I want to work with, and that's because C# is shit at inferring anything. It doesn't change the fact that the return type is polymorphic for Concat in my example. It's _ad-hoc polymorphic_, and no lack of type-inference will change that.

But this still misses the entire point of what I wrote. Which was to counter the point made in your original post:

> Once you've got return type polymorphism, you really start to miss it in other languages.

Initially I felt I was helping by pointing out that if you're missing it in other (mainstream) languages, then there's absolutely a way of doing it.

> The simplest example possible is "mempty"
mempty :: a
> gets the "default" value of a. Which makes no sense in a language where you need an instance to have polymorphism.

And secondly I felt it important to use your example of `mempty` to show how to do it.
Grammarly shared its tokens with all websites
Funnily enough a big bunch of future wind power will be controlled by oil and gas companies as in order to anchor your wind turbine in the deep sea you need the technology and knowledge that was developed by these companies in order to anchor petrol platforms

I'm fine with that personally, as long as we put enough pressure for that change to happen rapidly
Last Summer I had to create an account with HMRC in the UK. The password requirement was a minimum of 8 characters, a maximum of 12 characters, at least one letter and number, and no special characters! Quite how they came up with this set of rules has confused me ever since.
There is a historical reason why Microsoft choose 7 characters.

LAN Manager required a password up to 14 characters. It would then split the password into two 7 character parts and hash each independently. So there was no additional security offered by the algorithm for passwords over 7 characters. Today, LAN Manager passwords offer little protection as complete random tables are easily available.

https://en.wikipedia.org/wiki/LAN_Manager
What is the best online pharmacy to buy medicines?
share your online medicine buying experience plus do you know any good pharmacy ?