skysight-inc/HackerNews huggingface dataset:
Slightly tangential. I usually don't trust any company that offers something "unlimited" for a limited amount of money. I usually suspect, and believe, that they're overselling their capacity and then have the low volume users subsidize the high volume ones (so the former are paying a lot more than they should be). Such companies also tend to have undocumented limits that you'd know only when they tell you that you've hit them (and that limit would be dynamic).

For something as critical as data backups, I prefer that those companies stay in business and charge something that's a bit more proportional to their underlying costs. That's honesty and fairness, in my view.
This was a huge problem for us, as well. People would make loud sales calls pacing back and forth in front of the empty phone booths.
Maybe that's good advice for a beginner, but I don't see how you can say that seriously as a professional.

Authentication is such a core part of the UX of your product. You should know how it works. If you're factoring out to a black box because you couldn't do it yourself, then I'm not convinced you're any more secure.

If your team is too incompetent to do it correctly (there are so many resources online), then how are they going to do anything else correctly, like ensure I can't access your private messages when I change /<my_id>/messages to /<your_id>/messages in the URL bar, or query the database without sqli?

This "don't do it, it's too hard" meme does nothing but scare people away from core competencies of our profession.
It really depends on what you mean by "socializing". You described (in my estimation) someone who turns off all notifications in company chat, and simply refuses to participate unless it's on their specific terms and time schedule. Perhaps I read into that a bit too much.

That goes well beyond not "socializing" - that's simply not communicating in real time.

> Do you really think that holds true for the people actually doing the work?

Really depends on the work. An ops team? Absolutely holds true. You can't do your job effectively without constant communication with other team members, as those projects tend to be short lived, rapid paced, and involve half a dozen disciplines working together at a time. There is a strong correlation between how much someone participates with their co-workers in such an environment and in job performance as seen by the customer.

A programmer working on deep algorithms that are implemented as third party modules into a larger application? I wouldn't expect them to ever participate in chat.

A programmer who is working with 4 other programmers on a rapid development project of a bunch of microservices that must interact together cohesively? Yeah, unless they are a rockstar I would rather a mid-range dev who is great at teamwork vs. a stellar dev who refuses to participate and help the team on demand. A good team won't randomly bother everyone for no reason - there has to be a balance though.

All in all it really depends. There is certainly room for all types, it's simply the jobs where you can afford to not be available and communicative with a team in real time have been rather rare in my career. Statistically speaking I pretty much stand behind my statement - unless you are exceptional (and most people by definition are not) doing the "head down working" thing is likely bad for your career and I'd even go further and say it's likely bad for your actual productivity in general.

If you simply mean hanging out in the random non-work-related channels and chatting about off topic stuff, then I agree. My experience is also with 100% remote teams, and I assume if you added up the chat+office socializing in a "regular" organization you might get a different sum.
This number is meaningless without context. I've stolen from supermarkets - because I'll occasionally run low on space in my basket, and I'll stick an orange or something in my pocket, and forget to check out with it.

A grocery store would very easily tolerate 20% of their customers doing that once a year.
Money buys many things. Fastests/cheapest: https://ctrustglobal.com/citizenship-by-investment/

You can really go ~anywhere, example NL: https://ind.nl/en/other/Pages/Investing-in-the-Netherlands.a...
Being stateless means that you are not allowed to reside anywhere without permission. While there are some drawbacks to having citizenship (depending on the country), there are no countries where it is worth your while to withdraw citizenship without having another to fall back on. All of the legal rights that most people take for granted disappear when you are not a citizen. And if you are arrested for any reason (or even no reason), nobody will come to your aide if you are stateless.

Having lived a good percentage of my adult life in countries where I do not have citizenship, it's something that I keep in mind -- I do not have the rights of a citizen. I only live here as a guest on the good graces of my host. Only international agreements with the country that I come from guarantees any due process of law in the case that there is trouble.

Having said that, I completely agree with you: it would be wonderful if countries would guarantee rights of people no matter their origin or political affiliations. We don't live in that kind of world, unfortunately.
From https://support.apple.com/en-us/HT201355

Learn more about passwords and your Apple ID
When you create a new password, keep the following in mind:

Your new Apple ID password must contain at least eight characters, a number, an uppercase letter, and a lowercase letter.
You can't use spaces, the same character three times in a row, your Apple ID, or a password you've used in the last year.
Learn more about password requirements and how to keep your Apple ID secure.

FaceTime is not available in all countries or regions.

Published Date: Oct 20, 2017
Sounds very much like South Africa, as well:

https://en.wikipedia.org/wiki/State_capture#South_Africa
I didn't say it couldn't be used with CubeSats; I said that it could require the customer to use a lot of propellant to change the orbit if they wanted a different trajectory than the main customer or than the rest of the cluster.

That last option you mentioned could be helpful, but only for small orbit variations. If you want 10 cubesats in orbit with wildly different inclinations like many Earth Observation customers do, that's a bit inconvenient.
Please don't be so arrogant. Post your github profile, and then we can see if you write code without bugs.
Ask HN: So dunno how to reach Google but I think their bot is broken
So I was doing some webdev and playing around with my projects. Got a 404 and decided to check my Nginx logs and this stared back at me, just scrolling by

SNIP

66.249.64.76 - - [04/Feb/2018:16:09:38 +0200] "GET /manual-motor-scania-dc12-53a-pdf-download.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.64.76 - - [04/Feb/2018:16:09:38 +0200] "GET /15-incredible-uses-for-leftover-cake-the-craftsy-blog.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.64.76 - - [04/Feb/2018:16:09:38 +0200] "GET /tab-top-curtains-drapes-youll-love-wayfair.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.64.76 - - [04/Feb/2018:16:09:38 +0200] "GET /en-dwg-pdf.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.64.74 - - [04/Feb/2018:16:09:38 +0200] "GET /the-fda-top-ten-pdf.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
66.249.64.74 - - [04/Feb/2018:16:09:38 +0200] "GET /philips-fw-c785-user-manual-pdf-download.pdf HTTP/1.1" 404 169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"

SNAP

I have no idea how long this has been going on but I have already over 40MB of this in just one log file starting at 06 in the morning. The IPs do match Google's, too.
I mean, I did ask my site to be indexed but these don't even seem like something you'd index but something you'd use as search terms!

Did someone break a config? Am I just a n00b? Am I under an attack from a l33t h4x0r? What the heck is going on?

Find out in the next epis^Wfew hours of: Ask HN!
You can read that user's other comments for other gems, such as "why are gay people bad employees" and "why are women so messy".
Support parallel btree index builds in PostgreSQL 11
I don't use Backblaze, but I suspect from the above comments that the client does not even display some kind of warning saying, "Hey, you haven't connected this drive for X months. We just wanted to let you know that this data will be deleted from our systems in Y days. Please connect the drive to make sure we retain the data." and then proceed to display this warning periodically a few times, like a countdown (but not annoying enough to be shown on every run of the client). This kind of warning would be my suggestion to the Backblaze team. This becomes more important with SSD based machines that generally have a lot lesser storage than before while people are taking a lot more pictures and videos and resorting to storing them in cheaper (per GB) external HDDs (at least the people who do like to have a local copy).
As always I may well be wrong, but the "rope around the equator" example seems like not involving calculus at all, I would call it "elementary geometry".

If anyone at UNI has issues answering correctly that question there are much more serious problems in mid and high school.
I like Traversy Media, and The Net Ninja...
Both are great with no extra yapping! Just straight forward coding and great examples!!
> it is pretty well documented that Germans forestalled Soviet offensive by just few weeks

No it's not. The only “Historian” to say so was the so-called Suvorov, a transfuge of the NKVD. And his theories have been thoroughly dismantled by the whole academia.
It's all the same account.
Link is in Spanish. I found the linked blog post from the physics professor who first noticed that the code had been previously cracked more interesting and informative (also in Spanish): http://elprofedefisica.naukas.com/2018/02/02/el-cni-y-el-no-...
You can save even more time by pressing Shift + F12. CTRL + - goes really well with it (step back to previous code location). I'm a bit biased toward hotkeys as I'm using the fantastic vim extension, VSVim, so I barely ever have to take my hands off the keyboard. VS really is a great tool. Adding the Docker integration for dotnet core has really opened up deployment options for what was once a Windows only product for deploying to Windows only. It's still essentially a Windows only product (I've heard the Mac version isn't comparable), but you can deploy and debug in containers. Dotnet core is at v2 now, and seems stable enough to actually use in production (finally!). On a tangent here, but the point is it's a good time to be working with dotnet.
There are no pedestrians on highways.
Technically, there is. It requires the Attorney General to issue a determination about your specific case. It's never been used (it's 20 years old); it could theoretically be applied, but it's unlikely to be.
Eucoin – New European Bitcoin and Altcoin Exchange Comming Soon
What's funny is, Adam is from New York and this reminds me more of east-coast style. East coast tech companies think west coast companies run on flower power and try to imitate their success, while west coast companies tend to really be much more numbers-driven.
Adrian Colyer did a good write up of this paper recently on The Morning Paper : https://blog.acolyer.org/2018/01/18/rustbelt-securing-the-fo...
Good news for European Traders. Most of current exchanges have high trading fees and have been hacked recently. We need something secure ,reliable and trustfull to manage our assets.
And what's the problem with that? People are entitled to their opinions, including journalists writing editorials.

Besides, the whole EU critique is such an old hat. In the 80s and 90s there was overwhelming critique on the EU from the fringe left in many countries. Now it's also coming more from fringe right-wing parties. Apart from that, not much has changed. The same old story, using the EU as a scapegoat to get voters, while the majority does the right thing. Then, when those parties get to power, they usually change their mind in light of the facts. (Typical example: The Green party in Germany, which was, of course, very anti-EU in the 80s. Now it's the AfD from the right-wing with the same silly arguments.)

Anyway, stop blaming journalists for not sharing your opinion. It's not their role to please you, and if you want to hear what you already believe, there are plenty of 'non-mainstream' media, i.e., personal blogs and politically coloured news aggregation sites, to confirm your opinions.

The idea is patently absurd that people don't get enough choices in the media nowadays and therefore could be mislead.
That is an improvement, I missed it in the hubbub about tax rates. But I expect it means I still have to report for the last tax year.

Either way, I'll report and pay whatever my agent says is correct.
our plan is the MM2H Visa: http://www.mm2h.gov.my/index.php/en/

It requires a large initial deposit and proof of funds, but all foreign-sourced income is tax free.

Malaysia is very centrally located in SEA, has great weather year round, very modern, great food.
This has happened to me too. Multiple people have used a variation on my GMail address and signed up for stock trading, banks etc., and I keep getting a deluge of their invoices, balance statements, promotional emails etc., and the worst part is none of these orgs will easily approach the person using my email and ask them to update their records. The process of complaining is so cumbersome that I elected instead to redirect their emails into Bin and be done with it, but fresh ones from new addresses do show up occasionally.

The intruiging part of this is they should never have been able to get a GMail address using a variation of my name (say my removing or adding a .) since GMail says they disallow it, but then I just don't get it how so many people have managed to signup to so many services using such an 'impossible' variation of my address? Is there a loophole in GMail or do all these services accept account registrations without email verification?

Either way I'm now seriously considering moving to a different email address and making it something esoteric so no one will think of using it, but that means I'll have to give up on using my name.
A recent discussion, https://news.ycombinator.com/item?id=15514926
Linux Block MQ
What is the desired requirements for passwords these days then? No passwords just a magic link or some open but difficult to hack standard (12+ characters?).

I’ve always liked the idea of using a predefined sentence structure and having lots of choices to increase entropy, e.g. The magic butterfly flapped faithfully. Article adjective noun verb adverb. No one does this of course.
Eh, if you're a US citizen in this situation I'd simply move to Puerto Rico and pay 4% all-in without any worries at all since it's 100% legal. Best of both worlds if that 20% bugs you so much.

I still find it a little disconcerting I could renounce my citizenship and still owe taxes on things I sell years later. I get why (and in this case I feel it's largely moral), but that's quickly getting into big brother new world order level stuff. I feel it's enough "punishment" to lose the benefits of being a US citizen and holding a US passport. If the world ever goes to shit, those folks will have no place to turn for even basic human needs and protection. They will quickly find out what most of the world feels about carpetbaggers.
Sure, but there are maybe over 10000 companies including non existing ones and you need them all for your back testing to be valid...
Thanks! For Python, `cx_Freeze` should be able to accomplish what you describe in a cross-platform way. I don't know of any similar PHP tools off the top of my head.

[1] - http://cx-freeze.readthedocs.io/en/latest/index.html
You can do quite a bit with timing on the launch vehicle. A delay of ~45 minutes in SSO is the opposite side of the planet.

And do any of the Planet CubeSats even have propulsion? It looks like the Flock constellation deployed without it.

http://space.skyrocket.de/doc_sdat/flock-1.htm
Fossil fuel production is highly competitive, so prices are pretty much set by the costs of the last marginal producer.

If the world decreases its consumption, the prices may go down (possibly by a large amount). But any increase in consumption will very likely push the prices up, it does not matter it the competition between consumers is small.
“Tweetdecking” Is Taking Over Twitter.  Here's Everything You Need to Know
In a sense not, but it does make it easier to exploit you.

Just look at the game dev industry. Lots of passionate people there, and lots of companies who will exploit that. In the end, those people lose their passion.

Being passionate about work can make you very happy. But always make sure you don't get exploited because of it. You will need to set your limits.
> SMS 2FA auth has been deprecated by NIST (https://pages.nist.gov/800-63-3/sp800-63b.html) due to multiple weaknesses, however, it may be the most secure option your users will accept for what they consider a trivial service.

I skimmed through the NIST document and couldn't find that claim.

> [5.1.3.1 allows if] sent from the verifier to the out-of-band device via the PSTN (SMS or voice).

Maybe it is interpreting this part from the same section?

> the device SHOULD NOT display the authentication secret while it is locked by the owner

So it seems to me that SMS is not deprecated but open to issues if the SMS shows the secret. I looked a little deeper in the doc. Section 5.2.10 on Restricted Authenticators lays out that devices could become restricted as times change, but I couldn't find where the doc actually says 2FA over SMS is now restricted.

The post claims that users may allow SMS for trivial services, but does not call out what that means. I don't use more than a password manager for trivial services (forums and the like), and I use 2FA over SMS for things that might have financial details (if 2FA is an option).

The rest of the article makes sense, but I'm having trouble with this one point. Did I miss something in the NIST document? And if 2FA over SMS is out, as a website with billing, should one look at using an authenticator like Duo? The author says to just auth via Google et al, but that feels like kicking the can down the road hoping they or Twitter have something better than 2FA over SMS.
> that all language is, in a sense, gibberish.

No, I disagree with this premise. It is contrary to the definition of gibberish I'm using (and which I linked to). Since we disagree on this fundamental issue, the rest of this conversation is very difficult.

If all language is gibberish, like you say, then it's ok for Google Translate to produce gibberish. (Sorry, that doesn't make sense to me!)
Not sure how many would prefer going to the office every day... from all people working (and worked) for me, not a single one...
The Truth About Corporate Transformation
The HN audience is mostly not completely incompetent in password matters.

But by and large, people have been trained into terrible habits concerning passwords, and they have no idea how to make a halfway decent password. I tend to think a good baseline for most sites is to use zxcvbn and reject passwords with score 0 (which means, guessing is expected to take less than 1,000 attempts). That way you’re not being particularly onerous, but you are at least blocking useless passwords.

Still, there’s a space in some services for allowing no password. NewsBlur allows a zero-character password, for example, and that’s fine. I’d much prefer a thing to allow no password if possible, deny useless passwords and allow anything else (with hints about weaknesses), than have rules about character classes and mandatory inclusions.
Using AI to Help the World Thrive
Chemical engineer with experience in alternative fuels here. The key line is this:

"But for it to work, it will have to reduce costs to little more than it costs to extract oil today, and – even trickier – persuade countries to set a global carbon price.”

Their feedstock costs are probably quite low. Air, and from the sounds of it, water to produce hydrogen through electrolysis. They're probably then doing some combination of reverse water-gas-shift + Fischer-Tropsch to go from CO2 + H2 to diesel. Not unlike a similar project in Qatar using natural gas as their hydrogen source.

Problem is that carbon and hydrogen from methane is much cheaper than from air and water. Their electric/energy bill is probably massive, and also begs the question: could they fuel their plant with their own product and still have net energy gain? Or do they depend on cheap energy from more thermodynamically favorable fuels like coal and oil to be viable?

Solar, wind, nuclear, batteries, electric self-driving cars, next gen A/C, hopefully fusion someday... these are the energy or conservation technologies of the future, not something that's DOA because of basic thermodynamics.
Show HN: A framework for managing and maintaining pre-commit hooks
Well before noon? I've not seen that in the London ones. In fact I've rarely seen anyone drinking before 4pm except on a Friday.
One time pads have been in use since the end of the 19th century and possibly earlier if they were used correctly and we don’t know the pad that was used 50 years or not you will not break the encryption.

Modern encryption is fast and flexible but there are old ciphers that are just as strong when used correctly.

Modern cryptography is strong due to mainly a few key aspects, randomness which enables us to generate true or near true random keys, key exchange/distribution (electronic communications and various key exchange algorithms like DH) and non alphabetical plain text and keys.

However when used correctly a polyalphabetic cipher like a running key cipher does produce a One Time Pad which is effectively impossible to crack through non exhaustive means.
> Why aren't you creating something interesting? Good careers don't go to those waiting to be handed a golden egg.

It sounds like you're implying that to work on innonvative projects one has to have the mind of an entrepreneur. While it's not a bad mind to have I don't think utilization of ones skills in a meaningful and interesting way should depend on that?
I ran a coworking space in downtown Los Angeles for about 3 years, at the same time that WeWork was rising. I'm also older, I was in my late 40's while operating the CoWorking space called DropLabs. I noticed that the people who preferred WeWork and similar LA coworking spaces were young, under 30, with family money they did not value, so the prospect of a trendy coworking space with lots of other young people for 2-6 times what we charged, seemed really odd to me. So, I tried working there for a week to see what the attraction is - it is all the other young people, WeWork's atmosphere, in the Hollywood one at least, felt like a high school dance, with a surprising amount of flirting and partying between the people at the space. I felt, perhaps a half dozen people out of the nearly one hundred there were actually trying to get work done. the majority behaved like they had no idea what work is. After that week, I returned to my non-fancy coworking space downtown and operated it for another year before closing. WeWork, in Los Angeles at least, captured all the young, flush with family cash "entrepreneur wannabes" and sucks their cash. WeWork is 1.5 to 2x the cost of a office. They figured out youth will pay to be around other youth, creating a "entrepreneur play zone" where they reinforce the idea they are not really wasting their family's money nor their lives.