skysight-inc/HackerNews huggingface dataset:
Great thought, but it doesn't seem to be the case - as the number of unique suffixes is the large number here -- in fact, none of the values in the range are simply all zeroes.

https://api.pwnedpasswords.com/range/00000

I wonder if the hidden variable is something to do with how the passwords are leaked. First, let's suppose that a very commonly used broken password hash is plain SHA-1 (I think that's a valid assumption-- unfortunately!). Then, let's figure that amongst the many data dumps / extracts done by hackers, some of them are only able to extract part of the database, or save part of the database, or whatever....and they are fetched / saved / uploaded in lexical order?

Can't think of anything else.

EDIT: Ooops. The other thing is, that these actually are sha-1 hashes of real plaintext passwords. So it's definitely not a test-row in that sense.
Don't see that. This seems pretty clear, and (as usual for Scandanavia, unlike almost everywhere else) rational:

"Three times as many people are injured while walking in icy conditions in Sweden than while driving. And the cost of those injuries far exceeds the cost of snow clearance."
Given comments like this from Chevalier...

> “White boys (not only white boys, but especially) are taught not just that they’re entitled to a perfect female partner/servant in the way Bancroft describes, but also that they’re entitled to high status because of their maleness and whiteness; that being white and male are precious gifts that no one can ever take away from them,”

...it's hard _not_ to imagine getting fired. This is exactly the sort of stuff that gives HR departments headaches.

Get back to milking users of personal data, you schlubs.
Safety/benefits of rapamycin in dog pilot experiment for anti-aging
Bayesian Reinforcement Learning: A Survey
GWAS of 78,308 individuals identifies new genes influencing human intelligence [pdf]
Optimization of Fontconfig Library (2017, PDF)
It's true whether or not anybody says it. If nobody criticized China, all those problem would still be there. Except people in the US wouldn't be so confident of their superiority. I think that would get them worried into action, like they got worried into the space race by Sputnik as the article mentioned.

It is a matter of opinion - public opinion - which is what ultimately drives how the FDA works. If the US public is clamoring for them to get their ass into gear, eventually they will.
Also, the British didn't have a rival in the North Sea when the Germans conquered Norway.
If you try to solve a linear system with a condition number of 3.73e16, it's not really correct to say that the problem lies with floating-point errors, because the real problem is that you tried to solve an extremely ill-conditioned problem. The wrong answer you get is backward stable, in fact—it is the exact solution of a nearby perturbed system. One way to think of it is that the phrase "the answer you should get" is somewhat ambiguous. I don't think your example goes against the post's main points.
The balls on some of the C2H people are amazing.

I had been at a position for 10 years-- some CEO calls me and says my skillset would be PERFECT for his company, would I be interested in talking.

We get into details, its C2H, I decline. He was absolutely incensed, he says, "well, its just to make sure you're a good culture fit!" To which I reply, "I'm not going to leave a stable job for what is essentially contract work." He was beyond pissed, I guess he was acclimated to dealing with idiots.
Ahh, you sound confused by the sugar industry marketing.

Brown and "raw" sugar are still processed sugars by many definitions. For instance, see [https://www.cancercenter.com/discussions/blog/natural-vs-ref...] Brown, raw, and white sugar are all extracted and highly concentrated from the harvested plant products. When you read about processed suger in medical research, they're almost certainly making a distinction between extracted and concentrated sugars vs sugars that are still bound in plant products such as fruits.

I don't doubt that these studies and the Mayo Clinic doctor warned your friend about processed sugars. However, they were almost certainly directing towards fruits and vegetables and away from white sugar, brown sugar, and "raw" sugar (which is a marketing term for a still highly processed sucrose extract from plants).

And while we're throwing around Mayo Clinic doctors, my dad recently retired, but he was a practicing physician who did his residency at the Mayo clinic, and he certainly considers brown and "raw" sugar to be processed sugar.
Michigan is have a somewhat state of emergency due to the poor road conditions, pot holes everywhere.
Some people, myself included, pay for some online news content. But just by virtue of being paid doesn't make news content creators more valuable. I had a NYT subscription until their OpEd board started churning out Nazi apoliga like it was their job. The world of paid content is still pretty terrible and stuck carrying water for their corporate overlords just as much as ad-supported groups. Maybe that's the future, but if all it took for quality to go up was for paid subscriptions to exist and people to want to buy them, it would have happened by now.
>Doesn't this miss the fact that a large amount of education - perhaps the majority of young childhood education - occurs at home, and is influenced by family environment?

Yes. But despite the fact that it misses this it does capture another huge portion of privilege.

>Is it even reasonable to expect this to be possible (i.e. reduce or replace the influence of families with Government or third-party involvement)?

No. Which is why I'm not advocating that... I'm not even sure how you could read that from my comments. You and the few other replys here seem to think I'm Stalin or pursuing something that is 'perfect fairness.' The original question was just about reducing the influence of wealth, not eliminating it entirely.

You'll forgive me for the long wait time, I got rate-limited and couldn't reply for several hours.
Because you aren't a kid anymore? You are older and have a wife, children, nephews, nieces and responsibilities? Not only that you have friends from childhood, high school, college, work, etc and there are only 24 hours in a day?

It's called growing up. Are we supposed to stay naive children forever without responsibilities forever?
... and given that many companies are incorporated in Delaware, it's not unlikely that the defendant and plaintiff in a suit would often both be Delaware companies. So it's unclear that favoring one or the other would be better for Delaware from the perspective of maintaining their status as the go-to destination for incorporation.
> I understand the point you are trying to make, but a RSA key is a RSA key.

Not really. http://cs.wellesley.edu/~cs310/lectures/26_rsa_slides_handou...

https://crypto.stanford.edu/~dabo/papers/RSA-survey.pdf

Some of the vulnerable systems that have been attacked this way basically were built on the premise than an RSA key is an RSA key. But an RSA implementation that's secure for one purpose might not be secure for another purpose, for example with malleability.

https://en.wikipedia.org/wiki/Malleability_%28cryptography%2...
> Austin's infrastructure has not kept up with the growth and it is nuts. Dallas and Houston have done a much better job when planning ahead for the growth of the entire job market, whereas Austin took somewhat of a Boulder, Co stance and decided they really don't need to work on infrastructure to aid growing the population. That's a whole other story though.

That's sadly very true but its not from a lack of trying. The city tried a couple of years ago to float a light rail proposal that was put up to a vote but shot down by citizens. Most of the infrastructure is still very road-focused. Although I'm hoping that the many downtown approach will easy the traffic somewhat (Domain, Mueller etc.)
I mean, in combination with conferences, not just there, obv
http://slatestarcodex.com/2017/09/27/against-individual-iq-w...

https://www.ssc.wisc.edu/cde/cdewp/98-07.pdf

Assuming I understand your motivation for posting the IQ heritability article - yes, higher IQ parents will have higher IQ children, leading to compounding effects. This could (at most) lead to widening of IQ distributions where intelligence-based selection effects are amplified. However, since meritocratic positions sample from a fraction of the population, not an IQ or “merit points” range, this shouldn’t really have any strong anti-meritocratic effect.

> Yes it is.

Well I’m glad you settled that.
Dating is still pretty broken for minorities or people who aren't into the heteronormative scene. Grindr has been great for gay men, but for minority folks (whether they be part of a minority group or have minority preferences), dating is still very much unsolved.
>But the real hero here is AWS and its "primitives"-based, bottom-up approach to outsourcing all computing.

I'm not sure 'hero' is the right word. AWS has created culture of lock-in and closed source products being acceptable in many otherwise open source pipelines. Additionally, people funnel significantly more of their money into AWS than they would with dedicated hardware.

AWS is a plague on infrastructure and a black spot in open computing history on the level of Microsoft. Kubernetes is showing promise to fix some of this.
This is incredibly cynical and so off the mark in absurd ways that I can’t even start listing them all, and I’m saying this as a very cynical person.

Have you heard of things like paid holidays, free public education for all children, the abolition of slavery, ... ?

These things just didn’t happen magically, they were the result of regulations and legislations pushed by people, in many cases “at the top”.
Thanks for that reply! My understanding of this issue is solely based on the Patent Scam movie. Its actually made by the person who got sued because he sold an app on Google Play store! (basically anyone selling on Play Store could be sued this way).

In addition to the burden of discovery that you have mentioned, the fact that US allows an idea to be patented, is the root cause of this pain. Once that is addressed, innovation can thrive.
Thanks. One question I have - can you turn off auto-login globally or just on a per website basis? Docs seem to imply on a per site basis only but that seems a bit odd.

I'm wondering how DashLane handles multiple logins for the same service (Google/GitHub etc etc).
When It Comes to Gear Buying, How Much Do Morals Matter?
Ask HN: How many HN accounts do you have?
I went looking for something just like this a few weeks back. The examples I found were all either wildly over-mathematical or terribly unclear. This seems to strike a good balance. Thanks for the writeup!
Is Twitter now profitable? It was my understanding that throughout all of 2016 and 207 they were operating at a loss. And for a long time before that. If they're profitable this year it could be a turning point and I'd be wrong, at least going forward. But do we have enough data to support it at this point?
Cassini Top Science Highlights – 2017
He's not saying that he's not worried about FPE. What he's saying is that misunderstanding the physical system being modeled is far more likely to cause problems, and that it's much harder to spot than an FPE. So your mathematical model requires much more scrutiny for that reason. Basically if you don't spend much time questioning your assumptions about the world your system exists in, then don't even bother accounting for FPE because it's going to be overwhelmed by errors that you actually chose to introduce by your modeling assumptions.
This has nothing to do with people's free speech rights. The constitutional right to free speech only applies to the government not being allowed to take away that tight - not a private company.
>You never made a real connection as to why post ad spend means pre-election subterfuge, so your fact is not a fact

This shows me that you aren't actually reading what I'm writing.

>You have no evidence to your claim.

What is my claim? Based on the above you don't seem to have any idea.
You seem pretty passionate - wanna help us test proxy and system tray support?

Tray support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pull/1676

Proxy support behind command-line argument: https://github.com/signalapp/Signal-Desktop/pull/1878
Great idea! I ran a quick hashcat against the range00000 list on my laptop. In 1 minute I cracked 79 of them, and not too many of them look very odd - that is, they look sorta like normal cracked passwords.

I'm asking my friend to run a more thorough crack on his dedicated GPU, especially for hash value 000DD7F2A1C68A35673713783CA390C9E93:630
which does stick out to me!
See: https://www.ssc.wisc.edu/cde/cdewp/98-07.pdf
The other passgen also can use a wordlist.
The right for free speech only applies to the government being prohibited from banning speech. There is no constitutional right for a person to say what they want on someone else's platform.
Additionally the article appears to intentionally conflate "issues" such as "if you turn security off" or "if the repository isn't signed" to make their list of possible issues look bigger. None of these are "Attacks against GPG signed APT repositories".
I haven't found that experience at all. In fact one of the reasons I refuse to move to Man Jose or SF is because I've heard of the famously skewed sex ratio. There is a lot more diversity in Austin, and as a single guy in his late 20's I've had a very healthy dating experience.
(314)914-6093
1 + the number of times I forgot my password
I know this is not a very constructive comment, but I had a very stressful day, being jacked up on caffeine while also being sleep-deprived.

My brain wanted to read "OutRage" instead of Outage, and I got kind of confused, ending up thinking, "that is not that outrageous! Why do people get upset so easily?"

With that error corrected (what is it called? A "reado"?), the title makes a lot more sense. ;-)
A module can contain multiple packages. You can have a dependency graph like F/a -> G/a -> F/b.
Using Chrome's Layers panel to get rid of repaints/reflows
Upvoted but want to thank you specifically for such great insider info. Much appreciated.
Well the quote was "As Tesla continues to become more focused on AI", so I was curious to know what else they would work on.
I semi-disagree.

The default should be to update constantly. Expecting developers to remember to manually trigger updates just results in perpetually-stale dependencies. If a specific issue is found with a newer version, then having the ability to explicitly pin to an old version is reasonable.

> When you have a project with a 1000+ dependencies, all pulled latest, nothing will ever compile, let alone your own code.

The problem is having a project with 1,000+ dependencies that are apparently such low quality that their authors issue build-breaking changes daily.
I achieve the same thing by just accepting wildcard addresses at my domain and using sitename@mydomain.com whenever I sign up for things.
One of the side effects of this dynamic is that there's less chance for a circuit split if the vast majority are filed in one specific circuit. Which is generally a precondition for Supreme Court cases, and leaves them somewhat helpless to grant cert on cases they'd otherwise prefer to overturn.

> I would expect Delaware courts to will be very defendant-friendly.

Not really a given when you're talking about companies suing companies. In fact the article even mentions a defendant's motion to dismiss was rejected. This suggests the company would have preferred to defend in a different court, perhaps California.
I still do Android. A lot better since we went to studio, but it's still far far from where it needs to be.
Faux Subgrid
Transparency and the AMP Project
> I tried to encourage Troy to suggest to implementors that blacklisting all passwords was a Bad Idea. Instead, he doubled down

> Please don't use the entire list for blacklisting unless you actively also guide the user in how to generate a random passphrase (if a human must remember it) or a random password (if it will be stored in a password manager).

I think he did the right thing, and think you are correct as well. I think we have the best of both worlds with this, in that it includes the count, so API users can determine what the correct cut-off is for them. Once you get into the thousands (or maybe less) might be a good indicator that your password is not only relatively common, but also likely to be on (and maybe even fairly high on) many dictionary lists. More secure services that cater to more technically savvy users (or security conscious companies) may decide to blacklist any password on the list period, and that may be okay because those sites either trust their users to deal with it or can dictate conditions for a captive audience.
JEP Draft: Use UTF-8 as Default Charset
(I have no experience working in Software)

There is always the need of someone who has the bigger picture in mind. Task distribution.

And for the "large company" part. I assume that most large companies are still operating in and old-fashioned way of working.
Spring Boot 2.0.0.RC2 has been released
Arm delivers integrated SIM identity to secure next wave of cellular IoT devices
That's interesting and makes sense. I had always thought of LLVM as being lossy when compiling anything more explicit than C++, but that's obviously nonsense since there are front-ends for things like Haskell. Cool!
In case you are looking for the patched library, it's at https://github.com/michalsrb/fontconfig.
Not in a Hacker News comment, sorry; the space is just too big.
>> Maybe the solution is as easy as giving workers a voice.

>Maybe you should give the guy you paid to paint your garage a voice in your management of your home.

Probably not. Managing my home far exceeds the responsibility to paint my garage. However it would be wise for me to give that guy a voice in how best to paint the garage. He is, after all, a professional and knows more about painting garages than me.
I don’t know anyone who uses Signal... in fact I haven’t heard of it before. And I am a regular techie guy in Silicon Valley.
That's not quite true. States do specialize, for example Nevada is known for those seeking beneficial living trusts, Montana is known for holding companies for expensive motor vehicles, and so on.
http://slatestarcodex.com/2017/08/29/my-irb-nightmare/
> More importantly when your site is audited for accessibility issues, you will fail on contrast every time.

I see this problem in the footer almost universally. High contrast footers have somehow become rare. I understand the desire to de-emphasize that section versus the primary content of a page, however if the footer is going to actually do its job I think it makes sense to have it set to a higher contrast design than not.
Haskell's build tool Cabal also uses a solver that produces a concrete build solution that takes into account dependency bounds. It uses slightly different rules for the solver than what vgo uses.
As long as the functionality is there, there will be initial outrage and then people will accept it. Having gone through a few redesigns of a major website, the first few weeks can be a nightmare though. People love to complain. But in the people's defense, we've had a few screw ups too.
I am cautiously optimistic.
At startups, senior engineers only need light supervision.

Their time should be spent listening to customers, directors, and other stakeholders to check if they're sorely missing things. They should keep lines of communication open and be proactive.

One thing we don't see often enough is the "Principle Software Engineer" role in startups.

At most startups, it's an open office floor plan. The data analysts, sales person, and marketer would come up to me with a request for something that was actually detrimental to their doing their job, but it wasn't getting focused on in our sprints.

At Boostable (W14), I was handling all server / e-commerce / front-end issues, plus setting up systems for marketing and sales needs that wouldn't have otherwise been done. And it brought substantial value to the company, for low hanging fruit a manager would have kept kicking the can down the road.

The issue is, these proactive things were never recognized or appreciated the way I think they should have been. Heh. It's as if it the work being unofficial made it less valued, when the way I saw it, it was shared success.

If a programmer is impactful and setting the best practices for the team, they can report directly to VP/CTO. Less supervision. Mentor fellow employees.
To clarify the grandparent comment : pytorch also supports a functional approach rather than a computational graph. There's even a pytorch functional model zoo :)
> But it seems to me they spend an awful lot more time talking and creating powerpoints than they do thinking.

As far as I can tell, that's how they do their thinking!
What about the disconnecting of currency from the gold standard (1971/1973). Productivity gains that rippled through the economy based on a capped unit of accounting were now more likely to end up in the banking vaults of the institutions overseeing the money issuance and those close to the source - while the rest of the workforce sat on inflating paper.
It makes sense now, Thanks!
Most of my downvotes were when I was being snarky. A few were caused by me going against some HN orthodoxy but they usually get upvoted later.
Heres my sources: https://nwlc.org/resources/faq-about-the-wage-gap/

Meritocracy would mean disregarding skin colour, background and gender in my book. I would like your sources and stats
Yes.

Managers are useful for decreasing the non-programming brain cycles that devs are spending every day.

Managers can re-prioritize based on feedback from marketing/sales/CEO, wrangle issue trackers, make sure devs are happy with what they're working on, screen new hires, talk to customers, and lots of other non-programming things that a software team must do.

A great manager clears away the "boring" or tedious obstacles that get between great devs and the next iteration of the product. They also set the tone for the team, motivate individual members, and keep things organized.
Deep learning for biology
The advantage of deletionism is that users can have some confidence that anything they find on Wikipedia has received some attention from editors. Without deletion there'd be an unlimited number of pages, (100-𝜀)% being crap.

If you search and don't find it on Wikipedia, you can look elsewhere. That's a better experience than finding unmaintained crap.
Well now I’m really confused! If you’re holding the phone with one hand, the thumb is the only option. If you’re holding the phone with two hands, for me it’s significantly faster to essentially touch type with two thumbs rather than hold the phone with one hand and swipe with the index finger of the other.
"... are run for the benefit of the senior management."

Replace the ellipsis with almost any organization - theocracies on down.

I maintain that this feature is the real purpose of all human organizations. With some dither for the smallest.
You can only lose a maximum of 3 (4?) points on a single post. You can gain an unlimited number of points.
Then add NIST to the list of people you should be reaching out to (report linked from the homepage of pwnedpasswords):

https://www.nist.gov/itl/tig/projects/special-publication-80...
> the points on a map have to represent one of a fairly limited selection of types

Absolutely not. Not only is the selection of types huge and full of shades of grey, but an element can be tagged as things from multiple different categories at once (and this is a wonderful feature). Take a browse of the OpenStreetMap wiki sometime. OpenStreetMap data is far richer than a layer model could cope with.

However, let's not confuse this with an editor having a layers-like interface feature to help the user focus on a particular subset of the data. JOSM for instance does this very successfully with the "filters" tool, which I use heavily.