skysight-inc/HackerNews huggingface dataset:
Let me be more concrete, maybe it will illustrate the point I'm trying to make better and/or highlight some aspects I'm wrong about.

I'm aware of broadly two schemes for revocation support with JWT:

1) Immediate revocation - keep a blacklist in state on a single machine. On verification of the JWT, check the blacklist and only succeed if it is not present.

2) Eventual revocation - keep a renewal token in state on a single machine, and give your JWTs an expiry time T. On verification of the JWT, if verification fails due to expiry then try to renew the JWT using the renewal token, and if successful then succeed the verification and also return the new JWT to the client. To revoke the JWT, just revoke the stateful renewal token. The JWTs can therefore be revoked eventually within a max time of T.

--

So, the above Vs the classical stateful session token (from here SST) approach:

Both 1) and 2) contain the same 'single stateful machine' limitation as SST, yet are more complex to understand, reason about and maintain.

In 1) you get no additional benefits over SST, and you have completely nullified the statelessness and therefore scalability of JWT. You also get the additional downside of a more computationally expensive token verification than just a simple equality check.

Conclusion - it seems irrational to use 1) over SST in all cases.

--

In 2) you get precisely one potential benefit for scalability - that for a time (max T) you get a stateless 'cache' for the verification of the JWT, which will horizontally scale to infinity. This MAY give you some practical benefit at massive scale, but there are two significant downsides:

A) You have a max lag T on revocation of the JWT, which is a security hole if the JWT is stolen. So you'd like to minimise T - but not so much that you lose the benefit of the 'cache' - otherwise the whole thing is pointless. You have to literally trade off security for scalability! Where do you draw that line?

B) The whole system is very much more complex to operate, debug, and reason about, than SST. You have verification logic that is split across 1 central stateful renewal token server & n JWT verification servers.

Conclusion - the scalability gain of 2) comes only as a trade off against security. Even assuming you are able to accept this trade off at all it is really unclear to what extent you should do so, and indeed if the whole complexity of the thing is even worth it after all that.

--

Perhaps there is another way to do revocation of JWTs that I've missed that is clearly superior to SST, maintaining stateless verification without any clear security trade offs. If so please educate me - I would love to discover it!

Otherwise, I concede that scheme 2) might be a better option than SST in some very rare and special cases, but in general if revocation is needed, then JWT does not make sense in place of SST.
You know what fluoride is for and you’re being obtuse.
CADRE | New York, NY & Toronto, ON| Onsite | Experienced Engineers | Cadre is a well-funded startup (Series C | Total Funding $135M) at the intersection of technology and investing. Our mission is to provide direct access to world’s best investments. We are starting with high-end commercial real estate and are changing how investors find and invest in opportunities in this massive industry.

Open Positions: https://cadre.com/careers

Senior Software Engineer (NYC)- https://cadre.com/careers/apply?gh_jid=75123

Senior Software Engineer (Toronto)- https://cadre.com/careers/apply?gh_jid=928493
Growth like this happened globally. Politicians would have to be utterly incompetent or plainly steal 100% of any state income to not see this manifested in big jumps of prosperity of common people.

You know what brought the growth? Private sector coming in.
Any ‘push’ method to an app will end up being more secure than pure SMS 2FA, because it’s relatvely hard to MITM/hijack it, unlike social engineering your way into porting a cell number.
But are the valley companies worse then the old gatekeepers of information who is pretty much the ones currently leading the charge against the internet giants.

It's really easy to pick what look like a powerfull target and accuse them of doing what you want in order to gain the exact same power, in fact just about every totalitarian state seams to have used that propaganda tacics.

It's much harder to come up with a coherent strategy to actually improve the situation to the point where no gatekeepers exist and people have real genuine material freedom rather then just immaterial freedom of a mostly fictional nature
Yeah, not as cheap. Especially after smashing it ;)
The GP implies that was not tried before: "There was a revolution, when they started using backpropogation to optimize the gradient search".

"Back-propagation allowed researchers to train supervised deep artificial neural networks from scratch, initially with little success. Hochreiter's diploma thesis of 1991[1][2] formally identified the reason for this failure in the "vanishing gradient problem", which not only affects many-layered feedforward networks,[3] but also recurrent networks."

https://en.m.wikipedia.org/wiki/Vanishing_gradient_problem
At the end of the day, anyone who fought in the Boer war was born no later than the early 1880's.
To echo a sibling comment [0], if you don't use OAuth2 (or the OpenID Connect profile), you'll end up reimplementing similar functionality. There are libraries for OAuth2/OpenID Connect, while a custom authentication strategy requires more effort.

[0] https://news.ycombinator.com/item?id=16519660
Makes sense. "Whom" is my go-to example of an English word that is on its way out.
I think another important point is device separation in general. Vincent Haupert is talking about this in the context of mobile banking apps during the last CCC: https://media.ccc.de/v/34c3-8805-die_fabelhafte_welt_des_mob...
also its CAD not USD
Microsoft Microcode Updates Defend Intel CPUs Against Spectre
I totally missed this! Thanks a million times. By the time Chris is 5, he will beat her on the strip.
Google will teach you about AI and machine learning for free
Google is a private company though, their platforms aren’t basic utilities owned by the collective. As such google is free to use their platforms as they see fit.

Nobody had an inherent right to be heard on somebody else’s platform.
Sorry for the curt reply, I'm about to fall asleep.

In OP's case, I think they're unlikely to see any benefits to using JWT.

Dealing with authN/authZ can grow fairly complicated depending on the business' requirements. On the surface what you're suggesting seems like it would work perfectly fine for many use-cases, so you're not wrong.

JWT is often immaterial to authentication. One must consider how the service is consumed and through which mediums. Depending on the data's importance, you'll need to carefully consider the security model.

Acquiring someone's cookie or token doesn't always mean full access, nor does it mean you get to repeatedly request new tokens. You could require an additional password check before allowing the user to take certain actions. Two examples of this are GitHub and Google.
Why would you let them accumulate an unreasonable amount of wealth if you then expect them to give it back to poor people? Why not limit the wealth in the first place to ensure that everyone get its share?

My thoughts on this change quite often, but if we were in a situation where we had a hard limit on wealth I think there should still be the chance to accumulate it, and the people who did the best that year get an award for it. Just to keep the incentive there. It's not like someone who has over 100 million in the bank is putting in the effort just because they want more things.
Serato DJ Pro 2.0.0 Crack with Serial Key Full Free Download Activation Keys
Ambient belonging: how stereotypical cues impact gender participation in compsci
Understanding and overcoming coder's block
I love that site! Anytime I'm feeling down, I look at that facts page and I always laugh.
Stop being thick headed, there are all sorts of differences between men and women, just like there are all sorts of differences between individual men or individual women. The point is none of those differences make women unsuited to leadership or incapable of being a scientist or something, and the system currently rewards alpha-male bullshit (another fallacy, the alpha male thing is based off of a basic misunderstanding of wolves or something and is total bullshit and shouldn't be rewarded) instead of actual leadership qualities. Everyone would actually be better off in the workplace if we moved away from rewarding those traits and becoming, as you said, woman-friendly.
Armor-piercing projectiles that are enhanced with DU form an aerosol of Uranium oxides when hitting their target. This aerosol can contaminate large areas and is inhaled by military people and later by civilians, for instance by kids that play in abandoned tanks that were hit with such DU-enhanced projectiles. Since DU is an alpha emitter with a long half-life, it is dangerous to have it in your body, even when the radioactivity is comparably low. As a heavy metal, it will stay in your body pretty much forever, and there's the chemical toxicity as well. The long-term effects of inhaling Uranium oxides are heavily debated, as it will take usually many years for an illness to develop, and it is almost impossible to link a certain illness to DU with high certainty.
Wow, Trustico majorly fucked up. I had to go back and read from the top to understand the whole situation, but damn, they had SSL private keys being generated and output in plaintext into the user's browser on their site... on pages with 3rd party javascript files (some from advertising companies) being loaded in. The keys were "compromised" the moment they output into the browser in other words.
In the early 2000s, people were saying "Google is going to take over the world" with a smile. Not so much now.
What is this wireless technology called? Is this supposed to be whatever comes after 4G?
Ah, that's very neat. Thanks for explaining.
>This means it’s impossible for an imposter web site to man in the middle the U2F token.

https://news.ycombinator.com/item?id=16501400
Some people get all their news from Facebook. I personally wouldn’t trust news on there but a large number of people believe all the stuff their friends are posting and the biased news they see.
CRAP! Will downsize the images when i get home. Did not see that one coming :(
I don't know if I should show you this...

http://www.powerracingseries.org/

Edit: I didn't realize they were doing autonomous cars now. Past races were definitely done with humans in the cars.
I'm not sure what you mean. The OAuth2 spec defines access tokens and also specifies that they should go in an Authorization header.
Something Mysterious Is Killing Captive Gorillas
By the way, if you're looking for a replacement for Opera, there are still options for the look and feel, even if not the internal tech features.

I stopped using the Big O pretty much when Jon Stephenson von Tetzchner did. He went on to found the Vivaldi browser[1]. They gave up on their own rendering engine and are just using Chromium. But Vivaldi is still my browser of choice if only because the gestures and tab ordering work the way I expect them to without having to hunt down plugins.

[1] https://vivaldi.com/
(this was posted as a subcomment, but deserves to be a top-level comment)

Another explanation/hypothesis which is rarely talked about is rising CO₂ levels: https://www.politico.com/agenda/story/2017/09/13/food-nutrie...

This even goes so far as harvesting CO₂ from the atmosphere and indiscriminately feeding it to greenhouse crops, while we know that many plant varieties will respond by having far less available nutrients for human consumption.
Not agreeing with OP but have studied this and want to provide color to it. Most of the proposals I've seen that promote a consumption tax deal with that by giving cash back to everyone in the form of refundable tax credits or block grants (yearly or monthly). They would figure out what the middle income person / family would consume, tie that to the CPI for those (breads, meats, consumables) and come up with the refundable tax credit amount to cover that persons estimated consumption tax.
As a farmer (also in rural Ontario, coincidentally) that is definitely something we try to do. It is not required by law, but anytime I've watched someone not rotate their crops, it isn't long before they are out of business. To extent that, on my farm, we consider it well worth growing unprofitable crops through that rotation to ensure that the ground will grow something profitable next year. It has also become quite popular to grow a second cover crop over the winter to improve soil health even further.

But what concerns me most about modern farming is the separation of animal production from plant production. I'm the sixth generation on my family's farm, and I'm the first generation to not also have animals. I do worry about the long-term effects of that. When I get into ground away from the historic family farm, that hasn't seen animals for decades or longer, you really notice a difference in the quality of soil vs. the home farm that has had animals for centuries as part of that crop rotation. Rotation is important, but rotation with animals seems to give the very best results. It is the model that agriculture grew up on and something we have lost (somewhat) recently.
There's also Cadence from KXStudio repository[0]. It's a replacement for qjackctrl that can be used to setup pulseaudio-to-jack bridge relatively painlessly.

[0] http://kxstudio.linuxaudio.org/Applications:Cadence
This is definitely a starting point. I'm not finding any hard numbers for a "decline" either -- the one table I found (from 2005) indicated the average was about 27 minutes a day. (https://nces.ed.gov/pubs2006/nutrition/tables/tab15.asp) and this hasn't changed too much recently (see 2017 data -- https://www.aft.org/ae/spring2017/ramstetter_and_murray), but I'm having trouble finding any studies with past data from, say, the 1950s and 1960s. Little nuggets of data I'm finding suggest more that the problem is inconsistency -- half an hour might be "okay", but some schools don't even implement any recess at all... which for many little children sounds like it would be awful.

Most of the research out there seems to support the idea that recess or other unstructured play is quite beneficial, for quite a number of reasons, so it's quite possible that half an hour is not enough. I'd certainly suspect more recess would do a lot more good for energetic children than powerful stimulants!
As individuals, we don't have much personal agency over the evolution of language, so sometimes it's best to just let words change meaning. We wouldn't be speaking English today if people got in a fit every time a word changed meaning.

People have been using "pimp" as a verb in this context since at least the 70's, so I'd say this is a lost battle. The phrase did not come from Pimp my Ride.

edit: my interpretation of your use of quotations is one of many, but I should give you the benefit of the doubt here
It's a management failure. They should have pushed further, despite monopolists' resistance. But they gave up. Didn't they know it was a long term investment? Alphabet could afford it.

> And in markets that Google Fiber has been deployed, it has resulted in a dramatic reduction in prices among regional incumbents.

Yeah, that's the main outcome. Gigabit for $70 is a norm today, and if someone charges a lot more, it's viewed as a rip off. And not only in markets where they deployed.
Ugh - Bloomberg buys Businessweek and then throws all of the content behind a paywall.

Here's a better link: https://web.archive.org/web/20140514054305/http://www.busine...
Besides my interest in builds and electronics, this is why i am doing this. I never had such a dad either.
OK, the specialist at the ADHD centre may have advised me incorrectly, and I am imagining the effects. Effects that are basically the opposite of what you and hnuser1234 describe in the thread above, and rather like huffmsa and many others have reported. For example, I have never once experienced "a cold robotic mind space" on medication, or anything close, even on the very first day. Which variant of ADHD do you have btw?

Not surprising there are a range of effects, when it's fairly common to need to try 3 or 4 different drugs before finding one that works. For a minority, none work.

Perhaps it's not "misinformation" but an attempt to honestly report what I gleaned from the specialist, and what I and others have experienced.
Though I'd have the option of getting Google Fiber if I only lived across the street, I still consider it a win, because after Time Warner was bought by Charter which was bought by Spectrum, they're now starting to compete with speed offerings.

Before Spectrum came into town, Time Warner was "forced" to give me 300Mb/s at my 100Mb/s price simply because the average in the area was significantly higher after most of the city switched to Google Fiber. It made me laugh, thinking they had this capacity all the time but didn't even offer it residentially.

I have the option of using Spectrum @ 940Mbs down now; which probably would have never happened if Google Fiber didn't infiltrate my city.
IOLI-Crackme with Radare2: Closing Thoughts
We should be focusing into building soil and edible forest to harvest multiple floors instead of just that usual monoculture one: https://www.youtube.com/watch?v=gSPNRu4ZPvE
If we look closely forest's soil usually gets better and better, I see some people replicate this and seen some 'agroforest' with more then 5 years old and its stunning how productive there lands are, how diverse and how the soil just get better without adding external stuff like fertilizer, its a process type of agriculture instead of an input one.
Best Staffing Firms to Work for by SIA
That's an explanation -- another is that Apple and Google believe that future uses of the resources could yield greater aggregate return (or serve as a bulwark against a downturn).

"Cash is a call option with no expiration date"
https://www.investopedia.com/articles/investing/042613/cash-...
Approaching this a different way, this is the same problem as with passwords. If you use the same password for every site or the same phone number for every 2FA SMS, then only one password/phone number has to be compromised for a massive escalation in privilege.

This problem is much easier to solve with passwords: you simply generate different passwords for everything and store them in a password manager. However, you can't (easily) generate a new phone number for every service that requires SMS 2FA, and if you could, all the phone numbers available would be used up quickly.
I lived in Playa del Rey for years just a few blocks from the house on the hill in the 4th pic.

A few of the local coffee shops and restaurants have some of these old photos and I always found it amazing that you could still see the resemblance despite all the development.

The building being built along the road in the 4th pic is a karate school now. The lagoon is a few ugly condos, a baseball field and mostly mud now.
In the past, you could program on the C64 in a kind of symbol code. The keys on the C64 had all graphics symbols on them (ascii?) and if you used them while programming in Basic it was possible to use these symbols as a kind of programming shorthand. I don't exactly remember what was what but it was something like using ctrl-F which gave a symbol that would be interpreted as FOR and so forth.
If you did a List the full commands were shown.
You could expand that idea and create your own shorthand.
What can be done is to build up areas which are already built up, increase density, and bring people out of sprawl. Preserve areas and leave them untouched, and meanwhile make the most of the areas that we do use.

This is good for humans (far higher economic activity) and good for the environment. We must fight height restrictions, and other sprawl inducing laws. We must have more protected areas. And we need to provide transit options that scale well in dense areas.
5G Is in Danger of Being Oversold
Those aren't synonyms. A bell that is tolling is not pealing.
Depending where you live salt might be just salt, or it might be salt plus trace amounts of iodine plus an anti-caking agent plus sugar.

Pause this to see an ingredient list from a US brand of salt:
https://youtu.be/iGsn4cOpBHY?t=48s

I'd be interested to know if anyone anywhere can taste different types of salt under double blind conditons.
It is incredibly simple to take over the SMS functionality of any phone number in the US. It's crazy how easy it is.
Your article speculates about why Apple doesn’t hide the notch, but doesn’t address why it’s there in the first place.

It’s there to have a place to house the various front facing sensors/emitters while sharing verticals space with usable screen area.

Once you decide to do that you have to answer the question of how to deal with the border line between the two.

Obviously, you don’t want something ugly.

(1) hide the border. This means anything and everything displayed on-screen next to the notch has to be on a black background.

(2) create a non-ugly border and let it show.

Perhaps the decision to go with (2) was influenced by branding considerations but it’s a secondary decision, not the “only purpose. And (1) isn’t exactly a great option, regardless.
It is news in that The Economist recently used the more modern usage which caused a bit of a stir amongst their linguistically conservative readers.

I noticed, but I wasn’t one of the many who wrote in to complain.
Exactly this. For instance after sugar beet has been harvested, the land needs 5-10 years to regenerate back to proper nutrient levels and may not yield anything.
"The thing that hath been, it is that which shall be; and that which is done is that which shall be done: and there is no new thing under the sun."

http://languagelog.ldc.upenn.edu/nll/?p=3703

I, too, will likely lament the loss, should it come to pass, but we've managed before, and we would again.
> If you use the same password for every site or the same phone number for every 2FA SMS, then only one password/phone number has to be compromised for a massive escalation in privilege.

> store them in a password manager

using your logic, only one (master) password has to be compromised for a massive escalation in privilege.
> ... at no point was the sentiment, "We've shifted the industry enough that we can stop pretending to want to succeed."

I don't doubt you, but I would definitely expect that sort of messaging even if the true primary goal for GF was to be disruptive, as opposed to profitable.
Update:
A few safety concerned readers mentioned:
Top speed: My aim (until he is older) is 7-10km per hour, but with a torque that allows burnouts and donuts.
A safety cage might become part of the build, just because better safe than sorry.

Will make sure this post can be read as soon as i can contact my webhosting company, hopefully tonight. Sorry about this!