skysight-inc/HackerNews huggingface dataset:
What attack vector would be mitigated by switching to a stronger hashing scheme for this specific use case? And are there other mitigations that exist for this attack vector that would be more appropriate?

To me is seems that this feature of browsers is really only meant as a protection against non-advanced attackers accessing an unlocked computer. For this scenario, having a stronger hash would do nothing.

Having a stronger hash would mitigate against exfiltration off the device by malware, but if malware can exfiltrate files off your device it's very likely they can e.g. read your passwords from memory, or keylog until the next time you input the password. It would also mitigate against someone being able to dump your password db off your filesystem if they get physical access to your computer, but full disk encryption does that better, and also protects all the rest of your personal data that's stored on the device.

Historically this is why Chrom{e,ium} has been resisting introducing this feature. Its uses are very limited against "real" attackers.

Mozilla spending time on cool tech rather than dumb migrations between password schemes that provide no value seems like a good tradeoff.
The power of marketing is not to be underestimated. You mustn't be right to sell well.
OP was asking a question in general. If people can't see what the problem is, I think we're done here.
> The article doesn’t say a word about pollution from mining

Yes, it did.

"In order to satisfy the ISA, this new machine does not just have to show it can harvest nodules; it also has to show that it can do so in an environmentally sensitive way."

"It will have two drone escorts, one to move ahead of it and one behind. They will monitor how much silt it disturbs, and will shut down the operation if necessary."

"Mining minerals on land can require clearing away forests and other ecosystems in order to gain access, and moving hundreds of millions of tonnes of rock to get down to the ores. Local and indigenous people have often come out poorly from the deals made between miners and governments. Deep-sea mining will probably produce lower grade ores, but it will do so without affecting human populations."

"It will also deliver those ores straight on to ships which can move them directly to processing plants on any coast in the world, including those using solar or wind power, thus reducing the footprint of mineral extraction even more."
As someone who has been through probably every popular password manager at this point, make sure to decide what you might need in the future.

Honestly, it really boils down to "Do you want to use Linux and not have a half broken client running in Wine".

Either way, 1Password is nice :) I use KeepassXC myself which I can recommend.
I am learning Sanskrit which is much harder to learn than Spanish because getting exposure to Sanskrit in every day life is significantly more difficult. Here's what I do on a daily basis.

1. Watch Sanskrit news and shows on Youtube.
2. Read Sanskrit magazine and newspaper.
3. Write a blog in Sanskrit.
4 Always have a Sanskrit contemporary fiction book that I am reading.
5. Speak to other Sanskrit speakers whatever broken Sanskrit I can speak (I have joined a group).
6. Teach Sanskrit to others using Google Hangouts / conference call etc.
7. Practice writing Sanskrit on a whiteboard that I bought.
8. Refer to grammar books whenever I am in doubt about the correct grammar usage.
9. Constantly look up new words that I don't know the Sanskrit counterparts to (both online and in a physical dictionary).
10. Actively recall verb / noun forms whenever I have free time or I am waiting on something.
11. Take a Sanskrit book with me to work and go to break room and spend 15 minutes reading during lunch / break time.
12. I have three different Sanskrit apps on my phone that I occasionally refer to when in doubt about some concept.

Doing all the above things daily has significantly improved my Sanskrit language skills. My recommendation is you follow similar technique. The key thing is to do it every single day and not feel bad about making mistakes.
Camp Rock – This Is Me (Teddy Cream Remix)  [Bass Boosted]
I wasn’t talking about solar as a power source, he suggested that fusion would increase power usage and there waste heat.
Hard to get past the wall of misinformation:

> What we don't need when using Ferro

> HTML
> Javascript DOM finders (like jQuery, Zepto, ...)
> Javascript libraries/frameworks that extend html (like Ember, Angular, JSX, Vue, Stimulus)
> Shadow DOM Javascript frameworks (like React)

jQuery and Zepto are not “DOM finders”, they are cross-browser compatibility layers (that include querySelector).

“Frameworks that extend HTML” definitely encompasses Ferro itself.

React uses a virtual DOM. “Shadow DOM” is unrelated and part of the web components proposal.
Since i was born, US seems to be the only country actively and openly stealing other countries' resources (apart from Friendly Green Men in Crimea ofc)
I think react native is a good recommendation for a react dev who wants to do cross platform development on mobile.

If you're not a web dev it's not a great fit. You'll have to deal with learning web, learning mobile, and as well as all learning all of react-native's leaky abstractions.

Sounds like a nightmare. I'd go with either native(Java/swift) dev or if you have c#/wpf experience then maybe xamarin.
You may be interested in https://mosh.org/ as an alternative to ssh
Content for science education commonly mixes aspects done with great care, aspects done with less, and aspects that are... artistic license and trippy psychotic bogosity. Regrettably, students are often unsure which aspects are which. Unsurprisingly so - they're new to the area. This feeds and diversifies their rich ecologies of misconceptions.

So some lecturer might think of themselves as demonstrating only friction. But they're also demonstrating how to present material, how to do lab safety, and perhaps also how to silently subordinate observation and data to expectation and narrative.

When doing a demo, one can easily acknowledge and flag a divergence with a "<expectation>... more or less".

And it's not just a problem for students. In the context of science education research, a first-rate stone-cold-empircial experimental physicist, when thinking about their teaching, might be "like, I have gut feel for what works - I trust my gut". Sigh. I know a biologist, who does respected work, but get them started on <other thing that's not their research focus>, and it's a bizarre sidestep into earthy-crunchy crystal-crazy land. Pity the poor student trying to figure out which of all these are the behaviors to emulate, and which not.
When I'm using ADD meds, I have to set a clock or I forget to eat, because I don't feel hunger. I feel every other symptom surrounding hunger, like becoming light-headed due to low blood sugar, or getting more sluggish when working out problems. However, it all happens without feeling a desire to eat (which is what hunger is, no?)

I have to make a rational decision to act on the signals and put nutrients in my stomach. And I chose that description for a reason: once I do eat, I taste the food just like I normally would, but it doesn't trigger any emotional response. The satisfaction of eating something tasty, or filling up an empty stomach is absent. To be clear: the medication does not make me a robot, I still feel emotions in general at this stage and I do expect them to be there. Normally, not enjoying food that you like is basically the body's signal that you've eaten enough, just before feeling nauseous due to overeating. Except that I'm starving. So eating a meal is like forcing food down my throat. It also means that I have to guestimate the proper meal size, because the normal cues for having had enough food are absent.

My emotional workaround is focusing on the the fact that after eating, I will have energy again. So I try to find emotional joy in anticipating the consequence of eating a healthy meal rather than the taste of the meal itself.

Is that the same phenomenon, or something different?
Palantir will develop a new intelligence platform for the US Army
As I understand it, using the OS keyring makes it impossible to do synchronization of the passwords (e.g., between mobile device and desktop).
React Native is amazing if you primarily work with the traditional web stack of JS/HTML/CSS, especially if you're already familiar with React you're able to jump into React with almost no retraining so you have immediate productivity and power to create on iOS/Android.

If, on the other hand, you do not have much experience on a modern web stack like React/Redux/Node then using React Native may actually feel counterproductive. You would still be getting the benefit of writing once for iOS/Android (or mostly once), reusable components across the app, a vibrant React Native open source components library, a great hot-reload dev experience, the benefits of React's design among other benefits but it all comes down to what you feel productive with and/or how much time does it make sense for you to invest in learning a new language/framework (or two) just to build mobile apps.

If you're looking for a good resource to learn React Native lookup the udemy courses by Stephen Grider, he does a great job of diving deep quickly yet explaining important concepts thoroughly.

Good luck!
The only thing I found surprising about this was that you were expected not to have known how it worked. It's the same sort of thing as trying to move a couch and having to angle it to fit it through a door, it's how 3D space works.
I went the other way - I was a business grad and transitioned to a software developer. IMO the soft skills are important no matter what. To be a real thought leader in business it's important to step away from the work and trying to think about the problems you're facing (people problems for example) in lateral ways. A lot of very technical people have a hard time stepping away from the work IMO. You just need to trust people to do the best work that they can. There is a great quote from Steve Jobs: "It doesn't make sense to hire smart people and tell them what to do. You hire smart people and let them tell you what to do."
My point was that the NRO had the resources to build two Hubble level telescopes that no one knew they had until they handed them over, an agency with little oversight, large amounts of cash and very few leaks.

If they are handing over that kind of technology I wouldn’t rule out them having some amazing tracking stuff we know nothing about and won’t for a decade or two if ever.
If you've got a couple kids and a parent each separately streaming 4K video, you can max out that 50mbps connection, but for general purpose browsing it won't make any obvious difference.
Thanks USA for keeping bases on my country's sea and soil, meddling with internal politics and also thank you very much for the random civilian accidents when your kind soldiers are too drunk to, at least, be kind to the land you are raping for your own good. Some more wine, kind sir?

Blah.
Bitwise: Educational project in systems programming and hardware design
What I did when I lived in Spain was watch a lot of movies in Spanish with English subtitles. This helped me immensely with my listening comprehension. Without subtitles, it was much more difficult to decipher words.

Also, if you're there for some sort of exchange, try to live with locals if possible and make it a point to speak in Spanish with your fellow exchange students/people, even if it seems awkward at first and would seem easier to just speak in English.

Other than that, there's no substitute for practice and exposure. Talk and actively listen as much as you can.
How: By keeping myself busy and not sleeping!

But I suspect that's not the question you were asking.

Does it really work: It works for me, yes. But we are all different and I suspect it'd have different effect on different people.

Why does it work (for me)?

I don't know for sure, it could be placebo effect or... I have read that lack of sleep affect the production of cortisol and histamine, interestingly enough some studies say increase, some say decrease (could it be a different effect based on individual?). The fact is, both histamine and cortisol affect the immune response, and allergies are basically your immune system reacting too much or reacting to the wrong thing.

Definitely not sustainable for more than 2 or 3 days, but it's a nice way to take a break from drugs.
Why I Turned Down an Interview with Google
I moved into testing and requirements gathering, learned as much as I could about project management and ultimately got an MBA.
It isn't but not because I would want to keep it secret. I just want to focus on making the app better and not on managing an open source project. I feel like it would add unnecessary stress for me. However, if I ever get tired of working on the app, I'm probably going to put it on GitHub.
That was not a hypothetical example, but an actual one. Condescending or otherwise, I'm just repeating what I saw. I'm not putting them on a pedestal either. If this was purely hypothetical, I could have said Imperial or UCL to the same effect. The point is, more clever people often end up in powerful roles that are often chaperoned/regulated/supported by less clever people. I don't like it, but it's what I see, and I personally consider it a major problem.

Also, to say it's what's wrong with Britain is a tad hyperbolic! I've generally found my Oxford degree to be excess baggage when trying to get a job with someone who is not from Oxbridge/Ivy league - often because they have a similar attitude to yours.
Peter Theil threw his weight and cash behind getting Trump into office, and joined his transition team once the election was won. As the article says he also helped fill administration positions with right-wing Stanford/Clarium/Palantir pals like Trae Stephens. He founded and is the majority shareholder in Palantir.
That’s a pretty bad guess considering it's pretty plain in the title that the OP is specifically asking how other people transitioned themselves.

Other people != himself.

Why bother with that reply? I suppose the person asking could be a woman or might be a man that has a daughter, wife, sister, or girlfriend... As another poster said, if you can't see the problem here... end of conversation.
We don’t have enough data to protect Canada yet but we’re working on it. Do you get robocalls from US area codes too?
But they don’t have any sales people, only engineers.
Steam team size is apparently 10. [0] (2017)

[0] https://www.youtube.com/watch?v=d3bQpF16vnE&feature=youtu.be...

Took me around 20 min to find this reference again... I don't think they only talk about a content management team here as the organization is quite flat at Valve and a lot of people do a lot of different things.
Intel May Intervene in Broadcom’s Effort to Buy Qualcomm
Palantir was popular in the intelligence community long before Trump.
Obviously ice 9.
We (Nomorobo) worked with Jolly Roger this holiday season and built SantaBots. Check out all the recordings at www.DoNotCallChristmas.com
Hyperpilot has open sourced 100% of products that improves Kubernetes util 3x
The number of digits in the nth Fibonacci number grows linearly with n, so you can't compute these digits in O(1). The fastest algorithms, described in the link I gave, have complexity O(n * something) where "something" grows much slower than n and depends on the bigint multiplication algorithm used.
Indeed. I imagine they’re about to get a lot more popular though.
I'm a Redux maintainer, and that post is utterly and completely wrong in every way.

What Dan Abramov showed at JSConf Iceland was a pair of demo apps that illustrated upcoming improvements in React related to async rendering and data cache handling. Those features have no bearing on whether or not you use Redux, and are certainly not "replacements" for Redux. The linked tweet from Kent C Dodds was a joke tweet in a joke discussion thread, and the author of that site has repeatedly shown that either they don't understand the React world, they are very bad at writing and researching, or that they're just flat-out trolling.

There's certainly been plenty of discussion lately about when it's appropriate to use Redux, and I'd agree that many people are told to use it blindly without understanding what the tradeoffs are. It's also true that the new React context API (available in the upcoming React 16.3 release) means you won't need to pull in Redux _just_ to avoid "prop-drilling" data all the way down the tree.

However, Redux is absolutely not deprecated and not being replaced, and the React team isn't in charge of Redux anyway. Dan Abramov and Andrew Clark, the co-creators, are both now part of the React team, and are no longer active maintainers - Tim Dorr and I are. We _do_ still talk a lot about what the future plans are for Redux, and in fact right now we're working on updating the React-Redux library so that it properly works with the "async rendering" capabilities once those are released (see discussion [0] and an early WIP PR I filed yesterday [1] ).

[0] https://github.com/reactjs/react-redux/issues/890

[1] https://github.com/reactjs/react-redux/pull/898
My understanding is that in the 6502 (NMOS) chip, those other opcodes had undefined behavior, and you might crash if you executed one. So you'd need to know who was the manufacturer to be certain that opcode X was available.

In the CMOS version (65C02), illegal opcodes are treated similarly to NOPs--they don't crash, and don't do anything other than spend cycles--with the caveat that certain of these "illegal" opcodes have specific numbers of cycles and bytes that they consume which are different from other illegal opcodes. More confusingly, there is an actual proper NOP instruction (0xEA), which consumes the one opcode byte and two cycles, which exists in both the CMOS and NMOS version of the chip.

So some of the illegal opcodes are just like NOP, and eat one byte and two cycles; some eat two bytes, and 3 or more cycles; and there's at least one which not only eats 3 bytes, but eight (GASP!) cycles.

Source: if it's possible for one to consider MOS emulation a hobby, then let's say it's a hobby of mine.
Anytime someone complains about agile and then a "true believer" defends it as "that's not agile", it reminds me of the "No True Scotsman"
I'm not aware of known vulnerabilities in Tor itself that devs haven't mitigated, out of usability concerns or whatever. Generally, I consider the focus on Windows users, and the reliance on tweaking Firefox for security, to be vulnerabilities. Also the refusal to compartmentalize the Tor process from userland, either in VMs or in separate hardware. I mean, Whonix has been around for years, and it's not featured (or even mentioned, unless you dig into the wiki) on the Tor Project website. And what about Qubes? Or Tor routers? I mean, they go after people for calling them that, citing their copyright.
I should thank Michael Crichton for getting me in the habit of looking out for potential "Wet Streets Cause Rain" articles.
I couldn’t resist because everyone’s thinking of cat-guacamole. Also Labsix.

https://mashable.com/2017/11/02/mit-researchers-fool-google-...
I'll point you to:

- My list of suggested resources for learning React: http://blog.isquaredsoftware.com/2017/12/blogged-answers-lea...

- My list of suggested resources for learning Redux: http://blog.isquaredsoftware.com/2017/12/blogged-answers-lea...

- My React/Redux links list, which has categorized links to articles, tutorials, best practices, and much more: https://github.com/markerikson/react-redux-links

Also, come by the Reactiflux chat channels on Discord! It's a great place to ask questions and learn. The invite link is at https://reactiflux.com .
5,000 IU per day is an excessively high dose.

4,000 IU is the upper limit. 2K is high.

https://en.wikipedia.org/wiki/Hypervitaminosis_D
Mr. Wizard had an episode where he did this same thing:

https://www.youtube.com/watch?v=LjAboqBeGpE
Kate is amazing. Quite underrated. Super fast and responsive with tons of great features.

It's been my editor for many years now and I love it.
Ask HN: What is your experience with using a cloud based personal computer?
I'm thinking about moving my personal computer to the cloud, something like Paperspace or Amazon WorkSpaces. I'd like to hear feedback from people already using such services.
That's a tautological argument. No good-faith participant in public policy debates aims to push whole generations into debt; they simply disagree about the best way to avoid that outcome.

I don't doubt that people who believe in single payer and subsidized tuition do so because they think it's the best way to keep generations out of debt. It would be weird for them to think otherwise.

What I'm doubting is that they can evoke public policy outcomes from the 1930s as a natural experiment proving that those are the best policy interventions. I think that argument assumes a whole variety of facts not really in evidence.
> Two, it was really slow, and I did not like the "typed" effect. It was great at the start, but carrying it throughout the entire resume was really redundant. I lost interest when the JavaScript comment popped in. Maybe a Pause/Play/Skip feature?

Plus if you look away for 5 seconds, you can easily miss an entire section or two, and it ends on a screen with no summary, menu, or anything but the email.

> Three, the sentence "I got deep knowledge about," bothers me, and doesn't flow well.

It's ambiguous. Did he just get it, or does he mean he has it, or is it because his English isn't great an he's mixing up got and have?

> Four, instead of "Thanks for your time!" I recommend, "Thank you for your time!" as it is more personable.

I had a teacher say to never end a paper with those, and I think it applies everywhere. It literally adds nothing, it's complete filler. If I liked it and found it interesting, I want to thank or hire the person. If I thought it was uninteresting, the thanks isn't going to do anything for me. Look at most other sites... Does Paul Graham not appreciate HN readers just because the pages don't thank us at the bottom? Just send a thank you email after your interview!
The article gets into that near the end, that maybe social issues make it harder to learn how to make predictions rather than the other way around.
int i = HashTable::hash(r)
table[i].push_back(r);

they hash the data and use that as an index. So by def.
That said it's pretty bare and missing _ALOT_
The problem is in your team or your corporate culture. Not agile or scrum as a whole.

On my team, agile is a process used among peers to coordinate. No one is a cog. No one is checking up on anyone. We keep each other aware of what's going on because you have to in order to coordinate and collaborate. My manager is just one voice among many on the team. He isn't tasked with monitoring my work because I don't need a babysitter.

I'm sorry that you work somewhere where you feel someone's monitoring or checking up on you. Where I work that kind of situation is called a Performance Improvement Plan. If you're not in that situation and are a highly productive individual, then your culture is broken and you should look for a different job.

But you're wrong that agile and scrum are at fault. If you used any other process, you'd have the same problem.
E.O. Wilson on Introversion, the Limits of IQ, and Where Ideas Come From
Maybe nobody has time for this but these days employers are looking for people who ACTUALLY know their stuff. And they will go through your GitHub and have you sit in front of interviewers asking you to code live in front of them.
I don't see how writing Ruby and managing a Ruby abstraction of the DOM is an improvement over writing JS and managing the DOM with that.

Unless the only purpose to this is to just not write javascript.