skysight-inc/HackerNews huggingface dataset:
> I've pointed a few folks to his site and their very first question, every time, is some variation of, "you mean you want me to type my password into this dude's site?"

And this is why the v2 API design is important.[0]

Instead of sending a password to an external site, you hash the password locally with SHA1, and send in just the first five hex digits. In return you get a list of hash suffixes of known-broken passwords. You get to verify locally whether the password is known, without the password ever being transmitted.

The API is so simple to use that one of our engineers implemented and deployed a HIBP check roundtrip in less than a day. Usually a functional change in authentication path would stay in review for somewhat longer (due to people wanting to make very sure we don't mess it up), but the new API is really straightforward to reason about. It was trivial for reviewers to see that we couldn't leak information by accident.[ß]

0: https://www.troyhunt.com/ive-just-launched-pwned-passwords-v...

ß: Technically it would be possible for Troy and Cloudflare to correlate the number of times a particular blob is requested and the "times found" count in the list of suffixes. But because we reject known-broken passwords, the only real information that gets exposed is the number of times users attempt to choose passwords that may have higher-than-usual incident counts.
Facebook is keeping silent and will be addressing 'one threat at the time' (threat to their stock value of course - nothing else matters). If they speak up, for them to come clean they will have to blow the(-ir own lid) and expose all the dirt they have been involved (and profitted from).

I suggest people watch "The Circle" [1]. It is about a company that combines FB-Google.

If FB every decided to come clean on ALL dirt they've done, it will be something like Tom Hanks saying towards the end of The Circle: "Oh we are xxxxed!"

[1]: https://www.imdb.com/title/tt4287320/
Ask HN: What are the best HN related websites?
What are the best Hacker News (HN) related websites do you know off? Please post them all here, with a brief description.
> When did RSS go out of style anyway?

It went away when Google killed Reader. Reader had more or less killed off the independent RSS reader market. When it got shuttered, alternatives weren't well developed and people shifted more or less entirely onto Twitter. The Twitter shift had been happening already but the shutdown kind of forced the issue.
You would think they would at least add pylons leading up to the divider: https://ops.fhwa.dot.gov/publications/fhwahop13007/images/fi...

The divider is from the fast lane no less.
FWIW, the Domain Name Registration Policy (https://eurid.eu/media/filer_public/76/48/7648e621-0c5d-4c09... , linked from https://eurid.eu/en/register-a-eu-domain/rules-for-eu-domain...) doesn't mention EEA; it spells out the 3 extra countries explicitly.
It looks like RFC 7873 (May 2016) came up with a very different meaning for "DNS cookies" than I did in 2015.

It's an unfortunate naming collision.

My meaning: http://dnscookie.com/
RFC 7873 meaning: https://tools.ietf.org/html/rfc7873
You could, but I think mine is better. (firstname, lastname) and (x,y,z) are homogeneous collections. But they probably should be tuples. In a tuple the position describes the structure, in a list the position merely describes the order. Hence why tuples are best if you plan to unpack them (ie. firstname, lastname = name).

Trouble is Python doesn't completely separate the concepts like some languages do (e.g. C array/struct, R array/list). You can unpack lists and store heterogeneous items in them. Many libraries do this (e.g. SQL libraries will give a list per row by default). And if you follow the bash read idiom in Python using str.split you'll unpack a list as well. For me the distinction is about documenting my code.

The only real practical advantage I'm aware of is tuples are hashable. I don't think they are implemented anything like structs underneath.
Have you got a link?
Indeed, there is an ordering, but that's decided exclusively by the creator of the transaction, so he could easily manipulate the future tainted addresses.

The FIFO (or LIFO for that matter) rule seems like an arbitrary chosen one which could easily be overcome: the thief can put the stolen funds in an address and only use those when the atomic swap protocol between chains is created, for example. Or exchange those funds on decentralized exchanges, or sell on localbitcoins.

This is an example of a transaction with multiple inputs, multiple outputs: https://blockchain.info/tx/1952ae67f75707e8a357cb40cc4e2123c...

The creator of such transactions can manipulate the order in both inputs and outputs.
Interesting timing. I'm in the process of launching a privacy-first feed reader with tight Pinboard integration. May add support for other services eventually, but I love Pinboard. Lmk what you all think of the idea: https://www.pinfeed.net/
> I think that's irrelevant, because people generally don't care. If nobody cares the media won't report on it. The difference this time is that the word "Facebook" now has a causal relationship to the effectual word "Trump".

That's true to a degree, and it's also true that this might still mostly blow over.

But looking at my social circles, much of it pretty inept with computers and far from the 'nerd' stereotype, a significant part of this has been a long time coming. People do care, and many of them moved away from Facebook quite a while ago. People started using 'fake names' more and more. People at least talk about privacy and try, as naively as they do, to be better about it. I know more than one 'normal' person who looked into secure chat apps and even bothered to install Signal (or Telegram).

Of course a lot of it isn't actually helpful. Moving to Snapchat because it seems more private, moving to WhatsApp to avoid Facebook, thinking Telegram is better than WhatsApp because "at least it's not FB", all these things might not really improve the situation much. But that's because they don't know what else to do.

The mere fact that they're trying, in my opinion, is already something I didn't really expect would happen. And it provides an opportunity to educate, for those of us who have been aware of this for a while, and know much more about the technology and how to actually be mindful of privacy.

I think a good analogy, at least over here in my world, is physical health. Where once 'jogging', fitness, mindfulness, yoga, looking at food ingredient labels , and so on, were kinda weird and health-nut stuff, it's now become much more central to everyday life. It probably took a lot of "I'll drink this sugar-bomb of orange juice instead of a coke because it's healthier" before we got to any significant societal change that actually helps.

But breaking the social stigma of being a health/yoga/privacy nut is probably a very important first step!

EDIT: And let me add that for most of these people, Trump and Brexit are not something talked about all that much, at least not compared to the topic of privacy.
I am wondering if 100 Tesla would have passed that spot at that time would all 100 hit the barrier?
Tesla should reveal why they can't detect solid objects and hit into them.
Yes. But please not RSS. At least newer initiatives like JSON Feed have maintainers who respond to requests for improvements.

RSS feels like an abandoned standard. I tried to submit an improvement to the author directly to explicitly allow HTTPS URLs in light of upcoming iTunes changes to enforce HTTPS; they said by email that of course HTTPS resources are valid in their view, but they weren't prepared to actively update the spec to say as much. Until that's done some feed validators continue to mark HTTPS resources as invalid.
Yep, being aware that people with low body weight were more likely to report incidents could give you confidence to ride knowing you had high body weight.
Jeff Dean's ScaledML Talk: Systems and Machine Learning (slides) [pdf]
hm, I'm actually reading both HN and reddit through RSS right now, just add .rss after any subreddit url and you are done: https://www.reddit.com/r/wtf/.rss
This is how I would communicate and do communicate when people are making morally borderline choices.

The most common reaction for people is to ignore the moral implications, a la wall street "We are unlocking value".

If boz went 180 degrees and said "welp, thats it growth is over, we have a major disaster in a few years" - the GREATER force would murder him, namely shareholders.

Even now, Facebooks greatest pain is coming from the hit to its wealth, not to the number of uninstalls coming via "deletefacebook".

At this scale and size for a large top tier tech company, the man in charge is expected to not rock the boat. Any course correction occurs slowly, or through crisis.

Apparently we are doing it by crisis
There is ActivityPub:

https://activitypub.rocks/

https://news.ycombinator.com/item?id=16222478

https://www.w3.org/TR/activitypub/

https://github.com/w3c/activitypub

But not enough implementations of it yet that tie into blog content.
If you define not working like OSX I guess its terrible seems pretty functional to me.

Personally I prefer i3wm and keyboard driven workflow and find the way mac handles multi monitor loathsome. This doesn't mean that it is objectively bad it means I find it unsuitable as a matter of taste.

The fact that he had hardware issues hardly means linux is terrible in fact its a fairly nonsensical way to qualify an entire OS.

You could I'm sure find someone who bought a singular mac and had issues with it in a workplace full of linux users and try the equally nonsensical if opposite conclusion.
I do the same. I use https://blogtrottr.com/ and am very happy wit it.
I think HN might be the only place I read the comments. Missing the hell stew of a comments section is a feature as I see it.
GoQL: A query language over Go code, in Go
They won't come down as long as municipalities are allowed to dictate their own housing policies.
I think the standard compilation speed of Scala is around 3000 loc/s. https://developer.lightbend.com/blog/2017-06-12-faster-scala...

Your Rust example compiles at about 180loc/s.
Intermittent fasting is not that hard.
Major reason why I moved away from Feedly and The Old Reader and now use Inoreader: no limitation of number of feeds for the free version
Erm.. I never stopped using RSS. I have never consumed news primarily on social media, I subscribe to hundreds of feeds and that's always where I get my news from.

I use Feedly with the wonderful Nextgen Reader client for Windows. 10/mobile. Beautiful app, service, news experience.
Click straight through to the speakers notes (.txt) in the GitHub repo if you don't want to do the video.

I have been bitten/educated by many of the points she brings up.
I'm using a HP Elitebook 840 running Ubuntu 16.04 LTS. Didn't work with 14.04 LTS either.

I hope you appreciate that you wrote 4 paragraphs on how I could improve on picking a laptop from the Ubuntu Certified list to have fewer problems.

>If you really want this to be a happening thing the logical thing to do is to support vendors that sell Linux machines with your money.

I've been using Linux since 99. It's never worked without problems. It's been 20 years and I can't pick a laptop off a list of Certified hardware and be confident. I abandoned linux for home use a decade ago which makes me sad because I wish my side project laptop could be a linux machine. Development is so much easier on linux.
The statement mentions "hands on warning" which just means you need to keep your hands on the wheel. That's very different than giving control back to the driver.
One thing I don't understand is people who use all these websites to handle RSS. I've always used Firefox addons in order to handle RSS (before LiveClick which was awesome, now FeedBro or similar).

Why would you give control away for something as decentralized as RSS?
Yeah, I get that same thing, so tried Chrome and Firefox until i figured out they don’t support extensions such as uBlock, then went to try those built in blockers, and while i kinda understand why they built them into the system it seems most of them are no where near uBlock and only seem to work on Safari. So got Firfox klar which removes a lot of adds and kinda doesn’t brake pages but has no tab support and no history so it’s basically useless for everyday browsing...

I am trying to use FF and Chrome cos i have most of my stuff synced on them...
Among these other things which we invented are algorithms which invented other algorithms to solve real world problems. There is nothing unuique or irreplicable about humans (save of culture, emotions, etc. which nobody wants to replicate).
Pricing is hard.

Your platform may have 1000's of features, not all of which all your clients want or can pay for. Packaging into simple groups may not possible until you have the volumes to figure out what works

Many clients need specific features that you don't have yet, pricing calculation becomes very complex, and depends on customer to customer as well. We will charge more to some customers simply because we know they need a lot of hand holding and special assistance
How would this compare to the approaches attempting to use algae?
You're right. It's a terrible idea. Pity it's too late to edit or delete that dumb comment.
Wouldn't that just make Disqus the new Facebook?
Yup Tesla knows their audience - it's their semi-rabid owner and aspiring owner fan base. Throw out some logs or stats without context and let them do the dirty work for you.
Also from Marta's author in that thread:

"The development of Marta started the long before I knew about fman, so it's not any kind of imitation."

"I don't think we are the direct competitors. fman is a completely another project with its own strong and weak points. I tried fman and didn't like it because of numerous reasons, but it's my own opinion."

Two column file manager interfaces have been around for a long time, fman certainly didn't invent it. Marta seems to draw more influence from Midnight Commander / Norton Commander, with the function key reminders at the bottom of the window. The breadcrumbs and tabs in Marta remind me more of Panic's Transmit, and those UI elements aren't in fman. There's elements of the standard Mac finder in there. It is definitely not a clone of fman.

I think that was a really unfair comment, designed to get traffic to a competing product.
For me it was Xtree, that was my favorite file manager ever.
For everyone's reference, I had remembered there was already a library that existed that claimed to do this.

I was digging around to find it, it's called deeplearn.js, and upon checking it looks like that project has officially moved to the one referenced in this very post.

https://deeplearnjs.org/
I agree RSS is pretty crufty. (I've got a soft spot for Atom.) Do you have a list of validators that don't accept HTTPS resources as valid?
Googling surprisingly didn't give me a definitive answer on this - how long does autopilot let you go before warning, and then before stopping the car if you don't have your hands on the wheel?
https://news.ycombinator.com/item?id=16601883
I'd be interested in talking to you more about your situation. How does one reach you?
See https://alternativeto.net/software/mailchimp/ for a list of alternatives.
So the data isn't necessary at all, yet they still collect it.
Nigeria’s game designers fight for their cut on mobile
Yes, but is that the jet lag effect from repeatedly switching times or just being awake at night?
I am also using newsblur, after trying several other services
Feedly is fantastic. Coupled with Reeder on iOS it more than replaces.
Or animals that frighten you.
Yea, it does look legit after reading the articles you posted. I am not a hacker per se, but I guess uncovering what a gov hacker did in your account is highly difficult. In terms of safety, use a password manager that creates and stores hard-to-crack passwords for you. I am pretty happy with Dashlane, 1password has a good reputation, too.
RSS is, fundamentally, just links to web pages. Why would it need to have built-in commenting? Just go to the linked page and comment there.
Feed Validator is one. (It returns “href must be a valid URL” for image resources that start https:// because the RSS spec does not openly say that HTTPS image URLs are valid.)

I tried and failed to change this, and was told that the RSS spec needed to change first:

https://github.com/rubys/feedvalidator/issues/16

And I'm not the only one:

https://github.com/rubys/feedvalidator/pull/30

I respect Sam's opinion in those threads because really the spec needs to change, but I've given up trying to change it.

We ended up serving all feed URLs over HTTP as a result because customers using Feed Validator kept complaining that our product generated invalid feeds.
I recently added RSS support to my sideproject blogging platform.

https://stdlog.net/logs/show/stdlog-net-now-supports-rss-fee...
Looking at the source, it feels like it should work without JS, but it doesn't (Firefox 60 beta, Linux)

Neither of elinks/lynx renders it correctly either.
Davido – Fia (Remix) Ft. Stefflon Don
Mozilla.org is 20 years old
Not that strange, every site on which I've looked for it has RSS/atom feeds where relevant, but hide them (eg this, github, etc).

Interestingly enough, Firefox has a "feeds" section when looking at page info, which will show RSS feeds included in the meta tags (which they all seem to be).

So really, I've never stopped using RSS, not sure how to go "back" to it. I understand the whole thing with Twitter killing it but as a dev I use RSS as todo lists and that still works wonders.
>> "zero safeguarding of data to ensure it wasn't sold by app creators/devs"

> bullshit, they stopped this is 2015. But I agree, the way it worked before was really broken and asked for this to happen.

> I've never worked at a company that takes data protection as seriously as FB

Before or after 2015? Because a couple of years does not quite make up for the preceding period starting in 2007 (if I recall correctly) during which FB clearly didn't care.
But my schedule always slides to my natural rhythm.

I struggle to understand why, is that a decision you are making either consciously or unconsciously, or is it something about your environment?
Yeah, label compression is very much in use. It is annoying though, it’s one of the slower pieces during serialization.
> destroy atoms?

Obviously not, that would be far too much energetic :-)

If the goal is removing CO2 the reaction should combine some C into something that doesn't burn, but that's not going to happen if the goal is creating fuel.
Also from that thread:

> This is eerily similar to fman

> I was about to ask if this was some form of re-release

So it's not just me who thinks the similarities are uncanny.
Does seem like a problem that a LIDAR based system would have been less likely to make, compared to AI on video classification
TinyTinyRSS lets you use xpath to specify which element on the linked page is the “real” content. It was a life-saver when dealing with snippet-only feeds.
Hmm. Makes sense, but I'm not convinced. Borrowing an é from French also doesn't give you the correct pronunciation, since the French and the Spanish é sound different (and since Spanish does have an accented e, it makes the whole thing more confusing!). It's MAT-eh, not mat-AY. And now I feel a bit like Hermione Granger :(
I really hate the whole Tesla angle of "technically we are not lying but we know people are going to mis-remember and misrepresent what we are writing".

Take for instance: > The driver had received several visual and one audible hands-on warning earlier in the drive...

What this means is that during this incident there were No visual or audible clues that a crash was about to happen

What they are saying is that while he was driving there was an earlier point at which the car did not crash, where the car gave a visual and audible clues. And you have to ask? Why the hell is that relevant? It isn't. They are stating it as a fact because they know some people will incorrectly claim that the car warned the driver prior to the crash.

With their eager to try to explain what happened why aren't they talking about what actually went wrong? Why did the car drive straight into a barrier. If their claim is that it was cased by the driver not having his hands on the wheel for 5 seconds, then they need to fold the company and give up trying to create self driving cars. That is Not acceptable of a self driving system.

The fact that the barrier was damaged intensified the accident, but that does not in any way excuse their system driving straight into it. And no, you can't get out of culpability by claiming statistical superiority. That's like a gang-member drying to get out of jail after killing a rival gang member because his gang statistically kills fewer people. Tesla has put a product in the hands of consumers, when it kills those consumers they need to step up to the plate and be honest about their fuckups, not just blame the drivers, blame the infrastructure and point to statistics.
Biologist E.O. Wilson suggests ‘moon shot’ conservation effort
A Geometric Rust Adventure: experience porting an academic C++ library to Rust
Not true at all. Alternatives were already available when Google Reader(GR) closed, i.e. July 2013. Inoreader, which was feature-complete in regards to GR, was launched a month after the announcement in March. That's why Feedly hogged most of the momentum as it was released in 2008 already.

I would say Google Reader's discontinuation actually increased the popularity of RSS. The protocol was big news for a few weeks, and it sparked a lot of new services which made news themselves.

I don't know whether feeds usage was growing but it was not comparable to social media. At that time papers were increasingly adding paywalls and didn't show any signs of embracing feeds any further.
This could be useful for developing countries, if the following supply chain became feasible:

1. Rich country builds nuclear reactors to generate power
2. Rich country uses nuclear power to synthesize hydrocarbons for export
3. Developing country imports hydrocarbons for domestic energy needs

Developing countries don’t have the resources to build nuclear reactors, and we might not want to export the nuclear technology anyway, but we can export the actual energy this way.
Can't think of many non-constructed phrases where the meaning of "mate" would be ambiguous. "Drinking mate with my mates" (as many a hipster tech Londoner do in the startup scene :P). "I'm drinking my mate" should never be confusing outside of liquid cannibal circles!
#2018 Hanuman Jayanti Spl Song #Balaji Balhari Sharan Thari Jo Aave
I’m honestly surprised this is even allowed to operate. I doubt that this is increasing safety in any meaningful way.
I think you and HN in general vastly overstates the gravitas of the Google Reader shutdown. I loved it too but the demise of RSS happened probably more because of people switching to Twitter, Facebook and others as their "aggregator" than by killing off one RSS-Reader.
Playlist Conversion Software, Spotify, Google Music, Apple Music, Tidal and More
Are you paying for it or do you just put up with the ads? If so, how intrusive are they?
I'm building an RSS tool for Pinboard
Hi Pinboard and RSS users of HN.

I'm building a super fast/lightweight/privacy-first RSS reader with deep Pinboard integration (my favorite bookmarking site) and automation features. The focus is on quickly scanning headlines and bookmarking URLs, rather than reading articles in the app (in fact, there won't even be a reader mode). I put together a page to explain the idea in more detail:

https://www.pinfeed.net/

This is something I've always wanted, and in addition to building it for myself, I'm considering hosting it as a SaaS. If this sounds interesting to anyone here, I would really appreciate you let me know so I can decide if this is something I should spend time on (there is an email signup for early access, if you're really interested). Thanks!