skysight-inc/HackerNews huggingface dataset:
I don't understand why this post made it the front-page. As many have pointed out in the comments, Netflix should be verifying ownership of the account. Also, when you click the link, you would be either taken to your own logged in account on Netflix, or you'd try to log in with your canonical address. James in this case decided to get access to alternative email address Netflix account, but when he reset his password, the "attacker" can no longer control the account. They may still have sessions open that'll give them free TV for a while, but won't be able to change the password because that should trigger a prompt for the old password even when logged in. So I really don't see the attack vector here.
Changing a password should always invalidate all existing sessions. If you aren't doing that, then you are doing it wrong.

Edit: Or at least invalidate all sessions initiated using the old password if you have that tracked.
Meta studies still show that antidepressants help more than the placebo
https://www.bmj.com/content/360/bmj.k847
Using ideas contained in this script you can execute tidyverse commands with R on the command line:

https://github.com/jeroenjanssens/data-science-at-the-comman...

I was not able to commit its options to long term memory, so I've built a bash script that contains a pipe of commands, including Rio.
Keep in mind that SSRIs appear to do little more than active placebo in the vast majority of cases with the downsides of withdrawals and all the other symptoms including deceased emotions in general.

There are many alternatives that have been shown to be as or more effective.

Writing and then reading 14 Gratitude Letters to people.

Spending an afternoon a week outside.

Practicing telling the 100% truth in your relationships.

And of course, Psychedelics.

Many of you know my story of coming from schizophrenia, bipolar, anxiety, suicidal depression, mania, etc. and going on a path of returning to my self after having a vision that what was needed to was to go into the pain more fully and then seeking out various modalities to do just that.

It's possible to do, but you'll need to seek out support outside the mainstream.
Intense vertigo is the same for sertaline / zoloft, It lasted more than a month for me. But I needed the energy and initiative to get a new job.
I think it does matter. Almost every discussion of inequality seems to be tied to a discussion of whether to use taxation (or other laws) to change it, with a view to changing these other things. And that only works if the causal link is from the money to the bad things.

I'm not sure that there is no causality, BTW. I'm just objecting that too much discussion assumes it's obviously all causality: The money just falls from heaven onto certain Brazilians, not others, and that's why Rio has the murder rate they do, and you could fix it with income tax. This seems crazy.
Yes it was designed to get a beater ap performance out of a 50mm round of course there as not that much tungsten available to Germany in ww2 and what was better suited to other uses
Then they don't understand what they mean, "benign" AKA elective communism can only exist in a free and pluralistic open market society where people have the personal freedom to choose how to live.

Trotsky would've been just as bad as Stalin in the end not because he was evil but because an authoritative regime has no other means of asserting power other than force and violence.

Which is why under any autocracy even the most "benevolent" ones any challenge to the authority, ideology and core philosophy of the rule must be squashed.
The last thing we need is people who clearly lack a basic understanding of a field as complex as mental health to start working for start-ups in that field.
As far as I can tell it isn't in the standard at all, optional or otherwise (although the character '+' is allowable). Gmail are not the only ones to implement this feature though.

Also, you'll have to elaborate on how the dot usage actually breaks the RFC. I assume it states that dots are just like any other allowable character, but that's not the same as actually breaking the RFC.
There is no doubt that antidepressant therapy needs to be combined with psychotherapy, sports, meditation and just reducing the unhealthy parts of your life.

The cost of taking antidepressants is really low however. Most of the time, they have almost no side effects, and are proven to help https://www.bmj.com/content/360/bmj.k847
Where I live, they are pretty cheap.

I find that there is undue bias against antidepressants. If you need them, take them! They help.
You’re not missing anything, but if gmail delivers all the mail, and I just trash it, we’ve fixed the symptoms, but not the problem, and we’ve made the problem invisible.

I agree that sending verification emails should be the standard. But if I can’t bounce the emails then there isn’t even the slightest way to inform the sending service that there might be a problem.
Examples of questions about the existence of API and library functionality in the past four years? (with recommendation answers) Sure:

https://stackoverflow.com/questions/46718944/facebook-graph-...

https://stackoverflow.com/questions/7120806/skype-python-api

https://stackoverflow.com/questions/34010978/elasticsearch-h...

https://stackoverflow.com/questions/26305704/python-mixed-in...

https://stackoverflow.com/questions/49524937/fast-bipartite-...

... etc ...

I get the idea of avoiding "what's the best programming language?"-type questions, but to the point of my original comment, the application of the policy feels very uneven and therefore "oddly subjective".
Something similar happened to me once [1] and I used the password reset process to "hijack" the account. I used that to contact them over facebook, and then assigned the account to their proper email address. They were quite grateful.

I'm not sure of the legality of that process, and you could argue the morality of it, but doing this once to one of their less important accounts (library?) might be a good way to get enough information to contact them properly.

[1] It wasn't technically the same, because the typo was done by a phone carrier agent, not the person whose account they were setting up. My email is firstname.unrelatedstring, theirs was firstname.theirmiddlename.lastname, but my unrelated string happens to be their middle name.
what other methods?
this is a pretty faithful reproduction. I like it! a lot of solid pointers to great algorithms in here.

- perlin noise: https://en.wikipedia.org/wiki/Perlin_noise for generating terrain bumps

- flood fill for painting terrain on top of noise : http://lodev.org/cgtutor/floodfill.html#Scanline_Floodfill_A...

- convolutions with webgl shaders https://github.com/phoboslab/WebGLImageFilter

- dilation filter

- "closing" in image processing https://en.wikipedia.org/wiki/Closing_(morphology)

- deciding in the hqx algorithm for anti aliasing https://en.wikipedia.org/wiki/Hqx

- texturing

- halton sequences for even distribution of worms https://en.wikipedia.org/wiki/Halton_sequence

- sine wave for water

all done in the browser.

github repo at https://github.com/juliango202/TerrainVer
> Gmail even warned him of the phishing possibility

Where are you seeing this? I see no warning in the screen shot.

> Netflix not performing canonicalization of email addresses

AFAICT, Netflix CAN'T canonicalise the email address (unless they start making assumptions about specific providers) -- according to the RFCs, they can be different email addresses.
I use Slack's Windows Phone app on my HP Elite x3. It has some issues but it's functional enough for when I need to use Slack away from my PC.
My ISP already knows my name. Nothing else gets sent along. My bank account number is not useful unless they get my history from my bank. Which is not likely to happen.

There's no 3rd party payment processor involved that could collect a bunch of my activity and then sell it to someone. With wire transfers, they'd have to go to everybody who I'm paying and ask for the data. Which is much less likely.
Show HN: 100% CSS control of Masonry Layout with left-right content flow
That's exactly how I felt getting off of Effexor. I stopped taking them completely one day and after trying to push past the zaps for two weeks I got back on them. I had to get of them gradually by splitting the pills open and splitting up the little balls instead.
SSRI’s are no more effective than placebo or exercise in multiple studies: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3674785/#
> Writing and then reading 14 Gratitude Letters to people.

> Spending an afternoon a week outside.

> Practicing telling the 100% truth in your relationships.

> And of course, Psychedelics.

Heh, a decent psychologist would suggest #3 during e.g. CBT sessions. Suggesting #4 is downright dangerous, you don't know who reads your post.

Readers, please seek professional help -based on conventional science- instead.

I tried all kind of self-help BS, including using psychedelics on my own, because I did not trust conventional science (ie. psychologists, psychiatrists). None of the pseudoscientific self-help BS helped, of course, and it gave me a severe lag in my life and professional career.

At the very least people should try out professional help first. But if I went on with it after the first failure (a diagnosis + meds for GAD which didn't quite work out) right afterwards, I might have figured out I have autism at my 27th instead of my 34th.
Do you mean Meteor Toys? I'm working to get the site back up :) just been busy .. I'm actually contemplating an all-new version.
Australian Police could access US cloud data under planned crime-fighting deal
Type soundness is always relative to a kind of error that a type system is designed to rule out. So any type system can be made trivially sound by decreeing that its purpose is not to eliminate any kind of error. This is why “mathematically civilized” is a much better term. For example, even if you don't mind null pointer exceptions, it is not mathematically civilized to add one extra case to everyone's case analyses.
It wasn't spelled out, but I think Kubrick didn't know who he was, and just didn't want anyone extra on the set. Given how behind and over-budget the movie was, and how many people wanted to visit such an unusual (for the time) film production, I can understand that.
This article completely ignores all of the reasons why the economy collapsed, and seems to just happily go on with the unstated assumption that a new currency can help. The truth is that Venezuela is dead, what you’re seeing now is just agonal breathing, not life. Society is divided, the economy is destroyed, so of course the currency based on that failed. How does inventing a new currency on top of that failed system help? How is it not rearranging deck chairs on the Lusitania?

Maybe a few miners can strike it rich through money laundering, based on heavily subsidized mining, but that fixes nothing. Cryptocurrency isn’t an escape from reality.
Ugh. Auto playing sound.
And 2010, the sequel, is pretty unwatchable. It is a bad movie.

The worst part about the movie is Roy Scheider's fatherly internal monologue narration, which tediously explains-like-i'm-five for half the movie.

So maybe that gives us a hint, about what Clark's narration would have done to 2001.

That little sound bite also chimes in over and over again, sounding forced, poorly performed and with a corny distortion effect layered on top, in some presumptive attempt to resonate an idea with the audience. Maybe to remind you once more that the movie is supposed to be a sequel, despite an almost total discontinuity with 2001.

It draws a lot of parallels with Stephen King and The Shining, which had provoked Stephen King to exert more creative control over movie adaptations, often with laughable (or maybe unintentionally comedic) b-movie results.
FREE Music Download of Awesome Rock Music Brian McShea and the Sidemen
And many of them are not very sympathetic, https://www.npr.org/2018/02/19/586457604/whats-it-like-to-be....
To be clear, I'm talking about what email providers could do to reduce the risk of confusion, not what email senders should do to validate emails. I agree that the only way to validate an email address is to send a confirmation.
Kubrick didn’t want it to come out, on the set, that he had asked other authors to collaborate with him.
Hmm... I question a meta study that says it has finally solved the issue and put it to rest, when there are plenty of other studies saying the exact opposite.

Here's one:

https://bmcpsychiatry.biomedcentral.com/articles/10.1186/s12...

"SSRIs might have statistically significant effects on depressive symptoms, but all trials were at high risk of bias and the clinical significance seems questionable. SSRIs significantly increase the risk of both serious and non-serious adverse events. The potential small beneficial effects seem to be outweighed by harmful effects."
And multiple studies show them no more effective than exercise: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3674785/

The bigger problem is “depression” is not reproducibly measurable, because it has no falsifiable or biomedical marker.
I have same account (same mail) with amazon that works across their .com, .in, .fr., .co.uk
Rogaway and Shrimpton specifically used collision resistance not implying preimage resistance as an example of the importance of definition and assumptions:

>Informal treatments of cryptographic hash functions can lead to a lot of ambiguity, with informal notions that might be formalized in very different
ways and claims that might correspondingly be true or false. Consider, for example, the following quotes, taken from our favorite reference on cryptography [..] "collision resistance does not guarantee preimage resistance" - [0]

They go on to show the definitions under which collision resistance does and does not imply preimage resistance.

[0]: http://web.cs.ucdavis.edu/~rogaway/papers/relates.pdf
> but there's no obvious attack that this mitigates

Anyone who owns fmail.com hmail.com gmil.com gmai.com can easily steal account details an personal information from people who have a typo when entering their email address if you don't verify the email address before sending that personal information.

If you are not verifying an email address before sending sensitive content or allowing an account to access sensitive information, you are doing security wrong.

edit: typo spelling typo...
Model Y crossover design is currently in progress based on Tesla job postings.
Personal attacks? What personal attacks? I'm on record (although it would require a pretty exhaustive Google News search to find it) as saying pretty much the same thing as the OP, right after I watched 2001 for the first time.

In that case, other people on rec.movies were patient enough to give me some good advice, which was to set the Clarke book aside for the moment, give the film another try in a better viewing environment, and move past my prejudices and knee-jerk first impressions.

It sounds like HN's goal is somehow to create an even less open-minded environment than 1990s-era Usenet, which will be quite a trick. But if anyone can pull it off, it'll be you guys.
Where does go the 13th item?
The US isn't synonymous with "modern medicine". It's a weird outlier in just about every respect. Vast amounts of clinical research and practice is happening outside of that bubble.

While it's true that the US has a serious problem with overprescribing, it's also true that many other countries are seriously underprescribing psychiatric medication, due to a combination of cost and stigma. Mental illness represents an immense global disease burden, with depression being the single greatest problem. The disease burden of depression is higher in many lower- and middle-income countries than in the US, mainly due to a lack of treatment.

Although there has been a great deal of controversy over antidepressant drugs, we are now highly confident that they are significantly more effective than placebo. Generic antidepressants are dirt cheap, with most costing less than $2 per month at international wholesale prices. We shouldn't lose sight of these facts.

http://www.thelancet.com/journals/lancet/article/PIIS0140-67...
http://www.thelancet.com/journals/lancet/article/PIIS0140-67...
> lack of apps killed it

For me personally, this is not true. I had a windows phone for about a year and it sucked, and I do mean SUCKED for daily use. At the time, I didn't use apps apart from email.

Sure animations were smooth, but after the first two times looking at them, they are too slow and 'in your face', making the phone feel slow.

Live tiles were annoying rather than useful because often I couldn't tell what clicking on the tile would do. Whatever reviewers tell you, pictures are not as good as simple icons if you want to open an app fast. The only good thing is I think there was a way to turn them off.

Basic things like having a separate audio level for media vs ringtone were missing.

Even something as simple as swiping up to unlock the phone, you swipe up to pull the lock screen up and unlock the phone, but often when unlocking the phone one handed, I couldn't push it far enough; instead of unlocking, the shade would drop back down and bounce on the bottom of the screen. This happened a LOT and it was really annoying.

I tried to use it but it was a terrible, terrible, horrible experience.
A lot (but not all) of the costs are due to additional process steps that can be automated.

I think we can dramatically increase safety and quality by selectively adopting some of the concepts from aerospace and aggressively automating them.

Traceability; NLP for requirements etc..
If you want to build a real-time collaboration app today, what you would you use instead?
Authorize.net just started rejecting emails with + signs in them, causing transactions to start failing for many businesses.

https://community.developer.authorize.net/t5/Integration-and...
For what it's worth, from my anecdotal experience, Bupropion is much, much milder in terms of withdrawal, and the symptoms are more in the realm of energy than paresthesia - groggy and listless, but not vertiginous and electrified.
Balance in all things, I suppose. It seems to me now that looking for happiness in accomplishment is a bad gamble, because life is not predictable enough. You can't make success happen just by working at it; you have to be in the right place at the right time with the right idea, you have to encounter none of the many outside factors which might derail you, and it's only in hindsight that you get to find out whether you ever had any real hope of success.

Your project will probably fail, because most projects fail, so if you are deferring present happiness in order to invest in the hope of future success, you are probably going to be less happy overall. Success feels good, to be sure - but then what? Another project, which will probably fail. So I think it's important to find a way to live a happy life whether you are trying to accomplish anything or not, and then the occasional success can be a bonus when it happens.
Naw, I left about 10 years ago and out was still there, and still had co-workers at a different job asking me about it a couple years later, because they got bit by it.

The justification I heard was that someone would have a personal and business (or library) account to the same email, but it definitely persisted longer than you think.
You're full of shit. The word "subaddress" doesn't occur anywhere in RFC 5233. The only thing RFC 5233 says about + in email addresses is that it's an allowable character.
Even things at the right side of the @ are up to the E-Mail server. You can send an E-mail to @gmail.com or @GMAIL.COM and Google could be routing it differently.

It'll resolve the same in DNS, but what the user typed will be encoded in E-Mail headers, and you could route differently depending on whether it's upper-case, mixed-case or whatever.
The comment read to me as "nobody cares, communists want to kill everyone that has the Internet." A pretty reasonable thing to downvote IMO.
As hilarious as that video is, it is quite out of context in a Aadhaar discussion.

If someone is interested in issues with aadhaar,the rethink aadhaar website has a nice FAQ[0]

[0]: https://rethinkaadhaar.in/faqs/
The use of pluses for tagging/subaddressing is an optional part of the standard. + being valid in an email address is not an optional part of the standard.
Gmail is a fairly common mail host. Doing what you suggest for ‘@gmail.com’ addresses would be an easy solution.

You could also make the case that Google should have a free library for most common languages that does this for you. It would improve the safety of their users immensely.

I may, however, be somewhat biased as I am the frequent recipient of email from weird services that some other chucklehead keeps signing up for even though he has yet to get past email verification as he doesn’t own the address.
Node.js. Meteor was dead on arrival to be honest.
What study shows LSD is more dangerous than SSRI’s? Antidepressants can also cause psychotic episodes, panic attacks, suicide, etc.

Both drugs have mechanisms of action that we don’t fully understand and both affect the brains homeostasis.

If it’s irresponsible to prescribe LSD for depression it’s irresponsible to prescribe SSRI’s as well
> Trying to get a sense of what it would be like to live there

The past few times I went for an interview to a new location, I first went to a meetup / group. Asked folks (who have lived and have no stakes in your interview) what they like and don't like. Also, walked few blocks around interview spot in the evening and morning for as long as I could to get a better feel of the area.
The point I was trying to make is one SMS number does not equal a phone with a paid, credit checked, account behind it. Making it easy to create SMS numbers will help expose the weaknesses of using them for 2fa.

Many people have access to your SMSs. One bad actor at your phone provider, the sms gateway, spoofing your sim, a bad app, or someone casually observing your lock screen are a couple I can think off have, but I'm sure the security experts know many more ways than I do.
Is there a reason why people are trying to stop taking it? If it helps your life, why not keep using it? For example, I have been taking antihistamine daily for the last 18 years for skin allergy. My QoL is significantly better with it, and unless there is some magical cure, I don't see why I should stop just because it's a "drug", "chemical" or "unnatural".

For example, from the article,

> "A year and a half after stopping, I’m still having problems. I’m not me right now; I don’t have the creativity, the energy. She — Robin — is gone"

If that's important to you, why not continue?
They just look at the numbers in the boxes unless they decide to audit you.