skysight-inc/HackerNews huggingface dataset:
> https://www.w3.org/TR/2018/CR-webauthn-20180320/#sctn-cose-a...

I'm not feeling great about these algorithm choices. Namely: RSA with PKCS1v1.5

See also: https://robotattack.org

EDIT: Also, elliptic curve digital signatures with a random nonce (here, "r") instead of deterministic nonces makes me feel itchy.

https://fidoalliance.org/specs/fido-uaf-v1.1-id-20170202/fid...
I agree, secret questions are dumb... but what are the alternatives?

The majority of human beings now manage important parts of their lives online, which means they have to remember passwords.

Humans are TERRIBLE at remembering passwords - those of us who use a password manager represent a fraction of a percent of those who need one.

Secret questions may be revoltingly insecure, but they do at least let people get back into their accounts. We need to do better, but I don't know what "better" looks like.
I've personally been on support screen sharing conferences with the DoD before as a third-party consultant/contractor. They do not provide all contractors, especially third party, with DoD managed devices and in those cases I always thought that it was a bad practice. I asked for the people on the conference to e-mail me the root CA cert to validate the thumbprint was the same as the site but I'm not sure everyone would do that and instead blindly choose the 'proceed anyways' option.

/edit.
That was a very long time ago though so I'm not sure if they're even using that same screen sharing site anymore or if they've since changed it to use a public CA root cert.
I really, really don't care. To each his own.
I looked around the website and couldn't find any mention of what Dark even is. I keep hearing that "Dark is a new tool to help you build a complete scalable app in an afternoon", but how does it actually do this? Why would I want to base my startup on this platform?
I nearly lost my google account that way. I gave a nonsense answer totally unrelated to the question as I knew I would never forget my password.

Was in a different country, got locked out, had to give my security question answer.... oh dear. After about 3 months occasionally sitting down and just trying out random things I meant have entered I managed to get it back.
I believe the entropy problem is only that people don’t choose words randomly. I wrote a script to do it for me, with numbers separating words because some websites demand numbers, and assuming the random number generation is suitable, it’s 73 bits of entropy.

I have no idea if the random number generation is sufficient: https://github.com/BenWheatley/HighEntropyPassword
A Brief History of Facebook's Privacy Hostility
The problem with that is that it goes back to being gobbledygook for which the operator will accept "I just smashed the keyboard for it".
The officially published world is consistent. The Hobbit was even slight modified to be consistent with LOTR.

However, all the drafts Christopher Tolkien is using have been written at various times, they were rewritten multiple times while the overall world evolved so they are not canon or consistent.

What Christopher Tolkien is mostly doing is "adapting" these drafts into the final canon of the Silmarillion.
Mining Centralization Scenarios
For transmitting data on an energy harvesting budget there is stuff like LoRa, but Image is out of the question here because of the size.

Much more likely is that such devices will be used for tracking, in situations where GPS is using to much power. Especially, as the calculations for that are done at the receivers instead of the transmitter.
Ha, it's legal in his state, he used the scientific name, and implied that he uses for medical purposes. Then he gave a disclaimer that he doesn't think others should use if they don't suffer from a similar condition. That being said even with the caveats....I was surprised by the admission.
If we're imagining technology advanced enough to vat-grow vegetables (and social controls strong enough to make everyone eat them), we might as well just imagine better runoff control, better land usage, and low-toxicity pest and herbicides.
> What was the name of the street you grew up on? L9Pro840Of9KNIGfKD4tf8tOwTG9Dcqj

Taxi (now Uber and Lyft) drivers in your city must have had lots of fun ;).
Why do they require living in SF?

They plan to make money on support in the future (I believe), so why this model won't work for other spots on this planet?
Bias: I've refused to work on any adtech revenue business, and I've passed on opportunities at Uber multiple times due to ... moral and ethical concerns.

I wouldn't hold experience at Uber or FB against any applicant.
Both of your factors boil down to the physical presence of two things that will usually be in close proximity to each other. Is it really fair to consider that “two-factor”?

Both your fingerprints and the vault can be taken from your person without your consent; a password much less easily.
$3k/month, free office space, and great support from Dark. It's a good deal if Dark is a good platform to use.
OP started with:

"I think I am at least somewhat more productive than average, and people sometimes ask me for productivity tips. So I decided to just write them all down in one place."

If you're not interested in productivity tips, maybe don't read and comment on posts that are titled "Productivity" and start with a paragraph like this? I kind of sense that you want to have a meta-level discussion on whether we should worry about optimizing productivity in the first place, but sometimes the article just isn't for you, you know?
Keep in mind that puffins and scorpions are fluorescing. So the excitation is UV light, but the emission is in the visible spectrum. So tetrachromacity doesn't necessarily come into play. The ability to resolve the emission colors through the contrast of the day is the relevant capability for observers.

Once you learn to recognize florescence, you notice it on some objects with optical brighteners in daylight (e.g., blaze orange products, certain laundry detergents on clothing).
> Got anything against?

I live in San Francisco. No one I know has any belief about any units being unoccupied. All the Chinese people I meet here are working.

It is unlike the anecdotes I hear from friends living in Vancouver.
Do you have to be in SF!?
This is a format combining HEIF as the container with AV1 I-frames as the payload.

HEIF is the Nokia-developed, MPEG and ISO-blessed container for image sequences and transforms, which is published as MPEG-H Part 12, and is based on the good-old ISOBMFF, which you typically recognize as the ".MP4 container". HEIF's most wide deployment right now is on Apple iPhones, where it's the new default capture format for still images and 'live' images (effectively, a short video on either side of a high-res still).

AV1 is the AOMedia-developed, Google/ex-On2/Xiph.Org/Cisco consensus video format that's the evolution of the VP8/VP9 line and Daala.

This format takes the nice royalty-free state-of-the-art MPEG container and puts a royalty-free payload in it, making it a useful best-of-both-worlds.
Maybe. It really depends on what level you hope to achieve. I suggest using CEFR as a starting reference:

https://en.m.wikipedia.org/wiki/Common_European_Framework_of...

For A1 or A2, you can easily be self-taught. Lots of materials work (see below). You will need to refine your skills once you are in a native speaking environment, but you should easily be able to do so. Many Americans consider this “fluent”, but I would call it more like tourist-level proficiency — working in a Japanese-speaking organization would be impossible.

For B1 or B2, I suppose you can be self-taught to this level, but perhaps only with receptive skills like reading and/or listening. These are the levels where you need to feel comfortable with authentic texts. For productive skills, it will be tough to reach this level without being in Japan — it’s just awkward to try to create authentic daily situations with a teacher in a comprehensive way (it can be done and is done, but it is expensive and time consuming).

For C1 or C2, you need to be in country. In fact, you need to be living in the language. Most/all media, conversations, etc. will need to be in Japanese for a while (1-2 years for C2 would be doable if you start with a solid B2 baseline) before you can reach and sustain at this level.

Recommended materials:

Japan Times materials — they are pretty much all good. Good for A1 to B2.

Japanese Language Proficiency Test (JLPT) 日本語能力試験 — This test has 5 levels, and they release old tests. The tests themselves are designed very well. Look through one to get a feel for what you need to know. When you think you’re at level, take the old test. After your done, break down every question and figure out what the right answer is, why it’s right, and why the others are wrong, and why those wrong answers are good distractors (some distractors are aimed at non-English speakers, so don’t over think this). Rinse and repeat. For me personally, this was a great way to find gaps in my knowledge.

Jorden books (Beginning Japanese and Intermediate Japanese). This books are ancient with some outdated vocabulary, use a suspect teaching method (it sort of works, kinda), but the technical lingustic explanations are the best I’ve seen. As a simple example, I’ve never seen better explanations of when to use the particles は and が for beginners than in that book (a better one may exist, I just haven’t seen it). When I was learning, this helped me crush the first two levels of the JLPT (Japan Times stuff better for higher levels), and I helped friends do the same when other textbooks and teachers were lacking.

Duolingo — I just love this software for a basic intro to the language. I’m not sure what level it gets a learner to — maybe A1? That said, it’s a low friction way to start.

This is an area I know a lot about, so please feel free to ask follow up questions.
Ask HN: What are the top takeaways of graph theory?
Some domains have theories which can be readily applied to other domains fairly easily - their main theories and implications are highly abstractable and generalizable.

For example, in finance: efficient markets, compounding, risk, option theory (to name a few).

In statistics: a distribution, statistical significance, correlation, sample selection.

In biology: natural selection, genetic algorithms, gene expression.

Many of these theories, frameworks and models can be applied to other domains.

What are the top takeaways from graph theory? The most generalizable? (For example, centrality, optimal paths, complexity). I'd greatly appreciate any concise resources pointing me in the right direction.
I saw pictures of Core2-Xeon era servers - did they have newer stuff by the end? I figure most of the secondary demand is for at least Nehalem by now, probably Sandy Bridge+.

That said, I would've made the trip up if I had word a couple of weeks ahead of time! I love seeing the variety of stuff, even if it's not terribly useful these days ;)
Count me as one. Who can say if I'd have passed their interview process, but I was recruited by them and immediately said "no thanks", and told their recruiter I didn't like that they subjected their users to psychological experiments without their knowledge[1].

[1] https://www.nytimes.com/2014/06/30/technology/facebook-tinke...
>Do you really want to have "I wrote an novel algorithm to track people" on your resume?

The great thing about writing resumes is that you can leave things off.

>Software engineers should have to deal with the ethical consequences of the work they've done.

Give us legal protections and resources to stand up and to and report unethical behavior by companies then. You're arguing correctly on a moral ground, but you don't have good industry ethics without good legal precedents.

Otherwise the best chance you've got is to get media attention and now you're fighting the company's PR.

When you can point to "Defendant can no longer work in software development because of an ethical failure" cases, you will have a much stronger argument to get engineers to follow ethical guidelines (we're assuming those have been written down on something other than a Github-feelgood repo for that case).
$18 an hour, or $24 an hour, part-time.
I don't think the poster is talking about propensity to entrepreneurship. I think the poster is talking about the propensity to generate media buzz. Young people make appealing subjects and it is exciting when they are smart and ambitious.
Maybe start at https://javascriptweekly.com/issues/380 and step back through issues seeing what of the JavaScript zeitgeist jumps out at you and encourages you to discover more.
So your contention is that structural oligopolies (or markets with monopolistic competition) should not be regulated?

I'd be curious to know why.
We don't really have policies on this as it's a new idea, but there's no reason we'd have restrictions around this I guess. It's your startup, work whenever you need to!
Thankfully NFC can be two-way.
Did you see the last paragraph?

> Don’t neglect your family and friends for the sake of productivity—that’s a very stupid tradeoff (and very likely a net productivity loss, because you’ll be less happy). Don’t neglect doing things you love or that clear your head either.
Using Subversion Externals in Xojo Text Projects
The punchline: "It cost us nearly a million Euros to get both applications to a state that was acceptable to our customer. That did not include the actual personnel, coaching and travel costs."

"It seems that costs scale better than people."
the ability of a consensus protocol & its associated distributed system(s) to preserve an accurate history in the face of a multi-million (or billion) dollar bug bounty and/or state-level attack. You get a price that discounts the risk of failure on that front and the failure to win mindshare / real use.

There are many strong arguments as to why that's a bad bet, but that's the bet IMO.
Given there is only so much time in the say I've always looked at productivity as a way to minimize wasting said time. Some people opt to fill in the time gained with more work and some people choose to use the time gained for leisure. Both are correct as long as you are still maintaining a healthy balance.
(working at Algolia) The biggest reason not going for Keen was indeed related to the cost.
For me, the secret was to stop looking at teams, and start looking at individuals.

We found extremelly talented people that were underpaid, dislocated and suffocated by a toxic and outdated culture.
Web of Science owner buys tool for one-click access to journal articles
> What evidence is there make this claim?

From the article:

"A similar thing happened for the iPhone 7 last year. An iOS update prevented the touchscreens from working on iPhone 7s with third-party repaired screens. Apple then released a follow-up software update that made them work again, resolving the issue."

To me, that makes axoltl's explanation far likelier. From Apple's perspective, I get it: they do Q&A on what's officially supported. Trying to pull in all of the unofficial changes is more expensive and potentially restrictive.
Yes, that's the deal.
Prettier for PHP 0.1: First alpha release
For those wondering about the high number of upvotes, the OP drew attention to this submission with a tweet: https://twitter.com/paulbiggar/status/983759240891281408

(It's not intentional voting manipulation, but I do wish Hacker News would clarify their policy on linking to submissions as a discussion forum, which can cause this unintentional voting manipulation)
Non-mobline link:

https://en.wikipedia.org/wiki/Computational_lithography
Took me a while to realize playing "optimal" means in this case playing optimal according to their chosen reward scheme. Not optimal in the sense of optimal strategy to play 2048 at all which the title can suggest.

Anyway, nice solution and presentation.
Everyone has things they need to get done in their life that they don't enjoy. I don't think learning to be more effective at getting them done quickly so you can spend more time doing what you enjoy is a bad thing.

Personally, I also have a lot of things I want to do, but not necessarily time to do them all. The more progress I make doing things I enjoy, the more I enjoy them. So productivity is important there, too.
Tulips lol

I see what you did there
FreeCAD 0.17 Release Notes
Makes honor to its name :P
Sex workers fear violence as US cracks down on online ads: 'Girls will die'
DragonFly BSD 5.2
I'm confused how your Anker cables stopped working. Mine continue to work and Anker is part of Apple's "Made for iPhone" accessory certification program.
Votes don't count on direct links to HN posts
Yes their identity is still private. Facebook’s referrer policy does not allow the browser to send a full referrer. The receiving site simply sees Facebook.com as the referrer.
Exactly. There is no war/enemy here. Only ideals, whose ethics are now openly questioned.

I think the public discussion probably hits FB most in hiring - I mean, if I were doing an interview there I'd at least ask the question and see how they responded (maybe negotiation point on what I'd be working on or increased comp).
"Conclusion

We’ve seen how to represent the game of 2048 as a Markov Decision Process and obtained provably optimal policies for the smaller games on the 2x2 and 3x3 boards and a partial game on the 4x4 board.

The methods used here require us to enumerate all of the states in the model in order to solve it. Using efficient strategies for enumerating the states and efficient strategies for solving the model makes this feasible for models with up to 40 billion states, which was the number for the 4x4 game to 64. The calculations for that model took roughly one week on an OVH HG-120 instance with 32 cores at 3.1GHz and 120GB RAM. The next-largest 4x4 game, played up to the 128 tile, is likely to contain many times that number of states and would require many times the computing power. Calculating a provably optimal policy for the full game to the 2048 tile will likely require different methods.

It is common to find that MDPs are too large to solve in practice, so there are a range of proven techniques for finding approximate solutions. These typically involve storing the value function and/or policy approximately, for example by training a (possibly deep) neural network. They can also be trained on simulation data, rather than requiring enumeration of the full state space, using reinforcement learning methods. The availability of provably optimal policies for smaller games may make 2048 a useful test bed for such methods — that would be an interesting future research topic."
The bomb was initially built against the Nazis, and with the understanding that they would be building something similar.

Japan came later.

Also the group was sequestered to a remote lab (Los Alamos?) and working under strong secrecy. You either try to keep a good atmosphere or you go crazy.
Show HN: Magic
Nine or ten AM is late because the author is German :)
Cute but how the hell is someone expected to survive in SF for $3000 a month?!? This sounds like a way to get interns cheaper than standard intern wages in SF ($48k).

Are you breaking california labor laws?
I don't think that's a reasonable attitude. Ignoring the signature line, even if common, puts a company at much greater risk of eating any fraud committed with it. If an unsigned stolen credit card is recovered, its owner has a very easy claim against any stores that accepted the thief's signature: "obviously they didn't check the back of the card, now did they?" It feels a little entitled to insist that a merchant who wouldn't accept an unsigned card is a bad vendor giving bad service.
We already do eat vat-grown stuff. And I'm mostly talking about staples, which make up the vast majority of farmland. For anything mashed or made into flour or oil or powder, there's basically no fundamental difference between it being made in a vat versus a field. Whole, unprocessed vegetables like lettuce, etc? Well, that corresponds to a small fraction of farmland, and it also grows great hydroponically. Don't need to grow that in vats.
It's consistent to a point. There have been several revisions of The Hobbit and LOTR over the years, but all were done by JRR himself I believe, and were done for continuity sake and detail. As far as the worldbuilding goes, it's exceptionally consistent. Considering the bulk of all work put out was done by JRR, with Christopher Tolkien doing editing passes during compilation. For instance, the Children of Hurin and The Lay of Beren and Luthien were described in LOTR and the Silmarillion, but were not included largely due to length and incompleteness (the Silmarillion is really just a Cliff's Notes version of the full Legendarium, allegedly).

As far as a timeline goes, several are available, but I would try to steer away from most wiki sites, as they have been, in the eyes of some, 'polluted' by the handling of the IP by non-Tolkiens. (ie the movies and games like Shadow of Mordor)

Geography of Middle Earth is a somewhat complex topic, but the big deal is that it goes through some drastic changes as part of the Silmarillion called the War of Wrath. Other than that large shift, the geography is very consistent. Tolkien really, really loves his maps.
Deep Learning: What Does It Tell Us About Our Understanding of Intelligence?
> You come to our office in Mission (San Francisco) every day. We’ll give you a dedicated desk and lunch and snacks.
Ah, that explains it. Finder is dreadful on network file systems
>>When one party is negotiating from a position of strength (employers) and the other party is negotiating with their life and physical well being on the line (employees, especially those on the lower end of the pay scale) then the first party can take more value and profit from the transaction than if they were both negotiating for a net gain in value.

I don't see how that could possibly be true. An employee has plenty of time to peruse offers in the marketplace before accepting one of them, and even more time after accepting one of them.

Job market analysis is an extremely efficient task with modern job listing sites. A person can quickly assess the lay of the land as far as prevailing wages and required qualifications, and applying for the jobs is as easy as sending off an email with minor customization of the cover letter.

The idea that a person would take a job that pays less than what they can fetch on the marketplace because they are poor by developed world standards seems like the kind of overly cynical and unsubstantiated conspiracy theory thinking that motivates so many ill-conceived mandates like minimum wage.
Thank you for your generous offer to help founders out this way.

Could you briefly explain what Dark is?
What an incredibly first-world problem to have... Actually, it's worse than that. It's a top 1% of the first world problem. Most companies, in the broader world, are unethical, and do shady shit on a regular basis, but most rank-and-file people aren't lucky enough to have been making the kind of salary Facebookers can, nor do they have in-demand skills that let them hit the ground running if they decide they don't like it for merely ethical, rather than existential, reasons.
Tearing down the walls: Growing a U.S. company across the border
De beste bodembedekkers voor in de volle zon geven kleur aan je tuin
Votes on direct links don't count in terms of article ranking, but they'll increment the upvote counter which could cause bandwagoning.

Since this submission got to #3 on the front page, there are likely enough authentic upvotes. Again, it's an algorithmic gray area.
Which programmer enjoys typing, or which builder enjoys the physical activity itself? It's about the way to the end result, getting from nothing to something, or not? For the professor it would be the understanding and success of his pupils.

The stuff in between nothing and something, especially what you don't like, could be an opportunity if theres nothing in reach that already solves the problem.