skysight-inc/HackerNews huggingface dataset:
Related to having to change my password on Twitter?

https://www.theverge.com/2018/5/3/17316684/twitter-password-...
Twitter advising all 330 million users to change passwords after bug exposed them in plain text
The reality is when people buy a property, they buy a neighborhood too. That's true all around the US. You have the right to veto a liquor store popping up next door. You have a right to veto a lot of things. But naturally its a grey area. If you can get enough of your neighbors to agree, you can build a higher building too. The support needs to be there.

When someone is moving out of a property, they have very little attachment to what happens to it (other than profit) - unlike their neighbors. It makes sense the neighbors have some say.
Color that under "poor understanding of supply and demand."
For posterity sake: I didn't cherry-pick the MarketWatch link from the comment. It was one from several tabs I had open on the topic at the time from casual news consumption, and they all seemed similar enough for me to not particularly care.
A lot but not all. I live in the north sf bay (born and raised) and am an engineer for a municipality that has seen a big influx in the past 10-years of wealthy bay area/socal types. I (and basically all of my co-workers who mostly grew up here when it was not much different from Oregon) feel the same way you do in Bend about them here in California. It is definitely a class of people who are all about getting up in everyone's business if it is something they do not agree with. I am not sure where they come from but I would definitely say it isn't so much California as a whole, as maybe those accustomed to urban centers moving to more rural areas.
The utility generators probably don't worry too much about leaks, since they can just refill with new, abundant hydrogen, too.

It would be amusing to have a hydrogen-cooled hard drive for which you'd have to regularly refill the water tank so that it could generate more hydrogen for itself. :)
Many independent developers / geeks are afraid of any regulation, regardless of its merits or whether they are potentially compliant or not. They only want to write code, not to investigate/fear compliance. GDPR is a hammer that hit very small start-up landscape pretty hard.
While you're in there, enable 2-factor authentication if you haven't already.
This link (Same site, different settings) might be more directly understandable:

http://ec.europa.eu/eurostat/cache/RCI/#?vis=nuts2.labourmar...
It's that vanishing breed: designed well but not overdesigned, technically solid, no hidden agenda or ecosystem to push, all for a fair upfront price. Hope they don't mess it up.
I think you just assumed a lot from a casual comment with no context.
Am I missing something here?

Let me approach your math with a reasonable argument:

Assume a 1 sq mile area (1mi x 1mi).

Assume each node has a 50 yard diameter reach.

If you space a node every 50 yards, you will have 35 nodes on a side, for a total of 1,225 total nodes.

Each node will only be able to physically connect to 3 other nodes on the edges, and 4 other for interior nodes.

That means the node connectivity is only .00326 for an interior node.

The longest path is diagonal across the square. Given the 35 modes on a side, and A^2 +B^2 = C^2, that means 35^2 = 35^2 = C^2. And c^2 = 2,450, meaning C = 50 (rounding up).

So I’m not sure how O^2 even applies in this example. Yes, it’s theoretically a max, but theory >< the real world.

Is this not correct?
Not everybody needs health care. Everybody needs a home.

Housing is also a root cause of a lot of other issues. Equity. Environment. Health. Upward/downward mobility. Ethnic integration. And so on.
Check out https://www.mapbox.com/api-documentation/#geocoding

Note - I work at Mapbox
This article feels more like a press release. But not a good day to announce a partnership with Twitter.
We schedule log reviews just like we schedule backup tests. (Similar stuff gets caught during normal troubleshooting, but reviews are more comprehensive.)

It only takes one debug statement leaking to prod - it has to be a process, not an event.
To address “hand editing” problem I wrote a little vim plugin that wraps around notedown (https://github.com/aaren/notedown) to edit notebooks on the fly in a markdown format. It’s not perfect, but it goes a long way for quickly editing notebooks “as a whole”: https://github.com/goerz/ipynb_notedown.vim

Other than that, I try to put any lengthy code in functions that are in a module alongside the notebook, so that the notebook mostly contains one-line commands to do kick off a calculation or to generate a plot. I also have a shortcut that copies the content of the current browser text field (notebook cell) into MacVim, and pastes it back automatically as soon as I close the editor.
The only caveat to this is their insight into advertisements. Lets say a podcast runs ads during its first 5 minutes, they can now tell exactly how many people are listening or skipping those ads and may be incentivized to start putting ads in the middle of podcasts, or implement some sort of non skip-able interruption.
I'm conflicted on this one. I'm a huge fan of freedom of speech, even speech I don't like. As long as it's not libel or inciting violence. But I don't think the private companies should be forced to provide a platform for these things. If the conservative leaders are just urging these companies to act in a certain way then great but if they want the government to force them to act that way I'm totally against that. I'm also under the impression that most conservatives (myself included) want less government regulation not more.
Location: New York

Remote: Yes

Willing to relocate: No

Technologies:
Python, Flask, Django,
Javascript, Node.js, Meteor, React,
MongoDB, Postgres, Redis, Elasticsearch, Cassandra, Vertica,
Hadoop, Hive, Storm,
Ansible, AWS

Résumé/CV: https://www.toptal.com/resume/jonathan-rhone

Email: rhone.j@gmail.com

10 years of experience CTO level developer.

Interested in getting into react-native, machine learning, crypto.
Hopefully google will not expose everyone's passwords /s
For extraction, use bsdtar from libarchive. It supports various container and compression formats. I never looked back to GNU tar, bsdtar is vastly superior.

https://github.com/libarchive/libarchive/wiki/LibarchiveForm...
Show HN: We built what a $12M ICO promised
As a Boilermaker alum, let's not shorten it to "Purdue".
Put it all into VFIAX if you intend to hold onto it. Then forget about it for 20 years.
It's part of the appeal of a popular movie: striking a chord with multiple audiences simultaneously, one with irony, another without. In many ways, if movies didn't do this, you probably would be less likely to have seen them.
I got the same email, and had my password invalidated (trying to log in just gives "Incorrect username or password").

To add to the speculation in the linked thread, I _did_ recently reset my password, but it was on 28th February.
I changed my password on 28th February, and was included, so it is over a month.
Probably better than 2 is to use actual privilege separation between sensitive data and as much of your service as possible. Handle passwords and password changes in a separate microservice which exchanges it quickly for a session cookie, so that the bulk of your application logic doesn't have passwords in memory at all. For credit card numbers, do something like what Stripe does where one API endpoint exchanges the card number for a token and every other endpoint just needs the token, which means that Stripe can route that one URL to services they pay extra attention to.

This assumes that passwords and credit card numbers are more sensitive than session cookies or tokens, which is usually true because people tend to share passwords across sites and definitely share credit card numbers across sites. So the risk of logging cookies/tokens is much lower. Also, you can revoke all cookies and token much more easily than you can force everyone to change passwords or credit card numbers.
Legitimate, non-cynical, non-opportunistic question. Will this boost Twitter's monthly active users?
Is there anyone before Google that went after getting one of these marketing IPs?

First time I saw it was 8.8.8.8.

I personally had one had in my head from the 80s 128.252.120.1. bit it is obviously not a special one.
The connection you made is a reach, but competition is an aspect of the genre. Gun bars and other recurring themes like disses and self-hype are just part of the game. It's built-in.
Link to original post published on Twitter's blog: https://blog.twitter.com/engineering/en_us/topics/infrastruc...
I'm going to plug https://bitwarden.com/ since nobody else has yet (I'm not affiliated). Open source, clients for everything, free for personal use, imports from other managers. I had been using a GPG encrypted text file for a long time, then later KeePass (and variants) on dropbox. I switched to Bitwarden a while ago and have been very happy with the whole thing.
Isn't this exactly what incorporation sets out to solve? It limits the liability between the person and the company / website.

I feel like Stripe Atlas should be getting a surge of sign ups from people who realize they need to put a firewall between their hobbies and their personal assets as a result of GDPR.
I just want to point out that is the same creator as StreetLend[0] who has previously posted the same thing but under their other startup.

[0] https://news.ycombinator.com/item?id=16954306
Everything you need to know about static code analysis
They are probably immune to this specific implementation simply because the relevant bits are in different locations - but not to the attack in general.
> consider that no one logs this stuff accidentally to begin with

It's possible. You create an object called Foo (possibly a serialized data like a protobuf, but any object), and you recursively dump the whole thing to the debug log. Then you realize, oh, when I access a Foo, sometimes I need this one field out of the User object (like their first name), so I'll just add a copy of User within Foo. You don't consider that the User object also contains the password as one of its members. Boom, you are now accidentally logging passwords.
>Don't drop it

Is the unreasonable portion, not the cost.
This makes some sense. A few months back Apple was found to be limiting the performance of iPhones with degraded batteries. A fresh battery wouldn't have that issue.
Such an excellent way to pose this, thank you.

There's huge amount of sentiment in California to keep new people out. So in order to punish newcomers some people are very willing to take on the negatives of rent control for those that have it--namely a huge lack of mobility once you have a place. Unfortunately that leaves all young people in the lurch, in addition to the newcomers from other places.

The idea of making it easier for people to move here is an absolutely radical and terrible idea, according to a large number of people here.
So, basically, we need the NT-style, completion-oriented, inherently-asynchronous I/O model? ;-) (Amen!)
I kind of love it :)

Note - I work at Mapbox
This makes me think that maybe mantis shrimp relies on powerful sensor to see the world but doesn't have a lot of good software / internal hardware to do further processing. Human's eye sensor seems poor compare to the ones of mantis shrimp but a lot of work is done in the post processing. It's be difficult to clearly define if mantis shrimp can indeed see "more".
DNA from Ancient Latrines Reveal What People Ate Centuries Ago
I fully concede this (and jacobolus's) point. I'm not a health researcher either, so don't take my word for any of this.

Building a double-blind clinical trial regarding changing people's diets over their lifetime and observing cardiovascular mortality is very hard.

Some clinical studies do exist, but they are usually looking over shorter terms and at heart disease risk factors rather than mortality. These show similar results:

https://www.ncbi.nlm.nih.gov/pubmed/16368299 - Systolic blood pressure decreased from 144 (SE +/- 1.1) to 134 mm Hg (SE +/- 2, P < .001), and diastolic blood pressure decreased from 87.4 (SE +/- 1.2) to 83.4 mm Hg (SE +/- 1.2, P < .05) from tomato extract.

https://www.ncbi.nlm.nih.gov/pubmed/26328470 - In the subgroup of hypertensives, quercetin (onion skin extract) decreased 24 h systolic BP by -3·6 mmHg (P=0·022) when compared with placebo (mean treatment difference, -3·9 mmHg; P=0·049).

Many of the epidemiological studies also adjust for many of the features that you might look for. For example https://academic.oup.com/ije/article/30/1/130/619054 adjusts for "age, randomized treatment, body mass index (BMI), smoking, alcohol intake, physical activity, history of diabetes, history of hypertension, history of high cholesterol, and use of multivitamins" and comes to the same conclusion.
0to255 – A color tool for finding lighter and darker colors based on any color
Geometry, for example.
I can't believe JavaFX is still alive, it's been years since Silverlight and Flash died.
As others have stated, you'd just be changing the secret from <password> to H(<password>). The better solution is using asymmetric cryptography to perform a challenge-response test. E.g. the user sets a public key on sign up and to login they must decrypt a nonce encrypted to them.
I wonder if it has to do with the changing motivations of malware authors. In the pre-internet and early internet days, it was mostly young folks doing it for shits and giggles, as a power trip. It wasn't targeted; they just wanted it widely distributed to make a big splash, and it often didn't communicate with the creator in any way.

Now, malware is a criminal industry. People are making big money off of it. It doesn't make a lot of sense to target individuals when you could go after big, wealthy institutions. Same goes for government malware--they're looking to infiltrate and disrupt rival institutions and industries, not inconvenience private citizens.
And the author of this post is none other than Chris Beach, the author of both applications.
The context here is Amazon, a company that is great at killing the value of brands(via for ex. reviews, Alexa, more info), is going strong into private labels.

That's different.
The third variant of the problem (where one prisoner is allowed to make one change, which can guarantee that every prisoner survives) is the one I heard first; I like that problem because it seems even more counter-intuitive, but also makes it easier to understand why it works.
When people leave California, because there is not enough housing, and move to Texas, which sprawls into floodplains, they double or triple their greenhouse gas emissions. Even with all the greenhouse gases from super-commutes, I prefer to have people stay in California.
This is neat. Are you doing your own crawling / indexing or is this data pulled in from somewhere else?
>What then is a mathematical truth

In the West, Aristotle put it as follows: "To say of what is that it is not, or of what is not that it is, is false, while to say of what is that it is, and of what is not that it is not, is true"

Some 2 millennia later, Tarski, a Polish logician, more or less formalised just that. This result, among other things, spawned a brand new branch in mathematics: Model Theory. More on Tarski’s notion of truth: https://plato.stanford.edu/entries/tarski-truth/. A few decades later some analytic philosophers like Davidson drew on Tarski’s work and applied it to natural language, too. This resulted in this: https://en.wikipedia.org/wiki/Truth-conditional_semantics. But notwithstanding Tarski’s work, there’s still significant controversy surrounding both “truth in natural language” and the logico-mathematical truth predicate in philosophical circles. Here’s an article that covers axiomatic theories of truth in general: https://plato.stanford.edu/entries/truth-axiomatic/.
I'm not sure I agree. I think that density can lead to more desirable urban neighborhoods, which in turn attract higher income workers. Also, network effects can be dramatic. A higher concentration of knowledge workers can end up generating a higher level of economic activity, and knowledge workers can increase their economic output by living in close proximity to each other. A larger concentration of high income workers can absolutely fuel higher housing prices. This is why I'm not sure that higher density will lower housing prices in SF in the long run.
Client side TLS certificates get sent in the clear before you authenticate the server. (You can send them in a renegotiation, but renegotiation has been a historic source of both implementation and protocol security bugs because it does complicated things to TLS state.) So you don't want a client-side certificate that includes your name; that's a huge privacy leak.

You could imagine a scheme where you give a user a certificate with a random subject, and you have a server-side map of random string to user account (so leaking that map isn't the end of the world like leaking passwords, it merely reintroduces the privacy leak above). I recall some proposals for that several years ago. Today, Web Authentication effectively does something effectively equivalent, as does U2F, although they don't involve TLS client certificates specifically.
I see it more of "we may have kept it quiet, but we're not making secrets from you - it's indeed our open culture"
Thank you for doing this. I've always believed that the organizations employing workers in the Bay Area (and generating tax revenue for the state and municipalities) are the best suited for helping ensure that sufficient housing is built to provide affordable housing for their employees and everyone else in the Bay Area.
> The vast majority of password leaks we've seen over the past decade have been due not to malware but rather server compromises.

Why do you rob banks?

Because that's where the money is.
My favorite podcast player + my favorite radio/podcast station = Future Greatness! (I hope)

I just came here to say how much I enjoyed reading the list of changes every time there is an update. There is always something super funny in there. I really hope they keep doing that!
Sorry about that. Will look into when I got time. In the mean time I have posted the source code above.
https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...
the direct link wont work. it changes per user / session
As I wrote, I'm keeping an open mind. But in the absence of information more specific than Russell's rather fluffy & evasive blog post, it's entirely reasonable to be suspicious. Don't forget that for most humans, NPR isn't just a non-profit: it's a foreign government agency (and a very corporate-infected one compared to the best public broadcasters like the BBC or ABC).

@peterjlee's other post here also suggests also that NPR's own current app is spyware. I have no idea whether or not that's true, but if so, it augurs badly.

We'll see. I'd be delighted if my suspicions turn out to be entirely wrong.
I think they (correctly) feel that there is just so much demand that the middle class would quickly buy up available properties and they would be highly unlikely to hit prices affordable to the poor by market forces. This is simply because of the huge desirableness of living in CA and this weather. This would esp be true if the new units were in high enough quantity that the overall area would become safer.

And if the poor live in a rent controlled unit, they don't have any strong desire to live in a similar unit with more occupants on the same lot. They think more like an owner in that sense.

Supply & demand is a great concept but the supply will always be limited by a fixed quantity of land - whether its land in CA, land near transit, land with etc, etc. And some of them may feel the land they are on is hugely undervalued and unlikely to ever remain affordable.
> Malware events net maybe thousands of user passwords? On a good day maybe 100k.

You are underestimating how much malware there is out there, both on desktop and mobile. There are probably botnets that consist of >100k compromised machines.
Aside from being obvious clickbait, this headline isn’t even accurate. If you want to read an actual news story and opinions from actual residents, start at https://www.reddit.com/r/SeattleWA/comments/8gjdnc/amazon_pa...
That'd make for a bad-ass proof of work.
Article poorly titled - it using Postgresql, and most at first glance would assume SQL Server (though concepts pretty much the same)
Alex from Seva here: We are actively building integrations with the most popular services. Here is the list of the active integrations: Gmail, Google Calendar, Google Drive, Dropbox, Box, Slack, Confluence, Jira, Clubhouse.
As for the pricing, we are currently offering a free trial. After the trial the price is $10/month
Cambridge Analytica’s Major Players: Where Are They Now?
Should Your EC2 Be a Lambda? Find Out with This Serverless Cost Calculator
Even just removing it for commercial properties, and residential properties that are not owned by an occupant would fix 80% of the problem from an overall tax revenue perspective, while retaining the most support with voters. How does it make sense that a regular McDonalds pays less in property taxes than a single family home, while being larger and in a more desirable location?
Note that a reference to the closure of StreetLend is included on this page about the shutdown of CoinTouch.

No shenanigans intended.

Thanks for linking to the prior discussion.
This was my aha moment.

I was thinking, the solution presented seemed not only invalid but ill-defined, as you could hit a cycle and still have picks left. With this, it totally makes sense why it works: if there are disjoint cycles, this strategy guarantees that each prisoner is on its own cycle. And I guess the math works out that in unidirected graphs of 100 nodes, 30% of them contain only disjoint cycles of 50 or fewer nodes.
Did not GitHub do the exact same thing yesterday?
I'm at 42 days 5 hours total. I love love love Pocket Casts stats, and think they should be more prominent.
Custom python crawler staging data in S3, extractors pick it up from there enriching it using DeepMoji & Fasttext pretrained models for sentiment along with some custom trained SVMs to measure influence, data gets staged in Mongo, then sent to Elastic.
If a hash is salted with a domain it won't be use-able on other websites. You should additionally hash the hash on the server, and if you store the client hashes, you can update the salts on next-sign in. A better question is why clients should be sending unhashed passwords to servers in the first place.
https://medium.com/the-coming-golden-age/internet-www-securi...
Disclaimer: I am from the Asylo team.

That’s exactly the level of abstraction that we’re looking to provide in Asylo. The parent post linked to the asylo/identity/sgx directory, which contains SGX-specific implementations of some of our higher-level identity abstractions [1]. For instance, “EnclaveAssertionGenerator” defines an interface for generating attestations bound to an enclave’s identity, and “sgx::LocalAssertionGenerator” (an internal construct to our framework) provides that functionality for SGX.

[1] https://github.com/google/asylo/tree/master/asylo/identity
Google starts blocking annoying autoplay videos in Chrome
Why would i want to be anyone but myself? But to answer your point, arrogance and ignorance are not something to covet and neither is whining.