skysight-inc/HackerNews huggingface dataset:
I mean, it wasn't acquired by a for-profit publishing house or media company (e.g. a music label, Netflix, Amazon, etc.), it's NPR. They aren't for-profit, and they generally have pretty solid products (or at least content) in my experience.

I'm not gonna say that there isn't cause for concern that an organization like NPR might not be very good at this sort of development or product, but I don't think naked greed or exploitation needs to be a significant concern. And more than any content producer I can think of, I'd trust NPR to maintain relative neutrality towards external content.
Most poor advocacy groups keep pushing low income subsidized housing.

Which is a small band-aid that will never work. It creates lotteries where literally hundreds of people apply for a single home and one lucky person gets it. So one person is helped but the majority get nothing.

We need to actually fix the system, not create lotto winners.
Oh believe me, they are HIGHLY visible everywhere it counts: local committee meetings, elections, city hall, etc.

You just don't see them because "visible" to us here means posting on HN or Medium or Twitter.

There's just a huge gulf between the local and global people that we need to transcend.
I guess these are the Strontium-90 RTGs made by the Soviets. There's about 1000 out there still - some have been vandalised, some washed out to sea, some sitting rusting in a lighthouse outhouse etc.
http://bellona.org/news/nuclear-issues/radioactive-waste-and...
Domino's Noid
also had a tragic ending.

https://en.wikipedia.org/wiki/Noid
i had no idea. https://en.wikipedia.org/wiki/Radura
I figured that it's only fair to call out multi billionaires who are currently running companies/funds. While Andreessen is supposedly not much richer than PC, Marc is rather more liquid, runs a huge VC firm, and his father in law is kind of a big deal in Valley commercial real estate.
> That's kind of the point though isn't it? Communism necessitates "seizing the means of production" and collectivizing it into the central bureaucracy.

No, it doesn't.

There are subsets of Communist thought that require centralism, but they aren't all of Communism.
Sure visions aren't usually created by committee. But aren't visions usually starting very raw, and not really that valuable or unique("let's build a computer for every pocket") - and to get to a coherent and unique vision, you need some research and exploration, which is usually a team effort ?
It also makes it more expensive to borrow money, pay employees, and opens you to hostile takeovers.
Considering that X00% can be 0% you are correct.
Optimistically apply but also show indication that it is still being processed by backend until you get confirmation. Best of both worlds.
Yippies vs. Zippies: New book reveals ’70s counterculture feud
The syncing in pocketcasts is not reliable, especially between web and mobile apps. Often a played episode on mobile will still register as new on the web, even days later. Sometimes forcing a sync fixes it, but that is not 100% either.

Overcast has the syncing perfected, but it has a much worse web UI. Pocketcasts new web UI is much slower too, with more clicks, popup windows, and less information density. I use the web interface during work, when I dont have my phone and just to browse quicker so speed and functionality are important.

Castbox has a great search interface that can find the words inside the audio of any episode, which is absolutely great for discovery.

Also there should be a simple subscribe button with 2 options: subscribe from latest episode, or subscribe from the beginning. Pocketcasts has a very strange way of changing subscribing to episodes just from sorting them differently.
State of the Cloud: 2018 Edition with Bessemer Venture Partners
4th option: get in Tech.
Unfortunately there is a middle ground, made possible by the FDA's toothless regulatory regime. It isn't benefiting patients or advancing scientific progress.

https://en.wikipedia.org/wiki/Burzynski_Clinic
> Older people need cheaper homes

Why do older people need cheaper homes? Older people have paid off their mortgages and have 100% equity.
The Microsoft Store correctly auto-updates apps from the store.
Well if he's not keeping that text file encrypted, I'd argue that there is a very significant difference in his methodology vs 1Password et al.
The term "criminal" can mean so many things. It's like "terrorist". One person's criminal/terrorist is another's freedom fighter.

People hurting others (what's criminal to me) will use any system that's secure, hidden, anonymous, etc. Tor is a good example. But in a sense, they serve as canaries for other users.
A password manager will have an integrated password generator where you can configure the spec (include special chars, brackets, custom characters, etc. or not). And you can keep password spec "favorites". So you can quickly generate a 20-char with special chars and accents password, or an 8-char, only letters and numbers for those websites that requires that.

It will allow you to organize the passwords in a hierarchical way with folders (banks, administration, forums, whatever), and set icons.

It will also keep the date of the last time you modified it. Sometimes this can be useful to know if you are impacted by a breach revealed after the fact. You can also make passwords expire if you like.

You can also add extra data in a way that doesn't clutter the main view. This can be interesting when credentials are more than login/password. For example you could add a PIN there. For my car radio there is a code to enter to make it work after the battery dies, I added the entire procedure to the extra data as I always forget it and it's not intuitive.

I just checked, I have 957 passwords in my KeePass.
One could also derive interesting parallels to modern times with his
'Confidence-Man' https://en.wikipedia.org/wiki/The_Confidence-Man
It's a problem in many cities around the world that are experiencing housing price shocks. A list of some of these cities: Vancouver, London, Toronto, SF, LA, NYC, Seattle, Berlin, Austin, Boulder, Sydney, Auckland.

And the housing contagion spreads. For example most of the province of BC that Vancouver has similar housing affordability issues. Same with Toronto and many hours away from it. About %70 of the Canadian population lives somewhere heavily unaffordable.

Then you add the problem that most jobs are in these cities and it makes it even worse.

EDIT:

Look at this list of unaffordable metros for example:
http://time.com/money/4193804/hong-kong-least-affordable-cit...

The US stands out as having a good collection of affordable metros, the but rest of the world is worse and california is horrible.
I also live in Oakland.

It's interesting to think that if prop 13 was repealed, it would cause a ton of supply to come to market. So it wouldn't necessary "change anything" except all that supply might depress prices a bit. Funny how that works. Same house, same benefit, just a lot less price.
Makes sense, and then you're getting into something akin to SSH key pairs, and I know from experience that many users can't manage that especially across multiple client devices.
It's really hard to avoid logging passwords when there's a parse error on structured data that includes a password, for example if there's malformed JSON in the authentication HTTP request. A weird error like that is exactly when verbose logs are essential, but it's also a time when your system doesn't know what it's logging. Amazon has a machine-learning based service to try to deal with this.
Many mathematicians have similar attitudes. The general philosophy is know as Constructivism[0]. Broadly, the idea is that we should only consider mathematical objects that we can actually "get our hands on".

[0] https://en.wikipedia.org/wiki/Constructivism_(mathematics)
Architecture of a high performance GraphQL to SQL server
A Google search returns 3 parts:

Part 1: https://hueniverse.com/beginners-guide-to-oauth-part-i-overv...

Part 2: https://hueniverse.com/beginners-guide-to-oauth-part-ii-prot...

Part 3: https://hueniverse.com/beginners-guide-to-oauth-part-iii-sec...

However, I would like to confirm there isn't more
Notebooks can be reproducible, they just aren’t automatically so. It requires a little bit of effort and discipline, if reproducibility is a goal. https://www.svds.com/jupyter-notebook-best-practices-for-dat... is an excellent starting point. Personally, I use notebooks to keep a record of large computational pipelines. The key is to cache all results to disk. This allows for an iterative process where I modify the notebook, kill the kernel, and rerun everything. Only new calculations will be executed, everything previously calculated will simply be loaded from disk. In the end, I have a reproducible record of the entire project (and rerunning the notebook is fast) This kind of make-like functionality is implemented through the doit Python package (http://pydoit.org). An example workflow for this is http://clusterjob.readthedocs.io/en/latest/pydoit_pipeline.h...
The past few years? iTunes and Apple's podcast app have always been terrible.
You could do client ssl certs and just skip the password. It would be more work for the user though.
How long have you done this, for how many sites, do you rotate passwords (when sites are breached, and/or on a schedule), and have you had to access sites in a mentally compromised state (distracted, sleep-deprived, post-concussion)?

Every once in a while I hear someone explain their system for this (and I used to use a simpler scheme), and I can think of arguments about why it won't work for long, but I'd be happy to update my internal monolog from actual evidence.

I've got about 1K passwords in 1Password. I generally rotate them when they're 1-3 years old, depending on the threat model, cost of compromise, and on what I'm using password review to procrastinate.
Not quite "anything of note" it has to be able to do arithmetic. There are very simple systems that are useful but not powerful enough for Gödel's trick and so we think those would be safe.
Thanks for commenting. We are 50 devs and it would be useful to have around more 50~100 in it.

I always have the impression that "Enterprise" plans are more expensive, but probably is just a misconception of mine.
>That means the hashing needs to be done client side, probably with JavaScript. Is there any safe way to do that?

No [0,1...n]. Note that these articles are about encryption, but the arguments against javascript encryption apply to hashing as well.

Also consider that no one logs this stuff accidentally to begin with. If the entity controlling the server and writing the code wants to log the passwords, they can rewrite their own javascript just as well as they can whatever is on the backend. There's nothing to be done about people undermining their own code.

[0]https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

[1]https://tonyarcieri.com/whats-wrong-with-webcrypto
Prop 13 is such garbage, especially for rentals. My landlady was charging me $2500/mo and paid $650/year in property taxes. I think she used that property tax transfer for 55+ older from an even older place she must have purchased a long time ago, because the assessed value is now $60k, but the property is worth at least 500k. Bullshit. Not to mention the insane appreciation on the property. It was a poorly maintained dump of a place. She had no interest in fixing it or taking care of it, but had every incentive to hang onto it because it cost her NOTHING.
I thought about this too.

I came up with a few different classes of identity: face, mask, and hat.

A face would belong to a natural person. This would be an identity type that could have biometrics attached to it. It wouldn't necessarily have a name.

A mask would be a synthetic identity, owned by a real person or corporate entity. The person or AI behind it would not necessarily be the same person all the time, but the identity itself would be persistent. Perhaps it actually is the same person all the time, or perhaps its behavior is strictly governed by an employee handbook. The mask obscures the identity of anyone using it.

A hat would be a role indicator, which would supplement the face or mask identity without obscuring it. So the Mark Zuckerberg face might don the Facebook CEO hat while speaking for the company, and then remove it while trying to organize a private dinner party.

A lot of the current identity system is governments trying to force other people's faces to wear their ugly hats all the time, while preventing anyone but corporations from using masks.

If you can choose which masks and hats you can wear, and establish masks and hats that other authorized users can wear, you have control over how you present yourself in different situations, and can give continuity to synthetic entities. It can all be backed and enforced with cryptography.

You don't need the government to charter your corporation if you can create a hat re-assignable by 50.1% of N signatures, that has the power to control the corporate assets. You don't need to petition the government for a name change if you can create a new face whenever you want. You don't have to reserve the same username on every site if you can log on with your masks.
Amazon Expands In-Skill Purchasing Feature for All Alexa Skills
>but to throw words like "slavery" around in this context seems grossly disrespectful

No it isn't.
No amount of entropy will protect against plain security goofs. "It would take a computer about 115 OCTILLION YEARS to crack your password" some analysis tells me. Guess how many engineers it takes to downgrade any password's strength to "123456".
TIL! Thanks for the correction.
My statement is based not on frequency of news, but rather on my understanding of the provenance of passwords in password lists. The vast majority of passwords in password lists are sourced from service hacks; not from user malware. And that makes sense. Malware events net maybe thousands of user passwords? On a good day maybe 100k. But hacks of major services like LinkedIn ... those yielded hundreds of millions of passwords. The two just don't compare in magnitude. Remember that HIBP's list is sitting at something like half a billion password combos right now.
Great work! UK charity The Society for Computers and Law is running a hackathon with the ICO in June in case anyone is interested in helping bring more tech to GDPR. Details at https://www.scl.org
Agreed, not at all obvious. I assumed it was per project, not per account - now I don't know.
Time for me to advertise my personal setup again!

I use KeePassXC [1] with Syncthing [2] to synchronize my passwords between machines. No third-party!

[1] : https://keepassxc.org/

[2] : https://syncthing.net/
Google Launches New Investment Program for Google Assistant
Hmm... looked at this again and it looks like Rogers may have rolled out IPv6 last year.

I recall on Teksavvy I had to pay extra for a "static IP" to get IPv6. Not sure if you're with Bell directly, though.
Besides the actual topic of the post, there is one gem that, IMHO, every manager should realize:

> As engineering managers, it’s our job to provide the space and support needed to help our engineers deliver great software.

The best managers I encountered were not telling the team what to do, but enabling them to do what needs to be done.
"Since if someone has it, they can just send it to the server for auth" unless it's only good for a few moments (the form you type it into constantly polling for a new nonce).
Sorry full link : https://www.scl.org/events/525-scl-data-protection-hackathon...
Hey Chris, you can make custom maps with Mapbox but you don't have to - here's a look at our core styles + designer styles that come out of the box, https://www.mapbox.com/help/studio-manual-styles/#mapbox-tem.... Pricing is based on transactions for each API. Lots of folks find this table helpful - https://www.mapbox.com/help/account-faq/#what-api-requests-d....

Note - I work at Mapbox
If Tim Cook donated Apple’s cash reserves entirely to charity, or made decisions purposefully wrecking the finances of the company for the lulz, I guarantee there would be a successful shareholder lawsuits. This just doesn’t happen as often. But here have been claims of material harm due to gross negligence before. There are aspects of th Enron case that come to mind, and BP’s shareholder lawsuit after the deepwater horizon disaster.
There are some of those names who killed civilians in bulk, and some who killed enemy soldiers — and most people would hold that there is a moral difference.
This exactly. Who doesn't want to live in a nice neighborhood and have their kids goto good schools? Publicly it may not be a popular stance, but you can bet your bucket that privately this is what most homeowners and aspiring homeowners desire.

And guess what? Most tech workers in the Bay Area want to own a home in a nice neighborhood if they don't own one already.
The phrase “trickle down housing” is an anti-YIMBY smear. It’s the logical fallacy, reasoning by analogy.

The real issue is simply N > M, where N is the number of bedrooms needed in San Francisco, and M is the number of bedrooms in existence in San Francisco. As long as N > M, then there will be winners and losers.

In most of the market, the winners are decided by price, the highest bid wins. In a small part of the market, the winners are decided by luck, 100 applicants in the lottery for every 1 affordable housing unit. Everybody else loses. The goal of YIMBY is to make everybody into winners.

It doesn’t matter whether the units are built as luxury. Run-down shacks in boring neighborhoods are going for multi-millions of dollars. There are not enough homes.
There's definitely a role for bandaids while the longer term fix has its effect. I think it's really important to approach these with a "yes-and-" type of thinking rather than choosing a single direction and sticking to that alone.

Building more housing is a long term fix; even if we start building tomorrow with our maximum construction capacity, it's going to take a minimum of 15-20 years to make a really significant dent.

In the interim, protecting those who are most at risk is essential. And that means not only assistance at 60% of area median income (AMI), but also all the way up to 80% and even some amount of 120% AMI, in order to preserve some amount of economic breadth in communities like San Francisco.

The bandaids can't be the only policy, neither really can zoning be the only policy. It's going to take time to attract enough construction laborers to build everything we need to build!
Thats just the headline...
That would transfer it from something you know (a password) to something you have (a device with SSL cert installed) which are meant to protect against different problems.
I have a project which runs a variety of sites for our network - currently ~900 different domains. Restricting keys by domain name is not really practical for us.
There are probably ways to make it reasonable UX, but they probably require built-in browser (or other client) support.

Someone in another part of this thread mentioned the "Web Authentication API" for browsers, which I'm not familiar with, but is possibly trying to approach this?
I'll play!

This distinction, between chance and goal-directed physical processes, is artificial, though.

It's artificial because it was produced by humans.

:-)
Ok, but those US cities are only something like 16% of the US urban population in cities over 100,000 residents.
Just looking at GDP (in the US), medical expenses do account for more of GDP than housing; however, a lot of those medical expenses come from Medicaid & Medicare, and are not directly out of pocket. I'd love to try to find the % GDP of out of pocket / Premium expenses in the USA as a comparison.

I think you could make a clean argument it's a 1a / 1b sort of problem. Housing & healthcare are two of the most basic needs in a modern society, and both have systemic issues across much of the country.
No argument there...
Hey Tyler, I work as a customer success manager for our commercial segment and are happy to say we're willing to work with you on a price that fits your business. If you write in through our contact forms just ask to speak with Erin and we can work something out! https://www.mapbox.com/contact/sales/

Note - I work at Mapbox
The new GitHub Desktop experience, built with Electron
One thing to note is that a remotely-compromised computer gets you access to the actual browser session and not solely to the password. In fact, most of the time the user has already logged in, and so the session is accessible but the password isn't (users without password managers have no persistent store, and password managers try to keep the secrets encrypted except when the master password has been recently typed).

So it's not often useful to take a password from an individual user and put it in a password list, but it is often useful to maintain persistence on their machine. Tools for doing that (RATs) are definitely common, both from random internet attackers and from e.g. angry exes with physical access to your device. But those aren't the attacks that e.g. HIBP is interested in, so if you're looking at data from people interested in password compromises, the effect is that you'll undercount client-side compromises.
I have no clue. But I don't doubt that systems as energy-intensive as Bitcoin would consume far more energy. Likely, orders of magnitude more.

I like to think of myself as caring about ecosystems. But after decades of work on decentralized electronic payment systems, Bitcoin is what we got.

I'm no expert, but I suspect that the Bitcoin protocol could be tweaked to make humongous mining operations unprofitable. But the chances of that are likely not so great.

I do hope that proof-of-stake systems will develop. Stake still means wealth, but at least it's not wealth that's funding energy-intensive proof-of-work.
Likely true - though presumably IG (like FB) takes a dim view of people scraping data in huge amounts. And of course the question will be what metadata beyond the hashtagging they were also privy to...
Prop 13 has many, many pernicious effects but it doesn't drive NIMBYism. The pernicious effects are a slowdown in the velocity of the housing market (keeping your low taxes) and pushing local governments to very strongly prefer commercial over residential development. Every new house is a net loss to local government on a long term budget basis.

One of Prop 13s benefits from a planning perspectives is that your property taxes are isolated from the decisions of your neighbors. So if adjacent properties turn into condos or commercial, you won't see your taxes rocket, so you have less of an incentive to oppose development.

CEQA and the California Coastal Commission are weapons that NIMBYs use, but what drives NIMBYs in CA is the same as everywhere else. The hippy/champagne communists of SF just make it stronger (damn those evil developers making a profit! boo hiss!!!!) and elect malevolent local politicians, but it's the same drivers as anywhere else.
Observation: security really does happen in low-level code quality like this.

This is a hard notion to accept because it has to be built into the organization. No silver bullet, no consultant, no five-step methodology. Just rigorous software engineering up and down the stack, and care, and attention to detail.
You could even say it might be the perfect ownership. Though I didn't believe it at first, podcasts have taken hold & don't look like they are going away any time soon, and you might even argue they are the future of public broadcasting & public radio...
It likely means they don't need to be cooked and not that they don't need to be washed. We don't wash strawberries we pick, but we wash those that we buy (even if they are ready to eat).
So why arent they hashing passwords on the user side?

Can't leak a password if the only thing you have to begin with is a hash...