skysight-inc/HackerNews huggingface dataset:
Not sure if there is a common agreement about terminology, but my distinction is

- web app: loads from a server and connects to a backend to perform its activities. Business logic is on the server. If at all, very limited offline capabilities

- desktop app: is installed on the local machine, doesn't need any connection to a backend to work, works offline.

I don't mind at all which technology the dev used to implement. Even nerdy metrics like memory and CPU consumption cannot be predicted from the used technology. So why should I care?
If you're buying something expensive, require an original invoice and check that the serial number matches. If someone is apprehensive about that, somehow they lost the invoice for the brand new unopened PS4 they bought last week, or similar, just drop it.

If they're selling close to the original price, just get it from a shop instead, that way you'll get warranty etc too (there's generally no warranty on goods with "lost" invoices).

In general, look out for suspicious behaviour. Are they willing to meet with you at their home or office? Do they readily share their phone number? Do they have many excuses (one of the most common tells for liers are an excess of over-thought out excuses) for not doing things transparently? If it's too good to be true, it probably isn't true.
Having had a casual interest in power usage, I bought a little inductive meter with a wireless display. It proved itself, so I upgraded it to a cloud-connected one which stores huge amounts of historic data. Every so often, I download the logs and compare the usage the device has logged with the usage the electricity company has billed me for. So far, it's added up roughly correctly.
The whole point of Bitcoin is its decentralization. What is being described here is functionally equivalent to the current banking system, just "Blockchainey". Public ledgers also don't meet the secrecy requirements of many financial transactions, whereas the current banking system does. My guess is that during implementation of such a system, it would look less and less like this public ledger and more and more like a slightly spiffier ACH implementation.
Low-consquence? Typically one-off purchases from random internet vendors; if no saved credit card details, just a way to view past orders. Risk is leakage of more PII, like address.

Forum logins risk reputational damage, but otherwise are reasonably limited. Some people use specialist forums to ask one-off questions, for example.
INTERVIEW with Microsoft Restore CD Defendant Eric Lundgren
Looks like I will need to do some code reading and debugging to do - starring sharply at mozilla. For now I am stopping any donations and I will resume them if you are clean, I would really like you to get unhooked from google and I am prepared to tolerate this untill my browsing habits leave my computer. And adding google as "safebrowsing" provider wasn't the nicest thing to do.
Because the narrative is getting easier and easier to control on websites that aren't even mainstream. I'm looking forward to see some workable innovations in this area... Common Silicon Valley! :)
Please don't post shallow dismissals.

None of the reported bugs are about /dev/urandom returning data too early.
Out of curiosity, I just looked at the list of sites in my password manager, and at least 3/4 of them are sites that I shouldn't even need an account to use! Mostly online shopping sites the wouldn't let me checkout without an account and forums that wouldn't let me do some function without an account.

If all online shops were required to let me buy something without creating an account, my "password footprint" would be about 1/2 of what it is.
When I feel like a security goon's arbitrary and capricious password policy is irrational and counterproductive, I make my passwords worse in the hopes that I have to someday read it to someone, or perhaps it gets spilt outin the open, and then everyone will see how forcing me to pick a password that adheres to certain characteristics solved nothing.

Just wait. Someday you will see dumps of pwnt password that look like:

Password-1234
Password_1234
Password!1234
Password&1234
Password?1234
Password$1234

And that is rated as a "VERY STRONG" password.

Have fun with your character diversity, and your 90 day password expiration rotation schemes. Go ahead and try to force me into a corner. I'm still picking terrible passwords and I'm picking especially terrible ones because someone out there is trying to pull my strings.

Pull my strings. Make me more predictable within your little security policy world. See how that plays out.
It's a difficult balance to strike. On the one hand, people who feel sufficiently righteous to decide what the appropriate response is to something like a cyberattack are rarely the people we'd want in that role.

On the other hand, this sort of impromptu duelling adds so much risk to being a bad actor and there are so many benefits to standing up to bullies that I suspect we do want some of this activity.

I suspect the process may be self-correcting. A society that rewards someone for tying up a scam company's phone line will also punish someone for doxxing the wrong target. Perhaps the next decades will see us move from mob justice to crowdsourced justice. I feel it could be done...
It comes down to threat modeling and compartmentation.
Then spend the 20 minutes, or don't. Writing "the answer to your question exists" isn't a meaningful contribution.
I tested it. It doesn't help on Clang.
My career ended up in a different field than my degree, so I don't use much of what I was taught in university, but it's still quite useful to me:

* It taught me how to learn difficult things quickly.

* The parts I do use were drilled to being second nature by the advanced courses I don't use anymore
How are you measuring the RAM usage?
I'll grab the data and make some easy to use bloom filters so nobody has to rely on a third party API to send passwords to. I can make different filters for hashes grouped by count so that I can get a rough estimate of how exposed it is.
Every recent new app I can remember installing in the last year is Electron. Native UI is dead. It's more work and all it really buys you is the privilege of being tied forever to one platform or having to code your UI multiple times. The effort of writing your UI three times to use three different proprietary UIs would be better spent optimizing Electron for less resource use.

In the long term web will totally replace desktop UI. This could have been avoided if Apple, MS, and Linux would have agreed on a common desktop UI API 5-10 years ago but the ship sailed.
If you consider just this one data point yes, it may seem far-fetched. But if you connect it with all the other data points from all the other rumors, then whose to say it's over reaction?
> you think you can archive it and copy and re-distribute it for eternity

Did you read my post? I specifically said you couldn't.

>> You do not have the right to make new copies.

Copy rights are separate from your property rights related to your copy of a work.

> You are not a lawyer

Yes, although I have been studying copyright issues since the early 1990s. I'm not saying anything remotely controversial in current interpretations of copyright law.

Incidentally, a new interpretation that is slowly being accepted by courts is misuse of copyright[1]. Based on the older patent misuse, the idea is having a copyright only grants rights related to creating new copies of a work. Claiming that copyright somehow also grants you other totally unrelated right can result in the court preventing the copyright holder from enforcing their copyright[2]. Relying on misinformation about copyright can have serious consequences.

> too bad you try to act like one

You're seeing what you want to see. Providing references to what you're talking about is encouraged on HN.

[1] Lasercomb America, Inc. v. Reynolds

[2] https://apps.americanbar.org/litigation/litigationnews/pract...
> 2. What kinds of websites that require a sign-in are actually low-consequence?

It's usually not a function of the site, but a function of the site and the user. pg would probably care more about his HN account than user051783254. That said, some sites where I expect the majority of users (mostly the non-paying ones, but perhaps even the paying ones depending on the payment mechanism) would probably not care about their accounts being hijacked might include: HN, StackOverflow, CodeProject, AllTrails, Disqus, Last.fm, SlickDeals, etc.
Silicon Valley's Bitcoin price alerts for everyone
Merantix | {Machine Intelligence, Data, Frontend, Backend} Engineer | Berlin | Full-Time, Internship, Onsite, Visa assistance | http://www.merantix.com

Merantix conceptualizes, builds and scales AI ventures. Our team is made up of entrepreneurs, scientists, physicians and engineers from premier universities in Europe and North America. Many of us have PhD’s and work experience at top tech companies. We’re based in Europe’s startup capital, Berlin, and are growing quickly!

We are looking for Data and Machine Intelligence Engineers to join our core team to help us develop impactful applications of machine learning across a range of fields. We deploy to Google Cloud Platform, leveraging Tensorflow, Apache Beam, Google Cloud ML, and Docker.

You will:

* Research and prototype state-of-the-art deep learning models

* Design terabyte-scale data pipelines

* Iterate on building and analyzing products to uncover scalable businesses

Further, we're also hiring Frontend and Backend engineers for our medical project team which is making healthcare more efficient through machine learning.
There, you will:

* Work on a very challenging browser-based medical application in ClojureScript / Django

* Have a tight and efficient feedback-loop with physicians (two of which work here full-time)

* Interface with our Machine Learning models.

Have a look at our job openings here: https://merantix.bamboohr.co.uk/jobs/
Everything I need is in my backpack. There is seriously no place for a selection of different dongles.

I understand it may is a non issue for some people, for others however it is not even a real option.
People's intended and real intentions are two different things. In many cultures, women are, unfortunately, shamed if they pursue one-time sexual encounters, so they often adjust their signalling accordingly.

Doesn't mean they're not up for hookups though.
Minimal Responsive Grid System
Or how about it blocks, and then if the user starts rambling on the keyboard, it collects entropy?
In theory, in some case, it could be like that.

In this case it's just like being in a city. They're not trying to take advantage of any particularly sensitive institution.
Working copy needs internet connection to clone the repos and commit the changes back, but meanwhile it doesn't need it.

And Pythonista doesn't need internet connection to function.
Why a question mark behind SHAttered?

> This result is the product of a long term collaboration between the Cryptology Group at Centrum Wiskunde & Informatica (CWI) - the national research institute for mathematics and computer science in the Netherlands - and the Google Research Security, Privacy and Anti-abuse Group. [...]
“Web app: renders the entire interface in a browser engine” is a pretty simple definition.
Chicago's Red Line is around 22 miles long but is underground for, I'm estimating, about 7 miles (roughly Armitage to Roosevelt). That's as long as the subway bring talked about here. So if this is a subway, then Chicago definitely has a subway.

The Blue Line is underground for probably about the same distance (goes under South of Addison and then hits the Loop, heads West, and reemerges West of Clinton).

My estimate might be a bit off, I'll just going off my mental map of the city.
BBC (TV & Radio) | Full-stack Engineer | Onsite | London UK

Stack: NodeJS, React, Redux, Express

BBC is one of the UK’s most well-known and loved brands. The TV & Radio product teams build some of the most used products in BBC including BBC iPlayer, iPlayer Radio, Music. Our mission is to secure the Internet future of BBC.

It is an exciting time to join the team as we’ve ambitious goals to be the number one online TV and audio service in the UK. This is a place where your work impacts millions of iPlayer users every day. You will have an opportunity to work on software at a scale that is hard to find in the country.

Apply here: https://careerssearch.bbc.co.uk/jobs/job/Software-Engineer-T...
They meant getting a new login password emailed to you.
You laugh, but that could be a significant part of the profit for some Chinese peripherals.
I shamefully have to admit that I tried to logon to your (throw away) account using the list of passwords you supplied.
I had edited to clarify, gnud was right in his reply as my original wasn't as clear.
Hiring Sr. System Administrator
BBEdit is excellent. So is Notepad++.
Surprised more haven't noticed how symmetry had become one of the guiding principles behind all Apple industrial design of recent years.

This ideology has damaged things that used to work fine like the keyboard arrow keys just for the hope of symmetry as visual harmony.
I agree, I think people are putting too much stock in this idea that "phones and social media are killing real social interaction!"

It's definitely true that some people have issues "unplugging." One fried of mine comes to mind; I'll go get dinner with this guy and he'll stare at his iPhone grinding away at some mobile MMO or messaging other friends the entire time, while I'm left to eat my food in near silence (until he finds some hilarious image or video I absolutely need to see, at which point his phone gets thrust in my face). I can even ask the dude a question or make some remark and watch him miss it completely, only to ask "oh did you say something?" about 2 minutes later.

People like my friend need some kind of intervention for sure, but I'm not convinced that a majority of people behave like this. I'm very social and this is the only friend I can name with this sort of problem.
Internet is full of facts about PayPal issues.
Right, that would be fine. I think. The point is it's gotta break in a way that requires attention. In the IOT setting often no user input easily available. The OS should not lie to the apps when it hands them numbers that are supposed to be crypto random.
Best Practices in AWS Management
At some point a site you use will be compromised, so you have a problem as that site will require a new password.

So your login routine is now:

* Generate your password via hash(prefix + sitename + suffix), and use it on every site, except that compromised one. Because it invalidated your old password and won't let you reuse it.

In short you have a versioning problem. And you have to remember it. The problem compounds for each site you use which insists upon a change for whatever reason.

(Also your own "con" - different sites have different restrictions/caveats for password formats.)

Use a password-manager, it really is the best way to have a unique and secure password for each site.
> credential expiry

Good point. I'll have to add something to prefix of prefix/suffix for sites which remember previous passwords (or hashes).

> leaving any traces in logs

This I will have to resolve by localizing my sha256 generation process.

> over the shoulder

Also a good point.

Thank you for thinking this through for me. Appreciate it.
Dirty Energy
Hey Thomas, contacted you multiple times! Not receiving response from your end.
What kinds of website would require a throwaway email address?
Wikipedia does pretty well as a not for profit.
GCC 8.1 released
Streeva | Guildford, UK | Software Engineer | Full-Time | ONSITE

At Streeva we are focussed on building a platform that will bring a range of exciting and valuable services to digital payments.

We are an early stage startup company based in Guildford in Surrey, which means you’ll have a real chance to make a big impact, with career progression opportunities as we grow.

We are looking to grow in a stable and maintainable way and are committed to inclusive working practices to help you strike a great work-life balance.

Relevant Technologies:

• Solid knowledge of C#
• C# Function Apps
• .NET core 2.0
• Test Driven Development & SCRUM
• GoLang
• NoSQL databases
• Azure
• Private blockchain
• Microservice architecture / design
• Linux
• Scripting language experience (e.g. Python, Powershell, Ruby…)

Apply at: https://streeva.com/careers/
High-Reputation Redirectors and Domain Fronting (2017)
> Why Tinder, woking on a random principle is working so well?

It's not random. Location, FB friends, swipe stats on both sides, paid, not paid info all contributes to the queue you see.
> Men suppress their feelings so that they can be a strong pillar for their families in times of trouble.

These points of yours about feelings are very deep, and speak to my male identity. It might be tempting for some to brush these points off as antiquated patriarchal notions of human relationships. That would be foolish to do.

What I read in your discussion is the value and power of self-control and the positive effects that that consequently has on our relationships. I hear you saying that controlling the natural emotions that well up within us is not an unhealthy repression!

We need to celebrate the quite typical, quite healthy, self-regulated male. That person can lead, and we all crave leadership in the family, office, church, gov't, etc. Self-regulation is not solely a male attribute, but it certainly should be promoted and carefully cultivated in males given their biological free agency.

Emotions are healthy to repress when, as you say, there would be a detriment to self or group in engaging in those emotions. It is competence and being truthful to self and group that lets one know when to emote or not.
Stackdriver Kubernetes Monitoring: Comprehensive Kubernetes Observability
I find that the programming meetups counteract burn out .

Making friends in the industry means they know the stuff you are going through. The other thing is that if you dislike your job it’s a great way to get a new one.
Pinga | London | Lead iOS developer (Swift) | Full time | on-site | www.pinga.co.uk

Pinga is changing communities so it becomes more normal to help people around you. Our customers use Pinga to crowd-source a delivery runner to get food, drinks,or help to their door in less than 20 minutes.

Join our small team and become our first in-house iOS developer to improve and eventually re-build our app as we launch in London this Summer.

We work out of a cool office on London's Southbank with beer on tap and genuinely great coffee.

Email Co-Founder Mike: michael@pinga.co.uk

We're looking for:

Initially build on what we already have (built in Swift), but we are open to re-architecting in the future.

Have taken several apps from concept to App Store release.

Be great at innovating and devising new ways of solving problems and improving the customer experience.

Have worked in agile environments and understand that there’s more to an effective agile team than standups and buzzwords.

Have an interest in growth hacking and blockchain, and have ideas about how we can quickly grow when we launch in London.

Be a strong team player, not afraid to voice an opinion and take an active role in planning, user story development and rigorous peer review.
Thanks! The trouble is all of these can fail for what I would consider legitimate reasons. Requiring a receipt fails if they just open it, maybe even use it a bit (or not), and wait a few months before selling it, since nowadays people seem to genuinely go through some stuff (e.g. phones) pretty quickly and not necessarily keep or have receipts, especially if they themselves bought it second-hand. Meeting at my home or office is not something I would ever feel comfortable doing, and is generally recommended against when purchasing online. Sharing phone numbers is something I'd only do when the decision to purchase has gone through and we're actively trying to meet up (obvious privacy concerns), etc.
I don't have kids because I don't want to be blackmailed. Because the world is fucked up enough that I want to either see serious effort at change first, or not put kids in it.

Incidentally, that's why I'm sick of those who don't have time, energy or attention span for anything that matters, can't take any risks, because they "must take care of their kids". Bind them to your back while you do revolutionary work. If you simply didn't realize half of what is going on before you made children, that's sad. I made different choices and have different outcomes. Choosing between what you consider right, and between comfort or harmony isn't rocket science, and if you don't start doing it at young age, and not once let up, you're not going anywhere I'd follow.

Until I can find a decent revolutionary woman, I'm fine with my choices. Gimme a Hannah Arendt or a Sophie Scholl, or give me death, accompanied by the whining of mediocre fools as I dance circles around them. And yes, I'm self-righteous about it, because I'm sick of the excuses of people not going anywhere who aren't even happy while they do it. I'll start feeling lonely when I no longer constantly have to reject people romantically or platonically because they simply have nothing going on. Util then it's the company of a few special people I know, and a lot of great people I read, plus the company of myself, sweet solitude, that I don't want to trade with connecting deeply with most people. I like most of them until we start talking about serious things, so I prefer to keep a light touch and loose relation, until something in them flares up that is proof positive that there is real value there.

end fucking rant.
> They're not trying to take advantage of any particularly sensitive institution.

They are. Amazon. And previously, Google.

The worst-case consequence is not people losing access to Amazon store, but losing access to anything that's powered by Amazon cloud. People operating all kinds of services hosted on Amazon servers are the patients and hospital staff from my example.
headline: "Facebook doubles down on creepy"
Could it be the influx of traffic with the same referral link that tripped some defense mechanism?
Free PHP, HTML, CSS, JavaScript Editor – Codelobster IDE
“ Although police-issue bulletproof vests can stop rounds fired from a handgun, they are useless against assault rifles. “After seeing what little kids can get their hands on, I went out and bought hard plates,” designed for use in war zones, McClellan told me. The plates cost him more than five hundred dollars—a week’s salary. “

“Designed for use in war zones” described his body armor, not a gun. And it was armor he acquired after confiscating a Kalashnikov from a dealer.

Your comments read like nitpicking as applied to a light skimming. If you can’t criticize in good faith, why comment at all?
My Outlook (2016) client is using ~300MB right now while displaying a full HTML spam mail (taking one for the team, guys). I wouldn't say I'm a heavy user, but there's shared calendars and mailboxes, OneNote integration, task list etc.
Thunderbird takes 425mo of my ram right now.
Saying "we can't stop you from blockading, but we won't help you build regime-monitored passages through the blockade" is not sacrificing anyone.