skysight-inc/HackerNews huggingface dataset:
It would be more unreal if they introduce "Windows 9x" desktop shell, probably for me it would be reason even to consider to dual boot to windows
They have listed the problems with such systems in the first paragraph. They claim to overcome these by restricting to very specific domains. But specific domains are usually still wide. A table for two, but in the garden or inside? Inside on which floor? Sometimes it doesn't matter, sometimes it does, and these things are specific and different for every business.

Really skeptical about this. And if this does become a thing, it will dumb down the interaction.
That drastically increases the difficulty in forcing access to a phone. Regional police departments likely don't have a faraday cage and phone disassembly resources on hand, while they may have been sold on grey lock or some other automagic tool.

Sure, this might not stop the NSA of FBI, but if it limits the threat vector to 3 letter agencies, it is still a win.
I'm not convinced that identity is a problem. Facebook/Twitter/etc. got along mostly fine for years without either consulting an external oracle or acting as an oracle. And then when they started "verifying" identities they did a terrible job anyway. So dapps using self-sovereign identity can't really do any worse than the status quo.
Or maybe we should fix the phone system. Something is terribly broken when my connection to YouTube is better protected and authenticated than when I'm talking to the IRS over the telephone.
Because it’s mislesding, just as it would be to say that a restaurant is overpriced because you wanted a takeout burrito.

If all you need is enough to run a TOTP app, you could get a dumb phone with a $10 token but you could also make an honest comparison with the $350 iPhone SE or $450 iPhone 6S rather than comparing the iPhone X/8 to devices which weren’t intended to compete with current generation flagship models.
Is any product remotely as close to this with natural-sounding human speech? Are we entering an era where all voice assistants are getting to that "Her" level in terms of human-like vocal quality?

That part is as impressive to me as the semantic parsing it's doing on that call.
i was wondering about this as well...

so perhaps the only point of this "band-aid fix" is that if the user hasn't connected his iPhone to his computer for 7 days (i'm guessing most non-tech people rarely connect their phones to their computer), the chances are greatly increased that the lightning port is already disabled once it's captured by law enforcement/whoever.
Okay, so I have two Yubico U2F keys and two other U2F keys so far. I don't think I'll buy a fifth and sixth anytime soon.

But hopefully U2F will actually work in non-Chrome browsers in the near future.
You sort of answered your own question. People's workflows tend to morph around the idiosyncrasies of their tools. There'll be somebody doing something weird like using LF to keep lines separate for Linux but wanting them condensed to fit on one screen in Notepad. Notepad does preserve LF characters, just doesn't display them, so you can think of it as a no-wrapping display mode.
> For example, China (the Peoples Republic of China) does not agree that Taiwan (the Republic of China) exists or vice versa

Yes, they do. The government calling itself the PRC denies the legitimacy of the ROC, and vice versa, but despite each claiming to be the sole legitimate government of the combined territory, each very clearly believes that the other exists, and reacts to the actions of the other and to third parties’ actions toward the other.
We would be happy to support this type of application! Please email me at luke@stadiamaps.com if you'd like more information pertaining to your use-case.

https://stadiamaps.com
Wouldn't that be for exterior hacking purposes? The KMS likely has a stricter security profile, and would be a second system that needs to be compromised to gain access to the data.
You can imagine a feedback loop though:

Some people use Gmail auto-replies more > Other people therefore receive emails in the style of these auto-replies > These other people then start manually sending emails according to this style > More people then become happier using auto-reply (since it produces replies in a style they've come to expect)

In this way, an auto-reply feature, even if used by only a subset of the population would start to move language trends.

Maybe there's nothing wrong with this, I don't know. But there is a feedback loop there, which means there's a blurrier line than we'd like between "this AI algorithm does what I'd expect" to "my expectations have become shaped by AI algorithms."
It's different because dying is fearsome and possibly agonizingly painful. Even in the absence of these problems, a change from your current body into some other form (such that your consciousness and memories continue) is extremely disruptive. Not to mention that you lose contact with those who haven't passed through that change, even if temporarily.
Additionally passwords are protected by the fifth amendment [1]. A hardware key is not.

This is a big part of why you always want one of your factors to be something you know.

[1] https://en.wikipedia.org/wiki/Fifth_Amendment_to_the_United_...
Walmart.com Redesigns as the Anti-Amazon
Hardened kernel (e.g Coppherhead OS), custom open-source ROM to disable all telemetry and audit the code (among others), FOSS APK provider (f-droid), disabling online tracking (AdAway, AFWall), full filesystem access. iPhone hardly has any of this.

Note that this is true of any bootloader-unlocked Android phone, not just security-focused ones.
The original meaning was literally something that looks like a news report, but reports as fact something that didn't actually happen and isn't obviously satire. As an example, "Pope Francis endorses Donald Trump".

That was, in fact a fake news story. The fact it asserted had no basis in reality.
C++ Developer Guidance for Speculative Execution Side Channels
> being made more and more homogeneous.

It might be the way around. This kind of intellectual homogenization might indicate an emergent entity coming to being - some kind of (new?) societal organism, sort of like national state, but I don't know what it actually is this time. We might never learn.
Unfortunately, there are voices in the foreign policy establishment that are openly advocating for a "ministry of truth" https://medium.com/@caityjohnstone/atlantic-council-explains...
Security in the Internet of Things: What It Is and Why It Matters
Given the two technologies you've highlighted, what specific regulation would you recommend be added to prevent what bad behavior?
https://seriousaccidents.com/legal-advice/top-causes-of-car-...
Would you rather pay for an unfinished product? They see value in allowing you to benefit from any utility while giving them testing data and a canvass of the market while they fill out the product. Charging now would cause a sense of entitlement in users that they probably aren't ready to handle yet
This is one end-game of AI - changing the economics of scams.

Imagine how a 'long con' works today: a scammer befriends a person online through a video game or social platform, and develops a rapport with them over the span of days, weeks, months. After some trust has been gained, the scammer then requests money from the victim. Does this happen a lot today? I don't know, but certainly one reason it doesn't is the economics of the scam. Who wants to spend a significant period of time gaining trust just for the chance of a payout?

AI is going to flip this on its head. Rather than dedicating hundreds of hours of a scammers time, a scammer could instead use a system like Duplex to befriend hundreds or thousands of victims simultaneously. Let it run for a few months, developing a strong rapport with the target, until the AI finally requests some money from the victim.

Yes, duplex is for completing specific tasks, but how much of a difference is there between "Duplex, book a table for four at 8pm" and "Duplex, ask my victim about how their day was"?
The crlf line ending has been the standard on the PC going back to the days of DOS. That's what notepad was supporting when it was developed. Unix was strictly a server or esoteric workstation OS at the time. So there was never a requirement for Notepad interoperability with Unix files on Windows.
Not anymore for Azure. Google Cloud replaced Azure for them.

https://www.apple.com/business/docs/iOS_Security_Guide.pdf

Control (Command) + F and there's no mention of Azure anymore.
> By convergence, I mean in the sense that two independent organisms that did not share a historical character trait (in this case, a specific homologous gene) independently evolved an identical trait (a gene with provably no homology, but identical function) through the process of natural selection, with no information sharing via horizontal gene duplication.

I'm no expert and could be wrong but I think this is what Losos is referring to in his book. For example, "New and Old World porcupines do not share a common evolutionary heritage… The two lineages have independently evolved their quills from different, unquilled rodent species." Dozens of stuff like this. He goes into more detail with tropical island anoles, his field of expertise, and orients the whole discussion around Stephen Jay Gould and Simon Conway Morris's competing views on the overall paradigm of convergence.

See this NPR interview for a quick summary[0]. A key quote (which I'm not discerning enough to tell if it challenges your claims or if your claims are actually already in response to these claims): "the flood of molecular DNA data that has come forth in the last two decades or so has in many cases revised our understanding about how species are related to each other. And it has revealed that many species that we thought were similar because they're closely related, that they're not closely related and that their similarity is the result of convergent evolution."

https://www.npr.org/2017/09/07/549250035/biologist-jonathan-...
> you're dictionaries.

that's why we need them :-P
Security isn't all or nothing. If something isn't "perfect", that doesn't mean it's useless. What you just described is a shit-ton of work, which most attackers will not be willing to do (how many police departments have Faraday cages lying around?).
That's weird, I constantly see friends spreading outright incorrect, political trolling from clickbait factories like "Daily World Upate" or "America’s Last Line of Defense".
if you're using cookies for sessions on your main domain this can be a very big flaw.
Look into static site generators... you basically write your site offline, and run a script to deploy it to a static web server (or mostly static). In the end, a web server that doesn't run any code outside delivering content is the most secure web server. It'll be fast, and (usually) near zero attack surface.
you can actually send one time invoices on Stripe :D
It depends what your threat model looks like.

For example if you have good physical security and limit passwordless login to physically secure machines via AD computer groups, this may protect you from remote attackers.

If however organizations allow the use of this over the internet from "any" endpoint then this completely replaces a password 1:1 and theft/loss of the Yubikey could be a major problem.

This could also be used only on a single layer of your security. For example passwordless VPN authentication but then a password/2F is required for actual user login.
This size is much better, but I assume it lacks the "touch" protection against remote attacks, like the other ones?

I still wonder about the exposed connector - what its durability. After all, I would like for such a tool to serve me for years fault-free.
The internals probably don't require a form factor that large. Some of Yubico's other products barely protrude from the port. I think there's a convenience trade-off, though...a smaller one is harder to insert and remove.

I have two of this form factor on my keyring, one of which is a couple years old now. Neither show appreciable signs of wear on their connectors beyond what you'd expect from regular insertion. They feel pretty robust, though I've never actually tried to break one...

EDIT: minor clarification
It looks like there's a W3C draft "in the works" but I'm concerned since almost half the editors work for the two companies trying to pass this proprietary Azure/AD vendor lock-in nonsense.

https://www.w3.org/TR/2018/CR-webauthn-20180320
The Gambler Who Cracked the Horse-Racing Code
For whose definition of "easy"?

Can we axe the marketing-speak here? It's just released; developers get to decide how easy it is, not Google PR / Techcrunch right?
There was a thread on here at the weekend criticising Windows 10 for not making enough progress, and also MS for not properly testing updates. I hope this silences those critics. A thoroughly tested change that is fully backwards compatible, but also adding genuinely useful new features. If you were wondering whether to upgrade to Windows 10 I think this settles it.
One of the things that frightens me most is Google Hire. What happens if for some reason it filters you out from everything? Kafka-esque can permanently ruin your life.
the quote from apple specifically mentions USB _accessories_. i would guess they have things like headphones in mind, and it's reasonable to expect that if i have music playing with the screen locked and i connect a pair of headphones, the playback would switch to the headphones.

7 days still seems much higher than necessary.
Lone Star Ticks Are a Carnivore’s Nightmare and They’re Just Waking Up
It's not "being rich" that helps, it's having a high hourly rate of pay relative to expenses. Many rich people work 60+ hr weeks with travel, and don't see their kids much. Many non-rich people are stay-at-home parents or extended family.
Of course, they can hire nannies, governors, and tutors to fill in the gaps...
Passwords are utterly broken. All the entropy of memorizable passwords among humans have probably been extracted by this point. All they give you is a false sense of security. The password portion of 2FA is mostly theater, conditioned on the notion that passwords are broken. Hardware keys is the way of the future.
> If there's no room for critical thought, you are essentially just software that breathes.

"Today, Amazon is thrilled to announce: Mechanical Turk On-Premises."
Any particular aspect of the code you're interested in?

The article detection, extraction and conversion happens with our Full-Text RSS product which we sell (see link for demo in another comment). So the code here is mostly sending a HTTP request to that and asking for plain text output. The HTML to text conversion in Full-Text RSS uses the Html2Text library found here https://github.com/mtibben/html2text
I think best practice will be that you can login with single-factor and see basic stuff but if you want to do anything more critical like money related or changing email depending from context you are forced to use two-factor.

Also if it's at least approximately to password security this is very welcome options. Most services I use I just want access easily.
> Over the next few weeks, Smart Compose will appear in the new Gmail for consumers, and will be made available for G Suite customers in the workplace in the coming months.

Weird to roll out to free consumers first. What's the reasoning behind this?
RAUC: Safe and Secure Updating
Chromostereopsis
Are you going to listen on headphones, for 7 days, with a locked phone?
> Compare Notepad to something like Gedit or Kate

This is the wrong comparison. Notepad is like nano or ed. More powerful editors are available on Windows too.

> I just assumed any programmers still on Windows would be using Notepad++ or some sort of IDE.

Usually we do. But notepad can be invoked quickly from the command line, tends to handle huge files better than N++ or other IDEs, and is opened by default by a lot of utilities like git (you can change this, of course, but you might miss one). So it ends up getting used a lot for quick one-line changes and improvements are still welcome.
Good point, hadn't occurred to me to correlate that idea with the SSA's system.
To be perfectly honest, I've always personally been surprised at what business people are willing to transact over the low-bandwidth media of the telephone. I've heard plenty of stories of people pretending to be celebrities and getting away with stuff on the phone; I don't need a sophisticated computer to do that for me.

If a real problem of deep-fakes in phone conversations emerges, people will just raise the bar of authentication in phone communications. There's nothing magical about telephone that makes it exempt from the general need to protect against social engineering.
We'll also have a special place in the history books because we were the first species to write them.
I'm really trying not to be another "dystopian" commentor, but I can't help but feel sad for the restaurant. The call was awkward. Restaurants are busy. The AI would pause too long and leave her guessing, and respond with the wrong type of emotion (e.g. a dejected sounding "oh, gotcha... thanks..." after she had answered his question with the positive "you can come for four people, ok?". I can't help but think this sort of "corporate lying" (yes it is a lie to robo-call and pretend to be a live human voice) has an external cost of frustration and emotional drainage to be borne by society's ordinary people.
Google Duplex will call salons, restaurants, and pretend to be human for you
Oh please.

We don't have immortality now, and actually we probably live longer that we ever did in the past. Yet our history is full of true horrors perpetuated by horrible leaders: just look at the horrors of WWII. These days, people are living longer, and we don't have those horrors any more (we still have some horrors, but overall things are much more peaceful than they were in the 1930s-40s). A cult of assassins could have really come in handy back then, to prevent 10s of millions of dead.

I'm sorry, I see no evidence to back this idea of yours that longer lifespans will lead to worse societies. If anything, the opposite seems to be the case. Back when people didn't live very long (e.g., Medieval times), wars were extremely common, and some of the larger causes of death were war, fighting, crime, etc. Now people in developed nations don't have to worry so much about these, and need to worry a lot more about Alzheimer's, Parkinson's, heart disease, and car crashes.

>If the rich man withdraws from society, and dedicates some or all resources to preservation of the self, society then acquires an interest in supporting those who would murder him and take all his stuff, thus returning it to market circulation.

This is why we have things like property taxes. You don't need to murder rich people, you just need to raise property taxes on people who have far more property than normal people. This can be done any time with laws. The only reason we don't pass such laws is because common people refuse to demand such laws, or to vote for people who would pass such laws. Blame the voters.
I've had great success with Kong acting as an API gateway running on a DC/OS cluster. It was simple to work with and it's pairing with Cassandra as a backend was an added bonus for multi region and availability zone setups.

I'm looking forward to giving this a shot on k8s. Nice work KongHQ team!
For the sake of diversity they could've at least added some token libertarian or conservative outlets.

Also contrast the complete lack of neutral (at least relatively), established outlets like Associated Press and Reuters with the presence of...BuzzFeed.
"Oh my god, I accidentally killed someone" is something quite different from "Oh my god, my willful negligence alone has caused a fatality and I'm ready to take full responsibility".

While not entirely impossible that the latter happens, it's highly unlikely. What's much more likely is that these people are saying this because they want to hear "Oh, but it's not your fault" from somebody else.
I've been locked out of my Amazon account for a year now, for reasons I don't know. Amazon reps told me I'd hear back, but there's been nothing for months now. Fortunately, the credit card they have on file expired, and the ebooks I can no longer read are not so important to me. So, good riddance, I say.
Monadic candy machine: https://gist.github.com/hakuch/484ea9c4e4baaf7b3ab6
"Fake news" has become a cure for cognitive dissonance, but it started out as "pizzagate" and its ilk. That certainly was fake, somewhat effective, and toxic. It's still around. Check out qanon, spirtcooking, etc.
To be more precise, they're Unix line endings. So yeah, I'd consider it a bug if it didn't support what has been the standard line ending format since the 60's.
The google-bot calling your place of business is tantamount to someone's butler calling your place of business. Often time, people prefer talking to professional appointment-bookers.

Sometimes, not. When HR departments are recruiting, they avoid talking to agencies, with language like "principals only".
I think the trend will lead to illiteracy. Why learn to read and write when your computer can just speak to you and transcribe everything you say to it?

I recently saw a signature board for honor students posted at a high school. The signatures from the early 1990s were all in cursive and every signature had its own style. The signatures from 2017 were mostly printed in block letters and looked like something a first or second grader would have written. It was pretty sad.
What must have been a side project for him, the book "How Buildings Learn: What Happens After They're Built", was hugely influential to me as an architecture student. His observations of built works continually adapting to the evolving needs of users have obvious parallels in the world of software, and helped form the basis of how I approach UX and product design.
>Who drove that decision?

Centralized storage, accessibility, abstraction and usage tracking of all corporate documents sourced from all divisions / systems with proper access controls and redundancy. (That's a lot of business speak).

I've seen this done with a network share / filesystem or as blobs inside an RDBMS; both of which start to fall apart after a certain volume for different reasons. Especially after building a company through acquisitions of various systems. The first step in merging systems acquired through M&A would be to migrate all the documents into a centralized repository (like bitbox).

These systems usually have an auto-kill feature after X years which would be the legally required time to keep a document. Companies would purge the documents to avoid any unnecessary liability after the required retention period (incase they got sued).

Also, they were interested in hot and cold storage, so documents that are say over a month old would get moved to cold storage (or whatever the company workflow dictates) to save money on storage costs (hot = SSD, cold = mechanical).

I was thinking integration would be useful if this got any foothold. Integrate with email servers, scanners, existing sites with upload capabilities, etc. It also keeps a history of everything that happened to a file.

Unfortunately the B2B enterprise sales cycle is brutal and I wanted to avoid that until we got bigger; funding the company through subscriptions of smaller companies that may not have the technical expertise to build a robust system, but still has the need of document storage.
Yeah, that was pretty much jaw dropping. I'm excited to see it in action.
Hostile environment: The dark side of nudge theory
> "Google will soon launch a new version of Google Maps that will give you more personalized recommendations"

I've used enough of Google's products by now to know that the word "better" in this title is probably inaccurate. :)