skysight-inc/HackerNews huggingface dataset:
I'd like to try to answer some common questions I see here:

- Q: Doesn't passwordless mean single factor? Isn't that insecure?

A: It could mean single- or two-factor. FIDO2 and the new YubiKeys support an on-device PIN that isn't shared with the server, like conventional smart cards. This allows the key to act as both "something you have" (the key itself) and "something you know" (the PIN for the key). The PIN is optional, though, so both the single factor and two factor use cases are possible.

- Q: Is this Azure/Windows/AD only?

A: This post highlights the partnership with Microsoft and the integration with their products, but FIDO2 is not Microsoft-only (and Yubico will not be the only key vendor). CTAP2, once finished, will be published as an open standard like U2F, and the accompanying Web Authentication API [1] (WIP) is an OS-agnostic W3C standard enabling the same features in browsers.

[1]: https://www.w3.org/TR/webauthn/

- Q: Will I need a new YubiKey?

A: For passwordless (PIN) login, yes. However, existing YubiKeys with U2F support will be usable as a 2nd factor in Web Authentication, and sites that currently use U2F can upgrade to using the Web Authentication API without needing their users to re-enroll their keys.

Full disclosure: I'm a Yubico engineer and one of the editors of the Web Authentication spec.
Well, actually there have been hundreds of cases regarding these robocalls that I have read online since years ago. I think the best thing to do for us is to just ignore those calls, or hang up on them. I have just read an article about this at http://www.whycall.me/news/consumer-wins-massive-229500-robo.... I think it might be useful for us.
> It makes sense from the periodic table

I've seen a quick-and-dirty summary of how to think about bonds that goes like this:

- An ionic bond forms between two atoms, one of which has too many electrons and one of which has too few. They balance.

- A covalent bond forms between two atoms, both of which have too few electrons. Some electrons are shared between both atoms simultaneously, bringing each up to quota through the simple magic of double-counting.

- A metallic bond forms "between" some number of atoms which all have too many electrons. The surplus electrons roam back and forth freely around the metal because their home atoms would prefer them to go away, allowing the metal to carry electric current.

This model is supposed to explain why you can basically combine arbitrary metals in arbitrary ratios and still get a metal.

It also seems like it predicts the existence of metallic hydrogen, in that a normal H ion is positive. Does that actually make sense?
It looks like lineageOS might also be dropping it for v16. Which is pretty lame for a $600 tablet.
It takes some effort to grasp the method of actualism, so I've linked the wiki below[1] if you're interested in exploring further (most people run away at this stage :P), but the basic method is to feel good, as a bottom-line, each and every moment again ... and sincerely explore (neither withdrawing nor psychoanalyzing) any hindrances to that feeling good until one can clearly see the silliness (whatever it is) of it preventing one from enjoying this moment (which clear seeing is sufficient to get back to feeling good). It is as simple as that (and, before you bring up any parallel, it is 180 degrees opposite to any meditation/ stoicism practices that HN is so fond of).

[1] https://github.com/ActualFreedom/home/wiki
They’ll do that before getting a robot to answer the phone for them.
D3.js requires a DOM, and most visualisations require a DOM and SVG rendering. I doubt MS are implementing a DOM or SVG support inside Excel (I could be wrong).
As long as the policy extends only to on-campus spending, I don't necessarily see a problem with this. I might do the same thing if I ran a payments company that wanted to go brick-and-mortar; what better way to collect feedback and build empathy in the people responsible for the service?
Contributing to Open Source
I've seen posts in the past that describe how to get involved with contributing to open source projects. However, I feel like this advice is geared more towards more experienced developers who have a lot of exposure to different tools and frameworks and probably a lot of domain expertise.

How would you recommend someone who is finishing up undergrad get involved in open source? I've contributed to some open source web projects, but larger, more technical projects (the ones I'm interested in) seem too daunting to me right now.
All these years later and these guys are still trying to rewrite history. There were very few good guys in this conflict, other than the ones who were duped into going there, such as the Lincoln Battalion, and used. For a balanced viewpoint on this history: https://www.amazon.com/Comrades-Commissars-Lincoln-Battalion...
I think it passes a limited Turing test at the domain it’s trained in. I doubt any of the people on the other end of the call would even suspect it’s a computer. That’s an amazing achievement.
Or you could be D Marcus having dinner with Mark, telling him how you are looking forward to your next big adventure, one that FB is not doing. Mark who values you and wants to keep you asks why not do it in house. It will essentially be like starting your own company from scratch, only you won't have to raise money, hire employees, etc... Oh and you get X% of it too. Yes that is smaller than XY%, but at this point it is not even about money. Win win.
Oh? I can compile all these apps, exactly as they are on the Pixel 2, myself? I'd love to see that source.

The versions in AOSP are heavily cut down on functionality and barely even work.

Im the days of the G1, the actual Google Talk and Google Search apps were open, the Google Books app was open too!

That was the Android we bought into: one where a default install was entirely open, and living without any closed source apps was easily possible.

Today, that's long gone. Play Services here, SafetyNet there, Google®™© apps in the middle.
You can already disable SMS, phone and location permissions (and others) for each app in the previous version of Android (Oreo). I'm sure this has it too.
It seems premature to make such a proclamation right after updating.
True, but I am convinced that meditation can lead to awakening, which, apparently, involves the cessation of suffering and feeling one with the universe. It's not so far fetched, since our experience is generated by our brains, and similar things can happen on drugs.
I don't appreciate it, and hope it can be optionally disabled. I don't find it makes the device more usable.

One example, YouTube suggestions. I watched a "Family Guy" clip, didn't upvote it or comment or anything and suddenly I have 10 channels of Family Guy content "recommended" as if I'm suddenly YouTube's biggest Family Guy addict because I watched one two-minute video.

I don't want my phone anticipating what I want to do, I want to tell it what I want to do. Because when it tries to anticipate, it's usually wrong, and that's annoying.
Most visualizations can actually get by with just canvas. No need for the DOM.
This is scary. I want to hear Duplex to Duplex conversations. That will be even scarier.

Amazing result. This guys should be very proud.
It's strange, yesterday I would have said it is beyond repair.

Today, after taking some advice here I see a sliver of hope that it might be salvageable.

I've managed to make myself replaceable at least in tangible ways so I hope to find myself a good way out where everyone wins.
It's emulating the Windows libraries, not the CPU instructions.
I don't understand why companies don't build specific teams that are 100% remote, with perhaps an onsite project manager (or something like that). Then the team could develop its own norms and culture, and while it would be isolated from the rest of the company, it collectively gives the remote workers much more of a voice than if they were each on different teams.
Yes. Because if I'm having a bad day and I'm rude to the caller (not knowing it's a machine), I will feel guilt afterwards. The guilt will be unnecessary, because no human was offended.

That may be a trivial case, but more generally our social contract is that we owe a duty of politeness and consideration to fellow humans. When you're interacting with another human, a big part of your brain is actively engaged in following social norms. By masquerading as human, machines co-opt this part of your brain and extract a duty that they don't deserve.

I think every machine caller should be required to identify itself as such. Restaurants will still be happy to take reservations from them. If one calls me to sell me something, I can tell it where to go without any guilt.
I agree with that. I think it's time for us, the tech industry, to start thinking about the ethical implications of the things we build before we release them.

To make this salient for people: imagine this technology being deployed for political robocalls. An attractive voice masquerading as a person persuading people to vote for someone.
"Why would anyone want to use a cryptocoin though a service like facebook?"

How much would you bet against Facebook attempting to link Bitcoin/BitcoinCash/Etherium wallet addresses to individuals and tracking cryptocurrency transactions as part of your marketing profile?

Eagerly awaiting reports of individually targeted Facebook ads along the lines of "3 of your friends bought items from these Benzo and Ketamine dealers on the dark web! Use coupon code #HeyNSA! for a 25% discount on your next order over $250 at their SilkRoad or Agora stores!"
I am making an app with Vue and Firestore and am excited by the potential of PWAs. Really, the only thing that frustrates me at this point is that Apple doesn’t support local notifications. If they did, I really wouldn’t have to consider making a native app at all.
Interesting that the comments on that link for this technology are much more positive than the comments here.
I think you misspelled "surveilling"...
There's a far-future sci-fi novel where "please" and "thank you" are considered insults when spoken to people...bc that's how the wealthy prefaced and ended their computer commands. Vinge, perhaps?
Well, this certainly surprises me. I know last I looked, there was some discussion about MFA and requiring Azure.

In the environment I work in, I'm not able to use services outside a very limited list, or I have to roll my own using established technologies (FedRAMP). So Azure is right out. So was using Amazon Directory Services.

I know my colleagues are much more familiar with Windows, whereas I.. (look at username, relevant!). My solution, after assessing that Windows couldn't do 2 (or 3) factor, and it was stuck at login/password and some firewall blocking IP's, I knew what I had to do. And that meant Linux for the bastions, and LinOTP and appropriate config options to make it work.

I was kind, and didn't inflict a AAA stack of "kerb, ldap, radius, and shib" on the Windows admins :) Well, that and I didn't want to be the sole maintainer of that system.
http://time.com/money/4079569/subway-footlong-lawsuit-12-inc...
You can trust that they have the private key corresponding the public key you associate with that entity.
Ironically the "society is broken" narrative, aside from being unsupported by the evidence, is often used to sell mindfulness products & services.
For anyone interested, George Orwell's account of his experiences during the civil war, "Homage to Catalonia" is a good english language read on the subject. Not an expert, but it seems pretty impartial. And its Orwell so its easy to read.
This is just what the comments you replied to were discussing
The Pixel 2 is not an AOSP device, just like the Galaxy 8 is not an AOSP device. Why would you think you get the source for all the third party apps?

> Im the days of the G1, the actual Google Talk and Google Search apps were open, the Google Books app was open too!

Those apps as they were are still open (the Google Talk app was/is actually a multiprotocol messenger), though I don't remember a Google Books in AOSP. Even better, there are now superior equivalents to all of these that are also open source.
Came to rant about this, and the fact that the blog article itself seems to break wheel scrolling.
Georgia Governor Vetoes Short-Sighted Computer Crime Bill
Also generally speaking, apps are better in that they’re nowhere near as bad as the web can be when it comes to being intrusive/annoying/demanding, and oftentimes even ads are better behaved in apps - it’s usually just a single banner or occasional interstitials, and even then there are limits on how much they can do automatically (no pinball machine redirect chains and nothing can force the user to leave the app).

This is because it behooves app devs to ensure that both their apps and any ads in them are reasonably well behaved, because if they aren’t, the user will uninstall the app with zero remorse, find a better behaving alternative, and likely never return. There’s not even a chance of some random link they encounter bringing them back to the app.

In short, most apps lend users a greater sense of control, whether it’s actually true or not (I’d say it’s a half truth).

Obviously the fix for this is for browsers to pull in the reigns on what’s possible in the name of improving user experience, placing native app-like restrictions on web apps and ad networks. This seems unlikely though, given how it would probably spur the wrath of many web app devs...
Those are great tips! One thing I would love to see added is what the sweet spots are for each fund/investor. We all know who the social, saas or marketplace investors are. But within those groups, there are additional segmentations (eg: price-sensitive investors, those looking for a certain min ARR, those focused only on +$20B TAMs, etc). I realize that not every investor would like to be labeled to such a level of granularity, but many have very narrow windows of opportunity, and it's surprising that there's not more public info about their sweet spots.
Or learnings instead of lessons.
> You can already disable SMS, phone and location permissions (and others) for each app

This doesn't address the comment you replied to in any way. Surely you see that there's a gap in reasoning between "I want to be able to add my location, just not have my location always broadcast to them" and "you can disable location entirely". Your suggestion specifically violates the "I want to be able to add my location" part of personal control over information.

Or are you suggesting that it's reasonable that a user should have to manually switch apps between white/black lists for behaviors? Personally I would find that idea contemptible.
You gotta be kidding. If it was that easy why didn't you build it yourself? Easy billion right there.
> ML Kit offers developers on-device APIs for text recognition, face detection, image labeling and more

This is what I always thought Google should do. Operating systems have completely stagnated, but a truly new and differentiating set of features would be to deliver AI as a platform - not a Google-only feature but a set of open APIs that anybody can use or implement. I hope they continue down this track.
> What? This is certainly not my experience.

Your comment describes the experience to the tee.

> The top source is indeed Washington post but the same card also contains coverage from Mehr News Agency (which it highlights as "From Iran"),

Where are you from? In the NY area, all I see is US related. A couple of washingtonpost, a couple of nytimes, rolling stone, cnn, etc. Even in the expanded "view full coverage", I don't see mehr news.

> Reuters, The Hill, RollingStone.com, NYT (highlighted as "Opinion"), NEWS.com.au, and Associated Press.

So, no diversity? They all are essential one news agency masquerading as different news. Yes, even the australian source.

How about this, I wish I had better access to different echo chambers.

Reuters, The Hill, RollingStone.com, NYT (highlighted as "Opinion"), NEWS.com.au, and Associated Press along with the nytimes and washingtonpost are part of the same echo chamber. They all push the same message. I want to see what the other nations/regions are saying. I want different opinions/perspectives/news.
With a hard deadline looming the police might be able to use the exigent circumstances exception to search warrants.
It’s why I told my parents to pick random passwords and write them all down in a notebook that they keep next to their computer. My way, they’re only stealable by their housekeeper or a burglar. If they needed to remember the passwords, they’d be vulnerable to 100 million script kiddies with rainbow tables.
Ah, I dunno. I can only speak for North America, but I personally feel like between the rise of identity politics, our youngest generation reporting record high levels of depression and anxiety, a massive divide between left wing and right wing and the rise of the far left and alt right.. it feels like a lot of people have lost their mind over here.

Edit: Not really sure what HN dislikes about this post. My goal here was to offer some actual aspects of North American society which many would agree to be worse than they were in recent history as opposed to simply saying "society is broken". I was expecting some actual discussion here.
We're both technical and we've both made similar financial contributions and sacrifices. One thing that has become painfully clear for both of us is that we need professional sales and marketing help from someone who knows our domain inside and out.

The problem is that we can no longer afford to bring such a person into the company until we dig ourselves out of this hole.
Why do they provide another API for offline face detection, when Google Play Services already comes with one?

It would be great if apps that use the existing offline face detection were just switched to the better model, without needing to change any app code.

And, if the problem is that some devices can't run the new models, it would better for that to be handled by the API provider, than by each app developer.
I'll reply to you without quoting everything to make it more readable. First, the paper is already accepted and is not about RDF per se. I know about the serialization formats and none of them will fit my needs because the problem lies in the data model, not a concrete syntax. I don't really understand the point you try to make about literals. Mine is that because literals cannot be the origin of an edge, they form sinks. And that's very annoying for building a graph (of strings) because you then need to create proxy nodes for data all the way up.

For annotations, you can read[1]. What I meant however a really simple graph construct: information on edges. In the Neo4j lingo that is called a property[2]. There absence in RDF make it difficult to represent situations such "Paris"---distance:54---"Rennes". I'm visibly not the only one it's itching[5].

Yes you can use URN, be some projects doesn't support them. Check out the linguistics data cloud[3] for an example with such a requirement. Moreover, renting a domain (you can't buy a domain name) may be cheap but why putting this burden on yourself if you can avoid it? Even Microsoft mess up with them[4] for time to time. I read some papers of 2 years old and all the endpoints and links where dead. So yes, if you're not doing a web project, no need for a web format. Sadly this is what is done in my field.

Anyway I'll be curious to see something you built with RDF, if any. I failed to find your work besides two papers that aren't related to the subject.

[1] http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.352...

[2] https://graphaware.com/neo4j/2013/10/24/neo4j-qualifying-rel...

[3] http://linguistic-lod.org/

[4] https://www.theregister.co.uk/2003/11/06/microsoft_forgets_t...

[5] http://dbooth.org/2010/rdf2/
Thats partially my point. Everyone is thinking about the business case for cost saving around automation for businesses, but that lacks imagination. Automation tools for consumers to interact with humans at businesses is where the real opportunity lies.

Would you ever voluntarily use an IVR? I wouldn't. If I am going to interact with automation for a business, I want to do it with a different interface than voice... all the hype around NLP and chatbots was uninspired and focused on the wrong side of the interaction...
Building conversational interfaces for consumers to use to interact with businesses is a much better use case.
Does it makes a difference on VM / containers / VPS ? Or does-it works only on server CPUs ?
great comment. Imagine the person on the other line saying... what? what verbal captcha a system like this could not answer?

What do you feel if I step on your foot?

Do roses smell good?

Even if the name is not "rose"?

What's the color of melancholy?
So Joe random blogger has to disclose his "thinking process"? "Well, I was thinking about this, so I wrote down this. Then in the shower I had another thought, and that's why I wrote this".

I wish people would think of consequences more. The consequences and logistics of what you're suggesting are horrible. And I think once you have to time to reflect, you'll agree.
Also a video tutorial in the style of Coding Train pls.
I don't need reservations that badly. But the difference between having to specify Mechanical Turk work and just talking to a Google appliance is pretty huge... We're talking hours vs. minutes of work.
If you can manage to momentarily step outside of that stockholm syndrome towards anxiety, you'll find that the human brain is remarkably capable of living and solving problems without the burden of anxiety.

See my other comment about the method I practice.
Would you also consider it news the publisher knows mislead, even if there’s a grain of truth?
You should really try the original that book is based on: Between Parent and Child - H. G. Ginott
4096-bit is likely an RSA key, correct?

Encrypting directly with RSA according to PKCS#1 is limited to a maximum of 501 bytes (key modulus - 11 bytes).

Generally RSA is not used to encrypt data directly, instead you encrypt an AES key with RSA then encrypt the data with that key.

https://stackoverflow.com/a/5586652

https://security.stackexchange.com/a/33445

Edit: the messages are from a character limited contact form so it's fine
Or you could try to make a better product.
People are prejudiced against talking to bots because of how bad they are currently. I despise calling services that have voice recognition, often times it's easier to have an options menu.

If they can get a way of saying "I'm a bot" without people hanging up the calls, I'm all for it -- otherwise, "I'm calling for a client" or similar is the best for everyone involved (assuming everything works).

Businesses also need to have a way to report problems to Google, like if they are getting spammed by Duplex or want to opt out.
People commenting on this post, please state if you have kids or not. The reason is, people who don’t have kids tend to be extremely naive about parenting.

My take: there’s no such thing as universal “good parenting” advice. Kids are different, and what works well for one can wreck another for the rest of her life.

Full disclosure: I’m a father of a “difficult” 15 year old.
I believe you it wasn't intentional :)
explanation: https://www.xkcd.com/356/
This is clearly not a good-faith effort for Google to have you stop wasting time. Youtube has been around for over a decade and they're just getting to this now? I think this is clearly a minimum amount of effort to prevent backlash, and it is against their interests to invest in technology that helps you use their technology responsibly.
Three years ago I made a significant amount of my purchases each month with Prime. I haven't renewed Prime in over a year and my last Amazon purchase was about 6 months ago.

Amazon's prices are no longer cut-throat.