skysight-inc/HackerNews huggingface dataset:
It's protected by DPAPI [0] which uses the user's password to encrypt the keys. Any other programs running under that user can theoretically access it (just like how any program can access your ~/.ssh/id_rsa) but other users shouldn't be able to access it.

[0] https://msdn.microsoft.com/en-us/library/ms995355.aspx
as if the concept of "old prices" has any reality in the world going forward… Prices will continue to change and the idea of what they would have been becomes nothing more than a counter-factual speculation.

There's always been a tension if avoiding loyalty-systems means paying extra, whether going to a more-expensive store or simply refusing to participate in the system.

These are systematic things.

You didn't consider for a tiny second that my complaint was about the way the system works and affects people overall rather than being a personal complaint as though I was one of those delusional libertarian folks seeing myself as some totally isolated individual actor… I'm complaining about loyalty systems and tracking and its effect overall on, yes, even individual anonymity and liberties etc.
Mind Your Place
If you download 1Password through our website instead of the Mac App Store you can indeed use a subscription with standalone vaults. It isn’t the recommended configuration, as you’re paying for features you can’t use, but it is possible. We intentionally don’t talk about this in marketing as in the past it has caused a lot of confusion, particularly with less technical users. HN is obviously a different audience, and we can talk about that here.

Ben Woodruff

AgileBits
> The people who have it easy are the ones with a MS or PHD and years of experience doing data science work at companies under their belt. There are very few of these people right now.

Are there enough of those people to meet the demand, even recognizing that it is smaller than the overall software engineering demand? If not, it seems like the parent's point still holds.

Edit: But thanks for the perspective on the size of the market and level of hype, that's a useful data point.
> Nothing is streaming

Except CouchDB entire REST API, where nearly every endpoint streams result row by row, which is great.

> Performance (and likely security, due to age of the engine) in this subsystem is extremely poor

As of security: wrong guess. Go compare number of critical CouchDB CVE for last, say, 5 years, with any other DB you want.

As for query server: indexing is slow for the reasons you pointed out. Requesting persisted index is ok. Taking in account CouchDB persists everything, it‘s not in-memory DB (which is again great), I‘d say it‘s even fast.

> Performance in this (Erlang) area also appeared to be proportional to the code size of the map function

Performance in this area depends much more on how branchy is the json doc being processed. It‘s not about CouchDB itself, it‘s about json parser used. There might be a situation when you have better perf using JS views.

> Nothing about this is relaxing.

Indeed. But then it just works, for years, with zero maintenance even for replications – the result I‘ve never even nearly achieved with any other DB I used.
You have been able to book, as well as pay for, essentially any restaurant in China via WeChat for years. In Sweden most new services like authentication, payments or digital mail are by local companies. The world is increasingly routing around US tech companies to solve these problems.
I can't even imagine taking the call from the business people why we were basically off the internet for 45 minutes, and or severely degraded..
Perform advanced analytics and visualizations of your DynamoDB data using Athena
What evidence do you have that Snowden is a Russian agent? Why is it suspicious that both Assange and Snowden happen to support Catalonian independence? It's not exactly a fringe or necessarily right-wing position.

It's certainly possible that Snowden was pressured into the Russian government into tweeting his support for it (since he is at their mercy), but even if it's true he's now compromised, how does that at all affect the NSA disclosures?
No, part of this involved using Windows's Data Protection API to decrypt it.

Other non-administrator users can't read these registry keys, it's encrypted with the login password (as is common with macOS Keychain and GNOME/KDE's credential stores) so even other administrators can't decrypt it.

On Linux, administrators (root) can extract the keys from ssh-agent. This is actually no less secure and usually more secure.

This is a cool demo of how to do it on Windows, and there's a reason the author didn't call it a vulnerability - it's working as designed and this form of attack is outside the intended threat model.
See elsewhere here, there's no shortage of experiments to be done that could be determinative in this case. Also, Karl Popper's rule is a great rule of thumb, it really is; but there's an immense bibliography in philosophy of science about whether it's a shoe that fits all circumstances.
Hmm, different strokes - different folks. I actually like to talk to people on the phone. Maybe I need to get out more, but when you can get to a real human, the issues at hand tend to get easier to deal with. Phone trees are a nightmare for me, and I just spam 0 until I get someone (typically works alright, but not always).

The trick, I have found, is to treat the other person on the line, as well, a real person. When they say their name, say it back to them, ask them how their day is, chat for a second about how it's their Wednesday (halfway there!), what the weather like where they are (Broncos are going to have a tough game, eh?), etc. Even just 30 seconds of chatter will get you great service. So many people treat them as 'the help', so when you come in and treat them as an equal human, their day just got a little better, and they'll treat you better too, because you treated them well first.

And I mean you really get better service. That direct line to their manager's manager? You have that now, just because you were nice. That bouquet of flowers for your mom/wife? It just got a little larger, because you asked them how their day is going. That bill you are having trouble paying? It's 15% off, because you complained about the snow too. Yeah, it's not a lot. Yeah, it happens maybe 1/10 times. But it is worth 30 seconds.

Besides, you got to make an actual human's day better. No one is too busy for that, for good manners and a smile, even if it's over the phone.
The first reply on the top comment of the official blog post says "1Password 7 from the Mac App Store will only support our hosted service" so you should probably start by correcting that...
Security through obscurity is a bad design.
The top speed here is regulatory. There is a 79mph speed limit on tracks shared with freight trains. Also we have weight minimums.

Basically most of the reason our trains suck is because our regulatory body sucks.
Not all mega infrastructure projects are foreign aid/loan financed. For example the 6000 MW Nile Grand Renaissance Dam is self financed by Ethiopia.

Beside there is a deficit between export and import leading to currency shortage.

https://www.reuters.com/article/ethiopia-energy-idUSL6N0N91Q...
The same is true for anything remotely to do with credit or credit repair. There is a whole rat's nest of companies run out of the same PO Box in Minnesota that was shut down by the governor at least a few times now, but they basically have people go on and on about how these repair places worked miracles and post fake pics of "credit reports" that show these amazing 70-80 point boosts overnight. Now those sorts of jumps can happen but they are the exception, not the rule. They give shoddy credit advice to people so their scores initially go down to make them eager to sign up for a monthly recurring bill where they will basically sit on their hands and collect a check. It's revolting.
DES: Datalog Educational System
> "Dead Donkeys Fear No Hyenas was triggered by a seemingly trivial scene at the airport in Addis Ababa, six years back. Waiting for my flight late at night, I happened to see some tired workers at the tarmac who were loading food products on an airplane destined for Europe. At the same time, another team was busy unloading sacks with food aid from a second plane. It took some time to realize the real meaning of it – that this famine struck country, where millions are dependent on food aid, is actually exporting food to us."

This is straight out of the Potato Famine. :(
Speaking as an automotive mechanic, Uber/Lyft/taxi are functionally indistinguishable from a fleet vehicle after the first year of service with the notable exception that fleet vehicles enjoy cheaper parts and service.

Expect to see your brake/oil/air filter life cut in half. most of this is due to idling in a fleet-like manner a vehicle with no accomodation for greater-than-average idle times. Example: the crown victoria and F150 fleets sold to government agencies can easily sustain a 3-6 hour idle as theyre equipped with an enlarged intercooler so you dont cook the oil.

Suspension suffers but not appreciably as power steering fluid, which turns to laffy taffy pretty reliably in these types of vehicles. Tire life in some cases is notably shorter due to the prevalence of sidewall damage from mediocre drivers dragging or hopping curbs. Fleet vehicles are equipped with idler/pitman assemblies which, again, are cheaper to repair and service than the more complex and expensive rack-and-pinion...which also isnt as durable for fleetlike operations.

service times are also longer...so theres lost revenue. example: an AC service on a Lexus takes damned near 4 hours (I'd want the car for the day.) Service on a lincoln towncar? I might not even have to put the keys in the ignition. Theres actually a factory tool you can order from Mexico that will do it in about 11 minutes.

TL;DR: if you're driving for one of these taxi services, buy a fleet vehicle used or new.
New York, currently in EDT. We're not currently hiring at the moment but it's possible we'll post in the monthly who is hiring thread at some point in the future.
GDPR Compliance Checklist: Complete by May 25, 2018
More like an HEM.

(high explosive module)
Rigorous hardware-based security measures.
Any of the lofi hip hop live streams. Usually calm with minimal vocals. This is my favorite one https://www.youtube.com/watch?v=ilxhlnDo7_M
Siemens is a bit late to this tech, and this party, which has been discussed in HN in previous years (tech including the stones), but welcome.
Fusing effectful comprehensions [pdf]
Make code copying easier with :before
> I've been using dropbox sync for years

> That said, I refuse to use cloud-stored browser-accessed password managers

There seems to be a disconnect here?

Ben Woodruff

AgileBits
Let’s not forget about parking!

In SF you pay $400/m for a parking spot and wherever you go you likely need a payed spot too!

So $400 x 12 = $4800

$4800 x 6 years = $28,800 just for the parking spot on your block!
Ask HN: Share your experiences as a product manager in ML domain
PS.. some other things that you may want to include in the answer:-

1. What do you do on a daily basis and how do you interact with the teams?

2. What is your knowledge area like?

3. What was your past background?

(rephrasing something I asked about 12 hours ago)
Wow that app is exactly what me & my friends have been looking for. They even started hacking together an Android version of this. Looks really well done!

One question: Do you plan on writing a native desktop solution? I'm not a fan of having to keep my browser open just to run a single app.
Hi Ken.

It is finicky! There are multiple components outside of 1Password control when you are using Dropbox, iCloud, or WiFi sync.

We do our best to find, troubleshoot, workaround these issues. We have built an entire Troubleshooting and Diagnostics utility just for that:
https://support.1password.com/diagnostics/

For the majority of users sync with third-party services works well. However, there cases when it gets finicky.
This is what America’s new space shuttles look like
I definitely believe he's just pranking everyone now. here's a translation:

On one thread on Reddit, an interesting thing is being discussed today. The user, with the nickname WhySoSadCZ, posted a photo of where an old bomb lies between the server racks on the ground. It is supposed to be a location in the Czech Republic, specifically in a server room in offices of unnamed smaller companies.

"No one has been in the server since the last person left IT two months ago and apparently took his keys," WhySoSadCZ writes that he was going to repair the air conditioning in the room and had to get in without the keys.

The user further writes that the business owner has no idea how the bomb took place there. He also states that the building has been evacuated and that the police have been involved here.

Police Spokesperson of the Czech Presidency of the Czech Republic, Jozef Bocan, however, told Lupu that the police did not carry out such an action. "We do not know anything about this description at this moment," he said.
You can opt-out from your government by moving to another country - you have more choice than you have on mobile where there is only Google or Apple... :-)
Most of these articles have the same narrative, summarized as: We have seen how dangerous and important technology is with elections, now it's more important than ever we educate everyone about AI.

As if the two concepts follow or are related at all, it seems more like a extremely convenient way to pivot the conversation to this new area of hype in technology while not actually owning up to anything.

How about we talk about anti-trust law, privacy, and busting up Facebook and Google instead?
Yes. In advanced mode you can create vaults outside 1Password service.
Most manufacturers recommend 6-10k miles or 6 months, whatever is sooner.

IIRC, the reasoning is mostly about failures of parts/screws involved in the maintenance.

The labor required to tap a seized lug or corroded filter that gets stuck is a multiple of the cost of oil change. There may be temperature related reasons as well, but getting facts about a topic that fuels passions as much as motor oil is difficult.
From [1], cited and linked to in TFA:

> To do that, we simply start the ssh-agent service (as Administrator) and use ssh-add to store our private key.

Did Microsoft do some major surgery on the ssh-agent program or am I missing something else? If the agent is started as Administrator, why can I connect to it with my user privileges? And if I do, can other users on the same system do so, too, accessing the same set of keys?

[1] https://blogs.msdn.microsoft.com/powershell/2017/12/15/using...
> If I take a laptop with a 1Password subscription, fully validated and synced, and spend 6 months with no internet access, will 1Password continue working?

Yes. Obviously it won’t sync with your other devices until you restore connectivity.

Ben Woodruff

AgileBits
they did a few months ago when I changed mine away from my real name
There's a desktop app available for Mac (it's an electron port of the webapp- if anyone's curious). A windows version is coming soon (ETA ~1-2 months).
It's not all just status. There are people that appreciate the handling and the performance they get driving a BMW.
I bought a second hand BMW because I wanted a car that I'd enjoy driving, didn't care about the social status at all.
What was your main takeaway?
I absolutely do believe this, I have people from Microsoft reaching out to me constantly regarding our Azure account here. If there was abuse on it or something of that sort, I would not only get an email, I would get a phone call. We don't even spend that much. We don't pay for their upper tier support plans either. At my last job, Microsoft worked very actively to help the corporation (much larger than my current job) move over thousands of emails over to Office 365.
ACH ORIGINATION AND UPLOAD
I need to know if there is a way to interface directly with NACHA via building one's own payment gateway to operate as an ODFI. Kindly advise
Social media their way – or my way
This is really, really disappointing. Contracts are supposed to be fair for both sides. In isolation, meaning for one specific purchase or one specific job, they are. But what happens when every company and employer has this language in their contracts? What do they lose by including the language? They lose nothing!
Agree in-person help is required, but the groups aren’t for everyone. Personally I kicked my habit with a psychiatrist, a therapist and some new friends — sometimes that’s all you need.

Really the thing folks need most is someone they know knows their world. Someone to pierce the veil and tell you it’s all bullshit, and that if you want help you have to actually want help. This is what addicts are looking for online, and unfortunately it’s all too easy to manipulate people in this state.

Dealers and con men taking advantage of this ease of manipulation is as old as drug addiction.

This happens in NA/AA meetings too, but the sponsors are usually pretty good at spotting them. I don’t trust Facebook to play that role.
This is not an inconsequential amount of cash, for sure. Especially at 18! Congrats! And a great write-up to boot. Just awesome.

All that said an honest question: why would a company like Google not pay insane amounts of money for these kinds of bug finds? What would they pay their own people to find them? Seems like RCE on App Engine should be worth 100K+ and then some on top for giggles just because they can.

Obviously having a standard policy makes sense so that your community understands what to expect but as Google, what's your operational impact if you triple / quadruple vs. market value of the exploits?
Laser microphone
With a pinch of AI
Gojsonq: Go Package to Query Over JSON Data
Which countries have China taken control of in this way so far?
" I highly doubt most women can take tires off and lift them and put them back on, especially for SUV."

This is either sexist, ignorant, or both. I put myself through school working as a mechanic, and very few jobs require more strength than the average 10 year old girl has. That is the entire point of tools, they provide adequate leverage.

Additionally, it seems sexist to single out women, what about older men? I've certainly met plenty of women physically stronger than me, and most healthy adults should be able to lift even a heavy 60lb tire the few inches necessary to mount it. Unless you are installing a transmission, if you are putting in significant physical effort then you are using the wrong tool or technique. For instance, for the other commenters that mentioned difficult lug nuts-
Go to harbor freight and purchase a 1/2" breaker bar, at least 18" long but preferably 24", along with a socket to fit your lug nuts. To crack the lug nuts, use your body weight and bounce on one foot. Even if the shop that installed them didn't over-torque the nuts, road grit and salt can make them very tight. Carry that tool instead of the provided wrench, it is far easier and safer, and shouldn't cost more than 25$.
Seems quite similar to https://github.com/kelseyhightower/nocode
With synthetic oil you are far less often required to change oil due to time. Oil just doesn't degrade like it used to.

Also, oil changes every 6 months was mainly used as an appropriate time frame in case someone forgot to watch their mileage, with an average of ~14k miles driven in a vehicle a year that averages an oil change every ~7k.
This looks like an empty github repository. Am I missing something? ... Oh, is this a joke? I'm slow on the uptake.
I was not aware there were a subset of consumer vehicles that were considered 'fleet vehicles.' A quick google search doesn't show me: beyond crown vics and f150 (all of them?) how do I find the full list of fleet vehicles?
Purely as a matter of statutory construction, Ginsburg's dissent seems better reasoned.
Russia doesn’t need Snowden to do anything more than

A) make the US look like a failed democracy

B) seem to be living happily and freely in Russia

I would suggest without any qualification, that Putin probably protects Snowden quite astonishingly well from influence or persuasion by any faction inside or outside the country. They need him to feel safe and protected; the rest of his behavior can then be the natural result of this.
Scientology does the exact same thing, they have all kinds of programs targeting addicts because they're easy game.

If your business model starts to look like a copy of Scientology you should probably question your ethics.
1Password X is an extension that is sandboxed. However, default sandbox is not enough. We also spent a huge amount of effort on its security model. Here is more information about it:

https://support.1password.com/1password-x-security/
Looks nice! What are you using for the backend?
> "What is x + y?" which could be easily done faster on a desk calculator.

Yes, assuming you're already sitting at your desk, with your desk calculator in hand.

Also, this might be a generational gap issue here, but desk calculator? Not smartphone? (And if I'm at my desk, my goto is usually "ipython<ENTER>x+y<ENTER>" anyway.)
The case of eliminating 3rd parties in transactions brings to mind a further qualifier for blockchain use cases: The application has to tolerate irrevocable transactions.
Java's library is like Barbie - it has everything. For a standard library, it is insanely complete.

I was going to say that C probably had more complete non-standard libraries than Java. But, on reflection, for the price of writing a JNI wrapper, Java can use all those C libraries, so Java gets the superset - its own plus C's libraries. In that environment, it is obviously impossible for C to win.
I have definitely found that controlling the sound around me has an immense effect on productivity, and that I can use different sounds to influence my work. I use several tools for playing non-music sound when I'm working.

SimpleHabit Focus Player (beta) [0] and Focus@Will [1] both play instrumental-y type sound, not really music per se. These two require a subscription but are inexpensive relative to the productivity boost they provide. Then SimplyNoise [2] and Zero Noise [3] for playing just colored noise in a noisy environment. The former uses Flash, so the latter is a bash script I made that's similar. I use the Spotify Focus playlists like Deep Focus sometimes, but they're more general and not as good as the dedicated services.

I find these are especially good for combatting interruptions, conversations, and variable noises like conference calls. Sometimes I'll use something upbeat and EDM-y to get into flow when working on simple things.

Another recent HN thread where I listed a few more related suggestions is https://news.ycombinator.com/item?id=14886317#14888870.

[0]: https://www.simplehabit.com/beta/focus

[1]: https://www.focusatwill.com/app/music

[2]: https://simplynoise.com/

[3]: https://github.com/tedmiston/zero-noise
The Watcher
And you thought, "what a great opportunity to hire someone who has some fundamentals and a lot of potential for growth!", and hired the one that seemed most promising?

If I'm reading between the lines of your comment correctly, I don't think that's what you mean, I think you mean that this was a problematic experience. If that's right, I don't really understand that reaction: this is a nascent field, the ready-made experienced work-force is expected to be much smaller than the demand, with most positions filled by new entrants gaining experience rather than folks who already have it. This is the fundamental challenge and simultaneously the great opportunity of running a business in a nascent field!