skysight-inc/HackerNews huggingface dataset:
You’re considered a consumer of the things this targets

Their real concern is protecting the supply side folks. Basically themselves

You should only be buying from an American supplier, even though we just spent 30 years shutting them all down

Because no one in this admin has a damn clue

Factories won’t be growing up out of the grown churning out parts in 6 mos because of this

The ignorant are shooting themselves in the foot as the ignorant do
Anecdotally, it still can't navigate to my old apartment in ATL (a complex that has been there for decades.) There are also lots of rural areas I visit that Google Maps has no problem finding that Apple Maps cannot locate.

There has yet to be a time that Google Maps failed to get me within a couple of lots of my destination while Apple Maps has been off by more than a mile multiple times.
I agree. In a fair comparison it is as good as the alternatives for the most part. I don't know what it would take for the collective opinion to change, probably the same thing that it would take to change the collective opinions about Microsoft or Apple or Obama. Change is hard.
In the USA it is historically and modernly generally considered a good idea. The legal term is "Fighting words"

https://en.wikipedia.org/wiki/Fighting_words
To be fair, most of the issues resulting from forcing password recycling were that people made password systems, incrementing numbers, using the months of the year, etc.

I don't know of any, and I suspect there may not have been any, widely used consumer facing systems running around those lines.

I suspect most of the problems can be mitigated in a scenario where the use gets a new password, rather than getting to create a new password.

But yeah u2f 2fa is an absolute basic limit for serious services these days (pretty much anything else is subject to phishing).
I feel really unsure about what exactly is and is not allowed by the Fourth Amendment, especially in this technological age we find ourselves. Is there some honest information out there?
Due to the fact how little 500 million passwords is out of the entire set of all possible passwords (even with single digit length) the 1 in 1000 false positive rate is extremely high actually.

See my other comment: https://news.ycombinator.com/item?id=17323068
I don't think it's unfair, the product is better than it used to be, but still quite bad compared to google's.

- One can't even search "Point A to Point B" and get a result.

- When driving, it always seems to lag behind me, barely giving any time to make a turn.

It has been years and they have plenty of resources to be competitive. The whole product just feels like it was designed by someone who is driven to work on a tech bus.
Yeah, it’s only been about a decade right? :|
It’s like Google vs Bing...Google simply has the bigger brand which it has (rightfully) earned over a long time!

For a new incumbent to surpass it takes more than being just as good
We are in the process of using GitLab for managing our design history files (DFHs) for our medical devices.

This will make it easier for non-techies to edit product requirements, without deep knowledge of git.
This looks nice. I wasn't able to install it using Brew, which I'm not familiar with. When I installed Brew on Ubuntu, brew doctor gave me warnings, and it also failed to install the repository...

paul@ubuntu:~/src/wimo$ brew tap comcast/opensource github.com:Comcast/homebrew-opensource.git
==> Tapping comcast/opensource
Cloning into '/home/paul/.linuxbrew/Library/Taps/comcast/homebrew-opensource'...
Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
Error: Failure while executing: git clone github.com:Comcast/homebrew-opensource.git /home/paul/.linuxbrew/Library/Taps/comcast/homebrew-opensource --config core.autocrlf=false --depth=1

So, I just plopped the ssh-to shell script into my ~/bin folder.
On my browser, this page flashes raw HTML before it displays the rendered page - not a nice experience. I don't like the idea of this at all, anyway - surely it's better to render content once rather than render it thousands or even millions of times clientside?
The idea is to address China's IP theft in the tech sector, amongst other shady trade practices.
This page, or something it loads, is causing Firefox to use 100% CPU. Cryptocurrency malware, perhaps?
If you are not trolling, Frida Kahlo was a woman. One would know that from a cursory glance at her Wikipedia page.
Depends on the task, but the tools I use are:

On windows I use mRemoteNG https://mremoteng.org/

On mac I use YummyFTP https://www.yummysoftware.com/
Nobody can remember a random string that long -- which might be okay, if you assume (which I don't think is unreasonable) that it is written down or remembered by a password app.
Yeah but it's a cooked, ready to serve chicken. If you had to prepare it at home that's several hours of your time, energy for your oven, etc. and oven baked will not get the same result as rotisserie.
> What would it take for that impression to go away?

Reliability?
Yup, this is very bad.

That said, I find all JS-based "zooming" of images bad. The simplest behaviour is the best here - just make the thumbnail a link to raw image directly. If you absolutely have to have that JS-based gallery, then for goodness' sake, don't do it with CSS background shenanigans - use the <img> tag, so that "right click + view image" works.

(To be fair to Gitlab, in this article "view image" works, and can be used to see images in full resolution.)

Alas, I'm pretty sure that half of this breakage are designers cargo-culting trends instead of focusing on usability; the other half is user-hostile designs purposefully making it harder for regular users to get to the URL of the actual image.
It looks like your correct. I was under the impression that the USA PATRIOT Act required all cash cards to collect that information, but looking up the details it appears to only apply to reloadable cards in that they "establish a banking relationship" with the provider.
Let them. The US already doesn't manufacture nearly at the capacity it once did for this same reason. The US can implement trade policy to either disincentive producers from leaving or incentivize manufacturers to stay if they really have to. The specific solutions to that are probably outside both our realms of expertise.

Profits are not people, so why do we care about the bottom line more than fellow human beings?
I was in Seattle a few weeks ago and Google Maps consistently had me 2 blocks north of my actual location, but Apple maps had me within 100 feet. I thought it was super interesting, but I didn't think too much about it at the time.
it must be fun to hang out with your roomate in your 40's
Nice, but you should probably serve the script from a https:// URL
It's almost like you should learn a bit about what you take from other people.

If that's too hard for you, go home and eat your mayo on white bread.
Why is it so unrealistic? For example, this line in Mumbai metro ( https://en.m.wikipedia.org/wiki/Line_3_(Mumbai_Metro) ), with 34 km of big tunnels and 27 stations is supposed to cost 3.4 billion. Surely, Chicago's 25-30 km line with just two stations (one sort of half built already) and smaller tunnels won't cost so much.
You don't know that these days because even men who start presenting themselves as women get female pronouns by default all over the place.

Not trolling, I've never seen or heard of this woman before.
yes, I also loathe the autoplay of a next episode. The idea is to keep you hooked I guess
This seemed rushed out in an attempt to capitalize on their positive PR as of late.
Usually an accident, or unconscious. In this case, I suspect intentional.

It's pretty common for someone with good intentions to institute a policy for deciding what they thought was previously disorganized and substandard. Instead, all they've done is create a way for powerful people to hide their choices behind the "objective" policy. The trick is that the folks in power control the inputs, even if they don't control the algorithm. As a management consultant, the client boss didn't tell me what to say, but they decided who I could talk to. Note the current trend in machine learning.

Imagine if Harvard had fed its past admissions into an artificial neural network! Maybe they could have hid behind that back box.
What we need is a web deliverable (i.e. not a "web technology based" Electron desktop app) Neovim frontend. Something like a Wasm & WebGL based UI layer connected via msgpack to the editor core that's running in a sandbox on GitLab's infrastructure.

I'm truly sorry if the above drivel is either impossible or insane; as an embedded guy this is most definitely way outside my wheelhouse. I should get back to repairing my oscilloscope.
thanks for the clarification, with a fixed list that makes sense.
> The whole product just feels like it was designed by someone who is driven to work on a tech bus.

That's funny because you could say that about google, bing, or apple maps. And Probably true for at least 2 of those.
> US consumers can live without another 42in tv, Chinese can't live without food and they are entirely dependent on importing that food.

All fair points, but can US politicians live with opposition from the agricultural lobby and/or rural vote? Political expediency beats long-term economic planning when politician's livelihoods are on the line.
I guess that makes sense but is NASA actually shipping off the shelf DSLR lenses to space anyway? I guess for astronauts’ personal devices, whatever. But for actual scientific instruments, I’d expect NASA is bidding out custom contracts that can easily specify how much shock tolerance the cameras must withstand.
On the bright side, at least MAGA hats are made domestically...

https://www.huffingtonpost.com/entry/trump-made-in-america_u...
somehow I manage to never visit Cobb
I use qutebrowser (has vim-bindings), sway wm (I've customised it to have vim-bindings), zsh (with vim-bindings), weechat (with vim-bindings), mutt (still getting started with mutt, but it has vim-bindings too), and vim itself. These are pretty much the only pieces of software I interact with, so you can imagine how central vi/vim-bindings are in my life.
For the commenters who missed it, here’s the context:

> People were trying to hack into his Facebook account, which was quickly disabled. The pages of his children were targeted. His wife began receiving phone calls with death threats, at all hours of the night. A petition that stated, “Chris Filardi is a disgrace and frankly does not deserve to breathe another breath,” was signed by 3,798 people.
I played through W1 (for the second time) in 2017, W2 in Jan (only got 1/3 of the way through originally), and W3 in March (first time). Each game approaches combat in very different ways in terms of mechanics but I felt that each contained the same core essence. I preferred the combat in W2 but I could absolutely understand why someone would prefer W1. I would say that W1 is a deeply flawed but still great game, W2 is simply a great game, and W3 is one of the best games ever.
Thankfully the particular website in question already spits out a file listing for you.
Problem with this is that you keep relearning it every couple of months that you need it.
You'd better try Diamond Age, which came out earlier. However, still not early enough to predate Cyberpunk 2020, which is the main issue here.
Societal viability includes, at a minimum, being able to survive one's enemies.

This needs to be said a lot more in our civilization, in 2018.
> Aho, Kernighan, and Weinberger

That must be where the name comes from, right?
The part of the JSON improvements is wrong though. Each new iteration of the standard made it worse, opening security holes, and the last clarified only one minor issue, but not the other major open ones. But it is still the only secure serialization format because it is so dumb.
Some people might think "why learn awk today when there is Python, Go, etc". But a lot of tasks (even big ones) can be done easier with this tool.

The fact that most OSs have a POSIX compliant version of it in the base system also make it very valuable, not just for the people crunching data but also to sysadmin/devops people.
I don't necessarily see that as a problem. When you get to that point, you've proved that this task, whatever it is, was worth automating. You've built a tool and even though it was clunky and limited, people found it useful.

So maybe now with that proof that a small investment paid off, it is time to take it to the next level and make a larger investment to do it better with professional grade tools this time.

Yes, you have to start over, but if the other alternative was never being able to get to that point in the first place, it's still better overall.
That's local to your area. We still have the hand crank onions and ketchup/mustard/brown mustard/relish dispensers, and the dogs have been the same in my region for at least the last six years.
I use Netlify for two websites/blogs. It works very well and is pretty fast (they feel faster than the example blogs promoted at the Blot website). It's for free as long as you don't need extra features (that you really don't need for a simple website).
What I find very interesting is that it seems like she suffered from rather severe mental illness, but (IMHO) because of how society has responded to mental illnesses over the past few hundred years, even the people she worked with and her family were very reluctant to talk about it. "Karen [her mother] declined to discuss Profet’s behavior or psychological state." It seems the shame of mental illness itself may have lead to some of her problems, and maybe have dissuaded her from getting help earlier. At the same time, she did seem to reach out for some help, but I guess it just wasn't enough.

Even more so, it seems like her own family may feel this shame or be in denial if you look at the Nature link [0] provided by wglb. Her mother claims it was "physical" pain that drove her away, and caused her poverty, and that religion "sustained" her. Physical pain does not typically mean you stop talking to your family and friends for decades. And never mind the fact that she claims that her daughter didn't know people were looking for her. This quote from the original article I also found interesting about her disappearance and the family's response. "“I’ve found their reaction to her disappearance odd,” Eubanks says." It doesn't give any actual details, but just an odd comment for someone to make, and even odder to add it in the article.

It's good that she's back with her family, and hopefully receiving the care she needs, but the family's response opens up more questions to me than answers.

[edited to add: This seems a bit conspiratorially in retrospect, unintended. The only real point I was trying to make is how our view of mental illness plays a large role in how the mentally ill deal with their illnesses.]

[0] provided by wlgb http://blogs.nature.com/news/2012/05/missing-biologist-surfa...
> how many people actually use such tools for actual day to day dev

According to an Xoogler acquaintance, he used a web IDE for all his development; I'm not sure how widespread this is in Google, but the answer to your question could be "lots".

(Any Googlers want to chime in with estimates on % of devs using web IDEs?)
To be honest, after a few hours into observer_, I started to hate the constant rain. That and that random glitch effect.

Night/rain/neon is great, don't yet me wrong, but in small doses.
The Carrying-Cost of Code: Taking Lean Seriously (2011)
It's not just a response, it's an over response. When we say people have "an allergy" we do not mean that they are uniquely vulnerable to an irritant and their body must compensate for it, we mean their body unnecessarily responds to a benign marker.
I think the method you're describing is equivalent to a bloom filter that only uses one hash function per key.
Societal viability includes, at a minimum, being able to survive one's enemies.

By that argument, all of western Europe didn't save a viable society since Germany was able to defeat them.

I don't agree with that.
> You should only be buying from an American supplier, even though we just spent 30 years shutting them all down

> Factories won’t be growing up out of the grown churning out parts in 6 mos because of this

If you wanted to reverse the trend of all the American suppliers getting shut down, and re-build the American manufacturing base, what actions would you take to accomplish that?
This, a hundred times over. If you actually sit down to write an AWK script, instead if trying to jam it into a one liner, you'll find that it's actually a fun, pleasant language for simple data processing tasks.
This seems to be the book - https://www.amazon.com/Operating-System-Design-Vol-Internetw...

It looks the the second volume that goes with "Operating System Design".

I can't be 100% certain, as I didn't find a table of content for either of the 1st edition books, but the 2nd edition of "Operating System Design" includes a section in implementing ethernet, so perhaps the two volumes got combined into one for the second edition.
Thanks for that list, subscribed
Perl was basically written because Larry Wall found Awk's syntax to be a little too cryptic. In the language design business this is what we refer to as baby steps.

Also, Awk isn't great for making reports, which is why Perl 5 to this day has an awkward report creation system[1] that looks like some COBOL refugee instead of idiomatic perl code.

[1] https://perldoc.perl.org/perlform.html
That isn’t true. The USA is a bigger producer of carbon per capita, but not pollution, which is defined very differently. This is why hebei cities have many AQI days above a normal 500 yet everyone freaks out whenever AQI in the states breaks 100 during a forest fire.

The EPA has never really bothered that regulate carbon, but they come down hard on the kind of air, water, and soil pollution that exists in China.

Should the USA do more about carbon? Ya, global warming sucks. But the EPA has solved the pollution problem that it was originally envisioned to solve.
ClojureScript with Webpack
The Search for Cancer Treatment Beyond Mutant-Hunting
You just have to need it more often ;)

It can be really helpful in mundane data/logs analysis, for example.
> and none of those sites have ever suffered a public breech

Yet. That you know of.

> Every here lives in that glass house.

No, some of us use password manager software for exactly this reason - so we don't use the same password across multiple accounts and have a smaller blast radius when/if a password is compromised.
[Targeting Intensifies]
Network latency would hurt. Maybe you could compile neovim backend to wasm instead and run it sandwiches in the browser as well.
Are you aware of the pitfall I've mentioned here?: https://news.ycombinator.com/item?id=17323068

Just making the possible passwords be 10 chars and contain chars out of a set of 62 (lowercase + uppercase + digits) gives me 0.05 sensitivity at 0.00000001 (0.000001%) FP rate.

Edit:

(This is reply to w8rbt below, here since HN has decided I cannot post anymore for next who knows how many hours.)

I'm aware of this and wouldn't treat a bloom filter as the final decision maker if there is a hit but many people seem to act like it is intended to be one and bring up its FP rate as low enough, i.e.:

1. This comment and several of its replies: https://news.ycombinator.com/item?id=17322692

2. This comment telling me false positives don't matter: https://news.ycombinator.com/item?id=17323438

3. Both of the linked bloom filters don't mention that if there is a hit you should check with https://haveibeenpwned.com/ API.

4. (Of course, this is HN after all!) my comments pointing this paradox/pitfall/whatever out being at negative point scores. I've literally lowered my score for saying "hey, 1 in 1000 FP isn't actually super accurate and almost sure hit is a good hit". And there are one or two green named users who seem to be criticizing this bloom filter with freshly made accounts, exactly because of this BS.
Awk is an amazing tool, and everyday I use it I wonder why I haven't learned it earlier.
The dividends of surviving WWII and will to achieve have waned into near atrophy in the US. Mere construction of an apartment building has become a herculean task.

We're also drowning in information.
>> in your case was the consultancy owned by the people making these short-term profit maximizing decisions[?]
>It was a publicly-listed company, so that'd be a yes.

I'm a bit confused. I stated that public companies are not often owned by the people who mange them and that is a real problem. You are asserting that all publicly-listed companies are managed by their owners. That is just wrong. I own both TSLA and AMZN and of course there are hundreds of things that need to be done to make a sustainable business. Just talking past each other at this point, I think.
E-peen swinging lives strong in IT, sadly.

Just observe the kind of kindergarten antics some in the _sec world will get up to...
This is exactly my worry.

1. Embrace Git by buying Github

2. Extend Git, fork git to add Github specific features (Basically integrate https://hub.github.com/ directly into git)

3. Extinguish, by gradually making Github incompatible with the original git. Then stop development on the forked git and push everyone to a proprietary product.
> * I presume this is not the first time the manager was shitty to OP since OP asked it in general terms how should he manage his manager*

This is not a terrible assumption, but assuming malice on the manager’s part is. Maybe it is a shitty manager. Or maybe the guy asking is a shitty employee who’s constantly screwing up. Maybe it’s something else entirely. There is too little information here to say.

> Is it indicative of good managerial skills that OP felt he should ask about the matter on the internet and not the manager himself?

It’s indicative of a poor relationship. I can’t say whether the issue is with the manager, the individual, or both.
Libraries for checking Pwned Passwords in your 7 favorite languages
The relevant data is how many new projects (open source) will open on github in the future. I’ve delted my account and no longer collaborate on project who are left on github.

What’s important is open source.

Microsoft is an acceptable option to many still, no matter how bad it proves to be, over and again.
Hey guys, I just created an API with my App for WhoScored. Its currently running very 15mins.

https://getdata.io/data-sources/5470-football-statistics-foo...

Will update again once I got another API setup for StatsZone when ready.

By the way, how often do you guys need data refresh for? Once I get some feedback I could tweak my app to increase the number of frequency.

Also please do ping me if you want to register your webhooks. My app only supports only one webhook per API at the moment. I will try to get it properly extended so that all your webhooks can get registered.

My email address is garyjob@getdata.io
Your math is bogus. 7-8 bits? If there's one entry, that would give false positives of 1/256, or 0.3%. Even given 1k entries would likely hit the vast majority of entries.

Or, flipping this: every time you add a password, you check that it hasn't been used before. You can only set 256 passwords, total, before the space of truncated hashes is filled.
Its easy to forget that Microsoft hasn't actually taken over control of GitHub yet.

The big announcement was that they have entered into an agreement to acquire GitHub, after slogging through (perhaps) months of legal, accounting, and regulatory paperwork.

There very well may be more bumps in that graph, as the news sinks in, and when the deal actually closes.
Do what exactly? Check for bad passwords by inspecting traffic...?