skysight-inc/HackerNews huggingface dataset:
Physical security is so important. I was really surprised when the Xbox team moved from the RedWest campus to Studio A.

In RedWest, we had a building that was pretty much all Xbox employees, and other Microsoft employees couldn't just badge in. In Studio A, if I remember correctly, it was all just public access.

The consoles are everywhere, and people's offices weren't normally locked (before most people moved into to bullpens, which didn't even have doors).

For the most part, you can trust the employees. We had take home consoles that were signed with the proper keys to run retail games, but could also be debugged and get crash logs, and those were fairly safe and well tracked. (You were told, don't let your friends see/play them) But you can't trust anyone else who just randomly enters the building, and with teams so big that you don't know everyone, politely holding the door open for someone is just asking for it.

Source: I worked on the Xbox 360 team.
The title of that page doesn't give me tons of faith :)

> Statistics show that feminists with multiple partners have a very high chance of divorce and lifetime alimony paid by a man

lol
Now you have to think about backup, transporting across borders, etc.
I'm in a similar boat with regards to possessing a good deal of knowledge and skills that could be considered 'irrelevant', as they would look out of place on my current resume. These non-linear career paths typically give an individual a level of intellectual depth that might otherwise be difficult to obtain, and the added knowledge allows for added meaningful connections and creativity.
A lot of modern cars with OnStar have this.
Thanks for the service! It's very useful.

However, I find that quite a few of the providers have wised up to the domains and more often than not I am now unable to use mailinator address for signups (even with the alternate domains)
Can you explain more about how this would address security concerns?
And spaffing your encrypted secrets to the wind allows anyone to have a go at cracking your keychain.

YEah its "universally available" but so is having a few git repos, or god forbid one's own server or two.

Blockchain has very limited use outside of a system that has lots of money and requires zero trust immutable log of things, which can tolerate very high latency and long period of inconsistency (ie a trading platform.)
I know, and it's kinda sad, but not really. Nintendo tried the "most powerful" tact again with N64, and even if they did not insist on using cartridges, I doubt the system would have had a clear cut graphical advantage over the PS1.

The SNES was the perfect combo of better color pallet, better gfx effects, better audio, and a better controller, compared to it's main competition. And to be fair, without the slew of brilliant games produced for the system, all that would have been for naught. But it was the whole package that made that system great. It had the best of all worlds at the time.

Of course today building a "most powerful" console would be complete folly with the PC gaming platform around, and no console maker even tries, though Sony and MS might fight amongst themselves. At the time however, consoles were truly head and shoulders above what common PC's could do in the 2d and audio realm.
Nintendo IP is far more interesting, but after living in Tokyo and meeting a lot of people that liked Disney. It's a difficult task to not have fun in a Disney property. They just make it enjoyable for everyone. Not sure if it's worth the price outside of families in the US, but I have always had a good time no matter what continent I was on, even as an adult.
This. It sometimes tough to be angry at my kids but sometimes it is needed medicine. And no, not like that.
Emotions Killing Your Intellectual Productivity
This is a minor abuse of the captive portal resolution function, that opens the web browser to let the user log in to any captive portal.

There's no real way to "patch" this.
It is entertaining that the "Why blockchain" section doesn't give a single reason why a blockchain-based solution would be a good choice.
Why do you say that Jekyll is abandonware?
I would have How It's Made on constantly in the background if I could stream more than the 3 most recent seasons on hulu. I love that show, but 3 seasons isn't near enough.
No, I agree with you.
Thanks for the writeup. What are you using to handle the WS connections on the server?
It appears you've entirely missed my point. Just because redistributing wealth is a constant uphill struggle doesn't mean you should never do it.
Funny I agree that Wayland has issues but not for the same reason as you: if you allow any application to take a screenshot if any application is compromised, so this restriction by default is normal, Wayland devs focus on CSD isn't normal though especially as it's a security issue: it prevents distribution such as Qubes OS to sow graphical security level
The Switch and smartphones have truly increased the value and necessity of having a house with multiple bathrooms.
Yes we need to change the encryption algorithm. This is just an proof-of-concept that is still being worked on.
YCombinator can go out of business and bring HN down, not all internet memes survive long, your disk can be lost in a fire, etc.

I'm not saying blockchain is better, just that it's at least reasonable. Already distributed and can be expected to survive longer than individual companies.
> And neither does anyone posting dumb links to Reddit posts

As far as I can see, the person who posted the Reddit link just responded to the claim that there's no way to manipulate the DOM as a way of saying that it is known and being worked on. You seem like a bit of an extremist by saying that anyone is claiming it is the solution. It is a potential solution, that's all.

You were the first one to assert what problem WASM supposedly tries to solve, even as not everyone agrees with your assertions. You basically set up a strawman and then shot it down.

> Yet WASM advocates like yourself treat them as fully formed solutions

I, in fact nobody here apart from yourself, has said that they're fully formed solutions, not even close. They're in development, this is not being denied.
I am also not an "advocate" for WASM, I made a post explaining why I think it makes sense, that's all. When somebody tells you they like rain, do you respond with "So are you advocating for floods"?

> Until they are released AND up to par with perf & features (inc accessibility) WASM hasn’t achieved much at all. It certainly hasn’t got rid “of the JS monopoly”.

No one is saying it ALREADY DID, we're saying this would be a success, if it did. This is really not that hard to understand. Honestly, I am not sure it's the Reddit posts that are the problem here.
oh.. then we've met ! I was the one giving the workshop, and had a good time with you people :) (and yes, there was a rename).

By any chance, have you looked into OSCquery (https://github.com/mrRay/OSCQueryProposal) ? It's a protocol we're currently a bunch working on and which is starting to make some inroads even in paid media software ; it greatly facilitates interoperation between multiple OSC-compliant software since it allows multiple software to easily query all the OSC nodes of each other through simple JSON over websocket communication.
Never said becoming a median salaried neuro surgeon was more likely than running a decent startup but it is an argument against MDs having a smaller earnings cap than other professions.
You presumably quote that as if there was a contradiction there, but there isn't.

We have fairly recent cases of children willingly blowing themselves up in Syria. All it really takes is the promise of a glorious afterlife, possibly combined with a life of deprivation in the here and now.

Being sacrificed to the Aztec gods was a great honor, it was probably voluntary in the majority of cases. As a rule of thumb, you don't want to sacrifice the unwilling, it kinda ruins the show.
I would guess the OPs concern is inadvertently providing access to entities other than Github. If you polled from the inside then you could be sure that the only thing you would need to worry about is how the data that is pulled down from Github is parsed because you are not providing access to anyone at all, including github.
If you'd be recording a huge number of phone calls, such size reduction might bring significant savings.
As passionate as I am about accessibility, I try not to use an accusing tone. There's no way we can know the state of mind, priorities, and constraints of the developer in question. Even large companies don't have unlimited resources. So we can't fault developers for looking for ways to do more with less. We just need to do what we can to make sure developers are informed about the pitfalls, and plead with them to consider important user experience factors like accessibility.
The fact that the data is encrypted means that it can literally be stored anywhere. You can throw it in a local file or in Dropbox/Google Drive/iCloud.

The trust issue also doesn’t matter cause if the encryption is right, then third parties wouldn’t be able to read your data even if they wanted to.
> I will say the ability to go from couch/TV/projector to bed and still be playing the same game is awesome.

WiiU has your back there too, assuming your house is not too big. I do kinda wish the Switch managed to keep the feature of dual screen play. Not having it makes my hopes for a new Mario Maker for Switch pretty faint.

> And yes, FFVI is the best JRPG of all time.

Preach.

And yes, I live in the US in a small town and my commute to work is on the order of ~5 minutes.
It's much riskier if you're in a particular, relatively narrow vertical - there are not a lot of survivors in that business that are pure toy & game makers. Sony could eat the PS3 and a string of unsuccessful portables. Nintendo probably can't. You don't have to be a cynic to be surprised at their continued success - statistically-inclined is enough.
Suggested practice #3 is equally as important:

> Provide a secret token to ensure payloads are definitely coming from GitHub. By enforcing a secret token, you're ensuring that any data received by your server is absolutely coming from GitHub
Just filter by length.
I agree, they are obnoxious to use as classical scrollbars.

They've also eliminated the ability to incrementally scroll by clicking above or below the bar, now it jumps absolutely to the position you clicked! So when you miss the bar, and it jumps to wherever you clicked, it's unobvious how to get back to where you were before the misfire. No more arrow buttons to click on either. It's an egregious UX regression as a trackpoint-only user.

My impression is that the GNOME devs are all using touchpads and/or scroll-wheels for scrolling now and don't click on scrollbars, so they prefer to not see them and couldn't care less about how hard it is to locate and operate them via clicking.

Supposedly GNOME is the accessibility champion of FOSS desktops, but that might have more to do with the dismal state of FOSS desktops than anything else.
This is a good idea. You listen on some publicly available endpoint that doesn't have access to your internal network, you vet the messages you receive and push it to a message queue.

Then your server running on the internal network manages to connect and pull messages from that queue.
Most blockchains, including as far as I know all Bitcoin based blockchains (including Bitcoin itself) have two types of seeds embedded in them.

First the IP of seed servers (nodes) and second the hostname of a DNS based seed lookup.

The DNS host name as well as the IP addresses of the seed nodes are actually embedded in the source code itself.

They exist for new peers to discover people to connect to. And if the case of seed nodes they also act as peers themselves. If all those nodes and the DNS seed go down.

The DNS is constantly rotated to contain A records for a large number of peers which new peers will randomly pick from.

In the case of Bitcoin the seed servers are all run by different organizations and there are a lot of them. Smaller coins may actually only have 1 or 2 seed servers all run by the same people.

Some blockchains allow multi-cast based discovery but that only helps if you happen to be on the same network as another node.

Best link I could find with the time I have: https://bitcoin.stackexchange.com/questions/14371/what-is-a-...
md5 tagging at the Hugo level has been talked about since 2014 and it's still no where on the horizon. If SASS support still isn't out yet, who knows how long "later" is.

> Once that’s added the reasons to use Jekyll, which is essentially abandonware, will shrink to zero.

They are working hard on Jekyll 4.x and huge sites like Docker's documentation[0] use Jekyll. I'd still feel comfortable using it today.

It really comes down to preference IMO. Jekyll is more than adequate to use for a blog or large site. If you like liquid's template engine and enjoy having the ability to write plugins in Ruby then it's a good match.

[0]: https://github.com/docker/docker.github.io
A post about GTK on HN? I bet the comments section is full of people complaining about GTK and not talking about the post.
import javax.websocket.MessageHandler;

Stayed away from frameworks. Mailinator suffers from "do it yourself" syndrome where I wanted write most things myself for the educational value. No Spring, no web frameworks, straight servlets. Custom SMTP server.

(It does use Redis pub/sub but I did write my own first, Redis was just too easy not to rely on)
This is a valid statement. I think it can only be told by the experienced. Mostly, others live in optimism.
I am always excited to hear about their consoles because they always do something interesting with the human to computer interface. It also always seems just a bit childlike in its attempts at innovation which I love, and by which I mean "Imagine if you had TWO screens" is something an 8 year old would say with unwavering glee.

It's a sentiment other manufacturers miss out on entirely and that's fine, but I am super glad Nintendo is still around to fill the gap.
It upsets me more to be reminded that governments grant monopolies on not-very-difficult-to-come-up-with ideas such as any of those mentioned in the article.
Ok, so how does it work? Which stemming algorithm?

It's not helpful unless we know what it's doing under the covers.
In deep learning this is called local response normalization (LRN).

ConvNets use LRN where most active neurons inhibit other neurons at the same location in neighboring feature maps. http://www.cs.toronto.edu/~fritz/absps/imagenet.pdf
> Private storage

Easier to store a private key that gives access to a blockchain datastore than to store a decryption key + private storage file that would need to be replicated across all systems you want password access.

> HA system

That's a hosted solution, so it isn't completely trustless.

> closed-source softwares will not just read your passwords

I agree that this has nothing to do with a blockchain.
When FB was trying to peddle "Free Basics" in India, I looked up the rules for a website to be supported, and FB demanded no communication between the user and websites be encrypted.

The problem is not a technical one.
So they're using AES in CTR mode for encryption. They encrypt both key (website + login) and value (password) using the same key (wallet private key) and counter (1). [1] Which means you can just bruteforce popular domain names, xor encryptedPass ^ encryptedKey ^ domainName, and get first bytes of the password (depending on domain name length), just by going through some recent TXs at [2].

[1] https://github.com/BlockProject/b-lock/blob/8a19e0b404a8afee...

[2] https://explorer.nebulas.io/#/address/n1qmQeLTUU6fPJMs1uwTad...
Space junk mission deploys from the International Space Station
A brave new world: Can AI be sued?
A valid question IMHO and a learning experience if anyone can give a good answer. Not sure why you're getting downvoted.

I'll speak generically as I'm not familiar with the Jenkins process being exposed, and just talking it through as I'm not the OP that made the original statement.

IMHO I think by placing a queue in between, the caller doesn't receive immediate feedback on execution. They can get as little as a "Success" for every single webservice call.

Any other complex processing is handled async after the queue processes, rather than syncronously. So if some of the processing causes an exception, you wouldn't for example get a stacktrace in case a server is improperly misconfigured. If someone tries a DOS, it would be harder to DOS if your webservice endpoint just sticks a message onto a queue - rather than it doing a bunch load of executions.

I think the queue listener would still need to assume untrusted data for processing, so your presumption would still be correct.
It uses BitTorrent to scale, so it must do so. This is so that your instance wouldn't go down if your video blows up. I consider this a tradeoff worth making, do you have a better solution?
Both go hand in hand IMO
Why is gnome still the de-facto default DM? Is it just that gnome 2 was great, so gnome 3 (despite practically a new project with a new goal) inherited that position? And not just RedHat. I would expect Debian to ship with Cinnamon or xfce as the default.
In fact, these 'perfect relationships' where there are zero disagreements often end with one partner developing cancer. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3939772/
Evidence is not needed for something that to me anyway, seems quite logical.
Indeed. I thought about a blog post how to configure haproxy to proxy SMTP to mailinator and stay undetectable.

But Mailinator's use case has morphed over the years. It's now used as a tool for QA and UAT testing now a great deal. That use case has spawned private domains and API access.

Same thought process goes toward services that wish to ban it, if they really want to, that's their business.

(You can of course sign-up for a Mailinator account using a Mailinator email)
Perhaps, but please don't make the thread even worse with off-topic metacomplaints.
I must say I'm surprised a Java application could handle 2.5M emails/day (29/second) in less than 1 GB of RAM.
Or if you want to be a bit more original/quirky, you can do: "Hi! This is the server[0] at XXY! (...)".

I remember getting emails like this from automated web-mailer services in the late 90s/early 00s. If in those days you would have made your server sent out personalised messages masquerading as an actual live human being, people would be quite upset and felt betrayed. That was not done. In fact, people mistook now-obviously form-generated letters for being human-written a lot more often (because the tech was new). Adding onto that confusion by being deliberately surreptitious was something done only by spammers and other vermin, maybe the occasional pranking of friends, but that was it.

In my eyes it never quite became globally acceptable, either. Some consumer cultures are more okay with it than others. I just learned what other features I need to check to suspect a computer instead of a human. If they turn out to have been trying to mislead me, I'll adjust my opinion of them accordingly.

It's perfectly possible to have an automated message not be all stiff and robotic, even putting a smile on the recipients' face, without actively trying to impersonate a human.

[0] with the assumption these notifications are sent to a tech audience that understands what a server is, adapt as needed
They used to make you pay extra for a static IP, but Comcast basically gives me a static IP for free now... I have to spoof my router's MAC address to get a new IP... I guess if you do that weekly, it is not such a huge privacy issue...
The stem for 'ponies' in the earlier figure was 'poni'. That means that 'pony' has to be stemmed as 'poni' in order to correctly retrieve 'pony' when searching for 'ponies' and vice versa.
Should be stable now for 99%.
> What possible benefit could there be to storing my secrets in a public blockchain rather than private storage? I only see downsides.

This is why you are poor. You wrap this in an ICO and easily make a million dollars.
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3673183/

Citations here:

https://scholar.google.com/scholar?cites=6395717759743355511
I'm not that attached to the Disney IP at all. I don't care about Pixar, Mickey Mouse, Starwars or Marvel. I'm very attached to video games, especially from the gamecube/ps2 to the wii/ps3 era. That was my childhood, Halo3, Bioshock, GTA San Andreas, Mario Galaxy. I got recently into more retro games from the N64/PS1 era, and I absolutely love those, they have this charming simplicity to them. I just don't feel anything for Disney, didn't grow up with it.
you read the post? because it's just "hey remember how we said this was the stable version? it isn't now" which couldn't be more perfectly CADT if it tried.
CLI-matic makes command-line parsing in Clojure easy and almost fun
https://twitter.com/dgwbirch/status/1010606861740101632
That analysis looks a little different if you recall the 'wow factor' competitor for the SNES wasn't a PC or another home console - it was the arcade machine. That part of the hierarchy disappeared completely.
Right, so compared to a centralised solution it's slightly more resilient, but still largely reliant on an always-up seed server just like e.g. LastPass is dependent on LastPass's server being up?
Actually Nintendo invented the D-pad too (kinda).
I agree, but median where? USA, Europe, Asia? I'm sure your figure is not the real Earth human population median.

There is a huge gaping chasm between the family mentality of the western world and the rest.
There are a number of institutions doing this including a formal college: Purdue University.

Other alternative like Make School and Holberton School are successfully using the model since about 3 years.
> b.lock uses your Nebulas private key (in other words, the master key) to encrypt your passwords and secret notes, using the AES-256 encryption algorithm.

Without digging any further, this is one of the scariest parts. Maybe they say AES because their marketing is aimed at ignorant people, for which a bare "AES" still sounds good. But if they are thinking AES, then I'm afraid how insecure their chosen mode of operation (and implementation thereof) might be.

Not too afraid though. The whole premise is bogus, there are less wasteful ways to manage passwords.
From the lightpaper presented, it seems to me, it's just tor with cryptocurrency. Am I misreading it and would you be so kind as to provide an executive summary why would one choose Force over good ole Tor?
I'm not sure I get your point. When I research human sacrifice, I must tacitly condemn it, because that's the civilized thing to do?

Human sacrifice is really just obsolete technology. It just doesn't really work, as the Aztecs had to figure out. It's not like they did it for fun, that would be far more objectionable.

We "civilized" people use different technology, but we still sacrifice people to it - just think of how many people die in traffic.
> Now I don't have to take it out of my pocket to read a notification.

Definitely going to look into this. I'm a blind screen reader user and, when I had a phone with physical buttons, I could have it in my pocket connected to an external braille device or pair of headphones. I could easily carry on conversations, browse the web, ask for help, all sorts of things without taking it out of my pocket, and nobody had to know I was doing anything.

With a touchscreen phone I can't really do any of that. Even if I can listen to notifications in an earphone with the phone in my pocket, I can't take care of them unless I take the phone out. Plus, wearing earphones and walking around in public when you can't see isn't wise.
Tinder gives you the huge binder full of women too though.
Would be easier to use if I could add a batch of strings at once.
you're advocating prosecution for improper sandwich distribution.