skysight-inc/HackerNews huggingface dataset:
I got a Yubikey for free through Ars Technica, but I haven't set it up yet. Regrettably it was a base model instead of the NFC model, which means I'll have to grab several adapters to be able to use it with my various Android devices, all of which tie to the Gmail account.
Lots of people like new cars and being able to have the latest year's model every 3 or so years is a big bonus for people. Same a majority of people like having the latest iPhone or Android flagship phone.

Not everyone places value purely in the monetary realm. Some people view cars as a status symbol. There is also less hassle with leasing.
I was reading on the computer or, away from my desk. I don't want to spell out exactly what I did, in terms of management, but I'm certain I wasn't the only one doing it.

When you're a software engineer, you get a lot of leeway in terms of expected behavior. Especially in silicon valley companies the size of Google, it's easy enough to seem like you're working your ass off, while doing your own thing on the side. It's all about cultivating an image in the beginning and projecting it. People are mostly busy with their own anxieties and career concerns to scrutinize you.
If they "use (physical security keys) in place of (passwords and one-time codes)", that would no longer be MFA: they're authing strictly with "something they have".

A more in-depth quote is later in the article: "Once a device is enrolled for a specific Web site that supports Security Keys, the user no longer needs to enter their password at that site (unless they try to access the same account from a different device, in which case it will ask the user to insert their key)."

The parenthetical seems to imply that they're doing initial auth (and thus cookie generation) with password + U2F, and then re-validating U2F for specific actions / periodically without re-prompting for the password, similarly to how GitHub prompts for "sudo mode" when you do specific account actions.
U2F actually does prevent phishing since the domain is included in the token generation.
Lots of great comments so far, but I would add that an alternative approach would be to find an open source project that you feel you could contribute to. Start at ground level fixing bugs and work your way up. It will look great on your resume and would be way more productive than just focusing on interview prep. If nothing else it will help you determine if you actually do enjoy programming.
I use machine learning for address extraction. Very sorry for the inconvenience, the website is back online
CYA – System Snapshot and Restore Utility for Linux
I'm originally from the 505, and now have an evap cooler + whole house fan in Denver. I agree that swamp coolers are very popular in Albuquerque, but I can't recall ever seeing a whole house fan down there. Are they fairly common?
They've already gutted the Migratory Bird Treaty Act [1], declaring that it now only prohibits acts whose intent is to kill covered migratory birds.

For example, if you intentionally destroyed a habitat that you knew was full of nesting birds covered under the treaty, knowingly killing them all, because you wanted the land cleared in order to build a building, that would be OK because the intent of the act was to prepare the site for building, not to kill birds.

[1] https://www.washingtonpost.com/news/energy-environment/wp/20...
Out of interest, what linux apps have you paid for?
TC or GTFO
> I think this is the first time I've ever seen someone use Goldman as an example of a "cool" company.

It's in comparison to the current perception of government employment.

Goldman and Google are phenomenally cool by that standard.

“Can X be made as cool as Y?” is a valid question when Y isn't very cool if X is even more uncool.
Presumably the captcha changes after submitting, but the field doesn't clear. The previous captcha was probably "syruc".
>> It's fascinating to me a country can be invaded and occupied by their neighbor and the world does nothing about it.

See also: Palestine
ME is the vulnerability.

It's like a branch in your code that does an escalated execution of any input.

Yes it's good to put a fence and prevent it but the better route is to excise the logic from your code base completely.
Show HN: Jump Directory – Quickly move between commonly used directories
Are you implying that those working 9 till 5 leave at 5:30?
> “We should all be thanking the Valley Bros that made The Spinner – it might just be what it takes for folks to sit up and take note of (a) how this crap works (b) what it is designed to do (c) how fucked up it all is,” Aral Balkan, a self-described cyborg rights activist, added. “The Spinner is surveillance capitalism in its purest… The Spinner is surveillance capitalism’s Martin Shkreli moment.”

Well, that's an interesting choice of example, because Shkreli went to jail and nothing much else has changed (in fact the Trump administration is talking about forcing prices up outside the US too).
Which Movies Get the Science of Time Travel Right?
"I fear GitLab will fence off future functionality with even more tiers at random" our goal when introducing the new tiers was to put new functionality in then, not to move existing functionality away. In the future we might move functionality between tiers to keep the grouping logical but we won't do that lightly let alone randomly.

New functionaly is made iteratively starting with the minimal viable change. But they should always function and additions should land in the same tier. If we missed the mark somewhere please let us know.
One thing that's leaping out of me in the course of this discussion is just how different ASD is from Cluster B, they affect different parts of the brain for different reasons. Cluster B largely happens as a result of trauma, and individuals on the spectrum can absolutely be traumatized and so develop emotional deficiencies. But this by no means happens with everybody on that spectrum. ASD largely affects the sensory parts of the brain and so while it has often dramatic effects on empathy, it does that for different reasons than 'mere' trauma. People can feel emotions without being able to sense them in others. (empathy) Trauma affects your ability to feel them at all.
Show HN: Doodles – Deterministically build BPG codecs from source
In general I feel like implicits are not a great feature.
i'm curious why did you quit?
Final draft for ISO/IEC 9899:2018 [pdf]
It depends strongly on where you go. I dropped out in my 20's because I was learning bugger all from completely disinterested lecturers. I'm picking it up again at 31 (new university) and I'm not only mostly enjoying it but I'm even enjoying "bullshit" subjects that have nothing to do with CS.

Some universities (I would assume most) are businesses that print degrees and answer to shareholders, others are learning institutions that answer to students.
One woman’s race to defuse the genetic time bomb in her genes
I think "for example"
> That's probably got more to do with the traditional link between pay and seniority, than to anything really related to skills: a relatively small disruption in productivity is handsomely offset by a big net cut in salary expenses, as the younger employee will likely command a much lower wage.

Not really. Large scale layoffs are way more disruptive and expensive than the savings by rotating into lower seniority people. Every company we work with aggressively hires from its transitioning employee pool to save institutional knowledge and severance costs. Some even provide a multi-month working period to give them time to find something internally. A surprisingly high percentage get rehired.

But the simple fact is that most companies don't employ a workforce that can be "trained on a new machine" and be just as productive as someone who has years of experience with it. Its not like learning another programming language. Skills gaps are real.

Source: I work for a company who helps people who lose their jobs to layoffs
Exactly. You must ask yourself what you want from this. If it's a secure-ish job, good pay, and relatively low-stress it's pretty easy to find.

If it's The Social Network style code-bro'ing, coding the cure to cancer, etc; well that's pretty easy to find too.
Well yea, that's what I said. If WASM shared libs works, then we can cache runtimes, that's why I said it's the best solution. However shipping runtimes with user code, means it's basically not cache-able in a generic, multi-app sense.
It is funny to see the repeated squares algorithm every time it is rediscovered. Knuth, unsurprisingly, had one of his earlier papers involving it. He presented it as related to addition chains and shows that just repeated squaring is not always superior.

I'm curious what all came of this effort, seeing it is marked 2015. It is also fun to see benchmarks of this method used in executing fib.
I wished this update came with gitlab.com-wide project search. But looks like the "improved search" still didn't include that.

Github-wide search is great! I wish Gitlab had something like that. That's one of the things that's stopping me from switching 100% to Gitlab.

The site-wide search on GitHub allows me to explore code snippets, learn how someone else uses the "foo" syntax, see the trending repos in a given language, and so much more.
My hope is that Gibson emerges from whatever hole they've dug for themselves and get back into just making good guitars.
>One of my purposes in interviews was literally to get the candidate to say they didn't know.

This. It's ok to admit you don't know everything in an interview. Some of my most glowing feedback from interviews came from interviews where I answered questions with a flat out "I don't know"
I'm pretty sure even a publicly accessible post can be monetised if subscribed users are 'clapping' on it. Feel free to correct me if I've misunderstood.
Friend of mine bought a home and was eager to try his whole-house fan, not realizing that you need to crack open a few windows to replace the air being sucked out.

The fan worked but pulled its replacement air through the fireplace flues, covering the whole living room in soot. Not fun.
I barely see the problem. Sure, the header and footer aren't perfect, but stupidly large? I also don't feel any "cpu melting javascripts" and my PC is barely usable when I compile anything.

For me, Medium provides a very readable experience that is much better than the average static blog. And I don't have to fear a malware ridden page like an old Wordpress installation.
I'm also interested in this question. Because looking at myself, I have paid for several apps on both Windows and MacOS but never on Linux. Although to be fair I stopped using Linux as a desktop OS before I had the economic security needed to purchase apps in the first place.
Castles, canals and coffee: my first week as a FreeAgent data science intern
> What exactly makes it terrible "for us, their readers"?

Adding to GPs list ("stupidly large sticky header/footer and without cpu melting javascripts"): also the modal box saying "Pardon the interruption" every time I go to a medium based blog.
It's not even a culturally US-based thing. If anything, it might be the culture of some specific places in the US, likely places where programmers are dime-a-dozen and you can afford to exclude good people because great people are applying too. In the Midwest or Appalachia or most places in the South and most places in the prairie, companies are just glad someone is applying.

I have absolutely no hard evidence to back this up other than anecdotes from my network of colleagues, but the only places I've ever heard of doing programming challenges during an interview is the kind of places where programmers collect en masse. SV, Seattle, Austin, NYC, Boston, the places where when you post a CS job, you expect thousands of qualified candidates to apply.
Many modern drives will encrypt the data if you enable a HDD password. HDD passwords can't always be unlocked using another make/model so if you enable a HDD password on your you actually do risk ending up in the same situation.
IIRC, the physical address is required for tax compliance.
> U2F is the only method that protects against (2)

Would you be able to elaborate on this? I'm not understanding the difference between TOTP and the physical key from the article for this scenario.
Not OP, but: I have sunk a few hundred bucks into Steam after it added Linux support. I had a Steam account before that, but I never purchased anything that cost money.
Do satirical Web sites typically accept payment?
A Surprising World Cup? Not So Fast
For those interested, I recommend reading how FIDO U2F works. There's more in a security key than just FIDO U2F, but FIDO U2F is easily the most ergonomic system that these security keys support. Simplified:

* The hardware basically consists of a secure microprocessor, a counter which it can increment, and a secret key.

* For each website, e.g., GitHub, it creates a HMAC-SHA256 of the domain (www.github.com) and the secret key, and uses this to generate a public/private keypair. This is used to authenticate.

* To authenticate, the server sends a challenge, and the security key sends a response which validates that it has the private key. It also sends the nonce, which it increments.

If you get phished, the browser would send a different domain (www.github.com.suspiciousdomain.xx) to the security key and authentication would fail. If you somehow managed to clone the security key, services would notice that your nonces are no longer monotonically increasing and you could at least detect that it's been cloned.

I'm excited about the use of FIDO U2F becoming more widespread, for now all I use it for is GitHub and GMail. The basic threat model is that someone gets network access to your machine (but they can't get credentials from the security key, because you have to touch it to make it work) or someone sends you to a phishing website but you access it from a machine that you trust.
But it is not manufactured in China. Which was what I was referring to.
TensorboardX, NLP Best Practices, Cirq, Subjectivity in AI, EmojiTalk,
it's hard to say whether or not the problems you solve should take less than 2-5 hours, but two pieces of advice:

1. in an interview, whether you solve the problem is less important than demonstrating how you approach solving problems. think about it like being asked to find a needle in a haystack.

2. don't think you have to score a job at a Google right out of school. there are lots of opportunities in less stressful environments.

ok I lied, I have more advice...

3. as an alternative, write good quality useful software
and post it to a hit repos, go answer questions on stack overflow, demonstrate your knowledge and abilities. become an expert in some area that interests you.

4. maybe you don't want to be a programmer. that's ok. your background will still give you an edge. I have a colleague that worked for a couple years as programmer and ditched it for PhD program in neuroscience (not thAt that is any less stressful).

5. consider getting professional career advice and coaching.

6. consider getting help for your anxiety. worrying whether your smart enough or how hard the problem is will keep you from actually problem solving.
> I got a Yubikey for free through Ars Technica, but I haven't set it up yet. Regrettably it was a base model instead of the NFC model, which means I'll have to grab several adapters to be able to use it with my various Android devices, all of which tie to the Gmail account.

For what it's worth, you can have multiple U2F devices. Twitter is the only website I'm aware of that only lets you register one U2F key.
Ask HN: How to ask a good question?
I know this article was written 5 years ago and all, but I wouldn't exactly call that industry stable now.

If you've been going to NAMM the last several years like I have, you'll notice some big changes like certain huge vendors (mainly the ones that don't get the majority of their business from school districts) not even showing up with booths the last few years. Gibson did this right before declaring bankruptcy, in fact.

The industry is in a fair bit of turmoil because of all of the red on Guitar Center's books right now.
They can basically do the same thing -- if you ever have looked at a product on a Web site and then saw ads for that exact product for weeks you'd be familiar with it.
I've paid for RubyMine, and PHP Storm. Not exclusively Linux, but that was the platform I was running it on.
How many people are actually free to use this product? My work uses outlook+office but, due to 101 different things, we are locked into windows and ie. How many people use outlook+office for email but are also free enough from other restrictions to be allowed linux?

Our office is so locked imto win7 that the ongoing upgrade to win10 is killing things. People are migrating to the few win7 machines to complete essential tasks that now seem impossible on win10. Win7 laptops are being hidden from the IT guys in padlocked security cabinets to prevent the upgrade. We are doomed.
No, I think I stated it correctly. Those with more savings/assets would stay and be able to withdraw from their savings while their pay isn't enough. Those who need every penny for the next utility bill would be forced to leave.
Are the APIs you need added now or are there ones still missing? Anything we can improve in the API organization?
I can't help thinking about Sleeper every time one of these studies comes out. Still waiting on the hot fudge sundae study.
Everyone thinks they're a designer because they can see things with their eyes. In reality they have no clue wha is going on. As a developer who is acutely aware of my shortcomings in design it hurts to sit in client meetings with designers. The whole process is totally back to front on about 95% of the projects I have worked on.
An In-Depth Explanation of Code Complexity
nice thread but no real definitive answer
Suppressing warnings like this is generally frowned upon, in my experience.,
In practice, the people doing the reporting don't know how biased they are.
I would say 200 employees is fairly small company; and depending on the line of business it is certainly small enough that profit margins and thus spending may need to be closely watched.

If you consider that the OP has only 10 out of 200 users that need the advanced features, but has to purchase the advanced features for all 200 users for anyone to use those features that is $45,600 a year.

Now if it were possible for example to have a mixed licensing model; buy 10 Premium licenses for the users who need it and 190 Starter licenses for everyone else then that is $11,400 a year. That is a difference of $34,200 a year so it may be the difference between being able to hire another employee or not.
Interesting article, although I wonder why this line:

Coffee inhibits iron absorption if taken with meals, helping to prevent iron overload.

is spun as a positive. Most people I know with iron problems skew the other way: they are anemic because they don't get enough iron through food.
For one they don't respect GDPR (in other words, they don't respect their users).
> he co-founded the Methodist Church with John and Charles Wesley

Close: The Wesleys were both priests of the Church of England; while founder John Wesley defied a lot of C of E doctrines and conventions, and "rejoiced that the Methodists in America were free, he advised his English followers to remain in the established church and he himself died within it." [0] Charles Wesley strongly opposed separation from the C of E. [1] Only after they died did their Methodism movement formally split off. [2]

[0] https://en.wikipedia.org/wiki/John_Wesley

[1] https://en.wikipedia.org/wiki/Charles_Wesley

[2] https://en.wikipedia.org/wiki/Methodist_Church_of_Great_Brit...
And he doesn't work in any of the big tech companies. Mike Pall as well.

I wonder why?
When no country important recognizes you as a country? eg. Taiwan
Gibson has been charging boutique money for crappy assembly line guitars for well-over 30 years now. Gibson hasn't been about "brand values" since Orville died.

That's a lot of money to pay for a logo.
> Similar story for me.

Another +1 here. I got so sick of programming interviews that I went freelance. If at any time a potential client suggests I need to do a whiteboard style interview, I decline and offer to work for them for a week at half price.
GPU/accelerated computing, photonics, non-volatile memory...

What an exciting (and disruptive) time for HPC.
No, the key thing about U2F is that it can't be phished.

Any other 2FA method can.
wasnt there a startup that submits your site to all these directories for you for a price?
Have a look at "make medium readable again", a plugin for firefox and chrome. Source is on github, could not paste the link because i am on mobile.
> But yes, a lot of musicians don't like new, which is funny :)

A lot of musicians are also highly technical artists who need and expect things to work a certain way and have practiced hours and hours within that certain way. And that's taken to the hundredth degree when you're talking about a working musician who performs for a living.

Just think of Spinal Tap and the wireless guitar system as an example of the exact type of situation a musician doesn't want.

A recent example are the automated tuners Gibson started putting on some of their guitars. That sounds amazing in practice -- I can hit my strings and bend them as hard as I want to and they'll just magically get back in tune! The reality (I didn't personally own one, so I can't share my experiences), was much worse, with many accounts of musicians playing on stage, only to have their Gibson manage to automatically detune itself.

In regards to amps, guitarists are also notably attached to whatever tone they spent years dialing in. There is a tremendous difference in sound between any two amp models, especially with tube amps.
Does not seem to happen here.
`“Hiri” can’t be opened because it is from an unidentified developer.`

Is it really expensive for a dev to get a cert from apple? I don't develop so i've never looked.
Fascinating. I don't know if this company's claims are real, the journalist was so offended she didn't do a full test of the service, but aquaintance manipulation by way of surveillance/targeted content will certainly find a market.

The tools of Infowar available for personal use. Newsfeed manipulation, psy ops, personalized propaganda, targeting your boss for a raise, targeting a competitor into a mistake, a teen targeting his parents so they be more lenient, parents targeting their kids to nudge them in a wanted direction, etc.
Zildjian also makes electronic cymbals, so they are staying with these industry trends.
ReactOS 0.4.9 Released with Self-Hosting Skills and Windows 8.1 Identification
A lot of people can use Hiri because runs on Windows and Mac too.
> I don't think high functioning autism is a disability, it's a character type that is a bit out there

If you don't understand how to interact with people, you don't understand. You need help to figure it out, or you need help to realize you don't need help.
> a country can be invaded and occupied by their neighbor and the world does nothing about it.

Western Sahara was never a sovereign, recognized state. Spain relinquished it's colonial claim over it and Morocco and Mauritania rushed to claim parts of the territory (Mauritania has since renounced too).

The closest thing to a nationally representative organization was the Polisario Front, a military-political structure based on ethnic Sahrawi affiliation. It didn't help that the area is so sparsely populated and could barely sustain an independent state in the 70s, let alone a state capable of withstanding the territorial advances of such a powerful neighbor like Morocco.
One of the people, Frans Kaashoek, has been involved in Minix as well, an OS from the 80s, also created for educational purposes at the time.

[1] https://en.wikipedia.org/wiki/MINIX