skysight-inc/HackerNews huggingface dataset:
Good to hear you're liking U2F on Krypton. Android support was released last week, and Firefox/Safari support is coming soon!
Ask HN: Is “Photo ID and Selfie” identity verification as advanced as it seems?
I have been asking around the computer vision and image analysis experts as to whether ML is advanced enough to execute this, especially the face recognition part. It seems a lot of the companies doing this are just good at the text extraction part from the ID whilst they either hand verify the photo part, if at all.

Experts and others, how far true is this? Is computer vision there yet where everything is automated and done in such a short space of time too? Also, ageing and scarring etc
Trade deals are infinitely less desirable by ordinary people than full legal integration. Imagine having to go through US-style customs every time you want to fly to California.

If two groups of people can live under the same laws, they usually should. Otherwise the legal and regulatory differences impose a 'tax' on every single transaction. California would gain nothing and instead lose an awful lot if it split from the rest of the US.

The UK is a bit of a special case because it's already done an awful lot of work on political devolution. Devolution is a process, not an event, and there's really no reason to make it an event. Dozens of former British colonies quietly and peacefully devolved from the UK and while it's conceivable that California could do the same, the US was practically engineered in order to make it legally impossible. It would require a constitutional amendment at the very least.
Just checked out the software. Since you mentioned Sidekiq, I think the main reason it worked commercially is that almost every medium-sized web application needs a background job queue.

However, very few people expect their cache system to support SQL. So the main problem is that there is little or no demand for this type of software.

Anyways best of Luck! Hope you succeed.
The hardware mentioned was an AT&T 3B2, so this probably would have taken place in the early 1980s. Access policies for such things could be quite different, back then.

Even when I was a graduate student a decade later, in a lab with professional administrators, grad students routinely had pretty much all the permissions they would ask for, because we worked odd hours and performed exotic experiments. Policing was done after the fact.

To have a grad student in Psychology with that level of programming skill would be rather unusual, though.
I have a feeling that if Woz and Jobs had never met, Woz's life would have turned out much like that of Gary Kildall [0] or Phil Katz [1].

[0] https://en.wikipedia.org/wiki/Gary_Kildall

[1] https://en.wikipedia.org/wiki/Phil_Katz
Demonstrably untrue. Consumers pay a premium for access to the Apple SEP and App Store review/analysis process (Jekyll and XCodeGhost notwithstanding, it's been a major security success)
I would absolutely love a linux version of Sketch. Can't see it happening though.
I used to think so too, but you get a lot of value for the price, especially when you consider the variety of projects you can build, the relatively beginner-friendly programming toolset, and the number of videos, books, and other supporting resources available.
This has been invented long since. On AIX it is SIGDANGER.
Painlessly managing long running processes in your views using Ruby on Rails
Not necessarily... remember Enron?
The original plugin worked with the WebDAV support in Exchange, which was removed some versions ago. To make it work properly you need to support the MAPI protocol Outlook uses, which is undocumented and (at least used to be) obfuscated.
I was 40 years old and had enough money to comfortably retire from the daily grind. This was something I always wanted to do.
Anything that sick people do less is inversely associated with mortality. The "controlling for blah blah blah" stuff can't be believed---are the researchers succeeding at controlling for everything that affects health? Not even close.

If you see a claim about food and health that doesn't spend a huge amount of time talking about the researchers' experimental or quasi-experimental approach, just ignore it.
Schools eye facial recognition technology to boost security
View individual sidekiq queue stats in sidekiq UI
Last I looked at Vex, I seem to recall being surprised that the software was not free. Was a non-starter for me as a hobbyist.
Is there any way to generate a new key on the device? What steps can a paranoid user take to mitigate problem (1) above?
How many years of 12-hour days will it take to realize your $250K?

If you were working 9-5 and I offered you a night job for 4 hours a day, would you take it? If I promised you $200K if you did the night job for two years, would you take it? If you got $0 if you quit before the two years was up, would you take it? I can pull out of the deal at any time in the next two years.

I know a guy who scrubs toilets from 4am-8am M-F for $10/hr. He expects that to turn into $100K in about 5 years with careful investment. If he just stuck it in a 0% savings account, it will be $50K in 5 years. Financially, this seems to be a smarter plan than yours. But if you really enjoy what you do in your four extra hours per day, and you really hate scrubbing toilets... maybe your way is better. The point is, there is lots of room to question your choice.
I wish smartcards had gotten more support. I like that it can combine two factors in one authentication mechanism.
There's a third issue - support.

I worked for a place about 15 years ago which was trying desperately to retire its previous flagship product in favour of the new version. The new version was better written and more scalable, but the major value for them was that they had made a big mistake with the old one -

The gave away source code and allowed customers to customise the software, but they still honoured support contracts. This had turned into a huge cost, as engineers were having to go out to customer sites and spend days figuring out what the customer had done.

You can't effectively support what you can't see, so you can only really support OR allow modifications.
Reminds me of some of Isaac Asimov's stories, where all ships are powered by nuclear reactors that flash water into steam for propulsion.
Someone Uploaded What Look to Be Apple’s Internal iPhone Repair Videos
They are time-limited, at least? But yes, I've had similar arguments with coworkers who've started using 1Password for TOTP in the same way.
I like the idea of using email for this. Are your users signing their commits and does the git server validate the commits when receiving the emails?
I am not sure that creativity and criticism are not somewhat orthogonal.
Countries within nation states are not uncommon. For example, the Kingdom of The Netherlands consists of multiple countries: The Netherlands, Curacao, Sint Maarten and Aruba. The same can be said for example for the United Kingdom.
What to do with too much advice
I didn't say he was a monster. I said he was considered to be at the time that he was General during the Civil War. I chose that wording carefully.

In a nutshell, my understanding of the war is that Lee was a brilliant strategist and tactician and the primary advantage the North had was numbers of soldiers. Grant did not hesitate to use the only advantage he had, resulting in a high number of deaths to gain the upper hand. Lincoln had his back politically and did not replace him. Lincoln apparently believed in him.
Lime says it handled 6M rides on electric scooters and bikes
What's the point of "submitting" to f6s? I only ever use them when I'm entering into a startup competition run through their site. I never thought of them as a place to submit startups other than this.

Seeing a site like this on the list makes me question the usefulness of other sites that I've not heard of.

edit: Also, some of the FB groups are either completely inactive (last post was months ago) or are satire (one sentence startup pitches).
Should first world countries stop using electric cars because poorer countries don't have stable electricity?

Those who can have stable electricity and can afford this solution are currently left with subpar solutions.

Mosquitoes are increasingly becoming resistant to insecticide - let's not forget some insecticides' ingredients can be carcinogenic. Their effect don't last through the night. And require leaving the room for a few hours after spray.

Electric swatters or mosquito bats are a joke. You can't swat a bug in your sleep. If new mosquitoes can enter the room after the sweep, it's a futile exercise.

Let's not even talk about those repellents - chemical and electric. In my experience, they don't work.

BTW, an electrified mosquito net is not a high tech solution. Just a marsh of two existing solutions - mosquito nets and electric swatters.

The bait is the human in the cage. So it's guaranteed to work.

I hope there's some else can answer my original question.
I know what you mean.

To instill creativity in my direct reports, I have to smack them in the face when they fail to demonstrate sufficient creativity.

I know it sounds harsh, but they're developing great callouses on their face which they would not have obtained had it not been for my unorthodox training.

A lot of people might think I should apologize, but ask them in my presence if they would rather work elsewhere!
Don't you mean the Genesis/Mega Drive sound chip?
We still consume music but we don't play it ourselves anymore. We are missing on the many benefits(i.e. enjoyment, meaning, mastery). Same with drawing, painting and many other arts.
Full circle here, since FIDO U2F has phishing-resistance like push notifications and lets you work offline like TOTP. "Offline" in the sense that everything besides whatever you're authenticating against can be offline.
Author here... Happy to answer any questions. This essay covers just the first two days of a 19-day trip, so there are more stories to come, along with tips for anyone considering a similar trip.
Sounds as if he might have skimped on chimney-sweeping?
Yikes, what a waste of paper. Hopefully you could borrow it from the library or buy a used copy at the bookstore.
How much implicit trust do users place in the manufacturers of their security keys?
The question reminded me of this scene in Bertolucci The Conformist:

https://youtu.be/L7rX4WOKZ7g?t=1h9m13s
Yes I edited my comment. Looks like the approach of vaayu is to directly do evaporative cooling. So a chilled water swamp cooler. The commercial systems use the chilled water in closed coils.
1. I wrote down what I was looking for in someone for that role, what I wanted out of the relationship, and how the relationship will benefit/excite them.

2. I scoured through LinkedIn and made a list of potential fits and their strong suits. Then InMailed/Sent connection requests to strongest fits on my list. I found this method mostly successful...(8/10) accepted and followed through. Here's what I sent in the request:

"Hi (Redacted)! Very interested in connecting based on your background. Would love to set up a time to chat about what we're building at Flindel (www.flindel.com)"

3. Invited them to coffee (on me) or an intro call to determine mutual fit.

4. Took it from there.

Don't be shy about cold emailing/reaching out to people. More people are willing to help than you would think
It's because this supports plugins which are intended to interact with other user-space programs in order to allow for cooperative resource management. These plugins would be much harder to write if they had to be implemented in kernal-space (you couldn't use standard user space libs for making RPC calls, would be easy to introduce kernal corruption if you don't know kernal programming). So yes it's for development reasons but not to allow for a faster POC. It's to allow non kernal devs to easily write plugins.
More accurately, current stats put XP at around 4-6% of the world's desktops. Only Windows 7, 10, and 8.1 beat it. That's more than Linux and more than any MacOS version (more than almost all all of them put together). That would be ~5 million XP machines, give or take.

So we're talking about 5 million machines with an OS designed in the late '90s (20 years ago) and that stopped receiving any meaningful updates 4 years ago.

Most of them are actually ATMs in developing countries like India and they are definitely not air-gapped [1].
The POSReady XP with the bare modicum of support until April 2019 made companies take it as a green light to keep using XP in embedded systems.

Other systems running XP: many of the NHS systems hit by WannaCry last year, many of the systems in UK Police stations, most electronic voting machines and gas stations in the US, most digital signage in train stations, airports, hospitals, or cinemas, parking garage payment machines, so many POSes, even passport security in some airports!

Does this put the magnitude of the problem in perspective? It's a threat from so many perspectives. Your safety, your data, your money, you name it.

[1] https://www.rbi.org.in/scripts/NotificationUser.aspx?Id=1131...
I've gotten (and extended) the ranger kit this summer: https://www.makeblock.com/steam-kits/mbot-ranger

I've been generally happy with the price and hardware, but I've grown to really hate Arduino. Makeblock publishes a bunch of code, but it's highly redundant and poorly organized, and I find myself constantly using the slightly wrong version of different pieces of code. But IF I ever figure this stuff out, I'm slightly hopeful about controlling the Makeblock hardware from RaspberryPi.

The basic approach is to have the RPI connected to the Arduino board via a serial connection (this has also difficult to setup, but sometimes I can do serial over the USB), and then there's just a very simple protocol that runs. Once this is actually working properly, there's a fairly small Python library to do the talking, and you get the benefit of the RPI environment (logins, wifi, camera access, etc), but with the hardware of the Makeblock unit (on-board sensors, no direct GPIO handling or contention, and pluggable sensors and motors). But getting there... ugh, it's been really challenging and I only got hints of it really working so far.
Media: https://www.theatlantic.com/science/archive/2018/07/staying-...

FAQ: https://www.thessgac.org/faqs
Don't Be Scared of Git Rebase (2014)
That's an extraordinarily disingenuous take on that comment. They were clearly referring to the decision to mess with the code in this way at all, not the actual content of what was being displayed on screen. The point was obviously that deciding to use this method to cause this amount of effort/trouble and mess with the computer system belonging to someone else is the act of bad judgment. The fact they chose to do it with white supremacist messages is irrelevant to the original comment.
Indeed it's one of the most difficult challenges I am facing, the solution would be to give the power to the users so that they can discard such parsing. But first I have to ensure that there are people who might be interested in using the solution, it's the phase I am in right now (trying to validate the concept), thanks for the feedback :)
> The cognitive wants to get better, constantly constantly better. The limbic wants harmony. I also have had the experience of being prideful of the capacity to be emotional. Over time I've been able to gradually cede the compulsion of the cognitive to allow the limbic to do its job. It makes life much, much, much simpler, to be able to turn off the need to constantly understand everything.

At the risk of sounding like a broken record: mindfulness can aid with that.
That's what I thought to myself about the headline, before clicking the article. As soon as I clicked, I found that the question asked was in fact intellectually interesting, and was not well summarized by the headline. There are even more interesting answers there.

Definitely recommend taking the time to read or at least skim the article, and not react to headlines, because headlines are so often over-simplified and even click-baity.

Species of animals do appear to have natural regional differences. And maybe regional differences in humans or human languages affect animals too, who knows? There's a slim chance that animals from different countries might not understand each other because countries are a human concept.
This blog post doesn't display without enabling JavaScript. There is absolutely no good reason to do this; please, don't.
I agree with u.
https://www.sherekhudahazratali.com/2017/05/abortion-in-isla...
If there's a MitM attack, you've already lost. Sure, they can only login one time, but they're in once you provide the authentication steps.

Phishing sites collecting and using the 2FA creds in real time was discussed here, among other places: https://security.stackexchange.com/questions/161403/attacker...

With available open source like https://github.com/ustayready/CredSniper readily available, you're only going to stop lazy phishing attempts.

You only get protection if you assume the scripts are just passively collecting information for use at a later time. If they're actively logging in to establish sessions while they're phishing, it's game over.
Looks like the submission form to apply is missing using Firefox. Everything after the position descripts on all four positions is cut off by the footer. It looks like the footer and the overall page length are not respecting the size of the container.
I reckon this electrified net should be cheaper than a laser solution. It shouldn't be difficult to come up with a portable / modular design that allows for camping or outdoor work.
About 95% of the work that I do is on Linux. But I run a Windows laptop. Why? Because of the Outlook Calendar. It's kind of amazing that so many tech companies run on Linux, but the Outlook Calendar just won't go away.

Nearly everything else in Windows I can replicate in Linux; Excel Spreadsheets, Microsoft Word, they all have Linux equivalents. But Calendar? Nope.

I've seen solutions online, and I tried them, but none of them worked seamlessly. In particular, there's a plugin for Thunderbird. But it wouldn't connect with Office 365's calendar. (Email worked perfectly fine.)
U2F key interaction is not domain agnostic. That's why it's so good against phishing--it can't be collected by a fake domain to pass through to the real one.
So,

I slept great the first 25 years of my life, but I've had a ton of sleep problems as a start-up founder over the years. They developed over 10+ years building a $200MM plus company from the ground up. I was traveling all over the world, in different time zones and working 7 days a week. I would recommend treating sleep really seriously and not 'breaking' your ability to sleep.

I have learned ways to get some sleep again, but basically haven't been able to 'fix these issues' for the past 15 years. I have learned to manage the sleeplessness - and am finally back up to 7 hours or so a night on average most weeks (8 is my sweet spot). During this entire time I thought I was healthy, but sleep and lack thereof concerns me. I have read a ton on the subject, tried everything (CBT / Behavioral therapy, Hypnosis, Chinese Medicine, Acupuncture, Sleeping pills, Herbal remedies, etc). Haven't tried Cannibis.

I am currently working with 4 leading sleep researchers with decades each in helping people sleep. We're building a personal 'sleep assistant' to use modified CBT program in an automated fashion. We are in second trial this summer. First trial showed 45 minute average sleep improvement (in people sleeping < 7 hours a night to start). Most people do better with 7-8 hours / night even if they think they don't need it. I need it, but need help 'calming down' my mind enough to get it.

If you're interested in taking part in any alpha studies (after this current research round of 200 people) or learning more or getting on mailing list, email me at tom.talytica@gmail.com.

Having two daughters was rough on my sleep, but we also did co-sleeping (Asian wife who breastfed).
In my reply, I used datacenters as a term to describe mass deployed computers (for which a ME actually makes sense). I’m sorry, I should’ve clarified.
> Oh please, don't act as if "fundamentalist" didn't have negative connotations in English.

You may have misunderstood my point. Based on the assumption that the OP wants to avoid unintended insults, I was pointing out the issues one could associate with using "fundamentalist" as a term of derision.

I'm not trying to play PC-police. I was just raising the point in case the OP would want to know.

tl;dr

There are many English words that basically indicate membership in a particular group. Using those words as a term of derision is a slight against the target of those words and the original group.

E.g., "vandal", "gyp", or "hysterical". Or to whit, treating "fundamentalist" as synonymous with blind dogmatism.
Oh nice! Do you happen to know if those patches have been accepted into RHEL7?
Bostrom's orthogonality thesis!
DataScript as a lingua franca for domain modeling
A couple years ago, I saw a similar submission list for startups. Having recently launched, I took the list very seriously — checking out the sites and ranking them in order of desirability, then submitting to a couple sites each week with language that I had tailored to appeal to each site based on what they covered.

Nothing happened. A month or two later, I decided this was a waste of time. But before closing the remaining browser tabs (which were the ones low on my priority list), I decided to submit a one-sentence description to the remaining sites.

The next morning, I heard back from one of the sites [1], which not only wanted to feature my startup [2] — they also wanted to license our technology to make their website easier to read!

If there's a lesson to be learned from this N=1, it's that shorter is sweeter when it comes to pitches.

1: http://www.springwise.com

2: http://www.beelinereader.com/individual
Yeah, I probably should have referred to her by name. Remzi seems to be the best-known professor in the CS department here.
And you're being parochial. Who said "continent" was limited to North America?

The claim was that the trip can't be made, not that it can be made but is undesirable as compared with alternatives.
Our brand new, 2017 kitchen stove will happily dump unlit natural gas into the air without automatic shut-off, as far as I can tell. I've never had a burner go completely out during use, however. The highest area, lowest flow setting burner will flicker a bit when the oven heating element kicks on, but that's it.
The migration to GCP is now scheduled for August 11. See https://docs.google.com/document/d/e/2PACX-1vSSnHIgZoKXt_HuT...
Thanks for that info.

So, then, if Apple wanted to adopt a similar solution to Google - i.e. for their own enterprise security, as opposed to for their customers - could they use one of the Yubikey NFC options, or, would they have to ‘create’ a Bluetooth-specific device?

Maybe the long-rumoured Steve Jobs ring could take the form factor?!

And from an Apple customer perspective, is there a valid argument to be made that iOS devices can be, or are currently, less secure than Android counterparts because of the current lack of Yubikey / U2F options?