skysight-inc/HackerNews huggingface dataset:
That vuln only affected RSA keys generated for specific niche functionality and not most uses of the YubiKey.

> The issue weakens the strength of on-chip RSA key generation and affects some use cases for the Personal Identity Verification (PIV) smart card and OpenPGP functionality of the YubiKey 4 platform. Other functions of the YubiKey 4, including PIV Smart Cards with ECC keys, FIDO U2F, Yubico OTP, and OATH functions, are not affected. YubiKey NEO and FIDO U2F Security Key are not impacted.
This is exactly my point. Saying google solves the discoverability problem in this manner is obtuse - it's not the same thing as looking for a specific thing. If you want to make discovering new content that you might like in a decentralized manner easy, then great! I'm sure people will be excited about that. Currently though, medium does that to the first approximation.

Also, social news websites require effort to post on, and often the content that gets upvoted is the lowest common denominator of the interests of the people who currently happen to be staring at the site, rather than each person getting their own set of new content.
> But I do emphasize respecting its use in a profound way.

You did not emphasize in any profound way.

You did imply though that it invariably changes everyone, and never was anyone you know changed for the worse. So it changes everyone for the better. But you ask, surely because you are not sure, whether those who were crazy afterwards had to be crazy to begin with. So, the only thing you really emphasized was your ignorance. What does that mean to you? Everyone is a little crazy to begin with. Thus estimates about sanity are rather distorted and a small sample group not enough, especially if you are biased by preoccupation.
Chalk me up for another anecdotal "I saw it too" - You would think the upper admins would notice someone on the books for 6-8 years but they didn't do anything. Its a culture that higher education departments perpetuate.
Thank you for this resource!
I have to admit I wasn't aware of any of these fascinating and useful resources.
Thanks a million once again!
It easily gets to -40°C in Siberia.
You could start by not reading anything on Medium. That works, too.

Imagine if you start having extensions for every third site out there. It's a never ending problem.
A lot of people seem to be aware of MapBox and Apple's MapKit as viable alternatives, but Esri's ArcGIS Online also offers a lot of options for online maps, including allowing users to edit and collaborate on feature data.

(disclosure: I'm a developer at Esri)
You should at least credit Baz Luhrmann if you're going to quote that. At least put it in quotes so it doesn't look like you're trying to take credit for it.
Most of academia is toxic. Those who don't see that haven't spent enough time in it.

Or they’ve spent way too much time in. It’s like people who spend a couple of decades in a prison, they’re fully institutionalized and feel they can’t cope with the real world.
Yes, but with OpenPGP you can just rotate your subkeys. For encryption subkeys it's advised to back them up somewhere either way.

It maybe you're talking about U2F applet of Yubikey? Then it's not affected by the bug you posted. And you should have backup codes enabled.
When there is a binary on the internets available from various mirrors with the primary authority on it distributing a SHA of it's contents then we can use that SHA to verify the contents of the binary...

The issue here is that there is no trusted authority on the video, the people distributing the video are the content originators so we can use a signature to verify the video wasn't corrupted in transmission but not that it wasn't edited before it was signed.

(this technique would work well if the concern was that videos from some primary source were being edited by a CDN entity helping to stream that video to viewers, which is entirely separate from the article)
This sounds very obvious, but everyone I know who dropped out of their PhD wasn't cut out for doing one. If you are feeling guilty about reading more papers, you shouldn't be doing a doctoral degree.

On the other hand, when you're a post-doc I totally agree that there is more to life than the 'big fish in a small pond' world of academia. There is something particularly annoying about the academic environment - some combination of ego and insecurity.

Also, the pay is shit.
I think that "Graduate School in the Humanities - Just Don't Go" is a gem of an essay, because it does a good job explaining why students still enter these programs when the data screams out that they shouldn't.

https://www.chronicle.com/article/Graduate-School-in-the/448...

One thing that is often overlooked is that the US does have a very restrictive immigration system for people who don't have relatives here and can't leverage family reunification. In this case, getting advanced STEM degrees provides a path towards residency, work rights, and perhaps eventually a green card or citizenship. So in the US, these folks wouldn't be looking at a choice between getting a PhD and becoming a florist, because it would be illegal to come here and work as a florist. But there's a "shortage" of people getting PhDs in STEM fields, so we allow people to come here under conditions of limited personal freedom provided they agree to work these positions.

This power on the part of universities (the power to bestow residency and limited work right), I think, is one of the reasons STEM PhD programs haven't collapsed or faced the reckoning that would force them to change.
I feel like PhDs in Computer Science should have better job prospects outside of Academia. Some jobs, like "research scientist", require PhDs. Look at companies like Lyft that are currently hiring "Research Scientist" (e.g. https://www.lyft.com/jobs/4014499002) where they require a M.S.or PhD.
The Document Foundation distances itself from unofficial LibreOffice app
There's no reason to go into academia unless you value it. There's no reason to be negative about it just because it looks like pretensiousness.
A home built in the 1860s uses the principle of the whole house fan, but without the fan: you just open the windows at night and close 'em during the day, and you can regulate more with an attic trap door. It works well most of the time, but sometimes there's problems.

Namely, if humidity gets trapped in the house, when you shut the house during the day, it can smell like mildew. It can be near-impossible to remove the humidity from the house without an air conditioner of some sort, or a dehumidifier. An evaporative cooler at night would make this worse because you're adding humidity.

Another problem is multiple storeys. The top floor will always be hotter, and it can build during hot days and leech the cool air from below. You need a powerful attic fan to remove excess heat and humidity or the top floor will become a swamp.

If you live in a big city, the average ambient temperature during the summer is probably going to be high enough that a whole house fan will not replace air conditioning, but could supplement it.
Just as a PSA for anyone considering quitting academia who happens to be on this thread, here are some good posts about how to do that:

http://www.paullitvak.com/2013/05/16/why-social-science-grad...

http://www.paullitvak.com/faq-for-academic-social-scientists...
> I thought UK did use the military to prevent Northern Ireland from splitting off.

You may be thinking of the UK military being in Northern Ireland to try to keep the peace from a population that were attempting to kill each other in the 70s?

However if you're talking about the 1916-1922 period:

Some people in Dublin declared independence in the "Easter Uprising" (in the middle of a war) over 100 years ago, it was dealt with by the UK military. The second attempt in 1918 was far better -- there was a massive democratic will for independence expressed through the ballot box. The UK government (100 years ago) resisted this independence initially, which was wrong, just as wrong as Spain resiting Catalan independence.

Eventually the UK government relented, and granted independence to Ireland after free and democratic elections in 1921, when 98% of the voters in what's now called "Ireland" voted for the pro-indepedence Sinn Fein (it was unopposed in almost every constituency)

However in the north, many residents did not want to become independent from the UK. The election there returned 67% in favour of the unionist party. As such independence was offered to the entire island, but the north could opt out by having it's parliament ask to (through it's democratically elected parliament). They did - the day after the Irish Free state came into being.

So people who lived in each area got to choose where they wanted to be, and all was well. That's how it should be for Scotland, and Catalonia.

The messy business of unpicking a country began (including a brief 'civil' war), but by 1937 the Irish government in Dublin ratified a constitution. This constitution claimed sovereignty over the north as well, despite the population in the North not wanting that, which wasn't exactly a good way to make friends and influence people.

It was only in 1998 that Dublin agreed to remove this claim from their constitution, and agree that whether the north should be moved from Britain to Ireland was a matter for people who live in the north (and indeed one for those in the south, who would have to agree to take them)
If you're not tracking your 2FA code through 1Password you get a big warning banner[1].

[1] https://i.imgur.com/uENh9oL.png
> One thing I don't understand is why are apps like authy or google authenticator not using push notifications to allow you to directly auth via unlocking or touchID instead of having to go through the app. If you really want the user to type something then you can still use push notitication for easy app access

My company has something like that, through Symantec. When you need to authenticate, it sends a notification to your phone over the network for you to acknowledge.

It's terrible though: cell signal is horrible in our building, so the people who use it are constantly dealing with delays and timeouts. I opted for a hard token that has no extra network dependencies, and I'm happy with my decision.
...a fearful worldview, and a lack of imagination.
Dozens Sentenced for Call Center Scam Where Victims Bought iTunes Gift Cards
But you're not in the network. You have to authenticate to access the network, and that requires the u2f key that you just removed.
It shouldn't be any harder to create unique digital-only actors https://news.developer.nvidia.com/generating-photorealistic-... than to pirate likenesses.
Ask HN: Why Signal does not care about privacy?
Can you help me understand why Signal, although it might seem them care about privacy, in effect they don't protect it as much as they could and should?

I'm particularly looking for answers from privacy-oriented users who do not use Google Play / Apple Store, or users who wish to migrate away from those platforms.

Please look at this for more details:

- https://github.com/signalapp/libsignal-service-java/pull/53#issuecomment-404507178

- https://old.reddit.com/r/privacytoolsIO/comments/917uu7/signal_should_be_removed_as_it_doesnt_work/e2w92mc/
Actually U2F can be used to devise several different schemes, either token+password, or token alone, even just token without username. Of course each of these has various advantages and disadvantages.
> but I am not sure about other schools in Europe.

For France and Germany, stipend/wages range roughly from 1200€ to 1800€/mont, so a bit over minimal wage, and definitely under what you could do in the private sector.
Here is some support for the claim that he sometimes used a capitalized version of his name.

Quoting from http://faculty.gvsu.edu/websterm/cummings/caps2.html :

> As we may have mentioned, due to the kindness of D. Jon Grossman's son, Jerome, we have the complete file of Jon's correspondence with Cummings. On making a preliminary tour through these letters, we found Jon preparing a French edition of his translations of Cummings' poetry, and on 27 February 1951 he wrote to the poet: "are you E.E.Cummings, ee cummings, or what?(so far as the title page is concerned)wd u like title page all in lowercase?"

> The poet replied on 1 March 1951: "E.E.Cummings, unless your printer prefers E. E. Cummings/ titlepage up to you;but may it not be tricksy svp[.]"

> That seems definitive to us: may it not be tricksy!
One of the animations on the website shows off a dark theme.
Yes, meant APD - wrong abbreviation. Sociopathy and psychopathy are not explicitly listed, but APD captures many of the symptoms (psychopaths are a subset of people with APD).

Now your comment makes a lot more sense. I agree. There was a time when people thought that the mother is responsible for autism in their child (through their behavior) which was a huge injustice. I also think that autism is fundamentally different to personality disorders (except psychopathy which is an extreme form of APD that has biological roots AFAIK).
Uber's 'Vomit Fraud' Sounds Worse Than Surge Pricing
I've had good friends commit suicide while there was Ambien in their system.

Not a drug I would take recreationaly, or with a prescription.

In fact, if they would like to remove it from the market, I would be in support.
https://en.wikipedia.org/wiki/High-speed_rail#Speed
https://www.goeuro.com/trains/high-speed
I think audio/video authentication is gonna be huge also. One thought would be merkle proof of hashes of the keyframes and then a signature of the merkle root. drop that bad boy into an eos / eth contract.
Among the USA war media's most important tasks is the maintenance of the false binary. They've done yeoman's work recently: how else could one explain that mainstream progressive thought is now to constantly foment nuclear war with Russia? (I'll quote Chancellor Merkel here: "I think it must once again become normal for Russian and American presidents to meet.") Alternatively, how is it that the party of Lincoln is now prominently associated with Nazis? (Go ahead, tell me one of these observations is wrong...)

In reality, the two "choices" imposed upon us are Coke and Pepsi, two noxious compounds that require extended chemical analysis to differentiate. They both want more war, all the time, in every case, for whatever reason. The real reason, of course, is so that they may skim some of those sweet armaments manufacturing profits. No it's not a conspiracy. Important influencers know which side of their toast is buttered, but they are a small minority and they don't need to coordinate in secret. Everyone who doesn't revolve from bureaucratic post to public office to lobbyist to executive board to think-tank sinecure, is a mere useful idiot. If 10-20% of American voters ever learn about horseshoe theory, they'll be screwed. Therefore the media mentions that about as often as they mention e.g. Libya or Yemen.

So, it's little surprise that we Americans have no clue about leftist thought.
Apple’s success is first and foremost a result of the walled garden that so many here love to hate. A vast majority of people would rather know that whatever they download from an App Store isn’t a scam or malware than almost anything else. People want their phone to just work, they don’t want to tinker with the damned thing.
How a Solo Non-Technical founder built a million dollar Tech Startup
That's because it's not a strong economy. Millions have stopped looking for work and never started after the recession. Wages have stagnated even for white collar jobs. Employers are unwilling to pay competitively. Millions like the ones in the article are underemployed and underutilized. How the fuck is that a strong economy?
> For each website, e.g., GitHub, it creates a HMAC-SHA256 of the domain (www.github.com) and the secret key, and uses this to generate a public/private keypair. This is used to authenticate.

Can one usb device work on two separate accounts for a given domain, (e.g. work gmail and personal gmail), or do you need two of them?
I set up a blog just about the Lego-parts years ago (bitbeam.org), and it looks dead-ish, even though I still make the parts for new robot orders all the time.

The most up-to-date location for the actual 3D printable files is in the Tapster project GitHub repo: https://github.com/tapsterbot/tapsterbot/blob/master/hardwar...
I wonder if interviewers still ask you to do fizz buzz when you have a PhD?
Saying people don't place the value in the monetary realm is amusing, since money is supposed to be fungible for all value. :)

That said, I get it. Some people place a ridiculously high value on having the latest. I think I used to be in that population, to an extent. Nowadays, I confess this mentality leaves me ridiculously confused.
Trump to Revoke California's Power to Fight Smog
Oof, just replacing the display looks really dicey. They essentially have specially prepared glue jig that lines up where the adhesive needs to be. That would seem hard to replicate for a independent shop.
Cool trip, but technically Trans-Sib starts in Moscow. :)
That podcast is great. Should also be required listening for anyone who does any kind of investment. One reason people keep falling for the same scams over and over is that they think they're too smart to fall for a scam.
One device can work on two separate accounts, no problem. For the same reason you can use the same password for two different accounts (although there are other reasons why you wouldn't want to do that).
there's always more to find, but consider that this model is leaving out the environment entirely and its predictive value is even less than you might think at first glance.

we know the environment impacts gene transcription, and we know that genetic determinism (as far as outcome phenotypes) is not a thing. likewise, there may be epigenetic factors at play which wouldn't be captured in a GWAS yet still might (or might not) have an impact on outcomes.

it isn't a "the other lines of code are bug free" situation so much as a "we expect there to be an abundance of bugs with undefined consequences outside of the subset which we have examined which most likely outweigh the stuff we found"
Unity8: a project that uses Mir
Gotcha and agreed. My lexicon seems to be regressing rapidly with age :(
Music Industry Lawyer Calls for Criminal Investigation Over Article 13 Vote
Running shortcuts with Siri
You could also use two separate systems for password and TOTP storage - one gets passwords, one gets TOTP, and the one with passwords explicitly does NOT get the password for your TOTP storage.
For a founder, this means picking a single adviser who can inform your thinking, rather than someone who makes decisions for you.

I've been incredibly fortunate to have met someone locally who has the same level of tech and business expertise as I do. And appreciates the value and insight from multitude of industries. I really don't get along with many people at that deep of a level, so this was extremely rare.

Truthfully I have never had anyone I would call mentor nearly my entire life. I've always figured everything out myself since that's just how I was raised.

We're both mentors to each other, he has a difficult outlier upbringing like I have had, different but similar. I've never really realized what my true weaknesses were until the 5+ hour talks we have discussing everything from how youtube should learn UX from a pornsite, how to run a political campaign, psychology theories, neuroscience, chemistry, frontend development, leadership issues, project management, world education, dealing with nonprofit leaders, making money playing video games as kids. The talks vary with a really big open degree of openness, and changes every couple of minutes.

I don't see eye to eye on his visions for the future, but I understand where he's coming from though. So I appreciate the value he has. I tend to think extremely short term and grab the "lowest hanging fruit" is what he tells me, but his visions are all about "planting seeds" which I don't really bother doing but should be

All his skills complement mine in some weird backwards way and its nice to know that there's someone out there.

I tend to think tech first before anything and he tends to think business first so its a nice mix of skills. I tend to be extremely assertive about my solutions since I've had to do hard sales pitches but his is more gradual and methodical.

I don't know how well we work coding together though that might be a different story but we do see eye to eye on many management practice principles, I met him while doing nonprofit project management.

Anyways, I just wanted to mention this because I find most if not all the advice I get is really not helpful. Unless you understand the logic behind why I am doing something before you say something "Seek to understand before commenting", then its hard for me to appreciate the value of input given. I appreciate the sentinment and thought process though.
It definitely prevents the OS from accessing it over PCI, but whether it prevents the PSP from accessing the OS is indeed unclear.
At what point is the brand damage of people never seeking repairs worse for the brand, though? I haven't noticed it as much with the latest generation of iPhones, but it used to be that every other iPhone I saw in the wild had a big crack down the screen which didn't exactly endeer me to the brand.

(or maybe it's still a problem and my peers are just more responsible/willing to pay for repairs?)
It's not an externality. An externality is "[a] cost or benefit that affects a party who did not choose to incur that cost or benefit" (source: Wikipedia). The Uber drivers are choosing to incur that cost by their contractual agreement with Uber.
For those who aren't familiar with it: https://en.wikipedia.org/wiki/Great_Filter

> The Great Filter, in the context of the Fermi paradox, is whatever prevents "dead matter" from giving rise, in time, to "expanding lasting life". The concept originates in Robin Hanson's argument that the failure to find any extraterrestrial civilizations in the observable universe implies the possibility something is wrong with one or more of the arguments from various scientific disciplines that the appearance of advanced intelligent life is probable; this observation is conceptualized in terms of a "Great Filter" which acts to reduce the great number of sites where intelligent life might arise to the tiny number of intelligent species with advanced civilizations actually observed (currently just one: human). This probability threshold, which could lie behind us (in our past) or in front of us (in our future), might work as a barrier to the evolution of intelligent life, or as a high probability of self-destruction. The main counter-intuitive conclusion of this observation is that the easier it was for life to evolve to our stage, the bleaker our future chances probably are.

So ZeroBugBounce is wondering if "not agreeing on facts/truth" is the thing (or one of the things) that technologically advanced civilizations experience that filters them out of the running for expanding out into space. E.g. people can't agree on facts, which causes unrest, riots, etc; civilization eventually collapses from it all, and people never make it into space.
> It was in 2005, my freshman year of college, that I took my first Ambien.

> These were the frontier days of the internet

I'm not sure 2005 qualifies as the frontier days of the Internet.
Testing in Production the Netflix Way
with water as a power source

No, no. Water is just the reaction mass. The power source is solar. This is a steam rocket.