skysight-inc/HackerNews huggingface dataset:
> the device might be using a different counter for Facebook and GitHub.

At least for YubiKey, it appears to use a global counter:

https://developers.yubico.com/U2F/Protocol_details/Key_gener...

> There is a global use counter which gets incremented upon each authentication, and this is the only state of the YubiKey that gets modified in this step. This counter is shared between credentials.

Having a global counter does seem like it could weaken the ability to detect cloned keys. If an attacker could clone the key and know the usage pattern (e.g., there are usually 100 uses of non-Facebook services between uses of the Facebook service), then they might be able to use it for a while without being detected. Though, having service-specific counters may have worse security ramifications (e.g., storing which services the key has been used with).

Though if an attacker is going to that much trouble, they may as well just use the wrench-to-the-head method.
> I would be walking away for several hundreds of thousands of dollars in equity.

You'd be walking away with several hundreds of thousands of dollars of promise. Unless they IPO that's effectively worthless.
We’re underestimating the mind-warping potential of fake video
The TOTP code does not add anything to phishing mitigation.
I will do the job for 50 bucks if you want...
Hi there, I'm the author of the blog post. Some context you may find interesting, and maybe I should do a follow up post about this.

We were very enterprise focused, but it just didn't work. We were trying to displace MS Outlook. And unfortunately, most people want to stick with Outlook. Not because it's better, but because it's what they know. We found that even if we convinced 8 out of 10 people in a company to buy Hiri, it wasn't enough. IT departments don't want to support more than one email client. 100% adoption is simply not an option.

So we pivoted to the current model. A bottom up strategy that has made the company viable. I would say about 50% of our customers are paying with the department credit card, and the other 50% buy it using their personal card.

Another interesting find - the growth stage of any given company has a role to play too. Younger companies (both the age of the company and the age of the staff) seem to be more open to trying new software. I guess they don't bring any legacy issues to the table. The problem is that a lot of these young companies choose Gmail. This is why we have chosen to support Gmail.
How to Get to No. 1 on Product Hunt
So, compilers can do this, and do do this, depending on the language and it's guarantees.

GCC and LLVM use a chain of recurrence algebra and form for symbolic analysis that could easily represent this (or be extended to).
But they probably won't bother any time soon.

To understand why requires a little more detail first:

The statement "However, compilers do not replace the computational algorithm, written by a human, by a more asymptotically efficient one."

is mostly wrong.

They generally do where they are allowed. They just aren't often allowed, or it's not worth it.

There are languages that are playing with this even more heavily.

But whether it's a good idea, eh.

In numerics in particular, people often pick their algorithms very carefully for stability/etc reasons.

For more generic things like sorts, a lot of this gets hidden in standard libraries anyway.

For things nobody could really complain about, the compilers do idiom recognition of things like memcpys, string compares, etc and replace them.

In any case, the problem is not recognizing and replacing the algorithm or idiom. The problem is deciding when doing so actually serves your users well.

Going back up, when we first implemented scalar evolutions in GCC, we supported everything you can think of - closed form polynomial functions, matrices, mixers.

In the end though, we were spending a lot of time handling cases that were very rare, mostly optimal as written anyway (so not useful for the optimizer), but still required exponential time solving/etc to do anything with.

So a lot of that code was removed.

Could you handle matrix exponentiation because it's fast? Sure.

But it's unlikely to be worth it.
> "That seems like too limiting a definition of "magic" to me"

What is your definition of "magic" then? Things that are unfamiliar?

Please don't mention "explicit vs implicit", because Scala's implicits are in fact explicit, plus we can always talk of assembly language and how it lacks any magic.

> "Well, not exactly, as far as I can tell. Type classes (in Haskell at least) are significantly more ergonomic."

Ergonomics has nothing to do with whether a concept is a generalization of another.

> "Since they semantically describe the user's types, they allow you to perform their operations directly with the user's values. Implicit parameters have to be pulled out of the implicit environment and used explicitly themselves, as far as I can tell."

Nope, both type clases and implicit parameters allow for describing functions that turn type names into values. That's all there is to it. Or in other words, both type classes and Scala's implicits are about return type polymorphism.

The only actual differences are that:

1. type classes in Haskell are supposedly coherent, i.e. the compiler is supposed to force a single type class instance in the whole project, however GHC does in fact not do that so you can end up with multiple instances of the same type in the same project

2. Scala's implicits are more flexible in what they allow, for example it has priority rules in case of conflicts, which allow say those implicits to work in the presence of OOP subtyping, or to work with multiple type params for describing things that are difficult to describe via type classes (but not necessarily desirable, e.g. the CanBuildFrom pattern)

3. working with Haskell's type classes is nicer, because for hierarchies in Scala you end up dealing with OOP issues (i.e. in modelling Haskell's type class hierarchies, we ended up debating on inheritance vs composition), plus we do a lot of manual plumbing in libraries like Typelevel Cats

But trust me when I say this, fundamentally they are the same ;-)

You can also read Martin Odersky's paper about it: http://ropas.snu.ac.kr/%7Ebruno/papers/TypeClasses.pdf
How do you accumulate 2M in 5 years making 250K? If you had no expenses and somehow paid no taxes you would have 1.25M. The thought that you could make an extra 750K in 5 years in interest seems extremely optimistic. Saying that it is not a lot of trouble is a little bit misguided.
You and I are talking about completely different things. I don't care about numbers or prospective adoption of a private company's protocol and platform. I'm talking about what I can do now. What I'm already using it for. What's on the horizon. What's not going to happen. It's popular enough for my needs. It's funded. It's in active development.

No matter how popular your protocol gets, it's still your protocol. I have no interest in it. I can go back to Twitter if I want to have my social connections locked into someone else's platform.

I have been burned by enough companies that play up open source and development ecosystems, then close up when it's no longer convenient. Your own example of Twitter was built on developers making tools for it. Who makes apps for Twitter now but marketing companies? Virtually no one.
It's certainly true that large players have had large influences. Which modern web technologies do you have in mind that Google wanted and forced to exist? JPEG, GIF, & PNG didn't come from Google.
If sublime text were to end all support today, I would have gotten triple-digit returns on that 75$ investment. Same for most software. Don’t get me wrong, unsupported paid software sucks and open sourcing abandoned projects means I would be more likely to buy something from that person/company again, but on some level a market clearing price takes this risk into account if we’re just talking about consumer applications.
Natural Stone Tile Supplier
MPG Stone is one of the best Natural Stone Distributor offers the supreme quality of products in countries like Australia, Ireland, USA, UK, France and India. We are supplier of Natural Stone including Marble, Slate, Granite, Sandstone, Limestone. For more information, visit https://bit.ly/2KTbBjM
Touch to auth is also the part that Google ignores for some strange reason. Their high security Gmail program defaults to remembering the device! There isn't a way to disable it either.
On Windows, "Mouse without Borders" works well

https://www.microsoft.com/en-us/download/details.aspx?id=354...
I guess that you need to have half-decent Russian language skills to not feel like a complete spare wheel?
it looks like cymbals are spun, meaning rolled over a mandrel spinning on a lathe by manual force. its not rocket science, but spinners do have a craft and you wouldn't trade an old hand for a pimply faced youth without good reason. one of the real tricks here is having a knack for distributing the material so that you end up with an even thickness.
No, terry, the CIA didn’t exist yet.
>> I think high functioning autism is just a DSM-isation (label as disease) of people with high introversion, neurotism and/or disagreeableness. Read "The silent power of introverts" by Susan Cain.

Because you never met an extroverted autist or you were not aware. I am lucky enough to know one. Also, autism is not labeled as a disease but as a developmental disorder.
Push notifications offer no phishing resistance. The attacker can present a fake login experience and conduct a real login behind the scenes at the same time. If you think you’re logging in, you’ll approve the push for them.
I think you're really underestimating how tenuous the UK's claim on Scotland really is. Frankly, there is no model in which the UK deploys military assets to forcefully retain Scotland. This would almost certainly delegitamise the entire "Great Britain" concept.

Catalonia is different because it, frankly, was never really an independent nation. And while Spain recognizes a certain autonomy it does not grant anything like an independent legal system.

That said the case of Catalonia is interesting. There's nothing quite like it in France. France has never even entertained autonomy, instead emphasizing at every opportunity the "supremacy" of the Parisian government. There's probably a lesson to be learned from Spain and the UK which may have unwittingly given "hope" to these separatist movements.
> If you're using a password manager to have unique passwords for every site, what does TOTP 2FA even protect you against?

Sounds a little obvious to write it out, but it protects against someone stealing your password some way that the password manager / unique passwords doesn't protect you against. Using a PM decreases those risks significantly, mostly because how enormous the risks of password reuse and manual password entry are without one, but it certainly doesn't eliminate them entirely.
I once met a developer who bragged about how he'd take his laptop into the bathroom and work on issues with his software, because his wife would give him flak for working too much. Basically he could hide in the bathroom for an hour and she'd give him a pass.

He recounted to me how he'd done this on Thanksgiving and I was just scratching my head, wondering "why would you do that?" These are people you might only see twice a year, the code will still be there on November 26th.
There is definitely evidence that some animals have regional/group dialects. The 52 hertz whale comes to mind.
(https://en.wikipedia.org/wiki/52-hertz_whale)
9 ways to master awful code, fast
Okta provides this capability.
This is excellent! I'll look into that -- it would be awesome if the default setting (with no extra work on my part) will suit my needs!
ALITA BATTLE ANGEL NEW TRAILER
Building a Kubernetes Operator for Prometheus and Thanos
As stated, they can run separate instances, or spend 5 minutes contacting GitLab to negotiate.

200 employees is not small, that is considered a medium sized business. Millions of companies around the world never get past single-digits. With payroll extending into 10s of millions, $35k sounds rather trivial if it really is powering the company hub and the value that brings.
YubiKeys support PINs for protecting TOTP/HOTP.
How to change your life in just four weeks
I think so. It was surprising how few Russians spoke English, even in the major cities. It would've been much more difficult to engage with locals without my knowledge of Russian—which I'd say is at a 4th-grade level.
My school used Pintos from Stanford, which is also a great introduction to operating systems: https://web.stanford.edu/class/cs140/projects/pintos/pintos_...
agree 100%!

A good boss will figure out how to motivate the troops. To me, it sounds like Steve Jobs found someone on the team who was motivated by 'saving the presentation.'
VoiceTube looks cool!
But my app doesn't play the videos -- the videos open in your OS's default video player.
> firing your jQueryers to bring in a team with 2+ years of modern web framework experience

We clearly have different opinions on what retraining means. If you think "jqueryers" cannot be trained to use more modern JS frameworks, or accountants cannot learn international finance principles, then you are basically saying that retraining is not possible at all. It's a very sad view of the human brain's potential.

> I've never seen a direct example of a company removing their electricians because they don't have "Acme high voltage" certification and hiring other electricians with the plan to give them Acme high voltage certification.

Indeed: the point is that a company will now hire somebody with that certification already in the bag, avoiding the cost and effort of giving the chance to obtain it to their existing workforce.

> the probabilistic expected value of time/money to train would be equal.

You have a very simplistic view of what a job entails. There is a lot of related business knowledge that goes with jobs, even some of the most trivial ones: why you have to produce so many widgets at this or that speed can be as important as how you actually operate the necessary tools to achieve that result.
Here is my reverse engineering of the one that generates the guitar noise: https://pastebin.com/5ky6xptQ
that's why God created pinned tabs
> I'll take my country life as a remote worker going on 8 years. Trees, forest, wildlife, fresh air, backyards. 5 minutes walk or 1 minute drive to a shop for groceries, hardware, lumber, restaurants, kid parks.

If you don't mind a bit of privacy invasion, what city/town do you live in? One of the biggest reasons I live in a big city is that I like being able to take a 5 minute walk to get to anything I need. Stereotypical suburbs/rural areas are primarily built for cars, not pedestrians/cyclists.
Why some PhDs are quitting academia for unconventional jobs
Depending on the users experience, a 3D printer and Arduino or a Raspberry pi plus some servos, lights, and other motors may be all you need.

I recommend a quality printer like the Prusa i3 MK3:
https://shop.prusa3d.com/en/3d-printers/180-original-prusa-i...

You can build things like this with it:
https://youtu.be/f5JPLIyKOfE
Ah, thanks for clarification.
This isn't new, though. Just doesn't come up as often as folks would like. Consider benchmarks that get reduced to constant. Happens literally all the time.

This particular change is neat, and is ultimately keyed on seeing optimizations from really old math. Which is the only thing I was wanting to add.
Now they will do that for you for a $89 fee. "LET US SUBMIT FOR YOU 89$" A startup about startups about startups.
> Showing your teeth is a near-universal sign of aggression.

Smiling humans are a significant exception to this rule.
iPhones and high-end Androids have their own secure elements these days. I’d expect the OSes will eventually provide their own hardware-backed U2F APIs that you enroll directly, rather than piggybacking tokens. Same for corporate laptops with TPMs.
If you can't jazz it up, at least make the logo bigger...

https://www.youtube.com/watch?v=5AxwaszFbDw
It's also incredible how much effort and money has gone into producing and debating and selecting open source licenses that have just the right restrictions on how everyone else can use code. I think there are some parallels with that and DRM.
Last year I watched a demo in San Jose where the company started re-writing the code, in front of the audience, during the demo.

I felt terrible for them; it would've looked a lot better if they just fell back on something else. It was boring watching them write code, people were getting up and leaving, it made it look like they were wildly unprepared. I wouldn't be surprised if the entire company went kaput after that.
An email client without IMAP support is not going to get much traction. No one wants to have multiple email clients open at the same time.
I'll have to read this later since I'm at work but is there a layman's explanation for how these studies distinguish environmental and genetic influence? I don't see how you could accurately separate the two.
The Open Privacy Research Society
You're confusing revenue with profit.
AMD has an ME equivalent, which is approximately as prevalent. It’s still a DRM/DMCA-protected remote access CPU on your CPU. What could go wrong?

Buying Librebooted machines isn’t directly supporting Intel.
That isn't really just being paranoid. Logging into your account on any public device is not secure at all.

Those kiosks are just computers, even if that employee logged out, who is to say that he didn't also install a keylogger before you typed in your credentials?

That is a really bad idea.
Pizza Physics: Why Brick Ovens Bake the Perfect Italian-Style Pie
This is great advice as well and is pretty much exactly the path I took after graduating with a CS degree. I had an internship leading up to my graduation that I really did not enjoy. I ended up leaving earlier than expected because I felt the need to focus on my mental health and address deeper questions about what I wanted out of life. I did not feel ready to start a career.

I ended up taking about 2 years to examine and reflect upon my situation. Meditation played a huge part during this time. I traveled, explored new hobbies and ideas, and experienced different ways of life. I eventually ended up moving back home to live with my parents as I continued to sort things out.

Currently, I feel much more stable and have a clearer idea of how I want to move forward. I now have a plan to move out and pursue a career utilizing my degree and feel very excited about the future. Taking time off to reflect in this way has been indispensable for me.
What is a GDPR consent string?
First, I never said that people shouldn't ask algorithmic problems. I said they shouldn't ask Leetcode-style questions. To me, that stood for a whole class of problems where you have to know the area in order to be able to solve the problem. When you have people talking about studying for interviews, I'm arguing that those are bad interviews.

Background: I've been a programmer for 33 years. I have never (directly) used a tree of any kind. (I've used STL and Java maps, which I think are trees under the hood.) Asking me to do something with a tree in an interview question is therefore probably a sub-optimal way of determining whether I'm a good fit. Yes, I know what a tree is. No, I don't know it like the back of my hand, and I don't know the algorithms in detail. Yes, I could probably figure it out during an interview. But expecting me to know that background when I come into an interview, when I have never used it so far in a pretty long career, and so I'm probably not going to actually use it at the new place either... that's asking me to memorize a bunch of stuff that isn't actually going to be useful on the job. That's a bogus interview approach.

Algorithmic questions should be something that the interviewee hasn't memorized the answer to, but also that they don't need to have memorized a bunch of background or know the "trick" to be able to answer.

Now, I'm in kind of a different world. I've worked mostly in embedded systems. If you're interviewing for a job where they use a lot of trees in their data structures, you probably ought to know them. If you are interviewing at one of the big boys (Google, Facebook, et al), where an improvement in the structure you use to represent the data can mean that you need several thousand fewer machines, they are going to really care about your grasp of the nuances of data structures. But, despite Google's size, most jobs are not at Google, or at that type of place.

If you're going to classify only Google, Facebook, Amazon, and their ilk as "paying reasonably well", then I do not agree with your definition, but I will agree that you'd better be able to pass Leetcode-type questions in their interviews.
I use Evolution every day with the evolution-ews plugin for accessing an Exchange server. It's still a bit clunky as it always was, and has some issues when switching between wired/wireless networks, but otherwise works fine for email, calendar, and contacts.
Nitrokey is open source (hardware and software). They claim the "installed firmware can be exported and verified, preventing attackers from inserting backdoors into products during shipping". (https://www.nitrokey.com/)

They list Google as one of their customers.

Also if you're a Linux kernel developer you get one for free: https://www.nitrokey.com/news/2018/nitrokey-partners-linux-f...
China does not do that. You've abused terminology in order to try to make the argument fit, post factum.

But at least your argument has a strong thesis.
> Devices now need state, pushing up the base price.

You can buy pretty decent (16Mhz, 2K EEPROM, 8K flash) microcontrollers for less than twenty cents (my numbers are from 7 years ago, things are probably cheaper, faster and bigger now). A few bytes of stable storage -- whatever you need to safely increment a counter and not lose state to power glitches -- are not going to add significantly to the cost of a hardware token.
Glary Utilities PRO 5.102.0.124 Key with Crack 2018 Free Download
> That is simply impossible, unless Spain agrees.

So it's not impossible.

> I don't see the Catalans going that route.

It may not start down that route, but realistically there is no other route. It may be that it takes some unrest to force everyone to take negotiations seriously, but there's no realistic prospect of Catalonia forcing independence via civil war or revolution.
Show HN: Returnif – the conditional return statement
Overpriced is maybe a strong word (I get that Legos are expensive because they're a higher build quality than other interlocking blocks), but Mindstorms is a very expensive option, all the same. At that price point, even though I could afford a set, I don't really consider it an option for trying to get a kid interested in programming or robotics, because I'd feel pretty chapped about hundreds of dollars down the drain if they didn't end up taking to it.
PayPlus is registered to a media group in Israel that is being sued by the US: https://twitter.com/SWeinglass/status/1021428223136149508
The app looks very nice. Which UI toolkit does it use?
This 3-D printed electric car costs $7,500 and took three days to make