skysight-inc/HackerNews huggingface dataset:
> 2FA over mobile phone

Still vulnerable to phishing. If you include a convincing iframe, your attacker can store your TOTP, and use it from their machine.

U2F relies on the domain of the page you are currently browsing, so the code can't be used by another party on the real site.

And if you were thinking about SMS... vulnerable to any attack on the mobile network + phishing + ...
Book of Genesis: https://web.stanford.edu/class/e145/2007_fall/materials/noyc...
Spot on! Those are probably the two most important blunt-sides of native APIs.

The last thing I'd want to see is a codebase going from 40 lines of code to 400 lines, because "hey, we removed jQuery and writing verbose js is the new cool these days"

I'd be happy if there's a jquery like polyfill library for DOM manipulation, but again - why not just custom jQuery builds and sizzle.js instead of re-inventing jQuery?

P.S I'm not sure IE11 supports classList. Source: https://developer.mozilla.org/en-US/docs/Web/API/Element/cla...
Okay, thanks for your response. Is there a way I can subscribe to an update about it? Really want to purchase the hardcopy
With yubikeys, you can effectively clone them when setting them up initially. So you carry one and keep another spare in a safe location. If your primary fails, you can buy another and promote your hot standby to primary having set the new one up to be a clone.
There were predecessors to GPS: https://en.m.wikipedia.org/wiki/Gee_(navigation)
Poor Intel, man. Having competition is such a drag.
AKA full-duplex
The Pantheon is great but I would have preferred to see it as it was before the Catholics came in, gutted it and turned it into another Church.
Meh... "open" https://www.yubico.com/2016/05/secure-hardware-vs-open-sourc...
I think the simple answer is 'hedging'.

Cancer, hunger and the like are unlikely to kill the entire human race in one go. A climate event or asteroid could, which would render all other efforts redundant. Mars exploration means hedging the survival of our species.

A diverse portfolio is where the smart money is.
Or used it to incarcerate a portion of the population and use it as an excuse to violate people's rights. Although it's unnecessary now that we can use terrorism as an even better excuse.
Data Marketplaces: The Holy Grail of Our Information Age
Maybe the percentage of people browsin github on IE11 is 0%?
I think Google has something like that for the Android repositories. They are always synced through Git and 70 GiB+ in size.
Do you use Zimbra at work? How is that compared to using Exchange for example?

Any drawbacks?
[Same Link] You can see how poor the browser support is and how big the polyfill is. There's a chance that the polyfill could be bigger than jQuery's removeClass/addClass implementations.
Kerberos Authentication Explained
This is still what I tell people in interviews was my most difficult technical challenge. I had nothing but an old 386 and the K&R book -- no Stack Overflow back in those days, and I didn't know any programmers well enough to ask them for help. It was the first time in my life I ever truly grinded on a task. It happened just suddenly, and it was glorious, and I've been chasing that feeling ever since. "Hey, kid, you wanna fly?"
You might like this book: Deception in War by Jon Latimer

https://www.kirkusreviews.com/book-reviews/jon-latimer/decep...
I've forgotten so much about networking. I just haven't had any need to use the knowledge since I learnt it in university. Back then I borrowed a copy of Tanenbaum's Computer Networks and it was great. I considered buying a copy for my bookshelf recently but it's very expensive now.

It makes me sad because when I was younger I seemed to remember everything forever. Now I realise there are large swathes that I've forgotten and most I probably don't even know I've forgotten.
Facial recognition needs to be regulated
There's a great Gil Scott Heron song with the same theme. In his case it was poverty and healthcare among African Americans in the 60s, not cancer.

https://www.youtube.com/watch?v=goh2x_G0ct4
> I do wonder how many of these are supported by common hardware like mobile phones, anybody have a pointer to a compatibility list?

I see GLONASS compatibility on "the specs" list of almost every smart phone on gsmarena[0]. Even iPhone 4S has it. Just did a quick look-up, newer phones now support GALILEO and BDS too.

[0] https://gsmarena.com
Not really. Entry->Mid level is RX 560, RX 570 and RX 580. RX 560 is a mixed bag, but both RX 570 and RX 580 are competitive and a bit superior to the Nvidia alternatives - as long as they are not overpriced, which they were till early this month. So the market just has to reach the regular prices AMD aimed for initially for those series to work fine.

But one can be concerned about the utter failure of high end Vega.
It's a tech company and they made a lot more money than expected, hence it's here on HN.
We really shouldn't be holding up purveyors of lies and snake oil as examples to follow.
Take a browse through any EU geographical subreddit. The paid and unpaid trolls are easy to spot.
>No NAT

I'm in India and my mobile service provider (Jio) is handing out ipv6 addresses. The fascinating thing about this is I was able to access a server hosted on my phone from Internet. Crazy!
You might like Nitrokey: https://www.nitrokey.com/
If by "for most purposes" you mean something else than actually using IPv6 in a network.

For one, address allocation is entirely different. Devices will have several addresses, and some of them can be temporary addresses.

If your ISP assigns you dynamic prefixes (mine does), you can end up with devices not being able to connect to the internet after the router/modem reboots, since they're not told about the new prefix you just got from your ISP and happily keeps using the old one.

If your ISP assigns you dynamic prefixes (mine does), dynamic DNS is required for each server box (apparently one can centralize this by using DHCP-PD, but I haven't figured this out for my pfSense router).

And if you're writing an IPv6-enabled application, parsing client/server address input is a PITA compared to IPv4.

The list goes on and on, but these were the major pain points I found while trying to use IPv6 at home, which are non-existent when using IPv4.
The shipping forecast is the one thing that could help me get to sleep as a child.

To this day, I have no idea what it all meant, but I loved the repetitive, rhythmic nature of the words in my ears.
> the BBC has said that when the LW transmitter valves fail they won't be replaced

They better tell the Royal Navy - the broadcast of the Today Show on Radio 4 LW is one of the tests submarine captains supposedly use to detect if the UK has been annihilated in a nuclear strike.
Don't forget Cocaine Importing Agency!
It means the market doesn't think there is any "huge growth potential".
Indeed its easy! But damn it gets boring having everyone patch the DOM with things that should be in the standard DOM API already by now.
It sounds like someone (motivated enough) should fork jQuery before the old browsers support got removed and maintain it as jQuery-legacy, backporting fixes from "new" jQuery" if applicable.
Something like this? http://www.endvawnow.org/en/articles/113-understanding-the-r...
I kinda think this is a non-issue. If you are working at the level of Keras then the back-end is pluggable. You can use a fancy GPU relying on a binary blob, you can use PlaidML to use any random GPU, you can use CPU as a last resort. The Keras code is all the same, you just set the backend you want in an environment variable.
Yeah... once when I had a retail job as a student, they showed us this anti-theft security video. I learned some very effective techniques on how to recognize store detectives, how to get away with shoplifting, undetectable ways to steal cash while working as a cashier etc etc... always made me wonder if they actually had in increase in staff crime, after revealing to us young innocents all the 'tricks of the trade'.
What's your main issue with its usability? v6 deployment is going up and looks like it's on track to replace v4, so the DAB analogy sounds a little diminuitive.

I get v6 on my mobile and on my broadband, and in all respects it seems to work well for making the internet end-to-end addressable again. With the devices like RPis and VMs/containers, the simplicity is refreshing vs hacks involving port forwards or using a for-$$ service as a proxy.
Gdff
The unreasonable effectiveness of Soccermatics? (2017)
This is probably true. In the past we have stable worldviews - but they were not very accurate, now we have much more information. It is now possible to build more accurate models of the reality - but overall do people build more accurate models or maybe they just use the additional information to dig themselves deeper into their biases?
I came here looking for reviews and recommendations instead of a list of everything under the sun where I have to figure out what's good and what isn't
Software development is a lot about making good use of resources and if you reinvent the wheel for every job you do, maybe it isn't your cup of tea.

I've worked with developers who completely ignored good libraries and instead created their own terrible implementations. They got nothing done and what they did was a buggy mess that often needed months of patching.

Finding a good middle ground is the best way to go and when the loading time increases by only a few milliseconds, but the development is a lot faster and cheaper, that's a good compromise in most cases.
sounds scary! lol
full-duplex transmission of data in two directions simultaneously in the same channel. SMS is a done via Beidou-1 satellites, and Beidou-1 don't serve as positioning at all today.

Beidou-2 is just like GPS, positioning service only, no SMS or shit.
People who didn't care about https probably didn't care about Chrome behavior change announcement. I expect in new domains next few weeks.
You lose something by using it too, you know -- you let FB track everything about you, and shape your world view if you read the posts they decide to show you. It's a tradeoff.

You don't have to delete it; Just make sure it is perfectly blocked (through uBlock Origin, Disconnect, Ghostery, PiHole, etc) so they can't track you - and login in once a month or so to https://mbasic.facebook.com/ if you need to figure out someone's new phone number.
> If your ISP assigns you dynamic prefixes (mine does)

Well there goes your problem…
Coinbase lets you convert your tokens into gift cards
Isn't the issue with exploring Europa that Jupiter throws a stupid amount of radiation around itself, so spending any time on its surface(or close proximity) is actually a very very bad idea for human life? Sure, beneath the ice you'd be safe as you can be - but you need to get there and then drill through the ice first.
LG Mobile’s losses continue but now sales are falling too
Yes. It's called jQuery.
Facebook is about looking at hot girls from your college, well, that's how it started out. It's a social network where you and your data are the product. It's not about free press.

To prove the point, in Myanmar the social network facebook has helped to spread hat speech that led to riots and violence between Buddhist and Moslims. https://www.wired.com/story/how-facebooks-rise-fueled-chaos-...

If you want free press, change the government, whether it's Azerbaijan or Malta, a better government is necessary.
Sgdsd
I've wondered about the parallels between globals in code and open door immigration policies, etc. The left/right political axis may conceptually span across more than just politics and the current tech climate is more left.
You mean they purchased enough loot boxes to unlock the in-game upgrade.
I have one of these and I can strongly recommend it.
People not sharing weights (or sharing but on non-open licenses) is an issue.
Other things are not an issue (and from the tone of this post is clear that they repeat misheard things).

First, you can load things into your network regardless if you use CPU or GPU. And if needed, people can write GPU code for other architectures/

Second, inference (prediction) is fast. Yeah, it may be not useful for real-time applications on CPU (like: self-driving cars) but for detecting one object it can be fast (see e.g. https://transcranial.github.io/keras-js/#/resnet50).

Third, using things like TensorFlow.js you get GPU acceleration with any GPU card, not only nVidia. It is not nearly as fast, but still faster than Python + CPU. There are real-time demos such as https://experiments.withgoogle.com/collection/ai/move-mirror....

Side note: I just start https://inbrowser.ai/ for tutorials and open source templates for using fully frontend AI.
I started my JavaScript career in 2011 with the two books "JavaScript - The Good Parts" by Crockford and "Professional JavaScript Techniques" by Resig.

Somehow all the time I'm doing JS, people were talking about how jQuery was "an old library" and "the old way to do things" even in 2011.

2 years ago I was on a JavaScript meetup and some guy, who did interfaces for stock trading, said: "We had to write our own framework, because jQuery just didn't cut it anymore!"

I just thought, no shit, it's 2016 and NOW you talk about replacing jQuery? Since its inception I used 4 different frameworks and even when I started in 2011 it was already "old news". Where have you been living if you had the impression there is only jQuery and "your own framework"
Testing out new JaCoCo filtering options that help to improve code coverage
ZeroCater raises series B, now hiring VP of Engineering in SF
You forgot Asian Tiger mosquitoes. Think you're safe busting your ass doing yard work at noon on a sweltering day? Think again!
[video] Turing Tumble Review – With Tom Vasel
> Is this a situation like grsecurity vs Torvalds?

Ha! Conda and Anaconda, Inc. are _not_ like grsecurity. Starting with the fact the Conda is BSD-licensed.

Recounting some of the history will probably provide the context you're looking for.

It's my understanding that the birth of Anaconda (the distribution) and Conda goes back to this statement by Guido regarding package building and installing at a PyData summit in 2012:

> It really sounds like you guys' needs are so unusual compared to the larger python community that you're just better off building your own.

https://www.youtube.com/watch?v=QjXJLVINsSA&t=59m10s

This predated PEP 427 (Wheel Binary Package Format 1.0).

Of course both conda and pip/wheels have evolved immensely since 2012, and their evolution has been guided by different constraints. Elsewhere in this thread I spoke about how pip/wheels/PyPA packaging has as it's primary target the site-packages directory, and then branches out from there when necessary. Conda's primary target is the prefix root. PyPA's mandate is to build, install, and manage python packages, which makes something like 'pip install python3' out of scope. Things like 'pip install postgresql' and 'pip install r' are _for sure_ out of scope. Conda has the luxury of being able to install and manage all packages, not just python packages.

Regarding the creep of wheels toward conda packages, and especially the static embedding within wheels of compiled "system" libraries, I question whether it's actually to the benefit of python _users_. No doubt the wheel "binary" format is a huge improvement over eggs for pure-python packages. But manylinux wheels are often built going beyond just compiled python extensions. Rather than describing these "system" dependencies in metadata, and then having pip ensure these system dependencies are present before installing the package, these wheels now implicitly cross the python-only line that PyPA in other cases holds. There are real consequences for users, with the result being that it pushes failure mechanisms back rather forward.

So, because of the differences in scope, my guess is that the python community would think it inappropriate to make Conda an official PEP. Conda will probably someday install wheels (at least pure-python ones); maybe someday pip can reach out to conda or apt-get or yum to ask for non-python dependencies to be installed.

> and make conda-forge part of the Python Foundation (instead of a private company)

Conda-forge is actually a community-driven organization completely independent of Anaconda, Inc.
Firstly, Intel are meant to maximize share holder value

Their mission statement [0] doesn't even mention shareholders anymore.

[0] https://www.intel.co.uk/content/www/uk/en/support/articles/0...

There's no law obliging companies to place "maximising shareholder value" above all else.
Some people do understand. That's why many countries have made their own independent "GPS" systems.
Previously featured on HN at [1]. I've received my Kickstarted edition and starting to work the puzzles featured in the accompanying book. So far, a lot of fun.

[1] https://news.ycombinator.com/item?id=14450158
It's got so much worse. Even within JIRA there's 2 different flavours: the backlog preview _new_ updated version, and the old horrid detail issue view version. Annoying doesn't start to describe it.
BYOB (Build Your Own Botnet)
The Zen architecture was built to be able to be glued together with their "Infinity Fabric." That is their trump card. Intels architectures just aren't built with this in mind, so it will be back to the drawing board for them.
The stuff that happens in the private sector is far more f'd up than any of these anecdotes we love to talk about in government.
Monzo Reliability Report
I am running Gitea too. Quite happy with it.

At the time when I compared to Gogs, I read about a period where the Gogs maintainer was off, and PR's were piling up. Not sure, but that may have been the reason to create Gitea fork at the time. The project has multiple maintainers, and when I compared activity (about 8 months ago), it was more active in terms of PR's and commits.
Couldn't someone create a 'Credits' card that converts crypto to 'Credits' and get the top 100 stores on board, through some form of incentivisation (i.e no processing fees, like there are with CC and Debit cards) therefore bypassing Fiat, but do it in the form of a 'Gift Card'?

It seems you can bypass some regulations by doing this. How long would it take until the regulatory board starts banging down your door.
Yup, I'm fairly sure the online Trump hype train was 10% trolls and 90% people tagging along for the ride.

Then again it died reeeally fast right after the election, so now I'm not sure anymore.
> Were there tech people screaming foul? The press? Not really, they seemed reasonable, until it seemed that some bad agents were getting a little unscrupulous, and so FB did the right thing and altered the APIs to make them more secure. Security polices change all the time, in this case they tightened up given some field data. That's it.

Others quoted about screaming foul from within facebook. I was involved with RTB ad exchanges at the time, and everyone knew that the data is available to whomever wants it, with facebook's tacit approval.

Gabriel Weinberg (yegg) founder of duck duck go had a story on his blog about how he targeted his own wife with a facebook ad, and about how easy it is profile/get everyone's FB data, and he wasn't the only one.

Your experience may have been different; it looks to me like you'd rather look at the world through rose tinted glasses and give FB an undeserved benefit of the doubt -- but I'll accept that this was your experience. However, I have about 20:1 anecdata about "improper FB" than "proper FB", so I tend to believe the latter.

If there was one story of patents done right, does that indicate there are no patent trolls and it's all blown out of proportion?
Related in theme but off-topic: When I started med school in 1970, I was all full of myself as a doctor-to-be so I took advantage of the very cheap student rate and subscribed to the New England Journal of Medicine. The first issue arrived: Yikes! I didn't understand a word of it. Fast forward to 1974 when I graduated: reading and understanding the NEJM was effortless, as easy as Sports Illustrated.
- email: dovecot, postfix (w/ opendkim and opendmarc), bogofilter, rainloop

- synthing for file sync

- miniflux for RSS

- WordPress for friends/family websites

- prosody for XMPP

- wallabag for bookmarks

- centralized rsyslog & collectd

- radicale for calendar/tasks/contacts sync

- gammu for sms sending
Hfdf
IMO, jQuery is still very usable for all the "almost static" web sites out there. Sure there are smaller and arguably better options out there, but there's no harm in using it if you're used to it.

I don't see why it being old is an inherent problem.
In the specific case of Leela Zero, there is no NVIDIA lockin whatsoever. Leela Zero uses OpenCL so that people with AMD GPU can use it. Deep learning research code can require NVIDIA; end-user game software mostly can't.
Accepting failure is the prerequisite of learning. This works great when people can do things mostly by themselves - they try something, they fail and learn. When the basic unit to do something becomes a company coordination becomes more important than personal achievements. For coordination you need more stability, less agility. This is quite intuitive - when the leader changes the direction too often - then people tend to stop following him. But I have a feeling that this can also be formalized in terms of the system theory - it is a basic fact that in a system with feedback loops it is often that you need to react slower and less intensively or you can destabilize the system completely (think of https://en.wikipedia.org/wiki/Beer_distribution_game or even just one basic Business Inventory https://books.google.pl/books?id=JSgOSP1qklUC&lpg=PA51&vq=bu...).

Personally I feel unfit for the position of a leader because I tend to be frank about my failures, react to changes quickly. I have been thinking much about making a starup - I have lots of ideas etc. - but I am afraid I would not be a good CEO. Fortunately I discovered that it works quite well when speculating (I now trade crypto - but that is just coincidental).

At the dawn of the era experimenting on a small scale was essential - now we need bigger experiments and this means more coordination, and that means politics unfortunately.
Travelling Dubai to start a business?
If you limit an addict's ability to get medical insurance, you'll end up subsidizing them anyway. Hospitals are prohibited from turning patients away in the US (and I wouldn't want to live in a world where they could do so). So addicts show up, get treated, and default on any bills they incur. The expense from this treatment gets passed on to everyone else. Try visiting an emergency room at 1am on a Saturday night and you'll see what I mean.

Incidentally, do you have the same views on employment, insurance, and government benefits as they pertain to alcohol consumption?
* Mattermost - For chat system. It has proved to be quite stable for over a year and none of the people who used complained of bugs or annoyance. Recent version of mobile app seems to work just fine too. (They rewrote and separated it into a classic version.)

* Dokuwiki - Nothing new but it just works for my personal company memo. Its simplicity is good.

* monit - I love the easy to understand syntax of the config to monitor servers. Can also monitor the freshness of SSL certs when these days everyone uses Let's Encrypt and they expire pretty quickly. And bought m/monit a few times and I get to manage multiple servers' monit from its dashboard. I used to run Prometheus + Grafana for making pretty graphs of server activities but while the set up wasn't so hard, I felt the whole thing was a bit overkill for just monitoring server health and I'm happy with m/monit's simpler graphs. (Also does down sampling and purges old data.)

* InspIRCd - Not using anymore but had it for internal IRC chat before switching to Mattermost.

Tried BitWarden recently for password vault and it seems like a solid one but the clients are not as versatile as Enpass, so, still looking around.