skysight-inc/HackerNews huggingface dataset:
What? Three keystrokes?!

You say you open a new tab and then three keystrokes you're there. Well, My _four_ keystrokes include opening the new tab.

Depress CTRL; T; release CTRL; N; Return.

Or I could say it's three "keyboard phrases" by saying it's ^T N Return, but that feels like cheating.

TL;DR, "n" fully autocompletes to HN.

At one point adding a "/" at the end of the URL (autocomplete just filled in the domain with no trailing "/") would complete to "/best", but I seem to have to do "/b" now.
As Cars Collect More Data, Companies Try to Move It All Faster
I wonder whats going on in bangaladesh these days after the protests a few weeks ago
The Secret to Ant Efficiency Is Idleness
I can't think of anyone who needs free tuition less than medical students. When they finish their residency they enter a highly protected, highly paid workforce and can easily pay back their loans. Yeah it sucks until you're a doctor but NYU could fund only the interest so that graduates could start paying back their loans when they're 35 or so.
We (Cyph) have been pretty disappointed in the Chrome team's decision to kill HPKP.

Paraphrasing, but IIRC the reasoning pretty much boiled down to "it's a pain to maintain and Expect-CT is kind of similar anyway" — which I think is a really weak justification for harming end user security and breaking established APIs that people depend on in production. Fingers crossed that Firefox keeps it alive!

That said, it doesn't entirely break WebSign in Chrome, just weakens a bit further below strict TOFU. https://www.cyph.com/websign goes into detail, but WebSign has some client-side logic to validate its own hash against a signed whitelist. The major downsides to relying on this are:

1. It depends on a caching layer, not a security feature. This means that any guarantees are potentially out the window if a browser vendor decides to do something crazy for performance reasons or whatever.

2. It opens up an attack vector where it can be forcibly unpinned by filling up the user's disk and making the browser evict the cached WebSign instance.

All in all I think it's still basically fine, but shipping an optional browser extension for hardening WebSign is now a higher priority because of this.
Microsoft and Amazon made their voice assistants share data
Mr. Terpin had enrolled to such enhanced security program from AT&T. AT&T broke their own rules. Thus, the lawsuit.

Thread https://twitter.com/stephendpalley/status/102973234509876428...
For the most part, those types of facilities are paid for out of athletic department funds and donations.

yes the sorts of facilities that universities build for athletics are extravagant and many would say ridiculous, but they really don't have a bearing on the cost of tuition.
I did the same, but instead decided most of those sites weren't worth my time. (For the few that I cared about, I whitelisted the bits needed to function).
There are huge political headwinds, namely, that the party in charge of all three branches of government considers drug addiction to be a moral failing, not a disease. They are not willing to decriminalize drugs and pay for treatment programs -- they would rather continue the draconian approach of locking up anyone found to be in possession. Look at how much they are already railing against marijuana legalization, safe injection sites, lenient sentencing for non-violent drug offenders, and other similar measures.

I don't know how you can be so rosy about the problem being solved within a decade when the war on drugs has been going on for many decades already.
Where in Greek/Roman mythology do you find an eternal hell fire? That sounds very surprising to me...
That's SANE, a huge project to re-implement all scanner drivers in one megaproject. It can be a bit of a bear if the plug and play stuff doesn't work. On my scanner it defaults to a driver that only generates a fuzzy black and white image so I have to force it to use the right driver.
It is funny in a way, the national and state parks may be America's best tourist feature hands down. It's a remarkable collection. Places like NYC can obviously be a great experience. The parks are pretty special though, a lot of the other typical touristy stuff you can more or less get in numerous other countries. And it's inexpensive, a $80 annual pass gets multiple people access to thousands of federal recreation spots and all 60 national parks.
But it's still so easy to just clear cookies or open it in an incognito tab...
Location history != location tracking no matter how much some people want it to be, it's a location feature not the master switch for all location features.
I first saw the word "tuple" when I started learning Python about 4 years ago, and I initially pronounced it "tuh-ple" in my head.

When I got a job doing Python a month in, my co-worker pronounced it "too-ple" and I quickly adopted that pronunciation.
Getting US Visitor visa is not that easy; All the decision making things are evaluated beforehand; & applicant is seen for 30 seconds only. Unmarried, less than 40, earning moderate money, does not help. I visited Schengen 10+ times, & in betweb those visits, US refused me twice on seperate occasions.
This link should be updated to https://www.redblobgames.com/pathfinding/a-star/introduction... which is the updated version of the page which the author links to in the page posted.
A subjective definition seems fine. If I’m the one who has to live with him, my definition controls.
Who cares?

Both processes involve doing work by consuming energy. In one case, the work is moving heat, and in the other case, the work is producing heat. The term "waste" is pretty meaningless in this context; what you really have is the question "how much energy does this process consume?" The answer to that question won't change depending on how you label the products.
Nor were those gay folks by the baker. He didn’t refuse service because they were gay per se. He refused because they wanted a _gay wedding cake_. Had they ordered a birthday cake, he would have happily made it for them. It’s like if you go into a Muslim bakery and order a cake with a picture of prophet Mohammad an it. Go try it, see how that works out for you.
Not really, no. The heuristic is very carefully designed to minimize mistakes and glitches. Practically guaranteed no configuration bits would be added in that area since the code has to work for a few hundred million people hundreds to thousands of times a day (yeah...).

However, you can delete autocomplete entries by highlighting them with arrow keys and then using Shift+Delete. (Contrary to intuition, this will not put them in your clipboard.) I'm not sure where this started but I remember using it in Firefox about 10 years ago as well.
Why is it funny? That seems like exactly the high load, high availability requirements that would require software quality way higher than in a typical SV app that never gets above 1k DAU.
In this case the middlemen do serve a purpose. The infrastructure that provides farmers access to a global market is typically provided by companies like Cargill and ADM. The part this article points out which is important is the value of on farm storage. By storing a large amount of grain and using modern hedging strategies afforded by most crops being commodities farmers can make money in an area otherwise controlled by Adm and Cargill (storage and marketing). Distribution of the product globally will be hard for any large farm to handle at scale.
I thought the usual solution is to make it very clear to the client that yak shaving is billable time. I even have a section in my invoice that goes into detail about how much they're paying me for that yak shaving time. The yak shaving stops pretty damned fast after they get that first invoice.
The Blues Brothers scene in question is on YouTube [0] (this 5-ish minute version sets up the musical number; the shorter versions don't).

That version, btw, is embedded in this interview of John Landis, the director of the film on Deadline Hollywood. Landis discusses his pleasure at having Aretha Franklin participate in the film and more [1].

He stresses an interesting point which is that the movie came out at a time when disco eclipsed other genres like the blues...to the point that some record companies passed on releasing the film's soundtrack album, thinking that it wouldn't sell (as Landis points out, it wound up going platinum [2]). And he describes how the movie was made to use Belushi's and Akroyd's celebrity to bring attention to the then-neglected previous generation of blues and R&B musicians -- apparently, it worked.

[0] https://www.youtube.com/watch?v=WY66elCQkYk

[1] https://deadline.com/2018/08/john-landis-aretha-franklin-the...

[2] https://www.riaa.com/gold-platinum/?tab_active=default-award...
Yes I agree. It's not really a security problem. My bad, should have worded it better.
I think you're right to pick up on this "side channel resistance or reliable constant time operations" wording, actually. If the OpenPGPjs library is using WebCrypto for the primitives, then what are the non-constant time operations and JavaScript-specific side channels that have security implications? Such a claim should really be accompanied by a specific threat model.

Is the supposed threat actor a MitM that can use the timing of the packets your browser sends to work out when you stopped typing your email and when the email was sent to the server, allowing them to calculate the time taken by the encryption operation and thus infer something about the plaintext of the email?

Alternatively, is the threat actor someone running JavaScript code in another tab of the same browser, who can infer how much CPU the browser is using at any given time, with enough accuracy to reveal bits of the private key?

Perhaps they are imagining an attacker who could do both, and it would be very interesting to see a practical attack along these lines, but I still think that a decent WebCrypto implementation should make it close to impossible for an attacker to extract any useful information unless the user is sending billions of emails through the ProtonMail web client.
Patty brings a fresh perspective to hiring and compensation for software engineers. I think she has done a lot to move programmer pay away from "programmers are interchangeable cogs" to "pay based on value to the business".

I joined Netflix when Patty was the head of HR. Bethany, who she mentions, was the recruiter that reached out to me. Their recruiting process was masterful and it started with Bethany's first message - "They got you first, but they underestimate how valuable you are." I had joined Microsoft right out of college, worked there for 7 years and was feeling very under appreciated. She had taken the time to look at my LinkedIn profile and write a message tailored for me. She probably used that line on a lot of people in my situation, but it worked! So I opened her message.

The rest of the process was like staying at the Ritz Carlton. They treat you like a celebrity. It's a carefully crafted candidate experience. It's really impressive.

Side note: Anthony Park was my manager when I joined Netflix. He's hands down the best manager I've ever had and he's brilliant. You should try and work for him at Netflix if you can.
You are correct that if the bad guy co-locates at the same IP then it is a problem. However that then becomes an issue with the service that chose to host on a shared IP.

For other services that use dedicated IPs but spin up/down machines based on load etc it is still much more useful and secure than running a proxy with a CA that generates fake certificates, especially when you can’t update the trust root of the client device (often the case with embedded devices and those that are managed by the third party service provider)
The Ubiquity of Large Graphs and Surprising Challenges of Graph Processing [pdf]
You'll realise that some thing you'll hate studying will be extremely important in your job one day and will be glad you studied them.

On the other hand, university is a tunnel and you'd better get outside in the real world as soon as you can :)
> Compare that to one way coded messages over hf radio

Having a shortwave radio in your possession is justification enough to haul you in for questing in some countries.

There is also relatively little "radio traffic" to inspect relative to internet traffic.
Some have, but the topic is China. If you want to generalise it would make more sense to pick better examples.
The Cloud Is Coming to the Suburbs
(You can with Rust, yes)
On Firefox, I disable autocompletion from browser history, but keep it enabled for bookmarks. So much easier to avoid unwanted side-tracks.
Likewise. I'd never have expected to say this about a NatGeo article but a warning as to how graphic the pictures were would have been helpful
It's amusing that the author complains about a 2-week process for getting a Visa where Iranians have to wait months and in some cases a couple of years for a simple visitor Visa to US, and in many cases be denied for no good reason
I recall reading somewhere that the "correct" way to use two commas, is when the words between the two commas can be omitted from the sentence. I don't follow that rule, as you might have guessed. I personally use periods as a "resting point" in the middle of a sentence. Ie, if I were saying this sentence out loud to an audience, at which points would I pause?
> An eternal hell fire is Greek/Roman mythology, it was only merged with Christianity because of the Roman Catholic Church.

No, it's actually (a version of) the Jewish myth of Gehenna [0], and it's incorporated into Christianity because it is referenced directly in the Bible, both the general named myth as a place people are cast for punishment (many times, in all three synoptic Gospels plus James) and the specific equation with it being a place of unquenchable fire (Mark 9:43).

[0] which may at some point and in some details have been influenced by Greco-Roman mythology, but had quite a long history within pre-Christian Judaism, arising out of references to it as a specific physical place where child sacrifice by fire occurred in the Hebrew Bible.
the second part of that quote makes it much less worse. 'everything ready at their bedsides' implies resisting an armed attack as opposed to going out and hurting other people. previously i'd only seen the 'battle rifles' ready part of the quote in the media. though, possibly the rest of the context is probably worse for jones :/
Your definition of privilege was 'unearned'. I would challenge that by saying that privilege is earned by successive generations generating and maintanining said privilege.

https://www.passportindex.org/byRank.php

The nation at the top of this list was a low-income, third world nation 60 years ago. Do you think this happened by accident?
They can if they don't believe they are a US citizen. A birth certificate isn't definitive and could be rejected.
I assume this? https://youtu.be/Lstk0Xe8sdg Her and Celine Dion are amazing here
Any chance someone might make this work with Nextcloud?
Cool! Can we use this from javascript? The example shows python, but this would be helpful if I can use javascript.
Keep in mind that there’s actually a path to breaking people out of this point of view, but it’s a really deep, dark rabbit hole, with lasting ramifications.

When you take this principle into account, however, a huge segment of the world makes much more sense, although the realities that become evident are kind of horrible.

The fastest path to lead people out of this mindset, is to prove to them their own error by bringing them in on some misbehavior (such that they perceive it as a serious violation of their own personal code), for which they both benefit from, experience no consequences, and find deep tempatation to repeat.

To broach the subject of crossing some personal line with a person like this raises an eyebrow. Crossing that line in front of them reveals a mixture of feelings. Inviting them to participate is met with uncertainty. Pulling the trigger with them gives way to a period of paranoia, until the coast is clear. Then, twice then, three times. Now, they’re convinced that morality isn’t set in stone, and laws are the commands of mere mortals, to be broken at will.

But, now what you have on your hands is a convert. Once conservative, and yet still as much, but eager to experiment and challenge their own views. This is where stereotypical morally abivalent, yet superficially conservative people come from. Seduced out of their naive, obedient world view, but entertaining dubious integrity. So now it’s no longer divine authority in an imperfect world conceived by some paranormal perfection, but instead, simply might makes right. And so, you get tasteless materialism, and a ruthlessness to obtain status.

After a certain age, this sort of thing really can’t happen with some people. When you’re a teenager, transgressing certain boundaries can be harmless and naive, but after a certain age, cheap thrills don’t work. That’s why we find a broad split of sheltered, uptight squares, mixed in with smaller segments of snobby, cavalier libertines or cheesey, greedy sociopaths.

It’s a distribution of age brackets for teenage misbehavior. The cornier the yuppie, the later in college they started breaking the rules, or maybe they never broke any rules, and that’s why they’re stuck with this holier-than-thou attitude.
How does it handle Oblique Strategies?
definitely has not worked for me in the past, either. I think I was on Alaska at the time.
You can't say shit like this without backing it up. I think you are full of it and just attempting character assassination.
The X-FILES: avoiding concurrency boilerplate with golang.org/x/sync
> I held out the idea that the blockchain would be useful as a tool to let suppliers in Europe or China deal with large farms or groups of farms but it hasn't happened so far.

This is an area of active work at IBM using the open source Hyperledger Fabric project.

https://www.ibm.com/developerworks/cloud/library/cl-coffee-w...

https://blogs.wsj.com/cio/2018/06/25/walmart-led-blockchain-...

Edit: Here is an example project to conceptually show how it works.
https://github.com/IBM/blockchainbean/
Is silently making people disappear really that much better?
My college professors pronounced it as too-ple, CJ Date says to pronounce it as tuh-ple (rhyming with couple).
It's just silicon valley startup mentality.

You literally work inside a room with no windows, poor ventilation, and sound dampening. Anyone who doesn't go home after 8 hours has something wrong with them.
I googled "red book" and found one by Jung, and one by Mao. I tried adding "computer science" and got one on relational databases, and one on OpenGL.

If knowing "the red book" were so important to Google, you'd think they would make sure their own search engine knew how to find it.

I have no idea which book they're referring to. For red computer science books, the only ones that come to mind are Numerical Recipes (probably not a Google favorite), one version of Appel's compiler book (not really an algorithms book), and perhaps the old edition of AIMA (though on further inspection, it's more brown).
Great article but never answers the question ....freaking click bait
The article buries the lede pretty badly.

>The government’s explanatory note says that the Bill could force a manufacturer to ... install government software on it

If the bill passes, using a phone purchased in Australia is no longer secure. I know my security threat model excludes manufacturer-installed root kits - is there a reasonable strategy for mitigating this risk? Buying a phone in the US and importing it yourself is one, but that seems very awkward.

edit: reading the actual text, there's some protection in section 317ZG, which prohibits the law from being used to cause "systematic weakness" or "systematic vulnerability", but explicitly carves out an exception for targeting specific devices. So for a specific example, the bill would allow the Australian government to compel Apple to secretly push an over-the-air update to backdoor a specific device of interest.

>The mere fact that a capability to selectively assist agencies with access to a target device exists will not
necessarily mean that a systemic weakness has been built.

Yeah, the bill is definitely designed to allow exactly the scenario I described. They're after using the code-signing keys and technical expertise of device manufacturers and communication program developers to target individual devices with encryption backdoors.

>Likewise, a notice may require a provider to facilitate access to information prior to or after an encryption
method is employed, as this does not weaken the encryption itself.

Definitely planning on backdooring devices and reading the messages pre-encryption and post-decryption.
UPDATE: I am well into my way of interviews. I currently have to provide a small VueJS demo, which I am trying to hammer out this week. Lambda School has been very generous and I am part of there program called Lambda Next where I am speaking with their career coach which will help with interview practicing, resume rebuilding, etc.

I just did a phone screen with Amazon today as well in which I am going to have a follow up phone interview that will last 60-75 minutes. If that goes well I have to prepare for a whiteboard interview.

I am still very much in need to reach the final $200 of my campaign located here -- https://www.gofundme.com/homeless-dev-support

Thank you again for everyone reaching out and all of the feedback. I am almost there!!
Anthony was not a VP when he started. The story she's sharing occurred shortly after he was hired when he was just an individual contributor.

I worked for Anthony at Netflix. He's one of the smartest people I've met.

Also, Patty was making the exact same point as you on job titles. (Note the quotes.) Netflix didn't care about your title at all when they came recruiting.
I am using pwgen, any reason I shouldn't?
Trial by Combat? Trial by Cake
The added time waste involved should get allotted with the rest of the travel cost, and judged likewise.
I worked with Anthony for years. He's an excellent manager and communicator.

I think you're misinterpreting what the article said.
> though, possibly the rest of the context is probably worse for jones :/

If the rest of the context was worse for jones, the press would have used it.
our phone numbers are more a part of
our identity than ever before

Okay, great idea: phone numbers are the new social security number.

Oh but wait, not really. Not when I can set up a prepaid phone for $30. Or three for $90. Or what about office phones and VOIP services that accept text messages on office desktop phones. Or virtual services like twilio, and on and on.

Yeah, not really. Phones aren’t quite anyone’s identity at all.

Don’t pretend like the world is so beholden to some AOL homepage instagram vanity account, signed up with a free email address.
It's a breakhrough when it's shipped in devices. Only then, not before.
> At the moment, a user can’t read the items on the app unless they penalize themselves by buying credits. Although the app is about breaking the bad habit of reading the items immediately..

I think there can also be an issue with always saving things to read later. I often end up saving more articles to pocket than I actually end up reading. It may be a good idea to reduce overall "unfocused" browse-and-click time too...
> let students discharge student loans via bankruptcy

This is a fine idea, but you have to recognize that this just means approximately no one gets student loans (and those who do get them don't need them). Think about it: if you come out of college with, say, $20k of debt (granting that this might bring down prices) and no assets, bankruptcy is a very tempting option. Student loans are just inherently problematic - the people who need them have no assets, and the thing they pay for can't be used to secure the loan.

Sure, prices would come down, but partially because so many people would be priced out and demand would drop. The solution has to involve more than that.