skysight-inc/HackerNews huggingface dataset:
Good to know. I may have added a comment to one myself - especially around copy pasting code in the editor.

Also, just so you know... there's a lot of confusion around riot with your multiple names:

vector.im - name of the company. No social media presence.

riot.im - name of the webapp. This is your twitter handle.

modular.im - name of your hosted product where you are actually making money. For a mission critical product, you dont even have a contact-us email. You also dont have a list of features - you are assuming people who come here are super aware of Matrix features. Even this is so much better - https://docs.google.com/spreadsheets/d/1-UlA4-tslROBDS9IqHal...

matrix.org - half the UI source code is here (other the API reference implementation which is the only thing that a standards organization should have). So where do we file bugs ? on vector-im/riot-web (!!) or matrix.org .

As of Aug 2018, the only skin that exists is vector-im/riot-web; it and matrix-org/matrix-react-sdk should effectively be considered as a single project (for instance, matrix-react-sdk bugs are currently filed against vector-im/riot-web rather than this project).

Its super weird and confusing. Riot is a cool name (and my personal favorite)... but use anything you want. Just have one name - Gitlab does this so very well (with both its open source product and hosted product)
Playbour
> The value proposition of a U2F device like the YubiKey is that not only must you have it present, it's not subject to the TOTP being disclosed like with tokens that require the user to enter a password into a third-party service which could still be a phishing page

Could someone shed some light on this? What is it that prevents a phising page from basically proxying the crypto challenge from the website to your key and present your answer back?
Interesting that these all look black-and-white. I'm guessing using VHS's low-bandwidth chroma channels for additional capacity wasn't worth the added complexity.
You don't challenge the big players in Silicon Valley without retribution.

Honestly, american tech companies disgust me to the point where I'd rather take any alternative over american vendors. Can't wait for a reasonable chinese alternative to paypal.
It’s least risk in the same sense as “Nobody ever got fired for buying IBM [/Microsoft/Oracle].”

In other words, there is actually substantial long-term risk involved in simply electing for the default solution, but it feels safe on the short term and won’t make you look bad to your boss.
How does competition for workers decrease over time through higher wages? If you are implying that more high school graduates would choose a particular industry or profession because of a wage hike, it's still a situation of taking them away from other options.

The market is free enough. There seems to be some collusion, direct or indirect. That would change my proposition though, because companies cooperate because defecting (by increasing wages) doesn't benefit. If one company increases wages, others have to follow. Good for workers, but that's not magically creating any new workers either.

It's not about "corporate profits" but about the marginal profit of an additional worker gained through higher wage offers. On the contrary, at a certain point workers decrease work hours when they get more pay.
The markdown shortcuts example, is an absolute joy to use https://www.slatejs.org/#/markdown-shortcuts
You type in markdown and you see formatted text

I would love to see this in use for comments on HN, Reddit, Github and everywhere else.
Firefox Monitor Launches in 26 Languages and Adds New Desktop Browser Feature
your first option is seemingly the same as IRV.
Why was this renamed from the original title, erasing "in the time of"? This is highly misleading.

This is the actual title of the article: "Massive crater under Greenland’s ice points to climate-altering impact in the time of humans"
So the market has spoken and the business is unsustainable
I don't see any reference to running Mastodon using Docker on the official installation manual. If there is, could you point me to the right direction?
Many small business owners are probably not quite so eager to close up shop because they lack a few employees.

The industries or professions where "living wages" is an issue are usually not the ones desperate for labor.
Also very interested in this, we've had issues with dealing with reconciling external copy and pasting.
Should punctuation training come from welfare money?
Nope, those businesses are sustainable, they just don't pay higher wages to hire more people because that would be unsustainable.
Hard to read a paper that repeats “legacy languages” many times just on the first page.
The usual approach to spoofing fingerprints is by somehow acquiring a latent fingerprint from a "genuine" user, creating a mold from this latent fingerprint through e.g. [1], and then applying the mold to the fingerprint sensor.

What these authors previously showed is that you can create a "masterprint" on a representation (feature vector) level that "averages" a lot of fingerprints together, creating something that is usually quite close to any individual's fingerprint, and thus is able to fool recognition software quite often.

In practice, this would require an attacker to by-pass the sensor and feature extractor parts of a biometric system, and inject their masterprint feature vectors directly into the biometric comparator (one that compares the current sample, to a template derived from previously enrolled samples). Considering these systems are usually tightly integrated, this is quite a hard attack to do.

What the authors now present is a way to generate "DeepMasterprints". These are actual images that can be used to create molds such as [1], and can be applied to any fingerprint sensor that doesn't have a sufficient Presentation Attack Detection(PAD) mechanism (Hint: supposedly most PADs on smart phones are easy to by-pass, same thing for older fingerprint sensors). For these spoofs attacks, the difficult part was actually getting a high quality print off the genuine user.. but now it turns out this isn't really necessary and you can use a "deepmasterprint" to get a high enough chance of being mistaken for _any_ genuine user.

[1] http://www2.washjeff.edu/users/ahollandminkley/Biometric/ind...
TypeError: Cannot read property 'key' of undefined
at a.n.renderBlockButton (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:42:2277...)
at a.value (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:42:2505...)
at Mi (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:6266...)
at Ti (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:6755...)
at mo (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:7712...)
at fo (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:7743...)
at Zo (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:8098...)
at Vo (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:8049...)
at Wo (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:8032...)
at Io (https://www.slatejs.org/main-1783ad63c9cf9b77dd4d.js:22:7969...)

in a
in a
in a
in div
in Styled(div)
in div
in a
in a
in a
in a
I think you're being a little too pedantic, the meaning seemed pretty clear to me...

1) In some sectors and job roles pay is what it is because there are other hard costs involved, the quantity of labor required is prohibitively high, and/or customers are not willing to pay $75 for <insert name of item or service>. Customers are willing to pay $25 for <insert name of item or service>, so you take 25 and subtract all the other costs involved as well as a profit margin to make it worth your while, do some multiplication (or division, as appropriate) to figure out how many of <insert name of item or service> each person can complete in a given hour, and end up being able to pay each person working on <insert name of item or service> $10 per hour. Whether or not someone is willing to toil away 8 hours a day on <insert name of item or service> for $10 per hour... well, that's what we're talking about.

2) What will disappear? The manual carwashes, obviously. Whether they get replaced by automatic ones (which eliminates the prohibitively high labor cost at a marginal increase in hard costs that decreases over time) or simply by people washing their cars themselves (which eliminates all of the above) doesn't really matter, as we're talking about labor issues and in either scenario the guy washing the car is out of his job. So what? So nothing, except the whole topic we're discussing.
SEC Division of Enforcement 2018 Annual Report [pdf]
Even the study's critics say it was well-run.
Yup. To the extent I use gsuite, I use it with a yubikey for authentication.
Raspberry Pi Model 3A+
Vectordash is also cool if you want to make money by leasing your GPU
Essentially it borrows the protections from TLS. Here's a link to the relevant part of the spec: https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fid...

(Sorry if this comes across as RTFM, but I figured the source is better than my attempt at explaining)
Two YT channels with walking tours (in other countries):

https://www.youtube.com/user/keeezi/videos

https://www.youtube.com/channel/UCQ-JKqNo_T0yoeDZff1y7Kw/vid...

I recommend this one in Kiev: https://www.youtube.com/watch?v=hUGIJYWFmcw
The benefits of industry-leading training for retail
> I think that most people, be them scientists, religious leaders, politicians, or even laymen, will have their lives changed forever.

Scientists yes, the rest won't care that much. It'll make the news sure but it'll be out of the headlines within a week. Maybe I'm a cynic but I'd put money on that being the case.

Additionally speaking as a religious person, it wouldn't change any of my beliefs. And I'm struggling to see how it would for others of my faith really.
>you're essentially saying that those workers have better options already available

If you're following the fable of capitalism, those people should start their own, more efficient businesses if none are available.
The other day I heard Time Well Spent get thoroughly mocked in The Culture podcast, but I was too out of the loop to understand why. Still am.
If I put sawdust in the bread i make to "make my business sustainable" I'll end up in jail,
why is exploiting my workers more acceptable than that?

"well yeah but the workers consented "

People do a lot of things when desperate, that shouldn't inform how we design our society
For me, it's a matter of writing down my thoughts and revisit them by reading my notes later. I can adjust accordingly by refining my thoughts in rewriting them.
> microbes that originated someplace other than Earth

Well we could never be sure of that without real samples. Who's to say it's not all the result of panspermia?
There's no way it can be just as valuable.

For one, if you're not using their site, they can't show you ads there.
Okay, in that regard the assumption that "the government or its postal system selectively withholds the goods payed for through cryptographic protocols" seems questionable. Is this a real problem that we're seeing in some markets? As far as I'm aware it seems that in general delivery services are decoupled from the payment for goods; the delivery system, no matter if it's government postal system or private parcel delivery, does not know and can not know how (and if) the goods were paid for. They may require some declaration from the sender about the value for insurance and customs purposes, but that's different than the payment data.
You register more than one key, and use your backup. If the site lets you in without one of the keys you registered, it's a security theater :)
Probably because ODBC is old technology, if you had been developing Windows software in the late 90'ies you would probably have known.
The problem is that the technology that JWST is built with is no longer available. The development cycle moved so fast that the industrial bits needed to manufacture JWST are no longer there, even if we have complete and detailed plans.

Very similar with how building a Saturn V today is logistically impossible, even if we can build more modern, efficient and cheaper rockets.
You use a less convenient backup authentication.

The specifics depend on the use case, but even if you fall back to something less secure like an email and TOTP, you still come out ahead overall because most authentications are done by U2F.
If this isn't welfare, what is?
Wages have stagnated since the 1970s, so "they" definitely don't have to raise pay:

https://upload.wikimedia.org/wikipedia/commons/thumb/7/73/US...
You could build some measure of "loyalty" into a contract:

* We train you for six months and pay you full salary.

* You have to work for us for two years past the end of your training period.

* If you leave before that, you owe us 50% of salary from the training period. (or whatever)

In a competitive market, you might even see other companies willing to buy employees out of their contracts.
Yes google does.

The spec strongly encourages providers to allow multiple keys, and allow you to nickname them.

As far as I know everyone allows as many keys as you like except Vanguard and Amazon AWS (which both also only accept Yubico keys)
Yeah, sounds like the humans have made the crater. Not bad of us doing that under the ice.
Chess saves people from alcohol in India http://www.bbc.com/travel/story/20170511-the-indian-village-...
Your're thinking of the shape of the pot. You're not thinking about the angle and other factors of your hand or other technical details. The student, on the other hand, has to concentrate on the mechanics of it. When that's automatic then you can think about the artistic part of it instead.
As you said, it's not mindless, just at a different level. You focus on what you want to achieve, not about the grits and details of how to do it. You're not really conscious about the latter.
I've used SweetHome3D (http://www.sweethome3d.com/)
and was quite happy with it.
I don’t think that article’s accurate. At least not anymore. Modern C++ compilers do less while compiling, and much more while linking. This allows them to inline more stuff and apply some other optimizations.

VC++ calls that thing “Link-time Code Generation”: https://docs.microsoft.com/en-us/cpp/build/reference/ltcg-li...

LLVM calls it “Link Time Optimization”, pretty similar: http://llvm.org/docs/LinkTimeOptimization.html
I keep trying to ask people this "What do you think the farmers will do if they can't grow oil palms?".

Cause the answer is obvious. They will not stop trying to make a living and working hard to feed their families. No, instead of growing the oil palm they will grow something else. And now we're at best right back where we started, but more realistically we are worse off, because there is a reason the farmers prefer oil palms. It is obviously because they are the most profitable, because they require the least work/land/capital for the most output. So the second best option they will choose for growing will be something that is even worse for the environment and the orangutans!
Microsoft gave us LogParser in 2005

https://en.m.wikipedia.org/wiki/Logparser
Google allows you to print a set of codes [1] that can be used to access your account if your device is lost. I printed a set and have them stored in a secure place at home. Some people keep them in their wallet/bag/similar.

[1] https://support.google.com/accounts/answer/1187538
How IVF with donor eggs will help you to become a mother after 40?
> some sites are using it to detect spam submitted in web forms, for example.

I actually have the web server send the form contents via email because my email server runs SpamAssassin and it has done a great job catching form spam.
Yeah, while you are working, your boss is busy trying to outsource your job.
I think it's an important list, even if somewhat sloppy. It would be to everyone's advantage if product reviewers like Consumer Reports, various tech columnists, blogs and so on, got the message that privacy matters. They need to start including privacy as a component of their review.

Pressure for companies to go green has worked over time; pressure for companies to go "quiet" -- that is pro-privacy -- could have the same effect.
Generally yes, but the admin has the power to either enforce it (for some or all users) or disable it domain wide.

If you were to create a new GSuite domain today, it'd be allowed for all users.
No, that's not why we use slang, and a propeller and a screw are actually different.
Many apps that have collaboration features support some type of mentions and labels to tag users.
A lottery is randomly distributed across all those who put in their lots in, while charging an entry fee publicly and arbitrarily discriminates against those with less money.

A lottery has the merit, at least, of being procedurally fair, i.e. all those who enter have an equal chance of being chosen on non-arbitrary (random) grounds.

I don't see a good reason why having less money should invalidate your claim to a national park held in common among all citizens.

Consider the political equivalent: a system of sortition that elects citizens by lottery; and a system of oligarchy that elects citizens according to who is able and willing to pay.

It is a question about what kind of society and public life you want to encourage: greed, productivism and hierarchy; or inclusiveness, community and equality.
That's astronomical for that amount of space.
Less developed countries tend to have higher growth rate, so there is a reason to expect convergence.
> not a job listing site or category for "Smiling faces" aka 'we don't test for weed in your system

Why's this called 'smiling faces'?
Integration tests are much slower usually, and you are testing tons of things at the same time. Something breaks (like in that example) and you have no idea of what and why went wrong.

If you unit test properly you are unit testing the business logic, that you have to properly divide and write in a modular fashion. If you want to test a more complex scenario, just add initial conditions or behaviors. If you can't do that or don't know how to do that, then you don't know what your code is doing or your code is bad designed. And that may be the case we read above.

Tests rarely break because they help you not breaking the code and functionalities, and they are so fast and efficient on making you realizing that that you don't feel the pain of it.

I can't imagine any example where "easy to unit test" != simple
For a different feel, check out this channel:

https://www.youtube.com/user/lylehsaxon

He’s been recording “walkabouts” in Tokyo since 1990, to present day. Very raw footage, but interesting to see candid Japan street life from the last 28 years
Obligatory post of rich text editors/frameworks: https://gist.github.com/manigandham/65543a0bc2bf7006a487

Lots of progress in this space but they all seem to be coalescing into the same basic style. For standard apps that just need rich/html input, I highly recommend Froala.
Because capitalism forces them between a job that does not pay enough and no money to buy food and housing and clothing and such.

The solution is of course something like a basic income to liberate people and break the power of companies.
Wishapp – Daily Wishes – Images, Quotes, Gifs and Facts
South America Content Delivery Network Market
BLU USB Drivers for Windows
I think most people would classify most things as life if they reproduce and have a metabolism.
> "Though not as cataclysmic as the dinosaur-killing Chicxulub impact, which carved out a 200-kilometer-wide crater in Mexico about 66 million years ago"

To clarify, this theory is has been called into question. I believe there have been previous HN discussions.
The origin of the page is part of the signed payload. So if another website presented the challenge, the origin part wouldn't match.

That does assume the thing communicating with the security key is not compromised though (the browser/OS).

Not entirely sure about how Google Smart Lock on iOS works in this regard - since it communicates over BLE and could specify any origin, and then the process of going between the app/web on iOS can't be secured particularly well.

Also unclear how origins would work with regards to non-web applications. e.g. URL schemes aren't unique/owned/defendable.
Data Science Design Patterns
At the risk of hijacking this discussion, why is installing server-side web apps so ludicrously complicated? It's madness.

I'd love to see more developers succeed with their self-hosted web apps. But it simply will not happen when the barrier to installation is so high. Too many developers vastly underestimate just how complicated installation is.

Or maybe they prefer the complications because it makes SaaS a much more attractive option to customers when there isn't a simple one-click install option?

I asked this question previously: https://news.ycombinator.com/item?id=18385497

I just find the situation exasperating. Would love to hear why people think this is a non-issue. And let me repeat: a simple, easy-to-install option for server-side software would unlock countless opportunities for developers.
>That money is lost to the government, not to your actual costs (labor/goods/etc).

as long as the money is lost ... I'm not arguing that sticker price of that employee went up. I'm saying that my net total changes differently while i'm paying the same sticker price. In the case of lower taxes my total decreases more when i pay the same sticker price. Thus it is more costly to me.

> If I suddenly stop robbing you, you're suggesting that now all of your costs would increase.

Obviously. For better illustration lets say you take 90%.
Before, for every $1 paid in my costs, my end total was decreasing by $0.1 and you were losing $0.9. Once robbing stops my total would be decreasing $1 for each $1 paid in my costs.

So, in order to obtain the same thing, in one situation i'd loose $0.1 and in another - $1. I.e. in one situation the same thing is 10 times cheaper for me than in the other.
Most of the action has moved to WhatsApp and Instagram. Though engagement fatigue can be seen there too.

At the end every service will drop to its utility.

I remember sitting in front of my Desktop and searching pointless stuff in Google for hours in the 2000s, these days I do it only when I actually do need to search something. Even there I search for things to buy on Amazon or Flipkart. People I search on LinkedIn or Facebook.
Medicaid is an option, especially if you have kids. Google found this, which seems useful: https://www.policygenius.com/blog/a-state-by-state-guide-to-...
Swiss watchdog investigates banks over alleged Apple Pay & Samsung pay boycott
Isn't that mostly due to momentum? But if Oracle can't keep up with the features customers need, they'll lose that momentum.

Enterprise software sales cycles are slow, but once they start turning, it's hard to turn them back.
HN has a max title length and that's over it. Would've been better to chop off the ending.
Perhaps the most valuable part of this whole thing are the tests. Perhaps with that test bank, one could start from scratch to write a new database.
It has nothing to do with the point OP was making.
Then you'll have to lie to the user. Simple as that.
U2F can, but the Advanced Protection program can't currently.
That's what most electromagnetic thrusters do.
This is just corporate posturing. Apple recently banned VPN's that have the potential to block ads including Freedom [1].

[1] https://freedom.to/blog/freedom-has-been-temporarily-removed...
Gadgetbridge is an open source app that reverse engineers the protocols from many popular watches but the health page on the app is super basic. Could really do with a clean up and better charts
in the credits u should put the link of Lucas as the first one, since this is basically a rip of from the Codrops demo. (like most if not all the things u post)
Woo! Another pi to add to my collection of unused pis.