skysight-inc/HackerNews huggingface dataset:
> Official Secrets act only applies to people who signed it.

No it doesn't. It's a law, not a contract. They only get you to sign to it in order to remind you of the fact you're bound by it.
Writing your password down on paper seems reasonable. Personally I use something that I deem to be secure, which is a reasonably long, but memorable (for me) sentence, using a pretty large character set. Feel free to Math me wrong on that.

I use LastPass (seem to be in the minority here - there are definitely some things about it that bother me; never tried 1Password). Password manager has simplified my life. Not much any more do I have to wonder which password I used where, etc.
Decisions can be really useful to see not only why other users selected the stack they use, but also what related tools they used. The conversation that come out of that can be really informative to make a long term decision.
First risk genes for ADHD found
Wish someone started a list of "Posts on HN underestimating X".
> It's worth mentioning that there are much faster JSON parsing libraries than the default in Ruby stdlib.

I am on the edge of my seat now.

Would you mind listing which libraries are much (say, an order of magnitude) faster?
Maybe because we don't let a fringe group unilaterally redefine key English words?

And maybe because when people use a word we don't automatically assume the worst intent unless there is evidence to support it?
Arcesium | Distributed Systems Engineer | Infrastructure Engineer | Software Engineer | Interns | New York, NY | Onsite | Full-Time | Visa

Arcesium is a post-trade technology and professional services firm. We offer a new way for hedge fund managers to scale their business while maintaining control of critical non-investment activities. Arcesium combines a comprehensive and fully-integrated technology platform with a team of experienced hedge fund professionals to solve the most complex post-trade challenges of asset managers. From real-time integration with order management systems to robust and automated oversight of third-party administrators, Arcesium offers managers an elegant, unified, and expert solution for their entire post-trade process.

Arcesium is hiring the for following roles:

1.	Distributed Systems Engineer
2.	Infrastructure Engineer
3.	Software Engineer
4.	Software Engineer Intern
5.	Summer Core Infrastructure Intern
6.	Summer Software Engineer Intern

To learn more about these positions, please visit our Careers page.

To be considered, please send your resume to careers@arcesium.com.
I am private beta testing an app that does exactly what is described.
Yes, if you use 3 common words it's not a good idea.

But most people don't, and the attacker doesn't know that.

It's useless to use a strong password if it's going to be stored in plaintext on some service.
Like any law, it applies to those that Australia has jurisdiction over. Visitors to Australia are under the jurisdiction of Australian law.
Towards language support for distributed systems
“all the shady stuff ... things like put it on the front page and in the newsletter and whatnot.”

I really don’t get how you could consider them helping to promote popular campaigns shady. I mean it’s the very point of the entire platform, and how both they and their users and the backers of projects gain value.
The potentially deadly bacterium that's on everyone's skin
Is this a research language? I don't understand how this offers anything beyond what already exists.

I'm also suspicious of the fact that it's implemented in Go. I would think that someone who knew functional programming well enough to create a new language would implement the language in Haskell or OCaml or even Standard ML.

Also the type system looks pretty bad. No algebraic data types.
Sure I’ll add on to the black engineer diaspora.

I find this industry selects for and exacerbates social anxiety issues amongst almost any demographic.

“Is this one of those circumstances where a cabal of men misunderstand my ability to contribute to their company?”

Most experience comments I’ve read in this thread are social anxiety related. And then people debate on the quality of that particular social anxiety issue than the similarities of there being social anxiety at all.

My experience has been mostly positive and inclusive. But this isnt intended to be another anecdotal data point, this is intended to highlight widespread social anxiety.
3 Simple Steps for Building a Killer Sales Funnel
What Do Americans Think about Food Additives and GMOs?
There is a network effect. Imagine if you made a ridesharing app with only one driver. No one would use the app due to high wait times. That's an edge case but it gets the point across: too few drivers and no one will use your app, and if no one uses the app no drivers will enlist in your service.
Facebook Defends Data Policies on Heels of Incriminating Internal Docs
That's fair and I shouldn't have let that color my opinion of the entire community. But for hot button issues knee jerk reactions do tend to set the tone for conversations, if not dominate them.
Freshwater Is Getting Saltier, Threatening People and Wildlife
So Firefox's Do Not Track is harming the way you track people through advertising?

I'd say it's working perfectly, then. Maybe it is your business that is broken.
why would you want an immutable ledger? Just make it peer-to-peer and encrypted. The whole world doesn't need to store a copy of someone's PMs or even their public posts.
The chinese chat rooms are going wild with rumors about the cinnection between the arrest, the dinner, the suicide and the fire.
Here's 1Password's article on creating a master password (spoilers: it is _way_ better): https://blog.1password.com/toward-better-master-passwords/
There is a free anti CP tool fielded by Microsoft, PhotoDNA.
I guess this is a good primer for some folks, but there are two really spurious arguments:

(1) Your working vocabulary of 20k words is irrelevant. If you pick the words yourself, they aren't random and your random-word-vocabulary (the ones you'd actually pick) is waaaay less. If you use a randomizer, which you should, just give it the full dictionary (or say, top 100k for memorability).

(2) Faced with the suggestion of adding more words, they show that 4 is crackable. But go to 5, and you're solid for 400y. This is so clearly relevant that excluding it seems suspect. This article should be as simple as "use 5 random words, not 4".

Password managers have their own issues, both with usability and their tendency to provide centralized targets. And, they still require a secure passkey themselves -- for which a long random phrase is a perfectly reasonable approach.
> Just because someone doesn’t agree with a law doesn’t mean that they should be able to break it without consequences.

Like those charged under the Russian laws living in Europe? Do you see how problematic this idea is?
I always heard that gravity was very poor for energy storage because it's such a relatively week energy. I haven't done the math so I'm not outright dismissing the idea but your article states:

>A 120-meter (nearly 400-foot) tall, six-armed crane stands in the middle. In the discharged state, concrete cylinders weighing 35 metric tons each are neatly stacked around the crane far below the crane arms.[...]

>The system is “fully charged” when the crane has created a tower of concrete blocks around it. The total energy that can be stored in the tower is 20 megawatt-hours (MWh), enough to power 2,000 Swiss homes for a whole day.

That seems like a huge hassle for a relatively meager storage. You'd need more than 6 of these to match Tesla's giant battery. Sounds like it would be an eye-sore too, but that's always a bit subjective. Maintenance-wise it could be rather tricky too, the article mentions complex systems to lift the blocks.
There are plenty of network effects.

To start a new ridesharing company, you have to get drivers and riders. You'd have to offer them a ton of incentives to start driving/riding with your service, when the existing options are well established.

For drivers, Lyft and Uber have incentives (lower fees) if you do the majority of rides with their service, which incentivizes you to only drive with one service.

When's the last time you downloaded a new app on your phone? For me it's been weeks, maybe months. For so many people, it's easier to just not try your new rideshare service.
A ride hailing service needs to reach a critical density of available cars per km^2 to be useful. When you first install the app there needs to be someone nearby who will pick you up - if there's no car nearby most people will uninstall it. Additionally the more people use your app and the more drivers you have in an area the more effectively you can deal with idling (less variance in demand spikes - making planning easier for drivers). So on the contrary: I think this is a very difficult market to enter for new companies.
good question! the analysis that I was doing was really a one-off for switching between these processes. We have unit tests and sanity checks to ensure consistency going forward, but as a final check before flipping the switch we wanted to be as confident as possible that we hadn't introduced any regressions across the full data-set.

The new export process is much more reliable and a _lot_ faster, but as a side effect of doing things in a different way it generated the export file in a different format. Given that the order of objects in an export file and the order of keys/etc in the JSON objects didn't matter for anything except comparing the two processes, I figured it was simpler to put the normalization logic in the one-off tool vs baking it into our export process. But certainly if we were maintaining both exports in an ongoing fashion and validating them against each other, it would make a lot more sense to spend time making sure they generated objects and keys in the same order.
We cannot have open/honest discussion or make progress if we are too concerned with making sure no one gets their feelings hurt.

There has never been a successful human rights movement that was polite and didn't offend.

The truth can be very painful to accept, which is why we often subconsciously avoid it and shun such discussions
PHP 7.3.0 Released
I generally feel it hurts an advocacy group's credibility when they advocate for something without a rational argument. (And it's not just the EFF that do this.)

It's an interesting dynamic in the role of advocacy...
If you're not using a password manager now, that implies you're already remembering at least one password. Using it on a regular basis is a good way to keep it in your head.

You can setup your password manager authorization to expire periodically (eg, every 30 days) as well as on reboot. With LastPass (probably others) you can also mark certain sites as 'high security' and require entering your master password again. I do this with a small handful of sites, including my bank and domain registrar. I typically log into my bank once or twice a month.

I very rarely reboot my devices (sleep + locked with a different password I have memorized and type in) so I don't get prompted for it that much otherwise, but enough that I have it memorized.
I had a similar thought after discussing this exact topic with a friend last night over beers:

Used to be if you wanted a presence on the web, you did it yourself. You got hosting, you learned what you needed to learn if there was something unfamiliar to you, some trial and error later, a website. You dot com.

The platforms came and soon it became you dot theirplatform dot com. Because they made it easier, faster and cheaper to get your stuff out there and get it seen by many people also posting on 'the platform'...the great tragedy is that it also made it easy for 'the platform' to get rid of 'your' stuff (read: stuff you leased to the platform) if at any point they decide, for whatever reason, they don't want it there.

I remember that being much harder to do that when it was you dot com. We were happy to do the work of putting up a you dot com. Some of us still are, because it's what we came up with, what we cut our teeth on so to speak.

Not sure if I'm really going anywhere with this...just sort of thinking idly at a bygone era I guess.
Strong political polarization in the US guarantees that going forward there won’t be continuity between presidents because there’s likely to be rapid shifts back and forth across the political spectrum
> Much more for what?

Much more in the field of build tooling/package management. Pinning versions is fine, but dependency resolution is another legitimate choice.
"Left-wing politics supports social equality and egalitarianism, often in opposition to social hierarchy"

From wikipedia. Please explain to me how Germany or France could be any further left than they currently are. How much harder could the French government support equality and oppose hierarchy? By definition, a state that is as far into the policies of left wing politics as possible is a far-left state.
Cybersecurity “predictions” generated using Markov Chain
Your original message has a typo in it. There's an extra three in the USD value (460,4330 rather than 460,430).
I do not know of any place that widely proves that
"state-owned and state-controlled companies" are stealing trade secrets.

Individuals, sure. State-owned companies? I would like to know the proof for this.
Ooh, now do the predicate nominative!
Exactly. The attacker would have to try a word-based attack to benefit from the ~7 hour time-to-crack.

So I disagree with the article's advice: "Don't use words in passwords. Ever." Yes, you should use caution when using words in a password, but even if you use a password manager, a 5- or 6-word diceware password is ideal. Even better if you stick on a 4-digit numeric "salt" to your diceware passwords.

But yes, I do agree that a 3-word password is too short (~33 bits of entropy[1]). It should be at least 5 words (~55 bits). And you really need at least 6 words (~66 bits, obviously) for a master password.

1. Using EFF's user-friendly, ~1200 word list for diceware.
Regardless of how one feels about the policy itself (for the record, I do side with you for the most part), the way they are implementing it leaves much to be desired:

First, they're deploying a machine-learning algorithm that simply does. not. work. It's flagging SFW content and ignoring NSFW content. I've been collecting a sample of erroneously-tagged posts here: https://paperairplanemob.tumblr.com/tagged/GREAT-WORK-VERIZO...

Second, it is a marked change from an earlier effort to make a "Safe Mode" for minors that filters out illicit content for those that don't want to (or shouldn't) view it. This is taking it a step farther, leaving those that have previously used Tumblr for such content scrambling to find a new platform.

Third, the announcement was incredibly disrespectful to the existing community on Tumblr. Everything from the post's title to the language used ("female-presenting nipples") was laced with corporate double-speak that would barely have flown on a normal social network. On Tumblr? Yeah, no.

Finally, because this is a change from earlier behavior on Tumblr, it's going to change the social makeup of the network. I don't go to Tumblr for illicit material; that's not why I'm there. I'm there to see and read some good fandom material, read webcomics, and have a good time. The previously lax content policy meant that the people I follow were free to experiment and be creative without worrying about having a post taken down for violating some vaguely defined "no porn" rule. Now, even if someone isn't posting illicit material, they still have an algorithm to content with. If they make it through the algorithm, they still have to worry about someone with an axe to grind reporting their content anyway. Eventually, people will stop posting rather than deal with the new changes. And that's going to change the community on Tumblr.

So no, in the broad scheme of things, there are plenty of other things we should be worried about. But something we love is being taken away from us, and we're going through the stages of grief as a result.
What do you dislike about React Native?
This is going to become more and more common. Li-ion battery costs are falling at a constant ~15% per year and there is no real reason why this shouldn't continue. Similar to what Moore's law did to semiconductors, this will mean that batteries are poised to have a massive impact and eat any energy application that can't keep up. New tech will have a hard time to keep up simply due to momentum this has already developed, aka it will have to be at least a magnitude better AND keep on scaling.

This is why Tesla is valued higher than GM, Daimler or pretty much any other car company. Tesla at it's heart is a battery company with products built around that. From what I've read, from 2025 onwards traditional internal combustion engines will not be able to compete on price with electric cars.

Something similar will likely happen to energy storage, though this is of course still a relatively novel industry that has been spurred on by renewable energy's intermittent availability. Interesting times..

Edit: percentage of annual battery price drop after doing some googling
> How do you stop replay and man-in-the-middle attacks?

Replay what? Me setting my password over HTTPS? How?

The sample URL was deliberately just an example. It would surely need more thought but i'm pretty sure the "PUT ..." solution is simpler then throwing oAuth at the problem.

So you're confident that the same people who can't secure the simple PUT request are better suited to implement the custom oAuth solution you are talking about? And that will be secure? I'd bet against that.
Ride sharing is generally supply constrained. The dirty secret is that drivers are considered internally as the real customers for ride sharing cos - they literally bring them all the money.
Report and analysis of volatility in the crypto market throughout November 2018
Crypto Fund Makes Buffett-Style Bet Digital Coins to Beat Stocks
I'm actually not Socratic-methoding this. I'm actually just curious where you estimate your risk at. I do things that some of my friends would consider dangerous (like skiing freestyle) but not things which some of my other friends consider safe (outdoor climbing, scuba diving). In this case, it's actually literally a calibration exercise.

More unsafe than walking. Is walking down the street with these vehicles around you less safe than running a marathon? Or around taking a road-trip across America? Or back-country camping?

Any meeting point here will do.
True, but on systems without systemd, I have never seen PolicyKit get installed without explicitly requesting it. On systems with systemd, there are many packages that cause it to get pulled in. Mostly desktop packages, but there are some used on both server and desktop that pollute servers with desktop behavior now, due to the integration in systemd.
OP here- excited to show this to the HN community! Someone posted the intro blog post in another thread but our plan was to just show off the product so here it is! Decisions is a way to quickly explain a specific technology decision you made.

Twitter is great, blog posts are great, but we think there's an interesting medium (pun intended) that could be really helpful when you're trying to make a decision about a tool or putting together a workflow. Example: I like this one about payments because it's pretty descriptive https://stackshare.io/adrienjarthon/decisions/10114566434535....

We believe sharing technology decisions should be as commonplace as writing an organized and thorough README.md. Ultimately, our goal is to increase the net amount of knowledge about technology accessible to all developers, which in turn will help make you more productive at work.

Contributing Decisions gives you visibility amongst other developers who care about the tech you’re talking about, and gives you the opportunity to discuss the technical details associated with that decision.

As I mentioned in the other thread, our hope is that over time, you'll end up with this structured repository of discussions around technology problems/solutions for a wide range of use cases that you can come back to whenever you need help.

More details about the launch here: https://stackshare.io/posts/introducing-stack-decisions.

Would love to answer any questions or hear your feedback!
Yea, that's what I meant. At least the people seemed to be overwhelmingly opposed to it, and trying to vote against it. RIP to internet points on that comment, lol.
The poverty rates and broadband service maps look like the other, except opposite.
How can you commit a crime under US law when you are not under US law at all? If I pass a law that bans eating cornflakes, you then have breakfast and enter my country, am I justified in putting you under trial?

International law is never simple - although I suppose having the biggest stick might drive people to ignore certain nuances.
I see tremendous upside potential in one of those investments :P
It's anecdotal, but the one company I worked with in the south which had a very conservative, christian, "family" culture was the most diverse team I've ever had the pleasure of working with. My team consisted of 2 black developers, 1 asian female, 3 indian females, 2 indian males and 3 white males(including me). There was never a hint of racism or sexism, we all came together for the mission of the company, and we all loved the different foods, experiences and perspectives we brought to the table.

OTOH, I have been with a couple companies and seen racism and sexism in the form of jokes and comments that were done in poor taste, but it was just a group of white/asian progressive males so no harm? Again, all anecdotal. I'm sure other people have had complete opposite experiences, and thats to be expected. Racism is not always about hate or politics, it can show its self through ignorance and unfamiliarity.

I've been a lurker for almost the entirety of HN. I created an account just to post this because I believe politics, especially political stereotyping has no business on HN. I would hate to see this forum burned out like Reddit.
Take a break at the Linux command line with Nyan Cat
Yes, but we fundamentally see others for their otherness. I'm not tall, and solid statistics say it's a disadvantage in the corporate world.

You could claim that Black otherness has special characteristics and this being hackernews I would assume good faith and believe you that racism in its non-outward facet is palpable and ethically bad. But that's not what you said -- you said people compartmentalize and that's bad period. That's an interesting kind of misguided.
As someone who hires and employees remote developers, it’s a massive red flag when a new developer wants to have a voice call.
> Or you're getting closer to finding out what the real parameters are?

By that metric, epicycles were rock-solid.
Such studies that show society treating women and men different based on expected gender roles has been done multiple times in many fields, and if we call that male and female cards then we must accept that for every place where a person can make a stereotypical assumption based on gender role then that is a place where one gender is favored and an other is disfavored. One prime example of those is with the justice system, where a male-sound name get found guilty more often and get harsher punishment because they don't get to automatic play the female card, as backup by blind testing at the subconscious level.

The average hiring manager has indeed some gender expectation. Based on some fascinating recent study done on judges, I would expect to see a major difference in how rational judgement a hiring manager do based on how long time it has been since last time they ate. The lower their blood sugar level are the more likely a person are to use shortcuts in their thinking.

Note that this has nothing to do with the belief of a "patriarchy", nor can it be translated into power cards that get played in some zero sum game.