skysight-inc/HackerNews huggingface dataset:
That's true, but if you run untrusted scripts on your site it's pretty much game over, anyway.

Why should those scripts limit themselves to stealing tokens when they can send authenticated requests from the browser? To put it another way, why would you care about knowing the root password when you have a way to run a root shell at will?
I guess this is a response to mtgox and other exchanges that turned out to be insolvent. Moreover, it prevents the situation where an ill regulated institution denies you access to your credit. See also the stories about PayPal accounts being frozen.
edit: you're right. my bad. <strike>UUID4 is just a 128 bit random number.</strike>

That just means they also generate 128 bits.
What problem does this solve? Why is it necessary to sort a unique id?
Ignoring the body of your question and answering just the title, I'm developing https://accountd.xyz/ as a system for mixing and linking identities (email, twitter, github, trello, indieauth for now) and using that for https://trackingco.de/, https://listhub.xyz/ and https://sitios.xyz/.

In theory anyone can use it, it works automatically and you don't have to register or anything like that, but I don't know if people are interested in it.
Maybe not compared to a free game like Fortnite, but 50 million copies is huge when it comes to video game sales. The 50 million number is from Xbox and PC only.

GTA V is the top grossing game of all time and sold 90 million copies on 3 platforms. Minecraft has sold 150 across way more platforms and has been around way longer.
Elimination mode is more generic. The battle royale subgenre started with the Minecraft hunger game mode, and grew more popular by H1Z1: King of the Hill, and then by PUBG.
Please don't respond to provocation by taking the thread into full out nationalistic flamewar. That's the last thing we need or want here, and it breaks most of the site guidelines:

https://news.ycombinator.com/newsguidelines.html
I recommend watching this awesome video summarizing 12 principles of animation:

https://www.youtube.com/watch?v=uDqjIdI4bF4

(by the author of Animation vs Animator)

I second Animator's Survival Kit by Richard Williams, it's great. And Keith Lango's video course for 3D animation. These two are absolute best for learning intermediate/advanced animation.

Also, of course, Animation Mentor and 11secondclub competition.
> I think this is why we need to legalize drugs

Drugs are already completely legal for the underclass - basically, any and all petty crimes are. Our judges dismiss the citations (~65K in one case!), our juries acquit them, our DA refuses to prosecute them, and our cops don't bother at all anymore.
Well, we build and use Scatter (http://get-scatter.com), which is both a desktop app and a JS and C# library. This allows you to use the EOS or Tron blockchains and their account systems. Our users have local access to remote accounts on those networks. It's pretty amazing software, and it is really fun building something totally new.
By that measure pretty much every product except the most generic crap is unique, but that word means more than just "slightly different".
G/6, B/8, Z/2, and S/5 are much more likely to actually be visually ambiguous than L/1.
In UK at least, land ownership is very concentrated, so these "farming subsidies" are not usually going to the people you'd expect:

> When our government says "we must help the farmers", it means "we must help the 0.1%". Most of the land here is owned by exceedingly wealthy people. Some of them are millionaires from elsewhere: sheikhs, oligarchs and mining magnates who own vast estates in this country. Although they might pay no taxes in the UK, they receive millions in farm subsidies.[0]

> Farm subsidies, which remain limitless as a result of the Westminster government’s lobbying, ensure that every household in Britain hands £245 a year to the richest people in the land.[1]

[0]: https://www.theguardian.com/commentisfree/2013/jul/01/farm-s...

[1]: https://www.theguardian.com/commentisfree/2014/dec/03/landow...
Not 100% related, but Philadelphia has a Mummers parade every New Year’s which is, IMNSHO, the best US parade. Pity it is always colder than a witch’s teat...
Is the software written by people who would not profit from the software?
Thank you for your response, and candor. It certainly gives me a better understanding and new things to consider.
A long long time ago, at a gig I desperately despised, I accidentally ran `cat MyResume.pdf`, causing a mix of garbage and readable ascii to print to my xterm. Unfortunately somewhere in that binary garbage were the escape sequences to turn on printerControlMode in the xterm.

Not long after, my boss shows up at my desk with a sheet of garbage with snippets of my resume mixed in. Learned an important lesson about accidentally spewing binary data into an xterm that day...
This seems like it could be useful, but

> Cryptographically secure source of randomness, if possible

I don't think this should be a goal. If this is for IDs, you usually want to optimize for speed of generating IDs and evenness of distribution (aside from merely reducing collisions.) The top answer at below link has a good top list of hash algorithms. None of them are cryptographic.

https://softwareengineering.stackexchange.com/questions/4955...
> Why do I choose one thing over another one when there are lots of competitive options and essentially no barrier to entry?

Umm, because you wanted one of the many substitutable options. You didn’t care which one, because they were largely indistinguishable from one another, so you chose one randomly. It makes absolutely no sense to claim that, because they chose one photograph, then clearly there werentnother substitutable photographs.
Since the ids are generated chronologically, it means you can sort by id instead of created_at. A nice convenience for sure.
Seems like a good argument against having people depend on you!
How do you know what expert is worth hiring?
Please don't post unsubstantive provocations to Hacker News. Perhaps you didn't intend nationalistic flamewar but a comment like this is nationalistic fire-starter.

Moreover it's a generic theme that has been picked over countless times. If you're going to comment about those on HN, please make sure you have something new and substantive to say.

https://news.ycombinator.com/newsguidelines.html
Tf2 is somewhat pay to win. You can buy additional weapons with different stats or abilities.
You are wrong, please, check the specification. UUID4 is 122 bit random number + 6 bits for variant and version.
It would indeed. Various contributors have been working on the ARM port for almost a decade now, and it's just stalled due to a lack of developer time for the most part.

IIRC, the current status of the ARM port is that the kernel is "mostly done", and at least one of the SDHCI or USB bus driver need to be ported (or written, in the case of the rpi) so that the boot can continue past the kernel.
That's a metaphor that I know is now stuck permanently.
My only addition would be that this is your broccoli and ice-cream.
I'm eternally mystified as to what some of my colleagues like. Maybe the greatest benefit of agile I found is I can just shove my needs/rankings into it - and can then just let people pull out whatever they fancy from it.
Running the other way there seemed to be surprise when a dev found some major issue or came up with some great idea and I was more than happy for them to add it themselves - and I'd happily rank up it at the cost of one of my planned features.
I get the distinct impression that previous occupiers of my role were less flexible.
What I've done (I hope) is just to be as open as possible about what "I like" and be open, consistent and say the same thing to anybody who asks.
This breaks the site guidelines and is unacceptable. If you can't post thoughtfully and respectfully, regardless of how wrong someone else may be, please don't post here.

https://news.ycombinator.com/newsguidelines.html
Well, in lot of cases you actually don't need that but it's a nice to have feature. The typical case being just giving IDs to some items you store in database - you can either give them UUIDs and enjoy that you can generate the ID in application and don't have to wait for database to create related entities to that. Or you choose sequential IDs generated by database, and you get that the IDs also have some meaning - you can for example sort by ID in your queries by default as it's roughly equivalent to creation date.
See also https://github.com/segmentio/ksuid
> What does this even mean? Net income?

Not sure what exactly it means, but it sounds like A LOT.

The number of employees at Epic appears to be ~700. I do hope that the people who did the work are getting paid handsomely. They should be, right?
Every year the US State Department publishes a report on human rights in China: https://www.state.gov/documents/organization/277317.pdf

and every year the Chinese government publishes a report on how terrible the United States is in regards to human rights:

http://www.xinhuanet.com/english/2018-04/24/c_137133826.htm

It's interesting to see the very different perspective of both agencies. Both countries have significant problems.
You didn't read very carefully. 1/I/i/L/l are all interpreted as 1, so it doesn't matter which one they are misreading it as.
Do you contest that l can be misread as 1 or I? Because that's what the table means. The code is case-insensitive.
It can help operations if you know when an id came from. So that when you get a request id from a user, you don't also have to get a when.
Married men outearn single men (and women as a whole)
And the problem of SF being a magnet for homeless to either be shipped to from other locales or "migrating" from the greater bay area.

My mother was one of the latter.
1/l is visually ambiguous. Since the encoding is case-insensitive, upper-case L must also be excluded. For the same reason lower-case L is not included in Base58.
Let's define "objectively better" as "allowing to do A, then B as well as to do B, then A - rather than only allowing to do A, then B". Then composability - defined as "allowing to do A, then B as well as to do B, then A" - is objectively better than imperative style - defined as "only allowing to do A, then B".

In these terms it looks like a tautology. But the essense is still there - if for some reason you'd like to have a freedom of order of some transformations, you need composability, as an opposite to an approach which prescribes the order.
Would it be possible to run a comparison vs. some of the ultra-efficient mini-fridges out there? I had previously seen a few folks on youtube showing some of their setups with existing mini-fridges.

I live out on some land with just solar power and batteries for stretches of time and am weighing refrigeration options.
Twitter is one of the worst sites to post artwork on. Not due to compression, but the complete lack of features a dedicated art gallery normally has. Tagging and searchability are bad. Artists don't usually make separate accounts for art and blogs/memes so good luck filtering it. No one's going to see your old content.

I can't remember pixiv's rules specifically, isn't it based in japan? The black line censorship thing isn't going to fly with anyone who left tumblr because they banned NSFW.
Vancouver[1] does all of this, short of making drugs flat-out-legal, and it is currently in the middle of an overdose crisis (In addition to the homelessness crisis that you would expect when rents and home prices skyrocket.)

I don't think any solution short of the government/pharmacies selling/giving clean drugs to people with addictions (As long as they are actively attending counselling programs, that aren't one-size-fits-all 12-step nonsense) is going to work.

[1]
Also, a hospital bed to detox in is free, but good luck getting your shit together after you go through withdrawal.
Better compression and PNG allows for metadata.
See also Firebase push IDs:

https://firebase.googleblog.com/2015/02/the-2120-ways-to-ens...

Lexicographically sortable identifiers are critical for any distributed data store if you want anything close to consistency. I've run into the issue of not having them and having to settle for some kind of <autoincrement_id><UUID> key and it's a huge PITA. How this wasn't considered database 101 decades ago just blows my mind.

I'd like to see a spec included in this for synchronizing clocks or using RAFT/Paxos for generating ULIDs with strong guarantees on sort order.

Also a minor gripe - I wish that the ULID spec checked for microsecond collisions instead of millisecond, because that would be more useful for realtime networked gaming and simulations.
Been there, done that.

Phoned up work to tell them I was on the first day of a bad cold and needed a day off. They say no problem but you MUST get a doctor's note. So I phone the GP and they tell me they can see me in 2 weeks' time, I go along as ordered - the cold's completely better by then of course - and ask for a note to say that I had a cold 2 weeks ago, which I duly get and hand in to my employer. Everyone's happy, free at the point of service etc.
They just wire up your pain receptors, ears and mouth. Mute your mouth, and ears and set pain to 10. Wait an hour and then ask you if you're willing to talk yet. Repeat until your break.
Account recovery is the #1 problem with any authentication system. Facebook's optional trusted contacts is probably the most scalable, secure version I have seen.
I don't agree with that, and it's relevant to this forum in an important way. There's a wide spectrum between my saying "that's false" or "you're mistaken", vs. saying "you're a liar". The distinction here is a similar one.

It doesn't need to be a moral distinction. When negative statements are made neutrally, discussion goes much better than when they are made pejoratively. This entire site, if not the entire internet, is evidence of that.
I wonder how long it will take until people understand why nobody is "their own bank" with their cash.

Getting hacked is one worry, I would worry even more about someone with a wrench in my apartment.
China's BeiDou launches global service today
All other things being equal, killing an animal that is in danger of extinction is worse than killing one which is plentiful.
All codes are encoded only to uppercase in crockford32. If you actually want to get rid of the ambiguity, get rid of 1 and keep L.
Not Country Strike, but yes, it was clearly inspired by Medal of Honor. Which was itself inspired by GoldenEye 007 and the movie Saving Private Ryan.
From my perspective, there's barely been a pickup in the dissent.

It's just a lack of fake enthusiasm coming from stakeholders in the cryptocurrency community (mostly longs/business owners).
Sounds like you haven’t played it much.

Firstly, stock weapons are typically the strongest among each class.

Secondly, you can get every item in the game without spending a dime via one of the following: 1) the drop system, 2) the crafting system, or 3) trading.
>Maybe the pilots did not receive proper sim time on a 737MAX, which I believe has different enough instrumentation and automation systems to require a separate sim from the standard 737

Isn't part of Boeing's marketing strategy that the 737MAX actually DOESN'T require additional training? The entire point of MCAS is to make the larger 737MAX react to control inputs just like a smaller 737, so flight crew can just fly them all "like a 737".
IMHO, in most cases you don't need performance nor "security", if you simply generate IDs for some documents in DB that generating ID is totally negligible in comparison with storing that on disk. In case it is a performance bottleneck you'll quickly find that out, it's probably very easy to get some flamegraph and see the crypto generator here. However, in case you need security, people quite likely to miss that out until something gets wrong...

It's certainly a compromise, but I like their choice
I agree, although it was more like 2 seconds on my laptop. It was almost unreadable to me until the colors leapt in.
Yeah, they could have constrained the random value to always start with the highest bit set to 0. Then they would be guaranteed to be able to generate 2^79 values per millisecond.

But that's sort of an implementation detail. You could write an implementation that did that and still be compatible with all other implementations.
I did not
For sure it will recognise fruits and vegetables better then any teenager around here that has a job as cashier. Amount of times I had to facepalm because cashier didn't recognise a beet or other common vegetable or fruit is significant.

But I refuse to self scan until you have to pay to use a cashier or self scan gets you a discount.
I'd argue that "poor diet" rounds out that list of "obvious physiological deficits that impair mental health".
I have a feeling that will all change once the data community gets wind of TypeScript.
> Nobody cares how long it takes to train a model.

LOTS of people care how long it takes to train a model. A few minutes, vs. a day, vs. a week, vs. a month? Yea, that matters.

Think about how long it takes to try out different hyperparameters or make other adjustments while conducting research...

If you're Google maybe you don't care as much because you can fire off a hundred different jobs at once, but if you're a resource-limited mere mortal, yea, that wait time adds up.
It appears I didn't parse the article correctly myself. Thanks for catching this, I'll edit the OP to be clear on this.
For more headfuckery, try to work out if you can record a video of the soundwaves.
But i seriously doubt that there are hackers capable of getting into gmail account and finding the device where i stored bitcoin.

Right now, I've put bitcoins in blockchain.info on completely different pc and backed up the keys to raw paper secured in safe.

Blockchain.info is linked to my protonmail account.

But even protonmail doesn't know about my private keys.

But only thing i wondering is wether blockchain.info can be hacked or not.

For some reason i do not trust Trezor like stuff because the hardware might fail then what will i do?

Right now I've memorized private key, so i can restore it anytime.

Do you guys see any vunerability in this approach?
Bitcoin does 2^88 a day but from what I can tell the overflow issue means you'd have to do that much in a millisecond. Seems unlikely?
If the reset process allows for both the 2FA and the password to be reset using a single one of the four points you've mentioned then, yes, it's a terrible design that should be scrapped immediately.

However, if any of the four points you've mentioned allow for only resetting the 2FA option and still require possession of the password, then I think you're more secure with 2FA enabled. Why? Because the reset step, if nothing else, provides an additional hurdle to be crossed. Yes, SMS 2FA is terrible and anyone who uses it should be barred from owning anything more complicated than a light switch, but that doesn't discount all of the other, better methods.

Even e-mail as a reset factor can be more secure if the e-mail account is secured. In my experience, people are more willing to put up with "hassle" to secure their e-mail because it has stuff they care about in there. It's been far easier for me to get people I know to enable app-based or (shockingly) even physical device 2FA with a Yubikey on their e-mail accounts. I even know two older, non-technical people who already had it enabled because "I read that it's better for e-mail so I turned it on and put that printout it made me do in the safe."

So 2FA seems to me like it can be more secure as long as it is really 2 factor auth and not "oh enter this other code...or also just use your phone to reset all access methods" (like some banks do, damn it).
Any limited to amount of photos/videos you can put into the account with this method?

I have 2 TB+ mainly of kids/family photo/videos for ~15 years.

Right now, it is on a 4TB HDD with backup. Looks for good sharing solutions.
Ah, that would make healthcare a lot more expensive, making people pay twice for the same service.
You have described the problem, not the solution

> Not procrastinating is in fact extremely easy, once you know how.

please share your knowledge.
How does this compare to Twitter's Snowflake? https://blog.twitter.com/engineering/en_us/a/2010/announcing...
I wrote up a proposal for just that and sent it to Dianne Feinstein. I'm still waiting to hear back.
That's a bold statement. Especially without knowing the full set of facts. In this case, with your stance, you'd be the only computer in the place not on an Apple device. It's a small video/photography shop. Everyone involved uses a Mac including the freelance guys that get hired.

What exactly are proper tools? I'm designing a set of web-based tools to help their day to day operations. Lots of shell scripting and what not to just allow people to drag-n-drop and automagically get things to happen, consistently. Are you saying that the proper tool to write php/css/js/shell scripts/etc can only be found not on a Mac? I have found the world becomes a much easier place to live in if/when you can just accept what is on hand and get the job done. Could it be better? Possibly. Is this my favorite laptop? Nope. Can I do what I've been tasked with to get it done? Absolutely. I'm actually quite thankful that I'm not a one trick pony and I can use pretty much any OS put in front of me.
In fairness, Bluetooth is a bit of a train wreck. Bluetooth on FreeBSD is pretty much unmaintained these days. OpenBSD gave up on it entirely and purged the Bluetooth code.

So the fact that newer versions of Bluetooth (there is like, what? 4 versions?) work at all on Linux counts as an accomplishment.
Exactly, the attacker can always not use the browser and emulate a browser request if motivated enough.
Do you know of any ID systems that have that behavior?
What are you securing? It's a cryptographic hash of what?
Elixir sounds like an awesome combination of the advantages of Golang and immutable + functional-first languages, nice!
> Just remember to always add the required catch-all cases, lest you write a partial function.

When just unpacking lists, or other types whose structure absolutely will not change, this is fine.

When pattern matching on alternatives that might be added to, I find if I'm inspecting the values of existing cases I will probably want to also give consideration to how to handle future cases, so I avoid a catch-all (and make sure my tooling calls out inexhaustive matches) so these spots are surfaced when the type changes.
IME most SMS verification is bundled with some additional information submitted by the user (e.g. secret information, ID information).
I agree with you however, small set of training data could be made available with a downloadable Watson jr software so that you can see it playing chess against you, also proving somehow it's not just a clever algorithm and it's ML. I'm simplifying to make my point.

I can't even assume we all agree winning against Kasparov is proof enough. Just for argument's sake, you can buy him out, convince him that this is an amazing PR for him as well - lose one game, be double famous for life, just as you can convince a boxer to lose a match. None of this tells me 100% that Watson is AI capable of winning a chess game in the 90s or hold an intellectual debate in 2018.
Again, I'm not saying it didn't happen, I'm saying burden of proof is bothering me.
A good friend of mine who is a VP Cloud at IBM said when I asked last year "no one can explain Watson at ibm - it's a black box" I also wrote a few apps with tensorflow.

Kasparov, winning Go game, playing fortnite, sure.What they are suggesting here and with Sophie, without proof of any kind, is beyond me.