skysight-inc/HackerNews huggingface dataset:
Risk-based Authentication of big online services
Hi everyone,
you've probably heard about Risk-based Authentication (RBA), which is recommended by NIST to improve password account security without decreasing usability. Some big online services use it, but keep it a secret. Well, this doesn't help smaller websites to protect their users against credential stuffing or password database leaks.

For this reason we black box tested eight popular online services [1] to find out more about their RBA implementations [2].

The technical paper and all the results:

https://riskbasedauthentication.org/

(Paper is accepted for IFIP SEC 2019)

[1] Facebook, Google, LinkedIn, Amazon, GOG.com, Steam, Twitch and iCloud

[2] We also disclose a vulnerability on Facebook which is now fixed.
Exactly. I've also had private health insurance in the UK in the past. It cost a lot less than £150/month and when I used it I generally ended up in posh central London hospitals that get enough of their business from rich Arabs that they boasted of their Dubai TV channels.
As someone who spent a couple of months in India (a long time ago) I sympathise with your confusion. But what can we do, Indians say it one way and Americans the other (I have a lot of friends from the UK and they tend to have their own terms for transportation-purposes as well, like Lorrie and Motorway - not to mention more exotic slang like "leccy" for electric vehicles).

After you accept the OP is using Indian English it's not that hard to understand what they mean & I don't think we have to enforce everyone using American dialects on HN for these relatively minor inconveniences.
Amy Buechler and Michael Seibel on Coaching and Having Hard Conversations
Shrinking Newspapers and the Costs of Environmental Reporting in Coal Country
What exactly is this? They are not a band, are they?
That's part of it! People think there's supposed to be some total acceptance and peace and love.

Society is not like this, family is not like this, even with your spouse, kids, or brothers/sisters you wont be like this.

Being criticized, ostracized by some, shunned by others, also helps make someone learn to socialize (which includes conforming to a few norms, that's part of being into a society instead of alone in the jungle).

And there are two other things too:

1) Everyone gets some of that treatment (even the popular jocks for example get talked about behind their backs as brainless or whatever). People that act like they are the only recipients, are too self-absorbed to see it.

2) Not everything someone brings or who their character is is good to begin with, just because its "theirs" or "original" etc. The group can have some pathologies itself, but it can help shape everyone to be better too.
It's been over 10 years and CouchDB has not let me down once. Still using it in production everyday.
It would be nice if it would support custom sync servers. I'm using a custom sync server with Firefox and therefore Lockbox does does not show any of my passwords after login.
Haha, yes I remember building my first HTTP-API in 2010.

It had to deliver three kinds of formats: CSV, JSON, and XML.

JSON was a one-liner, then came CSV and then XML.

But all the consultants working in customer projects said CSV was the most important one because it's industry standard.

When the consultants sent me example CSV files from like 5 customers I couldn't believe they all had a different format.
Some countries already allow convicted DUI to keep driving with aftermarket breathalyzers. IMO in some cases it's good as an optional replacement for the license suspension. If someone depends on their license that may be a good compromise to both not ruin someone's life and ensure public safety.
Off by 1.700Km for me (London/UK vs Madrid/Spain)

Edit: MaxMind got it right.
In Stockholm the fiber operator (which is owned by the municipality but operated as a private company) built the network over more than a decade, based on demand and by using revenues to support further expansion. E.g. it primarily targeted businesses first. In New York, the city demanded Verizon wire up the whole city in just five years, and started a civil rights investigation because it’s verboten to wire up profitable areas first. Sweden’s approach to fiber in rural areas was to give rural people a tax credit worth up to $600 or so. In the US, instead of giving tax benefits for fiber, we put a special tax on telecom services (like it’s something bad like cigarettes or alcohol) and use that money to subsidize rural users at up to tens of thousands of dollars per subscriber. Our rural and inner city politics makes for some very bad policies when it comes to fiber deployment.
I think that’s why the title is “New York county” and not “New York County”, but maybe that’s a BBC thing as they don’t use Title Case for Everything.
>In these cases, courts can and do order the debtor to prison.

Well, in these cases, courts shouldn't and mustn't do it. If the law says that, it's a bad law.
Hey Justin, thanks for writing the article! I agree with you that there was a failure of evaluation, and that MongoDB has matured quite a bit since the NoSQL explosion.

Sorry if my comment came across as a criticism of your post. It was more targeted at the long threads of people bashing MongoDB, thinking the caveats are still relevant/accurate today. Because they really aren't – MongoDB is a completely valid choice of database today.

ACID transactions were added over a year ago, and Mongoose is almost as old as MongoDB itself.
I want to clarify a couple of things. I'm not saying that Paul Graham invented this pattern. Actually after he mentioned it, I remembered a friend of my father to implement exactly that in QUICKBASIC in the late 80s :-) The point is that maybe the Redis design was already inside me, but I needed a trigger: I often think of good things after being triggered. And smart people are more likely to tell about good ideas, old and new. That was the point. Similarly I believe there are a lot of simple fundamental ideas that can be re-applied to today's technology, as the landscape changes many things become relevant again.
Constant propagation yes. But knowing that that memory location wasn't volatile, say, is a lot harder and I don't blame a JIT for not being sure.
When is the American voter responsible for the quality of their clarity or their grasp on reality? Or should Facebook and Google be more in that business?

How do we have faith in the notion of citizen communal leadership if we think people can't handle Google giving you what you want? How much faith do we have when we think the members of our community aren't trustworthy as vanguards of clarity, so we want Facebook to step in and judge what counts as dangerous delusion?
> They do. But they focus on the earliest stages of drug development, mostly involving proofs of concept.

If that is true, then how can BigPharma patent the drugs?
Firefox on Windows does this when control is in focus and the mouse cursor is over the control.
You can add Australia and New Zealand to that list too.

Both have amazing public/private systems, where everyone has access to public healthcare, and if you want to pay the extra money, you can go private. They also have (very affordable and fair) health insurance if you want that extra security.

The public hospitals are fine in both countries, you'll get the critical care you need, when you need it. There aren't people dying of cancer because the government can't afford treatment. Sure, it's a bit slow for non-essential and elective treatment (e.g. a hip replacement or other corrective surgery), but it does get done eventually and as I said you can always go private, which is a lot cheaper than the USA, as they have to compete with free healthcare.

I'm really not sure why you keep quoting total taxation as some kind of negative point regarding countries with universal healthcare and functioning social welfare systems? Quality of life, both for individuals and for the whole population is a much more important measure.
Probably, but some critical errors like stack overflow or out of memory could prevent the stack from unwinding gracefully or otherwise prevent the accumulated log from being written. And then you’d have nothing.
1. Writing DDL is not hard. It's just not very hard.

2. You can go from strict guarantees to looseness safely, when you demonstrably need to. The reverse isn't true -- it's easy to wind up realising, much too late, that you actually needed particular guarantees that you didn't even think of.

Relational databases didn't become incredibly popular by accident. It's because they were a drastic improvement -- theoretically and empirically -- on the generation of NoSQL databases that preceded them.
It's just so mind boggling to me that there's people in the USA who are literally dying of cancer because they simply can't afford to pay for treatment, and there's a significant percentage of the population that think it's not only normal but entirely acceptable. The whole concept just seems so completely foreign to here in Australia.

In contrast, I have a friend who immigrated to Australia about a year ago and isn't even on a permanent residency, but still gets full treatment for their cancer for free, just like any Australian citizen would.

The very idea that your survival is entirely dictated by your financial circumstances sounds like it's straight out of some dystopian fiction to me. That was the entire plot of Elysium, wasn't it?
I fully agree about the FOMO part and would add that this also drives “competition” in those experiencing it by making them try to also look “interesting” and on their part causing FOMO in someone else. This also reduces the actual enjoyment in a specific activity and promotes seeking validation and trying to look like you are having fun without it being the case which fuels more dissatisfaction.
How about you stop electing anti-vaxers and climate change deniers to high power?
Those are just words on a document some old people wrote. Not a law of nature.

The only thing keeping then "unalienated" is actual people, with guns and jails, etc, to prevent others from alienating them.

And even so, those people keep unalienated whatever they're ordered to keep by those who pay their salaries. In practice those rights have been alienated time and again, whenever those wanted it.
It's terrible. The first two pages of results for many searches are just blogspam and aggreggated information
That's what is embarrassing. Even more so that is what was used in combat.
Precisely. I could entirely legally carry my knife roll on the train up to my friend in Leeds, and if stopped explain "I'm intending to cook whilst there, these are my knives for doing so". The police have every right to corroborate this story, but there is no crime there.

The thing I've potentially fallen foul of is a chunky pocket knife I keep with my climbing/camping gear bag and have on occasion forgotten to remove before going to indoor walls in London. I suspect I'd potentially be told off a bit for that, but again no fear of being charged with anything.
fantastic explanation
Yeah, but it's a different type of problem.

If you've a schema, you sometimes need to rewrite an entire table as part of a migration, and that can mean heavy engineering if you want to avoid downtime or disabling writes during the migration. There are 1:1 relationships between tables in the wild that wouldn't have passed a sniff test as part of an early schema design review, but then got created regardless to avoid a lengthy table rewrite.

If you've no schema proper, by contrast, you can manage multiple variations of what the data might look like in code. Not that such a thing is simple; it's definitely not, for the reason you raised. But it's simpler to deploy and migrate, or certainly might appear to be so to someone who isn't comfortable with SQL.

Also, there's a class of apps where having a schema doesn't add much value and NoSQL actually makes sense. Think storing and mining logs, scraped data, ML training sets, etc. -- apps where it doesn't matter much however a big pile of data gets stored, so long as you can shovel through it in parallel or store it very fast.
The thing is that this outbreak isn't serious. At all. Nor do anti-vaxxers pose a significant threat. At all.
If one researches the company's history, MongoDB came from a specific need the founders had for another product: ShopWiki.

ShopWiki is a shopping price listing site, where it keeps tracks of prices for any item: computer, clothing, food, etc. ShopWiki needs to be able to store, access, AND search amongst all of these different items. So, MongoDB is the perfect solution.

If the application being built has similar requirements to ShopWiki or a retail site where it sells _everything_, then MongoDB IS the right choice, because the founders basically built MongoDB for ShopWiki.

To sum it up: Is MongoDB the right choice? If the product is similar to ShopWiki, then yes.
"The communal bond these days happens more in ideas and beliefs than in physical proximity"

Ideas & Beliefs aren't gonna change a stinky Diaper. Or Drive over to your house and take care of your kid for an evening when you are _BEAT_ down by life and need a break.
Or Hasura GraphQL Engine: https://github.com/hasura/graphql-engine
One tactic is actually to keep the log buffer in RAM and then you can dump it from the core file. You can often have a RAM only buffer which has lower level logs than that which you can log to disk.
And AFAIK for most of the companies actually do this -- they sort of enforce employees to work as 996. In the meantime do not pay for working overtime or pay very few.
Internationalize Your React Applications
No invention occurs in a vacuum, most creations are recombinant effects.The pieces of the puzzle might very well have existed, but Hinton deservedly receives credit for putting the various pieces together for backprop IMHO.
So convicted criminals and people with restraining orders have to have someone straw purchase the items required to have a properly outfitted kitchen?

In one of the Chinese social credit comment threads someone said "well of course people who haven't run a foul of an authoritarian system generally approve of it" and I think that applies here too.
It's excesive in kids books and, because it comes after the quote, you've already said it out loud and you feel obligated to go back and fix your bad inflection.
> a huge violation of liberties in my opinion

Usually when your actions (or inactions) endanger others in an unreasonable way we write laws to force the individual to act a certain way for the greater good of society.

I don't see how this is any different to drink driving laws.
A Regular Guy
I think a lot of parents would refuse such exercise today since they precious children could get hurt.
I also think no one will do it anyway since parent will hold you responsible for any scratchs or dommages.

> Granted it's almost impossible to actually get yourself killed in 24 hours

You should not under estimate the stupid thing children/adolescent can do today...
3rd world countries in general do not cater for disabled or the elderly.
Proves my point. He burned it in front of a freelance reporter and filmed it. Then released a film about it.

Sacrifice a small pile of money to try making a bigger pile. There are smarter ways, but making more was the intent.

If it wasn’t the intent, it would have been done in private.
Perhaps people don't want to do that kind of physical exercise in a very hot and humid country if they don't have to?
New Cars in Europe Will Be Prevented from Speeding
This happened from 2000-2010 but with Sharepoint.
>> "and that is in fact Big Data."

don't you mean "and that is in fact Big Mac Data."
Teeny-Tiny Bluetooth Transmitter Runs on Less Than 1 Milliwatt
Mozilla's Plans Re: DoH
This is just an election gimmick from india’s Megalomaniac PM Modi. Neither very important nor actually achieved during his tenure.
The Fall and Rise of Dart, Google's 'JavaScript Killer'
This is a popular concept. See https://www.npmjs.com/package/bunyan#raw--ringbuffer-stream for example. Many languages have an implementation for something like that.
Dunning-Kruger in effect. Thanks for the demonstration.
Autonomous driving is an amazing idea, we just don't have good-enough implementations yet.
That’s good news for books ("urn:isbn:"), movies ("urn:isan:"), UUIDs ("urn:uuid:"), and so many other things that I thought weren’t on the web.

If I reside in "urn:oid:2.16.840" and I read "https://news.ycombinator.com", is that what they call the inner-platform effect?
Apparently for Anthrax the LD1, the dose expected to kill 1% of the population exposed to it, is just 1 to 3 spores. So it's possisble that woman downwind of the post office might have just inhaled a single spore.

http://www.cidrap.umn.edu/infectious-disease-topics/anthrax
Everything surrounding APL gives me that feeling, but then I remind myself that, just like Chinese (which appears just as baffling to those who haven't learned the language but have experience with Latin family ones only), there's a not-insignificant number of people who use the language every day and are highly productive at it.

I like terse code and my style is closer to the early UNIX/K&R, yet I've noticed a lot of people already find that too terse; the "normal" style these days seems to be gradually getting more and more verbose (look at typical C# or Java, for example.)

IMHO the readability argument in favour of verboseness is a bit of a misnomer --- you can easily "understand" a file full of extremely verbosely named functions all consisting of a single line, but that doesn't help at all with seeing the big picture. Judging by the amount of file-flipping and stack-jumping when I have to debug a project in that style, it probably hinders it.

On the other hand, this is "code with a learning curve". You can't glance at it and understand immediately, but once you do take the time to read it carefully, you can understand more of the whole than if it was written in a more verbose style.
> Can you give an example of something that you realistically would want to do in SQL that you can't with a JSON query?

Can you define joins in terms of each other? Otherwise, any join that isn't left outer join ($lookup) can't be represented in an aggregate query AFAIK.
How do the incentives for Facebook and Youtube differ?

From my perspective, they are exactly the same, but I'd be interested to know the thoughts of others.
Fearful of fake news blitz, U.S. Census enlists help of tech giants
Facebook is already making these decisions today with the algorithmic feed. They're already stepping in and deciding what people should see and what people should not see. It's stupid to pretend that the status quo is some hands-off natural state of the world, and get upset at the suggestion that the way this is already being done should change.
It's trolling taken to its logical extreme: you literally cannot tell whether someone posting flat-earth 'facts' is a troll or not online. The behaviour of the acolyte and the troll is identical.

Only when you meet these people in real life is there a fair chance of sounding them out to discover if they are just playing along or are actually convinced of whatever conspiracy is being peddled. I would expect most trolls keep their flat-earth proselytizing strictly as an online activity.

But they do seem to exist (the true believers that is).
> if it werent for facebook, the idiots would congregate somewhere else

I don't think that's really true. To congregate, people must first find each other. That takes a certain amount of pre-existing interest plus a certain amount of ability to find something matching that interest. Not much, but some. Now, even the most passive and stupid people - a significant demographic, unfortunately - can basically sit back and let the other crazies come to them. The same filtering/targeting tools that have been such a boon for small businesses advertising their products have also been great for every fringe group that used to rely on old fashioned street-pounding evangelism.
Big hand to you for daring to live the life you want to live! Too few people ever grow the cojones required to do exactly that and jump out of this miserable rat race.
Maybe for the general public, but I'm sure the HN audience knows much better given the amount of people who studied computer science or are in tech.
Once upon a time in a job far away, about 15% of my time was allocated to being the company sysadmin, and as all good sysadmins do, reduced that time to about 5%.....until....

One day, and despite my protests, I had to bin our perfectly fine and well maintained/loved Exchange server for fricken Notes/Domino just because one of the investors had some free licenses. After the migration, everyone hated it and I was persona non grata seeing as it was me who had to switch us over. It never worked properly. I left not long afterwards and the poor sod who was my replacement had the joy of looking after that dumpster fire.

edit: opening sentence
Fireworks are not legal for sale or possession in the more "progressive" parts of the US. (quotes added to emphasize the irony)
Geoffrey Hinton's tech-talk in 2007 (!) at Google is a great watch (with a heavy dose of technical jargon [0] plus some dry British humour interlaced throughout). He explains digit recognition (vs SVM) [1], document classification (vs LSH), and breifly summarises image classification [2] problems and how they were solved: https://youtu.be/AyzOUbkUf3M

You could instantly see the results he presents were way better than what was state of the art at that time. Amazing.

---

[0] Grant Sanderson (3Blue1Brown) started a youtube-series covering Neural Networks (4 episodes, so far) that helps gain an intuitive grasp on the topic: https://www.youtube.com/playlist?list=PLZHQObOWTQDNU6R1_6700...

[1] https://en.m.wikipedia.org/wiki/MNIST_database

[2] https://en.m.wikipedia.org/wiki/AlexNet
They gave away money, in the public light, to attract more donations... to take off the top. More donations, more “top” to take from. Just because it was bitcoin, doesn’t mean they aren’t human. I think the past few years of bitcoin has proven that bitcoin isn’t magically immune to human corruption.
I'll just take the opportunity to say how grateful I am that the idea of inventing Redis struck you -– regardless of how it originated. I use it all the time, both professionally and in my free time. Awesome piece of software. An idea is worthless by itself, execution is everything.
What Happened Before the Big Bang?
What is it with this tendency to speak of a 'Nobel prize' when it concerns a different, lesser known prestigious prize in a field for which there happens to be no Nobel prize (Abel prize, Turing award)? It's a lazy way to try to draw attention to it, and pernicious even because it makes the whole purpose of these named awards questionable.
When the question is stated like that it becomes really questionable whether cost of drugs should have anything to do with drug research cost.

Those two things look like they should be completely separate, done by separate entities with separate funding.
Maybe elsewhere, but I'm quite certain that the HN crowd did not confuse the two, or even think about linking it with chatbots.
I suppose you could concat strings and do it in a finally clause? Or use python’s context managers and do the logging in the __exit__().
Ask HN: Everyone is “trusted by [insert big name here]”?
Hi HN,

I see all these SaaS companies putting the classic category of "trusted by companies like:" Disney, Uber, Spotify, Microsoft, Apple etc.

Not trying to be rude here but it seems like all of them have worked with all these big names? Do they actually? Or am I just biased because I land on the websites of actually useful products?

Could it be a gimmick like the "public speakers" who exchange a few emails with the WSJ and say "trusted by WSJ"?

For instance: https://teamweek.com/ — don't have anything personal with them, they just happened to be the ones that provoked this reaction. I actually used their product and I like it