skysight-inc/HackerNews huggingface dataset:
Founder of Authy here. I've been thinking a lot about this lately and came to the conclusion that the only sensible way to do 2FA are U2F hardware key's. Here's why:

First, SMS 2FA. People think SIM port is uncommon, its not (i saw thousands of cases). Your cellphone number its public information - pretty much - and its not a technically difficult attack, you just need to convince a carrier to do it. Once the your SIM is migrated to the hackers possession he will hack into all your accounts before you even realized what happened.

Second, TOTP. I founded Authy with the idea that TOTP was strong enough and it is, technically, but in the wild deployments have lots of issues. Biggest one is people constantly change/loose their phones. So you end up with a update issue. At Authy we solved it by encrypting the seeds and storing them on the cloud. But today most users just copy the QR-Code, or store their TOTP key along with their passwords in the password manager. Storing your TOTP in your password manager completely defeats the point of TOTP, it just provides you with a false sense of security. Lastly, because it generates a lot of support issues when people loose their phones, services have added ways to bypass 2FA in their account recovery flows. You'll see backup codes or simply SMS as a recovery mechanism. This means your TOTP is as safe as SMS if your recovery allows it. TOTP today is so misused its just providing a false sense of security.

Third, U2F Hardware tokens. Its finally possible to do U2F to the iphone via Bluetooth and Feitan now has a key that supports it (Google sells one for project Titan). You can buy 2 keys for $50 dollars. It's impossible to missuse U2F tokens - you can't unsafely back-them up, you can't "screenshot them", etc, hardware enforces their security. They are 100% un-phishable, its impossible to trick a user into signing a login on a fake site - the key will simply not sign it, and there is no way for the user to make an "exception"(like you can if the SSL cert is invalid.). Also given the price and form factor is easy to buy 2 or 3 and have a few stored as backups. In my case I have 4 keys, 2 that I use on daily basis, and 2 I stored as safe backups. If I were to loose 2, there is no way of knowing they belong to me and tie them back to my account and I would just use the backup keys to logon, remove the lost keys and buy 2 more. No unsafe recovery keys, no unsafe backups. All my 4 keys are the exact same level of security.

Lastly, now Android allows you to use your android as 1 U2F key(new androids have secure hardware enclave specifically for this), so essentially all that users would need to do is buy 1 hardware key as backup.

If you are a service provider, I hope you consider about offering the ability to use U2F keys as secure login mechanism and enforce minimum 2 keys need to be registered - then you disable any other recovery mechanisms. THIS IS THE RIGHT WAY TO DO 2FA in 2019.
Al-Maʿarri
I gave up on the site as soon as the scrolling stopped working correctly.

why would you you design a site that breaks simple scrolling?
Reading your responses to others too, you'll need to find your feet in sales quick before years end. Personally, I have grown and sold a couple of consulting businesses (failed at lots of things too). The key for me was never really which technology we used, it was always about finding a customer demographic I could target and where I had some expertise to help. We crossed nearly all industries but in general I targeted clients with a minimum of $1M/revenue per year up to $50M/year and less than 400 people and privately owned (non-public companies) -- including startups. The key is finding companies who have quick decision processes and who are not as formal as large public corporations generally. We did have a few large Fortune 100 clients as we grew but they were decidedly outside our target clients but we had expertise they would pay well for.

I always recommend people new to sales/marketing read "Crossing the Chasm", it has been continually updated and is essentially how to sell new technology products to the general market. While you aren't selling a product in the traditional sense, you are selling a dynamic product which is you and your skills. So while there will be parts of the book that seem not as relevant it will still help you get a broad understanding of how to market/sell your services. And think of the product as yourself, that's what you are selling when you are a one person dev shop.

I am happy to share my experiences if you have specific questions, I struggled starting my first agency as I didn't have anyone to ask questions to and just had to screw up a ton to figured out what to do. I was super lucky many many times that I didn't tank that business, but was within days of doing so multiple times.
That's not even correct way to look at it. Airbnb's tend to be concentrated in more nicer residential areas, where if you can afford, you want to rent.
Yes that is nice but performance and bloat are much more pressing issues IMO.
Crucially, they had a strategy that worked for that time. Same strategy applied today would simply fail.
How did you get involved with that? Did you just phone up and offer your services?
This seems like a great area for disruption. You can imagine a property manager for a homeowner who you call for anything. They can charge a monthly fee plus a percentage on top of any (vetted) subs they use. A single person can probably juggle dozens to hundreds of homes; then scale that.

It's the services of a rental property manager without the rental part.

With adults these days (me included) being more technically savvy but less... handy, it seems perfect.
I'm (mainly) a Swift developer, and Ray Wenderlich's Swift Algorithm Club has been very helpful for me: https://github.com/raywenderlich/swift-algorithm-club
B2B search is good, how will your product evolve?
Impressive !!
Well depending on if the rumors about the 64 core Threadripper are true you could do that later this year or maybe early next year
Haha that's nuts. I see your point.
> You got a dirt cheap printer because you're paying with supplies.

Give me one good reason why this particular business model - base subsidized by consumables - shouldn't be straight up banned. I can't think of any.
I use Slack every day in the Desktop Electron app and the iOS app.

Firstly, lack of accessibility is lack of accessibility. Beauty is a distinct concept. Your comment reminds me of the sign on the Berkeley/Oakland border that reads "Animal rights are human rights". Both are highly desirable, but that does not make them synonymous or coextensive.

OK, It's never occurred to me that I wanted a conversation in a different window.

You use ⌘-k to switch channels. Partially drafted messages are retained. I think I prefer that to a mess of windows that I'd have to manage though of course I don't mean to impose my preference on you.

I have the desktop client open and it's using about 800MB memory between the main process and 3 helper processes. I agree it's a lot, but it seems 100% standard for modern applications. Everything seems to be built around the assumption that people have a $2000 laptop like rich westerners might. So I don't agree with it but I wouldn't single out Slack for criticism beyond any other modern consumer tech company.
> AirBnB causes damaging housing economics more rapidly than building more units can alleviate them

Are you implying that it's impossible to construct an additional 31,000 homes across all of Canada?
I have a hard time parsing this. Do you mean no more than 1% of the sold product should cause a house fire?

Anyway, 75 house fires per year from a certain product is a pretty big number. Comparing this with the total number of house fires is misleading, since house fires have many different causes. I don't have any numbers, but my gut tells me that if you'd compare this with the average number of house fires caused by sudden electrical failures from household machines while being turned off, this would be a pretty big outlier.
What mistake is a user making? Sophisticated users lose access to their 2FA credentials all the time. The conventional advice is "enroll multiple TOTP devices". Most users don't have multiple mobile devices to enroll. Now you're asking them to enroll something on the desktop, which effectively undoes the "something you have" benefit of TOTP (see: the 1Password thread above). At least a recovery code _can_ be printed out.

I don't think the logic you're employing here is coherent. Consider it a bit longer! This post could be a good longstanding reference, but this is a big flaw.
A friendy FYI that you want to review section 5 of the Amazon Associates Agreement[0] and put a disclosure somewhere on your website.

[0] https://affiliate-program.amazon.com/help/operating/agreemen...

[1] previous comment about same topic: https://news.ycombinator.com/item?id=19295594
The YouTube recommendation algorithm will rapidly bubble you into a parody of your original beliefs. Of course this feels true and reliable and complete, but it's a false sense. It's a good way to learn what you want to learn, but a terrible way to learn what you don't want to learn. A general media source, for all its errors, has the huge advantage of giving you information you didn't ask for.
I agree, except if you're getting a taxi from the airport, as plenty of drivers will happily add on 10-20€ to your price. I always recommend to visiting friends to shop around for a better price, or to just order online (google: taxi airport vienna and lots of websites will pop-up).
1% would be an insane failure rate for something this dangerous. Over half the households in the UK own driers [1] and there are 27.7 million households in the UK [2]. If 1% of driers were catching fire we would be seeing 138,500 extra house fires a year! Even 0.001% is too high.

[1] https://www.statista.com/statistics/289140/tumble-dryers-in-...
[2] https://www.ons.gov.uk/peoplepopulationandcommunity/birthsde...
I sometimes hit the "no" key before I even fully processed the word. In my experience this is a problem I frequently have with this kind of test where I'm presented with such choices in quick succession. After a while I tend to just choose before I started really thinking about it, and then realized I chose wrong.
I'm getting downvoted, but here it is directly from
This is from Atlassian s1 filing, this is standard disclaimer.

"We may not be able to sustain our revenue growth rate or maintain profitability in the future."

https://www.sec.gov/Archives/edgar/data/1650372/000155837015...
I got "halal". Definitely a word you hear as an English speaker, but not a word that came from English.

I have a feeling Scrabble players do well on this test.
I am more interested in how Coinbase employees discovered the attack. I am assuming nobody clicked the suspicious link and instead took it to a vm for reversing and analysis. It would have been game over if the exploit was actually executed on a non-sandboxed machine.
The real question for me with all these AMD releases, what's Intel gonna release? It's surprising to me that Apple didn't announce an AMD based Mac Pro-- the chip Intel gave them must really be something. Too bad though because there could be a lot more of them (eventual Mac Pros) out there I'm guessing if they were using these Rome chips.
Some were - we knew we needed a new furnace, and needed to get our fascia repainted, but others, like having our waterline freeze, weren't things I don't think the inspector can look for. Ultimately the inspector can only see what they see, and you're taking on responsibility for the rest.
Everyday I want to get up and have no employment obligation to anyone, and work on whatever I feel is interesting to me at the moment.

I was under the illusion that I could be in that situation merely by founding my own company.

The only way to really do that is to be financially independent, because once someone is paying you to do something, you can't walk away when you get bored.
I wouldn’t be so sure. There have been situations where insiders stole crypto and then claimed they were hacked to cover it up. Looks like Gelfman Blueprint is an example and there are almost definitely others.
Much smaller, which is why AirBnB has to keep pretending "oh, it's just people renting out their main homes while they're out of town" and that any kind of regulation or crackdown on their business is only hurting ordinary people, even when everyone including them knows that's a lie.
> Would be great.

In my state any vehicle under 25 years old must go in for emission testing every few years or the tabs can't be renewed.

> If it weren't so easy to get away with not having that filter, then what would happen is a secondary market that sells replacement filters for old cars, just like it happens for every other car part.

Assuming owners have a right to repair of course.
Plus Genius has a lot of original content around interpretation of those lyrics. Glad Google doesn't copy that.
I second this recommendation. Value selling is how we made money in my consulting, hourly is a grind it out game. Also, value selling is what led us to be able to develop a couple of key products and eventually sell, if we had been grinding at some hourly rate I doubt we would've been able to.
I’d be interested in knowing where those parts came from - do they come from Apple facilities (because apple does refurbish devices) or do they come entirely from third party recyclers?

I’ve seen plenty of articles about parts coming directly from factories, rather than from torn down devices.

What is the actual ratio of stolen vs recovered by non-Apple facilities ?

I’m sure Apple would claim 100% stolen and rtr orgs would say 100% recovered. Note that Apple pays (in the form of a discount) for returned devices so if a refurbisher is selling parts they’ve claimed aren’t recoverable they are selling stolen goods (reason for destroying irrecoverable devices is to reduce/remove incentive for this type of theft)
There's already a 64-core Threadripper rumored for the end of this year.

Top-tier Ryzen 9 should reach "only" 32 cores on the 5nm process in 2 years.
1. As an investment to pass down

2. As a status symbol

3. If you have kids (and grand kids), you want a place to host them all at the same time (and this location happens to be popular with the kids...)

They eventually came to the realization that they want a smaller place though...
But if there aren't enough dishwashers, then the ones that they do have quit because they're overworked, then the rest of the kitchen staff has to pitch in and THEY are overworked too, and then the customers get slow service, it's like dominos. I can see just falling back to dish delivery
Except your cryptocurrency is bootstrapped on a highly-developed industrial product that requires extensive infrastructure to build and keep operational to the point you can start moving to the crypto currency as a means of exchange. Think about it. In terms of both physics and logistics, you need a functioning economic landscape in order to bootstrap your cryptocurrency based economic landscape; and even then, what have you really gained except that now everyone else is maintaining a copy of everyone else in the ecosystems financial transactions. A prospect really only palatable to those who have something to gain by being able to parse all of that data and extract meaning.

Localization isn't a bug. It's a feature. Me paying Joe 5 bucks should not be causing bit flips to have to happen in Japan. That feels free nowadays, given, but there is real and tangible cost there, even if it isn't necessarily physical.

Furthermore, what about your failure modes? How do you reconcile partitions in the network leading to divergent branches over time? Throwing out 24 hours worth of transactions by half your users isn't a terribly good model.

How about manual reversion? Care to do a blockchain transaction on paper? No processor mind!

Something I've learned about evaluating technological impacts is that the "Loop on! Shiny! Cool!" aspects start to give way more and more as you scale up to get replaced with "Well, crap, we really painted ourselves into a corner here."

I can see the applicability of blockchain to niche applications; however, I'm simply not sold at all as to it's desirability as an overarching means of common economic exchange (e.g. currency).

It's a ledger, and a token. It's great for assigning some value to the token, equating it to the national currency, and then tracking your economic exchanges with the population of users who use your stuff.

In fact, I'm not so sure the big obsession with blockchain and crypto hasn't been subverted from it's anti-establishment/anti-regulation roots because tech companies have started to realize how valuable the giant chunks of financial transaction data will become given enough other information to reason from.

I mean hell, this is just off the top of the head kinda stuff.
Unintentionally funny video instructions for factory resetting GE light bulbs
> John Deere argues that access to the company’s proprietary software could be used to bypass emissions controls or safety measures.

On an analog car, I can physically remove emissions control devices. I can short circuit the seat belt warning. I can pull a fuse and disable the (not quite analog) antilock brakes. I can fail to change the tires when they have an unsafe amount of tread. I'm less familiar with farm equipment, but I'm sure there are many parallel modifications possible for analog farm equipment.

The courts and the public would not consider the manufacturer responsible in any of the above scenarios. It doesn't follow that it would be any different for users modifying digital systems.
Analysis shows foreign money fueled Vancouver’s sky-high high real estate prices
True. I'm merely commenting on the total value of Youtube vs generic western media. Btw there are browser plugins that block the whole recommendation thing.
How does one discover such WhatsApp group chats? In my very limited experience, it is just like other messaging apps; I can't quite imagine how you would use it as a social network. Am I missing something?
Replacement parts aren't an issue for motor vehicles. In 2013 when I was still driving a 1995 GMC 1500 I could still easily source replacement parts for it, including replacement headlight trim rings, replacement fuel injectors, replacement fuel pumps, replacement throttle bodies, etc. etc.. So that's not an argument that holds any water whatsoever with me.

Worst case in 15 years there will be a few shops around the country who specialize in rebuilding/remanufacturing the part and will sell you a remanufactured part for a set price plus a refundable core fee. This was the case for my throttle body, and for the fuel pressure regulator there were rebuild kits available from Napa.

I'd like to see a class-action lawsuit against the people who rip them out as they're personally making it harder to breathe where I live. Your right to do whatever you want ends at my nose.
What are you talking about. No one is renting a long term unit, i.e. signing an actual lease on airbnb, at least here in Toronto.
You won't get sent to a camp or get arrested for personally using a VPN. People do it all the time, and for work, including for reasons the government would consider okay.

You may be investigated, however, if you use it to organize political activity or spread censored information to others.

China is a place where intent carries huge weight in determining whether or not something is legally enforced.
Read books; follow the worked out examples very closely until you completely understand them. Then try programming it on your own from your understanding and memory. You have to put in the time and effort. I suggest studying books where complete implementations are given in a language of your choice and only later studying books with pseudo-code (i.e. go from specific to general). Also the chosen language should be simple without obscuring the core logic in OO/Functional syntactic sugar and structure (C is ideal here). The following are a few chosen books from my collection (used copies of all can be had for cheap online);

1) Data Structures and Program Design in C by Kruse, Leung and Tondo.

2) Algorithms in C (Parts1-4 and Part5 two-volume set) by Robert Sedgewick.

3) Compared to What? An Introduction to the Analysis of Algorithms by Gregory Rawlins.

4) How to think about Algorithms by Jeff Edmonds.

5) Advanced Data Structures by Peter Brass.

Finally, study the ideas, concepts and techniques behind the C++ STL library to see how to design Data Structures and Algorithms in a clean and independent manner and yet can couple them as reqd. in myriad ways for actual usage.
That spacer still activates the 'ESC' key
Apple also has refurbishment programs that tear down and rebuild devices, I suspect some of those refurb parts are reported to Apple as being destroyed but then sold.
The savings accounts are offered by third party banks, not Monzo.

The 1.55% rate is fixed term for 12 months with no withdrawals
Why do I need 128GB when 8GB will do fine? I have so many USB drives I wouldn’t even have to buy one. Microcenter gave me a free 32GB USB 3.0 flash drive last time I went.

Amazon has $4.99 16GB USB 2.0 flash drives from SanDisk. I’m sure you could find cheaper chinese brands.

The FreeNAS community recommends 5+ year old server hardware running refurbished or used enterprise SAS drives. Performance is not an issue when you never want to shut it down.
I feel there is a clear lack of information other than just downloading the application to figure it out on your own. I think this is obviously not for me as youtube-dl/ffmpeg works just fine

Also, this is blatant self promotion.
I guess we need to ask: compared to what? They sold ~5mil units, and recall may affect 500k still in use. So that's a hit of 10% of the revenue from these driers.

If they had 10% profit margin on these driers, that would wipe out that. That's probaly all.

That vs. more people dying.
Looks like this is an account that only posts links to this obscure Indian tech blog.
Learning the Arrow of Time [pdf]
I just read them.
Insight into younger generations:

I hate the idea of owning property. I don't want to be stuck to a city or a location. The world, and the universe have so much to offer. To me, buying a house is cementing your location and stunting the amount of knowledge you can acquire by handcuffing you to a location and limiting your exposure to the world.

That is the philosophical side, then there's the debt and the overall asset appreciation game that everyone else plays.

I have no interest in owning a home to settle down. If I do it, it would be to exploit financial interests with the right opportunity. I think we can use a radically different model for housing and what we consider livable spaces for our species.

I'd love to see cities built around the Dunbar number and with transportation making travel times easier, we can see some interesting designs. Foster community and allow communication and personal reach across distances. This is probably going to be forced by warehouse space in relation to live space. We're going to need more and more land for manufacturing and storage of goods compared to retail and shopping experiences. We'll have living communities without much need to venture into markets. Markets will be VR, and many jobs will be remote. Foster community with "villages" within a city that is related to the Dunbar number.
While I agree with your point, I have. I do have an elevator and eevry apartment building (and business I have worked at), has an elevator.
I wonder if it could be possible to "film" the particulate emissions somehow, so cameras on highways with an extra setup could identify the offenders?