skysight-inc/HackerNews huggingface dataset:
LIGO doesn't detect supernovas, so its irrelevant
I understand that you follow some misguided security guidelines that state that a password must contain special characters and have a length of at least X.

What I don't understand is why sites use a maximum password length. They shouldn't save your password anyway, and only compare the hash, right?
Another 'dumb' feature with PayPal (at least a couple of years ago) is that it had a 30 character limit on password length. Except it won't tell you that when you create an account, instead it just truncates your password. So when you try to log in with your 32 character password (which it will happily let you enter) you'll just get a wrong password error.
Except that it is pretty much exactly what happened...
Industrialized Approach to Education (2018)
September Update: The PinePhone Is Real and Shipping Soon
> [...] and they make great powerbanks.

Do they? From what I understood they don't have good efficiency.

> Their Roomba and Fitbit clones are great

(Haven't checked their Roomba.)

The Amazfit Bip cannot disable Bluetooth. Battery life is decent though.

> Almost forgot their sonic toothbrush and wiha screwdrivers (I don't even know what they're clones of)

The iFixit screwdriver set is the one I got. What I paid for it (during a Black Friday deal) isn't that much off the wiha screwdriver set from Xiaomi. And you support an organization which is part of the Right To Repair movement.

I got one of Xiaomi's Bluetooth speakers as well. I also got a Dafang camera of them. They're both decent and cheap, but not great. Which sums up my Xiaomi experience. Its not as if Xiaomi is so good quality; rather the rest from China is terrible, and we accept it apparently as such (yes some Western brands also deliver abysmal experience but then you got decent warranty).
At first I thought your comment was going to be about Apple's Smart Drummer feature in Logic (and I think Garageband?).

Logic Drummer is a killer feature, at least for on-the-grid stuff. Usually the drum parts it generates for me are more inventive and have way more variety than anything I play by hand or program manually.

Sorry to hear about your situation, though.
Well, a lot of things about this push the limits of credibility - if you were an author who told me about Epstein in a novel ('private sex island', 'hangs around with royalty and famous scientists') I'd say you're overdoing it. Have a look at:

http://nymag.com/intelligencer/2019/07/hedge-funders-have-so...
Reasons for Exemption from Battle
There is a lot of traffic in xmpp that is not message. Like, delivery / read receipts, carbon copies, etc. It's often fully encrypted and a server doesn't even know the contents and if it should or not be showing anything for this event: it just has to tell an app to wake up, fetch messages, let it decide what to do.

With this change, we're left with 2 notification methods: one that always presents a notification banner (resulting in EXTREMELY BAD user experience - banner on every read receipt, on every your own message sent from every device, etc), or one that is extremely unreliable: it is delivered badly if a user is low on battery, and never delivered if a user swipes an app away.
Cost of calculating 10k character hash? IMO above 30 length serves no practical purpose.
I realize that now. I initially read it as they rushed to get things done before lunch everyday. Oops!
What is fasting anyway? Some people tell me they "fast" by drinking no alcohol. Others say they fast by only drinking water and not eating anything at all. Why does everyone have to use the word so differently..
I didn't even bother enabling online banking with my local bank because of this. None of the local banks have a damn clue so I just use them as if it's 1995; ATM and IRL. I only use them for cashing checks though so it's no big deal.

E-Trade has a decent security story though. 2FA w/hw token, and they refund all ATM fees on the checking account so it's decent for general banking in addition to trading.
Hopefully they don’t take the suggested approach of forcing everyone to explicitly write the generic types when creating new Sets/Maps/etc. I realize the type systems are very different under the hood, but if flow can handle this elegantly I would hope that typescript could as well. https://flow.org/try/#0PQKgBAAgZgNg9gdzCYAoVBjGBDAzrsAYTAG9U...
You don't need a whole cluster to get started, you can use Minikube locally for example : https://minikube.sigs.k8s.io/docs/
Yes, slow delivery when user is low on battery. No delivery at all if a user swipes an app away.
Yeah, I misread your comment as saying they rushed units in before lunch :D :D
This is used for sites such as Genius (lyrics aggregator/social commentary mix, still uses Apple Music I believe) to provide a snippet to browsers without a subscription.
This is a natural outgrowth of 4chan culture for anyone who browsed it years ago. Journalists who haven’t been down those roads will always miss the point. 8chan and sites like it are a symptom, not a cause. The cause is rooted in the isolation and disenfranchisement of men in modern society. Jordan Peterson is one of the only individuals I’ve heard describing the root of this problem in a professional, statistical, research based manner. As long as we continue to destroy everything that has traditionally given men meaning, this will get worse. 20% of men enjoy 80% of female attention in a dating app world. Churches, bowling leagues, etc. are dead and gone, community has collapsed. Patriotism is dead, the government is seen as corrupt and full of fools. Corporations are decried as soul sucking bastions of greed. On the one hand, these are good things. Truths laid bare. We no longer look up at our flags and company brands in reverence. But without mating, community, honor (serving your nation), or mastery (serving your work), what are they going to do? Lash out. They literally just don’t care about society anymore. Why should they? Where’s the buy in? At least that’s the logic as I understand it. It’s not correct. Ethics, morals, and honest self assessment are completely lacking in these people. But it’s a real thing that’s happening.
Mine isn't. https://github.com/tylerl/filterpipes

Since I wrote it on my own time, I had my pick of going the IARC route vs going the Google open-source route, and I picked open-source with a Google copyright because it was simpler (though I fully intend to go with IARC on another project just to try it out).

It's on my own github instead of Google's because (again) it was simpler. Since it contains zero Google-specific anything and wasn't made on company time, they didn't care which I picked at the time. In retrospect it probably would have been cooler to publish it under their name instead of mine, but aw well.
I would include there ANY website that imposes a maximum limit on the password length ... And it's not like a reasonable 255 chars or something. I've seen limitations to 8 characters! Why would you do that ?
How's it coming along? Will there be an English translation available? Actually, I just tried to translate part of the book (the whole book is 'too big to translate') with Google translate, and the translation looks of remarkably high quality compared to what I'm used to from Google translate.

I would love to see a similar book/project for a linker and assembler.
Other than not annoying users by not allowing their 31 character passphrase.
Yeah. It either means that they do, in fact, save your passwords and the column in the database has a fixed length. Or... I dunno... the backend is written in C and they store the password in a `char password[16];` before sending it off to be hashed.

Whatever the reason is, it's pretty darn stupid!
Most comments talk about APR and look at this from a personal loan point of view, not understanding the dynamics of a business that make this loan structure well aligned with the business's needs.
Docker and Kubernetes are on completely different layers. You can't do those comparisons.

Kubernetes is like an operating system, Docker is like a format for the executable files.

There is no problem with servers. We're running Kubernetes in production on a single Linux machine, essentially using Kubernetes as an alternative OS.
Companies don't have feelings. The only ones weeping are the VCs that invested into Docker :-D

Docker played its role and introduced the majority developers to containerization. This is a major success for the industry.
Could somebody contextualize how targeted this particular attack really was?

According to random Google result #1: https://www.2-spyware.com/remove-ryuk-ransomware.html#qm-h2-... the specific malware distribution is unclear but likely involves email attachments and/or vulnerable and exposed RDP.

While reporting on ransomware cases often sounds like targeted APTs, more often than not the details in these stories read like "we didn't bother to pay enough admins to actually patch and secure our systems" and "we didn't train our users not to click on every random attachment".
Instead of beating around the bush and choose easy targets such as fossil fuels and forests, do something about it.
To anyone trying to understand recursion, I advice to learn basic Haskell. This is the language where recursion actually "clicked" for me.

All you need is very basic Haskell. You don't need functors, applicatives or monads. You only need simple functions, pattern matching, and maybe some parametric polymorphism to simplify the examples and make them more general:

fliplist :: [a] -> [a]
fliplist [] = []
fliplist (x:xs) = fliplist xs ++ [x]

l = [1,2,3,4,5,6,7]
f = fliplist l

main = print f
The maximum length of text in a field could be (and should be if it's actually necessary) an attribute in the HTML. https://developer.mozilla.org/en-US/docs/Web/HTML/Element/in...
Um, I thought Ember was SproutCore 2.0, so isn't this more of a rename rather than a fork?
Monero is a fairly popular privacy coin too.

And while Bitcoin is written to a public ledger, there is a key difference in that you only see “this address sent money to this address.”

That’s still fairly public and you might not want that. But unlike a bank there is nothing linking those addresses to any individual, no name, address and phone number is associated. Plus you can receive funds to a different address every time, so you don’t have to use the same one for each transaction.

It doesn’t mean it’s not public but just to put it in context.

The main issue with crypto is the confirmation time, but 0-conf is probably acceptable in the same way contactless is for small things.
I would indeed have liked to append the date to the title, but Too Long
What bugs me more than anything are sites that refuse to accept the strong passwords generated by modern browsers.

Who does the usability testing on those sites?
Yeah, but at the same time Stripe Capital only lends to people that have history selling on Stripe, and if they're anything like other processors they'll be holding some percent for chargebacks and other stuff anyway, lowering the default risk even if a company decides to take a "loan" and then swap processors overnight as soon as they get the money.
Trump attempted to nominate his personal pilot to run FAA. When it did not go trough, FAA was run by acting director until this July.

Trump government seems to sell influence in government organizations to companies they are supposed to oversee, so I don't know if Stephen Dickson is step for better or worse.
That actually makes it slightly more acceptable to use security questions I guess.
Does any one know if they are still using Ruby Rails for Apple Music's backend?
Over-engineered is not a trap in BigCo, it is simply the by-product of KPI/Goal/Impact driven.

People tend to do it to get promo/bonus.
Don’t Trust Facebook with Your Love Life
If that were the case, would the limits be so small? I mean, it's usually like "less than 16 characters" or something. The extra CPU time to raise that limit to, like, 128 or something would be totally insignificant (especially if they're using a key-derivation function after the hash, as they should be).
>Cost of calculating 10k character hash?

Irrelevant compared to the rest of the operations done on the server.
The problem being discussed is replacing cash.

Cash does not provide dispute handling, chargebacks or any of those other things either.
The name of my childhood pet was "FVrE9msW9DLBAx".
Makes for fun conversations on the phone.
That's only a problem if you allow untrusted users operate the docker daemon.
Serverless Security Explained
Sure is, you can haggle about whether it will be in 5 years, 8 years or somewhere in between but I think Tesla growing as big as Toyota is almost inevitable.

In 5 years Tesla will be producing at least 7 models including 2 cars (S & 3) , 2 crossover/SUVs (X & Y), 1 sports car (roadster), 1 pick-up truck, 1 semi-truck.
Easy Steps to Remove iCloud Lock on iPad
Hypnotize Clients by Writing a Project Description They Would Enjoy Reading
Apple Music Beta Is an Ember.js App
For the record, the Google developers I know also don't use it and generally don't care about it. But it's a big company, I'm sure they have a few users
You can run a single-node cluster. Not the best option and overkill if you don't have the need for redundancy, but it might save you some time deploying software. Honestly at that point you might be better running your software using docker-compose or something like that.

For development, microk8s is actually very nice: https://microk8s.io
Here's my workflow and it works very good to get everyone on the same level:

- Each night, I go over all the commits of the day and do a code review
- Each morning at 9:00, we go over all the comments on the commints, with everyone, talk about it and make sure everyone understands.

This allows me to explain more advanced or new concepts that one developer uses to make sure everyone understands. It allows me to introduce improvements and explain why they are beneficial, and it allows me to signal when people don't follow the standards we impose; giving not only the person who did it wrong a refresher, but it makes sure everyone is reminded of the way we should write code, etc.

The feedback has been amazing and everyone loves it because it helps everyone grow and they feel like they are allowed to focus on quality; due to time pressures, coders tend to let standards slip when under pressure. When you focus on quality every day, it stays with them, because they know, if they don't deliver quality, it will be in the daily review. So far, this has not hurt production speed at all and quality has gone up a lot since we started doing this.
Have they solved the high CPU usage problem while it is running (even when no containers are inside)? I don't like my laptop hot, so never could make a switch.
When the FAA asked for a software fix after they decided there was an issue after the first crash they came to an agreement with Boeing for a January deadline. Boeing didn’t deliver, the FAA didn’t do anything. In March the second crash happened. This alone is horrible to think about.
What if someone uses the credentials to file a support request in that platform asking the snapshots to be deleted?
Seems to be a sudden rush of openings in industrial cyber security - eg PLC/DCS and other control systems gear.

You need to have a particular background as well as the IT skills though, there are subtle but significant differences in attitude and implementation in the way things are done, esp where functional safety is involved.
It’s all true, but the point I was making is that photography isn’t just a technical pursuit nor are those tricks and abilities the things that everyone looks for. There’s more to photos than simply reproduction. None of these things has really shifted the overall quality of photography in the last 100 years as much as it has shifted the way photos are made. And that second shift is pretty much done.
"that's what the platform team gave us" :D
Or perhaps they actually haven’t spent enough time not using Slack. I know as someone new to the industry, in all my 4 years I haven’t known a time when I wasn’t able to just ping someone on Slack. It’s natural and obvious to me.
Normal users will probably try different question-answer combinations until they get a hit, submitting a lot of personal data in the process
Or if they need to connect from a foreign computer.
Ofcourse Amazon will try to protect them selfs against lawsuits

I do think that Amazon have some moral issues, Since I came across Amazon M turk.

They basically have army of over 500,000 registered workers
Those people make few cents per micro tasks while amazon make x10 that amount of each task and leave tiny slice of the cake for its core users.
Weep? Docker's downfall? What happened?

As far as I can tell, everybody and his grandmother is using Docker. Why should we weep about it?
I think you'd still need bit-level data adressing to make sure you can do stuff like RAID to make sure you can handle drive failures with parity, or you need to always 1:1 the data.
How else will you make sure they're not entering their SSN? :)
The Type Theory Podcast (2016)
What makes a supermodel 'super' in 2019?
I hit a paywall halfway through unfortunately but I'm guessing I got the gist. A counterpoint (although just playing devils advocate here, I try to give social media sites as little info as possible while still making them useful for my work) is that Facebook knows a lot about many people, likely including those in your network and probably out of any service with the exception of maybe Google, could make an optimal match for you if it wanted to based on personality, interests, etc.

I've always thought it strange how people marry or get into relationships generally with people in their immediate or secondary circle of friends/colleagues/classmates when it seems incredibly unlikely that the best match for you is in that group out of a few billion people in the world. Personally I'd love a tool that found me the optimal match even if they weren't in my circle and I think FB could probably deliver that with their dating app if they wanted to
I switched to it from a private IRC setup. It was the same but with modern addons like integrations

Definitely not a new category, I very near share a date of birth with IRC. Even before that you had BBSs
Would love to have a chrome plugin that shows the requirements next to the site login.
> systemd sucks balls

No it doesn't. Shell scripts in your init system sucks balls. Systemd is great.
'Everybody' is using docker the software, 'nobody' is using (ie paying) Docker the company. The article makes it clear they're talking about the company.
This is not a new thing really, it's quite tricky for Apple as probably every idea they come up with internally someone else has already had in some form, so I don't see how they can avoid it, though they could try to be graceful if they completely replicate a tool, and offer to buy it out.

Back in the day I produced a little shareware utility which was a speaking clock for Mac OS. Apple took notice and I was invited to SF by someone at Apple, but had other commitments at the time and couldn't go at the time. They asked for partial source code (I think after a bug I reported to them) and I sent it over, and that was the last I heard about it.

Soon after they introduced the feature in the OS and it is still there to this day in Clock settings - Announce the time on the hour. I was actually pleased about that, as I never made significant money from the utility anyway - I'm not really sure if they were inspired by the tool but always suspected they were.
Especially on the phone where most people use Spotify. Oh wait...
I feel until you have atleast a clusterful of services, you shouldn't add that much complexity to your applications. It's much easier to manage a single tower for as long as possible, and slowly migrate to a new one when it seems ripe
No Walmart had three time the retail sales of Amazon in 2018.

https://stores.org/stores-top-retailers-2019/
sigh

In offline mode, the app is basically useless.
No way to browse through the artist's whose songs I've saved up. Gets worse -

Say I want to listen to a particular album. I type the name of the album. I do not get a result of the album which I can go to, and play start to end. I do get, however, random songs from the album which if I'm lucky, and remember the sequence in which they appear on the album, I can manually add to the queue and listen to.

The artist tab doesn't work. The album tab doesn't work. These are online only tabs which include things like "New releases", "Fans also like", "Performing Livr" etc.

------

Even when I'm connected to the net ( at home), there is no way to see all the artists whose songs I've added to my library.
There is no library.

Songs you can "like", artists you can "follow". When i follow an artist, and click on him, I don't see the albums I've added to my library/liked.

------

tl,dr: It's a UX clusterfuck. They took something which works and fucked it up ad infinitum. I've switched to Apple music, which is undoubtedly bad in terms of recommendations, but at least it lets me listen to the stuff I know I like.
>> I as a small developer and small server owner...

You'll never ever need either Docker or Kubernetes or even the latest and greatest javascript frameworks.

I started running a server before I knew anything and that server is still purring along happily.

But if you're ever targeting an enterprise, either as a freelancer or as an employee, those words are invaluable in your resume.

It of course helps if you actually know about those technologies!

And when you do get to learn them you'll wonder why everyone is coming full circle!
There are so many accepted papers, but no categorization whatsoever... It would be great if the papers are grouped by specific categories (like what Ke-Sen Huang does for SIGGRAPH, for example: http://kesen.realtimerendering.com/sig2019.html)
If uptime is not a concern and only one node is intended, docker-compose is a far more efficient solution to any k8s solution.
20% time still exists, you don't even need to tell your manager you are doing it and your manager has limited power to stop you from doing it if he learns about it. If he is trying to stop you then you can escalate.

Of course not a lot of people participate in 20% projects since just doing your main job is simpler than trying to balance two jobs. I only used it in short bursts myself, for example testing working on a project with a new team before transferring. However I feel it lives on in spirit, in that your coworkers and manager at Google typically doesn't know what you do from day to day and nobody will scold you or even notice if you work on a different project you feel is important for a week. If they make a fuzz just tell them it was your accumulated 20% time from the past 5 weeks.

In short, 20% time means that 80% of the time you belong to your manager and 20% of the time you belong to yourself. You are still judged by 100% of your contributions, so if your the new framework you decided to write didn't turn out to be useful then it wont be of much help for perf. But if it became a huge hit then that 20% project might be more important than your main project.
Why bother with containers at all at that scale then?

We keep on using plain old VMs, while watching everyone rush into containers fashion.
That's only a problem if you allow untrusted users operate the docker daemon.

Sure, if you trust every developer in your company with the root password anyway, why not? That might be true at Docker (the company), I don’t know. Certainly wasn’t true at one company I worked at with 30,000 devs...

By the way, this problem does not exist with competing container tools like Podman/Buildah.