skysight-inc/HackerNews huggingface dataset:
Everytime I see a headline with "JWT" in it, I get excited hoping that it is for "JWt" [1], the "Java Webtoolkit", which I love. It happens when I search for it as well, I look for "Jwt ..." and instead of the beloved toolkit, it comes up with all these json web tokens and HMACs. Aaah, well, I'll keep looking for that wonderful day when it really is the toolkit. I guess it goes without saying that, I recommend it highly.

[1] https://www.webtoolkit.eu/jwt
This is more an obfuscation than any kind of defense of Facebook. Here’s a better starting point for evaluating the company:

https://en.m.wikipedia.org/wiki/Consequentialism
https://archive.is/cdT8I
For me it is that I am looking for a very specific subset of people that has nothing to do with looks or places. The dating app I use give me the possibility to filter on these attributes and foremost: let me express mine.
Adding an extra column for code|docs|other context is so much more useful than allowing longer lines for obese identifiers that rarely serve to make a point more clear.

I'll take my four or five columns of 80 chars over two columns of 120-140 chars any day.
Widget Based Web Development in Pure Java
I use a combination of both. I'll find something on stack overflow, and then look it up in the official documentation. In other words, treat stack overflow like a sophisticated index to a reference rather than as a reference itself.
performant?
Wow, not good for such a large bank. Holy crap.
The corollary to this is that people’s faith in video will be so low, that actual video of a major event can be dismissed as potentially fake - and the more extreme the more easy to dismiss.
The sword cuts both ways: false negatives being accepted as true and true positives being dismissed as fakes.
In addition to sibling comments: Also e-cigs.

There's plenty stories online about people who have, multiple times, tried to quit smoking and didn't manage it. But they had no issues switching to e-cigs, and then a few months down the line were able to stop using e-cigs - without any urges to return to any kind of smoking.
Slickest presentation? In what way? Is it online somewhere?
If they don't speak English, it matters even less...

(I've read code written by Chinese --- variables named dzhq, xljn, etc. are not uncommon. If anything, they like to abbreviate even more.)
CI and CD for Debian and Ubuntu
A forced mate is _forced_. There are no options except to be mated.

If there was a way to not be mated it'd be referred to as "Tactics" or just "A Combination".

And further annoying pedantry: there's no points in chess outside of match or tournament score. Pieces have _possible_ pawn-equated values that someone can use for evaluation, but those are very loose. It's possible to have a naive material evaluation that is not in your favour and still be in a significantly winning position. Better players think in terms of a pieces ability to control squares, how soon it might control squares, the importance of those squares, the potential value of reducing another player's board control, the ability to create tactical threats etc... there's a couple dozen potential evaluative concepts that are often more important than piece value.

Funny enough, your example of a queen sacrifice demonstrates this ;)
I don't agree with your core conceit of delineating between moderation and censorship, but this threw me:

> As long as the "vitriol" was pertinent to the topic, it should be allowed. After all, that's the point of the voting system right? If you don't like it, vote it down.

Voting systems as implemented by many popular sites are moderation/censorship via mob rule, and I'm surprised that you advocate for it.

I actually prefer having actual moderators to having a post voted down because five random people disagreed with my opinion and wanted to hide it in a attempt to control the narrative of the comment thread.

That's a problem even this site doesn't manage to avoid. Heck, look at your posts; in this comment thread, people are downvoting you in an attempt to hide your opinion, and I don't even agree with you.
South African bank experiences data breach affecting 1,7M customers
What do you think the difference is between moderation and censorship?

Because Reddit/Twitter/Facebook in 2009-2013 didn't just remove illegal content. They removed tons of legal content too. They removed spam. Facebook removed pornography. Reddit in particular allowed individual subreddits to moderate/censor basically on any criteria whatsoever. If you went into a random forum in 2009 about dogs and started spouting nonsense about how we should all eat dogs, you would get kicked off of that forum. They wouldn't patiently hear out your controversial point-of-view.

Go back and read some of the usenet threads from this time period, there are people getting banned just as a joke; the paradigm of 'benevolent dictators' running forums was already pretty widely accepted.

What definition of censorship do you have that doesn't include removing explicit content, self-promotion, and off-topic posts?
Ask HN: How to record Windows 10 tablet screen with gestures?
I'm looking for ways to create a screen cast on a windows 10 tablet that will display when I do things such as tap and pinch. Preferably this wouldn't involve switching out of "S Mode" (limited to windows store apps).
Russian agents plunge to ocean depths in Ireland to crack transatlantic cables
Why is it? Why should it be?

What's so hard about understanding somebody's desire for their art to be in the world without violating the boundary between that and their personal life?
The future of work looks like staying out of the office
Are you genuinely saying that when you see someone putting you at risk, that you do not see a problem with it until a problem actually occurs?

Imagine you worked in a building for a week and didn’t die in a fire. Would you have a problem with discovering that the writing was done by a amateur, there were piles of lint and fabric everywhere, and there was only one revolving-door exit?

If yes, then you understand the problem of risk and its just a question of magnitude.

If not, then you should be aware that you see the world dramatically differently than most people.
There's mention of him in this article regarding the source code (printed on white and green paper). He wrote about 2000 lines for the Lunar Module.

I often wonder how many lines of Javascript I load every day just to browse the web and watch images fade in and out and animate etc. and all the megabytes of framework garbage I load just to display some content. By comparison, it's depressing.
As much as I dislike FB I think this gives their ad platform far too much credit.

How do you go about connecting ads viewed to votes, or even poling data? Of those views how many users engaged with the content?
Github has a helpful CSV file grid view that I never noticed before. https://github.com/TheEconomist/big-mac-data/blob/master/sou...
"Risk of data loss".

Is there anything that guarantees no data loss or zero risk ?
"Mainland China" is the internationally accepted way to to distinguish the main part of China from the various Special Administrative Regions and disputed territories. Even the PRC government themselves use this term.
Not only a powerful suite of online tools for text manipulation. The tools can run offline. The tools can run on multiple items at once. The tools can even be chained together and run against an input consecutively. You no longer have to run the tools one by one manually.
honestly, i think it would be easier to count the people that DO read every thing line of code they copy
If you store an individual character hashed then it is trivial to brute force it. I don't think there is a bcrypt work factor that you could use that would prevent brute forcing but would allow the individual character to be used for authentication.
How is this any different than a picture? We have been making fake pictures, editing, airbrushing, photoshoping for years.
My take is that Scott is sort of like the former sports newscaster Howard Cosell. He reports stuff, gives his opinion, but does no original research with Quantum machinery himself. When is UT Austin going to get serious and start performing real research in QC instead of just having guys that "chime in" with their opinions ?
> Reserved words are initialized from an imaginary source code.

What does it mean? Could you point to a place in the source?
AFAIK after taking a quick glance, it takes c code as input, then translates it to internal format by doing tokenization and parsing, and then executes the code. So, it's an interpreter. You could call it with other names as well.
You can also have the program itself as an input, and have many layers of execution.
Jeff Bezos Launches $10B climate change fund
Another Pro is that they can be read client-side, so the server and the client have an agreement on who the user is and what their attributes are (if they are defined in the JWT payload).
That is true. The real world is dirty and messy:

- supporting public LAMP apps

- database servers that have public IP addresses that are barely filtered

- boxes not getting updates

- under-secured Linux boxes with almost every option recompiled to on

- chmod 777 developers

- substituting signatures of checksums for signatures of data

- not using HMAC and opening themselves up to length-extension and chosen plaintext attacks

- storing SSL/SSH private keys unencrypted on unencrypted laptops

- downloading HR data to a laptop and leaving it

I actually was fired once from a big name university in the SF Bay Area for refusing to haphazardly ruin the network security of a credit card processing private campus network to facilitate a new vendor remoting into terminals.

Integrity through awareness/caution, processes and standard components.

Bringing in a bunch of random dependencies, regardless of license or support status, is inviting all sorts of gaping attack surfaces.
The first time you'll read "HN", and then do a little mental substitution to "Hacker News".

Why do humans abbreviate?
Some possible alternatives/improvements:

The AWS S3 free tier is 5GB for 12 months, with 20,000 GET requests and 2,000 PUT requests. [1]

Backblaze B2 (AWS S3 alternative) provides 10GB of free storage (no expiry date), and is part of the 'Bandwidth Alliance' [2] with CloudFlare. So aside from some pretty generous daily transaction fees (of which 2,500 of each type are free per day) [3], you could have your own free almost-cdn.

Porkbun currently have a 1st year (new domain registration) discount bringing the $6 .com domain cost down to $3,90. [4]

[1] https://aws.amazon.com/free/

[2] https://www.cloudflare.com/bandwidth-alliance/

[3] https://www.backblaze.com/b2/b2-transactions-price.html

[4] https://porkbun.com/tld/com
Making a Timelapse of your PCB design in KiCad
Born and raised going south from Ancona, never heard about Urbani before.
Thanks for sharing!
I would like to know how you came to that conclusion. Is there something you don't like with Git/GitHub?
Anything like that for C++? /s
I'm French but have everything in English (system, browser & YouTube). I've seen a lot of French YouTube videos with their title auto-translated in English a couple of weeks after their diffusion.

(Bad for two reasons: (1) badly translated titles, sometimes hilariously so, and (2) the algorithm recommends me videos I have already watched. I guess (2) is because I don't usually watch the last 20 seconds, the static "my last video was", whatever it's called, so YouTube must think I haven't watched the video. Most times, the red gauge below the video thumbnail shows half-full even though I've watched the video minus these 20 seconds. There's still room for improvements...)
Social Listening: How to Leverage It for Your Business
”I can leave anytime I want!” :-)
Yes. those crafty russians who forced the american elite hollow-out the middle class, undermined Bernies primary, and installed unelectable professional grifters on the Dem ticket.

You should also consider that you are not viewing reality correctly.
> The service rep proceeded to (accurately) describe my own password to me.

Wait, that alone doesn't necessarily indicate that they're storing clear text passwords. I notice you didn't say that they just repeated your password to you-- why do you think they store the whole thing in clear text?

HN readers are apt to demand hardcore passphrases, salting, 2FA, etc. But the reality is that banks have to deal with all kinds of people and situations. Your security as a bank customer hinges on more than just one password, it's also about monitoring patterns of behavior, being aware of what's coming and going from your account, and protection mechanisms like the bank's insurance.

That said, one would think that large institutions have learned their lesson about clear text passwords, perhaps this one hasn't? Is there a law against clear text passwords? How does anyone actually know if a financial institution has sound IT practices, by happenstance incidents like this? Really?
Hong Kong is inside China but not governed directly by PRC. Most non-Chinese citizens need a visa to enter "Mainland China" but not Hong Kong. Most Chinese people need a permit to enter Hong Kong. So, yes, the distinction is useful.
Pretty sure this is already a thing:

https://news.developer.nvidia.com/logitechs-new-webcam-inclu...
If your complaint is that RSA is outdated and ECDSA is backdoored by the NSA, use Ed25519, which JWS/JWT supports[1].

[1]: https://tools.ietf.org/html/rfc8037#section-3.1
Alternative view, the U.S may have got a small taste of what it regularly does to others and continues doing so, having apparently no sense of hypocrysy whatsoever.
Looks like mid 90's background replacement extremely early work. This type of thing, and exponentially better - as you know from feature film VFX - have accomplished these types of operations decades ago, and have published how it is done, and commodity versions of this logic are in open source packages like blender. Deep Fakes and Style GAN has people all excited, but this type of effect does not need ML and are fully features digital toys now.
Hell, after 40 years as a developer of games, 3D graphics, interactive video, 3D games, feature film VFX, a digital double creation service, and now FR I can say with authority: this work is nothing.
Credit where credit's due, the mentioned website (The Punctuation Guide) works very well with JS disabled, and the problem with text copying is gone. I use https://github.com/meetDeveloper/Quick-JS-Switcher
NLP USE: “Johnny bit the dog” and “The dog bit Johnny” has an 87% similarity
I'm not sure how this is unique to Tesla
> sensibly grouped

That joke seriously made my day! Where is the global settings/properties menu for Firefox? Photoshop? Eclipse? Premiere Pro? Android Studio?

Between those 5 apps, some of the same category or even same vendor, you can find that one very ubiquitous entry under: Tools, File, Window, Edit, File but there's 4 of them.
Cocospy claims to be able to surveil Android, iOS without jailbreak
Alternatively I feel like Troy Hunt may also be able to help

https://twitter.com/troyhunt

He runs the @haveibeenpwned service
Hence the AI moniker is just the wrong word to use I think. I like ML a lot more, or even better would be Machine Cognition Learning.
I don't care if "addictiveness" is by design or emergent. Cigarettes were also not designed for cancer.
That'd be actually lovely. Not a bad idea. Start from scratch. Rethink everything. Like in the 70s. Create stuff like UNIX, etc. There's a lot that needs fresh thinkin'. But ... there's nothing like that happening at all. Seriously. Gen Z are not picking-up at all, have no idea, depend on us. And that's real bad (for the future).
Grief, I've done a small amount of open source work and got thoroughly burnt out on it. I can't imagine the level of commitment involved in doing the amount of work she's done. It's okay to take a break. And it's okay to stop.
IMO it would turn into a massive tourist attraction and lose the intended effect
I doubt any grandmaster will have any problem in forcing mate in less than 40 against me. Many real games don't get beyond 40 against opponents who are not nearly at that level.
Do you know the key for this? Can't find it with a quick search.
Though keep in mind that to rely on legitimate interest you have to do a "balancing test" between your interest and the ones of the user.

This is not an easy legal basis to rely on, and most of the time DPA are quite wary of processing relying on it!
https://news.ycombinator.com/item?id=21785888

tptacek
Credential attenuation in Macaroons is
cryptographic; it's in how the tokens
are constructed. I don't see the opportunity
for a DoS (that didn't exist without
attenuation already).

Macaroons are a really lovely, tight,
purpose-built design that happens to
capture a lot of things you want out of
an API token, including some things that
JWTs don't express naturally despite
their kitchen-sink design.

JWT is more popular because there are
libraries for it in every language, and
people don't think of tokens as a cryptographic
design (or nobody would be using JWT!), they
think of them as a library ecosystem. JWT
is definitely the stronger library ecosystem!

This is also why I probably wouldn't ever
bother recommending PASETO. If you're sophisticated
enough to evaluate token formats based on their
intrinsic design, then you should implement
Macaroons if possible (it's almost always possible).
If you're not, then you're going to use JWT.
I prefer the ribbon to the old toolbars and menus Office had before.
> Your security as a bank customer hinges on more than just one password, it's also about monitoring patterns of behavior, being aware of what's coming and going from your account, and protection mechanisms like the bank's insurance.

Some banks do this better than others from past experience. For example, I definitely have Bank of America notify me when I do something out of the ordinary. I had gone to a gas station and then my next purchase was pricey and online based. They put that on hold till I confirmed it was by me. They also have done so when I get gas from outside of town.

Other banks just cough up the money without a second thought. I'm sure they might have other "triggers" but it feels like mainly really the big players have proper security setup.

This is why I mostly use my credit card and pay for it before the statement is due. You have better protection on a credit card than you do on a debit card. I wouldn't use my debit card outside of an ATM.
Does storing passwords using two-way encryption violate some OCC regulation?
Digital projects: 5 most common fails
+1 for getting in shape. Starting to really work out has had multiple benefits (looks, health, mental resilience, it's therapeutic, ..)

You shouldn't wait for a burnout to do this though. (Although that's also when I started)
> With multiple tabs open, logging out on one tab needs to be synced with rest of the tabs via some event listeners.

that's a problem with every site in general, which doesn't use any kind of event listeners.
Some interesting infograpics but I really don't like the

"Coronavirus vs Sars: daily cases and mortality rate"

it is a misleading way to represent the data. By separating cases from deaths you are mislead into thinking the death rate (your chance of dying if infected) is much higher for Covid-19. Its shortcoming would be obvious if they had included data for the regular flu which based on American numbers should be somewhere around 130,000[1] annually.

The

"How deadly is coronavirus?"

infographic is better, but it doesn't give you any point of reference to make the scales meaningful.

1. https://qr.ae/T3bu6E
I just bought a 2018 Ford and the CD player skips when it's cold out.
That was the plot of Rising Sun by Machael Crichton and was published in 1992. https://en.wikipedia.org/wiki/Rising_Sun_(novel)

The only thing you'd need to change in that novel is substitute China for Japan
Typing speed is absolutely not the limiting factor for programming productivity. If you are actually limited by typing speed, you are doing something very, very wrong.
A Handful of Engineering Principles
I mean this part:

p = "char else enum if int return sizeof while "
"open read close printf malloc free memset memcmp exit void main";
i = Char; while (i <= While) { next(); id[Tk] = i++; } // add keywords to symbol table
i = OPEN; while (i <= EXIT) { next(); id[Class] = Sys; id[Type] = INT; id[Val] = i++; } // add library to symbol table
next(); id[Tk] = Char; // handle void type
next(); idmain = id; // keep track of main

Throughout the entire source code p is a source code pointer, but at the very beginning of the program it is a string containing all reserved words and library functions, and they are read with the same lexing function `next` to the symbol table before the memory for the actual source code is allocated.
You generally have to use the right equipment -- using mini displayport or thunderbolt 3 instead of HDMI, depending on the generation. It's definitely finicky (much like getting guaranteed 4k60 output, especially through a dock)
A popular bot protection system provided by a third party used by a number of US banks would accidentally disclose plaintext usernames and passwords to the bot protection software.

I'm not sure how the bot protection software was deployed but looking at marketing materials I suspect the data was sent to the third party as part of a SAAS service.

We believe this was accidental because a later version of the software stopped doing it. I'm not sure if there was a notification by the third party to users about this flaw.
Wow... I couldn't disagree more with your EDIT. This is flat out untrue. I didn't say they were smearing him, and neither does Melzer. Did you read the article?
This system is not primary for suburban America, but for places that are further out. But if suburban America is so shit, then why not solve this problem as well.

Nothing stops the US except incompetence.
The Daily Update Podcast
As someone who has dabbled in agricultural pursuits, please accept my opinion that farming is NOT a low stress job. Mother Nature is a fickle bitch, and she will screw with your planting, your growing, and your harvesting.
No reasonable amount of comments will make up for a lack of domain knowledge.
>We can disagree about the causes of social issues in America, and their solutions; but its inarguable that there has been no effort to systematically test and deploy policy interventions at a national level in any kind of evidence based way.

Why do we need to do these things at the national level?

The federal government is intentionally not set up to be able do these kinds of things. Doing these things at the federal level is an exercise in Constitution avoiding mental gymnastics and you wind up with hacks like withholding federal money or insane interpretations of the commerce clause in order to get things done or your policy winds up hanging by a threat that SCOTUS can cut at any minute (e.g. Obamacare).

Using policy to mitigate social problems does seem to work well at the state level (for any given problem there seems to always be a state that's doing a good job tackling the problem) because the states don't have to implement back handed legislative solutions or compromise things as many ways and generally run at smaller scale. (For example, there are at least a couple states that have decent universal healthcare programs.)
That's just needless hackery from Slack, though.

I should be able to decide if I want to allow apps to mess with my clipboard, and the default should be "no".
The earliest cameras around 1830 already removed people, perfectly. Exposure times were as long as 8 hours, so people were invisible. only buildings, trees, etc appeared.

Link below includes images of streets with people “removed”, and has the oldest known image of a person, a shoeshine that stayed in one place long enough to be seen

https://www.livescience.com/60387-oldest-photographs.html