skysight-inc/HackerNews huggingface dataset:
Nice and easy to use.
It would be even better with some Unicode input possibilities.

http://snapnote.io/0EaVIO
Thanks. It should be a good start.
Why is the text so unbelievably massive on an iPad?
> The new two-factor system works like this. A user enrolls using the mobile app, which generates a 2048-bit RSA keypair. The private key lives on the phone itself, and the public key is uploaded to Twitter’s server.

> When Twitter receives a new login request with a username and password, the server sends a challenge based on a 190-bit, 32 character random nonce, to the mobile app — along with a notification that gives the user the time, location, and browser information associated with the login request. The user can then opt to approve or deny this login request. If approved, the app replies to a challenge with its private key, relays that information back to the server. The server compares that challenge with a request ID, and if it authenticates, the user is automatically logged in.

Basically it has a public/private key pair on your phone. Twitter only has the public half of the pair. When a login request comes in it asks you to verify it by confirming it on your phone. Your phone then signs a "Allow" response using your private key that Twitter verifies by checking it against their copy of your public key.

What's cool about this is that it can deal with any login system in existing apps[1], whether written by Twitter or a third party. The two-factor login confirmation is completely out of band from the original login request. If anything the requesting app would just get a login delay.

Would be cool to have a more generalized version of this approach, similar to how TOTP exists. I like the idea of signing login requests using a physical device (eg. your phone) and like how it would be possible to integrate it with existing systems quite easily. What sucks is if each app has to have it's own app installed for something like this. I like how I have a single TOTP app on my phone. If something like this was standardized you could have a single app handling multiple sites.

[1]: If Twitter allows them. It might just reject third party login requests rather then hanging waiting for an "Allow" confirmation from the user. This would actually be an interesting way for them to crack down on third party clients.
"He read all the ‘right’ books on management and took the advice to heart: don’t get too chummy, shield your team from anything they don’t need to know, ask them to identify roadblocks to progress, reward them all equally."

These are definitely NOT the right books on management. Every single one of those things is the exact opposite of what good managers do. That sounds like the advice from the world's most fear-ridden, counter-productive HR organization. Good managers care about their teams as people, communicate openly, and overwhelmingly reward their best.

The approach works great for small, nimble organizations, but it doesn't scale. For instance, I talked with a tech company a few weeks ago that's rounding 50 employees and is now a few years old, and the employees are all frustrated that they've never gotten performance reviews. Founders hate performance reviews, because they're against the DNA of most entrepreneurs. But a lot of the people who become developers, customer support reps, and marketers really like when someone gives them a clear idea of what they're doing well, what they need to work on, and a clear plan for how they can develop.

One of the challenging parts of management is that it's really hard, it's highly situational, and it's non-deterministic. Having really great processes helps, but at the end of the day you really just need to hire people who are good at managing and set the right priorities for them as an organization. Inventing weird systems like this sounds great, but in most cases it doesn't scale. For instance, a role-centric organization will work until you realize that you need 60 people involved to get a press release out because someone declared themselves the Word Master and needs to have a say in punctuation.

But outside the weird jargon, this isn't a new kind of company, it's just good management principles. Have clear accountability; be candid; care about your people; connect everyone to a broader vision. It sounds like common sense sometimes, but when you go to implement it in the tactical reality of the day to day, it's really hard.
Nice, in what language? I've really learned a lot from creating shortin! Shortfin is written in C so it's a nice project to spend some time on when I get tired of writing javascript and html ;)
There are some useful apps on the list, great!
While I'm not sure of your phone's implementation, all I received was indeed a buzz and notification, not some "full warning and reading of text" or an absurd "complement of a 10-second spurt of high-pitched noise and buzzing."

Does iOS have some ridiculous implementation? Because for Android and SMS users to get horribly inconvenienced by the sound of a text message at 10PM with information about a child abduction sounds quite insensitive. At best.
Expand Your Mobile App Marketing Strategy With This Rarely Used Email Tip
A bookmarklet that will make your WordPress editor dark
Heat dissipation and manufacturing concerns aside, a 3D stacked architecture seems to be the most obvious thing to increase clock speeds. Light can only travel about 30cm every nanosecond: components clocked at 4GHz can't be more than 7.5cm apart from each other (I think -- and probably have to be quite a bit less for practical concerns). Packing everything vertically makes it easier to keep these propagation delays low and drive up clock speeds.

We seem to be in a race to the smallest transistor physically possible, to increase density on 2D chips. Tiny transistors generally leak more heat due to quantum tunnelling, right? So what if the industry moved toward much, much more efficient, larger transistors, layered hundreds or thousands of layers thick in a large 3D architecture? I think the only reason this isn't happening is because it's not really possible to manufacture that sort of chip without it taking a thousand times as long and being a thousand times as likely to fail QA -- but maybe this is a step in that direction.
Jeff Bezos lives in Seattle and Amazon is not a ‘Silicon Valley’ company
I wonder how well a silicone or other flexible key-sleeve would work with existing keys. It might feel somewhat silly, but at least you could color code your keys as well as protect them.
Google Search Starts Highlighting In-Depth Articles In New Knowledge Graph Box
> What is your consciousness

It's me; and I'd be happy to give up the biological machine I'm running on and trade it for an equivalent or better technological machine or VR environment where the limits of biology no longer applied. Removing my biology doesn't remove all of my goal conditions; it removes the ones nature imposed upon me. I could add back any I like and choose to drop those I don't.

We're intelligent beings who have transcended being driven by instinct alone; we can choose our own goals independent of nature.
pizza and fitness don't mingle in the same rooms
The MT Summit's Program contains an eye-catcher as well: Modeling Hip Hop Challenge-Response Lyrics as Machine Translation (http://www.mtsummit2013.info/programme.asp)
And all of it is scooped up by the NSA.
It sounds like you're going to be disappointed. Firmware != microcode, and we didn't say we're opening the microcode.
Cheaply :)

Thanks for the response, I'll delve into the docs more. What would be really cool would be a snapshot/description of a sample deployment I could look through. A fake ssh session demo in the browser that I can poke around in would be pretty awesome. Reverse engineering chef cookbooks from github isn't exactly an easy way to learn about what a product does.

More specifically as per support pricing, I'd love site licensing as opposed to a per-deployment or per-server setup.

Just a thought: what would fit my needs almost perfectly is some sort of tiered email/forum/ticket based support option, which is upgradeable to phone/dedicated support when I'm doing deployments
The sad reality is, even after reading this article most folks will resolve to once again, blaming others for the things they don't have. It's not that most people don't know they should work harder to strive for their own, but rather it's a lot easier to blame someone else, and humans are naturally lazy. Most people know, but don't act, imho.
How does your safe help you if you are standing outside in the rain at midnight, after your generator/batteries have run down? (Perhaps you were on vacation when the power first ran out.)
Ask HN: What's the future of frontend web development?
I'm curious about the future of frontend development. It seems like every few months there is a new SaaS or stand alone app that offers an easy way to develop responsive html5/css3 based layouts and designs e.g. Adobe's Edge Refow. Of course, I don't think these programs are up to par yet, but what will the field look like in two - three years?

Will frontend development/developers slowly be phased out by software or will the role of frontend developer transition into something along the lines of javascript specialist focusing on single page apps?
Technically passwords that should be retrieved at a later date are stored using two-way encryption. So the thing is, the passwords are always "visible", as they're retrievable. Removing the "Show" button is not really making things more secure as it is retrievable using other means. This is same with all browsers that save passwords.

You could lock it away with a one-way encrypted password but the problem with that is it's just "theatrics", giving a false sense of security... the stored passwords are still two-way encrypted either way, or else they can't be retrieved for later use. That means it is just as breakable as if they weren't. Once the hacker finds the password database on your computer it should be considered compromised.

If you don't trust your browser or your computer then you should use a service like LastPass or 1Password, i.e. if you consider them trustworthy to handle your passwords and if you're not on an insecure WIFI network. There is really no other way around it.

I do agree though that all browsers should be more clear about it... unfortunately it's not particularly easy to explain computer security to a user who is not a computer science nerd.
"Step 1: Characterize the 'official theory' of some event or phenomenon, often in an overly simplistic manner"

...

" the moon landing denialists ... point out that the shadows look unusual in Apollo footage. THEREFORE THE WHOLE THING WAS FAKED ON A SOUND STAGE ON EARTH"

Ironically you are exemplifying the "overly simplistic" characterization of theories. E.g., the Kennedy assassination conspiracy theorists don't rely exclusively on the "path of the bullet" thing, they also talk about many other aspects that cast doubt on the Warren Commission's explanation.

Part of the problem with the "conspiracy theory" label is that those who use it in a pejorative way tend to lump together different views, as if to imply that they're all equally irrational. E.g., the idea that the Queen of England is a lizard-creature in a human-like disguise is commonly dumped in the same category with criticisms of the "911 Report" - and the "911 truth" people are treated as if they all held to a common set of claims.

Of course no one would have time to address all the myriad ideas out there. But that's no excuse for dismissing any whole subset of them. The only intellectually honest way to proceed is to address specific propositions, and always give fair consideration to the strongest, most plausible version of any claims.
Inefficiently.
That's a potential nightmare of self-dealing that I don't think is Bezos (or Amazon's) style. You'd have to get some third party to come in and validate the transaction price as fair, etc. Amazon's done a number of transactions where it chose to maintain or transform the target as a separate entity (think Zappos, IMDb), so if he thought there was long term interest he would have just had Amazon buy it.
This just in! Computers have no sense of humor! ;)
>>>>Provide an install tarball and provide a checksum of it that we can verify.

This 100%.

When I first started experimenting with Linux after being a lifelong Windows user, this was the same advice I got from a seasoned Linux developer: ALWAYS COMPILE FROM SOURCE - NO EXCEPTIONS.

He just told me even though Linux is secure and not as big a target as MS, he said you want to establish good habits from day one and not get lulled into a false sense of security.
there seems to be a market coming soon for such software - on one side government and politicians need to push their propaganda domestically and internationally through web2.0 and social media channels, on the other side ordinary people may soon want to have artificial realistic chatter generation tools as a way to increase chances of preserving privacy of their communications.
Accepted :)

And I apologize as well. My posts were venturing over to the pushy/rude side and I don't want that to be the case.

Truth is that I do enjoy seeing new projects like this because it forces me to look at things with a fresh perspective. Yes, the install method did give me some pause, but maybe I've been spoiled by things that I'm comfortable with so I welcome the chance to pour over the code for something totally different.
Twitter - Improvements to login verification
> Why would it be illegal?

Because its about revenue. The cities want to give out tickets to prop up their bottom lines. Yes, there is a congestion and anti-car component but do not be fooled, its all about parking tickets.
Exactly. Wherever perverse incentives exist, exploitation will inevitably follow. Just imagine how much better this country could be on all levels if we eagerly stamped out these types of perverse incentives. It wouldn't even take a huge overhaul of the government: simply don't allow people to benefit from their own position of power. Such a simple concept, yet we keep moving in the exact opposite direction.

Casually, it seems like this trend can be traced to our need for "efficiency", and the proliferation of business concepts into government and public institutions. Incentivize behavior that you want and you'll get more of it, etc. Makes sense in business contexts, but in public services it is detrimental.
My take on mitigating BREACH
(OT: how do you downvote on HN?)
Forgive my ignorance, but I always thought the point of using SMS was to avoid using the same data channel for transmission, kind of like having Fiber with a backup DSL/Cable line for a small business.

This innovation sounds awesome, but is Twitter exposing their clients to additional risk by returning to a single communication channel? I suppose that Two-Factor isn't designed to withstand a carrier-based MITM attack, and that such an attack would probably apply equally well to data as well as SMS, but I think it's interesting to model the attack surfaces.

All in all I think this is the right direction for Two-Factor, but I wonder if there's a way to use something other than the carrier data channel to deliver the second-factor. There's something to be said for using a diversity of transmission mediums.

Something to think about.

EDIT: For the sake of clarity, I'm referring to a single data channel in that you transmit your password using your cellular data connection and you would also be providing your two-factor challenge over the same data connection, whereas previously the SMS portion represented two discrete networks for authentication.
every time I am about to try something like this, I realize that I use VIM.
Mass Data: Transfers from Germany Aid US Surveillance
They activated it suddenly in the past couple months on most existing phones without asking, under Congressional orders. And there is no way to opt out of Presidential alerts.
I enjoyed their creative abbreviation of terms part-of-speech (POS), local log-likelihood (LOL) and Rank of likelihood (ROFL)!
For low power chips, what advantages would there be for stacking? My thought is that low power chips probably aren't going for performance (since they are low power), so stacking for performance wouldn't really be buying them anything necessary. Maybe you could just get smaller form-factor low power chips.
Will this work with Google Authenticator or are they making a proprietary app that you have to use?
Where did you get that number?
During the last few years, Apple provided about 3% - 8% of annual revenue of Samsung Group as a whole.

Samsung Group is huge. Their Samsung electronics is huge but so are other groups.

Samsung Shipyard is building 2 floating natural gas plants, each costing One Billion US dollars.
The "taunting and harassing" is a smokescreen, these guys posted video of several interactions, I wouldn't be surprised if more came out.
That is what tracking your billable hours means....

Clocking in and out is, however, common for hourly employees.
shameless plug:

Open-source Heroku-esque PaaS which uses Go, Git, LXC, and HAProxy.

ShipBuilder is a freely available open-source project which aims to make it fast and easy to deploy arbitrary web-applications.

Get total control over all aspects of your staging and production environments.

More info:

http://shipbuilder.io/

https://github.com/sendhub/shipbuilder
If the attacker is at the keyboard of your logged-in, not-screen-locked computer, you have definitely already lost. Regardless of the skill level of the attacker.

If this attacker is your friend, co-worker, spouse, room-mate or the like, your problem is social and not technical.

Those two points really should be obvious to everyone here. (This is a forum for software engineers, right?)

It is safer (and more honest) to provide no security mechanism where none can work, than to provide a fake mechanism and then claim that it can work. Perhaps people are so mentally abused by decades of security snake-oil (e.g. anti-virus products) that they have come to accept snake-oil as the pinnacle of security engineering. I don't know how else to explain what is going on in this thread...
These _emergency_ notifications like alarm clocks don't respect silent or do not disturb. It's also that most people haven't experienced it before which adds to the annoyance of being woken up in the middle of the night by the jarring noise. It's really not surprising that people aren't thrilled about it.
Psh. Castling is a trick play, like the forward pass. Back in the old days, we moved one piece at a time.
'Segmentation Fault' is not a synonym for 'exited successfully'.

Next, you'll tell me that 'Thank you for playing Wing Commander' is not a synonym for 'EMM386 exception 006A at 00B8:3128'.
Isn't this exactly what Duo Security does?
Disable compression altogether? That's craptastic.
Attend a "con" where artists go to sell their work. I picked up some good art in Hyper Japan in London a week ago. A print, but the original is digital and it was signed by the artist (DestinyBlue on Deviant Art). Bonus: getting to meet the artist.
interesting ethical question - one is supposedly responsible for behavior of his automated tool/robot. If that automated tool is able to build and initiate execution of another, more complex (well big "if" of course here) automated tool ... at what level of complexity of separation the original responsibility ends, if any.
I strongly suspect the same systems are used to deliver all alert types, and the phone can just select which type of message from that single system to display. This probably depends on the carrier, but I don't see any good reason to implement them separately.
SEEKING WORK - Mexico / Remote 3+ years of experience in web development.

What I can create and work with:

- Wordpress themes and plugins

- Drupal 7

- Responsive websites

- CSS3 / HTML5 compliance

- Offline web applications

- Javascript frameworks (jQuery, Underscore)

What I'm working with right now:

- Node.js

- Angular.js

Success stories:

I've worked with brands such as Bimbo, Marinela (a Bimbo Bakeries subsidiary), Procter & Gamble, Johnsons Baby and Campbell's.

Email: aurelio at bernalr.com
Too little too late?
I dont get it. Intel has been iterating x86 at insane speed. In the high performance side Intel has finally caught on and eclipse Power.
While Intel x86 has been winning the performance and performance / power in certain wattage scenario, they still dont have something to show for in Low Power segment. Although the next gen Intel Atom should be on par with the best in ARM, pricing would put Intel at disadvantage.

And that means in Low Power segment ARM realm supreme. Not likely to be dethrone in the next coming decade. As they have solid roadmap and pretty much the plan for next few years are all set and done.

So where does it left for Power? Coming from IBM they are very likely to be expensive. IBM has never been known to iterate as fast as Intel. Let alone ARM which now offers all sort of ARM chips for everything except High performance in their portfolio.

I just dont see how this could change anything.
With this new setup the carrier channel is irrelevant. It could even be done in plain text (eg. no SSL). Since the request is being signed using a pre shared public/private key pair it can't be man in the middled or spoofed. At best someone interfering with your network connection (between you and Twitter) could prevent you from logging in if they mess with your network packets. They wouldn't be able to fake the authorization of a login attempt though.
As someone who also (in the arts) got an O-1 I would recommend against admitting you wrote the testimonials you received yourself.

Sorry you had such trouble with yours, the people I used were fantastic and if anyone is looking to get an O-1 that's more media based let me know and I'll refer you to my attorney company, they were flawless.
What to do with your Bitcoin haul
Reflections from a First-Time Manager
Quick tangential question - What's the best way to shop for nature photography prints? Most of these sorts of dedicated art stores seem to exclude nature photography.
Profile based VPN service with SCEP enrollment
Think Different: Designed With Windows
Steam has been known to have a manager-less structure:

http://blogs.valvesoftware.com/abrash/valve-how-i-got-here-w...
You need >500 karma
There's already an unofficial FAQ:

http://www.jacquesmattheij.com/The+Unofficial+HN+FAQ

Submitted and discussed here:

https://news.ycombinator.com/item?id=1755533

as well as in other places. Problem is, it's a "FAQ" and so it's a long list of specific questions that may or may not match the one you have in mind.

It would be nice to have some kind of "soup" of information, and let the user home in on the bit required. I have an idea, but have neither the time to create it, nor the time to explain clearly, even assuming it's well-defined, workable, or even possible.

FAQs need to move on. I can't see a wiki doing the trick either, it still has the information buried somewhere, with no obvious way to discover it.
Sounds like the "recognized industry standard JBIG2 compressor" is just about useless for copy machines. Why even give a user the ability to do this?

The only acceptable fix for this is to disable the ability to use lower compression qualities that have could EVER cause this to happen.
Friv Let's Go Jaywalking - Friv Games
It does happen today - to a point. (The extent this happens depends greatly on your state and government.) And I dislike it when it happens today. What you're advocating is basically taking the instances where the current system fucks up and embracing them, making them not only legitimate, but the focal point of the entire system.

The system as set up is meant to make everyone - both rich and poor - equal before the law; in theory at least. Granted, it's not as perfect as that in practice. But what you're suggesting is basically allowing the rich to pay their way to their own laws, and if they happen to run afoul of some of those - to pay their way out of them. That is not a version of justice I can get behind.