skysight-inc/HackerNews huggingface dataset:
zxcvbn has problems but your example is backwards. "aaaaa" gets (as it should) low entropy because it is a single repeated character. It is more likely to be used than "rqntd". The major limitations are that it is worthless for estimating entropy of passphrase (which is what it's being used for here) and words not in its dictionary (non english).
Yes, and it clearly stated in the demo[1]. The key feature that this approach is trying to accomplish is allowing the user to not have to store anything beyond a password. Keeping track of a keyfile is HARD for a lay-user, so miniLock is trying to do the best it can securing files with only a password.

[1] - https://github.com/kaepora/miniLock/blob/master/src/index.ht...
Link should probably be
http://www.geekwire.com/2014/hey-denver-police-harrass-ridin...
Indentured servitude is a system in which someone who has no present capital writes a contract with someone to exchange future labor for present capital (in an historical context, passage on ships if I recall correctly). If you're issued an H1-Bs you don't have to work at that company. Why on earth would anyone take an H1-B visa if they thought they could get a better job in their home country?

Are you saying that foreigners cannot think for themselves and that a slow, innovation-lacking, bureaucratic government is smarter and knows better than them?
Currently only HP has something that appears to be working, and they are unwilling to be a commodity manufacturer. HP announced The Machine as the only way to get your hands on a computer with memristors (someday, if/when tehy finally ship it).

Basically HP knows they are sitting on something big, and so they want to build whole mainframes based on it, like its 1970 again.
I would be perfectly okay with browsers dropping support for the animated gif. We've had better options for years.
My mistake, zxcvbn uses that formula only for repetitions.
INSPIRATIONAL VIDEO FOR SINGERS “STAY BRAVE”
I don't know. The complaint looks like a procedural maneuver to me, designed to slow down the eviction process.
We don't.

But the odds are good - based on hard evidence - that the absence of warrants and reasonable suspicions makes no difference whatsoever.
Yes, that is <i>another</i> issue with model checkers. Either way, your original comment is still nonsense.
equally imaginary, however
If you are interested in buying First Edition books, now
seems to be a good time? I'm not sure why? Most of those prices you see in Price Guides are too high. Someone
told me the younger generations disinterest in First Ed. Books is generational?(The minimalist generation?) Iv've thought about donating my library(mostly reference) to a non-profit--Guidestar approved; make sure the non-profit isn't a scam(hit free preview--look at taxes).

I don't think I will depart with my first editions though, there's just something special about them?
And for a hilarious satirical romp which treads similar territory, see Black No More by George Schuyler:

http://www.amazon.com/Black-No-More-George-Schuyler/dp/04864...
Well written, but what I really appreciate is succinct.
How does you system handle people who don't necessarily have large online presences do to other commitments. It seems like if you weed people out largely by what you can find on GitHub and Hacker News, you'd have lots of false negatives.
Needing Skilled Workers, a Booming Germany Woos Immigrants
Thanks, Brian! I really tried to keep things short, sweet, and to the point.
>There is no motivation for a connection between artificial and biological computational networks.

Not sure what you mean by "connection", but there is a huge motivation for understanding the biological. The neocortex is the single best implementation of intelligence we know.

You should watch a couple of video talks by Jeff Hawkins which are REALLY convincing. His work on sparse distributed representation is, in my opinion, one of the biggest recent break throughs in artificial intelligence that was directly achieved by researching the neocortex.
I know you're probably not looking for advice with this post, but hiring an accent trainer or even taking some advanced English lessons would probably help your career (and your quality of life) quite a bit. When I see someone writing "speak more worst" and "living here in US from last 7.5 years", I don't think of someone who has been in the US for seven and a half years, I think of someone who may never have visited the US at all. That sounds very unnatural, and it does throw a lot of people off. It makes a lot of people (unfortunately, myself included) uncomfortable to admit that we didn't understand what you said. I don't talk to people with strong accents on a daily basis, so I'm bad at hearing them. People tend to shy away from awkward encounters, and being unable to understand the person you're talking to is about as awkward as it gets.

It's not malice, it's not racism, it's just really uncomfortable.
What is cheaper, building a city or building a pipe?

I find it hard to believe that the local economy has collapsed to the point where they can't afford a pipe to a desalination plant.
Florida jury awards widow $23.6 billion in suit against tobacco company
People know the Cuban Missile Crisis came close to a nuclear war, but many don't know how close. A human off-by-one error there could have started it all. There was a moment on a Soviet submarine where the captain decided to use a nuclear torpedo. He needed two other men to agree to it, and one refused and resisted their attempts to persuade him. If he had been a little weaker willed, or was in a bad mood that day....
Moot decided on webm for 4chan's anigif replacement. If more websites do the same, MSFT and Apple will have their decision made for them.

We need to stop caring about the opinions of companies who aren't interested in helping The Web.
Indeed, it's totally useless (and can even be considered harmful ie. worse than 'small fixes').

What such a tool could do is to scan the diffs, and elabotate automatically an summary in English of the changes made.
How about question number 8?

https://translate.google.com/translate?sl=ru&tl=en&js=y&prev...

Translation from Russian.

Or may be this reddit, with consolidated info about crash?

https://translate.google.com/translate?hl=ru&sl=ru&tl=en&u=h...
Ask HN: Should Amazon get into book publishing business ?
First the war over ebook price with Hachette. And now, the 5 major book publishers not participating in Kindle Unlimited (at least so far). Looking at this, do you think Amazon should get into the book publishing business, much like how Netflix has started producing its own content ?
It's not about race, but see the caste system in India.
Misleading question, since biannual means both!
Are there any applications or libraries that you would say follow these practices really well?

Seeing basic examples was really helpful, but a more expansive project that employs these elements would make for good reading.
Collect youtube video data without headache
I totally agree 100%. I began to read the blog post and noticed that the author was trying to make it sound like a novel. If I wanted to read a book I would. It wasn't interesting; actually pretty distracting.
A preload does not require the header to be set.

did you read evilpie's link?

"Only if a host responds with a valid HSTS header with an appropriately large max-age value (currently greater than or equal to 10886400, which is eighteen weeks) do we include it in our list. ... We limit the list to hosts that send a large max-age under the assumption that these sites will not revert to non-HSTS status."
How does Gophercon decide which presenters to host?
I don't think the author took effort to focus on control logic like motion clipping through objects. It's more of a showcase of how quickly his raytracing algorithm is able to render images. That was the real takeaway from me, having written a raytracer in c++ it is amazing to see this running so quickly, and in the browser too.
The problem is there's an assumption that the government data is right, and disproving their data as a taxpayer would be tough. (Fighting city hall is tough)

In the current voluntary compliance regime, a very small number of returns receive audit treatment of any kind.
It's just the same data in 3 different forms, right? And the second is pretty misleading, comparing percentages as if they were some part of a whole.
Continuing to play devil's advocate with the moral objectors: While these surely _are_ dangers of someone ingesting some substances, which of these dangers is prevented by making them illegal? On the whole, none are prevented. Those already addicted will use regardless of legal status. Those not yet using illegal drugs are doing fine putting others in harms way by casual use of legal substances like alcohol. The dangers you mention are in fact dangers, but the risk factor to others doesn't change much with legalization.

I do agree there are many who will object on these moral grounds though.
Except that since there's no salt or other measures involved, there isn't even a trivial protection against rainbow tables letting me create one table and crack all the passwords. It's using ECC as a fun buzzword but tossing all the actual realworld benefits of key-pair crypto out the window by having a single user-provided string map to a single keypair.
Technology versus government: The rise of data and the death of politics
You need better in app instructions. A user should not have to watch a video in order to figure out how to complete or save a scan.
In Remote Corners of India, Immunity for Soldiers Who Kill and Rape Civilians
This is NOT maths!

"The job was simple: As accurately and quickly as possible, add up sets of two-digit numbers in a 4-minute math sprint."
But since the government accepts electronic payment cards ...
> 4. set the binary to have 4755 permissions with owner as root:root.

If you can do this, you already have root access. If you have root access, then you don't need dirty tricks to get root access.

Additionally, in the three minutes that I spent searching, I found a bunch of evidence that indicated that TrueCrypt volumes mounted through FUSE are mounted with the nosuid option. (Ferinstance, search for 'nosuid' here: http://www.reddit.com/r/archlinux/comments/1fcwvr/truecrypt_... )
Alright, what do you propose? As I said, dealing with keyfiles is HARD for the lay-user.
Right, well I mean this obviously helps whatever institution (in this case Janelia Farm) get funding for research. I watched the lecture again and I'm very positive that this was more of a "show than tell" talk. As far as I can figure, there honestly wasn't anything that interesting in terms of neuroscience research.

Anyways, I wasn't so much skeptical of Jeremy as much as the talk and its intentions. I did a little bit of research on his work but nothing immediately stood out. What's some of the research he's done that you would personally point me to and crucially why? I'll do my part and investigate it.
Considering the general lack of a near by water source probably not. Now high tension powerlines could be an option as there out doors and pump out a lot of energy which can be collected on both the small and large scales.

Don't forget it's been a billion years and plant's still don't use green light. For plankton it was reasonable as green does not penetrate as far but on land it's a huge waste.
A confused police officer made a bad call. Do we have to up vote every single article about Uber?
How is this different than creating a disk with appropriate properties and handing it to a gullible system operator to mount the physical device?
I would also add that callback signatures should always follow:

function (err, result) {
//...
}
Venting frustration against payment processors – Show us your meanest face
Were they only using two RabbitMQ brokers? I have a habit of running one per machine, which allows every app to simply connect to localhost; but on virtualized clusters, RabbitMQ gets a network partition almost every other day, and having just two would obviously cut down on the number of partitions.
Similarly, this article made me homesick for London.

I suppose one angle on smartness is that it provides a simplistic lens on the tangle. If rather than observing the intersection of life, industry and history around us, we tap a single-purpose button on our phones and stare until like magic, the thing we want appears -- if the layers on a city become intangible -- then we lose some of the glorious chaos that is urban life.
isn't it usually just function(e){ and then e might have some kind of indicator that it's an error
"Helping The Web" in this case would be choosing the video format with the broadest support base... which in this case is H264. The only holdouts are Opera and a couple variants of Firefox. As a bonus, you'd get hardware acceleration in almost all mobile devices and a good chunk of the desktop market.
> And what to do with the executive? And what do you with the legislative? Only the supreme court can be replaced by politicians.

Read up. :/ I already said that.

> Which might start with independent media and education. But US people are already even more indoctrinated than in the 30ies with Goebbels.

That's ridiculous.
An improved Macbook Pro laptop case
Usually, when dealing with Javascript, you'll see function (e) { as the signature for DOM function callbacks, where e refers to the event object.
That's one of the easiest things there is to believe. You need to work on your believing.
The author says that as a rule of thumb, he uses callbacks for every function, synchronous or not. wat.

When you design an asynchronous function, you're telling your caller that he can go and do other stuff (e.g. process other requests) while you're fetching his result in the background. Async functions should never block. If making everything async was a good idea, then underscore would be async.

The author also mentions that it is node convention to use callbacks. Sure, that's true. But he's calling his callbacks the wrong way. Node convention is `callback(error, result)`, not `callback(result)`.

Oh and promises ftw.

Articles like this hurt JavaScript's credibility, and certainly doesn't help new JS/node devs.
Good thing he didn't admit he was wrong. That would have shifted the entire balance of power in the nation, and anarchy would have ensued.

Edit: gonna leave my initial snark for context, but this isn't about Uber to me. It's further information about how completely out of bounds the power structure is in the US, and how accountability for police action is continuously declining.

"Uber" gives the article some sex appeal, admittedly, but I prefer to have articles about abuses of power up-voted. The more you know, and whatnot.

Apologies for the snark, but I'd rather read this article than not. You give the officer an out - he was "confused" and whatnot - but when you hold power over the general population, "bad calls" aren't as easily forgivable, because they cause real world harm - and every time they aren't held to account, police feel a bit more invincible.
Why does the hn title say ray tracing. Its path tracing which is different. Is this another one of those moderators editing things?
Thanks for the link. That's a fascinating read. Being a Muslim man, I've been stopped and questioned by CBP numerous times when entering the US. It's interesting how they they always seem to ask the same types of questions, in a seemingly friendly manner, but always glancing at the screen in front of them and carefully cross checking everything being said. Would be interesting to get a copy of my own file and see all the notes they've written about the minutiae of my life gleaned during these inquisitions.
What about making the user choose two passphrases, which are concatenated together by the tool? Cracking a single passphrase may be easy, but cracking two concatenated passphrases is significantly harder.

E.g. password 1: "the quick brown fox jumps over the lazy dog"

Password 2: "jack be nimble jack be sick"

Final result, used to derive a keyfile: "the quick brown fox jumps over the lazy dogjack be nimble jack be sick"

Notice how "quick" was switched with "sick" in the last word. Now there's no pattern that can be easily cracked. If we force a user to explicitly do something like that, then this can still work.

That example was chosen intentionally to be weak. It shows that even with two relatively weak passphrases, the result is still somewhat strong. If we add extra requirements on top of that, such as forcing the user to use numbers and capitalizations, then the result should be sufficiently unique.
This is an interesting question. I assume they're having to make some statistical estimations for sure.
Dell Begins Accepting Bitcoin on Its Website
What makes dealing with key pairs hard for the lay user?

If the issue is "they have to transport them to use the crypto on systems other than their own": We should not be teaching lay-users (or non-lay-users) to enter passphrases or use private keys on untrusted systems.

For using multiple trusted systems, having the client software support multiple keypairs (like OpenSSH) or providing an easy way read the key off removable media (like an encrypted thumb drive) are great.
I've often thought that cities represent a good metaphor for software development: large systems, different designers through time, constant maintenence, adaptation to odd quirks.
Stereotyping is bad and can be exploited. Don't stereotype people it can be used against you is what I learned.
Similarly, `function(err, result)` is nice because HTTP handlers often use `function(req, res)`, where the res is a response object. Fumbling over this kind of thing while nesting async calls in HTTP handlers is a minor annoyance.
thats why i said the restriction should be anyone who pays tuition. i was just using the abortion activists as an example.
No, because then the person generating their table just takes that into account. It's slighly harder, but not noticeably so compared to how secure it needs to be.
DirectWrite isn't using ClearType, so no effect.
Using callbacks appropriately is the biggest point, I think.

On a related side note, I've started using the Chrome Web Inspector as my only text editor for front end development. It's great because you can map it to your project folder, make edits directly and harness the power of breakpoints, along with the network, console and performance tabs, without constantly switching windows. Breakpoints, in particular, make it much easier to work with callbacks in JS. (I do miss the nice syntax highlighting of Sublime, but Chrome's dev tools provides more powerful features for JS development IMO.)
Quite. The Blue Brain project did a similar thing by mapping all the neurons in the neocortical column of a cat (or rat?) and visualizing the neural activity and it hasn't yielded anything ground breaking.

Here's Henry Markram's Ted Talk: https://www.youtube.com/watch?v=LS3wMC2BpxU. But honestly, its really just something to impress people who don't have any idea of what kind of implications this would have.

But I do think that obviously understanding neural activity is important but only if its going to help yield understandings of the basic structural units of the neocortex. Trying to understanding the neural activity of millions upon billions is definitely not going to go anywhere.
Reads the instructions again

At step 4,you create the volume on the computer you have root access(a home computer for example),copy the program and set up necessary permission on the program

At step 5,you take the "hot" volume to another computer where you do not have root access to(like a friend's computer).On this friend computer,you open the "hot" volume and then run the suid-root program to gain root shell or run any other root command your prefer.

In a nutshell,if you are on linux and you have TrueCrypt installed,give me your computer to open my TrueCrypt volume and i can get root shell in seconds.No kidding.

The link i provided gave source code to test the exploit,if you cant or prefer not to,the check below link that speaks of the same exploit

http://vinicius777.github.io/blog/2014/07/14/truecrypt-privi...
It does not. The Allow pairing with non-Configurator hosts requires that the device be supervised.
Excellent! One suggestion. The article mentions "inadmissible heuristic" but does not talk about what that means.

Per https://en.wikipedia.org/wiki/Admissible_heuristic, "In computer science, specifically in algorithms related to pathfinding, a heuristic function is said to be admissible if it never overestimates the cost of reaching the goal, i.e. the cost it estimates to reach the goal is not higher than the lowest possible cost from the current point in the path.[1] An admissible heuristic is also known as an optimistic heuristic."
Can any lawyers comment on the likelihood of this amount holding up in an appeal?
As much as I cringe a little when I use the word, Uber is disruptive to an industry, and the spirit of what we're all doing here is to find ways of disrupting industries. This reminds us of that. Plus, it was an interesting, well written story.
It appears that this HN post links to itself instead of the article (as of 11:12pm ET). What's going on here?

Perhaps a server bug, or a mod mistake..?
Someone born in 1960 started smoking in 1973, died in 1996, and his widow filed suit in 2008. No other discussion on the particulars of the case. Given the patent absurdity that this article presents, it really just ends up seeing more a hatchet job against an easy target, "big tobacco".

And how could anyone be damaged to the tune of billions for anything short of destroying entire industries?
How Smart Lending Dumbed Down
I really appreciate the spirit of this, but this was super-light and I was hoping to see a few more fairly common idioms. I also take issue with a few points, addressed below. His note about logic not going in app.js is one that I wish more Node developers I worked with would pay attention to: the first Node project I was thrown on at my current shop, app.js was about 2k LOC (things have gotten much better since then).

Some I would add:

- Prefer === over ==

- Prefer pure functions whenever possible

- Use promises, not callbacks. Wrap callbacks with promises when necessary. Do this once, and put that in a module.

- *Learn to use Lodash.* I've seen so many wheels reinvented you'd think I worked at Firestone.

- *Learn the rest of the ecosystem.* See above.

- Logic shouldn't go in route handlers. Routes should only orchestrate.

- Learn to love the Array functions. ForEach, Map, Reduce, Filter: use them.

I also have some beef with the article's content.

> [...] as a rule on thumb, I always use callbacks for any function, regardless of what it does.

Please don't. Callbacks are a (somewhat - see below) necessary evil, not an idiomatic good. Only use this if what you're doing is actually asynchronous - talking to the network, reading from the disk, making DB calls, etc. Maybe for really computationally expensive stuff (see bcrypt), but in day-to-day web dev you just won't run into that.

> If I know I'm going to be nesting callbacks more than two levels, I'll switch over to a package like async or write my own function quene method to help me out.

No. Do not do that. If you know you're going to be nesting callbacks more than 2 levels deep, just use the async package. Better yet, use promises from the beginning and don't worry about it.

> I know I've already made some people angry, and I'm okay with that.

You shouldn't be. If you've made anyone angry, it's because you're putting bad advice out there. Worse, it's mixed in with some really good advice, making it all the more deceptive.

Once again, I really appreciate the spirit in which this article was written. I just wish it wasn't mixing utter nonsense into otherwise sound advice.