skysight-inc/HackerNews huggingface dataset:
I got a remote gig so I could move back here after ~15 years on the west coast. You probably wouldn't find a suitable tech job here, FWIW.
I think, none of the possible auth schemes without hardware security modules or multi-factor auth are prone to zero-day browser vulnerabilities. To compromise the PKI to actually reveal the key material, one must have pretty severe vulnerability - which is less likely to happen, if compared to typical cross-site cookie-stealing hacks.

Uh, and many desktop PCs have TPM chip available already - if those aren't banned by your country's import rules (unfortunately, my country does so). Those could be well abused by evil corporations in treacherous computing schemes, but they also have good uses. Probably not safe against TLAs, but since those chips hold the keys and do the crypto by themselves, they're very unlikely to reveal keys even in case of browser exploits. Malicious sign requests can happen, but that's about it - to me it seems to be much better than with every other approach to auth.

So, even if you don't have a fancy USB-pluggable HSM stick it's well possible you still already have fairly secure way to store key material.
Third party cookie blocking on all modern browsers is a joke. I turn third party cookies off as a start, but sites can play all kinds of games with cookies to create "first party" relationships you don't know about, and that's not even including things like flash cookies or browser fingerprinting.

As a start, consider that if you turn off third party cookies, logging into gmail also logs you into youtube.com. Yes, both are owned by the same company, but they are clearly different domains and so youtube should be a third party in your transactions with gmail.
UnixyTalk.com, or UnixYtalk.com for hackers
>An item where you could dump electricity into it once, cut power, and have it resist gravity -- forever, and for free! -- is absolute horse shit.

Um, you are completely wrong. There is a difference between force and energy. It is certainly possible to expend a small amount of energy to create a force which lasts in perpetuity. Energy = Force x Distance, and if there is no displacement in distance, then no energy is spent by the exertion of a force.

Not to say that making hoverboards and flying cars is an easy engineering proposition, but that is due to the parameters of the problem, not due to any intrinsic issue with the physics of providing a force against gravity. If people weighed a nanogram, or the Earth's magnetic field were 1 Tesla, or the electrostatic potential between the stratosphere and the Earth was 100,000 times stronger... any one of these and we'd have had hoverboards a long time ago. But that's just numbers. There is no problem with spending a finite amount of energy to create a perpetual force.
Wow, well thank you HN for the support. Really incredible to be on the front page. You guys blew up AWS! Cleaned up the DB issues! Let's party!
Making a full-time salary from 1 book
> Will people still die if I provide 10k$ how about 20k$?

People will still die whatever you do (and whether you do it by BI or whether you do it by central purchasing of common goodie baskets) -- probably more in the latter case than the former, for a given expenditure level, because the overhead costs are higher and people's needs differ.

> What if they're really bad at decision making and gamble it away or get robbed?

People can -- and do -- gamble goods when they don't have cash, and get robbed of goods as well; those aren't problems unique to cash, nor are they problems that central purchasing of common baskets of goods makes any easier to address than distributing cash does.
"How A Huge Market Opportunity Let Designers Create a Billion Dollar Business"
Any superconductor levitating on a magnet does exactly this. Afaik there is no law in physics we know of which forbids this.

To put it even further: every stone lying on the ground does exactly this. It doesn't change its position relative to the gavitational field. And without expending any energy for that (or increasing the systems entropy ot hold its position). And this comes ultimately down to electromagnetic forces (between valence electrons) holding it at its position. So, no horse shit here.
I'm one of the authors of the paper. One of our findings was that third-party cookie blocking is only marginally effective. See the tables under cookie syncing in our summary [1] or in our full paper [2]. Trackers bypass cookie blocking in a variety of creative ways. We're currently investigating the bypassing mechanisms in more detail.

On the other hand, add-ons like Ghostery work much better.

[1] https://securehomes.esat.kuleuven.be/~gacar/persistent/index...

[2] https://securehomes.esat.kuleuven.be/~gacar/persistent/the_w...
Figure it out yourself. You should know your own value in a profit center; it gives you a lot of ability to either negotiate raises or describe your value to others if seeking employment elsewhere. Or alternatively, it gives you data to describe your successes when trying to get someone to fund your next venture.
In my experience, most of the modules simply rely on players knowing and following the rules, just as they would if they had set up the board themselves on a kitchen table. Some of the more fleshed-out modules do have these sorts of internal state checking and logic pathways but they're not required.
Android 2.x doesn't support SNI either, it's not just IE. (20% of Android users: https://developer.android.com/about/dashboards/index.html)

But I agree, it has dwindled rapidly. :-)
Here is a link:

http://www.haskell.org/haskellwiki/Correctness_of_short_cut_...
Erm…

http://dragonquest.wikia.com/wiki/Metal_dragon
http://dragonquest.wikia.com/wiki/Machine_Family

And DQ IX toads have cannons and mortars strapped to their backs
There's always a healthy middle ground: form a community with healthy cultural norms in matters of politeness, courtesy, intellectual rigor - all elements of form - while encouraging the greatest possible diversity of substance. Make it clear to people that be adhering to the norms of form, they'll be a welcomed member of the community, without being censured for the actual substance of their arguments, but merely argued against politely by those who disagree. (Sure, there are people who take any counter-argument as a personal insult, but that's just one of the things we need strong cultural norms against.)

I suppose it's a challenge to maintain this sort of pattern as a community scales, which is why sites like HN, Reddit, StackExchange, etc. all try to incorporate incentives and constraints into the mechanics of discussion to attempt to reinforce certain styles of participation, with varying success. In this situation, a simple mechanic to prevent people from doing what OP is complaining about would be to prevent comments from being deleted once they've been replied to.

It bugs me when I see long streams of deleted comments on Reddit, too - it'd be an interesting experiment to treat posts and comments in a discussion forum like wiki pages - freely editable at any time by the poster, but with the full edit history always available to see.
That struck me as odd. I questioned the entire poster's results based on that statement.
You can write to the file system, it's just not persistent across dyno restarts or shared across running dynos. Writing out for in-request work is fine.
I'm going to Traverse City tomorrow on vacation. I did a double take when I saw the map.
Perhaps I lacked the verbosity in my original comment, but this was what I meant to imply: ventilation is part of the design. Unintentional exchange is to be avoided.
You are of course right that less is not better. Indeed Sunfish often takes a more lengthy approach than say Micro-Max, because Sunfish is also meant to teach chess programming. Examples include:

- Using an actual text representation of the board, rather than a binary.
- Having separate functions for move generation, search and evaluation.
- Using a python hashmap rather than a simple zobrist hash.
- Using a direct piece square table rather than some compressed/generated nonsense.

I do however also think, that trying to shorten the move generation of some programs, which can be hundreds or thousands of lines, to something like this, is a good exercise in finding patterns, and has a certain beauty ;)
Physics: It just works (TM)
It's a lovely place, really. On a map or in person. Enjoy your vacation.
VASSAL rules. Board game designers like myself even use it for playtesting. I can't wait for v4.
> the fault of those who use poor passwords or reuse them across dozens of applications

That's the reality, and that's the sole argument for why passwords suck. We can't blame the users on this one, we just have to give them something better.
The OP (Wired article) says that the vacuum chamber was indeed pumped down:

While the original abstract says that tests were run "within a stainless steel vacuum chamber with the door closed but at ambient atmospheric pressure", the full report describes tests in which turbo vacuum pumps were used to evacuate the test chamber to a pressure of five millionths of a Torr, or about a hundred-millionth of normal atmospheric pressure.
JGraph.com wants $12,500 (!) for a license to their JS library, which suggests there aren't comparable open-source libs. http://diagramo.com seems to have some basic features.
I think for general-purpose workloads, it's not relevant. However, some of the IB-specific capabilities like RDMA are extremely interesting for clustering use cases. You can dramatically reduce the overhead of moving data around between nodes by bypassing the kernel entirely.
Show HN: A startup events, contests and workshops Timeline
AWS SDK for Python (Boto) Now Supports Python 3
The State of the Componentised Web
I think this is a good option for those folks that have an unrelated 4-year degree and are looking for a change of scenery in their professional lives.
Friendly reminder - there's a free, pro-privacy and open-source solution available:

http://piwik.org/
OpenWPM: A web-automation Framework
It uses same algorightms 3d engines use to compute lightning and shadows

http://youtu.be/IyUgHPs86XM

should be easy to implement in hardware in GPU.

BTW I seem to remember vaguely Carmack wanted to implement fully software 3D sound engine for Doom3, but some patent dispute forced ID to support Creative EAX.
Google Fit SDK preview available
Parallax’s Propeller 1 Silicon Chip Goes Open Source
I wonder if I could put together a hacked version of Supremacy (Risk-like with a nuclear and economical twist) using it. That would totally make the child inside of me REALLY happy. Checking it out now!

EDIT: http://en.wikipedia.org/wiki/Supremacy_(board_game)
Love some Firefox OS exposure.
I'm a fan, really want to see the idea/project to succeed.

If you think about purchasing a device, here's my take.

- the Flame feels really solid and looks quite nice.

- the performance is nice/comparable to other platforms

- current version (running from git here) of the OS looks nice and modern

- it is trivial to build and install it (given a supported device ofc)

Ultimately it's not ready yet for daily usage for me, personally, but I suggest you check it out, give it a spin. I'm impressed how fast it improved already and hope to use the Flame as my default phone in the next couple month.
The new sh Package – A Python subprocess wrapper
Cuba is softening. Raul has made huge inroads, most recently allowing property ownership, which is huge step forward. Once Fidel dies I think things will start to change. Once Raul dies even more so.

The US could rapidly turn Cuban relations around if they wanted something like say 'A Snowden'.

He is probably safer in Russia than anywhere else, until he pisses them off. The smart money says he isn't about to do that of his own volution.
couldn't you say the same thing about hipchat, hall, etc?
The biggest problem of the Russian nation are its intellectually lazy intellectuals. Lazy enough to uncritically parrot foreign propaganda.
There are an astounding number of modules for VASSAL. The article calls it "a new engine" or whatever but it's been around forever.

http://www.vassalengine.org/wiki/Module:Supremacy
I was half expecting the rant to be about TAPI. From memory, I remember at least one instance where it returns a void* pointer, with a few integers telling the offset of the information you need to get.

But at least the function calls made sense. This is much worse.
Elderly people, for example.

Average pension in Russia is about 7000 - 11 000 RUR (~$220 - $300).
> It seems most JRPGs are set in a world that combines science fiction (advanced gadgets) and fantasy (magic, swords) whereas the western world keeps the two entirely separate.

One of the two most directly influential series for early JRPGs is Ultima, which for its first three incarnations (especially the first two) liberally combined science fiction with fantasy.

In America, the early '80s was a time where mixing fantasy and science fiction was popular. You had products like He-Man and the Masters of the Universe and Thundarr the Barbarian, for example. Perhaps these influenced Richard Garriott (creator of Ultima).
I'll start watching this too. I have also been watching the http://roll20.net/ guys for a while now too. It's good to see more and more things like this coming about.
Use This Beautiful Technique to Manage Your Database
> However that is not desirable in this case since it makes it too easy to live on government money with little incentives to take whatever job you can.

The incentive to take whatever job you can is that even if a job pays very little, that's on top of the basic income.

> With government money you would have to check that that person wasn't working under the table

No, the whole point of basic income (vs. traditional means-tested welfare) is that you don't have to do that, and that its counterproductive to do it anyway. All you have to check is "are you a citizen [1]". If you are, you get the benefit.

Working under the table is a tax problem, but its a problem that you already have to address for the tax system, not separately for the benefit system since its not relevant to benefit calculations in a BI system.

> When we truely have human level AI we can make the Culture and nobody has to work.

With BI at the level that can be maintained without utopian level productivity of that type, people will both need to work and be incentivized to do so; there's no need for an explicit stick, relative deprivation is itself a motivator (sure, not everyone will work, and progressively fewer will work as productivity increases through technology and sustainable BI levels increase. But not everyone needs to work, and BI lets market forces drive that.)

[1] or "citizen or legal immigrant" or whatever the status-based qualification is. Income, etc., isn't part of it.
Or replace writing to the file system with storing as a json object on one of many online (eg. cloud) providers.
Wow, congratulations! Super exciting given that a PCIe card for doing memory attacks for $30, only mitigated by PrivateCore right now, is being launched at Defcon.

http://www.nsaplayset.org/slotscreamer (Joe Fitz)
that app actually sounds very cool indeed! You don't happen to have a suggestion for an android version?

Lately, I too have been trying to track my daily habits. Pen and paper just doesn't cut it.
It's funny that just today I was visiting Cloudflare Our Team page[1] and I noticed that "our" dear jgrahamc is the only one listed as "Programmer" compared to dozens of XYZ Engineer :)

[1] https://www.cloudflare.com/people
Filter out your unwatched GitHub repos
I understand that sort of use case, but this article is asking about desktop computers. It almost seems like the author only sees it used in high performance situations so clearly it is better for all situations.
I took it to mean he launched several copies of the process, each copy pinned to one (and only one) core.
I had very different experiences, so tend to strongly disagree with the overall premise but not the average VC premise. There's a power law to VC's, as there is to much out here - the really great VC's are worth their weight and then some; the average to mediocre ones can be downright harmful.
"The concept of a password" has two big problems:

1) They're symmetric. I need to protect the thing I need to provide. If we can contrive to make sure that the thing I need to provide it to can be safely trusted, then this problem only manifests itself in the face of password reuse, but assumptions break sometimes.

2) Enough entropy to be uncrackable is starting to be enough entropy to be difficult to remember.

Password safes and similar address both of these - at the expense of increased exposure to slightly different threats but for a net win. They're a slight departure from "the concept of a password", though, I'd say.
VASSAL is basically a virtual board - it wasn't really designed to do any form of rules enforcement, but rather handle the physical aspects of a board game. Given that translating game rules into software is often a daunting task, that's probably for the best!
A website built in Golang
WOn't be able to make it. 2015, perhaps?
SUMMARY: "we were shocked, SHOCKED, to discover that an ad with a nice picture performs better than an ad with a bad picture."
congrats to the team! good work Radu :-)
JetBrains launches Upsource for Git/Hg/SVN/P4 repository browsing, code review
I like the spirit of this thread. Kudos.

What trends are you seeing that you think should be more widely adopted?

Recruiters that behave more like community-managers / outreach-coordinators. Roles whose purpose is to engage with (and build relationships with) the developer-community as a whole, not just pluck talent ad-hoc.

What practices could promote a better dialogue between recruiters and candidates?

I find it easier to engage with a recruiter (instead of circumventing them) when they personally offer me something of value. For example: The recruiter who says "if you apply online you'll just get a phone interview, but if you go through me I'll get you a 1-on-1 lunch with the CTO". When they start off with a clear value-proposition like that, then the headaches and bureaucracy of dealing with them are much easier to stomach.

How can we solve for some of these problems using the technology we have at hand?

I wish the application process could be a bit more standardized for the early stages (like the college / grad-school admissions process). I think it'd be an interesting thought-experiment to envision a standard-format for application packages. Imagine a package.json ~esque file that pulled in your github repos, recommendations, personal statements, etc. I wonder what else would be necessary.

It seems like the beginning stages of working with a recruiter are always the same ("where'd you go to school?", "show me some stuff you've done", "have you heard of Big O notation?", etc etc). I wish we could just put together one standard packet, throw it up somewhere online, and let the recruiters line up interviews for us. If that would allow the recruiters to contact us with an "I've got you an interview" type of message instead of a "hey let's talk" message, I'd be all for it.
Holy bananas! Thank you!
That's only for 3 domains, not 100. 3 domains at $30/year is $10/year/domain which is no different than buying individual certs.

The multidomain cert supports up to 100 domains, but the cost is $29.88/year for the first 3 included, plus an additional $12.88/year for each additional domain.

Under this price structure, you could have 100 domains covered with one certificate, but it would cost you $1,279.24 per year for that single certificate.
> As a start, consider that if you turn off third party cookies, logging into gmail also logs you into youtube.com. Yes, both are owned by the same company, but they are clearly different domains and so youtube should be a third party in your transactions with gmail.

That's because you don't sign into youtube, you go through Google's single sign on stuff which is a different domain.
Ask HN: Any skype search product managers here?
I am sorry to say but skype user search is horrible. Really horrible. I am searching for a person with his id then why you have to show me 10 results? Just show me one record which is a match with that id. How hard is this? Even an intern would build a much better search module than you. (S)He would know that when someone is searching by id I have to show just one matching record.

I am not sure what was the thought process behind current functionality.
I cannot speak to their specific implementation.... but typically when one looks at classic tomography (eg. CT and MRI), there are tight tolerances or control over the relative pose of the transmitter and receiver. This is required for the deterministic radon transform equations.

For a robot system (especially a dual robot system), you could imagine a lot of pose uncertainty (especially angular). Eg. if using laser rangefinders and AMCL localization, you'd typically find ~10cm and ~5-deg of non-gaussian pose uncertainty indoors. I could imagine this causing complications. I'd be very curious to see some form of probabilistic extensions to tomography (not that they don't exist; I've just not researched the topic).
Python doesn't have a STW garbage collector, it uses deterministic reference counting. So while slower than go you won't have random pauses in your server processes due to memory management.
Why do I have to provide a contact to start with? I'm not a lawyer, give me a starter contract to work with and help me tweak it from there.
Business intelligence firm in talks with Argentina to find dirt on vulture funds