skysight-inc/HackerNews huggingface dataset:
I can use your finger like I can use your username. I can't use your password without you telling it to me. Your finger just identifies you. Your name also identifies you. Your password authenticates you to someone (as it is a shared secret, or rather shared evidence of a secret.) Just like knowing what what you did at Bob's party in 1983 can authenticate you to Fred (who watched) if you mention it in a letter.
I appreciate the response, but it'd be nicer to get a quick summary than a link to a pair of nearly two-hour videos.
The "enter a generated code to confirm" step is to confirm at the server end that you've got an identical seed - they (presumably) use that before committing that seed to your user account (to ensure you aren't about to lock yourself out). It's mot needed at the client end.

I've got at least gmail, aws(/amazon), Github, Dropbox, Zoho, and several TOTP TFA protected WordPress sites on 3 different devices using this method. It definitely works. I see additional devices start to generate the same codes when I add the same seed (so long as their clocks are reasonable synced...)

This is using the Google Authenticatior app on iOS and Android, I _think_ any RFC6238 compliant TOTP app that lets you type in a string to key it should "just work".
StatusPage.io (YC S13) is hiring a Sales Engineer in SF
About StatusPage.io

We’re a close knit team of 5 working everyday to make the web a more transparent place between software providers and their customers. We’re 2 years old, Y Combinator backed, and have many industry leaders as customers including New Relic, Atlassian, Citrix, Kickstarter and Vimeo. We’re growing at a rate where we need a motivated, intelligent, sales engineer to join the team and help our inbound trial signups succeed with our product.

About the position: Sales Engineer

Our first sales engineer will play a significant role in our company’s growth as we expand into larger accounts and new markets. We’re specifically looking for a self-starter who has a basic understanding of how code + web technologies fit together (servers, RESTful APIs, HTTP requests, etc) and wants to be on the frontlines enabling our prospective customers to successfully implement StatusPage within their organization. Coding experience is a definite plus as our prospects are typically Director of Operations or engineers themselves. We’re primarily a rails shop with some javascript sprinkled in on the frontend.

Main responsibilities for the Sales Engineer role include:

- Responding to inbound support requests for new trials and being the first line of support before escalating tickets to the engineering team

- Writing concise, clear emails to new trials in order to schedule discovery calls or figure out product obstacles in the activation process

- Conducting a variety of calls including discovery calls, product demos, and implementation calls

- Maintaining, organizing, and reporting on new trials within Salesforce

- Helping to close Business and Enterprise deals (statuspage.io/pricing)

Potential Fits:

- You’re a sales guy/gal and also have taken the time to understand the tech side of software

- You’re an engineer with work experience, but looking to gain needed sales and customer development skills before starting your own company

- You’re a sales engineer looking to join a startup and have a significant impact on its growth

- You’re an outgoing CS college grad

- You’re a code bootcamp grad (Flatiron School, gSchool, Dev Bootcamp, etc)

The one ‘must have’ for this role is a basic understanding of technology, but above all, we care that you’re a great culture fit, extremely motivated to learn new things, and have top-notch communication skills. Base compensation will be dependent on experience, with opportunities for commission available in the future. All full-time employees are eligible for health care benefits and our company-wide bonus program.

To apply, email hi@statuspage.io with any relevant links, resume, and something interesting that you’ve taken the time to learn about over the past year.
Japan could just be an outlier.
Your idea sounds somewhat similar to what keybase.io does.
This has already been posted several times:

https://hn.algolia.io/#!/story/forever/prefix/0/How%20Comple...
Does Siri rely on Apple Maps?
Pianist asks Washington Post to remove review under 'right to be forgotten'
Actually, a rather prominent study a while back found that Singapore is the least happy wealthy country on the planet, losing out to eg. Iraq, Haiti, Afghanistan, and Syria.

http://edition.cnn.com/2012/12/21/world/asia/singapore-least...

Singapore is also multiethnic, but it's quite resolutely not a melting pot. The heavy hand of the government is keeping a lid on a lot of tensions, not all of them obvious to the casual observer (Singapore-born Chinese vs mainland Chinese, etc).

Last and not least, Singapore's wealth distribution is extremely unequal. It scores well on raw GDP per capita etc, but the poorer parts of society compete directly with foreign labor working in slave-like conditions(+), and thus work extremely hard for paltry salaries.

(+) Quite literally, especially in the case of maids: it's not uncommon for them to be on duty 24/7/365, not allowed means of communication and physically locked inside the home when their masters are away.
Oh, right. Best of luck.
I think there are two concepts being confused here - this is not the same as `var` vs. `const`/`let`.

Immutable.js implements persistent data structures, which are entirely runtime concepts.

---

Deep copying isn't very common because it's usually a pretty obvious flag that performance might suffer, however it's the only other way to implement this same concept and that pattern is definitely found in applications which desire persistent data. You might here this referred to as "defensive copying".
Not exactly. There's also Singapore, Saudi Arabia, Vietnam, Malaysia, China (all countries with extremely strict drug laws and far lower drug related death rates than Portugal)
Its scary to consider, but you're basically right. This also applies to automobile/truck/aircraft manufacturing. There's always something more one can do increase safety, but it often isn't financially viable. Designing a car in which no one ever died, wouldn't be feasible, or even functional. In the 20th century, cars incrementally increased speed, which isn't so different from space-planes flying higher and higher.
Trying to predict the strains makes perfect sense, the flu shot is only ever effective against the specific spread of strains that it's created against. I presume there's some fall off of effectiveness or large increase in cost associated with creating a flu shot that targets more strains.
The progress the country has made in terms of education, crime, lifestyle, and income over the last 30 years has been incredible.

The Singaporean government ships!

I mean would you rather a) work at a company with very relaxed policy, beers at lunch, a really friendly boss, low pay, and where no work ever ends up being completed and you don't learn much or b) work at a company with a few policies you don't agree with (like drug testing) and a boss who is a bit of a jerk but you do important work, you learn a lot, you earn a lot, and your boss tries to help your career?
PSA: bankofthewest.com only supports SSLv3
No TLS support at all. If you have an account with them...well, don't use online banking.
"or to be vulnerable to criticism"

Let's not do this insanely important thing that may define the next hundred years of access to information because someone might say mean things about us??
I also have a similar setup in my office, using Fing (http://www.overlooksoft.com/fing) to scan (on a Raspberry Pi).
I was really hoping there was more hear about the technology, specifically what they are doing differently and the backgrounds of the engineers making this a reality. The process of raising money and getting buy-in is far less interesting than demos showing how much electricity is going into the transmitter and how much is being received by the receivers, especially under the conditions he says they can deal with (movement, etc). This is one of those ideas that fails or succeeds on the technology. As background, talent, gumption and charisma of the non-technical people is irrelevant if the technology isn't there.

It's a very strong sell from a VC without evidence. If they can do some of the things claimed, wouldn't you let the evidence speak for itself?
Houston's minimum parking laws, setback and construction envelope laws, and other suburban style mandates make it impossible to build in the traditional city style of Europe or Japan (or the USA). There's somewhat more flexibility than some other US cities but something close to modern suburbanism is mandated in most cases.
I posted a comment on the original article with a fix for this, or just follow the directions in this gist:

https://gist.github.com/anonymous/969e460958ba3268a226
I wholeheartedly agree. Methods associated with mutation should raise exceptions. If errors aren't eagerly generated, assumptions about behaviour might be made. Not to mention this will make testing harder.

Readability is impacted as well. Building a mutable copy from an immutable should be explicit. These calls should have a very prominent call signature that is easily read, not skimmed over.

Very cool library, but I can sense lots of confusion and debugging resulting from accidental misuse.

Guava's immutables are pretty solid and serve as a great reference.
Yeah that is a problem, have been using this in my office - you can your MAC using ifconfig and the new MAC gets registered.
3 combined with 6 sounds like a recipe for disaster if someone manages to compromise your CloudDrive account (probably not by breaking the password, but by social engineering or a method similar to the one in this article). If they get that, they have your encrypted password database, and if that has a weak password... you're totally SOL. The password database's password is one you want to be /very/ strong.
Yes, and when your economy is a smoking crater because half the population is illiterate, you can at least take some comfort in the fact that you're not getting screwed by a public education system.
What do most use for IMAP backup
I wrote this, which was apparently too long: http://dl.dropbox.com/u/340087/drops/10.31.14/email-31-205457.md

Can I get some suggestions on how people are doing backups of their email? I am using IMAP, google specifically, for domains, not just a plain email address, but there are those to consider as well.

I am looking for some sort of IMAP rsync type system, but since google has a strange way of interpreting an RFC and is using labels/tags as folders, and how a message can show up in x places, not just one, forces me to look at scripting this as a large code base that can basically be a small IMAP MTA that saves files in a directory based system that is comparable with say "dovecot" or whatever other IMAP MTA/IMAP store there is that is using a open format that won't bite me 20 years from now.

What is your IMAP backup solution?
adding a link to roger's super-thoughtful and basically authoritative blog post on the subject: https://blog.torproject.org/blog/facebook-hidden-services-an...
The idea of "standing" seems horrible to me, "me" being firmly not-a-lawyer. It means it's difficult for me to contest something on merit in a court system if I can't prove it wrongs me directly. But judicial review doesn't happen without an actor - someone to raise the flag that something needs reviewing.

Is there a good argument for having to prove standing before being able to challenge an affront to human rights or the Constitution, or anything else I can plainly see is wrong but may not directly affect me?
No, escaping orbit is not for the masses. You will get the VR version of it.

Also what a mundane use of the technology, private industry has no incentive to do the science that needs to be done and our space program is dying so these corner cuters can take over.
Booting Sage Computer – A Subjective Retrospective (2007)
This thread on the Rust subreddit compares Blow's language ideas to Rust:

http://www.reddit.com/r/rust/comments/2gwi11/jonathan_blow_i...

He specifically says that Rust "cares too much about safety" and that satisfying its safety guarantees adds too much friction to development. Some of the Rust programmers in the thread acknowledge that the safety/friction trade-off for games may be different from, say, OS kernels or web browsers.

He also notes that Rust is new and still needs to prove itself, which I don't think anyone will disagree with.
Test flight of Virgin Galactic spaceship ends in fatal crash in California
Pinching a few pennies is what capitalism is built on, this is why we had fertilizer plants explode, had oil rigs leak oil into the gulf. This is just the beginning if we completely rely on private space companies to do everything.
I think that is wrong. Having the finger print makes longer (or even just enable at all) pass codes practical. The passcode is also a part of the key used to encrypt the on device data and is not stored on the device so by having a longer key brute forcing is made less practical.

Note also that the passcode is needed occasionally and if the wrong print is used it can be triggered sooner. The attacker doesn't get many chances using the scanned fingerprint. I'm not saying it is impossible to break or that a long passcode on its own isn't more secure but for most people the TouchID is a better trade off.
Even under the best circumstances, space travel is risky business. It may well be that this program didn't do all it should have done to mitigate those risks, but both facts can be true it's not mutually exclusive.
Building a Startup Scene in Any City
Google has made me re-enter my password when modifying 2fa settings.
Which finger to use is essentially password (albeit less than 4 bits) which presumably you don't have to reveal. Ask the policeman which finger he wishes you to place on the scanner and don't register you thumbs.
There's a really good mini-series on PBS called "Prohibition" that gave me a totally new perspective on the Drug War: http://www.pbs.org/kenburns/prohibition.

The ban of alcohol in the United States was actually a triumph of democracy over moneyed interests and the government. At the time, alcohol manufacturers had tremendous political power, and excise taxes on alcohol made up about 1/3 of federal revenue. What made prohibition pass legislatures around the country was a concerted effort by devoted constituencies: Christians and women. Indeed, one of the primary drivers of women's suffrage in the United States was prohibition--alcohol was seen by many leading suffragists as being at the root of social ills like domestic violence.

One of the most interesting charts I've seen with regards to the modern drug war is this one: http://www.people-press.org/2013/04/04/majority-now-supports.... My recollection of childhood, of school assemblies with adults shrieking "Just Say No!" wasn't wrong. When I was a kid in the early 1990's, the popular position was in favor of keeping marijuana illegal by an almost 80-20 margin. This is a country that couldn't agree on anything (in 1992, they voted for Bill Clinton over George Bush by a 43-37 margin), yet they almost all agreed that marijuana (we're not even talking about harder drugs) should be illegal.
>Humans should be safe though since a common number for the high-end of human hearing is 20kHz.

That doesn't mean it's safe for humans, it just means it's inaudible to humans. In many circumstances, an imperceivable threat is far more dangerous than a perceivable one. Laser is one example. If a visible laser beam hits your eyes, your blink reflex will kick in and (hopefully) save you in time. But a laser beam outside the human visual spectrum will literally burn your retina out before you figure out what's going on.
Based on eye witness accounts saying that the engine appeared to fire once more after a flameout, the hard start scenario may indeed be at play here.
I think the distinction of what is a PR piece and what is not has kind of blurred dramatically recently, dont you?

It's an interesting concept to beam power via ultrasound, but it sure sounds optimistic at any realistic distance, or to make it as prevalent as wifi.

Maybe there's a killer use case only the initiated (VCs and management) know of of? Otherwise it seems like a long shot for 10M.
Actually I think that is the biggest problem with the article. It gives you no way to asses which probability is good enough.
An huge amount of effort and innovation is going into BSD/MIT/Apache projects, including PostgreSQL. What is your evidence that the results are better with the GPL?
Please please please tell more Gabber and Donagi stories.

(Every time I stumbled upon an "unproved theorem of Gabber" in a paper, I would take a screenshot and throw it into a folder.)
> The U.S. argued the simple act of government computers collecting his or anyone else’s phone records aren’t violations of the Constitution’s ban on unreasonable searches or seizures and, in its appeals-court filings, suggests such issues only come into play when a government employee looks at a specific person’s phone records.

Except that a government employee specifically instructed the computers to gather and analyze his records to flag them for storage or not.

This is clearly a search performed at the request of a government agent, and should trigger 4th amendment protections.

They can't take papers out of everyone's house just because they use robots to do it: we'd all recognize that the robots were merely a tool following instructions of a government agent who instigated the seizure.

The case is no different because they used a different tool to perform the search and seizure - it was at the request and under the direction of a US government agent.
I see a lot of advertising for "earthquake proof" tech to reduce the amount of shaking in houses. I wonder if this 30+ years = worthless thinking in Japan will continue, or if it is just for this generation of houses.
Did you know an F1 car can drive itself around the track? It seems like there's something in human nature, at least among some people that leads them to want to drive the thing themselves.
Yes, it has been recognized that ultrasonic sound can cause hearing damage.

http://www.tinnitusjournal.com/detalhe_artigo.asp?id=109

OSHA even sets standards for exposure & in fact my ultrasonic cleaner manual recommends wearing ear protection when in use.

https://www.osha.gov/dts/osta/otm/noise/health_effects/ultra...
the CTO of uBeam (dual BS & MS from MIT) also ran
some numbers before joining the company

I would hope that the CTO of uBeam essentially is the reason the company exists. i.e. he invented something fundamentally new and needed a partner that could sell it. If the business started with a charismatic business founder that recruited the CTO based on the business model being sound, I'd be very skeptical. A business like this doesn't exist yet not because the business model is hard, but because the physics is.
Jailbreak your device and make an app that enables the passcode requirement whenever the GPS says the phone has been inside of a known police station/FBI office. It would be incredibly easy to create the database of locations and keep it updated.
Can I be sued for negative SEO?
Has Dejan Lazic not heard of the Streisand Effect? (Then again, perhaps this is a deliberate bid for additional publicity.) Does he also think European laws apply to American newspapers? This seems pretty silly...
Seeking software development engineer
Assuming:

> Put field 2 of card 54 into field 5 of card 71

Means (Pascalish pseudocode):

> Card71[5] := card54[2]

Or, perhaps a likely C adoption:

> cards[71][5] = cards[54][2]

I'm not so sure I think your example demonstrate how "bad" this is.
-1 for <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" user-scalable="no"> (disabling zoom)
Frankly, I find the lack of humility in this job req disturbing, and just wanted to post about it here.

"Send your LinkedIn profile, StackOverflow profile and maybe even a video introducing yourself, along with links to sites/apps you’ve worked on in the past" before an interview?

"Absolutely NO PHONE CALLS regarding this position."

For a midlevel software position?

And, from the main careers page, http://www.thetradedesk.com/about-us/careers/, the classic "Please submit all cover letters and resumes to hr@thetradedesk.com", also known as "send your resume into the round file".

I wonder if they are having trouble finding engineers?
I generated docs for Immutable.js using TypeDoc. It can be found here:

http://brentburg.github.io/immutable-docs/api/
Carte: Simple Jekyll-based documentation site for APIs
9 months ago this was posted:

> Impossible at the moment as Instagram don't allow any 3rd party apps to post content.

Maybe go to the source before anything else, maybe they still dont allow it, then you'd need to write your own script to do it I guess.
I'm still watching it but I was thinking the same thing but about D.

- Module system

- Optionally avoiding complex build systems (rdmd or dub)

- Fast build times

- Type inference

- Nested block comments

- Owned memory (Unique, Scoped, RefCounted)

- All variables initialized by default

- Anonymous or strong enums

- Specify enum type (inferred by default)

- Order independent symbols

- Scope guard statements (more powerful in D though)

- Locally defined functions

- Built-in dynamic arrays

- Parameterized types (doesn't work in his language yet but he says it's coming)

- Compile time function evaluation (only side-effect free code though so no playable space invaders at compile time)

- Complex checks using compile time function evaluation

- Generate code at compile time and mix it into the program itself

I like where his language is headed but I'm not convinced we aren't already there. I guess I should go back and listen to his other talks to see why he's unsatisfied with Rust or D.
I worked professionally on email clients for 4 years, and was a hobbyist for a while before that. I almost always use imapsync by Gilles Lamiral.

By default it will do a uni-directional transfer, but it accounts for duplicates and can be instructed to delete emails that don't exist on the originating side to have a more sync-like behavior. It also has a variety of filtering tools built in (ie. only transfer last week's emails, or only emails with a particular header).

If I sound like a fan-boy, it's because I am: I would not have been so comfortable in my work without having solid backs, it's saved me literally days of coding up specialized tools for various tasks and repairs, and saved me from dataloss more than once.

http://imapsync.lamiral.info/

My workflow was to run a VPS with Dovecot and pull my email from my various accounts on to that, and then put the Dovecot maildir under git, and then occasionally bundle it up into a 7z archive with max compression (nowadays, I might look into xz) to pull onto an external hard drive.
My bet is a hard start.
Gotta establish a suborbital trajectory to reach orbit, though.

One step at a time.
Agreed. Related: "Methods which return new arrays like slice or concat instead return new immutable collections" seems odd to me, at least for slice. Isn't one of the advantages of immutable arrays that you can operate on slices without copying because of the guarantee that the underlying representation won't change?
I'm not seeing anything in there regarding any law. My understanding of the issue is that it's simply the norm.
Expectation is houses only last 30 years, so nobody spends more to make them last beyond that.