skysight-inc/HackerNews huggingface dataset:
Ask HN: Can A give permission to C to access B, without B talking to A?
### Context

I'm Alpha server, and I can grant permission to access things on Beta server at any point in the future, but I can only talk with Beta server one time, during initial setup (to share a secret, etc.).

Gamma server can talk to me and to Beta server any time. I can also give Gamma server instructions.

### Scenario

Gamma server comes to Beta server and says, "let me in". Beta server says, "go ask Alpha server for permission and return with proof of permission".

### Question

How can the above scenario be achieved? Does this type of permission mechanism already have a name? Would it simply require some shared secret between Alpha server and Beta server and some sort of hash calculation?

I'd also like the permission to expire after a certain period of time (or at a specific datetime).

### Notes

I realize this has similarities to OAuth 2, but since Alpha server can only speak to Beta server one time ever (initial setup), OAuth 2 cannot be used.
> I'm not seeking a pharmaceutical or therapeutic recommendation.

Is that because you're already in therapy? If so, skip the following; if not why not seek out a good therapist who can guide you in CBT, or something similar. What you're describing is common, therapists have super good tools and strategies to help you with it. Therapy is no big deal; no different from having a personal trainer at the gym!

On the point of feeling like an imposter, or feeling afraid of looking stupid: there are a handful of people who I think of who are super smart and accomplished, and yet humble and gracious, and not afraid admit to not knowing something, etc.; trying to keep them in mind and emulate them has I think helped me with some of the issues you mention.

Take care. I'm sure you'll be able to find some strategies that work for you.
Keep in mind that confiding in and talking with close friends is a good form of therapy.
How the millennial generation will transform the economy
How to Report Suicidal Posts on Facebook
Perhaps they mean commerical C-130s because military C-130s (or any other kind of cargo aircraft) are not available to members of the general public.

http://en.wikipedia.org/wiki/Space-A_travel

Also, I took a trip once in a (military) C-130H. Very loud (we had earplugs though), nylon mesh seating, but I was comfy and I slept or read most of the trip.
I have friends and family members that suffer anxiety ranging from minor to debilitating anxiety where they feel like they cannot function. As davidkim suggests below, meditation, sleep and even exercise can help alleviate some of the symptoms but you also have to know that anxiety/OCD can be caused by a chemical imbalance in the brain and you simply cannot wish it away. Medicine may be appropriate in your situation and so I would start with a consultation with your doctor. No one should suffer and miss out on the wonders of life.
Sweet Briar’s Sudden Closure Plans Leave Students and Employees Scrambling
I have anxiety and I have quit 2 jobs when asked to assume tech lead role because the first 2 times I have taken on tech lead roles, I ended up in the hospital and started alienating my family due to depression, respectively.

I can handle the toughest sr. engineer assignment, but I can't handle the most basic tech lead stuff where responsibility for other people's work is involved. I have since learned to hold back my performance and excel just enough to keep my job, but not so much that I'll be considered for a "promotion" to tech lead or management.

I am just a programmer. I am content with that and aspire to be nothing more career-wise. I call myself a programmer despite the popular advice not to do so here. My life is better and I am happier that way.
This is definitely true. qmail didn't have bugs in part because it implemented a barebones SMTP server, and had a lot of ridiculously onerous conditions under which it ran. For example, files in the queue were named after their inodes, meaning you couldn't just restore from backup and have it work. UID/GID were compiled in statically so you couldn't pre-build binaries and distribute them unless you had centralized user management via NIS/LDAP.

There were no features and no way to extend functionality, meaning that as the internet's use of email changed (e.g. SPF records), everything was distributed as a patch to qmail. This meant 1. sysadmins got to spend more and more time applying patches that hadn't been tested together, struggling to even get them to apply or compile; 2. sysadmins got to debug a lot of other people's code because there wasn't anyone to report bugs to; 3. if you accidentally blew away your qmail build directory there wasn't much chance of you getting an identical configuration back again, making your entire mail system ridiculously fragile.

When qmail was first released, it was awesome and amazing. Only a few years later, Postfix started providing the vast majority of the security benefits of qmail (e.g. separating privileges and functionality into separate daemons), with nowhere near the number of headaches. Need to change a configuration parameter? Just use postconf(1) instead of recompiling. Need to replicate your mail configuration? Just copy the configs over. Need to add new functionality? Milters.

I worked at a hosting company a few years ago that still used qmail (and Apache 1.3, and this was in 2010); there was a slight misbehaviour in qmail which we needed to change, which resulted in one of our sysadmins (who didn't really know C) spending days reading, changing, compiling, testing, and debugging code which, with Postfix, would have been a one-line config change. And who knows if it's robust? He stopped working on it once he had a solution that passed his test without segfaulting immediately.

Qmail did wonders for the internet by replacing sendmail, but horrors for the internet by replacing necessary functionality with onerous security, requiring third-party patches for almost everything other than just exchanging mail between servers, and refusing to update the code to add anything that wasn't there already.
Thank you; I misunderstood.
I think we're talking about a sense of indistinguishable/identical for which the two spheres would be indistinguishable/identical, since we're comparing a person to a P-zombie, so it's clear that we're dealing with two different individuals. I think identity in that sense is still transitive on the ordinary understanding. So e.g. if I can show that sphere A has exactly the same physical constitution as sphere B, and that sphere B has exactly the same physical constitution as sphere C, then presumably sphere A must have exactly the same physical constitution as sphere C.
Why can't we have it both ways?

You have this unstated assumption that they have to quickly abandon products that don't gain traction. But that's not true. It's short-term thinking over long-term.

When a company spends 30 man years developing a product, they can set aside 1 or 2 extra for long term maintenance. By promising or consistently providing this, they can build customer trust and get more users.

Keeping digital services up is cheap. It's shameful whenever DRM or video game servers go down after just a couple years because the company ran out of money or doesn't care anymore. These things could have been funded upfront with the tiniest fraction of the budget.
The Debian packages were scripts that downloaded, compiled, repackaged, and installed qmail for you, which was a giant mess but the only real way to make it work (license-wise).
http://imgur.com/EpY3Ioz

Interface failure all over the place.
Science: University press offices just trolling us now
Smoke trees.
You can still use this approach as long as you know the total size upfront, just sort the generated index array and use it to skip elements from your input stream, this will save you from having to generate random numbers for every element.
OneTab [!!!!]:
https://chrome.google.com/webstore/detail/onetab/chphlpgkkbo...

Evernote Clipper:
https://chrome.google.com/webstore/detail/evernote-web-clipp...

Buffer:
https://chrome.google.com/webstore/detail/buffer/mjojodpkaee...

Last Pass:
https://chrome.google.com/webstore/detail/lastpass-free-pass...

Rapportive: https://chrome.google.com/webstore/detail/rapportive/hihakjf...

Checker Plus for Gmail:
https://chrome.google.com/webstore/detail/checker-plus-for-g...
Are you getting enough sleep and exercise? Meditation? The brain is a muscle like any other.
"Looks like a healthy company" to who? Any businessperson worth their salt will look at operating cashflow, current/quick ratios, and P&L/income statement.

It's interesting, I think there's a lot of psychological parallels between the Japanese "lost decade" and these investors in the US. In both cases, large nonperforming assets (loans, or buildings) were held for a long time because the owners didn't want to admit defeat by selling at a big markdown -- in the case of the banks, due to capital requirements where a significant remarking of their assets might cause regulatory non-compliance.

Valuing things is hard.
I do in some cases. I've actually converted a couple of old clients to Debian and showed them how to maintain it for what little they used their computers for, and effectively lost them as customers because they stopped having issues with their computers. I see that as a good thing though; I probably gained twice as many new clients on their word of mouth recommendations alone.

But it's not for everyone. Most of my clients in the past have had specific commercial software requirements, so I wouldn't even bring up switching platforms. These days it's easier, as everything is moving to software as a service and web apps, and they are already used to running their home office from their iPad or Android tablets. Still, I make sure that my end goal is to offer the best value to my client, not push potentially unfamiliar and net-cost-ineffective solutions based on software license alone.
Here are my extensions:
Lastpass, Adblock, Pocket, Tab scissors, Email all tabs...
ZFS & DTrace are under a MPL-like license (CDDL), they ship with FreeBSD, and are in a "third party, probably violates the GPL" ghetto on Linux
Offtopic:

First time I read this topic. I didn't read the pastebin, just the comment and was wondering how someone was a founder and not be included in the valuations/investment side of things, or at least informed.

Then I read the link. How is this consider a 'founding engineer'? Are people looking so much to be founders that they call themselves that even they are obviously employees (first one but still employee). He got a salary and generous (aha) stock options, that doesn't make him a founder one bit. Heck, I was offered equivalent equity at a start up just to serve as technical director and shape up their initial development team, so how in god's name is 3% something a 'founder' has?
Streamus (!!) -- listen to music in your browser https://chrome.google.com/webstore/detail/streamus/jbnkffmin...
Hmm. I find proposed answers to these questions somewhat... unexpected. Lacking, in fact. They focus so much on technical ability, and seem to ignore the human side of being a manager. Starting with the first one... "1) Let’s say you are the first QA manager joining our startup. What are the first three things you would do?" The kind of things I'd expect to hear here would never be of the kind 'write a test plan'. And I hardly believe anyone would be able to contribute a test plan right away, would they? I expect ability to write a test plan, or setup a process where it is created and managed, to be rather easy to check by just asking someone to do a test plan on an imagined scenario. The answer I would like much more would be: '1. meet the team', '2. understand the product, its vision, goals', '3. understand current dev/QA setup and code before I proceed'.

In other words, it seems to me that the first things to do should be to see where we are, connect with people rather than making things up. How can you propose first actions without at least basic understanding of where you are?

I like questions 5+ much better, but still these seem more suited for interviewing an experienced individual contributor, not a team manager.

How about setting up a team? How about hiring? How would you define and split tasks, assuming we agree on tasks? What kind of testing would you personally do, which would you delegate to QAs and which would you require to stay on the dev team? What would you do in situation X? (any difficult multi-optimization problem where people, technical and philosophical issues are to be considered)

I can imagine a great individual contributor to ace every single question on ths list, and then fail utterly when he has to manage even 2 people effectively.
There exist a variety of ways to do this. How complicated do you want it to be, and how many other concerns does this implicate? Does Gamma have to auth as actually being Gamma to Beta or is that out of scope? etc

The most straightforward way to be is (duh duh) public key crypto. GPG is fine. Gamma talks to Alpha. Alpha tells Gamma: "Give this message to Beta: 'I trust Gamma. Nonce: whatever.' Here's the corresponding signature." Beta has pre-arranged to have Alpha's public key. On presentation of Alpha's message from Gamma and verification of the signature, Beta extends trust to Gamma.

There are a variety of ways to screw this up. Don't roll your own crypto primitives. It is highly likely you have consequential requirements which break the design of this cryptosystem, like e.g. requiring the ability for Alpha to say "Nah, actually, changed my mind about Gamma. They're not authorized anymore."
Sweet Briar’s Demise Is a Cautionary Tale for Other Colleges
Sorry, I deleted this comment immediately after posting but you managed to respond to it too quickly, it originally said:

>Having a large input set of known size (and your result set is not large) is not a time when you would want to use reservoir sampling. Such a problem can be solved in O(k) where k is the size of the result set, while reservoir sampling is O(n) where n is the size of the input set.

and I have responded here: https://news.ycombinator.com/item?id=9158903
The Great Suspender: https://chrome.google.com/webstore/detail/the-great-suspende...

Combined with Session Buddy: https://chrome.google.com/webstore/detail/session-buddy/edac...

Those who routinely keep 10+ tabs open may be motivated to switch to Firefox or Opera due to slow browser start. The above 2 extensions solve the issue. I explain in more detail here:

http://www.filterjoe.com/2015/01/23/best-browsers-2015-which...
Small sample but I've found in physiological data this actually increases my baseline anxiety but takes away the ups-and-downs. More research obviously needed than this anecdote.
I have OCD tendencies and I have found it incredibly helpful to connect with others in similar situations. I feel almost exactly like you do on a regular basis. My automatic negative thoughts are a little different but the end result is the same.

If you are like me, you are an extremely considerate/observant person that puts the perceived needs of others consistently before your own.

I know it sounds stupid or crass but you just have to stop giving a fuck about what people think. You will absolutely never be able to control peoples thoughts, emotions or actions. You are where you are based on your own merits. No one gave you a handout. You stayed up late into nights, learning, coding and building.

Having OCD means that you are eccentric. We can't change that and we shouldn't have to. Sometimes we don't have filters and call things like we see them. That's ok. Often people react negatively and that's also ok. That doesn't mean they hate us forever. Non OCD people generally get over things relatively quickly. Don't worry about it.

This perspective in conjunction with counseling has helped me tremendously. I still get anxiety, sometimes really bad, but when I do, I usually know it's because I'm being dishonest with myself and feeding into negative automatic thoughts.

Much love to you, you're not alone.
Ghostery: Privacy Manager | https://www.ghostery.com/en/

1Password: Password Manager | https://agilebits.com/onepassword

Tape: Pixel Perfect Grid Rulers | https://chrome.google.com/webstore/detail/tape/jmfleijdbicil...

Page Ruler Chrome: | https://chrome.google.com/webstore/detail/page-ruler/jlpkojj...
I think you can't look at the "how MySpace" lost story without considering the "how Facebook won" angle.

Myspace lost, in part, because it found itself in competition with a company run by a very talented team with big ambitions and ample connections.
No, it hasn't. The two diverge greatly over long windows.
Some feedback: the way you invite and share with others via the web interface does not feel that intuitive. For example, I'm having a hard time understanding when and how you split hotel costs with other users. Also, it would be really nice to get an idea of how much the trip will cost in total per person on the trip page.

I'd also echo the suggestion made by the other commenter about having a dedicated page for each trip rather than having to add an itinerary to your own list of trips each time. That page could be more easily shared and could break down costs for each section.
I would assume it is when a 500 char message is broken into 4 consecutive tweets, or something along those lines.
Came across this today, it might provide some perspective: http://waitbutwhy.com/2014/06/taming-mammoth-let-peoples-opi...
A Way Forward: Bruce Schneier’s Data and Goliath
very nice. $275 seems to be a decent price. I already have an hd and ram sitting around...
You are not taking the index of the element that you are currently sampling into consideration.

Suppose that the sample size is 1 and you are getting the second item (index 1). You will call rand(1), which has 0 as the only possible outcome. So, you will always replace the first item (index 0). Whereas if you would call rand(2) (possible outcomes: 0 and 1), you replace the item in the sample with probability .5 (assuming that the random number generator is uniform).
Then I'm a little bit worried about this algorithm, because if the probability of picking is n/idx then the odds of picking a long tail item get asymptotically close to 0. I'm not sure if it really qualifies as a sample of the entire thing.
If banks are just capital aggregators, do you think another party could play that role in the future? Like a mini-family office where 2-3 families get together, put in 10-20k each to get enough equity, and invest in a portfolio of assets?

Or am I just living in a bubble where people aren't in massive consumer debt and have disposable income?
Startuptabs: https://chrome.google.com/webstore/detail/startuptabscom/bkn...

Gethoneybadger: https://chrome.google.com/webstore/detail/gethoneybadger/lgh...
I am skeptical that it would be of any help, particularly since the calculator is only allowed to be out during the math sections, not during the language/written sections.

With the 89's input history, you could effectively record the mathematics section merely by running it all through your calculator and then extracting the history after the fact.
I'm hiring for my team at AT Media (ApartmentTherapy.com & TheKitchn.com). We are a REMOTE team and largely remote company.

* Senior Web Engineer (Rails)
* Graphic Designer
* Product Manager

http://www.apartmenttherapy.com/jobs
>I have OCD, and these thoughts become obsessions that don't let up.

A lot of people here might glance over this, but this is a pretty crucial detail. Having suffered from severe obsessive compulsive thoughts, this condition can and will completely destroy your quality of life. Earlier in life it was handwashing and lock checking. I grew out of that (thank god), but I've started to notice the same thought patterns cropping up in new places. What little CBT I made it through equipped me to recognize more obviously intrusive thoughts (contamination) but sometimes less obvious symptoms are harder to recognize but equally insidious. I don't feel as though I can recommend CBT in good conscious because I was never able to come close to completing the therapy, but it's worth mentioning.

Best of luck, OP.
## Currently

https://chrome.google.com/webstore/detail/currently/ojhmphdk...

beautiful extension that replaces the "New Tab" with this week's weather. It's remarkably useful to one that never can be bothered to check the weather and the design is top-notch.

## Stay Focusd

Great way to limit time on distraction sites. I have ten minutes of Facebook time a day.
> random memory leak spikes from uBlock

Chromium issue 441500:

"Popup UI of extensions causes systematic memory leaks" [1]

Related?

This was finally fixed yesterday, but we will probably have to wait until Chromium 43 for the fix.

[1] https://code.google.com/p/chromium/issues/detail?id=441500
> Maybe, once the DWP's contract with Monster expires in a few years, gov.uk will be able to make a case that they should be running it.

I'm talking about a hypothetical situation based on what you said previously.

If you read what I've said with that in mind, it should make sense! Why wouldn't I take account of what's already been talked about?
Just so I understand, you don't think the GPL should exist or be used, and should be replaced by the LGPL, correct?
That's the philosophy in Python. Instead of checking if you can do something ahead of time, just do it. If it fails, handle it then.

This results in significantly cleaner code, since you generally assume that the code you're writing is going to run correctly (e.g. that you can successfully create a directory in /tmp/ or a pidfile in /var/run).

Python, however, is also dynamically typed, which means that a lot of code is going to run even if you get unexpected input (e.g. 'print "this variable is %s" % somevar' is going to do a reasonable thing for pretty much every possible value of somevar), but it also means that your code might do something with invalid input which only makes sense if you know that your input was invalid (e.g. 'y * 10' is 20 if y is 2, or "2222222222" if y is "2"). C doesn't have that flexibility/curse, so it wasn't really an option for DJB.
Python is more popular in the sense that it is often listed as a "nice to have" on many resumes, and is also often used by non-developers like DBAs, SysAdmins, biologists, & mathematicians.

But from a "build a new product" perspective, Python is losing to Ruby, Go, and JavaScript.