skysight-inc/HackerNews huggingface dataset:
>The only way to avoid this requires an active activity, at which case you've just duplicated the password [e.g. the act of typing is identical to the act of sufficient action to make it virtually impossible to duplicate] which has better known security characteristics.

Only way is active activity? Or just the only way you can think of?

>A single breach and you cannot rely on biometric data for life is the reason this is only safe to use as a "username" and not a password. You won't be able to significantly change your biometrics w/o breaking other identification issues.

You're assuming all recognition algorithms of the same biometric produce the same raw template. That if I get one I can gain access on another.

>Biometrics are only valid as a username or secondary authentication factor

It's often frustrating to discuss things with those who clearly know little about the topic and yet declare their opinion as fact.
There is an entire segment of videos on youtube dedicated to "unboxing" implying great packaging is not "really" important I think would be disingenuous. That's not to say that you need to get to Apple level packaging (I think, the point of the article) and spend $15/box, however thought and user experience need to be taken into consideration. Heck, one of the companies in this YC batch is trying to solve exactly that problem (Pakible)
> Is Bengali your first language?

Yes.

> [...] it's rather confusing mental acrobatics, and it doesn't reflect either how the writing system is taught, or how native speakers use it and think of it on a day-to-day basis.

Mental acrobatics are part-and-parcel of the language, either in digital or non-digital form. If I were to spell out your name aloud, I would end with "ত-এ য-ফলা", which doesn't really say anything about how ত্য is pronounced. While writing on paper, we say "ক-এ ইকার", and then we reorder what we just said to write the ইকার in front of the ক. Even more complicated mental acrobatics - we say ক-এ ওকার, and then proceed to write half of the ওকার in front of the ক and then the other half, after the ক. We don't necessarily think about these when we carry out these acrobatics in our head, but they exist, and we have made the layer on top of the encoding system (rendering, and to some extent, input) deal with these acrobatics as well. My point in the original comment (and to some extent in the preceding one) was to emphasize that a lot of these issues are at the input method level - we should not have to think about encoding as long as it accurately and unambiguously represent whatever we want it to represent.

Just out of curiosity - I would be interested to know more about your learning experience that you feel is not well aligned with the representation of jophola as it is currently.
How TripAdvisor is transforming entire tourist economies
Yes, but you specifically said that Heartbleed wasn't a memory safety violation, when in fact OpenSSL-vulnerable-to-Heartbleed can segfault on over-read. So what is it?
First surfing app for Apple Watch
Premera has been the target of a cyberattack
Why couldn't "fetch over wifi" use torrent type traffic from other wifi based users?
It sounds like the author is looking to be offended. Talking about Bengali being the seventh largest native language, then saying that US$18k is too expensive for a stake in solving this problem? Emojis with skin tones, something every human can use, that have arrived before a character that only Bengalis use is taken as an "outright insult"?
That's just one of the reasons people had (and you can't really expect everyone involved to have totally congruent reasons).

But how about "g"?

Do you really believe the two common variants (one storey/two stories) should have separate code points?

What about German vs. French vs. Danish vs. etc.? All different "g"?

Why? And if not, what is the core difference?
Legacy will be IE11.
How to convert Ops email alerts to actionable events
I don't understand it... what's the benefit of this as opposed to just embedding an iframe? And whats the role of pdf.js here? They seem to just show images of the pages - non interactive and non-selectable. When you are using pdf.js, you can actually get a nice embedded viewer exactly like firefox has (and similar to chrome). And the embedded pdf.js viewer would also be more secure than the iframe, if that's your concern.
you can make bookings through tripadvisor
I'm coming from a German background and I sympathize with the author.

German has 4 (7 if you consider cases) non-ASCII characters:
äüöß(and upper-case umlauts). All of these are unique, well-defined codepoints.

That's not related to composing on a keyboard. In fact, although I'm German I'm using the US keyboard layout and HAD to compose these characters now. But I wouldn't need to and the result is a single codepoint again..
Any specific advice you might have figured out?
I think that's a much thornier problem than you acknowledge.

If I give my modified-GPL code to my coworker bob is that distribution?

If I upload to an EC2, is that distribution?
So when they ask if you'd like to discuss their new initiative, you can't say "No, thanks"? How is any of this different from the "Would you like to donate a dollar to the X foundation?" Here they aren't even asking for money.
Yes, Canada is ahead. On the other hand that email money transfer incurs a transaction fee from most banks.

What pisses me off is that we have a nearly ubiquitous way to send money in the physical world--a cheque. Yet, in the digital world we stumble to achieve the same.

I blame the profit driven corporations as each solution incurs a transaction fee and/or a proprietary solution with no interop with other systems.

My experience doing B2B money transfers: For those out of country I paid a $25-50 fee to do a wire transfer. Meanwhile bank transfers within Canada required a cash withdrawal (or bank draft), followed by a trip to the other bank to perform the deposit. Sigh.
With this new CEO, Microsoft is a different company. Cloud & Mobile all the way. .NET/CLR is open-source. First class support for Linux and OS X. Commitment to standards.

At the risk of sounding like a complete lunatic, here's my prediction for the next 10 years:

* Microsoft abandon traditional Windows development.
* They take a FreeBSD/Linux distro and add a "Windows" layer on top, ala Apple. Unix and Unix-like OS's become the only game in town. "Traditional" apps are emulated. New Apps are written in a CLR-compatible language only for the modern runtime.
* IIS, IE, Sivelight - all are left to stagnate.
* Office becomes HTTP/JS, hosted only.
Or a combination of all of these things!

There are definitely times when it would be inappropriate to take a bike over an uber, and times when it would be extremely inconvenient to walk.

For instance: tonight. St. Patrick's day will be my girlfriend and I going to a brewery about 10 miles from our house to try a beer they are brewing especially for today.

It would be irresponsible of us to bike home after drinking, and inconvenient to walk that far. We will almost certainly be taking an uber.
> I would agree that it is an error to present "more Christian" as an alternative to "Old Testament"

On what grounds?

Neither the Old or New Testament aligns with modern Christianity particularly well, but the New Testament definitely aligns more closely.
I think you mean sysdig. All glory to the awesomeness and simplicity that is sysdig: http://www.sysdig.org/
Refined doesn't necessarily mean expensive. This reminds me of my favorite love-to-hate restaurant, the Crave chain (dunno if they're national or regional). They're the masters of putting expensive-sounding, fancy ingredients into truly bland, pedestrian food. The marketing goal is to make people with no taste think they're eating more upscale than they actually are. Meanwhile, my town is filled with little ethnic restaurants that don't serve bragworthy ingredients, but instead conjure magical flavors through their exquisite attention to detail.

So yeah, a company could package very simply, in an environmentally sound manner, and still make the unwrapping itself a positive aesthetic experience, rather than just an inconvenience on the way to using the product.

Apple could do that as well. They probably will do that, if they start seeing a more positive RoI in simple rather than elaborate packaging. But they'll still do it with the same obvious attention to detail.

So I should have been more clear... it's not non-luxury packaging that makes me distrust a maker. It's careless packaging, or packaging where the attention to detail is clearly focused on reducing cost (or worse, theft) rather than my experience as a consumer.

The packaging has a customer. Who's the customer? The end user, or the accountants?
And that's also a pretty big reason why Microsoft may not want to be on WebKit. Google forked WebKit because it and Apple couldn't agree on what direction to take things. Why would Microsoft be able to work with either of Apple or Google than they could work together on WebKit? So it's very likely that it wouldn't be a WebKit-based browser, but a browser based on Microsoft's WebKit fork or Microsoft's Blink fork.
I would love to know how the conversation about setting up her email went. Does she tell someone and they say "I'm on it," and then no one follows up or audits the infrastructure? Or was the setup one of her people's decisions and she didn't really know/care?
Liability isn't.
Why? That isn't their function. They aren't making money off your checking account.
> In what situations do you need to do this, but don't need to show any other data (dates and times, localized UI, user timezone, culturally appropriate fonts, RTLness) that involves knowing the user's languages and locale?

For drawing a given glyph, there is normally a lookup into a font table that involves solely the string of Unicode code points coming in.

Except if any characters in the CJK Unified Ideograph range. Then my function call suddenly has to jump out to read environment variables, which are hopefully setup correctly.

My code to do a lookup into a font file should not depend upon the users environment variables due to a space saving optimization made two decades ago.
Another one of the oldest message board rhetorical tricks is to claim somebody is wrong because they're supplying incomplete information and then after multiple requests to multiple people to fill in the gaps simply refuse to do so.
That parklet-sidewalk interface looks like an obvious trip hazard.
The fixation on private keys puzzles me. While they were extractable in some cases, it was difficult. Stealing passwords and cookies was trivial however. And how does one use a stolen key? You have to intercept the traffic first. I can abuse a stolen password from anywhere in the world by using it to log in. Then I can read all your (email, etc.) and don't even need the private key.

To differentiate these as "very different in severity" is I think quite misleading.
Agree++ The iPhone 6 Packaging was terrible. Way too easy to drop the phone since it was in a really shallow groove right at the top.
My English professor biggest pet peeve. He told us day one.

It was:

1. Don't use cliches in your writing.
2. Don't ever use emoji in any communication.

p.s. Emoji wasen't even around when I went to school. I bet Mr. Taylor woukd have had a field day though? Never been the
fan of any smiley face, even rotated 90 degrees.
I'm sure others will comment on the fact that 1 year sounds really long to the average developer. Not really because 365 days is unreasonable (though in some cases it might be), but because it symbolically sounds like BS. It sounds like the company is in economic trouble or that you will "have a change of plans' and postpone the 20% rule in the months to come. Either way, that doesn't make a very motivated team.

I read your comment of only requiring 40 hour work weeks. That shows you're aware, I wish more employers had that outlook.

This may not be popular, but I think you do need to make an exception to the rule, while maintaining it for the other 49.

People will understand if the the Lead Developer has "research projects" that stay undefined. It might even accidentally inspire some to want to be the Lead Developer.
form validation error when I select "other" for language of choice
Qt 5.5 alpha released
> This feature will be rolling out over the coming months in the US.

Fucking typical.
>13.1 million identity-theft cases were reported in 2013, resulting $18 billion in losses.

from https://www.javelinstrategy.com/uploads/web_brochure/1405.R_...
In addition to cost we have significant waste. A young designer named Aaron Mickelson created a 'packaging-less' product line that was consumed as part of the product itself. Certainly, there are going to be practical concerns - but it's not a bad direction to be turning our focus.

http://design-milk.com/aaron-mickelson-redesigns-consumer-pa...
No Australians huh? We'll have to do something about that!
Great. Now he is going to get flack from the left for not doing enough and from the right for doing too much. In addition he will be annoying customers and slowing down his service lines.
I'm just sharing my opinion. I don't mean it to be a grand condemnation or a big deal. I hardly feel entitled. When otherwise good organizations misbehave I feel free to point it out. I don't complain about getting downvoted when people disagree.

The fact is that this stat is provably misleading. People are understanding, and reporting it as, "25% of YC founders are female" when the reality is very different. YC knows about this and yet continues to use it. I think it's an understandable and small lapse in ethics predictably justified by some weak rationalization.
Doordash Raises $35M at $600M val
Tesla Model S user interface concept
The M3800 is Dell's beefy 15" Linux laptop.
I just attach money to a Gmail message or send via the Wallet app. Either way, same concept as the service in the link (when you're both on the same platform, it's easy to send money). Your way is a bit more flexible (like when a chat/IM falls back to SMS if the recipient doesn't use the same platform) but in general, these electronic transfers do make it a lot quicker.
I went to hear him at UIUC last night. For as much as I've read his articles and listened to recordings of him online, it was still a very fun and insightful experience to be there in person. Highly recommended if you can make it.
Packaging is the real world analogue of an app icon. Your product has to grab and retain my attention within two seconds for me to give it any consideration at all. Does Apple packaging have that effect? You bet it does! Do nicely packaged Kickstarters pique my curiosity more than cardbord-box prototypes? Yes, by far.

Appearances matter quite a bit, I'm afraid.
While this is true, there isn't really a common browser distribution that uses that setup for non-OS X platforms, though. Chrome/Chromium/Opera use Blink now.

For all practical purposes, Safari is an OS X-only browser.
I remember repeating the already-common joke around the time of Windows XP to my middle school Computer Hardware teacher that "Every OTHER Windows release is good." Vista/Windows 7 appeared to cement that, and Windows 8 / Windows 10 just seems like further proof.
Likewise, just because you disagree with the parent poster's interpretation doesn't make them "entitled". Just as YC has no obligation to share stats, the parent has no obligation to not have an ethical opinion about that, or to share it.
Well in this case it looks like you need to be friends, so any spam requests from non-friends would likely go into the never seen abyss that is the 'other' folder.

That being said, if you haven't ever checked your 'other' folder you probably should. Last time I saw this mentioned people had missed wedding invitations, potential dates and more from people they weren't facebook friends with trying to reach them.

You get to it by clicking the message icon in the blue bar at the top and then clicking the small text 'other' in the top left of that pop up.
I'd put more screenshots of the actual app. I'd rather see more of the app before signing up for a trial version and giving you my info.
ABI stability is not a feature, it's a bug. It means you can't fix the kernel and every driver in it, and you have to keep legacy interfaces around. This isn't just about keeping old function entry points around; the kernel regularly redesigns and rearchitects core subsystems in ways that cannot support the previous function entry points, and that's completely OK because the developers making those changes go fix all the drivers.

So no, the kernel will never have a stale^Wstable ABI for drivers (as opposed to userspace). Out of tree modules are a bug; pick hardware that doesn't need them. Graphics are one of the last areas where some of the widely used hardware still doesn't have FOSS drivers; just about everything else works with in-tree drivers.

And the stability issues aren't just with keeping the drivers up to date. Users who run the nVidia proprietary driver regularly report crashes and stability issues.
Rubber Extrusion Products and Design
You’re probably more familiar with rubber extrusion than you realize. If you’ve ever watched pasta being made, or played with children’s modeling dough, you’ve seen the basic principles in action. Rubber is heated to make it soft and pliable and then forced through a steel extrusion die to create a continuous ribbon of material in nearly any shape. Rubber extrusion is used to make the gaskets on your fridge, the splines on your screen door, weather stripping materials, rubber tubing, and much more.

Most extruded rubber products are not vulcanized during the process as is typical with other rubber molding techniques, so they usually need to be vulcanized after extrusion, which usually causes some shrinkage in both width and length. Rubber extrusion dies should be designed with these tolerances in mind.

To learn more visit: http://sternrubber.com/about/
Your 70 year old dad is an exception in a sea of people that don't want to learn.
What browser do you use now? I agree with your points, but I've stuck with Chrome because of the range of extensions.
cool. My [internet-based] understanding is that the more aggressive the cancer the less differentiated the cells are. Interesting to speculate that if not outright cure, forcing cells down the differentiation path can at least lead to decreasing of the aggressiveness or slowing progression of the cancer.
Musician Says UniversalMusic Hijacked His YouTube Vids by Bogus Copyright Claim
Conan daily brings most read articles on the web today
> needs a bank account anyway if they want to convert their bitcoin into something that they can actually spend outside of the dark web

That's not true. Americans (Facebook's intended audience for this Messenger money-sending feature) can spend bitcoins directly at Microsoft, Dell, Expedia, Overstock, Newegg, Tiger Direct, DISH Network, etc. They can use and spend bitcoins theoretically received from FB friends without having a credit card, without even having a bank account.

100,000 (legitimate!) merchants worldwide accept Bitcoin - http://www.ibtimes.co.uk/bitcoin-now-accepted-by-100000-merc... It is time to kill the myth of "only the dark web accepts Bitcoin".
> whereas the characters that are required to type a jophola have no obvious semantic, phonetic, or orthographic connection to the jophola.

Then it is an input method issue not an encoding issue.
It is much easier to criticize than to fix it.

While it is good to bring awareness to this, we are still growing in this area. In fact we should applaud the efforts so far that we even have a standard that somewhat works for most of the digital world. Does it need to evolve further, yes.

I am sure the engineers and multi-lingual people that stepped up to do Unicode and organize it aren't trying to exclude anyone. Largely it comes down to who has been investing in the progress and time. It may even be easier to fund and move this along further in this time, it was hard to fund anything like this before the internet really hit and largely relied on corporations to fund software evolution and standards.

In no way should the engineers or group getting us this far (UC) be chided or lambasted for progressing us to this step, this is truly a case of no good deed goes unpunished.
I've sometimes heard that, but I don't have a personal recollection of hearing the term used that way before. Do you happen to know of particular examples of people using "open source" that way before 1998?
You can add a PIN that you need to enter every time you try to send money
The best interface is indeed no interface and it's the end goal of a long design and product process.

There's probably some Maslow's hierarchy for design that looks like (designer friends - please let me what wheel I'm reinventing please):

1. The system has to be told exactly how to perform a task.
2. The system has reasonable defaults on how to do it. You push execute.
3. The system knows what you want and just does it.

The car key app requiring 13 steps means we're still in phase 1. The fact that it works at all is forward progress because before you couldn't do it at all! (One might argue that it's right now not useful and I would probably agree with that.[0][1])

The next step forward is probably to geofence your car and when you're near, a push notification asks you if you'd like to open your car door.

Finally, we get to the two step walk to door, open door.

We've got a long way to go and I applaud Mr. Krishna for pushing us further along. It does seem therefore that we should encourage app designers to continue to make apps with clunky interfaces so that we can begin the journey towards the goal - no interface at all.

I'd actually love to hear examples of systems that leapfrog from nonexistence to it's final evolution without intermediate steps. That would be really fascinating.

[0] Unrelated - rented a car once with remote keyless entry and keyless start - it is indeed a magical experience when the key never has to leave your pocket.

[1] Having gone through winter on the East Coast recently, I do think phone remote start might singlehandedly make the app worth it.
Or rather, it's forcing your closed-minded employer to reinvent wheels. Is it possible to improve the world while working for an employer that cannot embrace GPL? Opinions on this subject differ.
You're assuming they're American.
teams are typically ~3 engineers, working with a Product Manager and a Product Designer
It's quite easy to get extremely slow type inference in expressive typing systems. This code

let f0 = fun x -> ( x, x ) in
let f1 = fun y -> f0( f0 y ) in
let f2 = fun y -> f1( f1 y ) in
let f3 = fun y -> f2( f2 y ) in
let f4 = fun y -> f3( f3 y ) in
let f5 = fun y -> f4( f4 y ) in
f5 ( fun z -> z );;

took at least 3 months (!) to type-infer when I ran it on my 2008 MacBook using the standard Ocaml compiler. I have not tried since. Type inference algorithms have horrendous worst-case complexity. Fortunately that worst-case complexity usually doesn't matter in practise.
Where is this magical land where a company can't be held liable for losses because they accept bitcoin?
You summed up much better what I was trying to say in so many words. Resourcefulness and creativity can be used to ensure a great unpackaging experience, while still being sensible about costs.
I'm still a bit confused about how the forces line up for the flight path. If I'm understanding:

- the wing flies in a circle which is perpendicular to the wind (oriented the same way an ordinary wind turbine would be)

- the tether is up-wind from the wing, so the force from the tether pulls the wing into the wind which generates lift, which is used to propel the wing along the circular path

- the propellers are driven by the circular movement of the wing, and generate electricity

So the tether and the wing generate movement, the movement spins the propellers, and the propellers drive the generator. Except for take-off and positioning, where they are used as motors. Am I understanding this?