skysight-inc/HackerNews huggingface dataset:
True, but having been involved in the development of an LDAP client, LDAP is a horribly complex system to implement against (and its built on top of ASN.1, which is possibly worse) and it was slow to get security features (LDAPS, etc.)—and in many cases, no two LDAP servers work quite the same (the most common LDAP server, ActiveDirectory, is the worst for this).

There is a need for something secure by default that is easy to use, easy to set up, easy to deploy, etc. Where this will be difficult is https://xkcd.com/927/.
I am on mobile (android) and viewing it.

Using chrome.

You aren't missing much.

It is more of a presentation format, requiring excessive clicking/swiping to move past a screen.
It seems to me that this person has taken a lot of time researching about contracts. Much of text is filled with legal definitions rather the actual terms of agreement. No lawyer writes a contract like this (at the very least I've never seen a contract written like this) .The intention clearly is to give off the impression that it was drafted by a lawyer, which I highly doubt.

Also the quality of language in the definitions and the quality of the language in the actual clauses does not match. Which could mean that the definitions were simply copy/pasted from internet but when it came to writing the actual stuff the person making the offer had nowhere to turn to.

So what you fear is that the client is asking to to fulfil your promise to the contract that you linked. Reading the contract and the context that you have given, here are some of the things that I've noticed. My responses are with respect to the Indian contract law :-

_"and any designing or development you own or have or will have rights to, any that you have previously created or will create in the future ..."_

This is void since it is not legally enforceable. A clause must be specific as to what the promise or the consideration for promise should be. What this clause says is neither specific nor foreseeable.

_"in return for you services and full agreement to the above terms in condition I will be allowing you to purchase a website with control panel through us or the company we use"_

Okay this was funny :) So the author of the contract reads up on contract law and decides to draft one. He puts forward some absurd clauses and says to himself

"Gee what should I give the other party in return for consideration of the promise?"

And he gives you the _right_ to buy stuff for him. This is like when you go to a fruit vendor and pay him Rs 40 to buy a dozen bananas and he says "Brother since you have given me Rs 40 to buy the bananas I give you the right to buy apples from this shop". Won't work in a court of law.

_"You also give up all rights to file a suit again my self or anyone involving me , you will give up the right to lawyer up and file a suit against me or anyone I associate with."_

This clause is void. The right to file a law suit can not be taken away in any case by anyone. It does not matter if you have agreed to do so in a contract or not.

First the promise required is not specific. Then there is no consideration of promise. On top of that the person is taking away your right to appear before a court of law. All three clauses are void. The contract is void. You have nothing to fear.
Does this only work with places that have one entrance / exit?

Or could someone rig up say, an entire hospital with this thing and see stuff like admission / availability of the waiting rooms at nearby ERs?
That just happened to me, indeed.
An oracle would be a sequence that give you a correct answer to a problem (or set of problems).

You could use Kolmogorov randomness to say whether this sequence is also random: "Kolmogorov randomness – also called algorithmic randomness – defines a string (usually of bits) as being random if and only if it is shorter than any computer program that can produce that string."

http://en.wikipedia.org/wiki/Kolmogorov_complexity#Kolmogoro...
Meh. Needs more cynicism.

Knowing the government, the data from a web form is faxed to an office where someone retypes it into an IBM AS/400 mainframe green-screen by hand, omitting the ');
Someone should create a <script>alert('PAC')</script>
> If you really want users to authenticate natively. Take a look at one of the new-er players out there Storm Path. It's basically your IAM backend to-go. Don't write your own security if you don't have to :)

But depend on an NSA aware third party to store your client's credentials?
We worked with a team from across NASA to build it, including the Ames Research Center and other groups.

At Socrata we work with all levels of governments, including cities, states, federal agencies, and even international governments around the world: http://www.socrata.com/customer-stories/
Rig up... We can normalize multi-entrance places. Actually Blue Bottle is a multi-entrance place.
As long we're talking about atomic fruits again, I'll leave this here in case anyone missed it...

https://news.ycombinator.com/item?id=9408350

Atomic Gardens: Breeding Plants with Gamma Radiation (pruned.blogspot.com) 51 points by thret 1 day ago | 6 comments
Can you give me an example of how quiet could be bad?
I like command line access, but the critical weakness of nearly every accounting application (cli or gui) is manual data entry. The number crunching is the easy part. The hard part is automating data entry through transaction gathering.
I don't think you will make significantly more money with an automated kitchen, as the number of customers you will have isn't really influenced that much by it. But faster computers? In every pocket?
> If you follow TDD, you ensure the line of code is covered by writing the test first, ensuring it fails, then writing the line that makes it pass.

This isn't quite true. There are two ways to lose line coverage. The first is if new code duplicates a case that was previous caught elsewhere. For example, suppose current code handles n>=0, with a special where n=0 returns 0, and the new code handles n<=0 by returning 0.

It's not always clear when new code shadows the old code path, leaving it with under 100% coverage.

The other way is through refactoring. My usual example is to replace string search implementation using the naive O(n*m) algorithm with the KMP algorithm, keeping the API unchanged. The KMP machinery is more complicated, and it's unlikely that the tests used to drive the naive implementation will be enough to validate the refactor.

Following the "fear-driven development" methodology means adding more test until you're confident the refactor was valid. But this is "test last", and not part of TDD.

I'm much more an FDD practitioner than I am a TDD one. :) And the idea of live code coverage sounds great to me.
Easier said than done. User data is needed in some way, shape, or form in almost any transaction the system performs. Yes you can separate the authentication credentials, and the sensitive attributes from the more routine stuff, and that's a good thing, but things often don't break that cleanly.
Ubuntu Mate's forum[1] links to a QA page[2] which points to a download in the "daily-live" directory, rather than one that's listed as RC specifically. This might be due to recent emphasis on daily builds.

[1]: https://ubuntu-mate.community/t/ubuntu-mate-15-04-release-ca...

[2]: http://iso.qa.ubuntu.com/qatracker/milestones/338/builds
Adaptive SECurity and ECOnomics LABoratory
Programming Bias Comes from Experience
But this "free time" came at the cost of constantly having to scavenge for more food, move to new areas, fight for survival, etc.. I see primitivists hawking this on hacker news quite a lot now, but you can post that link a hundred times, it still won't make 10k BC any more appealing than 2015.

It turns out that after you feed, shelter, and clothe people, they still want more stuff. What a fucking surprise. But at least I'm not starving, freezing, naked, bleeding out on the plains after being gored by a rhino or squashed by a mammoth.
Can one move an existing name and its mailboxes to it?
1. Many papers are never put into textbooks (or if they are, its much later)

2. A ton of research papers are extremely dense, while the actual 'newness' could be explained with a simpler definition and a really good diagram or code.

3. Without making too blanket of a statement, often, formal proofs are much more useful after one understands the intuition.

Inotherwords, I'd like to see a format that stresses expressing the 'new idea' simply. Proving that the new idea is supported by mathematics is definitely important (as you point out - its the 'meat'), but I believe understanding it follows intuition in many cases.
Drama aside, Riak and Swift are not in the same league.
Bars, clubs, etc.
re: Minority Re..port... I've always been bad at reading. Do you know another example of a minority game? And is it a paradox or just a method of thinking about game strategy?

Parking - I agree. That one company has a unit that senses the presence of a battery in a parking spot.

Other open problems - I think your talking about how datasets affect one another. What's really interesting about that regarding foot traffic is that there currently isn't a way to know how many people came and went. Which means it's currently tough to draw connections between how foot traffic might affect the farmer's market or the subway or the financial district in San Francisco.

Can you explain map demand irrespective of supply?

Checking PDF..
This is kind of surprising to hear. I had no idea.

Well in that case have you heard about LeoFS? Wonder if it overlaps with any of the Riak CS features for you.

http://leo-project.net/leofs/
If they are making money, why would they care? There's lots of shitty software raking in huge license fees based on misplaced reputation.
I'd rather they clarified "well-regulated militia".
Physicists detect radio waves from a single electron
Tesla Will Unveil Home and “Utility-Scale” Batteries at April 30 Event
DB engineers living in mortal fear of Kyle is where we want to be.
Apache Solr has done very well at Jepsen tests.
Swift Standard Library Signaling
This paper isn't from 2011, it was presented at the 2001 Haskell Workshop.
Apache Solr's jepsen tests have had very good results.
"A Canticle for Leibowitz" by Walter Miller, Jr.

I would be completely contented with a three- or six-part series, but I could also see it being turned (well) into a longer thing by interpolating.

Similarly, but probably more accessible, "The Sparrow" by Mary Doria Russell (and it's sequel "Children of God"). It would definitely do better as a long series.
Running all the desktop applications in docker containers [video]
.ARC was used on MS-DOS systems as well. (Though if the format was ever popular there, it was rare by the time I was old enough to remember.)

Phil Katz of PKZIP fame wrote PKARC and PKXARC - both for MS-DOS. http://en.wikipedia.org/wiki/ARC_%28file_format%29
A Look at LinX Camera Technology That Could Appear in Future iOS Devices
I’m working on an application where we have separated the Authentication concerns from the rest of the user data. When a user is registered, we generate a UID and communicate that with the other services. We’re going to be using common role terminology across the services, but Authorization is up to each service in relation to those roles.

Our needs are a little different as well, because each service may need to reach out to a third-party service and we are holding a bearer token for the third-party service on behalf of the user. We provide that to the services behind an auth middleware through a header.

(We had considered changing this from an Auth Service to a general User Service, but I am strongly leaning toward having a separate User Service and leaving Auth tightly constrained.)
> I can also throw in a few 100MB zip disks.

I still have a clear memory of just what the click of death sounded like.
Try OpenLDAP with Fortress and you get a RESTful interface and ANSI RBAC compliant roles and permissions.
What Dark Matter Might Be Made Of
It makes me log in again to use it. That's fine except that I have 2FA, the codes for which are generated by my phone.

Now, yes, I can use Authy to go and get them, but I suspect that if I were using Google Authenticator I'd still be without a phone.
For people wondering how long this is, there are 33 slides total. It is pretty interesting and you can get the main points by going through it quickly.

Also, does anyone know how something like this (the slideshow) is made?
Yeah.

Well, I guess it could be bad if I knew that it was always quiet and therefore "a drag" (sorry, that was a weird word to use). But I suspect any bar or club that's reasonably solvent, especially in populous cities, has busy times.

Atm though we only show the traffic right now and notify when something is triggered, quiet / trending.

Second, I think there are people out there that are not looking for busy bars. Rather quiet ones. I certainly fall into that category.

We're not in any bars right now, though. I'll get back to you once we have more data.
I wasn't spreading FUD about anything. From the article there was issues with every databases expected behaviour. My point again was that you should expect and manage failure in your application layer. It's what sensible architecture looks like.

And ACID does NOT guarentee that you will not lose data. It is a theory not an implementation. I have lost data with both Oracle and Teradata due to bugs.
Agreed!

As an example, HashiCorp included Jepsen test results in their Consul documentation: https://consul.io/docs/internals/jepsen.html
Update the version of the "jepsen" dependency in project.clj to 0.0.3. You'll need to do this for each of the test projects you want to run.

FWIW, this was filed the other day: https://github.com/aphyr/jepsen/issues/52
I agree with you 100% on that, you worded it better than I could.
It is quite clearly a 'no true Scotsman'-type argument.
A topic on which thousands (if not tens of thousands) of hyper detailed essays and published articles have been written.

Whether what a "well-regulated militia" meant in 1776 has any relevance to 2015 is also a topic upon which many, many essays have been written.
I agree with OP that the user authentication data should be segregated, simple, and very well protected. It should act like a hardware security module: it will authenticate users, but never give up their keys.

I tried to find decent hashing in OpenLDAP and Apache DS but didn't. Perhaps I didn't look hard enough. Do they throttle by default?

Who's gonna make LDAP webscale and hipster friendly?
HBase. With the caveats that it's piggy backing off the success of Zookeeper, and the tests were not run by Kyle himself:

https://eng.yammer.com/call-me-maybe-hbase/
The Atlantic Redesigns TheAtlantic.com
Those viruses are now like characters in a Charles Stross novel, archived for an eternity of being resurrected by tinkerers in simulated DOS universes, briefly blossoming to spread and infect simulated SYS.COMs and COMMAND.COMs, maybe even crossing network bridges into other simulated DOS machines, only to be terminated when the simulations end, again and again.
Ask HN: Using Go in production
For those who are using Go in production, what setup has worked out for you the most?
To think that in only 250mm years, virtually all creatures disappeared and then came back to create intelligent life.

Now consider that the solar system is 4.6 billion years old, and shortly thereafter were the terrestrial planets. That means there were 18 chances for a mass extinction like this. Now granted many of these planet embryos have fused into the current planets or turned into asteroids and meteors, but what we're left with is the possibility of the rise and fall of intelligent life in our own solar system on different planets (or our own) without a trace.

Fascinating and frightening.
> I can sympathize the initial fear of transpiling. However, it really is much better than you think. Source maps have made big strides in the past year and Babel has excellent support for them.
Besides source maps, Babel does a lot to keep the generated code as similar as possible to the input. There are very few features that require complex transpiling.

I understand all that but after being bitten by the CoffeeScript transpiler on multiple occasions and Google's closure once, I try to avoid it at all costs. It adds an additional level of complexity to projects (needing to transpile before testing / debugging) and I just don't want to risk it for such little return, in my opinion.

I'm sympathetic to the cause of getting more people using ES6 and this is a way to do it today but personally I won't use it until ES6 is native in all of my browser and server targets.

> Transpiling is quite nice, and it's very likely that you already do it with something like Uglify or Closure compiler.

I've run into an issue with Closure at a point in the past (essentially the optimization to make everything into one statement breaking Opera; that was almost impossible to figure out but thankfully someone else did). But I do use Uglify; I try to limit it to compression only but it still changes things here and there (at least it appeared to; honestly it's been a while since I've dug into that code).

Minification, especially without all of the features enabled, should be safer than any other type of transpiler considering it has far less to do and many of the changes should be able to do so without consequence. Even still I do re-run all of my unit tests against minified versions of my code. It also makes me uneasy still but seems to be a necessary evil :)

>> npm may eventually support two versions of the same module, which would enable you to deliver libraries as both ES5 and ES6 for Node.js, io.js and client-side module systems that are based on npm.
> This will actually be necessary in the node environment if we are ever to migrate to ES6+ features without causing breaking changes for module users.

I'm having a hard time believing this will happen. This adds complexity to every module as they now have to maintain an ES6 and an ES5 version should they actually want to use ES6. Yeah they can transpile but they still have two modules to maintain, track bugs in case there is a difference, etc. This is unrealistic in my opinion and I don't get why it's even necessary; simply make a certain version of node be required if you want to use ES6. If users can't do that they'll have to use an older version.

Moving to native ES6 on node should happen really quickly compared to the browser space. The browser space is going to be painful.
This ruling just created a great business opportunity for those companies creating technology that can effectively emulate a dog's smell-sensing capability.
Awesome! I've been following bionerd23's youtube channel for a while and really enjoy the videos she's done. Glad to see more folks being introduced to her too!
or the game s.t.a.l.k.e.r
I hate patents, good thing my country got rid of software patents.
And Android followed suit. The policy change pretty much bifurcated the industry. Half died or sold themselves off - http://fortune.com/2014/10/29/after-a-blow-from-apple-nomi-s...

The other half doubled down on MAC address tracking tech, arguing that it still generates meaningful data - http://www.euclidanalyticsblog.com/2014/08/beacons-and-wi-fi... Although I've heard they've started to move toward video and facial recog.

We were so small at the time of the announcement last June that we thought... "Why don't we just build a door counter. How fing hard could that be?"

...turns out it's like way, really fing hard.

But here it is - http://i.imgur.com/zLUMAG8.jpg?1
I disagree. People needs to have fixed headers that auto hides on scroll down and auto shows when you start scrolling up.

Due to that low screen real estate there is an extreme amount of scrolling down, whenever you need that header to navigate you end up needing to scroll a long way to the top.

Links from the bottom are easily forgotten about when you're half or 80% of the way through an article. Likewise follow you around widgets are a painful annoyance 100% of the time.
I read from screens all day: phone, tablet, desktop. I just finished reading The Martian on my phone. The only time I find I absolutely must have text on paper is when I'm memorizing lines from a script for a play. I've even tried using flashcard software as well as audio I've recorded for my lines and cues; it doesn't work for me.
How to Pick the Best BootCamp for You
While I'm sure the Koch brothers will spend a large sum, the $900m isn't going to come from just them, that's the total goal of their political network, to be sourced from hundreds or thousands of donors. Their network spent nearly $400m during the 2012 elections.
You could use backup codes or the account recovery procedures in that case.
You're completely missing my point.

Activism can very frequently involve being fired from your job (which is why many activists end up forming organizations and getting paid specifically for their activism) and being threatened with charges pressed.

Having to deal with this inside the organization you're trying to change rather than outside of it isn't actually different. It's a different psychological experience (namely, it's far more hostile), but the threats don't change.
I'm in Mt Vernon by Penn Station. Bolton Hill to the West is great, so is historic my Vernon to the south. But man wander north of North Ave...
Was there any video taken?
Nerd
Docker Monitoring Tools Reviewed (Part 2): Prometheus, Sysdig Cloud
people: http://studioforcreativeinquiry.org/events/warhol-discovery

interface: http://www.kryoflux.com/

software: http://www.softpres.org/kryoflux:ui:stream-plot

tldr: hardware interface samples FDD head at 25MHz, this allows for more relaxed timings and human assisted interpretation of MFM encoding on degraded media

ps: and if you still have trouble recovering with this hardware there is even more hardcore mod that adds Microstepping head motor controller, cant find the link at the moment :/
You might enjoy reading the pre-amble to the Bill of Rights. I could tell you, but you'll appreciate it more when you see it yourself. It gives context to the Bill of Rights that I think most people have forgotten.

It also makes it clear that no interpretation of that phrase could undermine the right.
Buried in all the talk of password salting, the interesting thing I see about "blind hashing" is that the blind hashing service can be viewed as a new hash function with some interesting properties:

- Implementing the hash function requires petabytes of storage

- Pre-image, second pre-image, and collision resistance depend on the quality of the random data block that defines the function

- Pre-image and second pre-image resistance depend on the function being kept secret

- The function is hard to steal because it is petabytes massive

- If the function were stolen, a pre-image attack would be a matter of searching petabytes of data
This is all fine and good, but rising surveillance and propaganda legislation was never and will never be about terrorism. Civilians don't understand that globalization and hybrid warfare require extreme technical capabilities that amount to a sort of cyber cold war.
The Photos That Helped a Photographer See Her Husband Through His Depression
fuckbitchesgetpopcorn.com ... I got drunk one time eating popcorn.
Well, you said that Postgres had data consistency errors (referencing Aphyr articles). This is not true (at least regarding that article).

Aphyr article about Postgres could be renamed to call-me-maybe-acid-db-over-the-network and could remain the same.
Until it pauses ads when I mute them.
Humanity ends every new generation. Your kids are human+n.
I thought that, for certain, the bay was going to factor into the bubble. Statistically, the water is the safest part of Baltimore.
The USSR put Sputnik into space so they get rich, lol.
I was thinking PCI Express, Version 1, by 2 lanes. There are four of those if I read correctly which would be essentially 8 lanes of ver1 PCIe.

Rather a bit more I/O bandwidth than your iPhone has, but not as much as say a current desktop.