skysight-inc/HackerNews huggingface dataset:
Maybe GitHub themselves should just stop accepting keys of a certain length. For example <2048 RSA keys (and <256 ECDSA keys). They could also check against the Debian set.

As the article says, GitHub could be being proactive rather than reactive here. They don't "have" to, but they could.
Rival Knights Cheats Hack Tool No Survey
This guy rummaged through my house
I thought it was implicit -- the orders are secret.
Russians have a very low English level by european standards, and people proficient in English cost more. Main profit model of this establishments was always cutting costs while charging more — especially when the person you're charging is a government official (whom you know very closely), who is hiring your company to get some of this budget in his pocket in the first place. So, the quality is not at all the priority, and when it is, the % of the money that gets stolen is still enormous (Sochi).
SEEKING WORK: Ithaca, NY / Remote

I'm a full stack developer with experience in JavaScript (Angular, Backbone, Node.js), Ruby (Rails) and hybrid mobile apps (Cordova, Ionic Framework).

Contact: michal.kuklis@gmail.com

http://github.com/mkuklis

http://www.linkedin.com/in/michalkuklis
Believe me if I wanted to get rich I wouldn't have gone into technology, I would have chosen a bullshit career in scamming (finance) and easily made my entire yearly salary in bonuses.
Oh and check for low private keys as well, I did that before here's the code: http://cryptologie.net/article/265/small-rsa-private-key-pro...
> Publicly shaming someone on twitter isn't necessarily trying to start a witch hunt.

"Trying", no. But Twitter is (and has been for a while) The Great Internet Outrage Machine, so I think someone with any level of Twitter chops at all would realize that any public shaming (especially on a hot button topic) would likely result in someone kicking off a witch hunt just because.

I don't think she was trying to start the fire, but she /did/ bring the matches.

edit: and just for clarification, I don't necessarily think her public shaming was wrong, but I do thing the resultant witch hunt was.
True, this will be default if you don't namespace your keys and use ssh config files like I do, I should have just said that.
Show HN: Slactionmailer – Send ActionMailer Messages to Slack
The article's description of women's power over men is reminiscent of Robert A. Heinlein's sci-fi novel The Moon is a Harsh Mistress, in which Luna had many more single men than single women, with similar results.
Simple: Use the device until the batteries fail, then slip on the Batterizer[TM] and use it some more.
Right. HFT relies on finding arbitrage opportunities, which are limited and temporary. Unless you're building AI that will adjust to other players' strategies in real-time, you're behind the game.
> The next step is an Indiegogo campaign in late June, and then delivery in late September.

I've a feeling that's part of this being a marketing strategy by agency|2.0
Raising a child in an environment where few people have children predisposes that child to never wanting many (or any) children of his or her own.
One of your recent reviews: "Cool! (mainly because there're no ads) To developers: keep ads out please -- willing to pay for it. Android ads are getting extremely intolerably utterly annoying and painful and stupid. Also, please keep network traffic minimal."
Do you use ++? I don't see !! as any weirder.
I will gladly pay 2$ for this. Thank you so much!
My life under Estonia's digital government
Hence why we prefer Speakon connectors instead of those lame jack plugs they insist on putting on all guitar amps (and a great way to blow up a Marshall amp - just half pull that speaker output cable out and watch the valves go a funny colour eventually)
"proper" RTOS.

What part of Linux precludes it from being a proper RT OS in the hands of industrial developers whose purpose it is to certify it as such?

>BTW: I can promise you that there are many untested goto's in the Linux Kernel...

Not in a development environment looking for SIL-4 certification, there isn't. Perhaps in the public sphere you may feel that is an adequate position, but in industrial computing a significant part of the value is in the testing and real certification of the Linux kernel for certain ratings.

>The Linux kernel is not a hard-real-time system, it doesn't have complete test coverage and its inclusion in highly-safety-critical systems is as a lower-safety-level subsystem

I assure you, I have found none of these statements to be truly true.
Always nice to have alternative. Mechanize is certainly the big player in this space, but I like the use of faraday here.

Thanks for sharing.
ContainerShip: Multi-Host Linking, Service Discovery, and Load Balancing
How to automate your freelancing career
My 977 days held hostage by Somali pirates
So, basically any VC backed, SV based startup?
For some "fun" reading, here are the 149 public errata of Haswell CPUs:
http://www.intel.com/content/dam/www/public/us/en/documents/...
Or dating agencies for Chinese Men and overseas women, like the "Marry Russian Brides" ones you see on the web.
Who's behind mysterious flights over US cities? FBI
This window doesn't require an external wall and it can be time-shifted.
Self-driving cars seem less scary to me. You can take unreliable components (like, say, a car with crappy firmware) and make a reliable system out of it if the software running on top is fault-tolerant. The "autopilot", unlike a human, will pull over the moment the car's brakes begin to fail, etc.
I feel like I don't understand enough about typography to grok what this is all about. It'd be nice to see really basic primer on the site about what a baseline is and why it's a good thing. Looking at his site and blog, I can sorta "tell" that the typography feels nice. But what exactly is this library actually doing? I'm a software developer who isn't terribly good at front-end stuff or design and I feel like I'm missing out. :)
An army of well-paid trolls in St. Petersburg
Engineers at Harvard were set the task of designing the perfect smoker in class
Those 12" Macbook's aren't capable of driving a 5K display at 60Hz, period, even if they had a TB3 port. However, a TB3 display plugged into a standard type-C port would negotiate a DP1.2 connection so it could run 5K@30 or 4K@60.
256 bits is a perfectly respectable length for an ECDSA key, so I'm guessing people tried to generate those and accidentally created RSA keys instead.
Back in 2001 I was designing mp3 players with boost converters in them that could start switching from a battery as low as 0.9V. It was hard to find boost converters in 2001 that worked down to 0.9V. It's obviously not hard to find them in 2015.

Any product that is evaluated on it's battery life already has very efficient boost converters built into it. Battery life is priority #1 for any battery powered product design team. It's agonized over in every design decision from the very 1st schematic.

About the only products that don't seem to give a shit about battery life are toys. Toy designers know that you are not making buy/don't-buy decisions based on battery life, when you're looking at a toy in the store. Toy designers cost optimize their circuits aggressively, at the expense of battery life. They deserve a special place in hell for that. This product would benefit many toys. Not much else, though.
Indeed. I assumed it would be about CIA.

The subtitle is much more descriptive:

From a nondescript office building in St. Petersburg, Russia, an army of well-paid “trolls” has tried to wreak havoc all around the Internet — and in real-life American communities.
Design Your SaaS Website to Be an Online Lead-Generation Machine
This, people, is how you write a bug report. Very detailed, he even told them which version of pkzip he used. Very nice of him.
Nosy Brit cops demand access to comms data EVERY TWO MINUTES
No more Orweillian than "Carrots are not fish."
You're mouse must use a lot of power. I use a Logitech mouse (http://www.logitech.com/en-us/product/anywhere-mouse-mx-p?cr...) and I forget it even runs on batteries.

If you have enough light in the room a solar keyboard is also pretty awesome, I had one for the longest time. Kept it until I accidentally broke the keys cleaning it. Keyboard selection is very much based on taste though, so I assume you probably saw one and didn't like it.
When I'm fixing a bug in a piece of open source software reported by a user running it on a Mac, my inclination to actually pay money to fix that bug hovers around zero.
I was surprised there's no way to query the page beyond the small list of element accessors you provide (body, url, scheme, host, port, title, description, links, images, meta).

When you're putting together a tool like this, it's nice to give the user some way to "escape" your framework and get to lower level underlying data.

Why not offer something like

page.selector('h2 p') #returns Nokogiri elements

page.h1 #calls method_missing, returns Nokogiri elements

page.p #ditto

page.noko #returns underlying Nokogiri doc

Also, you forgot to include the body accessor in the "Accessing inpsected data" portion of the doc.
Hola's marketing team at work.
I think what he means is: don't just learn for learning, get a project and learn by building it. It's even more fun and you will REALLY learn.

His examples about doing a website to learn a language are spot on. If you know you are going to visit a place, why not learn the language before hands, it will motivates you and you will be able to use what you learned eventually.
Are you not displaying sexist thinking here, in that you privilege mothers over fathers? Why should the well-being of the mother be the only relevant criterion? What about the well-being of the father and the children?
True, I checked his profile and he seems like a very experienced web developer. I guess he wanted to make something that was a little bit easier to use for simple web scraping.
Nice work! We have a similar feature built into Ghost Inspector: https://ghostinspector.com/#visual-regressions -- It includes a tolerance setting so you can basically say "I only want to hear about it if the screenshot changes by xx% or more." Effective visual regression testing at scale is tough though and is really more of a secondary feature for us.

If anyone is interested in other solutions, ImageMagick has a nice "compare" tool built-in. There are also plenty of open source projects like Huxley, PhantomCSS, etc. I recently saw a demo of Applitools Eyes (https://applitools.com/) and it's quite powerful (though it's a paid service).

Lastly, I did a presentation that involved visual regression testing here: https://www.youtube.com/watch?v=mK0l__jmpTA (starts around 12:25)
GitHub now, after reporting this to them do not allow keys below 1023 to be added, and all keys that had been smaller than that, have been removed and owners of those keys got a email like screenshot on the top of the post
This already happens. My laptop has three USB ports. One with just the USB symbol, one with the superspeed USB symbol ("SS") and one with the superspeed symbol and a lightening bolt. I'm not sure exactly what that lightning bolt... Who knows what that means - maybe support for the Battery Charging Specification (5V, 1.5A)?

We'll just have to get used to ports having a load of obscure symbols next to them.
Show HN: Itemslide.js – A simple and beautiful JavaScript touch carousel
Could you please comment about approximate compensation range? Florence seems nice place to live. Any chance for partial remote?
Specifically, SMB/CIFS, not just shares from Samba (a specific implementation of an SMB/CIFS server).
I've heard of it before, the same is available in their API too:

https://developer.github.com/v3/users/keys/#list-public-keys...
Time Warner Cable CFO Arthur Minson Leaving for Co-Working Startup WeWork
Human Curated App Store Lists: Big News or Bad News for Game Devs?
Keeping Your Classic Tech Devices Running
The overall violent crime rate is 0.4%. It sounds unbelievable that wives are 50 times more likely to be victims of violence than the general population.

Even in prisons, the violent crime rate is only 4%
We've been on stripe for years. We tried issuing our first refund ever then Stripe booted us off with the same bullshit message
I think you meant:

https://github.com/cburgmer/csscritic - JavaScript, runs in browser

https://github.com/Huddle/PhantomCSS

https://github.com/bslatkin/dpxdt - Python, Deploys to App Engine / CloudSQL / Compute Engine

https://github.com/BBC-News/wraith - Ruby

https://github.com/sindresorhus/pageres - JavaScript, nodejs, PhantomJS
You say that as if a twin engine plane is safer. Twin engine airplanes should be treated the same as a single engine aircraft. Most small twin engine airplanes typically cannot fly efficiently with a single engine if you have passengers and/or cargo. If you have two engines, you double the chance of failure.
The 2016 Republican Field
Its a documented feature [1].

[1]: https://developer.github.com/v3/users/keys/
> DO-178B was created in 1989, Ada was created in the 70's, standards for mission and safety critical systems have been around since the 70's, I was reading about Ada and safety critical programming as a kid in the 80's (I was a weird kid).

I'll hazard a guess that the HN readership consists of many formerly weird kids. :)

DO-178B was around then, but I'm not aware of any automotive groups using it then or now—I'm not in the automotive sector, so I could easily be mistaken. I would argue that IEC 61508 would have been the best model to follow in lieu of something more specific (especially since IEC 26262 is an adaptation of it), but I don't think even 61508 existed at the time outside of a draft. Ada was around, but it was a different beast than it is now and the tooling wasn't very good at the time (my opinion). I can't think of many that were using Ada outside of the government mandate.

For general consumer products (i.e., outside of aviation and military), I'm having trouble thinking of industry standards for mission- and safety-critical electronic systems that existed at the time that Toyota's electronic throttle system was developed. Maybe SAE had something at the time? A cursory Google search didn't pull up anything.

> Whether you accept that multiple independent experts in safety critical programming are right or not is up to you however the stuff that came out of the trial painted a very clear picture to me of just how bad this software is.

To clarify, I'm not saying that the software isn't poorly written by modern standards, but I am questioning that it was uniquely poor relative to the rest of the industry at the time it was developed. That said, Toyota was/is arrogant, and ignoring their own processes and requirements at the time is unquestionably the wrong thing to do. I remain skeptical that the software component was responsible for the unintended acceleration issues.

> A cynical person might consider that if Toyota is this poor how many other manufacturers are also as bad.

Isn't the null hypothesis that they were all equally bad?
The tyranny of the list may finally be over for iOS game devs. But will it be replaced by the tyranny of the Apple editor?
Given their customer base, that sort of response would have kicked off a shit-storm. ISTM that any "responsible disclosure" ought to at least rate a T-shirt. (If GH don't want to pony up the T-shirt, that's fine, but they can't send customer notifications before the researcher publishes.)
Controlling time
It really doesn't work - I really really wish it did.

Your ThinkPad has a Thunderbolt port (which doubles as a DisplayPort).
Existing G+ photos at original quality use storage quota, even if under 16MP
That is badly formulated from the articles POV, but it is entirely possible for everybody to have the exact same income and still be poor: any sufficiently severe pandemic, war or natural disaster would do the trick.

I general I think most people who considered it closely would realize that you don't get rich by your neighbor becoming poorer.
Have you looked at the Intel Galileo? It's a singleboard computer, and can run something Debian-ish. The stock Intel software is very scaled down busybox, but I'm pretty sure there's a full Debian variant for it, I haven't looked in a while. It supports PCI Express mini cards, and there are a couple of Wifi adapters that should work (AC7260 for example).

The cost is a bit higher than a Pi (The Galileo would be around $79 and the wifi card another $30 or so) but still far cheaper than kitting up a NUC.

I'm rather fond of the NUCs, they're not the cheapest things in the world for the size, but you do have quite a bit more flexibility since it's a full-on PC at that point and not a SBC.
Not sure, but I think I might be on madeofpalk's team on this one too: Superfish was ostensibly doing it to feed data into targeted advertising; Hola has no such (marginally) benevolent excuse.
It was strange for me too that environmental concerns were not taken into account in this article. At least in some European countries, it's the limiting factor as new laws are being passed to regulate wind farm building near populated areas or bird breading places.
Saying "broken home" is ridiculous. A home with a cheating husband is already broken, and nobody calls a widowed family "broken".
Model posts video of herself eating 120 Chicken McNuggets
What does this use underneath? I wouldn't use it unless I know whether it uses libcurl or something else.
FBI operating fleet of surveillance aircraft flying over US cities
> The Columbian Chemicals hoax was not some simple prank by a bored sadist. It was a highly coordinated disinformation campaign, involving dozens of fake accounts that posted hundreds of tweets for hours, targeting a list of figures precisely chosen to generate maximum attention. The perpetrators didn’t just doctor screenshots from CNN; they also created fully functional clones of the websites of Louisiana TV stations and newspapers. The YouTube video of the man watching TV had been tailor-made for the project. A Wikipedia page was even created for the Columbian Chemicals disaster, which cited the fake YouTube video. As the virtual assault unfolded, it was complemented by text messages to actual residents in St. Mary Parish. It must have taken a team of programmers and content producers to pull off.
A Node.js module allowing MySQL to store undefined properties like NoSQL
This list is actually how people in poverty define poverty, according to a World Bank research project:

http://www.nytimes.com/2009/03/11/books/chapters/chapter-lif...

The World Bank's own definition of "extreme poverty" is much simpler: $1.25/day or less, as can be seen all over their site: http://www.worldbank.org/en/topic/measuringpoverty
Buy a big one of these and your Tesla will be able to drive across the continent!
I run Yosemite Zone on a Lenovo W530 just fine, 13Gb RAM Allocated to OSten. Sure it's a little slow but it's usable. Still I agree, on slower hardware it's useless. I'm buying a Macbook Air 2011 next week since I need something faster and the Lenovo is a company machine.
Who is quite happy with living on so little money that they can't afford enough food to eat?
Perhaps someone is on an obscure platform whose only SSH key generator is subpar.

Or perhaps someone has a system that generates keys automatically, and it was poorly configured.
Berlin becomes first German city to make rent cap a reality
That's the same issue I ran into with using a VPN; I know I want to be using one as a (theoretical) enhancement to my privacy, but it was just too slow.
When I was in college a couple Intel engineers came as part of a recruiting event and taught my digital design class for a day. They told us about this bug and it blew our minds that they were using a simple (but super fast) lookup table to do math (a big part of the class was all about how to reduce logic). They had a few more gates to play with than the typical chip designs that had influenced this course's curriculum. It was also a little mind blowing that they were talking about this horrible embarrassing bug with such candor with us.

I think we all applied for the jobs they were there pitching us after that :-)
Of course, yes. CLDC is something that collided with CPLD in my brain, probably due to a Java-induced trauma many years ago. CLDC is a Java ME profile (a very simple smartphone from another age).
The linux kernel is tuned for throughput, not latency and certainly not bounded-latency.

My background is industrial/defense/medical s/w on hard real time systems. e.g. I've worked on train braking systems, high throughput radar systems, medical devices, lots hard real-time control stuff....

I personally have never seen any evidence of anything greater than SIL-2 certified Linux (https://www.osadl.org/SIL2LinuxMP.sil2-linux-project.0.html) and that is only in very narrowly defined context.

Like I said earlier, any higher certification, Linux would be run as a comparmentalised, lower-level subsystem. The real control would not be via a Linux controlled task.

Until you can point me to the test-suite for a Linux kernel& driver set that gives me 100% code-coverage, then Linux will never get past this point.

Dont get me wrong, I like Linux and it has a valuable place in embedded systems.... but hard-real-time control and safety-related systems is not it.

As a final word on the subject, dont take my word for it:
http://www.hse.gov.uk/research/rrhtm/rr011.htm
"it is not likely to be either suitable or certifiable for SIL 4 applications"

"It is unlikely that Linux would be useful for SIL 4 applications and it would not be reasonably
practicable to provide evidence that it meets a SIL 4 integrity requirement. "

...And in (https://www.osadl.org/fileadmin/dam/presentations/61508/6150...)
"One of the main conclusion: Linux is not suitable for SIL4."
Actually they anticipated exactly that feeling which is why the law allows you to have more children if you have girls.
And where do the odd numbers come from? 1023 bits? 799 bits??
Either your ThinkPad has Thunderbolt as was suggested, or you have a DisplayPort Cinema Display.
Deploying branches to GitHub.com
They may have been assuming that appropriate key lengths for AES would work for SSH keys as well.
Looks like net:Http ->
https://github.com/davidesantangelo/webinspector/blob/master...

Would be easy enough to swap out if you prefer something else though - Faraday supports a good number of connectors.
Ask HN: Developer Health Study – Contribute
Physical and mental health in the development community is a commonly overlooked and under-discussed topic. We know how lines of work impact the body, take construction for example, and it is important to monitor this for the growing tech space. We need to take a more in-depth look at the development community.

Contribute to the study by completing this survey.

Thanks!

https://jmprobert.typeform.com/to/LucWmI
I think your comment was mostly downvoted due to the fact that it doesn't add to the conversation and lacks basic value as an argument.

What were you trying to say? That somehow people who enjoy poverty, however miniscule that population may be, would somehow be adversely affected by having spending power of any kind? As opposed to the damage that is done to all the innumerable people who are impoverished without almost any path out?

It's a juvenile, poorly thought out argument. It doesn't pass even the most basic logic test. Not to mention, it seems to lack any empathy towards others.
Mapping the Hourly Wage Needed to Rent a 2-Bedroom Apartment in Every U.S. State
I keep thinking it'd have to play well to Canonical's agenda if they'd release Touch on the Note 4. Can they not legally buy the devices, reflash them, and resell them?
If they (likely) use some version control system - they can always revert to previous "non copyrighted version" to bypass this hurdle.

But then this whole arrangement sounded like "work for hire" === "they own everything" which makes this suggestion not working anyways.
One possibility is that your ISP is throttling encrypted connections. It's something that seems easy enough to test.