skysight-inc/HackerNews huggingface dataset:
This is off topic. Nothing that Hari did in the past invalidates his work on the drug war.

There's a pattern on the internet where as soon as someone's name is mentioned, people trot out the #1 worst meme about them and act like it ends the discussion. It's as if there's a big hash table in the sky that maps public figures' names to most-rage-inducing detail, and when a key in the hash table shows up, someone invariably rushes in with the value. That is a Pavolvian reflex, not thoughtful discussion. We're going for thoughtful discussion here.
I characterize FP as not worse, which of course implies that it must be better in some scenarios to even compete.

I characterize Go as having glaring warts. ":=" will bomb on reassignment UNLESS you destructure alongside a new variable. Wart. Try to close over a variable in a loop; wince in pain as you make a throwaway anonymous function to do so. Wart. Don't get me started on "interface {}".

Nonetheless, I think Go is a great tool for the right job. I don't think it's "better for open source" (WTF???). I wouldn't want to write a massively-concurrent (not parallel: concurrent) system in such a loose-goosey, non-polymorphic language. But that's just me, knock yourself out.
Lmao kids. I got my first computer in 1983, how about you kid?
LastPass double-hashes (ignoring iterations) master passwords. It has a client component based on PBKDF2 and a server component (per this article) also PBKDF2 based.

If the bad guys stole the hashes after they were hashed by LastPass's servers then changing the client iterations wouldn't do a damn thing. However because LastPass have an unknown network compromise one could worry that the bad guys intercepted LastPass client-hashed passwords between the client and server.

IF they modified the LastPass client, they could have it send LastPass's servers the already client-hashed password and therefore login even without knowing someone's plain text master password.

By altering your account iterations even by 1, you've now effectively forced them to decrypt the client hash (to plain text) before they could use it to login to LastPass's servers.

Again this only helps if they intercepted network traffic on LastPass's internal network.

PS - The OTP thing is as you said.
PPS - A better idea is just to change your master password.
Interesting that nobody have brought up the topic of computer viruses yet. People tend to grasp the evolutionary parallel better with parasitic software than with symbiotic one.
Anybody with a dish and a key can reach it, right?
Brain Rules mentioned that human ancestors walked about 12 miles/day (afair).
Bitlocker (well, "Device Encryption") does upload your harddisk keys to OneDrive by default, and OneDrive is onboarded to PRISM for government request.

So in the case that you end up provisioning a computer or device with Bitlocker, the key may very well end up in a database for query.

Outside of this it's not really so speculative to think that Bitlocker has backdoors for gov't access. It's unlikely that Microsoft Bitlocker survived the combined forces of state-of-the-art cryptanalysis, legal compulsion, and company infiltration (exposed by Snowden).

A backdoor for disk encryption need not directly attack the cryptography. It could be something as simple as a means to generate a bunch of predictable blocks on the harddrive - that's enough to break XTS. That is, even if there's no software backdoors or backdoors build into the TPM (Lenovo, for example, has 'key escrow' capabilities to extract Bitlocker keys out of TPMs) or crypto backdoors in HW PRNGs (e.g. Intel RDRAND), etc there are software bugs in other places that could reveal the contents of the hard disk.

So it's merely not a threat model you're ever going to find a solution for. In the very worst case, presuming there were some mystical level of harddisk encryption that was't trivial to backdoor or break by a sophisticated adversary - intelligence folks can use TEMPEST attacks, break into your computer when you turn it on, and/or get rubber hose access. An encrypted disk will not stop Mossad.

There is no disk encryption that will unilaterally prevent USG from accessing your files (you can only make it more expensive).

But as the USG is fond of repeating - you don't need your disk encryption to protect you from the government unless you have something to hide. You only need it to prevent attacks from criminals and for device theft.
What kind of benefits are there compared to private sector? Care to elaborate more on this? Or it's too sensitive?
We spent a fair bit of time researching this trend at Google News (former TL), and talking to the industry. I cannot speak for the company anymore, but the major finding was:

"The newspaper industry was not in the business of delivering the news, it was the the business of delivering ads."

News was their product, but they made their money by delivering ads to everyone's doorstep on a daily basis. The subscription rates they charged consumers were insufficient to cover their costs (by a large margin). The rest of the revenue was made up in classified ads, job listings, consumer ads, etc. None of those markets were particularly efficient, and as a result the industry was highly exposed to any changes in those markets.

Enter the internet, and:

1) Craigslist probably dropped the industry revenue about $20B/year.

2) Monster.com and competitors took another $10B/year or so.

3) Google, Yahoo, DoubleClick, etc took another bite. Though less so, ironically, because newspapers are still considered a great vector for brand advertising, and that sort of advertising is still difficult to quantify online.

4) Equal access to worldwide publication means that you (the consumer) are no longer fully reliant on your local paper. You can read the best article from the best source. This has multiple consequences, good and bad for publishers. The good (well, for cost reasons, not quality reasons) is that publications can skip covering events that will be better covered by a syndication partner (like AP), or just re-hash content from the local sources. The bad news is that the local market no longer has to buy your paper, and can now find a better source online.

The industry also continues to make a lot of strange choices, which don't help. For example, they make more with an extra 20% distribution on ads (publication dependent) than they do from the entirety of their subscription revenue. Given the demand elasticity for news content, one would then expect publications to drop subscription fees entirely. That they don't is somewhat mind boggling, but the explanation I received was that "distribution" (printing, shipping, etc) has its own P&L (for historical reasons). The other angle might be "exclusivity" (you value something you pay $6 more than something you get for free), but I am not enough of a brand expert to judge this argument.

The industry also tries to latch onto online subscriptions and micro-payments, which is maybe the stupidest thing I have seen them do from an economics standpoint. The numbers just don't add up (the number of people willing to pay versus the opportunity cost from lost ad revenue). Even if every person on the internet paid into a newspaper subscription fund, we are still back to the industry was never in the business of selling news.
Lightweight alternative to JavaScript breakpoints
The Roman Empire was traditionally willing to tolerate you if you were willing to worship the Emperor as a god.

This version of tolerance famously didn't work out very well for Jews and Christians. Particularly since they were OK with private human sacrifice and public executions for entertainment.

We owe a lot to the Roman Empire. But I wouldn't romanticize it too much.
The entire thing is offending. They sent me a bunch of terms which I'm expected to implicitly "agree" to unless I explicitly opt out. As I say in the title, I do not agree to the terms.

Maybe they don't need me to agree in the first place. But the fact that they're trying to get me to agree in this fashion is idiotic. The content of the supposed agreement is almost irrelevant.
I have a German system from a German IP and some of the words in the article are German. Weird. Do they have some kind of auto translation that kicks in even though they didn't translate the whole article?
He's quoting an actual person. It's the first response to the tweet.
Can you explain more carefully the XTS attack you're contemplating here?

The Device Encryption recovery key feature was discussed at length here: https://news.ycombinator.com/item?id=8546524

Certainly, people who are concerned about security should disable/avoid it.
Exactly. Why is why I entirely understand LastPass's reasoning for not doing that by default. But it would be a nice "advanced user" option (like 2F and all the other toys hidden in the account settings advanced tab).
Oryou could, y'know, judge him based on what he's currently doing rather than his bouts of stupidity. What he did was stupid (but not particularly nasty, or evil or whatever), but he then went and worked his arse off. And fair enough, when I hadn't bothered to check any of this, I had the exact same reaction you did, but the book seemed pretty good on first read (not blindingly amazing, but good), as are the interviews he's done to support it. Interesting, well researched, dense with detail.

(Edit for extraneous 'the')
... and sudo is insanely complex. Maybe a funding drive should happen like for gnupg...
I commend them for their honesty, so thanks for the heads up :)

One thing i noticed: They used quite a few german words ("dennoch", "jedoch", "dann") which i haven't seen used elsewhere up to now.

Is that common? I know that quite a few words are used commonly in English like "kindergarten" for instance, but this is the first time i've seen those in an english blog...
I think 2FA is really the key here. If I have a really physically isolated 2FA device I feel pretty safe actually.
I'm actually working on adding more subtle, and understated animations to compliment his library at the moment: http://gabrielmtn.github.io/reanimate/

It's a definite WIP so any thoughts / ideas / opinions are welcome: Gabrielmtn+github@gmail.com
> I'd happily take 300 people at market rates over 500 people at government salaries. -_-;

I mentioned this before, but it's worth mentioning again here. There is the best talent money can buy and there is the talent no money can buy. If I could, I would apply without thinking twice.
Yes. And with younger players who have less distinguished selection skills (and mental resolve to not fall into a time vortex), those games will be around for a while.

Somewhat related, in Apple's design awards for top iOS apps they remarked on one game as using "in app purcahses to add variety and different gameplay modes, not just pay to win".

If only Apple reviewed each game for quality!
In this context, it refers to orbital plane. In this particular case, you can just substitute "orbit".
Why would you use JPG for something that should be pixel-art?

But it's not really that bad. Well under 200 bytes of overhead for 1000 pixels. PNG has under 50 bytes of overhead.
I prefer Rhodia: http://jakeseliger.com/2013/01/05/product-review-rhodia-webb... after this happened: http://jakeseliger.com/2011/05/11/eight-years-of-writing-and.... Nonetheless I do get the point and still prefer physical notebooks for the reasons described in the article.
I just feel bad for the guy. Originally, I was just pointing out it was a kind of censorship greater than downvoting that has some unsavory aspects to it. Like I wrote above, it's not clear what a better solution would be, except perhaps if I was running things I would try just deleting his accounts. Oh, and you can't reply to his posts, but whatever.
Laughable. MS was terrified of competition so they always went after competitors. The only reason it was MS instead of IBM is IBM was scared of more government regulation on their business.

Apple could have easily had this market and more if they'd opened up.

Maybe you didn't work as a developer in the 80s. I used Borland, Watcom and many other vendors along with many other OSes as well. Magically in the mid 1990s you could even run something called Linux on your PC.
The last sentence is still too long though ;)
That's no different to how LastPass stores your vault on its servers, isn't it? They're just using their own cloud instead of Google's.
Yup! I've been trying out a standing desk about a quarter of the time and that's been helpful too.
"I don't think Hari's ever been caught making stuff up."

https://en.wikipedia.org/wiki/Johann_Hari#Plagiarism_and_Wik...:

"He was shown to have made misleading edits on Wikipedia"

"In July 2011, both Private Eye and Damian Thompson in his Telegraph blog accused Hari of inventing an atrocity for his Orwell Prize winning article on the Central African Republic."

"The Council concluded that the article contained inaccuracies"

So not 'making up' but 'invented', 'inaccurate', and 'misleading'.

The guy's a horrible fraud and liar.
My recommendation:

1. Choose a programming language you like

2. Pick the most popular web framework in that language

3. Follow a pet shop or blog tutorial with that framework

4. Start coding your own project
If I need to run a server, I anonymously lease hosted VPS or whatever, and SSH via Tor. My concern is keeping my personal Internet connectivity anonymous. I use nested VPN chains, generally using pfSense VMs as VPN clients, and Tor.

I get that the Tor Project is working on IPv6. But I also want IPv6 NAT, in pfSense or whatever. That's to keep my local device IPv6 addresses (hosts and VMs) private, even from Tor entry guards. I guess that it's time to learn how to ensure that.
Given the subject matter and its broad implications, I would most definitely give him the time of day.

Lets spend the 21st century cleaning up the incarceration mess of the 20th, and start looking addiction from the perspective of science, rather than criminal justice.
I don't understand the use case for LastPass/Dropbox/FTP storage of password, 1Password (and probably others) allow to sync through wifi, isn't that enough? Why would you need to do it over the cloud?
Show HN: Tool for cleanly hosting presentations on a webserver
What I've found to help for small projects is to start with a very lightweight use case analysis. For instance:

* A small vision document: This project is a (short description) targeted at (accountants / small business / boy scouts). It solves this problem that the target market has: (pain point). Its main features are (what makes it a good solution / what differentiates it from the alternatives).

* Main use cases: Some Trello cards with the main user-facing features, described at a very high level.

* Technical overview: You seem to have that covered. E.g. it will be a web/mobile/desktop/command-line app built on (language/stack) with this architecture (microservices, MVC web app, client/server, etc.) storing data on (S3/SQL database/flat files).

For a 1-person small project, don't overdo this part. Once you have this high-level overview of the project, try to implement the bare minimum necessary for the "happy path" of the main use case (i.e. without worrying about exceptional cases yet). Mock other aspects as necessary (e.g. authentication, dependent data sets, complex business logic, etc.)

This will leave you with a huge technical debt that you'll need to crawl out of as move forward, but it will avoid analysis paralysis and over-architecting.

For a more structured approach, one source that I recommend is "Use Case Driven Object Modeling with UML" (http://www.softwarereality.com/UseCaseDriven.jsp). It shows a technique to bridge the gap from the business requirements to the technical design and implementation.
When thinking about security who has more resources and expertise? LastPass or Google?
https://news.ycombinator.com/item?id=9074033
I assume you mean 40,000 kilometres here.

That'll definitely be lower than that (at that kind of height, you wouldn't need hundreds of satellites for global coverage). Wiki page talks about 800km and 950km orbits.
I built a shitty CRUD web app with that links to a web form the texts I want to translate - stored in a database - and ask my friends who speak other languages to translate them.
Thanks, so they are going to use Ku band and dodge and weave around the equator to avoid satellites in geosynchronous orbits. And from the animation on their technology page it really does look like they are going to have 30 satellites all in the same orbital plane following one after the other.

They have set for themselves quite the challenge.
Wow, deeply impressed with Firefox who rolled a fix in 3 hours. Mad props.
If there are factual problems with this article, please feel free to point them out.
I seem to remember various IRC bots in perl that used to do that, factbot perhaps?
As a user you can always fake watching ads, there's no technical solution from the server side -- you have complete control of your browser (actually just controlling the display is sufficient). That's why websites don't even try to deny service for ad-block users -- it's a waste of time. So yes, I think a legal in the sense of law solution is the only way out. Unless you want to propose something like full DMR'd computers being the norm (essentially iOS everywhere), which I wouldn't want.
Please expand on/ provide citations for that last thought.
Moleskins arn't that great.

Only the last half of the pages are perforated. The pocket is nice but it's prone to ripping because it's just paper. And for such a simple notebook it's absurdly over priced.

I happened to find a pocket journal made for kids from Japan that cost $1.50, the paper is higher quality than moleskins, it's spiral bound, has a clear plastic pocket area with a flap that can be used as a page marker, and the cover has an dual elastic bands that can also be used as page markers or just securing the entire notebook closed. It fits neatly in my pocket. Also it has a cute anthropomorphized bear on the cover with inspirational engrish.

For larger notebooks, staples carries a line of recycled sugarcane notebooks which has excellent paper quality, comes with covers either blank or monochrome geometric designs, and only costs about $5.
Since the revolution, France has been an Empire twice, a monarchy other than an Empire once, plus the five republics; it has not been each form several times. And the changes to non-republic forms were not through democratic wind of the moment overturning the rule of law.

Also, the US had been through at least one change since the revolution parallel to the change between the fourth and fifth republic in France, that between the US under the Articles of Confederation and the US under the Constitution.
Laws actually resemble immutable data structures pretty strongly! When a law is repealed, it's not simply erased, but rather a new law is passed that says "this law repeals that old law." When a law is changed, it's not rewritten, but a new law is passed that says "Section X of law Y is changed to read, 'blah blah blah.'" The full law in effect at any given time is just the sum of all those changes.

End digression!
Are you really relativizing the fact that Apple is aɡgregating full RSS content and has the confidence to send unsolicited email to contrive implied consent to the point of comparing it with Google putting ads next to small snippets of search results Apple consented to (albeit also just implied)?
>Mozilla didn't submit it.

I admit I missed that.
Way to miss the point.

If you run Windows, Microsoft has complete control of your computer. Unless you never turn it on, MS can log all the keys you press, all the data on the disk, all the network traffic, or really anything else they want at will.

If you trust them not to do the above, why wouldn't you trust them to encrypt your disk too? (Unless you don't trust their competence. But then, you are trusting them to secure your computer while it's on, but not when it's off?)
Housing shortages aren't substantially caused by people making >$500k, people making a lot of money just have an easier time dealing with a shortage.

All other things being equal, giving everybody a subsidy just bumps the rent by the same amount.

The biggest problem with the subsidy idea is deciding who gets it - and it can't be anywhere near everybody.
A huge missing part of the "Employees" section — which is great as a focus, by the way — is specifying how your management works.

Especially in engineering organizations, a consistent problem is moving people into management positions based on their skill as an individual contributor or tenure. Both are orthogonal to people-management skills and, though good to have from a team respect standpoint, far less useful.

Is it a priority of yours to avoid those problems? If so, it would be great to see it listed out. How do you organize teams to be optimized for Employees?

Especially as you grow, I would imagine managing people towards their goals and those of the company is going to be a larger and larger part of that employee happiness.

edit: There is also nothing on employee growth. If that is a something you value, it would be cool to see it in there.
No, I don't think you did. I certainly haven't seen anything about the root cause. Let's hope it comes in time.
Moleskine paper is notorious for feathering and bleeding when used with fountain pens, even fairly dry writers. I've actually had better luck with a no-name bound book from Office Depot than I have had with Moleskines.
It works pretty well on iOS. And since iOS 8 it even supports form filling in Safari using extensions.
What we meant by "we" is that the individual engineer who wrote the code is ultimaetly responsible for it. From building/modifying the backend APIs, frontend code, testing, QA, and ongoing maintenance/bug fixes.

I guess "we" really means "you"
It seems like an odd approach, but it could explain consciousness better since it assumes that each measured outcome is private information of the observer and each observer makes up the difference in regards to having differently measured outcomes. But there's something troubling about that for me. Does it mean when someone measured the health of Christopher Lee he didn't die? But for another observer who watched his vitals he did die? Are they in the same world? Or does this require the many world's interpretation to remain intact? I hope I'm not stretching QBism beyond its intended goals, but that's the sort of conclusion I can see being made from it.
> The legacy papers aren't dead yet and their quality hasn't diminished notably

That's a pretty massive generalisation as well. After Judith Miller, Jayson Blair and today's Tom Harper, I would say there is a good amount of data indicating the quality has in fact diminished across the board. The WaPost itself is a symbol of this decay: in 30 years they went from Watergate hounds to Iraq-invasion cheerleaders. If you look at the average column nowadays, it's all a bunch of "senior official sources" briefing utter lies in order to further their agendas.

> but it seems wildly inaccurate to deny its current effectiveness at promoting governance.

I guess it depends on what you mean by "governance".

Note that I'm not saying this shift is entirely the result of market pressure; increased knowledge of the mechanisms and inner workings of news media has produced an increased amount of skilful operators, people who know how to manipulate and interact with journalists better than ever. Still, I think the trend is quite clear.
http://smcv.pseudorandom.co.uk/2015/why_polkit/
I don't know how prevalent this is but from my experience, rent stabilization is largely gamed by many landlords.

My lease in Manhattan is for about 60% higher than what we are paying. We are then given a "preferential rent" rider which allows us to pay what we pay... This I assume is so the landlord keeps the building at his rent stabilization maximum which are about $3k higher than market rate. This is probably happening everywhere (at least in my last 3 apis) and it really amounts to no stabilization at all...