skysight-inc/HackerNews huggingface dataset:
Yes, a motivated attacker could figure it out. But before they could do so, they would need my password in plaintext for multiple unrelated accounts of mine, which is hard, requires the attacker to target me specifically, and by that point what is lastpass really going to do for me anyway?

By far the most likely way my gmail account would be hacked is that foo.com's database is leaked/cracked, and the hackers spam the credentials for foo.com at hundreds of other sites and see what sticks. My scheme defeats that. And it's one point of failure versus several.
It has been/is a fairly flawed mechanism of democracy and is more often used as a propaganda tool than an informative tool.

The larger problem is how do we extract bias from media as I suspect that comes back to money.
Except that unless you are lucky, you're unlikely to become wealthy from just saving/investing ordinary income. You're both presenting it as if it were a simple choice between being frugal and engaging in consumption, but it's not.
I personally wouldn't call it substantial. You can quantify the value of the liquidation preference by looking at the difference between the value of the preferred shares and the value of common shares available on secondary markets. Once you have a company that owns its market, has healthy and growing revenue, etc, there is very little difference. This is what happened to Facebook and Twitter. I'm not familiar with Uber but I do track Pinterest and Airbnb and right now their common stock (no preference) sells for about a 10% discount to the latest preferred rounds. Square and Palantir, which people seem to have less faith in (for whatever reason), trade at a steeper but still not what I'd consider substantial discount.
Software Components: Only the Giants Survive [pdf]
Learning about this was a revelation for me. I can't live without it now.
พ่อแม่ที่ดีเราเป็นได้
The evolution of socialist strategies
Should this have been done as a private disclosure to browser vendors first before going public, or is that more for security problems?
Preferred shares have different terms, they don't all have liquidation preferences. Even if they do, the preference is worth much less once the stock appreciates significantly. For example, if I get a preferred with liquidation preference at some price P then that is worth far more than the same security once the price appreciates to 3*P (since it acts more like a common share, the value of the preference being reduced [since the chance of it being useful is less]).

And which secondary markets are those?
Can someone clarify the article's claim that these Samsung drives are really "broken" as such? We have a few of these on 3.13 and 3.16 kernels and ext4 with no problems. It seems that there must be something unique to their application in order to expose these trim failures.
Nano is fine for 10s of lines, but Vim is great for much much more than that. It's also nice to have the same keybindings for every console app (gosh I love readline), and it's repeat commands make editing text an absolute breeze. Why open another editor on my host if I can edit the file in my console on a remote server?
Ok, so a lot of people are nit-picking this essay by attacking the weaker points (whether the gate-keeper role is one we want centralized, whether news media was truly unbiased etc).

The much stronger central point that needs to be answered is "Where will in-depth investigative journalism get funding to continue?" Yes, in-depth investigative journalism is not all that traditional media does/did. Yes, some of what investigative journalism does can be taken over by better data-mining and cheaper methods these days.

But there remains, after all that, a certain amount that cannot be done by bloggers and data mining. That's the central question posed by this essay that needs answering, and it's obvious there isn't a good answer right now. That doesn't mean saving traditional media is the best way to solve this problem, but it does mean this aspect of traditional media needs a viable replacement we don't have yet.
Jeez, I mean, you don't have to love Apple, but it probably wouldn't kill you to be honest about what they are actually doing.
This is a particularly handy flowchart:

http://www.stephenhicks.org/wp-content/uploads/2009/11/hicks...

Why did socialists of old invoke poverty as the reason for their policies, and modern socialists invoke inequality? Because capitalism is in the process of fixing poverty, and you don't gain power over people by promising to fix a problem that's a) fixable, and b) largely already fixed.
I've always argued that a QA engineer's job is to augment the skill set of the feature engineers to help them in writing good tests and automation suites that ensure the user requirements are actually met, as well as to build and maintain the CI server, QA and staging environments, and so on. Basically QA as a support for the engineers, not in contrast/conflict with engineers. Note that I said "QA engineer" there; manual QA is a different role entirely that should occur outside of engineering frameworks, whose goal is to really evaluate UX and who really answers to and works with product and design teams, not engineering. /2c
Actually, master password changes require the decrypting and then re-encrypting of the entire database, done locally. Mobile javascript engines would die.
It's 2015, writing a simple 6 screen application is still too hard
cat hosts | xargs -I{} ssh root@{} hostname

glad to know this one :-)

echo y | xargs -Ix echo x

how tricky!
I must say that the fact that Stash still doesn't have WebHooks is embarrassing. We had to write a custom hook in their weird java plugin system to get a part of this screen that GitLab has.

https://about.gitlab.com/images/feature_page/webhooks_full.p...

But still all three GitLab, Stash and GitHub have horrible permission capabilities. Looks like GitLab might be the "best" with what they have http://doc.gitlab.com/ee/permissions/permissions.html, but that is still pretty poor. A simple example would be the requirement to only allow a single user the ability to create tags, that user being the build bot. Enterprise's of course have all sorts of unique permission models that they want to abide by and most of them could be supported out of the box with a more fine grain model.
I don't actually see the scenario where this becomes a problem.

If foo.com is compromised and their passwords decrypted, I find it unlikely that the attackers are going figure out your password scheme, go over to bar.com, and start trying out usernames that are similar to yours with the password scheme they think you have, while they are in possession of all the other foo.com passwords and usernames, some of whom probably have the exact same username and password on bar.com.

I've been using basically hunter2_foo for all unimportant passwords for some time and never had a problem.

The only thing I can think of is that if one person was on a mission to destroy my life and they managed to compromise a couple passwords to figure out the scheme, but I don't see that happening in a way that would not allow them to vacuum up a good number of passwords anyway.
Also consuming more Omega 3 oils, found in oily fish, can help.

eg see
http://consumer.healthday.com/encyclopedia/depression-12/dep...
Awe.io
Wow, that sucks. Another reason to use ZFS – you’d notice the corrupted files a lot sooner.
I <3 justwatch! I live in Australia, and so I have to have 3 streaming services to get anywhere near the library that even just Netflix has in the US -- being able to search and find what I'm looking for on your site is an absolute god-send, thanks very much!

My only feature request would be rather difficult to implement, but I'd love it all the same: Have Foxtel Play's library in there somehow.
> So how does it affect your argument if the page was returned in it's entirety with all content inlined?

No, that doesn't change anything. I already mentioned executing JavaScript.

What are your thoughts on my mention of cURL? Do you think it's acceptable to run `curl www.cnn.com` from the command line? How about browsing the web with JavaScript turned off, or using a text-only browser?
We're all always on our way to becoming good engineers. Most of us really aren't good engineers in one way or another. These kind of principles help guide the whole team towards a set of high standards, in which individual team members may be more or less deficient.
I like pass a lot and it's pretty darn convenient and fast. It's my password manager of choice. GPG encrypted text files, simple, secure.
A common disease in any "crowd," yes.
Most don’t read social media small print – and it’s a goldmine for 3rd parties
Napoleon was absolutely not comparable to Hitler in terms of popularity. Your assumption is a classic historical question that many people have asked themselves since WWII. It has been debunked over and over.
Windows 8(.1?) IE even (Metro only).
Depends on your circumstances, really. If you're in an environment with lots of VM's floating around, being created, destroyed, and so on, dealing with SSH's paranoia (why can't I just dismiss a warning about a host/key mismatch instead of having to edit .known_hosts?) quickly becomes an exercise in frustration for dubious security benefit. (If the enemy is on your LAN and able to manipulate your DNS, you've already lost)

On your home box, sure. But let's not pretend there's not a reason for the option to exist.
It's another case of the cure (Sarbanes-Oxley) being worse than the disease (another Enron).
Yes, you don't get sync for free when using the ! operator in Erlang, but that's why you use the OTP constructs like handle_call (sync) and handle_cast (async) to model that sort of behavior...

Throwing the ! operator around haphazardly can be useful, but generally it's a code smell, as things can usually be encapsulated more effectively using OTP constructs.

Edit: saw you addressed this in another comment.
Same here. Sadly Safari does not use fav icons in the bookmark bar, so all of mine are emoji.

Unfortunately, you run out of sensible emoji very quickly, so my brokerage ends up 🎲, Github ends up 🐱, and Hacker News ends up ⌛️.
Most of the cases that are usually cited were, upon close reading, decided based on clauses in various state constitutions. The one exception that I am aware of is https://en.wikipedia.org/wiki/Nunn_v._Georgia where the decision was made in a state court and hence was only binding for that state.

By contrast in the early years after the 14th was passed, the Supreme Court stated in both https://en.wikipedia.org/wiki/United_States_v._Cruikshank and https://en.wikipedia.org/wiki/Presser_v._Illinois that the 2nd amendment was only a restriction on what the federal government could do. State and local regulation was unaffected.
It's not. We don't really know for sure.

http://www.medpagetoday.com/Endocrinology/GeneralEndocrinolo...
http://www.washingtonpost.com/blogs/wonkblog/wp/2015/04/06/m...
So you have a docker container inside Linux emulation inside a Solaris-style zone on a SmartOS host.

This is the opposite of "turtles all the way down" - it's like a veritable layer cake of system isolation. It's the turducken of server systems.
The goal of security is to make defeating the system too difficult to be worth it.

As such I'm not advocating security by obscurity, just security by "making the job of defeating all my accounts sufficiently involved to exclude me from a en-masse attack"; by far the biggest risk for cloud accounts.
Good ole' steam locomotive command...
The "overseas wealthy" is the trade deficits we've been running for the past 30 years slowly trickling back into the U.S asset markets. We were able to export our inflation for 30 years and it was all piling up in foreign central banks as treasury bills. Now, with very low interest rates, it is going into any asset that's not a bond. If the dollar index starts to go the wrong way, watch out, that little stream of overseas dollars buying into U.S assets is going to become a flood.
“Soaked in Bleach” Proves Kurt Cobain Was Murdered – 2015 Full Movie
I'm also no qualified to judge, but I would say it's important that in addition to rotating the password and key file used to encrypt the password database, one also rotates the all the passwords in the database regularly. This way, if someone obtains a copy of your database, they have a limited time before all the passwords in the database become useless.
Yup. I was seeing occasional corruption with my SanDisk Extreme Pro's and quite happy that ZFS was able to repair the damage each time.

The problem appears to have gone away following a firmware update, touch wood.
There's more than that implicit in my comment. If you're the sort of person who views wealth as a scorecard rather than a means to consumption, why should you care whether you end up becoming wealthy or not? You'll be too busy making money to spend it. And if you're the sort of person who views wealth as a means to consumption, then of course you'd like to be wealthier, but, well, you know how to achieve that.

(In actuality, the distinction isn't binary - most people desire both consumption and accumulation of wealth, in different proportions. But that reinforces the meta-point I'm trying to make, that money is a means to make choices about your life, and what makes those choices meaningful is the fact that there are constraints in the first place.)
>Sarbanes-Oxley

We'll never be rid of it. Like copyright law, It's crystallized into a self-perpetuating incentive structure. Everyone knows it's stupid, no individual has much incentive to try and change things. The ability to restore to a previous state is essential in the design of institutions, one lacking in our current governments. This is a very hard problem, but I'm hopeful prediction markets may be able to help with this in future governmental structures.
Nobody's saying the scheme is perfect, the claim is that it compares well to a centralized password service.

In the situation where someone uses the GP's scheme, to get multiple cleartext passwords attackers have to bypass security on multiple networks to obtain the databases and spend significant computation time reversing hashed passwords. And they have to do it in a time window in which the user hasn't changed their base password or hash.

For a centralized password service, the attacker has to do... pretty the same things, but for only one service! I'd also imagine the situation with regards to cleartext recovery might even be a little easier given that the passwords contained in that database have to be encrypted in a recoverable manner rather than merely hashed. And time window isn't an issue; recovery is going to be simultaneous.

Oh, and in first situation, the attacker still has some limited added security through whatever obscurity their site-specific hashing function brings to the table. If it's something one can do in their head, it's probably not anything that can deflect a clever/determined attacker that got to this point, but it's something.
if one machine failed and failover kicked in correctly, why was the engineer paged?
Or Btrfs on Linux.
Excellent looking theme. This and the ITG Flat theme are two of my favorites.
The most active secondary markets I see today are the broker dealer successors to Frank Mazzola/Felix Advisor type outfits who use company approved (or tolerated) LLCs to vacuum up stock from ex employees who want liquidity. You have to find them or be referred to them and then they will periodically pitch you inventory as it becomes available. Chris Sacca is doing the same thing but it looks like a venture fund and (as far as I know) he holds to IPO, where on the east coast it looks like a private equity fund and they will allow intra-fund exchanges between old and new investors. Very little transparency in this market and probably the perfect breeding ground for the next Bernie Madoff style Ponzi scheme (not Frank or Chris who are both legitimate).
Do you have the "discard" mount option enabled? Do you have a cron job that runs the "fstrim" command? It's possible your systems are not running trim. Or maybe your ext4 filesystems have little activity and you haven't had enough corruption to notice yet :)

Also, some Samsung 800 series drives only gained this bug in a recent firmware update (840 EVO specifically).
Seems like the same old story in new clothing: the internet and craigslist destroyed the jobs of those poor little old honest, hardworking newspapermen.

This is a very sexy narrative, especially for newspapermen, but I think it's a false one. The problem hasn't been ad dollars, the problem was that newspapers survived largely because they were a medium and because they had a sort of monopoly on a communication channel that people had come to rely on.

The reality is that newspapers had not been doing a particularly good job for a very long time. The conceit is that the office at a newspaper is a buzz of journalistic activity. The reality is that it was mostly drudge work, just going through the motions to ensure that classified ads, lazy PR puff pieces, marmaduke cartoons, and regurgitated wire reports got churned out day to day. The kernels of quality, original reporting, investigative journalism, have typically been very tiny even at the best newspapers of the 20th century through today, and completely absent at many others. It's foolish to believe that people didn't notice, that the public doesn't care because they are just a bunch of uninterested, unsophisticated louts. The news media spent decades methodically transforming themselves into a useless, valueless tabloid media caricature of themselves.

It's shocking that some of the best journalism in traditional media being done today is being done by comedians. But the narrative that newspapers are dying due to no fault of their own remains firmly entrenched, and for that reason I don't expect them to be able to claw themselves back from the abyss they've found themselves in.
If you build a startup and hope to iterate your way into being viral

It's a great way to alert a much bigger competitor of an emerging market so they can eat your lunch, though.
I'm curious if you've ever used Firefox's reader view. It's a bit spotty as to what sites it can simplify to the core of what's being described, but it seems like a better way to get just the facts, while keeping a more featureful browser for pages that need it.
TMitTB (in his "mid-30s") seems in over his head. And he's not a "tech guy", but a "Scrum Master". And he spends so much time (and money) at conferences that he is specifically brought to task for wastefulness ("he has apparently spent all of his time at conferences and no time actually working"). When he eventually delivers, months late, it's "a plain and homely thing" and he's still cagey about a go-live.

Yet at the end of all this, "TMitTB will get his bonus."

WHAT!?

What's the message here? Big companies are hard and inefficient places? Programmers and techies are confusing and dress funny?

Other than being technically illiterate, the VP seems to be the hero of this story. Not recognized as such, of course ("Money? Hours? Due date? Value? Bah!").

The CTO ("who has several projects on roughly the same footing [e.g., horribly mismanged] scattered across the organization") and TMitTB should have been fired long before the 30,000 words came to a close.
"It’s Carlota Perez’s argument that technology is adopted on an S curve: the installation phase, the crash—because the technology isn’t ready yet—and then the deployment phase, when technology gets adopted by everyone and the real money gets made" - http://www.newyorker.com/magazine/2015/05/18/tomorrows-advan...
The Kinect is dead
I wondered this as well. Valuing your engineers' sleep is important.
> the average person values money for what it can do for them, while billionaires and large companies value money as a scorecard

I don't think you're right about billionaires and large companies, actually, but at any rate: the complaint here is not that massive, nearly record-setting levels of wealth disparity are unfair, or even that people are unhappy. If everyone is materially taken care of, it can be difficult to talk about fairness or happiness. What we're losing out on isn't fairness but self-determination - a democracy can't survive long if a fraction of a percent of the population controls half the wealth. Wealth may not literally equal power, but there is an exchange rate there and it stays pretty stable over time. If a concentration of wealth leads to a concentration of power, that will undermine a democracy which can only work if power is relatively more diffuse. We may be finding out the hard way that capitalism and democracy are not compatible, and if they aren't then so far capitalism appears to be winning.
In response to airtel's script injection
Ask HN: What program do you use to test your skills
I've been teaching myself Go for the past week and last night I thought I'm at a level to code something actually useful to see how good I've become.

I ended up writing a port-scanner. (that only checks for one port at a time but changing it to scan a range of ports is pretty trivial)

Now I want to know what your go-to program is when you want to test your skills?
> Will the governments around the world still allow the "quasi" part to stay intact at that scale - highly unlikely.

By the time that happens, Uber will be as big as google. They will find a way - when lot of smart people work together, they generally do.
Zenefits has a massive sales team now, I don't know if it always did.
Dodgers, Lakers - LA teams seem to know something about staying relevant outside of 'sports', through quite a bit of competition.
In the case of Serhat Tanyolacar, an African American lectures a Turkish immigrant: "I don’t understand why a non-black person can appropriate black people’s pain to teach a lesson about racism." Did she not also thereby "appropriate" the artist's message, another minority? Is she not appropriating the sole victimhood at the hands of the KKK, which has also been racist against other races, anti-Catholic, and homophobic? Her response is basically that Mr. Tanyolacar is too white to have a legitimate voice in this[0] (please don't thoughtlessly retaliate with this link.)

Although it's reasonable for a black person to interpret a KKK message as primarily anti-black, and my opinion would be discounted on the basis of my own race/gender/orientation... it's just sad to see rampant labeling and subdividing of people even among self-professed shared victim classes, assigning out who has legitimate pain and who doesn't, narrow-minded focus on one's own problems while simultaneously professing a motivation to help others, etc. We all have pains, we've all been somebody's victims, we're all aggressors sometimes.

P.S. I find the work in poor taste, and it sounds like it at least should have been labeled better. This is merely a comment on the tactics used to dismiss and discredit the artist.

[0] https://twitter.com/krw18/status/541105260098371584
Yeah that would be nice. I actually think browsers should have this as a feature.

But the problem is that not all websites accept long passwords. My bank wouldn't take longer than 8 characters and doesn't even have a second factor auth.

Office 365 wouldn't accept more than 16 characters. I think it was Paypal who wouldn't take more than 10.
"I happen to have handy a file of four-letter words (no, not that kind of four-letter word)"

And yet, I spot such a word in many of the high-scoring combinations (hint: it appears near the word 'CUTE')

It would not surprise me if the makers of these locks had a list of forbidden words.
Who were those companies which had funding > 1bn within a year in the year 1999?