skysight-inc/HackerNews huggingface dataset:
Clip & save this to your Apple scrapbook, next to articles reporting Michael Dell's 1997 "shut it down and give the money to shareholders" assessment.

Author Mims casually overlooks how crucial Mac/OSX is to the iOS development ecosystem, and how important "screens that have more pixels than any PC ever" are to the leading-edge creators for every other tech and cultural platform. It's a reminder why tech columnists aren't asked to manage/turn-around tech companies.

There is one true insight here, though, about where the future mass-market volume and profits will come from. But let me suggest a diametrically opposite strategic direction, suggested by the same insight:

It may again be time for Apple to welcome OSX on third-party hardware.

OSX is now a complement to the real cash cows – iOS devices, media stores, and cloud service – via the OSX development stack and other tight integrations. Apple could give OSX away for running on any clone PC (or virtual host), and reap benefits in the markets where it has stronger profit margins.

Apple would still produce showpiece Macs – the creation/development/knowledge-work hardware you get when you can afford them – but most OSX users would simply be throwing OSX onto their econoclones, because it's what works best with the iOS devices they spend most of their time on.

If you squint, you could see "free OSX anywhere" as a followup step in the progression that's included ITunes everywhere and free XCode.
Are “Keyless Entry” Hacks Really the Source of Recent Car Break Ins?
DIRECTOR OF SOFTWARE ENGINEERING
I've been using them for over a year. Their UI's are just the worst. They look like they've been designed by someone who has only seen Window's 95 software. Other than that, though, the service and underlying software seems pretty solid.

I have it generate passwords on new sites and any site where I need to change a password due to breaches and whatnot. I haven't known my facebook password for over 12 months. It's some random bunch of characters, and that makes me feel good.

I've enabled 2FA with Google Authenticator and it sounds like, after this breach, any new device that tries to get on my lastpass account has to be authorized over email.

They really appear to take security seriously. I guess they should since that's really their only game.
There are actually two products: XControls.org, which augments IBM Domino XPages and also XComponents.org for an Angular.js environment.

This is one of those open source tools that I'd love to see mature into a commercial offering: emailing request tickets, getting bugs fixed, having access to frequent release candidates, etc. I emailed them awhile back asking for commercial license and inquiring about any support they could offer. They're open to the idea, but seem very new to the game.
Why would serving RSS to RSS readers imply any different a license than serving HTML to a web browser?
SENIOR iOS APP DEVELOPER
it correlates with climate change nicely - the 1650 was the time of the Little Ice Age which significantly affected the production of food and everything else. The fusion power (or similar) would allow to mitigate and finally overcome the current climate change catastrophe (the fact that it moves slowly doesn't make it less serious - just like a huge container ship - the mass/inertia makes for the speed in collision :) which is starting to cause real economic damage (cattle growing in Texas, agriculture in CA for example). And it is just the beginning...
Most users don't share your sentiment. There are pre-bundled blocklists in most adblockers to block websites' JavaScript designed to detect adblockers and block content. uBlock includes two such lists by default. Adblockers vary whether these are enabled by default or must be enabled by the user.
I really hope the SteamVR hardware includes a documented hardware interface, rather than the proprietary libovr of Oculus.
I honestly wonder if they try to direct users towards certain content because they might have different deals around the content that makes watching certain movies for them better than others. That's the only explanation I can come up with for why they would make finding something worth watching so hard.
Actually that's how LastPass works (they move around an AES-256 encrypted database, and decrypt it on the client/browser).

The problem LastPass has, is that they re-use the same master password for two distinct things:

- Authenticating to login to your account.

- Encrypt your password database.

So in situations like this the loss of the authentication hash is relevant. I'd prefer to have a different password for the account than the database, but they don't offer that as far as I know.

In general I am broadly happy with LastPass's security. But it could be a little better for power users.
What features of Chrome are you utilizing that prevent you from supporting Firefox? I'm curious, as when I clicked through I got some kind of manifesto about Chrome being the future, and seeing as your code isn't open source I've no recourse but to ask you about your project.
Well, you need to find those thumbnails somewhere. So that's an entire backend component right there.

Also, I seriously doubt you anywhere near approached the scale of netflix's data centers. #63 most visited site doesn't compete at all with porn or netflix in terms of sheer bytes.

Just pointing out it's easy to say you can roll something out in a day, but you can never implement a feature without context.
The LastPass blog won't let me post any comment that mentions KeePassX, so I'm mentioning it here.

Other security folks might recommend other password managers that they prefer (e.g. 'tptacek likes 1Password). Generally, you should listen to them over me.

KeePassX is open source and NOT cloud based, so if those are two points on your mental checklist, it's worth checking out.
Yes and no. You can steer an open-source project up to a point, but if you turn too far away from what the community wants then they will take matters into their own hands - see e.g. Joyent / node.js / io.js.
Texas triangle:

San Antonio <-> Austin <-> Dallas
Houston <-> Dallas
House <-> San Antonio

That'd link up 14—17 million people. Expected growth is another 10 million over the next 20 years.

At an average speed of 600mph, it'd be about 25m commute between points, worst case.
gasp I just selected Netflix and AMP, and then filtered by year to the exact decade I was looking for, on the services I use! I was wishing for this capability just yesterday. This is incredible!!! Thank you.
To be fair, Birmingham <-> London is 125 miles, while Los Angeles <-> San Francisco is 380 miles. A better comparison would be Edinburgh <-> London, at 410 miles or so. At those distances, required capacity probably drops off.
So you can test the pylons.
Unfortunately, I don't believe they've ever posted a follow up with more technical analysis on previous breaches.
Apple Is Opening the Artificial Intellegence Floodgates
Agreed on al of these. A lot of this used to exist, but it's gone now. Instead we have big pictures and shiny stuff no one needs.
Our middle school had "Computer Club" one morning a week, so you'd try to get there early and grab the 128k Apple //e so you could copy a disk with only two swaps.
Ideally websites only store the hash, but you have no way of verifying which websites are actually doing that (and if they are doing it right).
This feature should have been part of Facebook a while ago when your platform has photo-sharing and friends in your DNA. Well, better late than never.
Oh thanks a lot! :-)
Well the front-end feature is only trivial after you've pulled the frames from the 10k titles, ensured they're spoiler free and not useless shots, and allocated the resources to cache and store them. I think thats where the scale aspect comes in to play. Theres also a certain degree of testing and integration that are effected by scale.
"user-friendly government" ... awesome, start with voting. This has potential to touch every "user" and should be low hanging fruit for such a crack team.
The subsidy shouldn't depend on the apartment, but it should depend on the renters. So you can explicitly set an income limit to exclude the $500k/yr family, but even if you don't, they don't get a bigger subsidy just because they want a more expensive apartment.
Offering and Responding to feedback sections are so bad. Do people working at GitHub really need to basically be told to not be rude to each other, to give useful information and to be professional or at least fake politeness? Are they employing people in early teens with no socialization what so ever? Use emoji, what the hell?!

“Our guidelines suit the way we work, and the culture we want to nurture. We hope you find them useful too.

Happy communicating!”

Ugh...

What a weird place, and I don't mean this in a good way (taking into account all the previous workplace drama they had).
I wish I was oppressed enough to have the power to get people fired for saying things I disagree with.
Gorhill wrote uBlock. After the project took on a life of its own, Gorhill handed the primary repo over to the contributors so he could develop from a fork of it. The primary repo then introduced requests for donations, changed attribution/authorship, and ended some features. As a result of the feature set difference, Gorhill renamed his fork to "uBlock Origin" so the features he wanted would be available in the addons sites without conflicting with "uBlock". At this point given their divergence, both projects are fully maintained and developed in parallel, with relevant revisions merged to each other where possible.

That's the neutral summary at least.

(edited slightly for clarity)
And this is why I hate systemd: its primary design criterion, it seems, is to be as difficult to replace as practically possible -- in stark contrast with sysvinit, OpenRC, etc. Once it's suitably entrenched it can simply be declared "the standard" and then Linux systems without systemd will fall out of compliance and hence out of support by the greater ecosystem.
I find this design kind of baffling. Why go through the trouble of storing data encrypted only to snatch defeat from the jaws of victory by demanding that the client provide a secret derived from the encryption key just to log in?
I think there's value in these physics-based animations. Immediate motion is jarring ('temporal aliasing'), and ease-in/ease-out can feel really sluggish. Spring easing can be a lot more satisfying.
FlickrMS – A Linux filesystem for mounting a Flickr account
They also acquire a lot.
In all the WWDC hype I didn't actually hear about Apple News.

This is interesting. Is Apple going to actually revive RSS as a tool for reaching the masses? (As opposed to a few persistent geeks, of which I'm one but I can tell there aren't that many overall?)

Bullshit legalese aside, that sounds like a great thing.
I'm not sure how encryption will stand up when you have a set of all deltas from V1... Vn of the encrypted file.

From my admittedly small knowledge of encryption I would assume that such a set of data could be used to greatly decrease the size of the search-space for the decryption key.

There are a few people experts who post here, anyone care to comment?
Ambition (YC W14) Is Hiring an Integrations Engineer
Ambition helps organizations hit their sales goals.

How: SalesOps codify expectations across activities (ex: calls, leads, demos) and objectives (ex: deals, margin, quota). Employees gain transparency/accountability into their behavior, specifically as it relates to their long-term success. Ambition tracks correlation between activities and objectives, makes intelligent recommendations. We started as "Fantasy Football for Sales" and have evolved into a productivity platform with gamification being a deployable and recommendable aspect of what we offer.

---

Looking to bring on an additional hire before raising Series A. Great opportunity to get in early, define role within fast-moving company.

Specifically, we are looking for an engineer to own flow of data from third-party systems into Ambition. Perpetual goal is that it's increasingly easier and more intuitive for customers to get information into Ambition.

Ideally you have experience working with APIs and are comfortable/creative in building user-facing tools. You are willing to interface with the engineering teams of our large customers as they work within our system and you don't hate writing detailed documentation (knowing that it will make your life much easier in the long-run).

If you are interested and would like to hear more please email us at careers@ambition.com with a brief cover letter highlighting why you are the right person. Looking forward to it!

Thanks,

The Ambition Team

https://ambition.com
NBA Finals: Training with ‘Wearable’ Technology- Stephen Curry
Funny i think i remember going to a brubeck meetup here in NY once. My old co-woker Patrick mentioned it and we ended up seeing a talk on it.
But even that won't help much.

If you are using "off the shelf" software, then that means i have something to scan for, and a vulnerability in the software means that i have tons of targets. Most of which won't be as secure as LastPass servers might be, and probably won't update immediately.
Complete Guide to Traveling and Building a Business Online
How is this personal?

I'm not trying to insult anyone, it's a mere statement of a fact - the OP hasn't a slightest clue about web of trust, subkeys, key-signing, etc. and he clearly demonstrated it in several comments. In those he spreads misinformation and FUD - and those are signs of a troll. So if I say "you haven't a slightest clue" to such an individual, I'm being polite.

Good day.
Ask HN: How does your company hire software engineers?
I'm working on a startup to improve the hiring market for engineers, and we're doing market research. We want to learn a few things about how companies interview and hire engineers. If you work at a software company, we would very much appreciate your feedback on this survey!

https://docs.google.com/a/taskrapp.io/forms/d/1nWPJA9IEwzvzgPiesaCqfHoPVf7qH5tEqe8voKUYpxA/viewform
And here I was thinking immutable == good. I guess functional programming doesn't work well with nation states.
I had the same thought. The waitbutwhy article cites 840 per hour being slightly less than the current traffic for that city pair, but that's assuming quite non-peaky traffic (7+ million if run 24/7).

It's also assuming that the demand at a cost of $20 and 35 minutes will be roughly the same as it is now.
about 5 seconds on your site and I found more of what I'm looking for than what I imagine would be 5+ minutes of Netflix and 3rd party sites. Thank you for sharing, I'll probably continue to use instantwatcher for finding popular / other people are watching but this site is perfect for drilling down and browsing.
Wow! More and more centralized services are being hacked. Time for something more decentralized.
- Dropbox files at rest are encrypted using 256-bit Advanced Encryption Standard (AES).

- Dropbox uses Secure Sockets Layer (SSL)/Transport Layer Security (TLS) to protect data in transit between Dropbox apps and our servers; it's designed to create a secure tunnel protected by 128-bit or higher Advanced Encryption Standard (AES) encryption.

Source: https://www.dropbox.com/help/27
I think we already tried to do something when we deployed the "secret Cuban Twitter":

http://www.bbc.com/news/world-us-canada-26872866
I switched to lastpass a year ago for all non-critical accounts, basically everything thats not email or my personal finances. Its still a bit of a risk, but this way I only need to remember about 5 passwords. I guess I'll slowly be updating all the passwords on my lastpass sites and coming up with a new master password today.

In short, more major sites need to implement a Google Authenticator style service.
Shouldn't be a scale issue. The number of previews required is O(N) where N is the number of videos, not the number of users, and for Netflix, that's very small compared to a user-generated video site like YouTube. With 10,000 videos (what seems to be an estimate), you could spin up a bunch of EC2 instances and render them in under an hour.

As for serving them, it's also trivial to host on a CDN and serve them on demand (on rollover).

Possibly they'd need to work it into their licensing agreements.
Kitchen sink spam is the worst.

"Drain covers in your neighborhood are horny now."

"Faucet dripping? Here's how to earn money from home with it."
The Selfish Class (1997)
You should try and use ServiceWorkers to generate the file -- then you can have the client DOS itself.
This is easy enough to do with GA if you use custom events. You don't even really need to set up much on the server side; if you fire the events at GA it will understand them. I think the real problem is expectations: Google is just doing statistics on big numbers, and for statistics to tell you anything, you have to have enough observations.

The real problem is that you need a critical mass of customers -- millions of uniques per month -- before this type of workflow tells you anything meaningful. And even then, diminishing returns set in pretty quickly: 80% of your legitimate users probably fit into 3 or 4 usage profiles that will stand out, so to identify the 'long tail' traits and market to them individually requires exponentially more users.

Basically, the type of deep analytics and tracking Google and others promote are only available to customers with enough data to tease them out. This generally is enough to exclude small businesses. You can get some basic stats about your users, but probably nothing you didn't know already. It can help you highlight glaring problems in your workflow (like a broken checkout page) but it's not going to give you magic insight.

Nobody makes it super easy because it's just a hard problem :)
>This is one area where I feel strongly that the conveniences of 'Cloud' are outweighed by the risks.

I wish this was true, in fact with at least 3 devices I use daily, having an offline password manager means I need to type in manually "difficult" passwords on 2 (n-1) devices (at least that's assuming how password managers and username-password auth work today). Call me lazy but that's already above threshold for me, I'd rather use same password everywhere than do that. Am I missing something?
This reminds me of a bug I found in an internal tool. We only had about 200 users, but somehow Apache would run out of workers because they were all busy serving some kind of request. Turns out our Apache configuration was wrong specifically in the case of serving the favicon. If you requested the favicon, it would get in a redirect loop, increasing the length of the url a little more each time until it hit the maximum url length and gave up. A new job like this would get kicked off every time any user visited a page, and it'd take several minutes before it finally gave up. So every user was unwittingly opening tons of long-running requests, with no indication that they were doing anything.
What's nice about it is that it has a save feature. So I can click Save and tell Google Photos to go ahead and start backing up that folder.

What sucks about that is that the photos have no location metadata. (Understandable).

What really sucks about that is that the photos HAVE NO DATE/TIME METADATA. WHAT THE FUCK.
There already exist many statsd implementations from which two in C and four in golang. Why the need for another one?

https://github.com/etsy/statsd/wiki#server-implementations
Where is the link
Hi
I remember someone posted a product prototype that is like a locker box to avoid excessive use of smartphone. Does anyone have the link? I think it is posted around the 5/19. Thanks!
> There are pre-bundled blocklists in most adblockers to block websites' JavaScript designed to detect adblockers and block content.

That still doesn't imply a feeling of entitlement.
I love how in like 2 months we've gone from nobody doing this to three separate entities trying to launch an internet of satellites. Gonna get crowded up there.
Now I don't feel so out of touch for not using last pass. It always seemed like a bad idea to put all of your trust in a single point.
I keep hearing praises of Netflix's recommendation engine. I wonder when they will roll that out! Because when I browse Netflix, I have 5 pages of categories, each with upto 75 shows. However, and this is the critical point, each of those categories contains about 60-75% the same shows, presented in different order. And with no respect to genre, to boot.
Working in the military isn't a regular job, and people who enlist in the military sign a very restrictive contract, so the normal laws of supply and demand don't apply. Internally the military is, by definition, a command-and-control economy.

http://www.military.com/join-armed-forces/making-commitment....
How do you use plex with your TV?

I set something up with a RPi a while ago, but performance was ridiculous. Chromecast support from mobile app was also buggy.
The killer part of this redesign is the in-context, in-line information cards which makes shifting through the netflix's catalog a breeze.
Media Takes Command
I meant the whole thing - subkeys, their very purpose (even CAs use subkeys to sign certificats!) or usage, etc.

Seems a bit strange for security researcher - that's all.
Minecraft Hololens Demonstration video
If the authentication database is being breached, presumably the 2FA shared secret is going to be in the same database. Constructing the 2FA code would be trivial. After all, the server needs a way to check that a given 2FA code is correct for an authenticating user, so there has to be some way to generate those as well.

It would help protect against any other sites that you use the same password on, with a different 2FA shared secret.
Most browsers have been doing that since favicons have existed. Older versions of IE used to check for /favicon.ico no matter what, even if you specify a different URL with a <link> tag. You really have no choice but to make the file available at the URL even today.
RetroShare 0.6 is out
I'd like to see a server ON a satellite, beyond the reach of governments and regulation. Sell encryption keys and route your ground-based services through a cache up there.
Companies Move on from Big Data Technology Hadoop
As the author states, though, having an RSS feed is arguably an implicit license for what's in it. There are arguments against that too, I suppose, but they have a lot in common with the idea that accessing a hyperlink without permission is a violation.

Apple's on good neighbor ground (and probably good legal ground) acting as an RSS aggregator while giving people a chance to opt out.

They're on neighbor-from-hell ground in handing third parties some weird auto-invoking license for using that party's content. This is the kind of behavior I expect from teenage fan posting a song from a band they like on YouTube, except the teenager is likely to recognize they don't hold any rights and aren't in any position to dictate a license before posting it.
I'm having a hard time seeing a moral or legal difference between a feed reader that aggregates content from a bunch of feeds and a content aggregation service that aggregates content from a bunch of different feeds.
> Curate your portfolio, show only your best work.

You say these things like I hadn't thought of them. :p :)
This seems to be based entirely on the Sunday Times propaganda piece. At least one of the reporters for the Sunday Times propaganda has admitted to just writing down what the UK government told him to write down.
You can include base isolation for pylons crossing known faults. - https://en.wikipedia.org/wiki/Base_isolation