skysight-inc/HackerNews huggingface dataset:
They're supposed to kill off a highly profitable business just so that they can focus on other things?

That doesn't make any sense. They have like $100 billion dollars in cash sitting in the bank. If anything, they are focusing on too few things, not too many.
This is indeed annoying; fortunately David Herrmann is working on a new user-space terminal emulator for Linux called KMSCON which uses the same keyboard input code as XOrg (libxkbcommon) so there is hope for improvement.

https://dvdhrm.wordpress.com/2012/12/10/kmscon-introduction/
Are you from Germany or do you have your Browser set to German?
The first time I visited the site I got redirected to https://blog.lastpass.com/de/2015/06/lastpass-security-notic... (notice the "de" in the domain), which has the German words.
The second time I visited the site I didn't get redirected to the German site and didn't see the English words.
Maybe some weird automatic translation bug.
In defense of smoke tests
Indeed. Those who choose to devote their life and passion to Leviathan are willing agents of Leviathan. The problem with the Modern State is not a lack of efficiency but a lack of limits.
I don't understand why 1Password's approach to the cloud - syncing via Dropbox or Google Drive - is considered that much more secure than LastPass. If anything relying on Dropbox has always seemed to me to be a huge liability
I'm sure you are talking about KSL ins Salt Lake City.
Exactly this happened with a lot of Smalltalk projects. The ones which were structured such that the Smalltalk Refactoring Browser parser could be used to accelerate porting projects -- usually the better architected and factored codebases -- could leave Smalltalk for other programming environments. Even if syntax driven code translation wasn't used, the better factored projects were still easier to port.

(And to head off the usual criticisms of automated code translation, this tends to work well, when the project has well adhered-to coding standards and patterns, so that idiomatic code in language A can be matched and translated to idiomatic code in language B. In other words, if there is a consistent use of project-level idioms, it's easy to do good idiomatic translation at the language level. The other necessary ingredient is a powerful parser+meta-language which can fully express the capabilities of the source and target languages.)
Ask HN: “Magical Hamper” – Product Concept
My company, The Happy Home Company, is looking to release a new product, and I'd like your thoughts.

Would you use a "Magical Hamper"?

Once you put your clothes in this hamper, they would appear washed, folded, and put away back in your clothes drawer, just like magic. That's all you'd need to do.

This service would be roughly 50% what Washio or Cleanly charges - something like $70 per week for a family of 4.

Would a service like this be interesting to you?
Abolish the surveillance state, for one.
39 Blogging Tips to Help You Grow Traffic by 400%
What about sales, marketing, management, QA and other staff? What is their responsibility?
I read an interesting paper a few years back showing a correlation between low(er) rates of depression in population areas with high(er) lithium content in their drinking water.
The paper also discussed how big pharma had pushed doctors away from Li over the years towards more expensive drugs.
Microsoft is also partnering with Valve for VR on Windows 10
Is there a crises timeline ? of some kind of transition map ? for periodicity ...
What frontend framework was used? Any lessons learned? I hear Netflix uses Ember, Angular, and React for different applications. I imagine a wonderful eng blog post will be posted in the near future :)
That'd be swell, but unfortunately for the most part, voting isn't the within the purview of the federal government, because it's not one of the enumerated powers in the constitution. Thank the 10th amendment, federalism, etc.
If you wanted security, you'd use a SHA256 hash of a master-password + domain name.

http://angel.net/~nic/passwdlet.html

Storage is unnecessary. LastPass, 1Password... every one of them has centralized storage. No one needs a central server, but a central server is the only way a "service" can sell itself.
Owe? A thousand years of stagnation? A repressive regime that enslaved half the world for the benefit of a handful of their own rich?
I think it all hinges on what "a public vote" is.

The problem most people have with Crimea, as far as I've seen, is not that there was a vote to secede. It's that the vote was heavily rigged and in no way reflects the popular sentiment of the people living there.

Similarly with the Confederates, I'm sure a public vote on secession would have passed, if you had limited it to people who were already eligible voters. But what if you had extended it to all the poor people and slaves? I'm going to hazard a guess that allowing the ~40% of the population that was enslaved to vote on the issue would have tipped the balance against secession.
Plus encryption routines aren't that big; for a major organization there's no real need for source code at all.
Sure. XTS reuses the sector-block for an IV, and so on a per-block level encryption is deterministic. The flaw here would be a scenario where there are deliberate repeated modifications to blocks of the harddrive (somewhere like within hibernation/wake code). Something carefully designed could, in theory, lead to the compromise at a block level that would allow tweaking of some contents on the disk (say, contents of the registry, or of some boot switches, etc) that would in turn enable the machine to be booted and the disk to be decrypted.

It's also true that the TPM protector for bitlocker uses a pin with max ~20 bits of entropy to shield the bitlocker key from exfiltration. The TPM is supposed to lock out repeated requests to extract they key but given the heavy involvement of the NSA in designing the TPM spec and its similarity to the Clipper Chip in function (so too with Apple's "Secure Enclave"), and its difficulty to audit (as if mom and pop consumers really need protection from adversaries who are going to reverse TPM chips to get computer data), one can't help but to acknowledge that a backdoor could easily exist there.

All of this is hypothetical of course. I don't claim to know that this sort of attack is there or that it is placed deliberately. I'm merely trying to make the point that a backdoor need not be in the harddisk encryption code itself.
Artificially Intelligent Computer Outperforms Humans on IQ Test
Chasing the Scream is an excellent book and is thoroughly footnooted and referenced to combat Hari's prior history of troubles. Highly recommended if you are frustrated with the WOD.
With these types of incidents, you want to make sure you have the facts before you make claims. They are probably doing tons of investigation to figure out what actually happened. This could be difficult depending on the level of sophistication of the attackers.

If LastPass says "Attackers took everything" when the attackers only took a few non-identifiable pieces of info; it will be a huge non-recoverable media event about attackers taking everything even if it's not true.

If LastPass say "Attackers didn't do anything" but stole a lot of sensitive info, then it makes LastPass look incompetent.

This is really a situation where they need to understand the scope of the situation before making a detailed comment.
Probably outside of the scope of this document.

Can you imagine if a Sales team came up with a set of values and part of that document specified how engineers should do their jobs? There would be revolt!
There is a 1Password Android client, but it's not from the 1Password people iirc.
It depends on your threat model. If you are more afraid of the government than of a random script kiddie, the vastly bigger resources of Google do not matter as your (encrypted) database is just a NSL away.

And then the NSA is trying to crack it </tinfoil hat mode>
And it will likely do it with reusable rockets.
Moleskines seem incredibly overrated to me. No organizational assistance, no features (that's fine) and not even high grade paper/materials.

Rhodia/Leuchtturm1917/Clairefontaine at least feel/look awesome to write on with minimal bleed.

Edit: Just saw there are like three comments already pointing all of this out... But yeah, the minimalism isn't the problem. Minimalism without quality is an odd success story though.
Silverlight has been ditched for over a year now, so I guess no ;-)
It seems common for big companies to put things in their legal agreements that are stupid and unfair and are never intended to actually be used. I don't know why.
Anonymous P2P networks are only way to go, and Private F2F (Friend-to-Friend) networks, like RetroShare, are even better!
What about looking at evolutionary biology? Those guys already have some methodological apparatus in place.
The IA.BAK experiment has now backed up the entire Prelinger archives
A startup that lets you 'unsend' any email just raised $500,000
For everyone struggling with tar, please be aware that you can use long-form arguments. So instead of "tar cvf filename files" you use "tar --create --verbose --file file.tar files" or maybe another order like ""tar --create --file file.tar --verbose files"-

It is much more sensible and intuitive.
Looks like quite soon after the civil war ended, the US Supreme Court ruled that secession was not allowable per the Constitution.

https://en.wikipedia.org/wiki/Texas_v._White
Google thinks the largest prime number is 257,885,161
I always like these types of books not only for the information but for the idea that they will bring a team together around a joint identity. Instead of people feeling like they gotta ask Alice or Bob about the right thing to do, they can refer to the book and be guided toward it.
Microsofts ultimate Gamepad for 150$
I like this idea. I think I'll try this out for all those random dumb websites that want passwords.

You linked to the old version btw. Updated version is here: http://angel.net/~nic/passwdlet.domain.html
Mr. kbenson, you and many of your kind are trying to foist on the idea that people filtering the information companies give to them are doing something immoral. I do not think even you believe that, but perhaps there is a profit-seeking based incentive to seed a feeling of guilt in the people who avoid ads, or perhaps to make yourself feel good by verbalizing your frustration with decreasing profits from online ads. Whichever the motivation for such church-like patronizing and false analogies, private profit from ads is not and will not be more important than fundamental freedoms of people to read only that which they want. My recommendation to you is to stop crying and seeking the ones guilty for the decreasing profits from online ads and think of some different business model that instead of bothering people with ads, does something good for them.
uBlock has a big on/off button. You can just leave it off until you want it on.
'Expose different viewpoints' seems along the lines of the 'I'm hoping to encourage a debate' line that people taking on 'hot-take' positions like to hide behind.

'I have a masters degree' is, of course, ad-hominem fallacy.

It's great that you yourself 'feel' safe but the position you are advocating is not well reasoned and reckless to promote to others.
Yet another team that seems to think the programmers should QA their own code. I learned that lesson 30 years ago, good QA people are worth their weight in gold. QA is a set of skills separate from the skills that programmers have; expecting a programmer to be good at both is asking for trouble. I never would hire an architect to wield a hammer and saw. You can't be good at everything.
Yes and yes, so i guess that makes at least some sense :)

And yes, i've seen the same behavior - getting redirected on first visit and not on the second, so i guess you're right regarding a weird auto-translation bug...
A "show more" button that appended another row or two would be much better.
Podcast: From Cars to Code with Angel Jose
I'm still not clear. XTS doesn't have an IV; it has a tweak key. It's deterministic (which also means it can leak data, ECB-style, across successive encryptions of the same sector). The tweak key is simply the product of the encrypted sector number multiplied by a polynomial; I don't understand what tricks you can play with it.

The fundamental attack you seem to be describing --- that an attacker can rewrite the contents of the disk --- applies to practically every sector-level cryptosystem; none of them are authenticated. But XTS can't productively use "patterns" of disk blocks, unless there's a clever attack I don't know about (hence me asking).
There actually might be a difference in favor of LP. LastPass knows, semantically, what encrypted password archives are, and can monitor for statistically unusual traffic related to an attacker downloading them.

Google has no no way to know, if 10k people are storing their encrypted keepassx archives in gdrive, and if those 10k archives are accessed in rapid succession, that it's an attack. It's lost in the noise of gdrive traffic.
> loader indicator

There is nothing with Ajax that does that automatically or even by default.
Having spent a lot of my youth in Louisville, I admire both men. For those that don't know, both Hunter and Ali come from Louisville. Both men had troubled youth, but that's about where the similarities end.

Hunter was forced into the military to avoid jail time and, after that, went to Columbia (TIL, apparently, he only audited classes), and to write Hell's Angels, etc.

Ali (Cassius Clay) was several years younger than Hunter, and grew up half a city away (https://goo.gl/maps/f76SJ). But, under similar, difficult circumstances. Found boxing at 12yo because he wanted to beat up a kid for stealing his bike.

I know that Hunter S. Thompson was a big fan of boxing (and football), and that he had stated Ali as a hero of his. But, I feel that it's sad and unfortunate to read something like this. It seems that Hunter spent a lot of his middle years floating in a pool. It really wasn't until they made the movie Fear and Loathing that he had a resurgence.

I can only look backwards through documentaries and commentary, but I find it quite surprising that the two only met once for an interview. Hunter was embarrassed that Ali didn't know who he was; http://bloguin.com/queensberryrules/2014-articles/when-hunte.... It just seems odd that these two people that were hugely influential (Ali more-so) during the 60s and 70s for civil rights and similar political beliefs, that they never actually met one another.
It surprised me that Google didn't see this as 2 to the 57,885,161, because the Wikipedia page from which the number was gleaned used a <sup> tag to describe the exponent value.

To be fair, it does place the full excerpt below the answer.
Where do you get your 40+ feet figure from?

If each side can move the tunnel 10 feet relative to itself without breaking, you should theoretically be able to handle up to a 20 foot slip between plates. One side bends one away, the other the other way. The pylons move 20 feet relative to each other, and only 10 feet relative to the tube.

That said, my information is based on the blueprint that Elon published and I already linked to. It includes graphs showing numerical simulations of how their design is supposed to respond to earthquakes. If you have further questions, you can start with that, then download the designs that they and others have produced and do your own work.

I am not an engineer. However I do know that engineers have done exactly what I suggested and come to the conclusion that his design is feasible.
URGENT: DAYS LEFT TO SIGN FOR $15 – Fight for $15
Can you outline more specifically what that means? Just dismiss and lay off the NSA? What about the CIA? How about the DIA? What prevents DEA/ATF from taking up the reins? What about the FBI?

Welcome to government, the only ecosystem designed to kill productivity for fear of tyranny.
Can a mod change the URL to https://blog.lastpass.com/2015/06/lastpass-security-notice.h... . I found the original source. Thanks.
While it's worth noting Hari's previous problems, deciding to simply not give him the time of day is black-and-white thinking. His current work would better be judged on its own merit (with an eye to possible issues based on the author's previous issues) and not summarily dismissed.
Thanks!. Most of the work, like in lot of opensource projects, was the product of a big team of great people, from which I learned a lot and I owe them a big part of shaping my career.

Completely different world!. Instant Messaging is now done in big part from the smartphone, or from a webpage while visiting a social network or checking email.
thank god they removed it!
I mean less about the building and more about the rental regulation. In SF, you are either regulated or you aren't, and the rules are pretty simple (if your unit is older than 1996 and is not the only unit your landlord owns, you have rent control).
Slightly off-topic: am I naive to believe that my personal system of password management is just about as good something like 1Password or LastPass? Hear me out. My passwords are generated as follows:

[Low|Med|Hi] + [Key] + [Initials] + [Number]

Low|Med|High = One of three keys based on how sensitive the site is. High: banking / work / email, Low: I don't trust the site, Med: other.

Key = Random string that only I know, with the most important accounts having a unique string

Initials = Initials of site name based on domain name + TLD, with the initials moved up x letters (for example, capitalone.com -> COC -> DPD)

Number = One of three random sets of numbers I use. Sometimes I forget which number I use for each site, but I can figure it out after a few incorrect attempts.

This means a unique password for every site generated by a system that only I know with no central storage except my brain.

What is wrong with this? What would be the advantage to using 1Password / LastPass over this?
RetroShare 0.6.0's free C++,QT compiled cross-platform Windows,Linux,Arm,Mac private p2p sharing program that uses friend to friend public/private encrypted keys is one of the finest,encrypted,fastest and secure decentralized global networks you'll find. Retroshare 0.6.0 lets you share all manner of files, msgs, chats, channel content and forums securely and if you wish anonymously with your friends and friends-friends-friends, using 4096bit encrypted keys to authenticate peers and TLSv1.2 to encrypt all online communications. This revolutionary decentralized platform paves the way for the future regardless if you share massive file collections, music, images, internal automatically encrypted messaging, or anonymous chats and forum content.
Has anyone used IronWorker in production? It seems to be more flexible than AWS Lambda. http://blog.iron.io/2015/01/aws-lambda-vs-ironworker.html
This site used to be called Startup News. Using a name that is different from the URL means you can rename it without needing to change the web address.
"Only slightly more seriously, it would be very impressive
if they could pull it off, but having seen the deployment of
Iridium (66), GPS (32), GLONASS (24) , and Galileo (30) it
doesn't seem like we have a non-nation state that is up to
the challenge of putting 600(!) satellites into orbit all at
once."

It looks like these satellites will be a lot smaller than Iridium ones -- from the BBC article, about 150 kg each, vs. ~689 kg [0] for Iridiums. The total orbiting mass is only twice that of the Iridium constellation.

600 * 150 kg = 90,000 kg

66 * 689 kg = 45,474 kg

Naively, they could lift everything in maybe five Ariane V (ECA) launches, for ~$1 billion at market pricing [1]. That'd mean packing over a hundred microsats in one payload fairing. I'm not sure how close this is to reality: I'd guess there'd need to be a lot of structure overhead too.

[0] https://en.wikipedia.org/wiki/Iridium_satellite_constellatio...

[1] http://www.spaceflight101.com/ariane-5-eca.html

($200 MM/launch, 21,000 kg payload to LEO)
What do you mean news/classifieds have next to no digital value? They're a delivery vehicle for ads, just like TV. They just can't be sold as their own thing. Then again, Craigslist makes a good chunk of its money by charging for classifieds:

https://www.craigslist.org/about/help/posting_fees
I just call it as I see it. And in every American city I have been in in the past ten years, I would say a good 95% of cyclists who come to a stop-sign intersection just run right through the stop sign never slowing down, regardless of whether there are cars at the intersection or not. Don't take my word for it, go out and watch. Go to any intersection in any city. Wait for a cyclist. Bingo. Next cyclist. Bingo. Try it. Basically almost all cyclists run stop signs. There is no red herring. It's the culture.
The President managed to authorize a taskforce of 500 software engineers without much fuss, I don't see your point here.

But even assuming your premise, First Ladies are very often tasked with lip service public good projects, it probably wouldn't hurt to add some Presidential oomph to the existing forays. That seems like very easy low hanging fruit.
Love the combined simplicity and expressiveness!
A few options - Codeship (https://blog.codeship.com/integrating-aws-lambda-with-codesh...), popular community extensions such as Kappa (https://github.com/garnaat/kappa) Jenkins plugins (https://wiki.jenkins-ci.org/display/JENKINS/AWS+Lambda+Plugi...) and Grunt plugins (https://github.com/Tim-B/grunt-aws-lambda/commits/master/pac...) that you can use as part of your CI/CD pipelines. There was even recent blogpost about using Lambda to deploy Lambda functions :) (https://aws.amazon.com/blogs/compute/new-deployment-options-...). Would be great to hear what else you would like to see.
Simulatedevolution.com is actualy my site and I wrote this program based on that article. In 2009 I was actually contacted by Mike Palmiter who the original article was all about. He has since retired and is still working on related projects such as one called “Darwin’s Aquarium”. -John Nash
Can you do this? Our cloud servers resize up and down in realtime
Well for one the satellites wouldn't have enough fuel on board to do orbital plane changes, to at a minimum its going to be 20 launches if they want to hit 20 different orbital planes. I have yet to find out how they expect to do station keeping with that low mass.
> I would encourage you to consider whether there may be more useful primitives that the Erlang VM could support for this case, if you aren't doing that already

It is a chicken-egg issue though. Before proposing anything like this to the OTP team, I need to prove it is useful and have folks build something relevant with it. So I need to make the best with the abstractions we have today and then make a case.

For this reason, a lot of the challenge will be in optimizing the "topologies" to avoid copying as much as possible. Data-based algorithms for parallelism (farm, pmap, etc) will likely be more useful and that would be the next milestone.

> Some of this is personal development bias, I have to admit, in that I don't really "believe" in APIs that try to abstract away the difference between local and network traffic.

That's a very good point. I was also warned by Konrad from the Akka team that, if we rely on ack messages for back-pressure, they likely won't work on a distributed setup as messages have no delivery guarantees. This means we wouldn't be able to abstract the network anyway.