skysight-inc/HackerNews huggingface dataset:
Ask HN: Recommend a secure password manager
This week alone we've been discussing:

* KeePass – questionable security

https://news.ycombinator.com/item?id=9727297

* LastPass Security Notice

https://news.ycombinator.com/item?id=9721212

I currently use KeePassX which is synced on my Dropbox and also have a key file on my USB.

From your experience, which password manager is the good choice? And what syncing, additional security layers (like key files, YubiKey...) could be used to gain maximum protection of the sensitive information?
Yes, because otherwise it separates. :p
you're right. in contrast to my examples wikipedia's trans fat article says,

>Because of these facts and concerns, the NAS has concluded there is no safe level of trans fat consumption. There is no adequate level, recommended daily amount or tolerable upper limit for trans fats. This is because any incremental increase in trans fat intake increases the risk of coronary heart disease.

maybe a better example than the ones I listed (for which as you point out there are safe levels of consumption), would be smoking tobacco, which I think matches the above description and has no safe level. But it is not banned outright. (at least not yet.)
By convention, a "steak" is a uniform piece of beef from a single primal muscle, cut in such a way as to make it cookable quickly by direct heat. That's what "steak" means: beef, one coherent piece of it, cooked by direct heat. "Steak" does not necessarily refer to a 1.5lb porterhouse on the bone.

So in that sense, "steak" is no different than any other protein you'd put in a sandwich. We don't call chicken breast cutlets "chicken steaks", but we could (indeed, that's how we sometimes refer to large slabs of tuna).

Objecting to "steak sandwiches" is therefore a little odd. If anything, a steak sandwich is bound to be healthier than a burger; a restaurant burger is typically 20% fat, while even a ribeye --- which is rarely what's in a steak sandwich --- can be below that number.

A steak sandwich also shouldn't be anything close to 1000 calories. There are ~300 calories in a typical grilled cheese sandwich. Take that as the basis for "ambient sandwich calories" and add 4oz of skirt steak; you're now at 500 calories, for which is essentially a fried sandwich.

Of course, you're probably much better off eating 4oz of skirt steak (protein, fat calories) than a stroopwafel (refined sugar, carbs).
check out ubuntu phones - ubuntu.com/phone - we run a full linux on a phone.

Just need a usb breakout cable for analog i/o
Red is not compatible with Rebol3, due in part to the fact that development on Red started before Rebol3 was open-sourced. The binaries for Rebol3 at the time were too unstable, so the older and much more solid Rebol2 was chosen. There is a major undertaking underway currently though to refactor and fix large portions of Rebol3's core code. Which will then be rolled into the community edition and also hopefully the corporate sponsored Atronix fork. Also there is some talk going around about packaging and integrating TinyCC with Rebol3. IMO both projects show alot of promise, and have many progressive ideas.
Before there were any comments I thought about typing roughly the same sentiment. I only spent a few hours in Macaw before realizing it wouldn't actually help me get work done and figured I'd take another look when they got around to implementing more than the basics. Based on my experience I also took this announcement as essentially spinning off the useful parts (which regular Macaw users have probably been looking forward to) into a separate product. They have a trial which I recommend, since you can get a feel for the product pretty quickly now that it's actually available. As for what comes next, I'll evaluate it when it's an actual piece of software.
Would it be a good idea to put "I'm looking for a gig now" if you are a permanent employee? What if your boss sees it?
You're probably talking about really old versions of applications. I've been using SNI for half a decade without any issues.

Anything so old that does not support SNI probably still uses SSLv3, or maybe even SSLv2, so you really should be upgrading that ASAP, rather than keep supporting it.
Let's see if the penalties are as severe when a major sports team is caught hacking as opposed when a nerdy computer guy is caught hacking.
It will still run on a 64-bit machine just fine though.
You're probably thinking of SymbOS?

http://www.cpcwiki.eu/index.php/SymbOS

Screenshot here:

http://www.cpcwiki.eu/imgs/7/73/Symbos21cpc.gif
> Any advice from the vampires like that is a good sign you should be doing the polar opposite.

Not always. They are not all out for your blood.
> Revocation costs money[...]

I think it's quite understandable that they charge for things that cost them money, but keep the rest free. You can't really expect for them to give out for free something that has a cost for them.
I agree. The problem for me is that writing the same front-end stuff that takes an expert an hour can take me half a day googling and debugging. And it's not fun at all for me.

And frameworks do expire quickly. Therefore it's hard to be determined to devote time to learn any of them seriously. And plain old DOM manipulation and CSS clearly cannot beat the development speed of modern frameworks.
Thoughts on Swift 2 Errors
Links to related threads:

* KeePass – questionable security

https://news.ycombinator.com/item?id=9727297

* LastPass Security Notice

https://news.ycombinator.com/item?id=9721212
Why even have netfilter ("iptables") loaded in the kernel at all? Won't those two rules still have to be evaluated for each packet even if the rules are saying not to do anything?

There are additional things at play here, too, including what the NIC driver's strategy for interrupt generation is and how interrupts are balanced across the available cores, whether there are cores dedicated to interrupt handling and otherwise isolated from the I/O scheduler, various sysctl settings, etc.

There's further gains here if you want to get really into it.
You should! I imagine it'd be cheaper than a nice modern gaming rig, and quite a lot more fun (IMO). Developing for those old systems is also a joy.
I believe it's because Xen adds overhead[0] in its process of working around the need for hardware virtualisation support[1], whereas KVM has much less overhead, but requires hardware support to run efficiently.

[0]: http://dtrace.org/blogs/brendan/2013/01/11/virtualization-pe...

[1]: Xen was built before such support was widely adopted.
You're correct, sorry. The Mozilla FAQ says the board offered him some other C-level position.

Whether this was the right decision for Mozilla is still an orthogonal question from whether he unjustly lost his livelihood. If bowing to public pressure is bad for corporate health, let's talk about that, and avoid dragging the emotional "but he lost his job!" into it.
Firefox does auto-download an OpenH264 binary on systems without a supported H.264 decoder library (if this feature is enabled, which it isn't currently in Debian's iceweasel packages). But note that OpenH264 is free software available under the BSD license:

https://github.com/cisco/openh264/

Firefox downloads binaries from Cisco because Cisco can legally distribute this software in binary form in countries where H.264 patents apply, while Mozilla can't do so directly.

There was also a plan discussed to make it easy to automatically verify that the binary corresponds with the published source code, but as far as I know that work hasn't been done yet:

https://github.com/cisco/openh264/issues/893

Also, if you have the correct gstreamer H.264 plugin installed, Firefox should use that instead of downloading OpenH264.
I didn't sell my attention so readily. I didn't sign any contract. My attention is constantly being asked for. It's a sellers market here, sorry. I choose to most readily give attention as a gift to those I like most and who respect my attention most. Wikipedia has no ads.

There are cases where the business model of ads has near monopoly. I use Pump.io but most people and connections are on Facebook / Twitter etc. — it's completely unacceptable for those entities to demand that they have power over censoring my access to interact with my friends who those companies have captured into their system. I don't want Facebook or Twitter at all, I want to interact with other regular people in the world. I'd prefer to do it outside those platforms and do when I can. Blocking ads on those sites is perfectly reasonable, a tiny defense against powerful offensive entities — this is not an exchange between two parties with equal power making an agreement.

Meanwhile, efforts like https://snowdrift.coop are in the works to fund creative work from reasonable and respectful people.
Sadly stash really isn't that great compared to GitHub or GitLab IMHO
At what point do we stop trying to prevent unpreventable illegal activity, and try to put systems in place for dealing with its undeniable existence?

I'm not certain how such systems would look in this case (everybody wears Guy Fawkes masks in public?), but this debate reminds me of prohibition vs. harm reduction in the War on [People Using] Drugs.
MX3D to 3D Print Bridge in Mid-Air Over Amsterdam Canal
I've thought it was paradoxical that infinitely long curves could have finite integrals ever since I first took calculus. For example, the integral of 1/x is |ln x|.

I wonder why it takes three dimensions before people start getting upset.
Neil Gaiman’s American Gods to Get a Series on Starz
What if the company is a nonprofit, such as University College London or the Mozilla foundation?
Fluid Injection's Role in Man-Made Earthquakes Revealed
Oh, and if you're into Forth, check out:

http://emucation.com/dl-rom-20511-group-6310.htm

... it's a Forth implementation for the CPC. I haven't tried it myself though.
Well, the GPL allows the publication of iOS apps. Apple is the one who doesn't allow GPL to be included in the app store.

You might as well see a restaurant that refuses to serve people who wear headscarves or something and then say that headscarves restrict your dining options. It's completely backward attribution of the problem.
Do the math: how deep is the atmosphere, and how much of it does wind power generation affect? Most likely substantially less than skyscrapers alone, let alone the rest of cities.
What you say is not the gist of the article nor how Obama, supposedly, recruited them.
Yeah, it's terrible.

You can't give read only Oauth access to private repos....it has to be read/write. Which means if you want to use online CI tools with those private repos....you've got to hope they don't either turn malicious, or they get hacked and have their keys copied.
Russia's secret space shuttles have been sitting in plain sight for 22 years
This article should be titled "The Challenges of Gender-Neutral Language on the Internet". There's nothing in it about concealing any other kind of identity information.
> It is the result of trillions of hours of R&D over tens of thousands of years.

Wow, I did not know that Ars was so much into hyperbole. That claim is just ridiculous.
When Do You Sell Out of a Long Term Investment?
You can use GPL alongside any other license at all, including proprietary. You have zero obligations under GPL for whatever you want to do with software privately. The only obligations relate to keeping the terms for others when you distribute the software to them.
Five Young Female WWDC Scholarship Winners
I had a problem where fibers was working on v0.12.3 with two applications, and when I deployed a third one with the regular "npm install && forever start" deal I got a "package did not self-register" issue that was only solved by rolling back to v0.10.36.
This looks great: simple yet powerful. I'm working a lot with Kubernetes, and you don't actually need to run an overlay network on AWS (or GCE). On AWS, there's some VPC magic that surprised me when I first saw it! But I believe that's beside the point; it's not about ECS vs Kubernetes, it is about what we can build on top.

In particular, I think the idea of embedding a Procfile in a Docker image is really clever; it neatly solves the problem of how to distribute the metadata about how to run an image.
> These guys will be fired (if they haven't already) and there will be fines. Nothing too crazy will happen.

By the letter of the law, this is a crime. You may be correct, but something substantially more could happen.
You could, if you wanted to. He and his consiglieri could too, if he wanted to.

The obstacle is not the means, it is the end. He likes the Surveillance State.
Neither will the stock market, Bloomberg.
I'm now imagining the Monsanto approach getting more and more constrained at each stage. Meaning, phone screen is subject to least scrutiny and one becomes more and more scrutinized as the interview proceeds. This doesn't sound bad at all. I may be biased, I like that company.
>I don't think it's "political correctness" to prefer not to be verbally abused.

Okay? And? Nobody said that. I was replying to someone thinking we should have a more 'politically correct' open source face.

Please try and understand what is being said before replying.
The public is better off with reasonable restrictions on the mass collection of data. It is a utilitarian solution. What grounds are there to require wearing a seatbelt when driving a car?
> When in the store holding the fruit prior to paying, is equivalent to the point you've retrieved content but have not yet viewed it.

That's not correct. Retrieving content over the Internet consists of explicitly requesting a resource and the server explicitly returning the resource. This isn't some technicality. It's how computer networks are deliberately designed. There are plenty of ways to control access to a resource if the content owner so desires.

If you go into a store, ask the store owner if you can take the fruit without paying, and the store owner obliges, then I think it's acceptable to do so.
I couldn't agree more. I would love to see a program that would actually compete with YC. They're pretty much on their own ahead of the pack and a non-competitive business is never a good thing.
Who are the companies that are pushing this? The article, surprisingly, doesn't say.
Now we just need branch restricted keys & keys that aren't allowed to force push (both of these would make me feel a lot better about using certain 3rd party automation in combination with my github repos).

Not that I really expect that to happen anytime soon, I believe others have been asking for the above for quite some time.
"That even works for someone who already has a job, because they can do it in the evening/weekends"

That assumes they're allowed to work on the side as part of their employment contract.
Except for material that literally breaks the law, I tend to favor unfiltered free speech. One exception: sometimes people leave comments on my blog that are not about my post, but rather, links to their products, services, etc. I don't accept those. I don't feel like I need to support other people's free speech in these cases, on my blog.

I may be old fashioned (I have been using the Internet since about 1982), but I really think everyone should have their own web site and/or blog to post their own stuff on.
From California to New York, Cell Phone Location Records Are Private
It does have a mode that allows you to avoid clipboard sniffers if the program you are targeting supports it.

However most attack vectors on the local machine can usually get a hold of both keyboard and clipboard data making it impossible to prevent sniffing, but that does assume a sophisticated sniffer.
16 million tons annually
Federal Circuit Strikes Its Own Blow Against Overbroad Software Patents
Sapeco – the subtle flavouring of Meta Mate
Why in the world is this getting downvoted?
I'd assume not -- because la vache qui rit is sort of the French version of American cheese (a factory-produced cheese-based product, not an actual cheese), so it's not really the sort of thing they'd want to be associated with.

The name is ringing a vague bell -- maybe there's a childrens' story about a talking hive? No idea, but a quick google didn't find the answer either, so I can't say for sure.
The first one is KeePass2.

KeePassX is still good. https://github.com/keepassx/keepassx
Good guess: http://thingsee.com/home#join-beta
Why is it important not to pick favorites? Are they trying to avoid killing companies they thought were bad but end up good later on?
My eyes have been opened - I tried 1Password and I'm never going back to LastPass. I'm yet to find a single thing LastPass is better at.
We built Thingsee One (http://www.thingsee.com)
That's the typical attitude on communities like HN re sports. Even though the computers may contain trade secrets worth millions (for instance, trade discussions), it's worthless because it's a game. However, if their Github was hacked and someone stole the source for their Rails/Bootstrap startup that's an AirBnB for Umbrellas, it'd be the crime of the century.
Have we heard yet when to expect the first merged release? I haven't found anywhere that its been stated.
Please tell the same to the fossil fuel advocates who constantly shout that shifting our dependence on feeding their wallets will wreck the economy (when many argue that it will actually cost very little, and for many will be net positive).
> I agree with you that they're a private company so they can do what they want with their business–I actually think private entities don't have enough rights on that front in many regards–but that doesn't mean that it isn't a conversation worth having, and or that they aren't unregulated entities–there are legal limits to what stores can do in their relationships with customers, how is this any different?

Well, they are people. The only distinction is they have no voting rights in the elections.

> And walking in doesn't give implicit permission that I agree for them to store, analyze, sell, leak, publish or otherwise use that data however they please, in perpetuity.

The pharmacy counter is guarded by HIPAA and the payment done with credit card or debit card is protected by agreements from PCI DSS. The last catch-all is whatever the company's privacy policy is. No privacy policy = no FTC violation of privacy policy.

Further south of where I live, there's a sex toy shop with the following: http://www.covenanteyes.com/2009/08/26/truckers-pictures-tak...

The website's down, but they are still there, taking videos and photos of all who arrive. Completely legal.

But that's why I wrote uWHo. It's not hard. And I did so to push the envelope. People have chided me, and all I can say is look here: https://maps.google.com/locationhistory/b/0 and https://maps.google.com/locationhistory/b/0

> Are they allowed to disclose my presence to law enforcement without a warrant? Can they tell my health insurance provider that I spent an unusually long amount of time in the dessert aisle?

Can you do those things?

If so, why can't they?
Lateral recording was a patent workaround. Thomas Edison had patented vertical recording and was not interested in licensing it to anyone else, so Berliner used the noisier, but available, lateral technique.
Funny, I was just watching this last night. I'm in awe of the Applied Science guy, and am really grateful for the information he's shared.

Having said that, I was shocked to see his thermite BBQ video. I don't know whether the people in that video realize how close they came to being maimed.
Web+proxy+addon
Me using an ad blocker on my computer is in no way equivalent to me reposting that content, and trying to claim it is causes me to lose respect for the person who holds that opinion.

I get the tragedy of the commons, but far as I'm concerned the impact on content producers is not my problem, the abusive ads they used to employ are. I now have protections against such abuse and I will not feel sorry for them for it.

They chose to use abusive ads. They made their bed, now they get to sleep in it.
DuckDuckGo Quack & Hack – Los Angeles
Read the comments to understand the title
Relevant, but it's not hedge fund money. It's private equity & venture capital money, which is backed by large institutional investors like retirement plans. Hedge funds are dying a slow death.
This is about right. A lot of the performance seems to be coming from lower hypervisor CPU overhead and better I/O virtualization with virtio.
Amazing that so much attention is given to the NSA here... To me a more interesting question is how will this impact keyword data that's pasted through the referring URL? Will we be losing bing.com as a referrer on iOS similar to google.com?
It's not hyperbole but you could probably say the same about any modern computing device. Think about all the hours spent by the countless engineers designing all the individual components in a modern laptop. Now think about all the hours spent developing / iterating on previous versions of those components to get them to the point they are now.

It's very impressive.
I was just lamenting about this not existing and how useful it would be. Woot!
> It's hard for me to really tell which is the greatest.

I think you are getting mired in concretes and missing the forest for the trees. Moreover, I don't know how old you are but I suspect you are too young to realize how the world worked prior to the internet. It is true that "it wasn't until the 1800s that the newspaper in the modern sense it came about" but this is irrelevant to my point. The modern form of the newspapers was the endpoint of a long consolidation -- ripples from the invention of the printing press. Nevertheless the modern form survived for over 100 years.

Once the social role of newspapers was established it was impossible to supplant them prior to the internet. The New York Times (primarily) really replaced the Catholic Church as the cultural maypole. Moreover, if you were even alive in the 60's and 70's you would know that all the major TV networks took their lead from the NYT, they were followers. Old habit die hard so TV continues to follow in the internet age (partly because TV is now just entertainment not a major cultural influence). I think we agree TV was a major technological creation and certainly changed society but it did not challenge the newspapers for social power and influence nor change the power structures of society like the printing press or the internet. Today the NYT is dead as a cultural institution and something WILL take its place but I don't think anyone really knows what that will be.

In any event, my point is obvious to me but won't be obvious to everyone until 100 years out which is the nature of a revolution of this scale.
https://github.com/atom/atom/issues/7311

Thanks in turn. :)
Actually, aerodynamics are really important for buildings, especially tall ones. https://en.wikipedia.org/wiki/Wind_engineering

(OK, you were probably being sarcastic! But wind engineering is cool!)
The attraction is having one editor on all the platforms which developers use (this is one of the few market niches where the users are seriously split between Windows, Mac and Linux). That means it can always be installed no matter what platform you're on, and justifies more effort than would be possible on any one platform, which may cover only a third or a quarter of the market. Also, I wouldn't say there's a clear distinction between an IDE and an editor. People want a modular program, which starts simple, and can be upgraded when the upgrade becomes useful or necessary.
looks awesome, thanks for the link!
Leaked images of blackberry oslo
Hexapod Project – Inverse Kinematics
I do the same and also recommend this approach.