skysight-inc/HackerNews huggingface dataset:
Correct me if I'm wrong here, but:

That's assuming the attacker regains control, so you'd have to visit a malicious page every time the attack needs to be re-initiated. EDIT: I'm dumb, somehow I managed to forget mid conversation that this was assuming MitM and not a compromised site. Disregard this point.

Also, while this method can be used for other, static data, pretty much all of the stuff you would want / have access to through doing this will be time-sensitive. Even a straight 72h most "secure" things such as cookies will be changed, forcing a restart of this process. Extending this even longer just gives a bigger window for the cookie/whatever to timeout.

EDIT: though I guess if the cookie you're trying to crack doesn't expire, then this could be an issue. I still think there are vastly easier methods if you can arbitrarily inject into http pages though.
There was a clearly implicit accusation of some sort of misbehavior on the part of Canonical.
IME people don't worry too much about 2FA/really secure passwds until they're protecting something they think is valuable. I didn't 2fa my github account for a long long time, despite the ease of use, until I got added to some big projects.

Likewise, the average bank member is (speculating here) gonna say, "who wants to steal that $75 in my checking account? not worth it". But an account breach could end up costing a lot more than $75, especially to the bank who has to file insurance claims and do the paperwork, and ofc the time lost to the person who only had $75 to begin with.

What I'm trying to say is (I think) that the cost of a bank account breach is hard to measure, because there are a ton of marginal costs associated with it. Locking your credit reports, getting new bank accounts, changing all your autopays, possibly bouncing checks or autopays not going through, filing police reports, filling out claims paperwork, following up on all that, unlocking your credit next time you want to buy a car, etc. Lots and lots of marginal costs in terms of fees and your time.
If it were anarchy, the users could do something against the censoring, monetizing and shadow banning. Reddit is far more authoritarian than most people realize.
I suspect that reddit's goals are much more aggressive than just keeping the lights on. I do think that reddit could quite easily pay for their servers with their current level of monetization.
Working on Umbrella - a free open source mobile app to help journalists, activists and aid workers manage their physical and digital security on the go. http://www.secfirst.org
You trust violence more than mathematical improbability? Okay.
Great response. Do you think there's a way to monetize this proposed solution?
I think there's too much blame being placed on programmatic advertising. That's no excuse for 14MB pages, fixed position ads, trackers pinging the network for a full minute, etc.

There's no inherent reason why so much of the cost of ad networks, tracking (regardless of the arguments about tracking itself), and ad content needs to be born by the user. Better ad stacks should, and probably already do, exist, but it seems like most publishers and ad networks are lazy, incompetent, or both, and with iOS9 they'll soon see that they've shot themselves, and everyone else, in the foot.
I was talking about the safe browsing request. Arguably that's even more important to the average user than TLS safety. MITMs are rare, malware sites are plenty.

I do think that the favicons could just be integrated.

I don't think there's any point minimizing the network in this specific case. "We don't know what data is useful.", sure, but any other data this can be compounded with _already contains the same information_.

Though yes, stuff could change in the future. I can't see how it could change in any way to make this useful, but you're right, this isn't something we can predict. That point is valid.
StarCraft II: Legacy of the Void Beta [Pre-Purchase]
> Second, matching a name with social media is the wrong way to lookup others.

Assuming it /is/: a well known social media site called Facebook already has a space for GPG keys.

That doesn't mean keybase can't succeed and I do wish them luck though. First step: buy keybase.com, because people who don't know what encryption is don't understand .io domain names.
There is no containment. There is a comfy room that the FPHers or the stormfronters can hang out in and pat each other on the backs, and then there are open doors to everyone else's room that they can just walk through and spew their garbage. Removing the walls just makes them less comfortable, it doesn't suddenly release them from a prison.
Darkode, a Huge Darkweb Blackmarket, Has Been Shutdown
It has been fixed. Thank you.
great tips. thanks
>This is simply a reflection of our initial target market and the immediate hiring interests/needs of our partner companies.

I think Ipsin was saying that some people without a college degree do meet the interests and needs of many companies. I'm not sure who your partner companies are or what your target market is though.
From opening an email to being hacked
Yes. I wish they were more like Github or Stripe about disclosing this sort of information.
True, pavlov's comment is about readability, not superficial design.
They should have just sold that stuff to the Feds and helped keep America safe /s
RAM is finite whether you're using it with Redis or Memcached.

Redis provides multiple databases (0-16) for just this situation. Use one db for caching, another for Sidekiq, and another for ad-hoc tasks. Redis can also be configured to evict entries with an expiration first, which means cached data will be cycled through while the important bits linger safely.
Instagram co-founder on search, and co-engineering inside the Facebook empire
Can anyone kindly let me know how did he create those mini videos (or those animated videos that shows steps?

Thanks in advance.
You can encrypt with lots of things, for example

$> keybase encrypt twitter://twitter_id -m 'message'

But there seems to be no way to to it with an email address like this:

$> keybase encrypt email://email@example.org -m 'message'

Or maybe I did not understand something.
well, i thought quite a lot of people here would already know quite a lot of this. thankyou for writing that :) operation northwoods i think is a good documented example of how we are treated. as is the chemical weapons testing your government did on you and probably still does. theres also documented proof of the uk government testing various chemicals out on us lot. these are the kind of people we are dealing with.
What Happens When Warriors, Orcs and Elves Descend on a Pennsylvania Forest
you can hire the best talent in the world of people willing to move to SV, the world is a lot bigger than SV and having worked with excellent developers plenty of times around the world I think if you are hiring only in SV you are definitely limiting yourself also in terms of the perspective individual developers bring to the company.

It is obviously difficult to have a pro-remote company if you hire executives or management that values "face time" above all else, and prefer phone to email/chat, this is why likely it's a lot simpler to start a company fully remote than to change an already existing one.

Given the advantages of cost of labor (you can be a lot more flexible in compensation terms if you don't have to compete with SV salaries), pool of talent and retention advantages (if you have a great remote environment I think it'd be a lot easier to have very low turnover) I am really surprised more companies are not being formed doing this.

But then again as you said a lot of VCs/investors won't touch companies not based in SV so that definitely can be a contributing factor in the low % of fully remote outfits.
Good luck Porter, been awhile since Trumbull. Glad to see you're out here
One reason you're getting downvoted is that the note the parent commenter gave is pretty squarely in Go idiom. Go favors early-exit, and the Go community is unusually strict about idiom.

(I'm pretty well acquainted with this particular issue because my C coding style is strictly anti-early-exit, which drives almost everyone I work with up a wall. I had to unlearn that habit to write idiomatic Go.)
Visualizing modern markets as network maps
This looks great! I love iterm2 and have used it every day for years. My biggest problem is the configuration -- I just wish it had a plain text configuration file that I could keep under version control. I've experimented with using PListBuddy and a git diff driver to keep the plist under version control but it seems unwieldy and I haven't found that approach useful yet.

Also I don't really understand the difference between the main configuration interface (cmd-,) and the "Edit Session..." interface (right click on iterm2 menu). Possibly related, I have a custom command configured in Advanced -> Semantic History but it keeps reverting back to no command and I just don't understand why.

I would love not to have to use a graphical interface to configure it, I would like a plain text file instead. I think I'm being dumb and a couple hours consideration would lead me to understand any issues I'm having but the fact remains that after years of use its configuration is something I find really painful.
https://github.com/actorapp/actor-platform/blob/master/actor...
> Though I was surprised to read that very few people talk to him. I always chat up the taxi or uber or lyft drivers. You will meet the most fascinating of people.

I'm an introvert. I don't particularly want to talk to people. There are times when I'll specifically take the subway, even when a cab would make more sense, just so I can be alone and read a book or listen to a podcast or something.

On my last trip, I took about six rides, and talked to all but one. One conversation was fantastic, one was kinda fun, and the rest were just boring conversations I've already forgotten. And I consider that particular trip, with its ~20% "success" rate an outlier.

There are days where I don't want to meet a fascinating person, but just want to get from point A to point B.
Super cool project! Will definitely see if I can't get something set up at home with this.

I actually recently did my own framework, in connection with my bachelor thesis on IoT and (a little bit) mobile networks, that focused a bit on home automation, but HomeKit is obviously far more polished than what I have[0]. The general field of IoT/M2M is very interesting.

The only gripe I have with it is that it is not open-source, which would definitely be awesome (HomeKit, that is). That said, not being open-source is not going to stop me from not using it.

[0] https://github.com/Tehnix/cred-server
Not really. It seems like the Internet equivalent of burning books. Just because I think the content of the book is awful doesn't mean I'm in favor of book-burning. You might say, "Oh, we'll only burn books that are offensive" — but that is just as true for everyone who has ever burned books. There are many books that actually are awful and not worthy of any respect, but we still look askance at book-burning as a practice.

Dwight Eisenhower initially supported purging communist books. But later, he had a change of heart, telling students:

> Don't join the book burners. Don't think you are going to conceal faults by concealing evidence that they ever existed. Don't be afraid to go in your library and read every book, as long as that document does not offend our own ideas of decency. That should be the only censorship.

> How will we defeat communism unless we know what it is, and what it teaches, and why does it have such an appeal for men, why are so many people swearing allegiance to it? It is almost a religion, albeit one of the nether regions.

> And we have got to fight it with something better, not try to conceal the thinking of our own people. They are part of America. And even if they think ideas that are contrary to ours, their right to say them, their right to record them, and their right to have them at places where they are accessible to others is unquestioned, or it isn't America.
Ruby's case statement
Not at first, but in time almost certainly.
Are you sure they added to it? Even if you got more shares they might be a diluted percentage. "I'm not sure" often means "I've already been screwed and I'm not yet aware of it"... I hope not in your case, but if you don't know the numbers, don't take for granted that they are in your favor (this is the sort of thing you learn from painful experience).
They wouldn't be, but neither is that hate speech limited to the subreddits that are dedicated for it.

I am 100% certain that I could go to the comments of any top post on pics, videos, funny, games and probably a dozen other default subs and find some hate speech with a positive score.

Remove the subreddits that these people call home, and they automatically feel less welcomed on the site.
Redislab putting their latest fund raising of $15m[0] to good use and securing their future.

Good job antirez

[0] http://techcrunch.com/2015/06/25/redis-labs-raises-15m-serie...
Our partner companies are not hiring Jopwell users because of their race, they are using Jopwell as a tool to ensure they have a diverse pool of candidates applying for their roles. They then hire the best candidate, regardless of race, for the job.
It's a matter of tone. Whether you disagree with the Ur-parent's position that Keybase is — or, more accurately, "feels like" — a "hobby" project, the position was presented first as an individual's perspective, and second, was asking for clarification. He (?) wasn't saying, "Keybase is just a hobby project," but rather, "Keybase feels to me like a hobby project. How does something that seems like a hobby project get $10MM in funding?"

Your response was low-brow dismissal, and not of the poster's position (you didn't respond to what they said), but of the poster (again, you talked about the poster, not what they said).

Do you see the difference?
Exact, this is a very simple parsing that works 99% of the time.

As outlied by mattmanser, the standard for non-remote is ONSITE. Which is respected by most of the posters this month.
10 things you could do to pass the time if robots did all of the work
Doesn't this open up a bit of a privacy issue? Couldn't you scrape logged-in data from someone's social media accounts etc? Maybe I'm misinterpreting things...

I could see iOS 9.1 having a permissions dialog for "<app name> wants to access <certain domain list> while you use the app" to prevent that from happening. Until then, I could see this feature being inevitably abused.
We do use Slack and it certainly helps. However, we invariably find that there is a certain inertia to reach out via video among some devs or wait until the person is in office to hash out a problem. It may just be because we don't have anyone 100% remote on the team and hence expectations aren't set. Also, in an open office plan, talking over video at your desk can becoming annoying to the person sitting next to you, which means grabbing a conf room. I'm just saying it depends on the personality of the developer in how she/he handles working with a remote worker.
From what I understand its revenue, not profit.

Uber just adds up the transactions that you've been a part of.

Then they take their 25% fee, then the driver has to subtract whatever they paid in insurance + gas + tolls + maintenance + amenities (food or water). For most (who can't buy a car outright) they have to pay their car loan/lease payments.

Then to really calculate "take home pay", like the rest of us, you have to subtract taxes. Another 25%-35% depending on state+federal tax brackets.

P.S. Hopefully they do their taxes correctly. I imagine if you did it as a "small business" you could subtract all of your expenses first and even subtract depreciation of your capital (depreciation of your car), then do your taxes on the far smaller amount rather than on $50 per hour gross income. Honestly, if they weren't curious enough to educate themselves about their taxes, I don't even know how it would be profitable.
> That's assuming the attacker regains control, so you'd have to visit a malicious page every time the attack needs to be re-initiated.

Every non-HTTPS page can be considered malicious, if the attacker can do a MITM.

Since the attacker can capture the encrypted traffic, he most probably is in the middle and can do a MITM.

Therefore, if you are under this attack, every non-HTTPS page is malicious.
So how do you separate out how much they fucked up and how much they got eaten alive by Facebook?
Its fun when they test the sirens a couple times a year ...
That's true, but it does make it clearer that they aren't welcome on the site. If Reddit deleted the subs that I visit and care about, I'd definitely feel less like giving them pageviews.
No, could you elaborate on this "back door"?
Honestly I'm a beginner myself. Other then google search that you can do yourself, here's what might be helpful:

https://triangleinequality.wordpress.com/2014/08/12/theano-a...
Criticising the NSA for spying on the wrong targets makes as little sense as criticising soldiers because your country is at war with the wrong enemy.
That's one potential problem, yes.

For your solution of running through the same mapping library on both ends, that works, but it transforms the scripting language into something dramatically different from writing commands on the command line. The beauty of shell scripting (and, I would argue, the only thing that even makes it worth doing at all) is that you write the same commands in the script that you would write interactively.
> It breaks down as soon as you reach a single layer of nesting

Then restrict it to a single nesting level, which aligns with the idea of making easy things easy (i.e. single-level precedence), and harder things possible (i.e. parens for more than two levels).
Semi-related, this reminds me of a friend-of-a-friend at the time who was in Iraq. He also had a gift for both writing and photography, though I don't think he ever achieved success of either. Here's a rather horrific photographic post from the time about the results of some of the ammunition used: http://lafinjack.livejournal.com/41715.html

His blog from that time period is both fascinating and horrifying in both pictures and stories.
Canadian postal codes are both letters+numbers as well (formatted AxByCz, where A,B,C are letters, x,y,z are numbers), so UK seems like it would be safe.

Too many or few characters, like you point out as the case for Taiwan, would be the problem.
It sounds that content creators are going to be funneled through walled gardens to survive and that I'm going to be required to use those services to get content. Otherwise it seems that it's going to be more expensive to go do it on your own and not go through Apple or Facebook.
Elixir all the way. It's going to be a big deal.

I've been doing Ruby for over 10 years. Never seen anything like Elixir.

Rust, Haskell, Clojure will have their niches too. But Elixir will probably take over back-end web development.
Ok, zero coverage for out of network health care that’s a great way to end up bankrupt if you have an accident on vacation. Add in the 6,400$ deductible it's really not a good deal IMO, but I can see why someone might chose it.
Good luck guys! Think this is a step in the right direction.
Why are they illegal?

Revenge porn specifically?

(Follow the train of thought to its conclusion).
I'd be interested in seeings popular sites that don't use caching. Can you provide examples?
The question is do you think it could have been done better given that they support multiple OS/UI, etc...
Some strength gains from strength training are a result of more neurons making connections from the motor center of the brain to the muscle tissue. Thinking about moving a muscle might make more neurons form to the muscle, making more of them contract when it does move.
LOL, congress doesn't listen because it isn't in their interest to listen. Citizens without money are nobodies, congress fundraise 24/7, that's what they care about, saying anything else is either ignorant or maleficent.

What a complete waste of time, from idea to development to posting and commenting, truth sucks but congress does not care about your opinion unless it comes attached to a big check.
Note that the "malicious page" could also be embedded / injected in another page. Basically any non-https page opened over public WiFi would be enough. And conveniently users on public wifi are also the easiest to sniff, so the group on which breaking encryption makes most sense.
> Congressional staff already have plenty of tools for separating those form letters from real, constituent-written letters. I can dig up their names, but they're built by high-level contractors.

Intranet Quorum. Last updated in about 1996. It's probably what 95% of staff uses, and it's woefully inadequate. Clearly you talked to zero congressional staffers in the creation of this software. Which is a shame. Because if you had, your software would be effective.

Heck, even if you'd read one of the dozens of reports from the Congressional Management Foundation _FROM 10 YEARS AGO_ http://www.congressfoundation.org/index.php?option=com_conte... you could spot the problem here.

Whether advocacy organizations "send" the emails or whether they're sent by an individual has no bearing on either the legitimacy of the message, or whether or not they will remain unread.

I'd encourage you to hop on a plane, and go visit some congressional staffers and ask them how they'd like to receive your messages. Then build a tool starting from there. Like it or not, they're the customer.
That works, but it also means that non-English speakers have to learn everything twice.
> I am 100% certain that I could go to the comments of any top post on pics, videos, funny, games and probably a dozen other default subs and find some hate speech with a positive score.

You're saying you could go look for hate speech and find it. That doesn't seem all that troubling to me. Don't go look for it, and you will find it much less frequently.
As someone who has crushed a hornet's nest in his hand (when he was about 10), and well remembers the 36 stings afterwards (something of a record in these parts) while running away bravely, I'm not sure that's the analogy they should have chosen.
That's actually an interesting point. Indeed, how works internalization for Irish, for example? I mean some big international app, like Windows or something. I don't think it's trivial to customize some internal "yes/no" dialog in Windows to use different words for every question, but only for some languages.