skysight-inc/HackerNews huggingface dataset:
What makes you think they’d get any kind of cooperation or assistance from the ECB? They’ve gotten nothing but overt hostility from the ECB for 6 months.

Your link simplifies to an extreme, hand-waving away all the difficult parts of implementing the plan (e.g. how to keep the banks open, how to keep the government functioning, what the response would be of the IMF and ECB, how to prevent capital from immediately fleeing en masse, whether Greece actually has capacity to print and distribute drachmas, etc.). Its suggested approach might or might not work out, but it definitely would not be any kind of smooth ride.

Perhaps he was just overly optimistic in the wake of the referendum No vote. His prediction – “it’s likely the institutions will seek a quick compromise to avoid serious damage to themselves and the Euro” – turned out to be fairly inaccurate. Instead they refused to compromise and in fact made even stronger demands than they had before.
>> Daniel Kahneman, the only non-economist to be awarded the Nobel Prize in economics

John Nash (mathematician) also won the econ Nobel
You find the 'hottest' code (usually a loop, the code executed most) and examine very carefully the generated assembly for that and how it can be made more CPU/JIT/VM-friendly.

This is an optimisation you perform when a small amount of code is consuming the overwhelming majority of your software's execution time (code very commonly has this property, until it is profiled and optimised).

In addition, this case is for a high speed networking library, where every CPU cycle counts.
> That's not true, and one of your organs... ...beards... ...will let you know after a bit.

Hahaha, I lost it at this one. Thanks for the laugh!
As all central banks in the Eurozone, the Bank of Greece is not government-controlled, but independant.
Interesting stuff! I enjoy watching movies with friends at the cinema hall together and discuss about the movies soon after. Recently when I made a decision to move abroad, I was wondering if there was a feature that would give us a similar experience of watching a movie together.

I was thinking of using Skype screen-sharing with friends, where one user plays the movie and acts as the movie-host taking control of the pause/play, seeking controls and others watching the movie on Skype via the host's screen. Doing this provides us with the option of chatting real-time about the movie too - like how we'd do when seated next to each other in the cinema hall. The issue with this is that it would take up a lot of bandwidth to stream a movie and then share it with others simultaneously.

This - Showgoers - claims to solve many of these issues, so I'd definitely give it a try. One main downside is that Netflix still isn't available for users in my home-country India. And with limited movie-collections on Netflix and the other on-demand video services, I'd almost-never again be able to get the experience of watching a 'newly-released' movie at the cinema hall with a bunch of close friends.
> Steam accepted blank recovery codes for password resets

Sample buggy code (that I just made up):

(user_token is user supplied token, token is the correct token)

for(i = 0; i < strlen(user_token); i++) {
if(user_token[i] != token[i]) return false;
}
return true;

If code is blank this will falsely return true. This is also subject to truncation attacks.

I'm trying to think of a bug where blank fails, but truncated versions do not.
I'd expect most software uninstallers to do the same thing. That's why we should use package managers instead of letting users choose where to put things (or fully encapsulated app objects rather than using installers at all).
This is the major signal I've been waiting for ... Apple is losing its cachet. Calvin Klein jeans used to be a fashion item, but when Costco started carrying them, favor had been lost. (No knock on Costco, buck-fifty hot dog and drink can't be beat.)
Emailing Gabe directly was helpful in getting a WINE issue debugged in the days before native Linux support (actually turned out to be a Linux kernel bug). I don't want to encourage people to spam someone whose time is surely scarce, but perhaps if all other avenues are exhausted and the stakes are high, this may be a reasonable approach.
Yeah, we take this same approach. I wrote an ansible module that does this.
Wait, do people store repo passwords in .git? Otherwise a simple remote address means nothing.
They may have logs but they don't have perfect logs.

I know people who got banned for having debuggers open not attached to the game.

The VAC system is also incredibly intrusive. It was scanning random processes on my computer, and I know this because when I tried to recompile my program, it failed because it couldn't delete the executable because Steam had an open handle on it...

You would never hear about Valve failing in these cases because no random person would trust testimony from random people over Valve.
This isn't one of those "change your passwords" moments, is it? Based on how this exploit worked, I would assume you'd already know if your account was breached and that there is no on-going risk after the fix?
Yes, it does. It was a complete waste of time and does nothing useful except chew more CPU cycles.

This is why all the security experts say that JS crypto is useless.
I think it's more they have access to your codebase, which could then be analyzed to look for exploits.
Making projections like "this drive could get a probe to Pluto in 18 months" seems kind of premature, given that scientists still aren't certain that the drive works at all, let alone how efficient it actually is.
So, the same problem as Nintendo has in bringing Mother 3 to the US.
http://solrepublic.com/relays-in-ear-headphone-3-button-vari...

Sol Republic Relays, they're awesome, don't ever fall out, and have full 3 button iPhone controls/mic.

They also have a right angle jack, which may help with your breakingness...
Silly strawmen and hyperbole aside, the fact that trash articles like this make it to (or near) the top of HN, however briefly, is certainly to it's detriment.
I once dated Gabe Newell's sister.

He thinks Tani is a total slacker because psychotherapists dont make much money.

Tani thinks Gabe is a total slacker because he writes video games.
Personalized Product Recommendations
What a hyperbolic article. Valve will undo any damage. It's absolutely silly to think that they'd enforce a VAC ban due to abuse on their system.
> > Maybe, we should rather assume wanting to start a company is the normal case and ask what keeps most people from wanting to start their own business.

> I know this was definitely the case in the 70s. My father's and grandfather's generations mostly started their own businesses rather than work for somebody else.

Self-employment has fallen over the years, to be sure, but it wasn't the norm two generations ago; by BLS figures, in 1948, it was 18.5% of all workers whose primary work was self-employment; as of 2009, it was around 10.9%.
Cachet, seriously? Apple has been producing for the masses for many years, quite successfully actually. If you think they haven't their marketing has worked brilliantly on you.
For ansibile the built-in solution is: http://docs.ansible.com/ansible/playbooks_vault.html
A URL shortener link to a thinly-veiled affiliate marketing page?
You should check out the Parser package in the scala standard lib. I maintain a few DSLs using this and it's an absolute dream.

https://wiki.scala-lang.org/display/SW/Parser+Combinators--G...

Code looks solid otherwise...at least where I work the style would be to favor functional idioms over for loops but I think that's just personal preference.
This isn't exactly meditation - it's thinking with your eyes closed. That isn't to say it's bad or that you shouldn't do it, but you can do the suggested exercises outside the context of meditation. Focusing on thoughts and ideas is the opposite of traditional Buddhist meditation, where the ultimate goal is to realize the horrifying truth that "you" don't exist, aka enlightenment. Ramana Maharshi might be a good person to investigate.

edit: thank god this was spam-banned from front page
A Sad Story of a Stolen Skype Account, or the Worst Support Ever
I bought an iBook at a Best Buy in Seattle in 2004. I think your signal recognition is off.
Well, Apple's laptops, iPhones and iPods have been sold at stores other than Apple store for years. That didn't hurt Apple as a brand at all.
Everyone remembers the story of the tortoise and the hare, but no one seems to have learned the lesson it teaches:

Uh, no. I'm pretty sure everyone learned the apparent lesson that "slow-and-steady wins the race". Of course, that lesson is seriously incorrect since almost every race is won by the fastest. The real lesson is that pride goes before a fall. That is not what the article is suggesting.

Daniel Kahneman, the only non-economist to be awarded the Nobel Prize in economics.

Uh, no. John Nash, the only economics "Nobel prize" winner most people could actually name, is also not an economist.

And then the article goes on to suggest that brain teasers and their ability to tease brains--even MIT brains--have real-world implications. Okay, whatever.
endless possibilities
Another not-so-obvious bug with your example buggy code: it's also vulnerable to timing attacks.

http://codahale.com/a-lesson-in-timing-attacks/
No. All major designer brands have presence in local outlet malls, its where they make most of their money. But these are simply the distribution sites. The branding is created and maintained elsewhere. Apple spends significantly more on branding than CK, the comparrison is ridiculous.
Apple's consumer products have been sold by Best Buy since 2002.
A few ideas from a quick brainstorm, none of them are perfect, but neither is the centralized server solution:

1. Bookmarklet - In a similar vein to the way some password managers work you could construct a bookmarklet that the user can click on to make a site do the right thing - there are some security configurations depending on your threat model - however this does require user interaction.

2. Browser plugin - like #1 but obviously with the pain of writing and maintaining a browser plugin.

3. Bake the site determination into the flow - so instead of a 1-click retweet it becomes a 2-click retweet with the second step requiring the user to provide the site where they want to retweet - again some security implications and breaks the regular flow (although you could get around this by doing it once and storing the value in a cookie)

4. Have a local app listening on a specified port (so retweets get POSTed to 127.0.0.1:7000 for example) and then from there onwards - requires extra setup, makes the system less portable (can't just throw it on a hosted server). Like #2 but more annoying.
The whole reason the EmDrive is supposedly so revolutionary is that it's claimed to produce thrust without requiring any propellant. If conservation of momentum isn't going to be violated, something with mass-energy has to be carrying that momentum away from the spacecraft, and if it's not matter, it has to be radiation. But the claimed efficiency is about 5 orders of magnitude higher than radiation pressure could possibly produce.
I think a startup which claims they're going to change the world should break up the process into bite-sized phases.

Early on, it's simpler to function as a small business; one which caters to a niche sector of the target market. One which thoroughly understands the needs and satisfactions of customers in that niche. One that creates a solid, self-sustaining feedback loop within the company to address those needs before moving forward. Putting the cart before the horse hurts worse than dying from not having any customer's at all.

There's a natural progression to how large companies grew from children to fully-functioning adults. It's akin to using a slow cooker vs. throwing the steak into a microwave and wondering why it doesn't taste good.
All the more possible for small extra forces to slip through the cracks from magnetic fields or whatever.
So that deployment is "just" git pull.

I don't get it either.
lowers the barrier to entry to embedded programming.

Embedded systems often have very different characteristics than e.g. a web app, and just because someone has been doing JS web apps does not mean they'll be any good at using JS with an embedded system (and vice-versa, but maybe less so.) IMHO lowering the barrier to entry is just going to result in many more buggy/insecure IoT devices... (JS does eliminate certain classes of bugs associated with traditional embedded languages like C, but there are plenty other bugs you can find in web apps that are not buffer overflows.)
Is there a general algorithm that can tell you all possible threats against your secret keys?
3 interesting/fun word problems from TFA:

1) A bat and a ball cost $1.10. The bat costs $1.00 more than the ball. How much does the ball cost? ____cents

2) If it takes five machines five minutes to make five widgets, how long would it take 100 machines to make 100 widgets? ____minutes

3) In a lake, there is a patch of lily pads. Every day, the patch doubles in size. If it takes 48 days for the patch to cover the entire lake, how long would it take for the patch to cover half of the lake? ____days

How did you do? (see article for answers)
How did the string go from "" to nil automagically?
If this is of interest to you then you will most likely find the the recent .NET Core Design API review on ILDASM interesting as well: https://www.youtube.com/watch?v=HuRc6CpiOVg
Why is the dot on the i so small and off center when the diacritics are all large, centered diamonds?
It's a bit hyperbolic, but historically Valve have been very strict about VAC bans. If your account is hacked and someone cheats, they can get it permanently VAC banned and Valve will not negotiate or be lenient about it -- ever. I know this from experience and it's well known. In this case Valve will probably remove the VAC bans because it's such a high profile mistake on their part, but you can see why people are concerned -- especially when they haven't said anything publicly yet.
I am genuinely curious - what would be a correct Plan B? I am not sure how could you have a Grexit without it being a coup.

Personally, I am not a big fan of central bank independence, as a concept. There is always some dependence, because institutions are staffed and constructed by humans, and I think proclaiming independence is a bit muddy in democracy. If Tsipras took control over Greek Central Bank, it would still have greater democratic legitimacy than the control Eurozone leaders have over ECB (the fact they have some I think can be seen from the fact that ECB didn't provide liquidity to Greece before the referendum - really independent CB in a monetary union would have to do that anyway and let the politicians face the consequences).

(I am really torn here, because, even though I wish Eurozone to succeed, sadly, the existence of EZ and ECB was not established in a democratic process, as it should.)
Can you just have person A supply to personb.com the path to person A's sharing service (in this case persona.com) and craft share links to person A's sharing service pointing to the content from personb.com you want to share?

Let's say:

Share endpoint /share?content=URL

Content endpoint /content/ID

If personb.com knows that the client shares from persona.com/share, it can craft its share links as (excuse the escaping)

<a href="https://persona.com/share?content=http://personb.com/content/5</a>

When person A follows the link, they get sent to persona.com, authenticated using their cookie, and then the persona.com web service follows the content URL to fetch the content to share.

This seems to address your core use case as well as your stated kicker (you can't craft a request to get person A to reshare something they don't want to since persona.com/share can auth person A and confirm the share).

This is all essential how Facebook, G+, Twitter sharing all work, except you don't pass to your content site the share endpoint because it uses canonical endpoints built in.
We use lucidchart and balsamiq at times to model ERDs using the crow's foot style. There are certain gems for Ruby on Rails dev that generate ERDs from the schema,.
That simplifies the actual situation.

Yes - in common with most central banks it is supposed to be independent. However It ... acts as a treasurer and fiscal agent for the Greek government[1] and is partially owned by the Greek government (35%)

[1] https://en.wikipedia.org/wiki/Bank_of_Greece
Enable Steam Guard, and it will force anyone logging in from an unrecognized device to submit a code they send you via text or email.
E^2 = (mc^2)^2 + (pc)^2

Is it just coincidence that this looks like the Pythagorean theorem?
For anyone interested in IoT, look at the esp8266.

It is a tiny chip with included wifi. It was 2 digital IO ports, and also a serial connection if you want to connect it to an arduino.

And at the moment it costs 2.6 USD on ebay!!!

And someone made a plugin so you can program it from the Arduino IDE: https://github.com/esp8266/Arduino
^Yep, basically what I was going to say, but I forgot to reply more promptly. Thanks.
Ask HN: How do you keep your multiple workstations in sync?
During a regular work week I work a couple of days in a co-working space, the other times either from home or at a client site - and I’m tired of carrying around my laptop all the time.

My dream setup would consist of a couple of low-fi workstations, say a bunch of Intel NUCs or the like, one at each site. Then, whenever I leave in the middle of work at one site, I can go to the other and pick up from there. However, due to sub-optimal internet connectivity I can’t use thin clients with a cloud-based X server. At each work location, I’d need to run my jobs on that machine (either bare metal, or virtualised). Is there a way to e.g. synchronise one virtual machine image across the workstations, when I switch locations? I wouldn’t need to run two workstations at once. Bonus points if a program or configuration, that I install one machine also shows up on the other workstations. I have no special requirements, any Unix-like OS with a window system is OK.

Is anyone of you running such a setup? Or have you found a similar solution? I have that nagging feeling I can’t see the forest for the trees, given that I haven’t with IT setups since 1999. Thanks!
" Also, you can't go wrong drinking lots of water!"

Actually, you can.

Look up hyponatraemia, SIADH or water intoxication.
And for an example of SIADH in a case of leukaemia:
http://www.ncbi.nlm.nih.gov/pubmed/19367383

And there was the well known Wii case:
http://www.dailymail.co.uk/news/article-1224051/Wee-For-Wii-...
> The "Scala is slow to compile" meme needs to die in a fire.

Martin Odersky has commented many times [1] that scalac won't be as fast as javac. The only link I could find right now is http://stackoverflow.com/questions/3490383/java-compile-spee... which is rather old; but I remember watching more recent videos (< 2 years old) where he makes the same points.
I'm not going to argue but I might as well explain some of the uses here. For example, encrypting clientside and not decrypting serverside will mean it's impossible to have a plaintext password leak in the future, which decreases risk.

It also forces passive MITM to become active. Turning Eve into Mallory gives theoretical attackers much more work. There are more benefits beyond this.

What you're thinking of is using this for actual password protection, which it won't provide. It can't be used as a TLS replacement. If you've actually read tptacek's big blog post about this you would notice it has to do with using js crypto being used to protect something, which this won't provide, but it can successfully be used to protect a service from itself and many other things. It's impossible to know all the details and benefits and pitfalls of their scheme though, without all the code from the server too.
2 days ago: https://news.ycombinator.com/item?id=9946060
Yuck. No wonder Lispers look down on us.
This advice seems to be in stark contrast to the "speed as a habit" thread that everyone got excited about: https://news.ycombinator.com/item?id=9923239

Speed as a habit seems like it would ruin the ability to slow-think. Is there a dichotomy here or can we do both?
Adding a feature that feels like security but actually isn't, would not be a good sign that they have a good understanding of web security.

What's the difference between 'client sends plaintext password' and 'client sends encrypted password' from the point of view of an attacker? All you're aiming to prevent is client-side interception but in reality it doesn't matter what you do to the password locally - if what you send is what the server expects then you still get in; the encrypted plaintext effectively becomes the password. Thus an attacker who can intercept a plaintext password is at no disadvantage intercepting an encrypted or hashed password instead, since it's still valid password data as far as the server is concerned.

If you as a service provider want to deal with an encrypted password at all times then why not just do that at the server end? And as the parent said, if as a client you can't trust the intentions of the server with respect to your password then encrypting it locally does nothing when they hold the keys to decrypt it, and provide the software you're using to do the encryption and transmission.
>ゆとり教育世代

For those not familiar with Japanese educational policy:

https://en.wikipedia.org/wiki/Yutori_education
Cracking the Roku V2 WPA2-PSK
Bad database constraints obviously.
Stylebot or Stylish (Chrome/Firefox) and nuking such interstitials helps.

I've started adding same to my default stylesheet as block elements.

This covers a lot of sins:

[class*="modal"], [class*="popup"], [class*="overlay"],
[class*="interstitial"], [class*="social"], [class*="cookie"],
[class*="flyout"], [class*="colorbox"], [class*="Modal"],
[class*="Popup"], [class*="Overlay"], [class*="Interstitial"],
[class*="Social"], [class*="Cookie"], [class*="Flyout"],
[class*="Colorbox"], [id*="modal"], [id*="popup"], [id*="overlay"],
[id*="interstitial"], [id*="social"], [id*="cookie"],
[id*="flyout"], [id*="colorbox"], [id*="Modal"], [id*="Popup"],
[id*="Overlay"], [id*="Interstitial"], [id*="Social"],
[id*="Cookie"], [id*="Flyout"], [id*="Colorbox"] {
display: none;
}

(Though it may also have false positives.)
What is the "lifecycle of a token"?
No, you try to confuse the issue.

The finance Minister of Greece has no authority to order the BoG around re: fiscal policy, nor has he any right to seize its money.
Pou Hack 2015 Unlimited Coins Points No Survey
The Extreme Weight Cutting and Rehydration Secrets of UFC Fighters
Copying my reply from that thread:

Speed is important. Patience is important. Stepping back and smelling the flowers is important. It's not about fast or slow. It's about right, and you can't be right all the time if you're stuck in the habit of zooming along all the time.

I remember how many _years_ it took Apple to figure out how to do right-click properly while their competitors were speeding along with that silly second button.
> It buys you into the echo chamber. Unless your customers are in the startup world, this probably doesn't matter for your business.

It buys you mass, global media. Its pretty much why AirBnB is anywhere close to as recognizable as VRBO, which has been around and profitable in the same space far longer.

> Pick a business category that isn't technology or software. Very likely all of the most recent successes in that category were founded outside of silicon valley.

Unless you broaden "technology and software" as a "business category" so broadly as to be meaningless (e.g., to include every business that uses technology or software, no matter what it it actually selling), that's rather dubious.