skysight-inc/HackerNews huggingface dataset:
I was referring to the improving part. joosters said desktop recognition has been improving, I meant that cloud has been improving faster. Which is true, all the big companies are focusing on cloud-based recognition. The improvements might eventually come to desktop recognition systems, but even that's not a guarantee given where the focus seems to be.
I'm using Nokia 106. Calls. Texts. Nothing else. I turn it off at 6pm and on at 9am.

Doesn't have data, GPS, Bluetooth or WiFi so that's not a problem. The best it gives is rough triangulation data from cell towers but I can leave it at home and do nefarious things to my own heart's content if I so desire (not that I intend to).
Bing has also been the default for Apple's Siri for a couple years? They may be growing their own search engine to support Siri, but I'd be interested to know if there are any identifiers passed to Bing for those searches... Trusted Partners and all.
Researchers develop astonishing Web-based attack on a computer's DRAM
I've temporarily put my email address in my profile. Email me and I'll go into detail.
Mac EFI Update 2015-001: malicious root app may be able to modify EFI flash
My understanding was that employers have fiduciary obligations to their employees when they setup a 401k plan - does offloading 401k administration remove those obligations or transfer them to Captain401?
I would be very wary of using windows 10 as a company. If they are sending all key strokes that a user types, then any illusion of privileged information between company and customer goes out of the window. It makes me wonder how the legal team of companies would say if they caught the magnitude of data being leaked through default enabled services.
Because the windows store app ads are themselves real, so the principal point stands. There's no need to get up in arms over it.
It's not like this is new. Companies like Uber, Lyft, and AirBnB have been front-page favorites for ages.
Facebook and Google don't log all of my keystrokes across my entire operating system. As far as I know, Google doesn't even log keystrokes within the browser.
Insider Binary Bot REVIEW Need to Know THE TRUTH
I've also been wanting to switch but god, the Xcode inspired dev tools make me weep in comparison to Chrome's.
http://blog.ircmaxell.com/2015/03/security-issue-combining-b...

It's also applicable to crypt(3)...
> 3v4l.org

PHP. This is a known weakness in PHP's bcrypt implementation. From Wikipedia, "Many implementations of bcrypt truncate the password to the first 72 bytes." I would hope that they're using a competent implementation that either supports longer passwords or throws an error if it's asked to hash a longer password.

Besides, bcrypt takes the salt as a separate parameter anyway. So it doesn't really make sense in context that the salt, pepper, and password were concatenated and passed to bcrypt. Perhaps he was talking about the SHA-1 stretching; perhaps they hash the passwords with SHA-1 before passing it to bcrypt.

I don't think we know enough to conclude that they were definitely doing it wrong, but it would be nice to know more details about the algorithm, though.
That's the thing, though. I find the constant kvetching about privacy the most cynical thing. None of these posts are news, new information, or even a new take on existing information.
Related CVE:

http://www.kb.cert.org/vuls/id/577140

Applies to (at least) some DELL computers as well.

TLDR: There's a bug in some UEFI BIOSes that don't set the read-only flag when a computer comes back from sleep, thus allowing a malicious program to silently reflash the BIOS

More detailed analysis: https://reverse.put.as/2015/05/29/the-empire-strikes-back-ap...
The block chain does not grow 'infinitely' it grows linearly at a predictable maximum rate.

For any given point in time the block chain will be at max a certain size, given that Moore's law grows faster than the block chain we should be safe in assuming that any reasonable computer in the future will be capable of storing the block chain.

Seriously, we're talking like 20 GB per year at current rates... The entire thing fits comfortably on an iPhone, let alone a $60 1TB drive.

https://blockchain.info/charts/blocks-size?timespan=all&show...
A lot of these articles are correct. I would agree that Docker probably isn't ready for production. But containers provide a TON of benefits, and you should absolutely be thinking about how to containerize your applications now. Just because it's not currently ready for production doesn't mean you shouldn't start getting ready to move to a container solution. The ecosystem will mature, companies will offer solutions for these problems, and it will eventually be ready for production. When it is ready, you should be too.

The big problem that Docker solves is the dependency problem. Specifically, it ties multiple levels of dependencies together with application code in a way that makes no assumptions about your environment and how well-maintained it is. It means that your CI system can test on the exact same versions of binaries -- and every dependency down to the kernel level -- that you will run on your production systems.

Many bigger companies will have multiple Yum/Apt/Maven/Git repositories, and with Docker, it doesn't matter. Whatever is built into the container is what gets run. Most importantly it puts control of those things into the hands of the development team, not the system administration team. It allows you to more cleanly separate your infrastructure ops from your application engineering/devops, which is the prime benefit IMO because those two groups have never worked together well.
Actually in the UK it is covered by the Data Protection Act. Interesting times ahead. If you knowingly or unknowningly give personal information away without my consent this is illegal.
Give the OmniKey extension a look, for prefix searches
The only implementations of bcrypt (and crypt(3)) that I've seen that's NOT vulnerable to this are Golang and Python.

It has nothing to do with PHP...
They're both tools that use spaced repetition [1].

The OP made it sound like Hickory is automatically generating cards based on what a user reads. It also sounds like Hickory is doing more analytics. Of course, Anki is open-source, so it could be augmented to do these.

[1] https://en.wikipedia.org/wiki/Spaced_repetition
Yes. That is a most peculiar way to describe the operation of bcrypt.
Does that mean these findings should hold true for iOS as well?
May 14th, 2024:In other news, today marks the 11th time in recent months that ISIS terrorists were able to shoot down a Facebook Aquila V.9 autonomous internet drown. Cutting off Facebook and general internet access to millions of Facebook users in the arid region.

Officials from Facebook, the NSA, and the NTSB were unavailable to comment.

This tragedy highlighted on this, Mark Zuckerberg's 40th birthday.
The title should read "steganography", not "stenography".
Fair enough. I didn't realize that you were just referring to that. And I agree with your assessment about relative speed of improvement.
Does anyone know a good alternative for rental cars? I figure Cuvva isn't ideal in those situations b/c you need something that lasts multiple days, not just hours.
I'm speculating, but I'd suspect that your traffic connects and initially passes through your guard node while traffic passing through your relay is probably going to other nodes in the network (since guard nodes are used for initial connections and as a relay you're already the middle node).

In this case it wouldn't help conceal anything extra from your guard node.

For those who don't know, guard nodes are the nodes you initially connect to. In Tor once established, your first hop is always to the same node - this is because it's assumed some nodes are bad actors and if the first node is randomly selected each time your chance of eventually connecting to a node trying to collect information is high and partial compromise isn't much better than fully compromised.

By selecting and using one guard node for your initial connection it's either a bad actor or not, but if it isn't then you're good to go from then on.

When you run a relay if your relay is fast, stable and online for a while (60 days I think) the Tor network will automatically turn your relay into a guard.
Businesses actually have very different privacy arrangements than individual consumers. Its a function of how much they spend.
Not actually true. Windows 10 is not free, and Microsoft is not giving away the operating system.

What Microsoft is doing is giving consumers a free upgrade on Win7/8 PCs where the operating system has already been paid for.

This is basically the strategy already used by Apple and Google (Android): once you have bought the OS (bundled with the hardware) then you get updates free.
> So the only way this is "waste" is if it's depleting the aquifer faster than it replenishes. That's possible of course. But unlikely, because NYC has been huge for hundreds of years now. If they're depleting aquifers it's only very slowly.

This is exactly the case. NY/NJ are depleting the groundwater faster than it comes back, but not at a great rate and it is nowhere near a problem yet.
I really wish the free plan wouldn't allow users to easily create NDAs. Anything but NDAs!
Let's assume that there are only ten options at each level of clicking.

Thus a probability of 1 in (10^6 * the chance of your toddler getting unsupervised access while the computer is on and in an accepting state).
Not really. Pseudo-ironic racism is a pretty significant source of humor in South Park.
This is 100% for me. I am the world's worst forgetful bear. And by my at least my subjective experience, the number of times I think back to the thing at spaced intervals determines in a large degree the likelihood that I am going to remember it longer.
Every browser on iOS uses Webkit.
How do you believe auto-suggest works?
The Choice Ahead: A Private Health-Insurance Monopoly or a Single Payer
The OP didn't but the subsequent responses to the OP brought that up, and I was referring to them.
Light weight aircraft Aquila by Facebook to provide Internet all over the world
> They had the sense to build the city not in a desert

The hubris of the people who built up the southwest United States in particular astounds me.
Thanks. I think it's a much less troubling problem than power consumption for mining, frankly. Serenity, serenity, serenity.
Except battery life is really bad on Apple devices. Compared to Samsung at least (my Galaxy Note4 that has a 3-day battery life).
It probably uses a HyperLogLog--the 2% error rate kind of gives it away. Bloom filters approximate set membership queries, HyperLogLogs approximate set cardinality queries. COUNT DISTINCT is a set cardinality query.

We actually support a HyperLogLog backed COUNT DISTINCT aggregate too: http://docs.pipelinedb.com/aggregates.html#general-aggregate...
I don't know about Google Now. But Cortana does have way better results than local MS Speech API. My english does suck, so it is very impressive to me that Cortana got me right most of the time.
Startup burnout
Even 2FA as commonly implemented is kind of a bullshit solution (it's once per 30 days, it's not on every transaction, it's not specific to the transaction, there's no enduring log, no concept of segregating various types of action, no concept of callback auth/validation, often not multiuser/shared credentials, etc.)

Consumer-style 2FA protects somewhat against brute force, against password reuse by users who just don't care, and against theft of a whole password list. It doesn't actually protect the protected resource very much.
In addition to that, most personal car insurance policies cover rentals, and every credit card I've ever seen provides insurance for cars rented with that credit card. The average renter is covered by three different policies (the rental company's policy, their personal auto policy, and their credit card, although they don't perfectly overlap and may not cover everything you'd want) before the rental company tries to get them to buy a fourth.

Please do your own research before relying on any of this, of course! Especially since individual insurance and credit cards may vary. But personally I've not seen any reason to purchase the insurance they offer.
I have no idea what this has to do with the character gatsby, unless the author is referring to the sandwich instead - it makes about as much sense.

I didn't see the recent movie(s), but from the previews it looked like it was mostly about lavish parties and not so much pain - so the author went to some lavish parties in India I guess. But the character he describes is hardly gatsby.
You'd probably want something slightly different than keys - at least some way to different between key presses and hold the keys down at the same time.
The fact that you immediately equated "diversity" to "lowering your hiring bar" and "under-performing" is as ignorant as it is insulting.

Women and brown people are not lower quality humans, and it has been shown over and over and over that companies who hire for diversity perform better.

http://lmgtfy.com/?q=do+diverse+companies+perform+better
Because of this, Mozilla is considering an addon to restrict WebRTC: https://news.ycombinator.com/item?id=9960504
There is some risk but it's not high. Microsoft is a huge, rich company. If it leaked they were violating their own privacy policy that blatantly, there would be the mother of all class action lawsuits.

There would federal CFAA, Economic Espionage Act, etc., investigations plus antitrust abuse investigations.
Google Street View Crashes Mongolia's Naadam Festival
Facebook does for status messages: https://www.techdirt.com/articles/20131215/23260825572/faceb...
Show HN: Do you have a controversial opinion? Well Prove it
You actually don't need to use their IDE as the scripts it generates are just python scripts.

I've used it a few times in the past and was able to use an external screenshot program (Apple-Shift-4 on Mac) and a text editor to write the scripts.
The analytics are definitely useful. I re-read it and it does seem like Hickory automatically divides any text into flash-cards. Not sure how effective that is in reality though.
I live in one of these in San Francisco, and honestly I love it. For $1700/mo I can live in a nice residential neighborhood with a <10 minute commute. There's a full kitchen and a very spacious common area with couches, tables, a TV, and plenty of power. I sleep in one of the eight bunks in the master bedroom, right next to a balcony with a beautiful view of the skyline. Most of us are interns and temp contractors, with an occasional "adult" passing through while looking for permanent housing. Honestly, it's a lot nicer than my University housing and not much more expensive.

Without it, I'd have to either live somewhere where I fear for my safety, add 1-2 hours of BART commute onto my workday (and lose easy access to SF restaurants/culture), or spend $2500-$4000 for a studio in a comparable neighborhood.
Thanks for the helpful feedback. Yes, I think a default expiration is a good idea and will be adding this. Other have asked about the ability for multiple downloads, so I am considering this.
TLDR: This is another USDS submarine.
How-to-beat-burnout posts often have different answers. I think that's because what causes burnout (how to de-stress) is a very personal thing, something that differs person to person. So hard to generalize.
I think it would be awesome if we can somehow hook this into some API that grabs

- the process list
- list of the window positions
- text under a cursor
- provides an interface to create specialized keyboard/mouse actions for specific apps (because why stop at chrome?)

i'm sure this is project is going to be quite popular :)
Auto-suggest in the address bar? That's a far cry from logging every keystroke I make in the entire browser.
Well, I had that once on my old Canon DSLR. I really wanted to change the picture format from JPEG to RAW (CR2), so I chose the 'format' option. I got into the format card menu, so I wanted to get out. There were only two options: OK and Cancel, but the interface was so bad I had no idea which button was active and which was not (the colors would invert on scrolling). A 50-50% chance, and I chose the wrong option ;) Luckily it was a quick format, so a raw scan saved my photos :)
Effectively funding FOSS projects is HARD. We wound up with GPG and OpenSSL maintained by tiny teams going broke because we hadn't figured out how to get people paid for the jobs they were doing.

We took an approach to that, and we've produced the code. I don't see that as a problem. My permanent project, http://hexayurt.com is a fully FOSS refugee building solution that hasn't taken people's money (not a charity, and we don't accept cash donations) and there are good reasons for that, but not all public works can be produced by volunteers. Sometimes you need 100% of a professional for years, and unless they're going to live on the streets, their rent needs to be paid.

We should not require FOSS programmers to self-fund.
Why Does Upper Case Cursive Q Look Like a 2?
PagerDuty use AWS and Linode, be interesting to see which one was responsible.

https://support.pagerduty.com/hc/en-us/articles/202830570-Wh...
How we're making block-based programming more intuitive for young children
What of that? Profiting from people's misfortune is not in and of itself wrong. (If it were, we would have to start by condemning every doctor in the world.) What's wrong is causing misfortune. If anyone is to be called scumbags, it should be the people who vote for laws restricting the construction of new housing. That's what creates these conditions.
Except your facts are incomplete[1] and you've mixed them in with straw men.[2]

[1] Your original claim ("as soon as Apple realized how much money could be generated by adding DRM") that Apple is the one that wanted DRM on music ignores the facts of (a) every other music store that opened at the time also had DRM and (b) the fairly common knowledge that Apple's money business was selling devices and that, in the time frame we're talking about ($0.99 songs), Apple made very little profit on music sales once you factor in the cuts to the label, artist, publisher, credit card fees and store costs (some discussion at http://ask.metafilter.com/23257/Show-me-their-money).

[2] No one said that Apple didn't want DRM for 'altruistic reasons' or that 'Apple fought tooth and nail to remove DRM', these are straw men you injected. I just made the obvious claim that DRM was a label requirement. Apple would have loved to give away the music for free, they would have sold a lot more ipods. Why would Steve Jobs write a letter about DRM at all if Apple secretly wanted to keep DRM?
You may want to get a checkup from an optometrist. No joke. I think almost everyone is affected by age-related degeneration of their vision at some point or another.
I think you've got a good idea here that could really help the administrative side of contract management. But I have a few questions:

How does Ironclad ensure that you'll "never lose a contract again"? Can you dictate what the folder structure will be and have Ironclad follow that automatically?

Can you have it follow agreement naming conventions?

How does it handle successive iterations of a contract that is being negotiated?

Can you also store a record of emails/discussions regarding those negotiations with the contracts?
"The 13 bombs which exploded in quick succession brought the city's most iconic buildings to their knees, beginning with the symbol of its financial supremacy, the Bombay Stock Exchange....

The headquarters of the right-wing Hindu Shiv Sena party was an obvious target because the blasts were revenge for the religious riots of December 1992 and January 1993, in which a large number of Muslims were killed....

The riots, in turn, had been triggered by the demolition of the Babri mosque by Hindu extremists in the holy town of Ayodhya in December 1992...."

Perhaps diversity isn't always a strength?
These aren't unique to just start ups. Burnout is an issue all over the industry.
If it was AWS (and not just AWS credential mismanagement by a client), I will donate $100 to PETA.
> The NSA relies on SELinux as a part of their internal computer security system.

And DISA STIGs (e.g., for RHEL) require SELinux to be enabled and enforcing.
Spintronic Devices Possible Without Magnetic Material
Again, logging my keystrokes in a single text input field is vastly different from logging all of my keystrokes across the board.
In Germany we still have a category called Heilwasser (literally healing water) for mineral water with a high content of one mineral and is treated by law as medicine.
Law librarians help make progress in “Happy Birthday” case
Windows 10 Uses Your Bandwidth to Distribute Updates, Disable It Here
[0]: http://www.paulgraham.com/submarine.html

I wonder what their PR budget is like?
It's not that cryptic. Delany and the author are highlighting the roles of marginalized communities in the genre, how they have changed (or not) over time, and what might change in the future.
> Why spin your wheels redoing someone else's work, when you can push into new territory?

Verification of results?
The Value of Being Transparent, Especially When It's Hard
What do you see is being done to combat the issue of big contractors (Booz Allen, CGI, etc) who don't want the gov't building software with small teams because it would hurt their ability to obtain huge billion dollar contracts?
As a heads up, looks like your build status image is broken on GH: http://oi61.tinypic.com/mj07rs.jpg
Leprechauns, consulting an oracle, and simultaneously typing at Google HQ.
Introducing the Pocket Beta Channel
It is a technical limitation. Oftentimes the platform is so specialized that only a tiny handful of compilers are ported to it. Say, just gcc, g++, and gfortran, and xlc, xlC, and xlf. And just one version at that. Java would require porting the JVM to the cut-down, weird Linux on the compute nodes. Some $$$ machines don't even support dynamic linking! The number of these machines is so small that extensive compiler and tool support just isn't happening unless you want to add millions to the cost.
According to Julius Kivimaki (whom has hacked Linode countless times, including under the Hack the Planet hacker collective), Linode is pretty much an open door for blackhats.
Ethereum is getting a lot of heat for being "pre-mined". What stops someone from running an alt-ethereum blockchain which is not pre-mined? AKA a non-pre-mined Ethereum fork?
It's a crazy world we live in that you can go from building a social network in your dorm, to funding aerospace tech.

That said, this looks amazing. It's fascinating seeing web technology companies branch out into all kinds of other tech (e.g. Amazon doing drone delivery, Google building autonomous vehicles).
In theory, sure. Crypton.io itself is available on github and you could build your own server.

On the Encryptr app side, src/app.js uses window.crypton.host and _.port to specify the crypton endopint to connect to. I think the app store build of encryptr uses a crypton endopint at devgeeks.org.

You could just use (apache) cordova to roll your own build of the android app with app.js set to point to your preferred self-hosted endpoint.

YMMV.

Note: this is definitely a product at the MVP stage. The platform is capable of implementing data sharing, but that is not currently used by the Encryptr application.
a hypervisor is the only private cloud :)
Building up is a perfect balance between preserving beauty and nature and price.

The reality is that the real blight on nature is the single family homes which are built on forests and farmland.
No exactly, they'd receive a notice of Trademark infringement. You could however write a parody about a wizard named Parry Hotter that would be okay under "Fair Use".
Show HN: InBloom – Portable Bloom Filters in Java, Python and Go
Your RNG is not cryptographically secure, I'd wager.

http://3v4l.org/DC0RM
NASA's Spitzer Space Telescope Confirms Closest Rocky Exoplanet