Yes, a secret key like this could have made this breach much less concerning. Assuming you trust the company to not also lose this data (that they generate and claim to not store). What I was really hoping to find was a paid, cross platform, cloud sync'ed solution that can be setup to require your password and physical key to decrypt. i.e. have 2FA protection from a data breach like this.
HN user
alex-
I initially assumed I would be safe because of 2FA. Sadly it looks like this is not the case, the second factor is used to access the encrypted data, not decrypt the data. As the attacker already has the encrypted data, they have bypassed the stage where 2FA is providing protection. This appears to also be the case for 1password and bitwarden, so not specifically a lastpass failure.
This makes me think of something Antoine de Saint-Exupery said, "Perfection is achieved, not when there is nothing more to add, but when there is nothing left to take away."
Not sure how I missed that, thanks.
My guess is it's less about a moral issue with marijuana and more about a fear of upsetting people displaying the adds. Many of whom won't want to be associated with something federally illegal. The alternative headline being "Google displays illegal drug adds on school site" (or some other page that probably should not be showing ads)
If your employer is happy with your performance then you are probably "good enough" as you say.
However if you truly do always want to be improving your ability as a software engineer, then you are in luck, this field is so vast and deep that you can easily spend more than a lifetime improving! Finding out how and measuring it is another matter.
My favorite unpacking snippet is rotating a matrix
>> matrix = [(1,2,3),(4,5,6),(7,8,9)]
>> list(zip(*matrix))
[(1, 4, 7), (2, 5, 8), (3, 6, 9)]
Not as readable as a real maths library, but pretty cool and educational.
Think I came across it in Python in a nut shell, by Alex Martelli
Edit: formatting
This also really highlights the scale of the population explosion over the last 500-ish years!
given the abysmal quality of this thing, nobody will ever insist that they release the sources
I am interested in seeing the source :)
I think most people, at some level, know this and accept it. I think the shock comes when you think how long this information is kept for, and what that means. i.e. each year they can advertise age appropriate birthday presents, a few years from now they might get adverts for children party suppliers. As they grow up college saving funds, colleges, trips to Disney land, first cars can all be targeted to you at just the right time.
I also agree that it is not a helpful term.
I like to think we are all 10x developers. The question of a 1x developer should be how to grow their productivity (assuming they are motivated to do so). Less productive developers should not feel like they have one tenth of the natural talent someone else has. Instead they should look at how they can improve their work flow/knowledge and companies should try and maximise the output of their employees.
Yes some people will always be better/more productive than others, but most people are differentiated by completely controllable factors.
It really is scary. They claim to anonymise the data, but to me it feels like removing your name and address from your DNA is like removing the make and model from a car schematic (where only one model was produced).
I try and mitigate the password management single point of failure with two factor authentication.
Obviously that it not an option for every site but access to my password manager, alone, will not provide access to my email (which lets me rest all my accounts) or my bank etc
Of course I use two factor on the manager too.
It doesn't completely solve the problem but I haven't found a better alternative (that works for me)
It might be interesting to some to know that relatively recently (2016) PEP 523 ( https://www.python.org/dev/peps/pep-0523/ ) was created which provides a more efficient alternative to PyEval_SetTrace or PyEval_SetProfile for some use cases.
The idea of this PEP is to add frame evaluation into cPython. As the PEP says "For instance, it would not be difficult to implement a tracing or profiling function at the call level with this API"
Elizaveta Shashkova (a PyCharm developer at JetBrains) gave a really good talk on the subject at this years PyCon ( https://www.youtube.com/watch?v=NdObDUbLjdg ).
I also have trouble keeping mac windows where I left them with external displays attached.
I invested $15 in stay https://cordlessdog.com/stay/
I would not say the problem is solved (it's not going to solve artifacts, etc), but it helped me.
It looks very useful thanks for the image and sponsoring events like this!
This was just mentioned today at north bay python.
Another alternative for a fast speed up by changing your base image is trying out the pypy images.
Looks like it is in the works
https://stackoverflow.com/questions/46941308/python-3-suppor...
Looks like it defaults to providing a python2 2.7.12 environment.
I don't see anyway of selecting python3, any one found the option? Or are they only supporting Python2?
This to me seems like the major point. If we imagine we own a restaurant and a customer refused to leave, forcing us to call the police. Then the police show up, over react and shoot the customer. Surely the law enforcers doing the shooting are the responsible/guilty party?
"...can make as many shirts per hour as about 17 humans"
Surprised they are looking at it per hour. Presumably the automation could run for close to 24 hours a day, whereas the human workforce could not.
So each of these units could replace 51 workers? (3 rotations of 17 workers each doing 8 hours a day). That's before considering the human workforce generally requires 2 days a week off.
The future of meetings: starting them in SF and ending them in Tahoe. Maybe it's a cheap video conferencing platform :)
Could the model 3 be a very expensive video conferencing platform?
I could imagine some firearm owners being willing to trade 100% reliability to prevent a casual accident.
I imagine some firearm sales are for more recreational purposes.
Having moved to the US from a country that had a universal health care system, the idea of choosing a doctor was quite strange to me.
Luckily I have not really had a need, however my colleges have suggested that when the time comes looking to high profile clients is a good indicator of quality. i.e. if you have a knee issue goto the people that your local NFL/NBA team use for knee issues.
The idea is that they, and their team, have done more extensive research than an individual can. Of corse this assume that these Doctors are affordable.
To further complicate this suggestion I have heard that some sports people are willing to sacrifice longer term results (once their careers are over) for short term results (at the height of their careers) and so choose physicians accordingly.
PyCon 2017 had a really good talk about debuggers [1] which covered how PEP523 [2] is making debugging python 3.6+ code much faster. I think that a profiler is somewhat similar, however instead of, potentially, stopping execution on each line it is collecting data.
[1] https://www.youtube.com/watch?v=NdObDUbLjdg [2] https://www.python.org/dev/peps/pep-0523/
psutil (https://pythonhosted.org/psutil/) is awesome for collecting valuable monitoring information.
pyrasite (http://pyrasite.com/) will let you inject code into a process. This can be used to add monitoring of private internal state etc (if you have no other options).
If you want to have locally hosted graphs then grafana and influx are my current tools of choice.
It is going to be more work than swiping a credit card, but not a crazy amount.
"when Facebook employees are not actively making changes . . . the site experiences higher levels of reliability."
This seems like a great thing to me. i.e. The system is stable and the error budget is being used to facilitate change.
Another (cheaper?) solution would be to randomise the location of the keys each unlock attempt.
It would cause me a massive problem - I basically only remember my pattern
A few states including California have the WARN act [1]. The latest layoffs reported can be found here: http://www.edd.ca.gov/jobs_and_training/warn/WARN-Report-for...
[1] https://en.wikipedia.org/wiki/Worker_Adjustment_and_Retraini...