skysight-inc/HackerNews huggingface dataset:
> This thread is about SSDs.

This sub-thread is about your unhelpful and misleading equivalence and analogy. :)

Silicon wafer costs are like silicon wafer costs. Your diamond analogy is simply inappropriate.

We don't say "Aircraft grade aluminium costs are like diamonds, rather than hard drive aluminium platters." or "Fission reactor grade steel costs are like diamonds, rather than..." because this is an immensely silly thing to say that obfuscates the true cost of the material in question.

What's more, we can generally discover the high end of the true price of the material in question with a little work. As I demonstrated in my replies to you, silicon wafer costs are substantially cheaper than equivalent diamond costs.

If you had said something along the lines of "Due in part to the cost of silicon wafers, silicon-based data storage technologies are now and will be for the foreseeable future substantially more expensive on a per-GB basis than spinning rust or tape-based technologies.", I would have had absolutely nothing at all to object to.

> Consider the $0.24/die...

That figure is based on a particular die area. I would expect a flash memory die to be substantially smaller than a CPU die. This would drive the base cost per die down even further. Moreover, that figure was from 2009. Up to date figures are required to really put a floor on chip prices. :)

> And [that 1TB SSD] competes against 5TB hard drives that sells for $100.

Sort of. For every use that I have except for bulk data storage, I recognize the vast superiority of an SSD. The only HDDs in my computers are the ones I got for free with my laptops-turned-servers that don't do much disk IO, and the disk array that holds my 5TB-and-growing Postgres database.

For the average computer user, I would strongly recommend replacement of the HDD in their computer with an SSD. If you don't need to store more than 1TB of data[0], the performance gains over HDDs are just too great to use anything else.

I'm fairly confident that HDDs will be substantially cheaper per GB than SSDs for the foreseeable future. I'm -however- not convinced by your implicit argument that SSDs will always be -price-wise- unattractive when compared to HDDs. SSDs seem to be sold at the price-per-GB of the HDDs of ~3->5 years ago. We will inevitably see 500GB SSDs at the $80 retail price point.[1] This will make them a no-brainer for every big computer manufacturer. A really fast disk makes slow kit feel really fucking fast.

[0] In my experience, almost no non-technical user has more than 500GB of data that they care about on their machine at any one time.

[1] They're only a little more than twice that price now.
When Snowden exposed facts about MAC addresses, it's very scary knowing that IoT is coming in our life.
I'd like to have a firmware for wireless electronic devices that can use a random MAC address every thirty minutes without using actual spoofing tools that are easy to use only on desktop/laptop/smartphone.
I want the same tools for my bluetooth headset, my car wireless devices and so on...
Just curious, I hear many people talk enthusiastically about the language, yet every serious critic of it I see runs along those lines and makes me want to skip the language altogether.
Your posts have been very insightful. So I wonder if you think Uber will functionally have maximum utility for this market? It will be as efficient as possible without some major change in the business? And won't that be a great thing for people needing cheap rides to get around town, especially in places underserved by public transportation? This good quite probably outweighing the reduction loss of wages to taxi drivers. The way I envision it is the wages to the taxi drivers have been reallocated to provide dirt cheap transportation to the public at large, multiplying the utility of those wages. But I haven't seen the inside of an economics classroom since high school :)
Brand voice and UX: A starter guide
Surely, there is a way to do this in Sublime?
TimeBank where you share your talents, interests and passions in exchange for time
It could equally be the reverse - that people up-vote such stories based on the headline but don't bother reading or commenting.
https://github.com/paragonie/awesome-appsec#c

https://www.cs.fsu.edu/~redwood/OffensiveComputerSecurity/

Not many.

If anyone has any resources to suggest, we'd like to increase our section in the Awesome Appsec list for C programming too. :)
Yes, but you don't also leave your name and other identifiers behind, just the prints.
Working with the JavaScript AST
Inside the Secret Dating App for Famous People
Russian antivirus firm faked malware to harm rivals, say ex-employees
Spend a few hours doing a GED math preparation quiz. When I was in high school, I kicked ass at math. When I went to college, I stopped focusing on basic things like multiplication, addition, subtraction, and division. I was into harder stuffs. I was going to take the GED and was like "Fuck, how did I forget all of this". Spent a day going through basic math, taught it to myself again, then it was easy. I think getting older, I didn't realize that things were "use it or lose it". You kind of assume that once you learn it, it's solid, but really you forget about half every 3 years.

Also, if something is going on in your mind, you can make mistakes. Adult life is stressful and there's a lot to think about! My most productive times were when everything was taken care of for me (place to live, groceries, etc. paid for by my parents). Your brain has a limited number of cycles and if you aren't focused on the task at hand, you make mistakes. Stress occupies those cycles, sleep affects how your garbage collector runs, keeping useless information in your brain space. When I'm well rested, I let things go pretty easily. When I haven't slept enough, it seems like things don't get recycled and I spend more time thinking about it, wasting my productive cycles.

There's a balance, you'll find it as you get older. It's probably just weird to you because nobody ever tells you about it.

Also, consider not masturbating. Nobody going to like hearing that, but reserve your sexual energy for women (or men). Here is a site on the subject. A lot of it is anecdotal and pseudo-scientific, but if you're concerned, you should read it: http://yourbrainonporn.com/can-porn-use-affect-memory-and-co... Personally, a lot of it resonated with me.

Do you read? If not, this can also help with training your focus. In this age, there are a lot of things pulling your attention away. Reading a linear book can help you learn to focus on just one thing. For me, it takes practice, but once I've gotten in to the habit of reading, I learn how to quiet my disruptive thoughts. It also has the benefit of being relaxing and helping me get to sleep.
Cutting edge hail technology gives amazing picture of recent Boston hailstorm
Focusing on Customers: Three Reasons You Need an Experience Strategy
making your own CMOS sensors - sounds like a pretty money intensive plan for a startup! Who would your market be?

Sony owns the market for mobile/dSLR sensors, RED make their own with TowerJazz (and their R&D cost must have been monumental, hence the high prices) and blackmagic uses CMOSIS sensors, which I'm sure is half the reason they can price the cameras the way they do

edit: sensor in the BM Ursa Mini is based on this, not CMOSIS anymore - http://fairchildimaging.com/catalog/focal-plane-arrays/scmos...
When asked about DNSSEC, which is a forklift upgrade of a core Internet protocol that has the deliberate effect of giving NSA and GCHQ control of TLS keys for hosts in .COM, .UK, .NET, .ORG, and .IO, this was Snowden's answer:

Edward Snowden: So, I agree with you and I mean this is what's important about the IETF. Just because I say it, doesn't mean it's gospel. I can be wrong about an incredible amount of things. Nobody should trust me. Nobody should grant any sort of outsized weight to what I say.

When I talk about the NSA, I mentioned it in correlation with DANE and the DPRIVE initiative as well because the whole idea is that, yes, providing some mechanism for authentication of the responses between DNS queries is valuable. It's not an end to itself.

We still have to be able to say, "Well, all right, the certificate that you're getting from it, for a server is also reliable," and then we have to actually do more armour the requests themselves to make sure that they don’t become a new vector, they don't become manipulated.

Who knows like if eventually the DNS responses themselves that are provided through this become some sort of vulnerability because of the way they're parsed or whatever, but the whole idea is that we gotta start somewhere and then we've got to iterate from that point.

We've gotta begin building and when I think about things like DNSSEC, I don't think it's the golden age, we can solve all of the problems, but I do think that it's a start. It's better than the status quo. It's better than what we have today

And by getting the community thinking, by coming together and trying to develop some kind of solution, some kind of standard, we can start developing things that will allow us to build a bridge to the next generation of what we need to protect us against the next generation of coming attacks, and there's a lot of things that get in there. I mean cryptographic agility is one of the big hot things that we have to deal with as well.

I can barely follow this at all, but the part where he says DNSSEC is "better than the status quo" is pretty clear. The questioner responds, "so let's implement it".

Please be careful with what Snowden says. Whatever you think of his disclosures --- and most of my friends think they were brave and incredibly useful --- there is very little evidence that Snowden is qualified to advise anyone on cryptographic security, and some pretty significant evidence to the contrary.
> If that's the main aim, then I don't see why they don't build their capability/crypto model into one of the unikernel OSes, specifically one of those that has the strong type safety and process isolation they are also aiming for.

They seem to be doing just fine with their current efforts, from which really interesting things like the MinimalT protocol has emerged. If I have one frustration, it's that they haven't released a reference implementation of it. I had a f2f conversation with DJB at Real World Crypto a few months ago and the explanation was completely reasonable: they are still working on cleaning it up and making it suitable for external consumption. I still want it today though :-)

David Sheets did some work on rebuilding portions of the protocol in MirageOS: https://github.com/dsheets/ocaml-dnscurve . This level of interproject coupling is just fine by me -- the whole point of library OSs is that we can pick'n'mix these things much more easily over the years, and that's working out fine.
I can't even parse that sentence.
On my team, we've had an evolution from daily in-person standup, to daily short google hangout, to daily status dump into a dedicated slack channel. While there's something to be said for face-time, I think this is working for us pretty well.
Bitcoin and Cryptocurrency Technologies
This is the first time I've read his point of view first hand and actually listened to his presentation. He seems to be incredibly smart and well-versed in his subject domain.
The Moral Imperative for Bioethics
(The terminal would be the only place it would display correctly it seems, but it would be nice to see the chaos it may or may not cause in Github and other tools.)

Finding someone who can write very technically while also being funny and charismatic is pretty rare (We computer types aren't always the biggest hits at parties). I also really appreciate his "last time on" opening paragraphs... it gives some context to the blog post and where's coming from in his headspace. Neat.
You could also upload your music to jamendo.com and use their licensing.jamendo.com service to get more income and visibility.
That's a pretty helpful write-up, because I think the value in Periscope is the marketing angle to a wide, international audience. In my experience, there's a first "wave" of adopters that get to front-run the pack and build momentum. As in, earlier webpages (Maddox) or YouTube acts (Gregory Brothers) rose up when the signal to noise was still pretty good. My view is there's a natural tipping point with any service / platform like Periscope.

After studying and forming opinions about various outlets, I'm pretty happy to be on Periscope, and I don't think I'll get on Meerkat or jump at the chance to do a Facebook live stream. As explained in the article, the viewers through the app or through the web enable people to pick an avenue they prefer, and I think that's a strength. Periscope reminds me of the fun of ChatRoulette without the hazardous free-for-all setup.

With the continually shifting avenues for marketing and performance streaming (Periscope, Tidal, etc) there's a lot of opportunity for mid-tier acts to have a chance at a wider audience. Is it wise to spam every service? No, but getting a foothold in the ones with a decent return on time invested does seem reasonable, even if that list is about 10 sites long. Managing a digital footprint is pretty cool these days...a long way from sharing MIDI files over 56k modems haha
I have a folder to bookmark machine learning resources.

Here's another good one from the creator of coursera (Stanford grad I think)

https://www.coursera.org/learn/machine-learning/home/info?ut...
So how are we supposed to refer to our actual grandparents, without people assuming we're making a generalization?
It's probably not going to be a rewrite of existing systems, but a switch to new systems written in safer languages while phasing out the old C based systems.

On the server: unikernels. On the client: new mobile platforms, like OSes based mostly on web technologies (which while not quite being there yet are getting more and more powerful).

C/C++ is not only a poor choice in regards to security, but also to develop for hardware with hundreds or thousands of cores, and all hardware platforms are moving in that direction. Yes there are of course ways to deal with that in C/C++, but other languages are much better at this.

Within just a decade or two I can see a fundamental shift away from the old computing paradigm, at least for the majority of systems in mainstream use.
Periscope had a great start, support very early on from investors, influencers and was bought by Twitter before going live, that helped explode the app from day 0. Something that did hurt Meerkat a lot was being cut off from the Twitter API something that became pretty normal on several apps that started getting traction.

Periscope acquisition by Twitter seems to have slowed them down on launching new features, but I have to say that their app and streaming works better than Meerkat and numbers don't lie. They are doing a great job.

Meerkat is great at innovating and moving fast. The "Cameo" feature looks really cool. Everyone thought they were going to be bought by Facebook, but they just launched their own app for famous people and journalists (at least at the beginning to try it out). Let's see how this space evolves once Facebook releases the app to the public and Google starts doing the same using Youtube.
Amazed by your attention to detail...and in need of a good eraser. Thanks for the tip.
Angr – A framework for analyzing binaries
I am not arguing for no taxes. I am saying that an effective tax rate above 50% is theft. Taxing more successful people at multiplicatively higher %'s is lunacy. They already are paying way more than lower income folks at the same rate.

If your argument is that more successful people consume more resources and thus owe the government a greater debt, then i would argue we should be taxing consumption more. Not income.
As you’ve probably seen with MEGA, this does not protect the site at all.

Take Megaupload (not MEGA), they had unencrypted data, but complied fully with DMCA and operated fully legally.

Take MEGA, they have to comply with DMCA, too, even though everything is encrypted and they never can decrypt the data, either (MEGA does literally the same as up1.ca)

Additionally, Certificate pinning only works if I visited the site before the MitM started. And some carriers like T-Mobile just strip every Certificate Pinning header anyway, as they use proxies to compress data. (Chrome’s Turbo mode does the same).

Essentially, the site uses JavaScript for showing images without providing any advantage to either the user or the site.
VW Has Spent Two Years Trying to Hide a Big Security Flaw
Looks like the archive is offline .. haven't been able to find another source, alas. :(
> git is darned crappy software

Let's not go crazy now.
We've developed (and keep developing) a rather big application in Backbone.js - it holds up and works perfectly.

We are setting a move from it since it lacks in some areas (no POJOs, no nested, manual binding, lots of extra backbone-mini-libs required), but it does hold well at any scale.

I wouldn't direct new comers to backbone.js anymore, new trends with 10x more contributors wins over anything. I wrote about it being the C++ of JS MVC frameworks (http://berzniz.com/post/66372634868/backbonejs-is-the-c-of-j...)
What's the rule for adding something to this? It seems like they're all links to github repositories that consist entirely of lists, but is it acceptable to link to an awesome resource within a repository?
This doesn't strike me as cognitive dissonance. From the government's perspective, Snowden didn't reveal illegal activity and so is not a whistleblower.
First Swift App launch
If you are starting with Swift and want to learn following things: - 1) How to declare IBOutlet, 2) How to declare property, 3) How to declare class variable. For more details please visit the link http://findnerd.com/list/view/First-swift-App-launch/3724/
"I don’t see many people in the security industry taking up this call..."

http://www.viva64.com/en/b/0324/ [Criticizing the Rust Language, and Why C/C++ Will Never Die ]

"It is crystal clear for every sane programmer that C/C++ is not going to die in the nearest future. No one is going to rewrite almost all of the existing desktop applications, operating system kernels, compilers, game and browser engines, virtual machines, databases, archivers, audio and video codecs, tons of other C-libraries, and so on and so forth, into other languages. This is a huge mass of fast, debugged, and time-proven code. Rewriting it is way, way too expensive, risky, and, honestly, doesn't seem to make sense except in the heads of the most frantic Rust fans. The demand for C/C++ programmers has always been high and will remain so for a long time to come."

Seems like just more proselytizing from Rust fans looking to expand their ranks. Of course more people in the security industry are not taking up this call, because it is a ridiculous suggestion.
That is literally the first time I have ever seen the tilde used in that way. I have seen it used to indicate sarcasm, satire, or snark on at least four separate web sites. In any case, we already have a mark for surprise or excitement: the exclamation point ('!'). No doubling up when we still don't have a generally accepted mark for insincerity.
All that extra computation load directly translates to increased power consumption and reduced battery life.
"Private", well, it’s not private. Seriously.

There is a reason you do actual crypto differently. Encrypt the image with the public key of your friends and send it to them, that is privately.

Giving a foreign entity control over your data and key is not "privately".

And, worse, I have to activate JavaScript, which decreases security by a lot.
Why is it limited to San Fran right now?
iPad: A Consumption Device, After All?
So, should we all move 100m to the east?
We can continue to debate the flaws in the documentation back-and-forth for ages, but there's not much point in it and that doesn't help with the glaring fundamental problems that have caused a company a lot of grief.

I appreciate your responses, but I'm done here.
Watching my roommate's cat do stuff while listening to these tracks - pretty entertaining stuff
Just a reminder that "free" isn't an actual license. Always look for a license when using content. Here is what they expect when you use their free music

> All the music on this site can be downloaded instantly and used free of charge for all kinds of projects in exchange for a link to our site.

> Non-attribution licences[sic] are available at just $8 for up to five tracks.

It's still an awesome resource to have but it's important to look for the details of the license.

BTW, here's another great resource provided by YouTube https://www.youtube.com/audiolibrary/music

Many of the resources there are free to use without any strings (for any project, not just YouTube) others are ad supported. Where's the license? Good question. I've never been able to find it. Closest I came was their blog post announcing the original 150 tracks. http://youtubecreator.blogspot.com/2013/09/free-music-for-yo...
> It doesn't: there are multiple different programs for reporting perceived illegal activity. Snowden never availed himself of any of these, but instead committed espionage.

These programs had been used by multiple people before, with no results. They are for show, so that people like you can point to them to show that there's "oversight".

Whistleblowing of the type done by Snowden is a last resort when there is no other option. The options you speak of are not credible avenues for change.
It is commonly thought that life would be much harder on a volcanically-inactive world due to the fact the volcanic activity cycles nutrients on a geological time-frame that would otherwise tend to collect on the bottom of the ocean. See http://earthobservatory.nasa.gov/Features/CarbonCycle/page2.... for instance, though it doesn't quite make this exact point, you can see how it might be a problem if all the carbon on a planet is locked up in rocks on the ocean floor after a mere 250 million years.
> Humans adapt wonderfully, that's why we're so prolific. There is no magic diet that happens to be "right."

I totally agree! And a funny fact is that at the core of Ayurveda, the belief totally lines up too in that each individual is completely unique and must cater to their individual constitution or 'prakriti'. I agree that its a hard field to investigate rationally because so many of their concepts were recorded in sanskrit, a language built to express multiple meanings (some words have +20 meanings!).

A fun 'for instance' fact of sanskrit sometimes being 'unscientific' at first glance: a key component of health according to their science was the concept of 'agni' or digestive fire. So there were tons of passages referring to a great fire element inside our gut that cooks and refines matter. Of course we 'know' that no fire actually exists in our bellies, but it was a metaphor for what nowadays we understand as acids in our stomach, and our gut microbiome (composed of throngs of little organisms, eating, digesting, transforming, pooping so other microbes can eat that poop (yum!)). Little guys that can alter our mood, digestive capacity of vitamin absorption and a bunch of other important things that have been scientifically proven in the west.
I didn't understand how Java relates to his comment about JavaScript + Python.
@dumbfounder - it crawls data for its recommendations. In order to maintain quality and make sure it's useful, I've limited its scope for the time being. More locations are coming soon!
Any secure remote access software is the most secure, except when it isn't. This is a tautology, doesn't reveal any deep insight.
Wow, he's got me. Reddit, HN and grandma's cookie site!
Thanks for the tough feedback, I'll definitely mull it over. One of the reasons I made this was because I have multiple iOS apps in the App Store that are really just fun apps that I don't have time to support. Since they don't have websites or server side components, something dead simple like this makes a lot of sense.