skysight-inc/HackerNews huggingface dataset:
Apple's 30%
I'm surprised they don't support C++11 user-defined literals[1]. That seems like a perfect fit for stuff like this.

[1] https://en.wikipedia.org/wiki/C%2B%2B11#User-defined_literal...
"Selfish" is the wrong word, and to me assumes a certain troubling kind of bad faith. People respond to incentives. If the performance of a team is not the primary evaluative factor for a developer (and it often isn't), then it makes no sense for somebody to focus on anything else. A developer must be incentivized to view those five to ten times a week as a plus to the point of not finding it worth complaining about.
I wish I could listen to music at work. But as I'm both an ENFP personality type and former semi-pro composer, I immediately get into the music and analyze chords, rhythm, melodies, counterpoint, filters, compressor settings, room / atmo setup and lyrics. It's fun but I can't work anymore when I listen to anything but my rain & noise montage... :)
Sounds wonderful! I especially can't wait for incremental compilation. I can't understand how others do any work without it.
Ed's views on Bitcoin are a little surprising. I'm not sure what he means by "nobody likes to talk about Bitcoin any more". It's not that old!

One of the problems Bitcoin solves is that you cannot have personas or unlinked identities in the traditional financial system. Governments, and therefore the banks they control, all view financial privacy or pseudonymity as only useful for criminals. That's a rather narrow viewpoint. Especially as the notion of "criminal" becomes more divergent between ordinary citizens and their rulers. There's some truth to it (anonymity does sometimes enable bad stuff), but it's excessively black and white.

Regardless, given that Snowden views payment methods and such as being very important, he even brought that up himself, I don't know how else he thinks it can be done, other than with Bitcoin. If you try and create a payment method that has privacy the banks won't give you the time of day. Being completely decentralised and independent is the only way to do money that exists outside of the status quo.
Well, back when I was first starting to understand computing (Pentium II days), the phrase we always kicked around was "Do something great that Microsoft is terrible at, then wait for them to buy you out." That kinda-sorta applies in this scenario.
There are some times where your guilt and the law are ambiguous, and so who's to say that you do or don't deserve a ticket? Also, you're welcome to pay your tickets and not fight them, often the cost of hiring a lawyer is more than the fine anyway.

If you're asking the kind of people who have no consideration for others, and thus break parking and traffic laws, to be considerate to others, I think you're going to be sorely disappointed.
you mean a guided tour of the page and highlighting elements? There are a few here https://www.designernews.co/stories/15273-a-list-of-product-...
It actually works quite well for MEGA.

MEGA is only able to comply with the DMCA when the link is provided with the full hash.

MEGA is technically unable to remove similar or matching files based on content.

> And some carriers like T-Mobile just strip every Certificate Pinning header anyway, as they use proxies to compress data.

I question the t-mobile thing, unless they're installing certificates on end-user's phones that should not be possible. This is SSL traffic, remember, all those headers are also sent over SSL so unless T-Mobile is performing MITM, this shouldn't be a problem.

As for the Chrome Turbo mode thing, it is disabled for SSL traffic, as are most of these other things.

https://developer.chrome.com/multidevice/data-compression
This Is Not a Machine Learning
Snowden was a "disgruntled ex-employee". Sometimes there are good reasons to leave a company.
Thanks for clarification. I have used Whatsapp and it worked great until 08:30 PT when it suddenly stopped working.

When you say "natively integrated" what do you mean? As far as I can tell there are no APIs for either Whatsapp or Facebook Messenger.
Is this a specific feature of VW's implementation of CAN? CAN in general (at least not in 2007 when I last worked in the industry) is not secured. The only real security once you had access to the CAN bus were the separate rings (although several modules bridged). You probably couldn't start the car and keep it started unless you figured out the variant of crypto handshake used between whatever did ignition/skim/rke and the engine (sometimes public key, sometimes symmetric, often with some sketchy cipher implemented by modules that would offer full memory access via debug protocols if you asked the right way). If you had access to the spec for messages for the machines, access to the CAN bus can do some very cool/scary things.

Depending on how the car manufacturer spec'd the engine<->skim handshake, you might get as lucky as to just be able to isolate the offending skim/rke unit and MITM/replay its messages. If the rke and skim units are separate, there's an outside chance that the beacon that is sent after remote-start that lets the engine know not to turn off doesn't contain a secret key itself and can be replayed. In any event, I'd assume that physical access to the vehicle means that a kit could be deployed in minutes to steal the vehicle without any fuss.
Then you will love https://reddit.com/r/PrivateStudyRooms
"Once I hear a person in my music it becomes frustrating."

If you like the human voice in your music but lyrics frustrate you, try listening to music sung in a language you completely don't know. I find it very effective.

Plus it's a great excuse to really spread your wings and try some new stuff.

Given how few songs out there really need the lyrics themselves, I find it no great loss. (There are, of course, a few where they are critical, like https://www.youtube.com/watch?v=bSwL9deXNW8 (Cat's in the Cradle), but usually they vary from "slightly enhancing" to entirely incidental.)
>As long as that is less than 3k it's a net win

Financially, you're right. But money isn't the only factor here. Would you pay $3000 - $WEEKS_SALARY to stay out of jail for the week? For some people, being in jail for a week is not a 'net win'
I would guess that it's well past one decade for Rust (there's been 8 paid people on the team for at least a year).
So a car unlock is $175? You might as well get AAA which costs a third of that, and you can get car unlocks all year for free.
Since crates are the compilation boundary, and you can make projects out of multiple crates, larger Rust projects tend to be split up, even internally.

Take Servo, for instance: https://github.com/servo/servo/tree/master/components or rustc itself: https://github.com/rust-lang/rust/tree/master/src

Each of these subdirectories (basically, a few aren't) is a crate, so you'll only be recompiling stuff in the subdirectory you're editing. Incremental compilation will still help with projects like this, of course.
I think you could find some references to useful resources here:

http://ocw.mit.edu/courses/electrical-engineering-and-comput...

Unfortunately no video lectures.
True, but it might be handy for kidnappers.
The Jaguar and the Fox (2000)
This is very personality dependent, which the article didn't mention (I don't think). As an INTJ music almost always is helpful, except for maybe extremely challenging tasks. However, often to see those challenging tasks in a different light, music is helpful.
Incidentally, after checking it out - the product you have linked to is an SMS gateway.

Myra is able to understand intent via natural language processing. This is independent of the medium you interact with it from - for instance, it could use Slack, Telegram, Gtalk or even email and voice.
Because right now Kotlin is the JVM language made by the largest company outside Java and Oracle

Truth be told, I don't really find that very compelling. I mean, do programming languages always need "big company" support to be successful? I don't know. So far Scala, Clojure and Groovy have done pretty well, with varying degrees of commercial support.

As a result, it is also the non-Java JVM language with the best IDE support, best Android support and best build-tool support.

I guess, but here's the thing... the languages I use now (mainly Groovy and Java) have at least good enough IDE support, Android support (ok, I don't really care about that) and build-tool support. So even if Kotlin is incrementally better, or hell, even dramatically better, that stuff doesn't do a lot to sway me to Kotlin.

That said, like most geeks, I like dabbling with new languages, and I am sure I'll try out Kotlin (and Ceylon) at some point. And maybe then one or the other will "wow" me. But for now, it isn't a high priority. And I expect a lot of other people are approaching it with a similar mindset.
My point was: if you buy Google stock, you're paying Google multiples on top of venture investments' multiples. That's exponentially costlier.

When I say you're investing at book value, I mean, of course, book value at fund share level, so no second layer of multiples.

The venture investments made by Google have the same liquidity constraints, and you could argue Google's SG&A are much more expensive than 2% management fee (not sure about the performance fees, though).
What REPL means for Java folk
If you do it right, and get lucky (timing, network effects, factors beyond your control), you might be in a position to stand alone against them or be acquired by them.
Subuser uses XPRA, so it shouldn't suffer from this problem: http://subuser.org/news/0.3.html#the-xpra-x11-bridge
Unless VW is significantly different than GM and Daimler, Megamos likely had very little control over the protocol and messages being sent. They would be given a simulation of the vehicle bus that they would be expected to duplicate exactly. A full spec would be given providing state diagrams for each message and its handling. Megamos engineers would be able to offer suggestions, but the message structure and overall protocol would have been outside their control.
Interesting.

Would not a service like this suffer from the same "discoverability" problems like the iOS App Store? Why would it be better to be part of a service like this rather than running your own store?
Awesome point. When I used the term "freer" I was suggesting that we were freer because even laypeople now KNOW about electronic surveillance practices. But I'm not sure we are actually "free" in any sense of the word, we just know we are constantly being watched. The reality is complicated and unfortunate. Words like "free" or "freedom" will sadly never be appropriate.
Seconding CERT. Lots of good advice. Certainly the place to start.

Along the same lines are the MISRA guidelines, though they are 1) targeted more towards embedded systems and 2) stupidly not freely available. There's an ISO standard for secure C coding (ISO/IEC TS 17961:2013) which is also not free. While you might not get to source document, there are hundreds of sites that summarize the requirements and recommendations.

SANS has a secure coding track worth checking out.

There's a tremendous amount of useful stuff in the NIST SAMATE project.

The OpenBSD folks write a lot about secure C coding.

Mozilla has some pretty good general advice at https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines

So does Apple: https://developer.apple.com/library/mac/documentation/Securi...
> Wouldn’t you need to have a device actively running within a few feet of the vehicle to run such an attack?

Nope. Just a high-gain antenna.

> Couldn’t the car start blaring an alarm or something in that case?

It could. But that might not help.

For example: you're driving your Mazerati down the road when it suddenly stops and the alarm goes off. The next day you get a letter saying, "If you don't want yesterday's little incident to become a regular event, send BTC500 to the following address...."
A recall for what? There's no safety issue here. There's no functional loss.

Unless they advertised the car as being unstealable or anything close there's not even a marketing point that's not working as one could reasonably expect. Carmakers call this a theft-deterrant feature, they don't even call it anti-theft or similar.

The immobilizer is not as secure as one would hope, but nobody ever promised you anything here in the first place.

What keeps your car from being stolen is not the immobilizer. The government and laws are what keep your car from being stolen.
TetraScience’s (YC S15) Internet-Of-Instruments Could Supercharge Research
Make sure you have http://www.iro.umontreal.ca/~bengioy/dlbook/

Its Bengio's (very well known deep learning researcher) upcoming textbook. I would highly recommend to anyone interested in deep learning/neural net subset of machine learning.
> The taxable amount would be income minus consumption.

Doesn't this result in all sorts of bubbles, as people scramble to manufacture consumption, from real estate to precious metals?

Also, taxing the increase seems to benefit wealthy offsprings and trust fund babies in general.

For most Americans a change in wealth is also tied up to non-liquid assets, like their house. Let's say you're a retiree living in an area that's been lucky to undergo a real estate boom this specific year. Your house wealth went up 7-10%, yet there's no extra cash flowing in to account for this tax bill, now what?

Moreover, with housing being the focal point of wealth accumulation, the government would receive its tax revenue when the things are up in economic cycle, but come the first recession/correction, and not only there are problems with the economy, the source of government revenues has dried up as well.
Stop Looking for a Cofounder
Country Risk Ratings – Money Laundering
INFJ (not sure this has useful interpretation in the practical world) here.

Like listening to music, any voices in the background completely derail my thought processes. But then I am easily over stimulated.
Someone wants to push people off Kaspersky. Counter-intuitive as it is, everyone in the west should use eastern (russian/chinese) anti-viruses and OS, and vice versa. That way, it'll be harder for each government to abuse and spy on their own citizens since I doubt Kaspersy entertains any request from foreign govs.
> No. DNSSEC does not encrypt the DNS. After DNSSEC is implemented, everyone will still be able to read DNS. The major difference will be that sites will store their TLS keys in the DNS, and will thus have vouchsafed them with a new set of CAs controlled by the Five Eyes governments.

Fair enough, my knowledge of DNSSEC is limited. I thought it provided confidentiality in addition to authentication, but I see I was mistaken.

I'm still not sure how you arrive at the conclusion that it is a net loss. Which attacks will DNSSEC enable that are not possible today? If you mean that it will give people a false sense of security, is that not the same as TLS today? Despite my hangups with the CA system I think we're better off with TLS than without it.

The NSA certainly has no problems with intercepting DNS requests today with their QUANTUM tools.

I am genuinely interested in hearing other ideas about how to provide confidentiality and authentication for DNS without central trust. Since you have clearly investigated these matters, I would like to ask again, are you aware of any promising projects or ideas in this regard? Because I would jump into the anti-DNSSEC camp in a heartbeat if one existed.
That's actually the more 'normal' way of doing it. In type theory (or mathematics in general), you almost always write value: Type. (For instance F: A -> B.)

This is how it is done in ML, Haskell, Erlang, Rust, Smalltalk, etc...

It's mostly just C-like languages that do it the other way.
1. He's the one who brought up DANE.

2. DNSSEC is harmful for reasons that go past DANE.

3. I am worried about DNSSEC; I think it's a more reasonable thing to be worried about w/r/t/ surveillance than 95% of what's been posted to The Intercept.

4. QUANTUM INSERT will work fine in an all-DNSSEC world.

5. You can revoke a CA. It has happened more than once. You can't revoke a TLD.

I'm happy to talk more about how I think DANE CAs are different and worse than the 20391 X509 CAs we have today, but I'm not sure you're asking me to go on at length about that.
would seem to me that an antivirus software company should guard pretty heavily against this kind of attack, since if it works anyone could sabotage a rival by anonymously submitting doctored versions of their software.
At least in Germany, yes. Usually the key is also secured with multiple other techniques and has a 3-dimensional unique pattern, plus additionally magnetic safety features.

And the fact that the car has a steering wheel lock (the steering wheel is locked in the right-most position) is also standard.
wrt felix:

"Chat and Discussion: Facebook Group Felix Programming Language"

This is acceptable for some ad hoc NGO initiative but it is ridiculous for a programming language project.
I doubt you'd say that if you owned one of the affected VWs.
The first and foremost "target" here is not only Kaspersky (i.e. Russian tech/security industry) but Russia itself.

Notice again the title ;)
How Hunter Scott used a bot to win 1000 contests on Twitter
Hi all,

This is Salvatore (Sal) from TetraScience. Our team wants to share with you the news that we are on TC.

Happy to answer any question.

Sal
Do scientific journals count as books? Have they ever been novelized? I feel like they might fall outside the scope of the topic.
Thank you, it is done.
Very true. The Free Music Archive ( http://freemusicarchive.org ) has an extensive library of CC-licensed songs with the license properly highlighted song per song.

edit: typo.
yes government needs good tech but we as a global community also need good leaders that understand implications of new tech , policy and innovation.
Snowden had proof. Here I don't see anything of substance.
As other have said, read Mikhail Bulgakov, including his "Heart of a Dog".

Also try Italo Calvino, his short stories are especially good. Calvino writes in many different literary styles, and magical realism is often at the core of his stories. "The Baron In The Trees" was one of the first books I read by him.

For when you have the mental space, a rather interesting / meta Calvino book: If on a Winter's Night a Traveler
I wrote a long piece that says everything I'd say in a comment here:

http://sockpuppet.org/blog/2015/01/15/against-dnssec/
> the lack of move constructors, which (should) make Vec<T> faster than std::vec.

So you are saying that the lack of move constructors (hence copying the structure) will make Vec<T> faster than std::vector? I don't follow that logic, wouldn't it actually be slower?

> I was going to point out that if you std::move a uniq_ptr, it becomes null

The original becames null because the semantic is actually tranfering ownership which might be desirable depending on the case. Also you need it in case you are using custom deleters.

http://stackoverflow.com/questions/13860219/what-are-the-dif...
For me personally, music can help to focus me when I'm feeling distracted and unfocused.
really there has been an epidemic of thefts of range rovers in London - car theft gangs are not some kid with a screwdriver any more.
You can send you resume to me at konstantin dot solomatov at jetbrains. We have 2 positions which are currently open is USA:

* https://www.jetbrains.com/company/jobs/#software-engineer-ne...

* https://www.jetbrains.com/company/jobs/#software-engineer-ne...
Zed's advice is pretty controversial among the veteran C programmers I know, so I'd hesitate to recommend LCTHW except as an introduction to C rather than a security-minded thing.
http://webcache.googleusercontent.com/search?q=cache:tFnDscE...
I do not recognize the significance of "official" versus "unofficial" IETF events. I don't think there's a meaningful distinction to be made between them. Anyone in the world can show up to an "official" event, or participate in the mailing lists. That's a good thing, but it also means that "unofficial" advocacy and advice is as important as the "official" kind.
I learned about this a few years ago, but haven't made use of it at all. But I can see how it could be handy. I like using the vector attribute to make gcc generate vector instructions.
These recurring events (of auto makers exposed for not owning up to faults) reminds me of is the Fight Club description of the recall formula.
Love that Ergo 4000!
You can afford to just be homeless every other month.
Show HN: Python function patching (not monkey patching, actual patch-patching)
If the car responds to RFID keys at all when driving, that is a flaw.
Almost all German manufacturers use these variations of CAN.

Bosch recently published how their variants are used to prevent stuff like break-in through the radio.

The system is safe against replay attack (by prepending a timing signal to the encrypted message), has seperate rings of trust (so your gas pedal can control acceleration, but your radio can’t), and is in general quite safe.

And, well, with a physical kit you might be able to start the kit, but the steering wheel lock can not be unlocked without a physical key. And even if you break through that, you need to stop the immobilizer.

So you end up breaking open the door, breaking with large tools a part of the steering wheel lock, (hoping the car does not have an anti-intervention system, usually a cat jumping onto the car already starts a loud alarm), then you have to actually start the car and run this 30-min brute force attack against the immobilizer, after having sniffed the owner before.

It’s theoretically possible, but it's not really a practical attack.
> And you can do so in contexts you might not have before, dropping down from languages like Ruby or Python, making your first foray into systems programming.

I guess I'm one of those programmers who is quite alienated from systems programming - probably due to my daily work in Python / JS. The Rust lang book is quite good (great job @steveklabnik et al) but from my past experience I've found it easier to stay committed to learning a new programming language when I have a project that I can work on.

Can someone suggest a few "getting started" but useful systems programming projects that I can use as a test bed for learning Rust?
From Peopleware, which many C-level folks should be beaten over the head with:

During the 1960s, researchers at Cornell University conducted a series
of tests on the effects of working with music. They polled a group of
computer science students and divided the students into two groups, those
who liked to have music in the background while they worked (studied) and
those who did not. Then they put half of each group together in a silent
room, and the other half of each group in a different room equipped with
earphones and a musical selection. Participants in both rooms were given
a Fortran programming problem to work out from specification. To no
one's surprise, participants in the two rooms performed about the same
in speed and accuracy of programming. As any kid who does his arithmetic
homework with the music on knows, the part of the brain required for
arithmetic and related logic is unbothered by music—there's another
brain center that listens to the music.

The Cornell experiment, however, contained a hidden wild card. The
specification required that an output data stream be formed through a
series of manipulations on numbers in the input data stream. For example,
participants had to shift each number two digits to the left and then
divide by one hundred and so on, perhaps completing a dozen operations
in total. Although the specification never said it, the net effect of
all the operations was that each output number was necessarily equal to
its input number. Some people realized this and others did not. Of those
who figured it out, the overwhelming majority came from the quiet room.