skysight-inc/HackerNews huggingface dataset:
Location: Chicago, IL

Remote: Yes/No

Willing to relocate: yes

technologies: html5, css3, jquery

resume/cv:

- resume: http://www.nicaly.com/assets/resume.pdf
- website: http://www.nicaly.com
- portfolio: http://www.behance.net/nicalygray

email: nicole@nicaly.com

I am a recent student of graphic design in Chicago, IL and I am looking to start working in web design and front end development. My school offered very little in terms of development classes and most of what I know is self taught. I am continuing to teach myself in my free time (while still working other full time job) but I really would like to find something that bridges my design experience while immersing in the front-end development aspect to further augment my skills.
The law is sort of like that. You are only given an injunction when you prove you will suffer an irreparable harm that monetary damages cannot make hole.

Before 2006 injunctions were essentially presumed, but now it's pretty hard to get an injunction in a patent case.
Matt Blaze developed a very cool attack against master-key lock systems: http://www.crypto.com/papers/mk.pdf

It requires access to one (non-master) key as well as a lock which is open-able by that key. It also requires being able to generate a modest number of new keys with a key cutter (however significantly fewer than brute forcing the entire space).

IIRC, the attack boils down to:
- Start with the known non-master key
- Hold all but one of the teeth constant, and try different values of that one tooth until you get a different working key. This other value must be the master key's value.
- Repeat until you have the master value for each tooth.

If TSA locks work the same way as the locks described in this paper, a single lock/key seems sufficient to generate the master key.
Why wouldn't they? Even open source software comes with a license that restricts exactly that.
Another cause of this is that services are generally not priced on a case by case basis. Hospital inpatient claims are priced based off of DRGs (Diagnostic-related group). An insurance company is not charged on a line-by-line basis. Rather the entire claim is submitted to the insurance company, who will process the claim and assign a DRG to that claim based off of the procedure codes, diagnoses and other factors. It might also assign a severity level. Based off of the DRG and severity level and the negotiated fee schedule a price will be assigned. This price might be a per day amount or a price to cover the entire span.

So you have an added layer of abstraction between what the service is costing and what the hospital is being paid. This system was put in place to simplify the pricing procedure so that it did not have to be done on a case by case basis. But it limits most hospitals to only really caring to this higher level of detail.
No, they do not allow any reference material.
I always opt out of the "rapey-scan", then smile and groan a little whenever they pat me down. I also travel about 30-40 segments a year, so I get my kicks frequently. It's surprising how often that "TSA Precheck is closed" or the TSA Pre metal detector beeps just for me.
There's also this interactive page for eigen- vectors and values: http://setosa.io/ev/eigenvectors-and-eigenvalues/ (as well as a sibling for PCA: http://setosa.io/ev/principal-component-analysis/)
I think your example with the watches is actually entirely non-relevant. I personally don't advocate for laws forcing companies to sell isolated parts to third-parties. It's certainly a nice thing for a company to do, and I would take that into consideration during a purchase.

To be analogous, the watch companies would need to be suing people for repairing their watches, perhaps by cannibalizing parts from other broken watches. I haven't heard of any watch makers doing that, and until they do, there is no attempt to subvert the doctrine of first-sale that we are seeing with the Lexmark case.
Nah, sometimes I just want to check the current temperature. A persistent problem with LCD-powered devices is that because of power consumption or general visual obnoxiousness their screens need to be kept off until use, but there's always a time lag.

One of the more glaring problems with smart devices - smart watches especially - is that they have have a slight pause before they realize they're being used and activates. An always-on device doesn't have this problem and can be immediately used without delay.

By themselves they're not huge issues, but as you own more and more such devices it becomes really annoying to be surrounded by "smart" inanimate objects that constantly make you wait - even for a brief moment - before they are usable, and in that way they seem much less pleasant than the dumb objects they replaced.

Imagine having to rest a pen on paper for 500ms before you can begin writing, every time.
How I Generated 513 Leads to My Startup by Commenting on Blogs
They bought the company for 1.6b in 2005.

They sold the company for 3.4b in 2007.

Did this happen because they made its management less effective? Do you think people who spend 3.4b to buy a company are unsophisticated investors?
Should be doable as long as you have the non-master key for that lock too. A standard key lock works by having pins which are separated into two pieces. The key lines up the boundaries with the cylinder, which allows the cylinder to turn. Master key systems are typically done by having the pins be separated into three pieces, which allows two positions to turn the cylinder. One position is used by the normal key, and one is used by the master key. Having the normal key will let you figure out which is which, and then you can figure out the master key from that.
This is exactly the sort of niche that fully automated single-part manufacturing equipment can fill.

While you're not going to be able to print a replacement part for a mechanical watch with a RepRap any time soon, a specialty machine that could duplicate parts by putting the original on a microscope slide and taking some photos could be useful whenever the replacement parts are unavailable from the manufacturer at a lesser cost.

Some hobbyist-grade volume printers and CNC mills have been employed to make car repairs in instances where the manufacturer sells for $50 some nylon gear assembly that contains $0.10 of plastic and some commodity steel axle pins. Sometimes, the nylon is replaced by CNC-machined aluminum (at higher materials cost--maybe $2 instead of $0.10), and that part will never need to be repaired again for the lifetime of the vehicle.

Such one-off manufacturing moves the market from zero competition, where the market can be manipulated and controlled, to a more competitive model. Even if the original manufacturer can create a replacement part at 1% the cost of a home-repairer garage-manufacturing a part, the threat of it places an upper limit on what the business can charge for their officially sanctioned repairs.

It is the manufacturer's refusal to sell those parts at a reasonable price that creates the market opportunity. Every complete new watch must necessarily contain working parts. So someone buys one, takes it apart, makes detailed photographs, and discovers the means to duplicate the parts. It's not whether the parts can be produced at lower cost, but whether they are made available for sale by anyone at lower cost. If it costs you $20 to make a part that can be produced at $0.02, it hardly matters to you if the only way you can get that is by paying $100 and shipping to and from the factory.
This is pretty cool. I always wanted to be able to uninstall/install nodejs. Keep working hard.
Ah yes, you are correct. I remembered that incorrectly.
The way I understand master keys work is that the lock has two "breaks" in each pin, instead of just one. So each pin has two positions that allow the lock to open, and you don't know which one belongs to the master key.

I think at least two locks would be required, and depending on how many pins and possible positions there are, more might be needed in case of a collision.
HTTPS: is security worth the performance penalty?
What's bizarre to me is how casually "non tech" people in Singapore refer to watching stuff on "Popcorn Time."
Indeed it is. Legit avenues like Netflix and iTunes are showing people are willing to pay for content, so long as it's available. There's dwindling tolerance for manufactured scarcity.

Make it available, and we'll buy it. Don't, and it'll be pirated. That's just how things work.
It sucks to watch corruption and violence win the day. We seem to be seeing it. Where an economy can be based on maintaining a military force in other countries, to maintain the petrodollar and central banks. And a lot of good people losing their lives, brought up in the belief, they're helping freedom. What a mindfuck that is.
12-year-old Lydia Sebastian Beats Einstein and Hawkings Score in IQ Test
> Your private key is not being stolen, read the code!

I'd change this to:

> Is your private key being stolen? Read the code!
Just bring your own drugs. What are the odds of two people putting drugs in the same suitcase?
The big claim with HFT is they "add liquidity", but there's evidence that shows the opposite. Indeed it seems like HFT's only add liquidity when it's already plentiful, but reduces liquidity when it's really needed.

The Fed has said as much recently.
Dimple locks are not at all for high-security, they are less common though.

They can easily be defeated with a deep-drilled blank wrapped in aluminum foil.
> When I started out, I believed that government regulation could solve every problem with relatively simple intervention.

You don't have to be a tea-partying libertarian to see that such an idea is shockingly naive.
Tribute to the King Elvis Presley by the West India Movement
Cockroach dev here.
We're actually currently implementing a SQL layer within cockroach. So it wont' be layered, it's the main method of interaction with CockroachDB.
Not even the paid certs that most people buy are tied to identity. Those only validate control of the domain (usually by having you whack some garbage into a DNS TXT record).

Yet another reason why the SSL PKI is a scam and a racket.
Understand how automated functionalities save precious time
A blog page listing reasonable quality watches that can be repaired would be useful. It would be tricky to post on HN - watches attract a lot of spammy pages and HN probably filters that stuff out. You might need to coordinate with dang before posting. (I feel sorry for whoever has a handbag startup).
I've had the same thought. It'd add clarity (as in, an actual answer to "WTF will this cost me, after insurance?"), reduce complexity ("well, we have different rates depending not only on which insurance provider you have but on the specific plan you have", and associated personnel to manage that and similar BS) and, most importantly, it'd incentivize insurance providers to work collectively to drive down prices—I suspect they'd avoid free-riding by forming associations for which a given hospital accepts all or none of the member insurances.

Or we could just have single payer. But if we can't have that, I think the above would be a fair bit better than the mess we have now.
I have tried one but the learning curve was too steep for my net productivity to recover.
That's when you start phreaking. Then you learn to deal with your mom bursting in the room when you get a letter from the phone company investigating wire fraud.
> Strava.com will generate a heat map of all the roads you've walked (or biked) on.

Warning - I think this is a premium-only feature.
Welfare state cuts back: Finnish government announces cuts to employee benefits
If you find one, please can you post?
Looks great, nice job!
I tend to use http://requestb.in/ since it's a lot simpler to use. Basically press on the button in the middle, copy+paste url and then reload page once webhook is there.

Also, I created this nifty shorthand for use in the terminal:

alias bin_me="curl --silent -X POST http://requestb.in/api/v1/bins | jq -r '\"http://requestb.in/\(.name)?inspect\"'"

Requires JQ (could easily not require that) and you'll just remove the ?inspect when you want to use the bin.
I'd argue the seal provides little value as the TSA will need to break it if they wish to search the luggage. Once the seal is broken, the luggage may be tampered with. Perhaps if the TSA resealed the luggage they searched?
Value objects in Ruby: Serializing your custom objects with ActiveRecord (2/2)
You think I'd rather file an insurance claim than prevent my stuff from being taken?
Fair enough. I guess part of the appeal of having published prices is what other people could then do with them, too. Not just that I could shop around for rotator cuff surgery or a hip replacement, but actually interesting stuff that's only done internally right now.

If prices were published then someone could track the prices of a great many procedures and look for procedures that were getting cheaper. You could then interview people at institutions that are able to do those procedures less expensively and publish it. Other institutions might then follow suit and the savings could be shared widely. The lessons might cross boundaries and spark other folks to recognize that X is very similar to Y and they can use the same lessons to make Y cheaper, easier, more foolproof, etc.

Further, with reasonable pricing information and some measure of quality it would be pretty easy for people (and perhaps insurance companies) to encourage medical tourism of a great many varieties. Maybe the country doctor or dentist is very skilled but wanted the country lifestyle and doesn't want to drive 2 hours a day to the city. But perhaps city folks would be happy to drive to the country to enjoy a cheaper procedure, hospital stay, etc versus in the city. Right now this kind of arbitrage isn't possible again because prices aren't disseminated widely.

Finally when we're talking about human lives which we think are intrinsically valuable and arguably priceless, then I'm not sure that "almost always does not" doesn't mean that something isn't valuable. Young people with families buy life insurance against something which "almost always does not" happen, namely their premature death and yet nobody argues that life insurance shouldn't be allowed. Similarly for any one individual wearing a seatbelt "almost always does not" do them any good since car accident rates are very low, at least on a percentage basis. http://www.forbes.com/sites/moneybuilder/2011/07/27/how-many...
> In the end, the reality that overcame was that life sucked and will continue to suck. Only little pockets of joy exist here and there.

Ever considered a sideline as a motivational speaker?
BMWs, Audis, Teslas, Mercedes, Porsches and I'm sure I missed a few others: these are all sacred cow status symbols. You're going to get downvoted by their respective followers saying anything bad about them.

I personally really dislike BMWs for delivering horrible !/$ and for iDrive. That said, for any of the above, if you're willing to spend $80K or more, you can get a pretty amazing car. I'm not: If I had one, I'd stay up all night worrying about my precious 4-wheeled baby.

So I end up scooping up 3 year-old high-end lease returns worth half their MSRP or less with low mileage with no real brand loyalty. IMO here's a great article on taking this to the extreme: http://www.apidaonline.com/index.php/home/item/5-things-no-o...

Probably going to get downvoted for admitting I share your dislike of BMWs though (oddly, I don't mind Audis, for each their own).
discussion: https://news.ycombinator.com/item?id=8899656
Is It Time to Tax Harvard’s Endowment?
Compute Engine Preemptible VMs Are Now Generally Available
Услуга+в+похоронной+области+-+психологическая+помощь
ShaderFrog: Create complex, beautiful shaders with no code
There's a greater good argument to be made that people shouldn't be denied access to education and culture simply based on the country they live in or how much money they have.
It appears to be using Node's crypto library to apply the RSA transform directly to the plaintext in modulus-size chunks. The problem isn't the quality of the RSA implementation.
I wouldn't call that heavy duty. Sending them a scan of your passport or ID (which you already have somewhere on file...) is hardly too much to ask for. It didn't take me more than 10 minutes. And they'll even call you back to validate the information on a sunday! (which I think is impressive)
function encrypt(public_key, file) {
var pem_pub_key = sshKeyToPEM(public_key); // convert rsa to pem

var chunks = [];
var buffer = new Buffer(fs.readFileSync(file, 'utf8'));

// work around for 214 character limit for encrypting
// text with small openssh rsa pub key
for (var i = 0; i <= (buffer.length / 214); i++) {
chunks.push(buffer.slice(i * 214, (i * 214) + 214));
}

chunks.forEach(function(chunk) {
var encrypted = crypto.publicEncrypt(pem_pub_key, new Buffer(chunk));
console.log(encrypted.toString('base64'));
});
}

According to the docs, crypto.publicEncrypt uses OAEP by default, so the bulk of the terribleness should mainly be how horribly slow this is. It does clearly indicate that the author has no idea what they're doing, though.

Edit: For some reason I thought OAEP included randomness. It does not, which should mean you can guess-and-check the plaintext.
Cockroach Dev here.
We're actively working on a SQL layer actually.
We really need to update our github readme to contain info about it. It's under active development and of course, it's inspired by F1.
I would hope that an anecdote for one particular model 20 years old would not be interpreted as my opinion on 40 years of vehicles. I would love to read stories both good and bad about peoples experience with a 3 series. I would love to have an E30 3 or M3 as a play around car. That said, that '95 318is was garbage and does not even come close to "the ultimate driving machine". A 325 of that era would be way better. Im really surprised that BMW even sold that car with the 1.8l engine anywhere- it was way too underpowered for a near luxury/sport coupe. At the time, that car was 25k(39,213.76 in todays dollars according to http://www.dollartimes.com/inflation/inflation.php?amount=25...) which can get you 3-400 horsepower depending on what you buy these days.

Engine technology has come a long way in those 20 years, you have to get into econobox cars to find 136hp vehicles now.
React Native Periscope Hearts Animation
More akin to standing in quick sand while someone sets you fire and a succession of literal band wagons drives past ;).
discussion: https://news.ycombinator.com/item?id=10130341
Not quite as naive as believing that every problem works itself out as long as the government goes away.
Death Magnetic isn't too bad. Not Puppets good. But I listen to it every once in a while, where St. Anger was the most disappointing thing I ever experienced musically.

You have to remember St. Anger was a full 6 years after they put out anything original. They were trying to rekindle the old stuff, but it's hard to remember how it was to be hungry after being on top for so long.

If you ever saw the making of St. Anger documentary, you knew there was no way it was going to be good. James went into rehab 1/2 way through production out of nowhere. Everyone was angry with each other. Krik just wanted to play and then hang out with his horses on his ranch. Lars forgot how to drum. It was really bad.

Then all of a sudden they finally adjusted to being sober and hey, look at that. Something pretty good.
The point is that it's using ECB mode with RSA, which indicates the developer has no real knowledge of crypto and is just blindly using pairs of "encrypt/decrypt" functions from Node's built-in crypto lib (which is essentially a thing wrapper around OpenSSL and thus joins its illustrious legacy of encouraging developers to make catastrophic cryptographic implementation mistakes).

In encryptMessage.js, the plaintext is split into chunks, and then chunks.forEach encrypts each chunk (via crypto.publicEncrypt) independently, and concatenates the chunks to form the ciphertext, aka ECB mode. You shouldn't use ECB mode with any cipher because it is not semantically secure. This is Crypto 101.

In addition, it's a bit wacky to use RSA encryption on your entire message because RSA operations are slow and you are limited to encrypting messages that are the length of your RSA key (well, minus the padding, which is how this developer arrived at the "split plaintext into 214 byte chunks" workaround).

A better solution (in every way) would be to use a "hybrid" encryption scheme, similar to TLS or GPG. To do this, you would:

1. Generate a random key for use with a symmetric cipher (e.g. AES-256)
2. Encrypt the plaintext with the random key, using a secure block mode (e.g. CBC, CTR)
3. Encrypt the random key with the RSA public key
4. Package those things together and share it on Github

Efficient and secure. Also totally unnecessary (you basically just reinvented a subset of GPG) but that's neither here nor there.
Look at this video I made a while back about handgun locks...

https://youtu.be/BjkRVNFkjaw
Erle-Spider, an Ubuntu-based drone with six legs, launches on Indiegogo
The people who say these kind of things have always been the loudest, (un-)ironically bloviating about how no one in the country is allowed to give the criticism they do, 24/7. I've also noticed there's a very large concentration of them in tech circles, for some reason. Not sure why.
I'd say that lag only exists because the UI is running on a full multi-task OS. My microwave display doesn't take any noticeable time to wake up when I rotate or press a button, and neither did my radio or my VCR.

Smart but task-dedicated devices should probably run the display/buttons on a dedicated chip that talks to the CPU asynchronously, to avoid this problem.
Absolutely ... the same principle can be extrapolated to self-confidence, education, patience, ...

- self-confidence to not buy an expensive Apple smartphone like your peers but a reasonable priced one from Huawai

- education to efficiently think about a products features

- patience to not buy as soon as possible but take time to observe prices and wait for meaningful reviews on amazon

At the end of the day it all comes down to your personal biography, upbringing etc.
No one has funded actually putting a larger display into production, the eink folks show them off periodically to show that they can make them if wanted.

I'm more inclined to do the 6 rows of 7 displays which allow for a day aligned calendar for every month. It wastes a few displays of course, but the displays are easier to get.
The 500,000 initial applicants take a preliminary test that consists solely of multiple choice questions. [0] This year only 15,000 applicants passed on to the second round of testing. [1]

[0] http://www.webcitation.org/604rj8vNB

[1] https://www.thestar.com/news/world/2015/09/07/are-you-smart-...
Wouldn't it take 250ms between typing a character and it showing up on the screen? That seems kindof annoying.

I could also imagine that searching through a textfile to find the place you want to edit would be pretty frustrating if you had to do it at Kindle speed.
Seagate and LaCie wireless storage products contain multiple vulnerabilities
OAEP doesn't allow you to encrypt variable-length data. They may very well be using OAEP, but that's not my point.
And that's not even counting the fact that even intra-state dialing outside of the local calling area was metered per minute at non-trivial rate. When I was BBSing and had a subscription to a service in a nearby city (which was still an intra-state long distance call), I used software that sucked down BBS content and let me read and reply offline.
discussion: https://news.ycombinator.com/item?id=10180766
Not quite as naive as thinking that the belief that every problem works itself out as long as the government goes away is anything more than a strawman for the libertarian position.