skysight-inc/HackerNews huggingface dataset:
This is the well-known CRT fault attack, nothing new. SSL implementations that don't verify their signatures leak the private key if their signature routine has a bug - this is essentially a hardware problem. Verifying your signatures is fast, though, so doing it is worthwhile hardening (NSA can potentially use cosmic rays for this attack, probably nobody else).

The findings are very similar to the classic "Ron was wrong, Whit is right" paper - if you scan the entire Internet, you will find broken hardware. You will also find SSH servers with their root password being `12345678`.
From what I recall reading some of the newer indoor hydro systems (plus LED) were getting greater than 20x increases (I think the lettuce/basil warehouse in Japan was getting over 60 heads of lettuce per square foot in comparison to traditional 3 per square foot in standardized farming). Perhaps by combining some of the different newer technologies they'll get the orders of magnitude of differences.
dl'd pushbullet, works great, thanks!
Improve your C++ skills by exploring the Clang test suite
I would've stopped if the questions were boring.
Hello,

My name is Max Tedford and I'm curious about your mention of developer interns. Can you tell me more about that position? I'm finishing up a 7 month web developer training program at the beginning of October and I've started looking for opportunities in the DC area. I spent a number of years with LivingSocial in non-technical roles, particularly in operations and B2B marketing, so I'm looking for a role that will allow me to parlay that experience to a new technical role.

You can view my github account at https://github.com/maxtedford and my portfolio at http://people.turing.io/people/max_tedford

Thanks so much! Looking forward to hearing back.

Max Tedford
max.tedford@gmail.com
612-616-0997
related :
http://www.independent.co.uk/news/world/europe/more-than-110...
Pirate Site Blocking Legislation Approved by Norwegian Parliament
Shifu, a Dangerous Banking Trojan Is Attacking Japanese Banks
This isn't directed at you specifically, more so people reading your post and relating:

Stop masterbating. It's creating a mess of your dopamine reward system and has left you unable to get anything done.
I have fantastic uptime on linode. Averages probably 9 months?
Being annoying to attack is not superior to the level of trust and certainty made possible with technologies such as DANE and DNSSEC. Which is to say that I agree with you that we should replace authority with better technology, but bitcoin is not such a better technology.
A Rant Against the (Amazon) Machine; Superman Either Quit or Was Fired
One of mine was 69 -- genuinely at random. (Well, semi-genuinely. I picked a randomish number, counted that many places through pi, and took two digits. I wasted some time memorizing lots of digits of pi when I was in high school; it would be a shame not to put that to some use.)
Humans, ie. large livestock, will have monitoring embedded into their bodies in the near future -- not just for health reasons.

If we can think of it, governments can push it as a formal requirement -- one step at a time.
Hulu to offer an ad-free option for monthly subscribers
Here comes Facebook Key Escrow?
Diner's club is not used much here, it is occasionally accepted, along with the Japanese cards.
I am not very familiar with penalties in EU, but I thought that on all the basics, like fraud, robbery, burglary, assault, murder, etc the penalties were comparable to US. Where US does go insane is when it comes to drug and gun crimes. The NRA lobbied for very stiff penalties for anyone who uses a gun in a crime, at least in CA. The drugs on the other hand are just a national obsession for people here in US, so I get that criticism. But on all the basics, I think EU and US are at parity. The Federal prosecutors are quite insane, but Obama has been trying to fix that, and many Federal judges are quite reasonable. But again, if US does need adjust something, it's the Federal system.

As for money and lawyers, US, at least in CA has excellent public defenders. I might be biased, because a few of my good friends are public defenders. But also the smartest man I ever meat, at least when it comes to law, was head Public Defender in San Diego. Public defender job in a major city is a very competitive position. That's my first hand experience in CA. Not sure about other states.
My browser is definitely sending english language headers.
How Music Affects Your Productivity
Last I checked, the government gets in zero trouble when misleading you about which rights you are waiving. I thought that was quite clear by now?
What you said may truly capture what's necessary- we need to codify additional relationships for the digital space that enjoy this level of protection, and codify them such that violations result in criminal cases being thrown out and/or reparations being paid! I envision this like the police force and falsifying evidence/respecting your rights- there's certainly some of all that happening, but police are eager to prove that they've done things correctly, because if evidence falsification or certain rights trampling happens, it result not only in internal probes and scrutiny, but dismissed potential convictions! The incentives generally line up.
I think all browsers send the accept-language header now, mine is set to en-US and the site completely ignores it.
I have been using a StrongSwan server in conjunction with Windows certificate autoenrollment to allow my Windows clients to connect to StrongSwan via IKEv2 for a while. StrongSwan has a rough guide available on their wiki[1]. The only hangup I ran into was that Windows 7 is very particular about what OIDs need to be present in the certificates both on the server and client side[2].

[1]https://wiki.strongswan.org/projects/strongswan/wiki/Windows...

[2] https://wiki.strongswan.org/projects/strongswan/wiki/Win7Cer...
>And I'm really curious what drives people in this thread that are coming to say they do not want to use Go, do not like it, and stuff like that?

Last year I wrote this article about why I didn't like Go very much. It was pretty well received here on HN, which is hopefully indicative of it being a good explanation.

http://yager.io/programming/go.html
“With Great Power Comes Great Responsibility”
I had an interview with Salesforce as a new grad and they spent one round asking basic algo questions, one hour long phone screening asking specifics of Java, Python, C++, Javascript, one onsite whiteboard round designing tests with an in house framework for an in house product. And another round traversing trees and graphs. I didn't make it to the next two rounds, but man these engineering interviews are intense.
Aha.io Launches Custom Feature Templates
Very interesting analysis!
There are about half positive and half native words about the new logo. But all words about classic logo are positive!

In any case, logo change doesn't matter much for big companies. People won't start or stop using your product because of logo change. I don't understand the rational behind the change.
We are going to get a distributed something. He mentions a lot of the existing efforts.

I think these are tough problems but actually mostly solved in different projects that are out there. The hardest part is making the ideas work together and agreeing on protocols.

The solutions that become popular could really help quite a few people. I see it as possibly being the key to society's overall struggle for effective organization.

Right now I believe we need a small number of very flexible distributed protocols to be used as widely as possible, and have most if not all other systems built on top of them. That will mean a high degree of automation in systems integration while supporting diversity and freedom for systems to evolve. If we can do that and solve problems like privacy, synchronization, and latency issues at the same time, we could leverage that type of system for addressing things like inequality and efficient use of resources.
Government-backed egg lobby tried to crack food startup, emails show
Is that just uptime as reported by the OS, or actual time between outages? The server can be happily churning away even if its network connection goes down.

I've been on Linode for a while, and have also had a decent experience. However, I wouldn't use uptime as my only metric.
I wonder what the ratio would look like if the equivalent was done with a JPEG instead of a PNG.
Fair enough, they have strong religious beliefs. So do lots of people. Why does that mean Muslims shouldn't be allowed into a given country? Why should Islam be singled out?

Also, apparently from the same survey:

"Furthermore, the willingness of Turkish migrants and their descendents to integrate into German society remains high and is climbing. Whereas 70 percent said in 2010 that they want to "absolutely and without reservations integrate into German society," the new survey found that 78 percent of respondents agreed. Similarly, whereas 59 percent said two years ago that they wanted to belong to German society, 75 percent say so now. Fully 95 percent say that all children with Turkish backgrounds should go to day care facilities so as to learn German prior to entering school."

http://www.spiegel.de/international/germany/survey-turks-in-...

Why does religiosity matter if the desire to integrate is there?
https://news.ycombinator.com/item?id=9003735
Indeed, what is funny that while resources are limited (and declining), economics are still considering as resources were unlimited. This video has a great re-interpretation of what economics really are, just managing energy in a productive system: https://www.youtube.com/watch?v=3w6ruZ_5nPE
https://en.wikipedia.org/wiki/Phoropter
https://wordnik.com/words/apricity

Seems you're right about the rest.
It isn't in the OED yet (I just checked)
It's just a convention. Monthly resolution seems too high, and putting the current year on everything too noisy.
Turkey cites crypto software in terror charges
> Economics is a social science, taking measurements / accumulating data and theorising on that data causes changes in behaviour. Just sitting around talking about economics, or your weekly budget, drives changes in behaviour.

Funny - you could say the same about physics. For example, knowing that the coming car may kill a person causes the human behaviour to change, namely the driver will stop the car. Does that invalidate Newton's laws?

Yes we probably cannot predict universe totally. But we can do scenarios (of complex emergent systems of interacting agents with bounded rationality), just like in physics. In fact the whole point of doing that analysis is to change behaviour of people, one way or another.
It seems to me a very nice deal for the Erlang/Elixir developer... Cheap, multicore, server...
iPad Pro planned for Sept. 9 debut with iPad mini 4; November launch
Is there a distinction to be drawn here between "generic composition" and "whatever the term is for the opposite of generic composition"?
On the opposite end of success we have a rooftop greenhouse in Vancouver being sold on craigslist: http://www.cbc.ca/news/canada/british-columbia/craigslist-va... (http://vancouver.craigslist.ca/van/bfs/5133023654.html).
A New Design for Cryptography’s Black Box
I ran a survey to gauge the reaction toward the logo change and shared the results at http://blog.zmxv.com/2015/09/crowds-reaction-to-googles-new-...

HN discussion thread: https://news.ycombinator.com/item?id=10161043
I don't think you understood, or I wasn't clear.

Users will bounce if they don't like ads, with or without countdown timers. Acting based on observed user behavior is great. If they don't like it, they bounce. If they tolerate it, they don't bounce. Over time, users will migrate to less-annoying sites. Ranking sites on observed bounced rates, whether caused by ads, low quality, or what ever else, is awesome and should have no anti-trust implications. That's not what google did.

After all, if these ads really annoyed users in general, that would show up in their behavior, and thus naturally be picked up on by ranking algorithms, no? (They annoy me, but I'm not all users.)
The people I know who do it simply use them as bookmarks. No, me neither.
If I've opted out of having my details passed on to third parties, I only have to opt out of receiving communications once.

And since they're also not allowed to give the data away and can get into trouble for allowing it to be stolen or accidentally shared, my name and personal details are also somewhat less likely to crop up in an embarrassing public "people who subscribe to this service" list...
Funny that you mention that.

A lot of economist and policy makers in asia when america decided to invade Afghanistan and Iraq pointed out this would eventually happen. It would be destabilizing to the Asian/Eurasian continent.

A stable Asia is terrible news for american hegemony. Central Asia is the most mineral rich place on the world, and it has been known for quite a while.

By current projections - 38% of humans will be from africa and 44% from asia in 2100.

I will be dead by then - but its terrible news if you believe in american exceptionalism.
They link to their paper on the Google Correlate site: https://www.google.com/trends/correlate/nnsearch.pdf
Agreed. Live Tiles are an example of form over function.
Jim Rogers, you may know me from such books as:

Investment Biker

A Bull in China

Adventure Capitalist

Hot Commodities

(seriously, http://www.jimrogers.com/)
This guy has traveled the world and learned lots of puns.
I'm not sure if it has been removed from most dictionaries, but
apricity is commonly accepted as "The warmth felt from sunlight". Wiktionary lists it as obsolete though.

https://en.wiktionary.org/wiki/apricity
Unless the person actually does know better, which is the case here.
Geez, I was trying to figure out what you'd do with a Wordpress app for Pocket, and then it hit me.
Why Elephants Don’t Explode: How Nature Solves Bigness
Normally Im pretty cynical, but this will be based on their open source VP10 video codec. So you can run a version you modified and compiled yourself if you wish. Besides user tracking belongs in the player, not the codec. :)
chroot was always intended to allow running processes picky about their system environment.
Why does Backblaze use over 250MB of memory on Windows?
Just fired-up Task Manger to kill a few Selenium Chromedriver processes that didn't close properly and came across "bztransmit64.exe" using over 290MB. A few seconds later it went down to 258MB.

I like the backup service but holy crap, that's a lot of memory. Why? What does it need to do? Is there a way to knock it down to something reasonable?
I'm not saying anyone was forced either. I was just saying the numbers aren't that surprising.
Take off the hate goggles and maybe you'll see that your sarcasm is actually true:

"these are that Muslims that in their great majority are supposed to be already westernised" == "86.4% of Muslims feel they belong in Britain, slightly more than the 85.9% of Christians"

86.4% sounds like a "great majority" (whatever that means), to me.
> Microsoft has lost twice

No kidding, they are trying to convince the US to recognize that they actually have limits on their power outside of the country.
Linux 4.2 Released Improving Cryptography Options
They seem to provide much more memory at a slightly cheaper price, but given that it is arm I am not sure I care - can you run Ruby, Python and (Oracle) JVM?

I really just wanted a cheap server for Minecraft.
Poki is pretty great on a Surface, too. I actually prefer it over the official iOS Pocket app.
Scaleway kindly donated a node to host a DNSCrypt public resolver.

Zero problems since January.

This hardware is perfect to host a DNS server. Unlike a VM, the performance is predictable, and setting up the server couldn't be any easier.

Not a bad choice to host Docker containers (Docker works fine on this architecture) that don't require tons of memory.

They have quite a lot of Linux distributions available, but I'm even more excited about the Bitrig port which is being worked on.
By what measure? If you don't know how to recognize when it's become a problem then it's not meaningful when you say you don't see a problem.

What is straining to you? I would describe our education system, our legal system, our prison system and our welfare system as all being currently "strained" so we must have different definitions.

(and to the downvoting crew, feel free to explain to me what productive disagreeement looks like, eh?)
Thanks god, nowadays we have extundelete. :-)
My general understanding of the difference here is that, while you're correct that we don't want any of our information- our mail, phone calls, movements, etc.- to be abused and give us problems, the issue here is that law enforcement DOES have a legal and legitimate need to look at all those things sometimes with a warrant, issued by a judge, who has reviewed the evidence collected so far and deemed there to be probable cause.

The situation we fear will come about instead is this one: law enforcement has access to all of our data, uses our data to find probable cause, present this to a judge, and arrest us.

It's upside down- law enforcement is supposed to be limited in what it can do until it 'picks up the scent' of criminal activity, after which it can use an expanded power set. If we give law enforcement a greatly expanded power set to use before it has 'picked up the scent' of criminal activity, we would foolish not to expect all kinds of abuse (especially given the nature of 'big data'-driven methods of 'picking up the scent').
>The vendor abandoned their technology, and our generous free services attracted people who proved hard to convert to paying customers.

This line rings very true. At my company our first product was offered for free. We had thousands of users, but after months and months of work we realized only a small fraction of our user base was going to be converted into paying customers. (Like OP, I began to feel burnt out at this point)

When we launched our second product, we realized we needed to answer the question: "Will people pay for what we build?" as fast as possible. We charged users to pre-order our alpha and when we realized people were willing to pay for it, we poured ourselves into the product.

I think many founders are scared to ask for money (We were). But if you're building a product that you would eventually like to charge people for, you really have to force yourself to ask those hard questions as soon as possible.
I think I'm still missing something here. In particular, I'm still not getting 29% as a lower bound. I'm getting around 20%. If we compare mu=0 with mu=1.64, the probability density at x=1.64 is roughly 0.1 and 0.4, respectively, so the lower bound should be .1/(.1+.4)=1/5. No? Unless they were assuming something other than "two normal distributions with the same variance"?
Ideas (3/9/2015) – Virtual Reality and 3D Printing and Hologram
This is hugely tedious. It's remarkable how unselfconsciously boring career-obsessed egotists in the tech industry can be.
As a bootstrapped and ramen profitable company, it sucks to be spammed by them constantly with messages like these:
we're excited to announce that we just raised a $10 million Series A from Menlo.
I agree with you on slowing down "reflexive responses" but I would say cryptic titles may not be the right approach specially on weekdays.

If I've to read an essay to understand the context the chances are I'll put it off for later and unfortunately will not be able to participate in the discussion.
Breaking the Mold: A broader array of lifestyles than many of us could dream up
If he had given the final round list of words from the US National Spelling Bee, I don't think I would have even been able to tell they were real.

balletomane? zimocca? scacchite?

http://spellingbee.com/public/results/2015/round_results/spe...
benchmark : "Scaleway vs DigitalOcean and deploying web apps on an ARM server" ( By Martin Rusev on 28.05.2015 )

"In all my tests, the performance of their servers was slower compared to DigitalOcean, but this could be because they are using Network drivers(LSSD) and a 32bit ARM architecture(armv7l)"

https://www.amon.cx/blog/scaleway-vs-digitalocean-and-deploy...
As a non-native speaker, this was a hard question to be honest on. I recognize the word "rife", I can use it in a sentence, but _do I know what it means_?

I can't remember what I clicked.
> I would just point out that the chances of the USG not already knowing about Hacker News are zero.

Well, since USDS/18F people post to the "Whose hiring" threads, that's pretty obvious.
Re non-compete/IP ownership: I wonder whether I should say where I worked or how illegal was their employment contract... Can't do both, it's protected by their confidentiality clause ;)
"I just finished building this service. Its a simple way to create/run cron jobs online."

cron jobs to do what though. Will you be accessing my server to pull statistics? Scraping google for data? Setting a Nest thermostat? Ordering my more vitamins from Amazon?

Above the fold, front and center. "This is a simple service to run cron jobs online. A cron job can do x, y and Z."
These are the kinds of things you would hope would get reported on a site like glassdoor. (I have no affiliation.) I realize they often don't, but if they did, it would generate more pressure to clean up their act.
The image is a composite of a photo by Tadao Cern. It was a joke, meant to look "too good to be true", but accepted without question: https://medium.com/@kcimc/finding-gogh-76ff90cbd408
> That certainly isn’t impossible, but it’s going to require a fairly sophisticated protocol to achieve; I’m not aware of one yet, would be happy to be shown otherwise.

Well this means version control. Of course you don't need fine granularity, but version control is a good start to solve that problem.

> What about incrementalism?

Honestly I'd prefer something brand new. HTTP is plaintext just like telnet, which in my opinion is not adequate for such a complex decentralized protocol. If you want performance, look at how bittorrent does it. I think performance is important here, and since decentralization means being more vulnerable attackers, I think the protocol should really be designed around mitigating attacks. But maybe I'm wrong. Telnet or HTTP are things that should not be dealt with, in my opinion. I would gladly see them disappear to be honest.
Is this 1 acre per person per year?