skysight-inc/HackerNews huggingface dataset:
I found the pictures fascinating, but the accompanying text marred my enjoyment. Considering the circumstances of the Fukushima disaster, the anti-nuclear sentiment really irked me. The Tōhoku earthquake & tsunami killed close to 20,000 people. The author completely ignored those victims. Instead, he focused on Fukushima, which will cause around 150 deaths from cancers. For every tragedy created by Fukushima, there are over a hundred created by the earthquake itself. Yet coverage is warped in the opposite direction. It's absurd.

I think Scott Alexander put it best. Before starting Slate Star Codex, he had this to say about Fukushima and nuclear power[1]:

> You know what kills more people per year than nuclear plants?

> Everything.

...

> When you hit a nuclear plant with the fifth largest earthquake ever recorded, then immediately follow that with a twenty foot high tsunami, and then it explodes, it still kills fewer people than an average coal plant does every single year when everything goes perfectly.

Nuclear power is far from perfect, but it is the safest energy technology in existence. Curtailing it creates more suffering and death, but in a diffuse way that can't be photographed or humanized.

1. http://squid314.livejournal.com/292620.html
The mention of Cage's As Slow as Possible reminded me of Long Player [1] - another similar project.

[1] https://en.wikipedia.org/wiki/Longplayer
Fast in-flight WiFi is coming to Europe
I don't know about your compression numbers. I just created a 1000x1000 pixel gif with a number 1 in the middle, and it compressed to 4790 bytes equals 38320 bits. So, 1,000,000 pixels divided by 38320 bits means 26 pixels per bit.

https://en.wikipedia.org/wiki/GIF suggests that long runs of a single color compress rather well.
"Runcython aims to simplify the process of using Cython without sacrificing scalability."

I know this is being a semantic weenie, but I hate when people use scalability when they mean efficiency.
I feel that Developer Edition would solve my problem.

That said: Building FF from source takes ages. It's not something I like to do, honestly, to build/package/install a couple of JS files.

And I do think that this is a crappy idea. Okay, require signatures if you want to install something directly from the web, maybe? But if I point that thing at a .xpi file, locally, let me install that. Hide it behind a flag in about:config, but let me install that.

Saying 'ah, but someone might toggle that box for you' is weird and reminds me of Raymond Chen's 'Wrong side of the hatch' security reports. If you can do that, if your installer can mess with my about:config, why can't it f* up my whole system?

A free idea for malware distributors: Bundle your own release channel build of FF and just remove the official one, keep the user's profile. Your MSI runs elevated, I'm reasonably sure I could do that ~somewhat easily~, if you make your money with shady stuff you're bound to make this work. Tada! Every extension can be installed again, please add a couple useful and set a decent home page.

The premise is crap. The implementation is unfortunate and follows the premise.

(Again: Thanks for the DE hint. That's listed in [1] as well, I must have missed that in the past and - Nightly isn't exactly what I want to run on a daily basis. Or at least not as my main browser, a side by side install is often present on my machines)

[1]: https://wiki.mozilla.org/Addons/Extension_Signing
Still, a sizable number of women, correct? Do you agree they might already know they're people too, and like Trump for reasons other than "white rage" or being expected to treat women and minorities decently?
I always wished there was a platform that allowed us to annotate any paper, collaboratively. I've always found it rather strange that e.g. Google Scholar doesn't offer something like this.

Anyway, this is cool. The only thing missing is a comments section.
F-35 is the stealthy sensor platform that can go closer to identify and target. Unlike F-22 it does air to ground as well. It doesn't necessarily have to be the platform that does all the shooting. It can spot for non-stealthy planes further back, or for land/sea based platforms. Basically the killer app of F-35 is providing better situational awareness to the whole coalition force operating in the area. It's much more valuable as a force multiplier than on its own. Super Hornet and the rest of that generation can hold their own 1v1, but they don't provide a similar benefit to the rest of system. It remains to be seen whether F-35 makes even EW jets like Growler obsolete. I suspect that the added human workload part of EW (F-35 doesn't have two seaters) is harder to overcome than developing suitable pods.

They will be carrying cruise missiles too. Because $1m is quite a bit less than $100m (the plane).
I suggested:

Alan Turing - On Computable Numbers, With an Application to the Entscheidungsproblem
C. E. Shannon - A Mathematical Theory of Communication
Yes, which is exactly why you should not trust it. Bounties are no substitute for an audit by professional (or academic) security researchers, and if the expected value of exploiting the vulnerability (i.e. to the NSA) is greater than the bounty payout, the person who discovers it would do better to sit on the information.

From 1998: https://www.schneier.com/crypto-gram/archives/1998/1215.html
Sorry didn't mean to start an argument. You brought up the steering wheel, that's why I looked up the controls. Seems like you're right about the Model S.
> Of course we have learnt a lot since Chernobyl, and designed subsequent plants to be much more safe based on what happened there.

Unfortunately the anti-nuclear movement won and we are unable to build those safe subsequent plants because of political pressures.

Half of nuclear reactors in the US, and likely the world, are over 30 years old.[1] They are licensed for 40 years [2], but can apply for a 20 year extension [2]. The last new reactor came online in 1996, and the next one is likely to come online this year.

The Chernobyl disaster happened in 1986, 29 years ago. It will be at least another 10 years, 30 being likelier, before all those things we learned become entirely useful.

[1] http://money.cnn.com/2011/03/15/news/economy/nuclear_plants_...

[2] http://www.eia.gov/tools/faqs/faq.cfm?id=228&t=21
Metrics 2.0: An emerging set of conventions and standards around timeseries data
A bug like heartbleed was not found because no got the idea of how to exploit it. Plenty of people and researches have read that code without seeing the bug. This case with VW, was to my knowledge not a bug, it was deliberately code to work that way. That is quite different from a subtle bug where you need to apply advanced statistical attacks to perform the exploit. Or a random generator bug that simply reduce the randomness.

I'm absolutely positive that there is some enthusiasts, that would read and dissect every single line. But even if that wasn't the case, I'm even more certain that multiple competitors would, and this would be reported as fast as you can set up a meeting with the relevant authority.
Why would perfect compression mean 77.5% reduction? I've seen GIFs compressed 90%+.
> The author adresses this issue very eloquently...

That would be one of the reasons why I never made the claim that btrfs is ready for general use in all situations. :) I mean, in my footnote I mention that I'm running into a deadlock triggered by perfectly ordinary filesystem operations.
Access from multiple devices, lightweight client (hangouts is quite a resource hog on older devices), free (as in free beer for the protocol and free software for the client).
It seems nice! A few days back I was playing a bit with golang's crypto and examples and I created a small cli app[1] to generate CAs and private key - certificate pairs signed by them. I wanted to create a small web service on top too (no need for sign up though, just check some fields and download a zip with your files) but haven't find time.

The most difficult problem imo, remains the management and not the creation of the keys and certs. I occasionally use them to connect backend services securely, so I have to install the root cert to every server OS and every JVM based app (here we create a keystore). Then I have to install each private key and certificate to the appropriate service. If the service is JVM based we also have to adjust its command line switches. Should a private key get stolen and we have one root CA for all services, we should delete and recreate everything. PKI is complex and with tens or hundreds of services its almost impossible to manage. Even the simplest task, like downloading a file from a nexus repository by a JVM based app using https and a free StartSSL certificate is very hard, since Oracle doesn't include StartCom's root CA.

[1] https://github.com/andmarios/quickcert
Would you kindly?
Because Telegram supports many more platforms. I'm using Telegram on Linux (terminal client), Windows, Windows Phone. My wife uses the web client. Other friends use Android and iOS clients.

For messaging apps, platform support is crucial.
Got it. I was approaching it from messages sent, not messages received. I wonder if they are also counting messages received per device, rather than user. E.g. If I have a phone, a tablet, and a desktop, does every message I receive count triple for this metric?
iMessage is pretty user-friendly, "full-featured," and end-to-end encrypted for those inside the Apple ecosystem.
>The issue is,you cant call rape a rape anymore, unless its drunk man having a sex with an equally drunk woman - then its PATRIARCHAL RAPE

What does this mean, is it irony?

UK person here, genuinely confused.
Comefrom is a mainstream now, not a joke any more. See the phi nodes in SSA.
The story of Fever: when raising capital is not the endgame of entrepreneurship
What+is+the+UK+-+China+Nuclear+technology+deal?
Is there any part of the "Internet of Things" that is well thought out? The idea of our lives becoming surrounded by hojillions of things that are constantly connected to the internet running software written by whomever with no standards, no testing, no regulation or certification, that doesn't seem so great to me. Even the best software written by the most capable engineers who continue to be dedicated to the projects they support is still a horribly bug-ridden mess with occasional enormous security holes. Even if all IoT software was written by, say, a division of Google, it would still be a nightmare. But it will be far, far worse because IoT software will be, and is being, written by anyone and everyone.

When you buy a networked device today, how can you tell what level of security it has? What level of testing it's been subjected to? Who has signed off on the design and the code? No such thing of course, it's all at the same level as the kids down the street building stuff out of their garage for kicks. And while there's some merit to that when it comes to innovation, for production, in the modern era, it's not just naive, it's either insane or idiotic.

We need more rigor, more standards, and less vulnerability surface-area when it comes to internet-connected devices. IoT is precisely the opposite of that. It's already bad enough that there are millions of zombie PCs in botnets around the globe, we don't need zombie to add toasters, garage doors, light bulbs, and what-have-you to that mess. Anyone who thinks that we can get security and quality in the IoT for free without making a concerted effort is, again, either monstrously naive, insane, or idiotic. It's 2015, that naivete is no longer defensible.
As dagw said, if your inner loops aren't inside a .pyx file, then Cython can do little to help. Even if there are, if it involves lots of fiddling with data structures like dicts and lists, or making use of dynamic or high level features of Python like generators or classes or list comprehensions, then Cython would provide only a small speed increase (say, 20%), because almost all the running time will be spent inside the Python runtime. To get the biggest speed ups out of Cython you need to write C-like code with type annotations. E.g. "for x in range(...):" loops.
Distributed Algorithms in NoSQL Databases
The discussion on that concept of "rationality" has also moved far beyond that, such as with Daniel Kahneman's two-system theory.
PBKDF2 is easy to implement in just about any language: https://github.com/mitsuhiko/python-pbkdf2/blob/master/pbkdf...

The Python stdlib also provides a pure-python implementation if OpenSSL >=1.0 isn't available: https://hg.python.org/cpython/file/2.7/Lib/hashlib.py#l163
They actually have the most reasonable business model, as they only charge you for services where human interaction is required (fe checking your credentials or adding your certificate to the revocation list), anything else like signing your certificate is free.
I found this info: http://gazzaleylab.ucsf.edu/neuroscience-projects/neuroracer...

> A company Adam Gazzaley co-founded, Akili Interactive Labs (http://www.akiliinteractive.com/), is now developing a clinical product in the form of a mobile video game (“Project: EVO”) that is based on the technology behind NeuroRacer. The company is currently running clinical trials which will validate the utility of the new game for use in specific populations. Until those trials are complete, the game will not be available to the general public. We suggest that you go to the Akili website for further news or additional inquiries.

That leads me here: http://www.brain.akiliinteractive.com/. A game has not yet been released but is available in some form for clinical trial.
And I hate when people use efficiency when they mean speed.

Python -> Cython speeds up you program but does not change the complexity of your algorithm.
Building a rope bridge with drones
Not just alien. By some reckoning, roughly half of the known human languages have no written form.
Vecna’s Daniel Theobald sets out a standardization manifesto
Speaking of political correctness, who do people tolerate women's rights? It's just another excuse for sexism. I support the rights of all people (which encapsulates men and women). If you want a level playing field, you have to think beyond gender, skin colour, sexual orientation, etc. when we stop terms like women's rights, I know we've progressed beyond political correctness. I can't wait for that day.
+1.

It's used by many people in my social circle (early 20s, techies and non-techies).
> Secondly, even if you did force vendors to comply, you've just given any new startup a massive leg-up on R&D, which the existing vendors discounted for them.

Real talk here: Is that such a bad thing? Why should new companies have to deal with problems humanity has already solved?
With zero way to verify the E2E, right?
How to Be a Tech Superhero Like Elon Musk
Misleading title. He clearly says that he believes it is the way it is administered not the vaccine itself that causes autism.
Maybe I misread the article, but I don't think the EFF are actually calling for car manufacturers to _open_source_ their firmware. Instead, I think they're arguing for a DMCA exemption on reverse-engineering the firmware.

At the moment, (allegedly) it's illegal under the DMCA to reverse-engineer car firmware. This obviously stops the research that might have highlighted this. The EFF are suggesting that the DMCA should not apply here, so researchers would be free to work from the compiled firmware (not the source code) to look for issues.
nwatson, the first part of that sentence doesn't make any sense, neither the rest
UX is the new SEO
You are just creating straw mean to support your own belief. Comparing to other causes of death is hardly relevant.

It's only relevant if you weigh two options against each other. So comparing coal to nuclear is kind of valid, except that coal is not the only alternative to nuclear power. Also, if you really want to nitpick, then you'd also have to count the lives that could have been saved with the money that now goes into cleaning up Fukushima, and so on and so on.

Tsunami deaths are not an alternative to radiation deaths, so the comparison is bullshit.

Edit: I would like to reply to your comments, but HN doesn't let me post more comments atm. Fwiw, I don't think you are correct in claiming nobody campaigns against coal power. For a recent example, look at Elon Musks presentation of their battery. Also, remember global warming? I seem to remember a lot of articles about that, which tend to mention fossil fuels as culprits.
guess they have enough burger flippers and taxi drivers? /s
nice integrations ;-)
They might also include presence messaging to inflate their numbers.
Pump gas in the US typically contains 10-15% ethanol, dropping stoich as low as 13.79:1. Stoich for E85 is 9.75:1.
other benchmark from the same author ( 4month ago ) :

Tomas Vondra: "PostgreSQL on EXT4, XFS, BTRFS and ZFS"

http://www.slideshare.net/fuzzycz/postgresql-on-ext4-xfs-btr...
He didn't say it was.
If you live in a major city, maybe it's not as popular. On my case on the east, it's almost the only way to go in a lot of places and everyone knows about it.
Very strong in Italy too. All of my friends know it, and a lot of them used it at least once.
scrypt has the advantage that it can be memory-tuned and is designed to be both CPU-hard and memory-hard. PBKDF2 and bcrypt are only cpu-hard.

Though IME it's bcrypt which is considered cooler, scrypt is regularly mentioned in KDF discussions but not widely available let alone used.

The big advantage of bcrypt is its cost factor is exponential rather than linear, so the changes in cost factor are much lower and less frightening (you need to double the pbkdf2 cost factor to double the cost, on bcrypt you just increase the cost factor by 1, to match Moore's Law you just need to increment the cost factor by 1 every 2 years). And that's ignoring pbkdf2 can also be tuned using the hash function.

So is PBKDF2 just fine? Yeah, that's what I generally use. But it's easier to create a simple and correct interface for bcrypt, it has less moving part and the parts which do move move slower.
Well that explains quite a bit...
Maybe in the west where motorcycles are more of a leisure transport than a mode of commute, but in developing countries bikes with small engines in the ball park of 100 cc (the honda cub for example) are definitely some of the most efficient modes of transportation. In India i could get a bike that could comfortably get around 60kmpl in normal driving conditions ( 3 bikes with 6 passengers total would be about the same as a prius at about 1/10th the cost). And in a congested city, no other mode of transport beats it (unless the city has a very well connected metro rail transportation)
At the least it could have cats.
I sent this one straight to my Instapaper reading list. I'm sure I'll get to it eventually.
Except that salts do not need to be remembered and as such should and usually are randomly generated with high entropy and are unlikely to be brute forced like normal passwords.
Or, watch the Google Science Fair awards for 2015. The Bolivian teacher that won an award said she supported "girls", I assumed it was a girls school until i saw a glimpse of a boy momentarily. No one blinked an eye, but my first thought was "how do those poor boys feel being ostracised like that, especially when it's done on purpose". That's political correctness says it's fine to discriminate against boys.
Thankfully, other than one slip up by a Google employee (who corrected herself quickly), it was well balanced across genders and nationalities.
I've seen quite a lot of paid search ads for BlaBlaCar for some time without actually using it or hearing of anyone using it, and as a non-driver in the UK I'm one of its core markets.

I hear "get an Uber" quite a lot...
Considering that the numbers look very pixelated we could probably reproduce the same result with a 7x7 pixel grid for each number (29 pixels for an full 8), after that we could just scale up the image to 1280x960 using a cheap nearest neighbour algorithm. That way we could probably get away with a lot less. Even rendering a full 88,888,888 could be done with 232 pixels then.
I quite like the idea of TinyCert and often wanted to do something similar myself. Although creating a private CA is not a lot of work initially, maintaining it is a hassle, especially when you'd rather be doing something else. TinyCert could be useful for development teams (and other similar non-security-critical uses) to get rid of self-signed certificates altogether.

However, for me, the fact that they have all the private keys is a deal breaker. Further, I'd like to see the certificates name-constrained to specific development hostnames. And I don't like the fact that the keyUsage and extendedKeyUsage fields are not locked down. If I am going to install a private CA root, I want to have the smallest possible attack surface.

Overall, if they offer this as something that can be locally installed, it could be a useful product. Especially if it integrates with a low-cost HSM, for example https://www.nitrokey.com/

In the meantime, for anyone looking for good documentation on how to achieve the same using just OpenSSL on the command line, I have an easy-to-follow guide as part of my OpenSSL Cookbook:

https://www.feistyduck.com/library/openssl-cookbook/online/c...
You assume that coal is the only alternative to nuclear power (there are not only other energy sources, but also the option to use less energy), and that there is no way to use coal in a cleaner way.

I leave the judgement up to you, just wanted to point out some confirmation bias in your convictions.
> Even the best software written by the most capable engineers who continue to be dedicated to the projects they support is still a horribly bug-ridden mess...

This is far from universally true. While I agree that the actual security of a system is currently nearly impossible for most purchasers to evaluate, and I agree that in far, far, far, too many cases proper system design and implementation appear to be the least important priority of commercial projects, there do exist well designed, secure, complex systems.

> Is there any part of the "Internet of Things" that is well thought out?

The part where we use this largely ubiquitous, globally accessible network to give folks the power to control and/or monitor the devices that they own from any place of their choosing?

I 110% agree with you that -for an enormous slice of the consumer electronics market- security is -at best- an afterthought. However, just for a moment(!), assume that all IoT devices are secure and only exist to serve your interests, rather than the interests of a national intelligence agency or corporate overlord. In this hypothetical scenario (that's really far from what we have today) doesn't the statement in my previous paragraph highlight a thing that -at worst- provides no benefit to society and -at best- provides a large benefit?
I've read and reread the article, and I just don't see anywhere where the EFF are suggesting companies publish their code - can you provide a quote? Maybe it's in another article?

What I see the EFF asking for is a DMCA exemption so that researchers can legally reverse-engineer the firmware.
Oh.. i did not know that. So blablacar is like germanys biggest and only player then..
Compression can do much better than 1 bit per pixel. As a quick test, I just created a 1000x1000 single-colour GIF, which takes 1735 bytes.
One thing I find interesting about Chaplin is that he also composed the music for his films.

http://www.charliechaplin.com/en/biography/articles/205-Chap...
yum install tinyca
Yes, he included it in his patent application. He didn't say that the idea was the novel part of his patent application.
Turn Your Dell Laptop/desktop PC into WiFi Hotspot