skysight-inc/HackerNews huggingface dataset:
I'm one of the co-founders of Crypteron and would love feedback from the HN community!

It seems like another company gets hacked every week these days. The majority of cyber security tools out there focus on the IT department, adding complexity, expensive hardware, and lengthy sales cycles. We built Crypteron to make mission-critical security simple by empowering developers to build secure, regulatory compliant applications in the cloud. It takes minutes to add our security platform into your .NET or Java applications and save months of development time. With just a few lines of code, all sensitive data is automatically secured with military-grade AES encryption before it ever leaves the application and is automatically decrypted on the way back. This reduces the circle of trust to just the application itself and makes compliance, including HIPAA and PCI, in the public or hybrid cloud possible All SQL and NoSQL data stores are supported as well files and file streams. We recognize that most developers aren't security experts and we believe that they should spend their valuable time focusing on what makes their applications unique without having to lose sleep over becoming the next data breach headline.
Top European Court Rules That NSA Spying Makes U.S. Unsafe for Data
The Future of Our Past
Yes, you do have to trust the server.
Yeah, if memory serves you have to have a registered trademark (the kind that gives you the circled "R") to have any real protection.

I think the plain TM might help you if it is published on paper (like in some well-known dated publication) and you are later fighting someone else for the registered trademark, but it might be only slightly better than no help whatsoever.
I didn't realize Rogue Wave still existed, since I haven't heard of anything they've done since their C++ STL implementation that was once popular. Looks like they've been on a bit of an acquisition spree with about one per year since 2009.

This probably won't have a huge effect on PHP since it's much less Zend-dominated than it once was.
Thanks and here is my welcome note: http://upvoted.com/2015/10/06/a-redditorial-publication/
I assume you mean a terminal for the local machine, not an SSH session to another machine, in which case Panic's Prompt is what you want for SSH.

I'm with you in that I'd like a local terminal, but I could live without if I had Xcode on the box and some sort of full-screen editing mode. Working with storyboards would indeed suck, though.
Serious question: why would anyone buy a 0% T-Bill over keeping cash in a bank account?
Well it's not just about the NSA - although that is what triggered the case that this judgement is from.

Even if the NSA (and GCHQ) wasn't collecting everything, US law still wouldn't provide enough protection to comply with EU privacy norms.
shit didn't render properly for me
Their generation isn't great. They should tweak the resulting password to ensure that it passes most common tests. I think I would enforce

- 10 characters
- at least one punctuation
- at least one digit
- at least one upper case
- at least one lower case

By coercing the password to have this form you're losing a trivial amount of entropy, but you'll pass the vast majority of password policies.

Also add a nonce to the password generation (1, 2, 3, 4) so that you can change it if needed or required. No need to remember the nonce, just try a few until you can login.
You have more money in banks than you have insured? You trust the credit of US government more than any bank?
There are terminal emulators on iOS already, that's not the issue, but not having a local filesystem means it's only useful for remoting, there's nothing a terminal will let you do on the device (unless it's jailbroken)
https://www.youtube.com/watch?v=yXIBi_lszsg
Google, please hire this person to rewrite the entire Keyczar documentation wiki. Keyczar might be great from a crypto point of view, but the lack of good documentation and binaries is probably a major reason why people ignore it and implement their own "dangerous" crypto using BouncyCastle.

While I'm making unreasonable and arbitrary demands, password-based encryption support in Keyczar would be great too, thanks.
I'd agree it's a bit more to type out, but it does seem to make more sense from a readability perspective. And for those of us who didn't grow up with the UNIX shell to understand the reasons why things were kept so short, it's a bit easier to digest. (I do appreciate why bash is so short and succulent. =)

But really, taking the above into consideration, the might in powershell comes not from the terms used, in my opinion, but how it works on things. With grep for example, you're parsing a file. If say, you wanted to filter on that more, you'd be using awk to pick out parts of the text.

In Powershell, everything's an object. Everything's already an object, you don't need to pick the file apart to isolate the date, you just filter on the date object. It's got a data type.

That makes it really powerful, in my opinion.

(Example largely pulled from "Windows Powershell in Action". I really like this book, as it goes into detail to describe /why/ things are they way they are in PowerShell, because he wrote it. =)
https://www.manning.com/books/windows-powershell-in-action-s...
PHPUnit VW extension
Weird keyboard layouts. Shifting the keyboard off-center to include numeric keypad which no one uses anymore. (Gamers? Please stop.) This alone makes one question what exactly they are "smoking". There wasn't a single big Windows laptop on the market that wouldn't fall into this hole of a flaw.
Blocking microsoft-int.com using NoScript fixes the page for me.
Dude, it's Ycombinator - what do you expect? If you submit a Techcrunch article about it, it'll be at the top in 20 upvotes.
Are we going into deflation? If the 3-month treasury bill sold at 0% means investors are expecting to have no inflation or potential deflation in next 3 months.
on firefox, just press ESC when the status bar shows that.
Onavo Replacement lets you know where (and when) to spend on advertising
You'd be wrong (at least for grep)
http://www.jwgoerlich.us/blogengine/post/2013/01/21/Grep-ver...
I can’t find the specific exception anymore, and Google is only delivering articles about today, so I’m sorry (and at any Googlers reading this: Fix your damn algorithms, or at least give us the ability to search the same way as in early 2013! I’m less bothered by spam domains than by getting only buzzfeed etc instead of actual documentation)

Back to topic: Database replication is forbidden, yes. So, well, host your data in the EU for now, and hope that the US finally comes to senses regarding spying. Same applies to GCHQ and BND
I have a surface pro 3 and it's the first windows based machine I've touched in five years and I love the thing.

I really want the book now though...

The keyboard for the pro 3 is awesome. I really love how solidly the magnetic attachment feels for the keyboard, the backlit keys and the actual mechanical buttons...

It's fantastic.

I look forward to seeing how the book feels in person
Sorry, but I think the authors ask is clear, simple and unambiguous. Your comment above strikes me as unnecessarily pedantic when paired with the challenge.
Now any of those talented people and teams can productize that valuable knowledge and deploy it on Amazon's infrastructure, rather than only the couple dozen people that can get jobs at Cloudflare/Sucuri/etc. They've just been handed a huge market of potential customers that have access to a WAF but don't have the expertise to develop rulesets of their own.
ThinkPad is pretty embarrassing; you're supporting a company that decided to MITM all its users traffic to inject advertising using factory-installed malware by trusting the same certificate, whose private key can be extracted from any Lenovo product and trivially used to MITM all the others.

Lenovo needs to fail hard and fast. I recognize we'll probably never get those responsible into prison, but at least we can make sure they never work again.

If you wouldn't buy or recommend a Volkswagen after dieselgate, you certainly shouldn't buy or recommend a Lenovo product after Superfish.
Really? I don't see it that way at all.

I mean, it's not that much different than all the new changes to C++ in the last 10 years (compared to the C++ from 10 years ago).

Yeah, there are a bunch of new things, but it still looks Perlish to me.
EU data protection covers collection, storage and processing of data.
I think xacaxulu was referring to Zillow, the company - not the housing market.
List of friends probably is not personal data. Personal data are things like real name, photo, phone number, address, credit card number.
Orders of magnitude fewer workers though...
Honestly, I think they've defined pretty well what "full Windows 10 computer" means in this case: You are strapping a full Xbox One with Kinect onto your head. Last I checked, you can't run a Kinect very well on a $9 ARM chip. Based on graphics we've seen in demos I doubt the system hardware is anything less than we see in an Xbox One, but it's definitely not less than what we see on a Surface Pro, form factor for form factor.

It's possible that they are trying to weed out early adopters with a high cost, but with entire new hardware that's not been mass produced to date (the holographic display, the proprietary holographic processing unit) it certainly seems like this is probably more a reflection of actual production costs today. It's certainly long been a tradition of console game systems that the early development machines are an order of magnitude (as much as even 100x, historically) more expensive than the final retail hardware. (Which also historically has been a profit center for some console generations when they were charging the same development box costs long after the retail cost margin drops.) It's very much a case that I think the only real comparison is to the Xbox One and we don't have a lot of data on that as Xbox One never sold dev kits to the public, that's certainly something new with the Developer Edition of the HoloLens.

Also, for what it's worth I've not heard any reports of "tracking lag" (in fact just the opposite from articles I've followed to date, that the HoloLens seems to have "tracking magic") and I'm willing to believe that the adjustments of the device's FOV are as much for safety reasons as anything else (we humans use our peripheral vision for a lot of things when navigating the real world). Certainly the same journalists complaining about the FOV have also stated that they've experienced different FOV in different demos.
Yup, as a kid I was even told by doctors to avoid strenuous exercise because of a minor heart condition.

These days I do good old english boxing four times a week. It's an amazing workout and you will never achieve so much focus and flow as quickly as you will in a sparring session. For those three minutes, you are there, you are fighting, there is no room to think about anything else, or to stress about anything else.

Nothing like the immediacy of a potential punch to the face to make all other stress in your life melt away and become meaningless.
That's one thing that the GDPR (General Data Protection Regulation)[0] which is in the legislative pipeline at the moment is looking to fix.

The proposals include being able to levy a fine up to €1,000,000 or up to 5% of the annual worldwide turnover (whichever is greater) if they fail to comply with EU data protection rules.

[0] https://en.wikipedia.org/wiki/General_Data_Protection_Regula....
Not sure about this particular machine, but touchscreen laptops work just fine with Linux nowadays from what I can gather.
I disagree that this is a good replacement for TodoMVC (not that I'm defending TodoMVC). Two reasons:

1. There is no end-user data input happening in this example, so we can't fully evaluate a potential framework's change tracking/dependency resolution/state update techniques.

2. The "low level" emphasis on controlling AJAX requests isn't a good fit for a lot of frameworks which may be un-opinionated about how data is loaded.
I feel that normal Reddit users are going to hate this for the most part because it does a lot of the same things that BuzzFeed does in that it takes content from Reddit presents it in a somewhat dumbed-down, clickbait way. However, I don't think this is a problem. Upvoted is not supposed to be for Redditors, it's supposed to be for a different audience who isn't yet ready for Reddit. It's going to capture at least some of the traffic that usually lands on other clickbait sites which take content from Reddit, and it's going to allow them to monetize.
There's also an api you can use to pull data out.
i'd take the rubber coated ones over the cold and sharp metal ones you call 'cool' any time.

but i guess everyone in SF just use macbooks on their desks at all times.
wordpress.com it appears /wp-admin redirect to https://redditupvoted.wordpress.com

the footer: Powered by WordPress.com VIP
Safety guarantees, or deflation expectations. A few years ago France issued (slightly) negative-yield short-term bonds[0] and earlier in the year germany issued pretty seriously negative yield (0.08%) 5 years bonds[1]

[0] http://finance.yahoo.com/news/france-sells-bonds-negative-in...

[1] http://money.cnn.com/2015/02/25/investing/germany-negative-b...
Ubuntu 14 doesn't support a lot of the latest hardware at the moment. I had an Intel i7 NUC and installing ubuntu 14 on it was a nightmare... You fix one thing to move the installer, another thing breaks. It's trial and error. Ubuntu 15 was just straight forward, one click install.
They are getting pounded with traffic, give it a minute.
It is you who has missed the point. I mention in my comment specifically that W3 validation errors are not comparable to compiler errors or run time errors in programming.

As far as things working in one browser and not another, if you're working with standard features they tend to work across all modern browsers. If you are using features which are still only candidates, then yes they may not work but you've chosen to implement non-standard features so you've done this to yourself.
Germany is littered with US military bases so I don't see how you think they are not cooperating much.
I like that this app will not go very far with other companies. Sure, it will help users from having to watch "annoying" ads, but these ads pay for the free use of the application. This app will revolutionize the entire industry, as they will have to change their prices in order to recover the revenue they get from showing the ads.
Are any of those quad cores? I've been trying to find the actual cpu models but I can't seem to find them mentioned anywhere.
Californian mayor forced to give up electronics and passwords to agents at SFO
Wake me up when AWS supports IPv6.
Strava Insights
Maybe TEDDY from a few years ago is more like what you're looking for:
https://m.youtube.com/watch?v=e2H35SlLmUA
There aren't any. All the regional MLS' are separate entities and make it as annoying/difficult/expensive as possible to access their data programatically. Think having to be a licensed broker, then paying for access to download a daily CSV with all active listings.

Who'd have thought that an industry of middlemen would make it hard to reduce friction in their marketplace...

(Source: building websites with MLS integration for real estate offices)
I've been the linux guy in many meetings arguing for Exchange/Outlook and AD. Those two tools are best of breed by far. AD is a HUGE standout when it comes to centralized AAA controls.

Sharepoint is sharepoint. It just doesn't suck as much as everything else.
I'm relatively unfamiliar with ThinkPads and happened to be looking at them yesterday. Here's my problem with ThinkPads (as well as most other Windows laptop vendors):

http://shop.lenovo.com/us/en/laptops/?menu-id=laptops

Which ThinkPad are you talking about? ThinkPad X, ThinkPad T, ThinkPad W, ThinkPad Yoga, ThinkPad E, ThinkPad L, or ThinkPad Helix, or ThinkPad 11E?

Let's say we're talking about ThinkPad T.. Which model?

T440p, T450, T450s, T540p, or T550?

And ThinkPad is just one line of Lenovo's products, they also have:
Y Series, Z Series, Yoga Series, 500 Series, Flex, Edge, U Series, Lavie, B Series, 100 Series, S Series, G Series, and finally Chromebook.

As a consumer, I have a hard enough time deciding between Surface Pro 4 or Surface Book... or Macbook Air vs Macbook vs Macbook Pro. When presented with so many options from one company I simply close the webpage. After all, how can they possibly make the product as good as MS's offering if they have so many models?
Getting the Local San Francisco Chapter of the Sierra Club Back on Track
What the Euro model ‘win’ over the American model means for weather forecasting
didn't find out why but resizing the browser (from fullscreen to something smaller) fixed this issue. Of course you can resize it back to fullscreen afterwards.
Yeah. So in my experience “state” based UI really pushes your app towards “real-​time”, almost like a multiplayer game. Given that your entire UI is rendered from a certain set of data, you definitely don’t want to be in a position where you are personally reconciling the data structure in the browser with data received from the server.

In my view it’s best for when you can directly tell the server, “here’s my latest data”, or ask the server: “What’s up? What’s the latest?” Think Gmail, or Facebook comments. So it’s okay if the two states (server vs. client) get out of ‘sync’, to support something like Offline Editing, but the data received should be in an expected structure.

Oddly, a simple and clear way to think about this is that it's similar to server-side templates. You instantiate your variables first, then just run the rendering function. If the rendered view has to change it's still based on conditions or booleans held in your variables; you change them and run the rendering function again. That's how server-generated HTML works.
Introducing Ad Intelligence: Pulling Back the Curtain on Mobile Advertising
Did anyone notice that this site is rather sexist?

There's not a single image on that site of a woman using the laptop. The closest image is of a person who looks like they could be a woman under the "Key Features" > "Ultimate performance" text block, but since they don't show the person's face there's no way to know.

The only women on the page are at the bottom, being the support woman and the woman sitting next to the man using the laptop.

This is part of the problem that women in STEM have, and as a guy, it's really disappointing to see such a major player in the tech sector do this.
No one uses numeric keyboard? WTF? How’d you enter numbers then, using the number row?

A huge issue with non-standard keyboards are international layouts. German layout is already requiring 2 or 3 keys combined to reach {[]}, but on some laptops you need either 3 or 4 keys combined, or often can’t reach it at all. Equally on most mobile bluetooth keyboards.

It’s as if no one thought about languages using more than US keys.
FVEY is on the receiving end of the pipeline, Germany only gets fed what the US wants to feed.
Is that any different from how Windows has restarted the GPU and reloaded the driver whenever a the video driver crashes since Windows 7? I think the new part might just be userland software being able to take advantage.
yeah, powershell is limited on the backward compatibility with dos. the few times i had to do anything on windows more than that one-off time, i end up installing a sshd (there are a few options) and use putty to localhost.
> Serious question: why would anyone buy a 0% T-Bill over keeping cash in a bank account?

Because with a bank account you have the risk of bank failure and the risk of the currency failing, with a T-Bill you basically eliminate the first of those risks. [1]

For the vast majority of people, the former risk is pretty fully mitigated (to the extent that it is separate from the latter risk) by deposit insurance, but that has an upper limit.

[1] Not fully, because its theoretically possible that the government could selectively repudiate some of its debts without the currency collapsing, so there is a potential failure that remains distinct from currency collapse.
I think it's safe, but we need real cryptographers to figure this out (does Matthew Green approving miniLock count?). With proper Curve25519 implementations key generation timing shouldn't be secret-depended: it's the same scalar multiplication (crypto_scalarmult_base).
BoxBox: A modern design tool
Blasting Contractors in Bhopal
Quite tricky to get right.
Parsing text from a logo is usually not so easy.
So here's an alternative approach that could work:
Use the first 10% of the page as the "header", no matter what it is. Store all those headers as separate image files.
When you scan a new invoice/receipt, try to match it with the list of known headers. OpenCV is good for that.

Look here:
http://stackoverflow.com/questions/4196453/simple-and-fast-m...
http://stackoverflow.com/questions/11541154/checking-images-...
This sounds like a fully-baked and useful version of Dedicated Instances (http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/dedica...).
Well the data protection principles are common across the EU - so there's only limited scope for national DPAs to disagree and there's always the opportunity to ask the ECJ for a ruling to clarify.
Depends.
Lets say you have a service that is running on your local PC at some port >1024. It uses a special binary TCP protocol and controls hardware from which images are coming in live stream. You want to display these images in a browser window, on the way there you want to resize them. And then you want to use them in the web application where the window is embedded. You have a stable tested Tcl library to do this in normal client environments, but now the requirement is a web application.
How would you get Javascript and emscripten to do this task?

I think there are two points, where a browser plugin is still relevant: (1) connect with hardware or resources where a browser has no access, from a web page. That is when you can write a little companion Tclet to do exactly this little task. (2) Deployment of an existing Tcl application to thousands of users. That's so much easier when you just need to drop the .tcl file on a web server, and your users get the update as soon as they press F5 in their browser to reload the page.
I seriously question the practicality of Aikido. It's easy to look good when your opponents play along with your attacks.
That's just not true: https://en.wikipedia.org/wiki/International_taxation

A lot of countries tax foreign-earned income, but still US is a outlier along with Eritrea, with taxing foreign income of nonresident citizens.
For the parts of the industry who run Apple's Final Cut, yes - but Avid Media Composer, Adobe Premiere Pro, etc also exist and are used by many video pros without the same platform restrictions as Final Cut.
VCs to startups: No food for 3 days? Well, you should really force yourself
I know someone who uses a TWM on a tablet, and it works fairly albeit as clunkily as you might expect.
i will take regular usb over usb-c for the next five years, thank you.
They can make it better than MS's offering because they are providing you with exactly what you need.

Take for example me, compsci student. I wanted to have a sub-600€ laptop with good hardware and good battery life, but did not care much about display. I ordered a thinkpad, replaced the HDD with an SSD, and am now happy with it.

The trick is called customization: Being better because they can deliver exactly what you need.
VAIO had an edge a while back. Toshiba still throw some stuff from time to time. Panasonic too but in the survivor category.
It's interesting that AWS markets this as a trick to reduce enterprise software license costs.

I would guess that the more common use case will be to get more predictable performance by preventing "noisy-neighbor" issues.

Will the next step be AWS supporting non-virtualized instances?