skysight-inc/HackerNews huggingface dataset:
The flaw he appears to be talking about is that the OpenPGP MDC doesn't cover metadata; the message must be parsed to recover the authenticator before the authenticator can be checked, and so the ciphertext is malleable.

The properties he's talking about for CFB are largely true of CTR as well (the gold standard in streaming modes). I think, by suggesting PGP use a "different mode", he may instead mean it would be better if PGP used an authenticated encryption mode.

Authentication is a weak spot for PGP, since its design predates much of authenticated cryptography.
Thanks for the advice. It makes a lot of sense and I will keep them in mind from now on :)
Win Arduino Nano V3.0
https://en.wikipedia.org/wiki/List_of_banking_crises

Note all of the entries that start with "Panic of.." from well before the collapse of Bretton Woods.

Even the Great Recession wasn't that bad compared to what we had before.
Well how much work can you expect a for-profit-company to do in order to release their software as open source? They choose a licence that worked for them, then and there because of reasons. This included the work on ZFS.

There are operating systems that have licences that permit the ZFS code in the kernel. What reasons did SUN have to specifically block the Linux kernel but not BSD / Darwin ? The choice of license has everything to do whit what license SUN was comfortable using and nothing to do with keeping GNU/Linux out of the party.

If the answer is that a lot of their competitors at the time were invested in GNU/Linux and thus could not use their code, that is a very short sighted move.
New Book Teaching Amazon Web Services
Manning just published a new book providing a deep introduction to AWS, called Amazon Web Services in Action. Andreas and Michael Wittig, both DevOps engineers from Germany are focusing on Infrastructure as Code and the most used AWS services and architectures in their book.

Use code ctwreinvent to get 41% off.

https://www.manning.com/books/amazon-web-services-in-action
What does the future of the sharing economy look like?
Wow... awesome project. That guy is living the dream...

https://github.com/JoakimSoderberg/catcierge

That cat house has better documentation, unit tests and code coverage than many commercial projects I've worked on.
Cool and thanks for the extra info, I'll check out those links.

You're right that the story comes off as incredibly one-sided, and some of the claims did indeed leave me with a feeling of "there's gotta be another side to this". On the other hand, many of the claims by themselves weren't that surprising either (of the type that makes people use the "I don't see why anyone is surprised"-non-dismissal).

But I'm always interested to try and balance that view somewhat.

That said, even without having read your links, I can't imagine any other interpretation of the events (as also corroborated by the US' PR themselves) that would not have caused the destruction of decades of building of trust in vaccination programs to the local populations. That part doesn't just come from Hersh, the US admitted as much themselves--well not the repercussions obviously, but that they did (ab)use the vaccination programs as cover for a conspiracy furthering US military interests.

As anyone remotely familiar with the difficulties for vaccination programs should know, that alone, well-substantiated rumours, are more than enough to ruin a local vaccination program entirely. I mean, obviously, the act of administering a vaccine to a person is not the hard part of these programs. It's the part to get them voluntarily choose to receive the vaccines.

Regardless of all the other bold claims and conspiracy surrounding the OBL operation, the US should have reconsidered thrice before involving the vaccination programs. The scales should have been abundantly clear:

One the one hand there's the possibility of a monumental achievement for the whole of mankind, the complete eradication of a terrible disease, saving who-knows how many lives, something that can without any reservations whatsoever be placed on the "good" side of just about anyone's moral compass. Those were the stakes, and they knew it.

And on the other hand, there's getting revenge on Osama Bin Laden, who didn't play a serious role any more in the wars the US is waging. Already when he was killed, the only reasonable reaction I could (sort of) understand was "yes of course it's just for PR and ego reasons alone. but eh, let them have it, maybe it'll provide some closure".

So yes, whoever made that call and went on with it, did it for extremely petty reasons. And yes it probably was not a single person that decided this, it was probably a rotten system stuck in a feedback loop of hate, like an ingrown toenail, that made it pretty hard for anyone involved not to go along with it. It's still petty, and they can still own it.
Income is a proxy. There are multidimensional definitions of poverty, but they are too hard to measure and compare across countries.
How is that not a Democratic state?
And the reason they have these patents are because, contrary to the article, they were doing smartphones long before Apple or Google came to the table. MS was actually one of the bigger smartphone players at the time. Sure, these were not the "modern" touchscreen smartphones that Apple popularized, but MS developed a bunch of technologies that, behind the revolutionized UI, are used by modern smartphones to this day.
In Jai it is easy to, for example, have bounds checks on during the entire development process to aid in finding bugs, then turn off bounds checks in a dozen critical loops for testing and release, then turn bounds checking on in one loop that still proved crash-y.

Blow has said many times: he doesn't think the language should be prevent you from shooting yourself in the foot, because sometimes that means preventing you from doing what you want to do.

He usually asks: what is something simple we can do that will give us 90% of the benefit, without adding a layer of overhead. Rather than Rust's "Safe All The Things!" approach, bounds checking is just another tool you can use or not use as is appropriate for the context.
Makes sense.

I guess my central confusion is that I thought the entire reason for bundling mortgages into some kind of aggregate object (I'm going to drop the financial terminology, as I'd probably use it imprecisely) was so that they could transform it into a fungible asset and therefore have access to a broader market of customers who were interested in buying it.

In other words, while retail investor might not be interested (either through a mutual fund or something else) in owning these 3 mortgages, they might be interested in owning a smaller share of 1,000 aggregated mortgages. And furthermore, that you could alter the criteria those 1,000 mortgages were selected by to create different products (offering different rates and risks). And furthermore, that you could attempt to value add (and I thought this was where it went off the rails) by packaging junk mortgages in some statistically magical way where you could sell the aggregate for more than the total value of its individual components.

So, in essence my understanding was something like (start at top, trickle to bottom):

Actual mortgage

Basic mortgage backed security (no value add)

Complex mortgage backed security (value add)

Retail mutual funds / investment bank consumers

(Which, as you've said, still has nothing to do with HFT, as given the nature of these things there probably isn't much pricing variance day-to-day, and therefore has little interest to that community)
We're building a single page app with all the rendering done on the client(clichéd, yeah) and a RESTish Dropwizard API server

We have a page which requires integrating data from 12 different REST APIs. Making 12 HTTP requests takes a lot of time. So the obvious solution is to merge the APIs on the server and make a 'business' API specific to that page.

But we did not want to repeat all the merging logic on the server during launch.

To alleviate the problem, I created a dependency graph/DAG for all the 12 APIs and fired HTTP requests concurrently at each level instead of using 12 promises which increased performance significantly.

Does GraphQL support such use-cases?
The maximum does not matter. The sentence is constructed from sentencing guidelines, and departures from the guidelines have to be justified.
Trading Has Begun on the Winklevoss Twins' Bitcoin Exchange
>Is this the primary force behind a change such as this?

I read this in many places, granted, they all may have some bias (You can make a search with "reasons declining extreme poverty"). But, I personally do believe it is the main reason.
Can't you? A quick web search found android install instructions for several iPhone models.
Looks great! I recently revamped my freelancing homepage and something like this would have made the process much quicker.

By the way, I noticed your site returns a server error for pages that aren't found instead of a 404 e.g. https://pocketsquare.io/notfound
They were also living as hunter gathers in very sparsely populated areas. The earth can't support 8 billion people with berry gathering and deer hunting.
25% of all websites are about to get a REST API
Why do people keep oversimplifying this to "defacing a website"? If you were running ops for a tech company and your website was defaced, would your costs stop at the point where you restore the original content to the website? Of course they wouldn't.
Corporations are ships of Theseus.
On the other hand, Google+ as a project was an aberration, and the guy mostly responsible for it has left the company. My question is, have Vic Gundotra's superiors learned the proper lessons?

That said, the Google+ real names insanity removed all my trust in the company's products at that level, and I'm only now considering doing business with them due to their low cost of cloud storage and trusting them at the technical and operational levels more than Amazon.
> I still characterize them by their Halloween documents...

Anytime somebody mentions this, all I hear is, "They said mean things about my ideology of choice".
Even the tens of thousands could be a stretch for the actual cost.

When I was handed a copy of my Pre-Sentencing Report, for an incident that took place on June 21, 2011, they billed from June 16-24.

I pointed out that I did not own a time machine, then they quickly changed the dates to June 21-27 and dropped the "damages" by over 60%. That's the difference between certain prison time and probation with house arrest.

(This was Sylint, maybe they're just scumbags and wanted to make as much money as they could off my mistake.)
Thanks for the feedback. I'm a fan of Github pages and Jekyll and have used them for several projects. Github pages are great for explaining individual repositories but I think they serve a different purpose than Pocketsquare.

Pocketsquare is more of an overview of what you do, letting you showcase multiple projects in one place and talk about different skills, language and frameworks you know, as well as highlight your experience and education background if you'd like.
Well for a start coinbase is not an exchange
You mean like OS X or Linux crazy?

Or Office 365 Home - one license for up to 5 desktops/laptops + five tablets - crazy?

I'd be surprised if Windows didn't move to a subscription model soon. The current free period looks like an attempt at lock-in to me.
Cool idea.

> Oh, also: it’s free.

Your target users, developers, have the "I'm a product" meme at the front of brain. It certainly immediately came to mind when I read that.

I'm not saying you are selling me, but some treatment of that concern might make the paranoid wing (proud member) more comfortable.

And if you are selling me, well, nothing wrong with that, but be up front about it.
Be Good at Your Job (2004)
For the record, I'm aware of a group of blackhats who have co-opted the screen names of popular whitehats (including one who goes by briankrebs).
Show HN: A simple bare-metal Forth for the PDP-10
Separate thoughts. Quoting it as particularly of note/value, then giving a thought on the article's issue as a whole.
The other video, at the bottom of /camera is much better: https://vimeo.com/141273968
Yes. But only one http request. If they're both the same query but access a different field you might be able to cache it.
From Tyler Winklevoss's answer on the Product Hunt page for Gemini:
"Gemini is a New York state limited liability trust company, we did not apply for or have a BitLicense which is a much lower standard. As a limited liability trust company we are a fiduciary, which allows us to accept both individual and institutional customers under New York Banking Law (unlike the BitLicense, which does not convey such fiduciary powers). In short, we can work with both Main Street and Wall Street."

Source: https://www.producthunt.com/tech/gemini-2
Would love to see it there, too. Maybe we should just ask them if they would support that.
It is a strange thing to use cars as an example of a free market. The government just bailed out the auto industry. The government bailed out Chrysler with loans and government contracts in the 1970s as well. The auto industry lobbied for and got massive public subsidies for highway and road construction, while lobbying against mass transit, or just smashing it like GM did with NCL. Not to mention the federal government reviving Depression-racked Detroit's fortunes when the industrial plants began having tanks roll out during WWII. The auto industry never wanted to operate in a "free market".
A lot of numbers in this article, but how much would it cost us to solve poverty? And for different values of the poverty line?
If you're interested NeedProgrammer also offers simple dev profiles for freelancers: https://needprogrammer.com/#/profiles/developer/zach-van-nes...
Why should the business be prosecuted for not protecting themselves better? I can only see the point behind arguing that a business should be prosecuted for not protecting their _customers_ or _the public_ better.

While I might want my accountants to be prosecuted for leaving their doors unlocked overnight, I wouldn't want the local baker prosecuted for doing the same.
sure it is: https://exchange.coinbase.com/
He's really just looking at the frontend side of things.
Using two c3.large instances to serve 16,000 requests a day (~11 requests a minute) is akin to using a muscle car to commute a quarter mile - you're vastly over-provisioned for such a simple workload.

This kind of workload could easily be handled by a pair of t2.micro instances. This would cut your costs for dedicated servers to around $0.40 a day.

Plus, you could then take advantage of persistent in-process memory caches and warm services, helping to speed up your responses even further.

Using tools like Lambda come with a number of advantages, but you give up a lot of control at the same time. Perhaps this isn't a problem for most side projects, but for business critical software I'd be very leery of handing that much control over to someone as uncommunicative as Amazon.
You might want to let coinbase know that.

https://exchange.coinbase.com/
Documentation, unit tests and code coverage. Dream come true ;-)
Yeah there's definitely some work to be done and I have better server responses on the list. Thanks for checking it out! Also, it can't hurt to host your freelance page here too!
Maybe I missed it before, but this is the first article that I've read that specifies the battery split between the base and the screen:

> "The top gets four hours of battery life, and the bottom gets eight."
Every SHA1 hash starts with an initalization vector, which is a kind of ur-hash:

67452301EFCDAB8998BADCFE10325476C3D2E1F0

The function of SHA1 is to transform this ur-hash into the hash of a specific stream of data.

In a freestart collision, attackers start from something other than the initialization vector. Think of it as if they're starting from the hash of some piece of data and then hashing more data into it (that's essentially what they'd be doing).
Stephen Hawking's Reddit AMA answers are now available
Right, but I think that's partially the point. When you try and boil things down to a simple number, you lose a ton of information. Perhaps it's not wise to do this extreme metric-izing as it will probably just lead to the metrics being gamed rather than actual improvements.
I personally only take placebos.
Predictive model for NHL 2015-16 season preview
When he moves to a new neighborhood and wants to cloak the source of funds that buy up all the adjacent properties?
So I'll go out a bit more on a limb, and observe that A: I had some lightweight metabolic illness (ate bad as a child, ate better as an adult but definitely had lingering effects) and B: I really don't seem to anymore, noticeably so even after three weeks. I can eat a lot more carbs and even a bit of outright junk, and I'm still losing weight right now. (While successfully exercising for strength gain.) That was not true two months ago; I had to rigidly stick to my low-carb regime, and any deviation plumped me right back up. Again, I'm still not ready to call it after three weeks, but the thought is certainly stirring in my head that this could be a nontrivial element of the obesity problem, and a nontrivial reason why dieting often seems to hit a plateau early and often, before it really should. In theory, even in our current food environment, it ought to be possible to get pretty close to our natural, optimal weight without having to torture ourselves, precisely because it is the natural weight for us. In practice, it's quite hard.

(There's a blog post bubbling in my head about how Everything I Was Told About Health As A Child Was Entirely Wrong. Not just sort of wrong, but "everyone needs to eat three meals a day"-is-also-wrong levels of absolutely, positively everything I was told is wrong. The only thing I can think of that was true is that exercise is important, but even then, there was a radical overemphasis on aerobic exercise when I now believe the correct focus for most people is strength training.)
Yeah they are. They wern't originally but they launched 'Coinbase Exchange' a while back and now offer both their traditional broker service as well as Exchange services.
Nice, I bought a pi to make a "cat on the kitchen table" alarm to handle a common problem. Have not had time to complete it, but the concept is: find the pixels that compose the kitchen table-top and get the convex hull of those. Next identify pixels that are "cat color" and are inside that hull. In the case of my cat, "cat color" is several colors and stray matches can be rejected if they are not near different colors in the collection - false positives are bad, as we don't want to turn it off during dinner and people have different clothes all the time.

Another challenge is scaring the cat out of the christmas tree. This will be coming up soon so I may have to finish this thing after all. Training the cat to stay off the table has gone well, since we keep interesting stuff off it when we're not there. The tree however is full of interesting stuff.

EDIT: to clarify, I never completed the table project, in part because it's not a problem any more.
The problem is that often the compiler can't automatically vectorize because some preconditions are not met. The knowledge about those preconditions is mostly limited to compiler people and so far, by what I know, there's no static analysis tool that tells you why the compiler couldn't vectorize a loop.
The accounting fraud's[1] the best part of the AOL CD lore.

For fiscal years 1995 and 1996, AOL capitalized most of the costs
of acquiring new subscribers as "deferred membership acquisition
costs" ("DMAC") -- including the costs associated with sending disks
to potential customers and the fees paid to computer equipment
manufacturers who bundled AOL software onto their equipment -- and
reported those costs as an asset on its balance sheet, instead of
expensing those costs as incurred.

The financial impact?

Had these costs been properly expensed as incurred, AOL's 1995 reported
pretax loss would have been increased from $21 million to $98 million
(including the write-off of DMAC that existed as of the end of fiscal
year 1994), and AOL's 1996 reported pretax income of $62 million
would have been decreased to a pretax loss of $175 million.

[1]https://www.sec.gov/litigation/admin/34-42781.htm
Clearbit Sheets
I also remember that a lot of it was going to based on .NET, and it wasn't mature enough/they weren't able to get it mature enough. The whole process was also impacted by security issues reaching a crisis level.

But #1 would seem to be more ambition than Microsoft could deliver at the time.
I swear I've seen a similar project like a decade ago, somewhere.

I have an easier solution - weigh the cat on a pressure pad just before the flap - allow for variances of a few ounces but not much more.

But the cat door is also a safety thing for my cats when they are feeling unsafe or being chased - I wouldn't want them to have to wait to get inside.

ps. cats bring you dead things as food because they think you are too feable to hunt and triggering a nursing instinct
What Trevor Noah Learns About Public Speaking in His First Episode
Meet the future of design. Hint: it’s on your phone
The key defining aspect of a state is that it has sovereignty vested in it: Power flows from the state down, no matter how who controls the state is determined. It then becomes a weapon of those who control the state, which is never the population as a whole (at best it might be a majority). This is its political purpose.

The state also serves administrative functions, but the existence of these administrative functions do not rely on the state any more than current supranational organs rely on a single world government handing down power: They can continue to exist by having their power delegated from below.

The difference, of course, being that when you are dependent on having your power delegated from "below", you need to thread much more carefully.
Any modern full-frame Canon with the ol' "nifty fifty" (cheap fixed 50mm, 1.8f lens) could get a shot like this. I've taken portraits in-doors in candlelight with mine.
I'm sorry, but this just isn't correct. It's hard to imagine any outside forensics investigation happening for less than $20k ($50k is a more reasonable estimate), and those outside investigations are often mandatory in breach cases. Insurance companies and, sometimes, regulated data protection usually require that the company take steps to ensure that everyone knows the limits of the attack --- and those limits, as you know, aren't at all obvious from the attackers overt actions.

It looks like the attackers just fucked up a bunch of web pages. But they broke in; how do you know they didn't leave backdoors, or exfiltrate databases? You often don't, unless you engage an outside firm to verify.
Gallup gives up “horse race” election polling
Adobe’s amazing prototype camera app
Are we really back to calling UI design decisions "evil"? That word used to mean something, and slightly inconveniencing people who use YouTube wasn't covered.
This case would be more like blackhats co-opting Kreb's Twitter password.
So the message is: don't trust the integrity of encrypted mails unless the signature is valid? That doesn't seem too terrible.
So my hobbies of homebrewing (88k alcohol related deaths), motorcycle riding (5k), and driving cars(22k) should all be banned?
Not officially, as mentioned (which is the same situation with Mac OSX and notebooks from other brands)
Good to hear what works well. And great to hear what exactly needs to be improved.
Off the Grid, but Still Online
It's complicated for government or law enforcement, not for the person being questioned. That's by design- the tests and hoops to jump through are the protection at work. For the questioned it's relatively simple. When questioned, decline to answer and invoke the fifth. If mirandized/in custody, request a lawyer. And then don't say anything else.