skysight-inc/HackerNews huggingface dataset:
My suspicion is that this fellow crashes on a friend's couch pretty often. Unless Google allows him 24 hour access, he doesn't have a bathroom at night or on weekends.

>"It's really hard to justify throwing that kind of money away. You're essentially burning it — you're not putting equity in anything and you're not building it up for a future — and that was really hard for me to reconcile."

Equity and saving for the future are things you do after you've established a home. Comfort and time off of work are essential to a well-balanced and healthy life.

What's sad, to me, is not that he lives in a truck, it's that he works so much that doesn't value any time alone in his own space. I know the rent is exorbitant in the bay, but his pay from Google has that factored in -- he's no Mission artist getting evicted, after all. I happily pay a significant portion of my income to have a home, even a rented one.
If you really care about security from an organization like the NSA, the only option is either to have it be entirely air gapped or to be entirely open source, including BIOS and UEFI firmware and anything else that might run on the hardware. There are really no feasible options, and especially so in phones.
It's just "because entropy used to be really difficult!" We now have relatively simple and proven algorithms (Yarrow, Fortuna) which can take 256-bits of entropy, and deliver effectively infinite streams of high quality entropy from that core without leaking any of the seed, or skewing the output. In such a system, pulling bits out of the core entropy bucket is counter-productive.

As djb says;

Cryptographers are certainly not responsible for this superstitious
nonsense. Think about this for a moment: whoever wrote the /dev/random
manual page seems to simultaneously believe that

(1) we can't figure out how to deterministically expand one 256-bit
/dev/random output into an endless stream of unpredictable keys (this
is what we need from urandom), but

(2) we _can_ figure out how to use a single key to safely encrypt many
messages (this is what we need from ssl, pgp, etc.).

For a cryptographer this doesn't even pass the laugh test.

BSD and OS X are more modern than Linux in their choice of CS-PRNG; they used to use Yarrow, and then added Fortuna support in 2014 (behind a config flag) and will make it default in 11.0. Linux has used largely the same CS-PRNG for /dev/urandom since 1994, with some upgrades to their mixing function, to prevent DoS against /dev/random, and upgraded recently to include random bytes extracted from "RDRAM" provided by Intel CPUs.

I'm not sure why we haven't seen the underlying CS-PRNG switched wholesale to Fortuna in Linux. For example, they are still using a SHA-1 based output hash, which seems like it might be time for that to go.

The higher level take-away is that trying to avoid the modest code complexity of the CS-PRNG by going directly to /dev/random is more likely to lead to an exploitable catastrophic failure than sticking with /dev/urandom.
Probably worth trying it out again, but the last I checked it was "new and shiny" but absolutely useless and unreliable piece of software. I don't remember now what exactly was the problem, but it was something pretty basic: I guess it was improper handling of non utf-8 encodings. Or something as frustrating as that.
Punitive justice is petty.
> Unless Google allows him 24 hour access, he doesn't have a bathroom at night or on weekends.

Google allows 24 hour access, unless that's changed recently.
I have home solar. I'm sharing my experience. With a small battery, your solar power will continue to function if separated from the grid. I'm not sure what the argument is. I installed my system without a battery. I don't have a battery installed today. But what I said is, I find home solar to be more valuable with a battery.
Default UUID's in Rails
Darwin regarded sympathy as the most important human adaptation
"However, on systems such as Solaris, the cryptography group (whom I know personally) specifically recommends the use of /dev/random in some cases. Those cases are largely limited to specific cryptography requirements such as a hard requirement for high entropy sources."

I'd also like to know what their specific arguments are on Solaris and for what use cases.
Buffering During a Download: Do You Experience It?
Doesn't support Firefox for those wondering.
http://www.teslamotors.com/supercharger has all the information you need. Realistically, an hour is the higher end of the waiting time - you can get significant range in fractions of that time. Additionally, the navigation software on the Tesla will automatically route your road trip through Superchargers, so you don't have to calculate where you need to stop.
It's OK when you only have to crawl one or two websites, sure, manually analyze the js and write minimal DOM parsing routes would do.

But how about hundreds or thousands of websites to crawl? Or do you prefer just use phantomjs write static extraction rules.
The TTS engine built in to OSX works offline and is good. In my opinion it's as good as any of the online ones for most uses. But the OSX license limits it to "personal, non-commercial use". I'm not sure whether it's possible to get the same technology in a commercial license. Some of the voices are licensed from Nuance (parent company of Dragon), but it's not clear whether the engine is too.

Some better free-software offerings would really open this area up for experimentation, since the commercial offerings tend to be pretty black-box and targeted at very specific use-cases.
- With a PCRE/RE2-like NFA implementation, where you have green threads representing the states in the automata, you can just store the start of match in the thread. You do have to be careful then about not killing some threads off. If HyperScan is a DFA, though, then SoM is indeed hard.

- Redgrep is a cool project by Paul Wankadia that uses LLVM to JIT regexp automata into machine code. https://github.com/google/redgrep. The two things that are tough about JITting for very large automata, though, are breaking the code up into functions (a compiler can't deal with one gigantor block), and all that entails, and the fact that a machine code representation of a large automaton might be many times bigger than a more traditional representation, so what you gain in decode time you lose on L3 cache hits.

- I don't grok what you mean about predicting the future wrt/ lazy/greedy quantification. With lazy quantification, you can stop producing matches once you've gotten the first match (or once you've moved past the quantification iff the subsequent subpattern and the quantification subpattern are disjoint). Looking for "<html>.+</html>" in a large stream is very bad, whereas looking for "<html>.+?</html>" is almost certainly what's desired.

- Capturing in a streaming mode just doesn't seem worth it.

- Large spans of bounded repetition are indeed the devil. It should be possible to replace states with a counter, but I think it requires dynamic mallocs (though I haven't worked on it yet).
parenting done right, I'm envious now :D

keep up the good work
Amazon's pretty clear about handling / management of Echo/Alexa voice data.

FAQ: https://www.amazon.com/gp/help/customer/display.html?nodeId=...

View Dialog History: https://www.amazon.com/gp/help/customer/display.html?nodeId=...
Can't wait to get through the experience!
Lots of people are going to be tempted to rant about seeing bicyclists run stop signs and red lights, just like the last time an article got posted about this subject. That has nothing to do with this law, which applies only when there is no interaction with cars anyway. What you are seeing is still just as illegal as before.
In his blog, he mentions that some of the time he spends "at work" is spent eating meals, exercising, or socializing. It's not a complete lack of work/life balance.
If you drop a credit card somewhere, you call and cancel it. If you drop $1000, well, don't do that. (carry it? drop it? either?)
Dangerous Courier Delivery Ransomware Scam – MailShark
The law can be broken, there is abundant evidence that it is broken constantly, and there is very little to no accountability when it is broken. There may as well be no law at all. The entire fucking program was illegal for years and it didn't stop them. They literally don't give a shit if what they're doing is illegal.
Ladies and gentlemen, meet the smartest person working at Google.
First thing that came to mind, too. However, he can always go to his partner's residence for action.
"This call may be monitored or recorded for quality assurances or training purpose. Your information is confidential and protected by the law."
Call centers do that long time ago. And our voices are stored and used globally. I wish they have a delete button too.
My current car is 14 years old. My previous two reached 16 and 17 years.

I try to run then as long as possible because cars are money sinks.
I would do something very similar, in fact.
iPhone user here, and my first thought upon reading the headline was "unlocking" in the sense of carrier locks. Given that Apple sells unlocked phones in the first place, my mind immediately switched to the actual meaning of the headline. But still, there was a moment of confusion.
If you stick to purely functional pieces (=no mutable state), than following the letter of the lesson will yield the spirit---because the context becomes so much simpler.
Lying Your Way to the Top – Tech's Dirty Secret
Hope he got a good parking spot, then; either he's walking a mile at night to use the facilities or seriously irking whoever maintains the lawn.
I give it a week before this is spun into some sort of attack on the culture of the tech industry.
Yup. As the celebrity photo hacking should have made clear, Apple can only offer far weaker security guarantees on the web because they control less of the ecosystem.

At a minimum, if the police get access to your email account, they can force a Apple ID password reset and then restore your data onto a new device without needing permission from you or Apple.

Note however it is still possible to backup your iphone locally using iTunes and Apple now supports encrypted local backups. If you are worried about this threat vector, encrypted local backups provides a large degree of the same usability with significantly stronger security guarantees.
the must-cause-pain execution method

This is absolutely not true.
This is an excellent comment in the old thread:

https://news.ycombinator.com/item?id=8542479

uBeam has me puzzled. I do DD for a living and I've learned over quite a few years not to reject ideas out of hand. The best start-ups are the ones that do something that everybody else thinks is impossible anyway.

That said, from the patent application I'm not getting anything novel or interesting, the comment linked above - assuming that's pointing in the right direction - makes me wonder if there is more to uBeam than meets the eye at first glance, defocused beams combined with a feedback mechanism and phased arrays of transducers might be viable (but would not require much in terms of mechanical aiming devices which is why I wonder if they're aware of such tech, and even though hardware requires more capital than the next photo sharing app I do wonder what they'd need $10M for).

If they do not have that particular rabbit or one very much like it up their sleeve then I'd happily bet against them. Since a bunch of high flying VCs went on and invested after doing proper DD you'd have to assume there is something non-obvious about all this. If they have a proof-of-concept and DD was done then you can bet that (assuming the DD team was halfway competent - which is what should be a safe assumption but I've seen a train-wreck (or two)) the practical efficiency for conversion of that proof-of-concept was measured and found to be good enough to warrant further investment.

If no 'proof-of-concept' was shown capable of delivering the required power then this project falls into the basic research with unknown outcome category, which translates into very low probability of success, but that does not jive with their time-to-market prediction, nor does it warrant the barrage of PR.

Even if the tech is viable I don't mind the inconvenience of plugging in my phone at night, and besides it lasts for many days anyway (old tech > new tech in this case...) so it doesn't really mean much to me, but I can see the mass market appeal and that's what drives investment.

If uBeam fails to deliver it will be a serious black eye for a lot of people with high visibility and it will be a set-back for any future hardware start-up that wants to push the envelope.

Personally I wouldn't bet on them but one thing is for sure, if $10M can't get them to create a working device then likely it can't be done at all, given that they've already over-run their initial time-to-market predictions they're not looking good.
What's the value of sum for an empty array in your example?
You could add a special opcode for that, something like SCCB (Short-sell and Call CES if Borrow).

See also: http://ruthless.zathras.de/fun/top-secret/NewOpCodes.txt.
Building Spam-Free Contact Forms Without Captchas
He's got the middle of the night to get a good parking spot. After a few nights he'd easily have the best non-reserved/handicapped spot possible.
He probably really enjoys being in the office and produces a lot now. It could be a great deal for Google, just as it is for him.
I wonder just how hard it would be to make a detector that could pick up any scans (or other bursts of X-Rays)?
>It's not a complete lack of work/life balance.

To me, doing all of your life at work is work, with no life. I need to disconnect, and I can't do that in the place where I work. Is this a corporate culture thing now? Work for Google, socialize only with Googlers, eat/sleep/breathe work?
Teen Who Hacked CIA Director's Email Tells How He Did It
Yeah, large companies seem to allow badged access after hours.

A chemical toilet is also a wonderful thing.
I see this as a smart move on his part. He's probably more fiscally responsible than 99.9% of people, including myself. It looks like a smart option for someone who only spends time at home when sleeping.

All things considered, I certainly hope that once he has paid off his student loans, he'll rent or buy a place.
And due to their black-box nature, they are very likely invisibly compromised by the five eyes. Every CEO of a major technology company, including those that manufacture HSMs, is well aware of the lessons taught by Joe Nacchio.
What possible citation could be better than the one provided? Apple has sold over 1 billion of these devices and they all share the same lock screen UI; 500,000 search results on Google pales in comparison as a citation.

Edit: I understand your point and agree that unlocking a device would not mean exactly the same thing to all people. I just don't agree that the parent needed an additional citation.
JAWS: The Monstrously Scalable Serverless Framework
C'mon man, at least do it right and get one of these guys:

http://www.tonke.eu/us/collection/woodline
"automatically retractable door handles". Forgive me for being ignorant about this, but as soon as I read this (that not only it exists, but is a "signature feature") I couldn't help but wonder why...

Does anyone here know why such a feature would exist? Sure it makes one ooh and ahh when they're about to buy it, and probably the first few months after, but does anyone think if this feature does not perform perfectly, it could only possibly cause more buyer's remorse than anything else?
Or from the other dark side (Haskell):

foo bar && hello world

and for more than one argument:

foo bin bar && hello world
Thanks, I did read about North Carolina, but thought they'd completely shut down the plant there. So I guess they were forced to stop in NC due to production difficulties, canceled their plans again due to Italy/EU law, and then have never had sufficient reason to take the increasing PR hit and resumption costs for a relatively small market. And/or they genuinely decided to take a moral stance.
Model S went into production in 2012[0] and has an infinite mile warranty for 8 years. These cars won't be out of warranty until 2020. It has no limit on owners and applies retroactively. Even tesla roadsters won't be out of warranty yet as they were produced in 08'. Given that there are about 2400 of them, most drivers won't pay out of pocket with a tesla for half a decade. The ones who bought roadsters are risk tolerant wealthy technophiles, who likely have repurchased Tesla cars. While I don't have data on that, if you pay over 100k for what was one of the first production electric vehicles from an unknown company and entrepreneur at the time, you have to be bullish on tech., the environment and have the funds to satiate your curiosity.

[0]https://en.wikipedia.org/wiki/Tesla_Model_S
[1]http://www.teslamotors.com/blog/infinite-mile-warranty
My mother's 2015 BMW 320d has needed to go back to the garage at 6 months old to have its sunroof replaced. A BMW 320d isn't especially high end, it's true - but I imagine that (aside from the engine...) it consists of mostly the same parts as something fancier like a BMW 335i or 335d.

My dad's 2011 BMW 640i, probably closer to the Tesla in terms of price point, seems to have been trouble free so far.
> Comfort and time off of work are essential to a well-balanced and healthy life.

It has been shown that reducing commute time significantly increases your happiness. Besides, I'm sure there's a higher purpose for what he's doing, otherwise it would be intolerable.
>Equity and saving for the future are things you do after you've established a home.

He has established a home, it's just not a traditional one. It's a really-not-up-to-code tiny house on wheels.

If he were living in a Winnebago or a trailer would you feel differently?
>However, he can always go to his partner's residence for action.

You are right I suppose. That thought process eluded me:). It all works out then.
From my understanding - important files are encrypted, and the ability to decrypt is lost when the user sleeps their phone. So iOS needs the user to enter a passcode before the data can be read again.
Maybe fixed now, but there was someone who got around the 10 unsuccessful (an perhaps the last one as well) by shutting the device off after an attempt was failed (like 0.001ms, not manually)
It is irrational to pay current Bay Area rents, especially if you plan on living here long-term. The only way to avoid eviction for sure is to buy, and that's going to cost you roughly half a million dollars at the low end. Better to minimize your expenses and ramp up to that than set half your paycheck on fire to pay the inflated rent.
It really is, but why shouldn't they? The people who express a preference in favor of the death penalty are entitled to their attitudes, but not to freedom from political opposition.
This is unfortunately not true. If you do some research into it, you'll discover that it's not easy for terminally ill patients to end their life. Contrary to what most people think, sleeping pills are not reliable, nor are many legal drugs. In many cases overdoses of these drugs leaves the person in an even worse state because they can cause severe distress, the body rejects them and vomits them out, they don't act quickly enough before the person is discovered and resuscitated. They can cause brain damage or physical damage without death. Terminally ill patients often aren't in good enough shape to even climb to the top of a building and throw themselves off. Like you said, it is extremely sad.

The drugs required for execution, on the other hand, are used because they appear to be the most reliable, peaceful and expedient method.

You can read more about it at http://www.peacefulpillhandbook.com/ - there are many terminally ill people who are trying to get their hands on these drugs.
Beyond the technical reasons mentioned here, I'd wager that the emphasis on front-end specific apps and toolchains also has to do with dividing developers up in to front-end developers (who don't touch the database) and back-end developers (who don't touch HTML/CSS/JS). This approach has its merits and its drawbacks.
That long? I appreciate your optimism.
You give the HSM the pin, it returns the key used to encrypt the data, applying the rules to that interaction with you. Emulating the HSM doesn't help since it is that phone's specific HSM with the key it knows that you need to access.
running down pedestrians is still illegal as well, no matter what vehicle you're operating.
Playing table tennis against a robot
The gallows has too many variables. Too short a rope, and you spend a few minutes asphyxiating. Too long a rope, and your head pops off. If the executioner makes a mistake, it's not humane anymore. If the executioner doesn't like you, he might intentionally "make a mistake".

It's theoretically more humane, and harder to screw up, to OD you on happy drugs. (It also looks more peaceful when one of those drugs is a paralytic.)

Oklahoma a few months ago introduced nitrogen asphyxiation as their backup plan. We know it's painless because a few people have accidentally entered nitrogen-heavy areas and didn't notice anything was wrong until they dropped unconscious (and were recovered before dying).
The Circle!
> [..] but it'd probably be really hard to get them to work on Haskell.

I've been on both sides of Haskell hiring. There's more people who want nice Haskell jobs than Haskell jobs advertised these days.
I swear this is the 100th time I see this submission this month..
I've thought of doing something similar to that. I might try it at some point, probably just for a chunk of a few months. But I'm thinking more along the lines of buying a more maneuverable VW minivan, and retreating to the Santa Cruz hills or Big Sur over the weekends, because I currently miss nature terribly while living in SF.

A few thoughts (I don't work at Google, but a similar large tech company in the south bay):

1) Yes, $2000 a month is expensive for corporate housing. But if your goal really is to save money, you can find a room in San Francisco for under $1000 in a co-op or such and just take the shuttle to Google every day. It won't be the most beautiful house in the world, but it'll beat a truck.

2) If you like bringing home cute girls/boys, that's going to make things significantly harder.

3) I have a fair amount of expensive equipment (photography + music gear) that I would not be comfortable leaving in a vehicle for extended periods of time. It'd just takes once to lose a pretty significant chunk of cash (probably something like $5k in photography gear and close to $10k in music gear, for me).

4) Even if his name and face were withheld, anyone working at Google will remember that truck very distinctly now. Not the smartest move for him, he's probably going to be found out in the next week or two.

I have friends who did similar things - whether to save money, or to entertain a more minimalistic lifestyle. I'm still very curious about it, mostly for the latter reason, and would love to read any detailed experiences if anyone here has done it.

Here's one link for a few years back: http://austenallred.com/voluntarily-homeless-in-silicon-vall...
Interactive highlighting is probably not the right thing, but it would be good when first opening a large file. I suspect most of the overhead, though, is just in maintaining state related to the highlighted sections and not in the initial matching, but maybe.

Another neat application might be ad blocking extensions, where there are bajillions of rules. The text is small, but the rules update infrequently enough to make it worthwhile and there are so many repeated requests from a page load that a smidgen improvement in evaluation could lead to a perceptible page load decrease.