skysight-inc/HackerNews huggingface dataset:
The Mexican cartels captured and paid engineers to build them there own private cell network[0], so it isn't out of the realm of possibility that ISIS is doing something similar.

I am sure they have at least a few engineers kicking around what amounts to be an entire country. I haven't heard many people harping on about encryption, TBH, except people defending it here and that idotic NYT article.

However, if you had 10 amazing engineers you would likely have strike capabilities orders of magnitude higher than a few suicide bombers. So sure, gather surveillance, but let's play some defense. Shore up our infrastructure much better than we do now, because after they make their own apps and networks, they are going to come for ours potentially.

[0]http://www.wired.com/2012/11/zeta-radio/
Biohackers push life to the limits with DIY biology
I think you are mistaken. The solutions as drawn are circles on an appropriate representation of the Earth, such that the places on the circle form a Great Circle when mapped back onto the sphere, and hence do define a slice through the centre. In particular, in the gallery of the locally optimal Great Circles he is using an azimuthal equidistant projection, and so the circles in the diagrams do correspond to Great Circles on the sphere.
Shout out to WebKit for being the first web browser to support tail calls in its JavaScript engine:

https://www.webkit.org/blog/4054/es6-in-webkit/

Come on other browsers!

https://kangax.github.io/compat-table/es6/#test-proper_tail_...
It reminds me of a vBulletin plugin that let you order a pizza from the admin dashboard. Except you know, a bit healthier.
"1024-bit symmetric key encryption" certainly has the flavor of a statement which is technically correct, but designed to be favorably misinterpreted. I'm surprised they didn't mention that Skein is gluten free.
> Many if not most of the major websites have this dual identity where they put reams of fluff, then the occasional substantive piece.

https://en.wikipedia.org/wiki/Sturgeon's_law

More seriously, anything that produces a lot of work is going to produce a smaller amount of excellent work. Anecdotally, one of the primary indicators of webcomic quality (overall!) is how often it updates.
What, do you plan to make talking about crypto illegal too?
Many of them are recruited in prison.

Just like American prisons where petty criminals learn to become more violent and escalate their crimes when they get out because prison offers nothing else for them.
Forget about inbound marketing and start thinking about inbound recruiting
> But that says more about their own problems and unwillingness than it does about MS.

Not sure I agree. In a lot of cases they earned this reputation by leaving developers SOL when they abandoned software or APIs. Personally I don't really have a problem with MS, but they're unpopular around where I work for this reason.
How You're Born May Affect Your Brain Development
> How are you ever going to assess the quality of this software in terms of security?

If it's very important to you, you can obtain a license that includes source code:

https://www.microsoft.com/en-us/sharedsource/
Pranking a child is no "interaction of equals".
To be precise, Esqueleto isn't a smaller alternative, it's a layer on top of Persistent that gives you a typed DSL for SQL. It's been pretty nice when I used it, most things that I wanted to do in SQL were easily expressed. Exotic SQL functions that weren't available are easily imported in a type-safe way.

acid-state is a smaller, no-SQL alternative [1].

[1] https://hackage.haskell.org/package/acid-state
Embrace Extend Extinguish - many of us have seen that happen over the years. MS will not garner my personal support until the release code under the GPL.
Ah, yes, I definitely remember you and your work, just didn't realize it was the same person.

Hop on to irc again some day or start a thread on the mailing list, and we can brainstorm about the best solution.
> What about paying people the 2x-3x more in the event you decide not to keep the hire?

This could be pretty easily abused, since it doesn't sound hard to get through the door if they are assuming you're qualified technically. So all you have to do is know just enough to fake it a little bit, then coast for as long as you can to get a big payout at the end.
I agree, I think they should simply deprecate Py2 instead dragging it for 7 years + 4 more planned. People would start migrating if they knew that Py2 would be EOL soon and instead of Py2 or Py3 would be whether you want your code to run in the future and make sure all security bugs are fixed.
​Red Hat loves containers in RHEL 7.2
Carnegie Mellon Denies FBI Paid for Tor-Breaking Research
League of Legends gamer girl LabiaOris
While looking around I thought it was cool that Microsoft developers are directly helping popular libraries become compatible with the new .NET Core.

https://github.com/castleproject/Core/issues/90

https://github.com/nunit/nunit/issues/575
Transducers for Python
I usually use a minGW environment when I have to use a Windows box - which gives me GDB, GCC, ld etc. I've found it can be really frustrating to set up properly. I really miss Emacs. This sounds like it could be missing piece. How is its support for C/C++ ?
As a European, this just reinforces my belief that South Park is a documentary, not a comic extrapolation of reality... :/

I mean.. to begin with, what can they accomplish with 6 cars with 2 cops each that they can't with a third of that force?

Not to start with how much more complicated it must be to coordinate 12 cops compared to 4.

From a foreign perspective: Americans always seem to try brute force, as opposed to something balanced.

My theory: We get better police officers in Scandinavia since it's not a low-paid job here, relatively speaking. It's not a way of the local power-hungry losers to get the positions of power they crave. I know few local and young police officers here; it's my honest assessment that none of them went into this line of work because they craved power.
Any capital invested in escape pods would be much better utilized trying to reduce the (already tremendously low) failure rate of aircrafts. I'm not convinced this OP isn't trolling...
Carnegie Mellon Says It Was Subpoenaed-And Not Paid-For Research on Breaking Tor
That's BS. TN doesn't help Canadians with family. Also US CBP can always terminate your TN visa on the border if they "think" you are abusing. H-1B is safer for that reason.
Whenever an article like that appears about a proprietary password manager, I just wonder if there has been any audit on the popular open source ones like KeePass. In fact I've heard that KeePass has some security issues. Is KeePass more secure?
At least now we'll have a decent editor we can continue to run ourselves when that happens. :)
You're right. To be honest, the reason why we don't use it the way it is described in the paper, is entirely out of fear of misconfiguring the Skein context. The NIST reference implementation for Skein doesn't provide a simple way or an example for building the valid configuration for the HMAC construction they recommend, and we always wanted to feel like we had a wall to our back (i.e. being able to check against the NIST implementation or to check against test vectors). They do mention in the paper that doing the keyed mac approach is provably safe, which just felt easier to implement.
Kubernetes from the ground up: the scheduler
Dev here. Yup, pretty much everything is TypeScript.
'...the mentality of US police: "Shoot first, ask questions later."'

That's a ridiculous and unfair generalization, especially for the present day. Police collectively have hundreds of thousands (maybe millions) of encounters with civilians every day, in contrast with how many unjustified officer-involved shootings there are.

This isn't the Jim Crow era South... or Hollywood.
because the low risk, high-audience strategy, when you're launching a new product, is to follow the path of least resistance, rather than being dogmatic. Maximum audience.
Posts without URLs are penalized, so you should repost this as a story with a link and add your text as a first comment to the thread. If you've personally worked on the project, add "Show HN" to the start of the title. Good luck!
Thank you. I was thinking of Persistent as part of a Yesod Web framework and Esqueleto as something independent, which was not correct.
Where exactly do you think the JCB is getting that money? Its a form of QE whether you want to acknowledge it is or not. The rest of the world's economists agree

The BoJ’s most obvious easing option is more asset purchases. Despite the doubts of some market participants, BoJ officials do not think there is any practical obstacle to buying faster than the current pace of Y80tn a year.
It could also expand the scope of purchases to assets such as local government debt, buy longer-term securities, as the US Federal Reserve did under Operation Twist, or — particularly likely given recent market falls — buy more exchange traded funds tracking the Japanese stock market.
“We expect the BoJ will do more of the same — increasing the pace of purchases and buying more ETFs,” says Kiichi Murashima, a Citigroup analyst."

http://www.ft.com/intl/cms/s/0/d0867f3a-6b24-11e5-aca9-d8754...
#PrayForParis: designers send messages of support
There's probably a hidden benefit to this - it forces some tough questions to be asked if you find out your boss is hiring people from other countries and paying them substantially more than everyone else.
Trello down
what about visual basic for dos?
It is very anecdotal, I believe I read it in an article long time ago around the time the Fukushima disaster happened. It is probably an inaccurate number.

The point is, all 3 faults/human errors shouldn't have happened according to statisticians/mathematicians.
Apparently, the terrorists that attacked the concert hall in Paris last week were using... unencrypted text messages to communicate between themselves and/or their "boss".

According to the newspaper Liberation [1], they sent a text message at 9:42pm telling: "we're out we begin".

[1] http://www.liberation.fr/france/2015/11/18/la-piste-du-sms-e...
> they are taking a mammoth pay cut from what they could make 1099 contracting. They do that because the full-time position comes with a commitment to continued employment,

Sounds like it's a convert attempt at cutting down on contracting rates.
Pssst, that's the sarcasm.
> Quick phone call to previous employers can save you tons of money!

That may be really dangerous for the ex-employer. I'd never comment on an ex-employee beyond confirming that he worked on the given dates.

> This is cheaper than having directors and executives try to plan around all sorts of interview stages.

From my experience, in the first 3-6 month you invest a whole lot in the new employee. He or she is very far from 100% productive and you also need to assign someone for mentoring which also takes company resources. Bad hires are really expensive.

In my previous company I was involved a lot in hiring. After CV screening we normally did a 1-2 hour interview (both technical and non-technical) which was (in a positive case) follow by an offer to spend one day working with us. Finally, a permanent contract with 6 month probation time (standard practice in Germany). We had very high success rate. No bad hires on my memory, low fluctuation, very high employee loyality. The company has stellar employee feedback on kununu.com.

The downside was that many applicants were really discouraged by our hiring process. Some people were outraged by the fact that they had to actually write code on the interview. Some thought we the purpose of the probation day was to make the work for free. But that's OK, we've found a lot of great people anyway.

Now I'm working for a huge corporation. I'm normally not involved in interviews for permanent positions but I'm always interviewing when staffing external developers my projects. (We staff developers mainly externally.) It's normally 1-hour interview, again both technical as well as non-technical.

In any case I can't imagine hiring on the basis of a non-technical interview. Bad hires are just way too expensive.
In Python2, I couldn't just print the string I just read from file - such were the joys of Windows console, which has different encoding than the rest of the system (cp85x in console, cp125x in filesystem & gui)...

Compared to that, Python3 was like gift from heaven.
To clarify, I think there was mention that PC-BSD had a tendency to be behind the FreeBSD ports releases because it required the extra wrapping. But I am totally hazy on this so I guess I should just defer.

I did stumble upon Cooltrainer, yes. But I think ultimately I did not find it useful other than just nice reading material.

One of the "problems" is that there a ten ways to configure every setup and no one has the same setup. Sticking with the manpages and official guide were ultimately the most helpful things to me personally.
For what it's worth, .NET was chosen at the peak of the .com boom, when Microsoft was trying to hide the fact that they were late to the party -- and COM was already taken. :)
I interview a lot of developers for ML positions at our company. The first red flag is always a lack of math. Candidates who come in with API-level competence ie. can implement an ML algo using this,that or the other API, without any understanding of some basic math behind it, always fare poorly. Atleast in ML, not having an understanding of math is pretty much like claiming expertise in riding a bicycle by watching 100s of bicycle videos on youtube without ever riding a bicycle yourself. This isn't the case with say, front-end web dev, where nobody really cares whether what's under the hood is php or jquery or elegantly handcrafted elm as long as the webpage looks good and functions as advertised. You can get a lot of mileage by hiring someone who can "make webpages" without knowing what tools they use to make that webpage. Once you get traction etc. you'll probably rewrite all of the cruft :) With ML, if you hire somebody who can "create decision tree in python mllib" without knowing the first thing about what entropy is & how to compute entropy ( a real candidate, unfortunately ), you are simply inflicting a lot of pain on yourself and your customers. Suppose such a person is deciding whether or not to give you a loan, and he decides to construct a decision tree. He'll happily throw in your zip code and credit card number into the mix, not realizing that those two features have super high entropy but the tree will have serious overfitting issues ie. the tree will simply not generalize to unseen data. He won't realize these things because he won't know what entropy is in the first place, since he only thinks of decision trees in terms of some black box that comes out of some ML api.
I think you might have an unrealistic view of the housing situation there. If your complaint about expectations were calibrated to reality on the ground, it would be "people could stop expecting to live in apartments and move into closets".
Why would you send an email with the photo?

At best that's unnecessary and at worst that's shady.

By failing to deny the suspicions about payments and emails, you've only served to confirm them.
The original title has its charm. Not everything should be fully explained, and on HN it's better if readers occasionally have to work a little.
Clearly I didn't get my point across.

If the Paris police had all the information they needed to go after such people, but didn't, that's the technical problem that really needs solved, not an encryption backdoor.
This is interesting, if the plane could have 3 sections each with a parachute then if a bomb went off it might only take out 1 of the sections leaving whoever is in the other sections to survive.
or, you know, bolt cutters.
PHP7 new features are very welcome and look great.

Speed improvement is great as well. Seeing 2-5x speed improvements. :)
TensorFlow is just the latest library that is Py2 only.
App Engine is Py2 only.
The bigger issue is the 2 biggest weakness with Py2 that were not addressed in Py3 (CPython version at least) - GIL & JIT. JIT is addressed more or less by PyPy but it is Py2.7-compatible, not Py3 compatible. Addressing this in the standard CPython implementation can make for a very compelling case for move to Py3. Otherwise, it does not buy you much.
Hyper-virulent, multidrug-resistant pneumoniae found in China
This is also significant reason why people have problem when migrating py2 code to py3. The code is actually buggy and mixes strings with bytes. Once they run it in Py3 all of the bugs show up because Py3 is stricter about it.

For the same reason if you need to write code that should work on Py2 and Py3, it's much easier to write it on Py3 and then add backward compatibility through "from __future__ import ..." and the six module.
Your source is questionable and its the io9 editor's bias showing here. The reality is that we don't know for certain what happened, but considering we have the communication in Berlin and this book, it seems to me my side is closer to the truth than the questionable Soviet apologia io9 is pushing.

The video phone is irelevant and probably a misunderstanding via a translator. Clearly the NSA and berlin listeners would have no idea what was seen/heard outside of the spectrum they were able to tap.

Not too long ago people like you were denying the Nedelin catastrophe. I think there's a lot of coverups the Soviets pulled that are only coming to light in the past couple decades. Russia has a problem with openness and honesty with its space program. They pretty much ran it as a black ops, not telling other countries their launch schedules or programs. This was done as to make coverups easier. That guy died for nothing. The Soviets forced him on that thing and he knew he was a dead man.
I had to double check to make sure this article wasn't some Markov chain troll article.
I don't know, I think "burn out" is a somewhat loaded term. Personally during either secondary and (much later) tertiary education I simply found it hard to maintain interest in a dubiously presented, dry, fixed syllabus that was executed at the speed of the slowest person in the room by teachers with thousand-mile lecture stares. It was always clear to me that learning something by rote was not an effective use of time... the initial comprehension and applications were the only interesting portions. Thus, I turned to self-directed computing. When I finally went to college, I received a scholarship in the first semester, took a year overseas, then never returned. I'd like to study more, but feel the pedagogy is too alien to deliver solid results (in terms of time efficiency) versus competing life opportunities.
Right, but would you not be annoyed if land near you was swallowed up in the name of an expanded national park, and then your ability to use and enjoy the land was severely limited?

The person in question might enjoy the National Park AND the BLM land and think both have their place.. but not want one swallowed by the other.
We're working on one! Head on here if you'd like to contribute: https://github.com/VSCodeVim/Vim
> Yes, I do run onion services; I run an onion services on every box I have. I connect to the PC in my house from anywhere in the world through SSH—I connect to my onion service instead of my house IP. People can see my laptop accessing Tor but don’t know who I am or where I go.

Funny, I do the same thing and it saved me a few times when my router went crazy and stopped port forwarding, but I still had access to it. (And successfully fixed the problem without making a visit to the site...)
It wasn't necessarily that [0] or [1] was confusing in and of themselves but that the information seemed to conflict at times. Having multiple sources can be helpful to establish patterns unless they are saying opposite things. But again, I cannot point to specifics.

I guess my current question is, can .NET Core be built on FreeBSD without a Windows machine? It appeared that this, for one, was not the case. This is a bit of a showstopper.
If I have a budget of $500/mo and I only have 10 hrs available each week to work on my project, has someone with similar constraints be able to reach full time on their business in a year?
Just call it a short-term contract, which it was. Or just say you weren't working for 3 months. If someone has a problem with that, I wouldn't want to work for them in the first place.
Ask HN: How do I get started with open source?
How do I start contributing to open source? How do I find a project and get to the stage where I can add value?
Can you provide some sources?
It didn't address the parent's point, other than by saying you don't care about it. Your point may be valid but it belongs in a separate thread.
Why do you except Netflix here? I'm not familiar with anything unusual about their hiring, and a couple of quick searches didn't turn up anything. Has their hiring been on HN previously?
Hello Programmers without Masters degree, what are your future plans?
If you're a programmer without masters degree in computer science, how are you going to be competitive and keep progressing in future. For example, I have an undergrad degree in computer science, been programming for 7 years. Not sure if I can keep writing code till 60 and still find jobs as well as make good income. I fear I'll be run over by the new generation.
The ideas are math, not the notation. So once you've converted the notation to words, you've just converted the math into a different representation.

It's still math.
Why are you using Skein at all? It doesn't look like you have a problem that is hard for AES-CTR or Salsa/Chacha to solve.
Zooko debunks “news” that ISIS is using Bitcoin, “journalist” retracts statement
Having to thing about encoding all the time, without being forced to, brings in a lot of unwanted accidental complexity.

Did you know, that there is an operating system, where a simple loop that reads lines from file and prints them to the console will end up with errors? (that being Windows and some European code pages, where console is cp85x, filesystem read and write cp125x).
3 or 6 month probation is an absolute standard in Germany. No, you're not paid 3x during this period.
>The ability to create privacy should be a point of pride as not everyone has that luxury. It should be a human right.

I agree; so does the UN in The Universal Declaration of Human Rights:

Article 12.
No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honour and reputation. Everyone has the right to the protection of the law against such interference or attacks.

Article 18.
Everyone has the right to freedom of thought, conscience and religion; this right includes freedom to change his religion or belief, and freedom, either alone or in community with others and in public or private, to manifest his religion or belief in teaching, practice, worship and observance.

http://www.un.org/en/universal-declaration-human-rights/
Unbelievable Animals That Saved People’s Lives
If you received a formal statement from an alien in another universe, it might not even look formal from your perspective. Mathematical theorems are not necessarily independent of universes, because those factors we consider necessary for formalization may not apply in other universes. You don't know if contradictions in this universe must be contradictions elsewhere.
A reminder that one of the large issues with running crypto on the client is that you lose important timing information (due to the JS VM).
Telegram Messaging App Closes Channels Used by ISIS
> Thats why most of us attend public school.

This has to be the single most confusing AmE/BrE difference..