skysight-inc/HackerNews huggingface dataset:
Start by learning the basics. If you don't know how to code, that's probably a good place to start. Learn about web applications and network protocols. Learn the basics of Linux and Windows system administration.

Read some books, e.g. The Web Application Hacker's Handbook [1], The Tangled Web [2], Nmap Network Scanning [3]. Study the OWASP wiki [4]. Familiarize yourself with the tools of the trade: Nmap, Burp Suite, Nessus, IDA Pro, ...

Learn to recognize strange and suspicious behaviors in applications. Learn to recognize implementations that are almost, but not quite, what they should be. To get good at this, you have to be familiar with the underlying technologies, frameworks, and best practices. Having experience in software development or system administration helps a lot.

Most importantly: hack. You really only learn by doing. There are plenty of opportunities to hack legally and ethically and even make some money doing it. Set up WebGoat [5] and go through the lessons. Get on HackerOne [6] and participate in bug bounty programs. Learn how to responsibly disclose issues to vendors.

And finally, get involved in the infosec community. Follow interesting people on Twitter. Attend local meetups. Go to conferences. Ask questions and help others to learn as well.

[1] http://mdsec.net/wahh/
[2] http://lcamtuf.coredump.cx/tangled/
[3] https://nmap.org/book/
[4] https://www.owasp.org/index.php/Main_Page
[5] https://github.com/WebGoat/WebGoat
[6] https://hackerone.com/
Same here! I went through a startup course, only to realise the I want to be in control, not take investment.

That being said, this made me think of whether I can take better "wealth-oriented" decisions within the business, just like focussing better on finding new users instead of always building my SOPs :) It's always a balance, I suppose.
Ultimate Digital Marketing Consulting Proposal – Overview
The page doesn't list any "Why would you want to use this over X" comparison. Why did you pick it over Telegram (or WhatsApp or whatever)? What sets it apart, if anything?

I'm not trying to make that thing look bad here. I'm interested, still haven't found the ~final~ IM solution (using Telegram for now though).
Comparing Codes of Conduct to Copyleft Licenses
Set blend mode to multiply and it's fine (or invert it and use it as a layer mask). Although I'm not sure how useful it is for designers without the ability to tweak what you've drawn.
Which is probably why the FBI didn't ask for access to this key (which, FWIW, is stored in an HSM at Apple, and so would have to be "borrowed" rather than copied): instead, they are asking Apple to provide a firmware which can be used "onto the SUBJECT DEVICE" (capitalization is from original text). The firmware update process requires signing a hash of the firmware with at least (depends on the device) the ECID of the specific device in question, and so if Apple complies with the order as written they actually only empower the FBI against this specific device. Again: they make it sound like some herculean task to build the software, but the only actual complexity here is the signing.
These are not "first principles". First principles are fundamental and universal. All the things the author is calling "first principles" are actually "facts". Instead of "arguing from first principles" the author is "using logic".
'The Useless Web' lead me to http://heeeeeeeey.com/, which lead me to http://hooooooooo.com/ -- a delightful pair of domains. I really enjoy the idea and simple execution.
Yes. Sure. Instead of adding the CNAME you need to add an A record. You can get the IP address with dig:
$ dig a myuser.gitlab.io

Then configure your domain to point to that IP address.

We are currently working on documentation covering that part too.
CEO of Actor Here!

Yes, we have desktop applications: https://actorapp.ghost.io/desktop-apps-updated/

Sorry, we are not advertising it on our landing page, we are a small team and not paying enough attention to marketing yet.
تور کیش قیمت ارزان در هتل شایان ورود ۷ اسفند ۹۴
Can you say what you need for "final" solution?
Silver Flows: Build Lightweight Mobile Prototypes Directly in Sketch
At least you're calling it web client.

Signal seems to consider that Chrome extension a 'Desktop Client'. Which it isn't, and unfortunately it won't help users that aren't using Chrome (a lot of my non-technical friends are on Edge now with Windows 10, the rest is split roughly 50/50 between Firefox and Chrome).

Signal, with decent support for multiple devices (and ideally: Without requiring a phone number!) would be awesome. Until then, Telegram works best for me.
As a North Wales-ian who thinks the (robust) tech scene up here is not given its due, this comment thread is annoying (in a ha ha only serious way).

Maybe it's because we like to make Serious Things like airplanes and space telescopes instead of websites.
The language is simple (a few words, even fewer grammar rules) but obviously communicating with it is _very_ complex.

The problem with Toki Pona is it doesn't serve a purpose and journalists often can't convey exactly what it is because... it's nothing. If you try to explain Toki Pona in the context of natural languages, which are meant to communicate somewhat-precisely, of course it seems complex (because concepts are complex, no matter how much you try to simplify the language).

I try to explain it here: https://news.ycombinator.com/item?id=11157977
The "actual complexity" estimated by a single hobby programmer only at the technical level is not the way this attempt should be evaluated, as I've already pointed. It's the All Writs use to request the change of the product used by hundreds of millions and the precedent of it, that is the main issue here:

In Cook's words:

http://techcrunch.com/2016/02/22/in-employee-email-apple-ceo...

"We feel the best way forward would be for the government to withdraw its demands under the All Writs Act and, as some in Congress have proposed, form a commission or other panel of experts on intelligence, technology and civil liberties to discuss the implications for law enforcement, national security, privacy and personal freedoms."

It is far from "just one small thing." As far as I understand you've already made some unauthorized changes to Apple products, and I can understand how you see it as "easy" but your technical experience, even if it's notable, is not the topic.
I hope when our project start it's next stage we will clean up all such stuff. Clean and easy privacy policy is one of our highest priority tasks.
6 social media trends we’re watching in 2016
New security roles with the Ministry of justice Digital team
Or blog: https://mojdigital.blog.gov.uk/working-at-moj-ds/
We have two new exciting security roles with the MoJ Digital security. These can be found here:

Security engineer: https://www.civilservicejobs.service.gov.uk/csr/index.cgi?SID=am9ibGlzdF92aWV3X3ZhYz0xNDgzOTcwJnBhZ2VhY3Rpb249dmlld3ZhY2J5am9ibGlzdCZvd25lcnR5cGU9ZmFpciZvd25lcj01MDcwMDAwJnBhZ2VjbGFzcz1Kb2JzJmNzb3VyY2U9Y3Nmc2VhcmNoJnVzZXJzZWFyY2hjb250ZXh0PTE1NTAyNzMzJnNlYXJjaF9zbGljZV9jdXJyZW50PTEmcmVxc2lnPTE0NTYyMjMyODMtOTNmYzVkZmJmMGYyYTVjODc5OThkZGQxMTY0YWFlMDZmZDBhN2VkMw==

Senior security engineer:
https://www.civilservicejobs.service.gov.uk/csr/index.cgi?SID=c2VhcmNoX3NsaWNlX2N1cnJlbnQ9MSZ1c2Vyc2VhcmNoY29udGV4dD0xNTUwMjczMyZvd25lcnR5cGU9ZmFpciZwYWdlYWN0aW9uPXZpZXd2YWNieWpvYmxpc3Qmam9ibGlzdF92aWV3X3ZhYz0xNDgzOTY3JmNzb3VyY2U9Y3Nmc2VhcmNoJnBhZ2VjbGFzcz1Kb2JzJm93bmVyPTUwNzAwMDAmcmVxc2lnPTE0NTYyMjMyODMtOTNmYzVkZmJmMGYyYTVjODc5OThkZGQxMTY0YWFlMDZmZDBhN2VkMw==

Please check out our blog here for more information on working with us and the work we do.

https://mojdigital.blog.gov.uk/working-at-moj-ds/
Ah, you're missing out, I love OTA. Very fast, and you don't need to move the ESP at all (if it's on the same network, anyway :P). Plus, you can keep the serial line open for debugging while flashing.
Founders of Telegram was never successful in OSS, they just don't have interest in this. This was clearly marketing stuff. I tried to make something really opensourced, but no one was interested in the Telegram LLC.
Very nice, I'm going to look at the files right now, thanks for making the available!
"Apple also provided a mechanism by which one can have weak passwords and still have strong security via a max-attempt mechanism. It is a circumvention of security features, and "backdoors" are about security, not encryption (which is merely a subset of security)."

I don't deny any of that, but there's still a bright-line distinction between "circumventing security features" for a single, badly protected phone, given a warrant, and weakening security across-the-board for everyone. This is a case of the former, not the latter.

"I also think the legal fight is not circumscribed around narrow parameters with predictably narrow legal outcomes."

The legal fight is, factually, centered on the question I stated. It doesn't involve any of the other technical stuff that's being tossed around this debate. That was my point. But like I said: I think it's a legitimate question, so I'm not sure who you're arguing with right now?
PolymerJs – Stable Release v1.3.0 tagged
Why? It's a crystal clear agenda. The FBI has called for an end to effective crypto in the hands of US citizens.
Cpp-Netlib: The C++ Network Library Project
[GEEK TALK] Advantages and Disadvantages of Thin Provisioning
APPLE RESTRICTIONS AND BUGGY SOFT JUST MAKES ME CRAZY SOMETIMES???????
NETWORK SHARING SUX SOMETIMES
WIRELESS STOPPED WORKING
TESTFLIGHT NOT SHOWING MY APPS
NOTES NOT SYNC AT THE TIME ??! THEFUCK

Yes, THEY ARE BETTER THAN ANDROID AND ETC.

FUCK OFF, APPLE@!
Paul was never billinaire. He got ~300M from selling vk.com. Spent ~100M in first year. Spending on telegram's servers only is ~1M/month and telegram is 48+ months old. So he already spent almost half of his money.
On the `if`
Invaluable Tips for Creating Remarkable Web Applications
Torrent Search
Hi,

You can't buy Insulin without prescription like sleeping tablets. Its also illegal if any pharmacist sell this products.
Thats like saying a Landlord is producing more economic value than the low wage worker who's wages go to pay the rent. One is working, one is rent seeking.
Or you can wait for Actor - we are working on porting Signal's crypto to our platform and we are already have much better UX, Servers and full featured slack-like (but easier) desktop/web clients.
How would you do the check? One must ensure that the ID can't be spoofed on the way to the code. This would only be the case with very special hardware. AFAIK this isn't the case here.
> I'm not trying to pick on you

It's fine. The catalyst for good discussion isn't typically everyone agreeing and getting along.

Dairy products assist intake of the full spectrum of nutrients. It's not just about a "sip of milk" or what I like on my cereal.

A million people caring a "minimal amount" is better than a million people not caring at all.

Meat - an industry at the very top of the environmental impact list. I call for the abolishment of live export and improvements to other factors of the industry such as slaughterhouse standards. I eat meat infrequently and place importance on where it comes from.

To suggest that it's the "height of irrationality" that I eat any meat at all, is to claim that by buying meat I somehow support the entire industry with all its flaws and variables. But I can eat meat and actively vote and push against the standards I disagree with within the industry.

Everything we do has some issue, environmental or otherwise up the chain. The mining of precious metals, or the massive problem of e-waste doesn't mean I will avoid buying gadgets, but I may buy them less frequently and choose the gadgets built to last. If millions do that, industry change can happen.
Practical Attacks against Deep Learning Systems using Adversarial Examples
There is no arbitrary skill ceiling, but I think you underestimate how much long term immersion matters. I've lived in the UK fo 16 years. I started learning English at 7 and in school from I was 10, and used it daily from about 14 (I'm 41 this year).

Yet living in the UK I still regularly come across idioms and words that are second nature to people who grew up here that I haven't heard before.

E.g. I have a six year old son in primary school here, and through that now come into contact with expressions that people that grew up here experienced in primary school, and that most of them may not have used since then but are aware of, but that are totally new to me.

And I think this matters much more when translating into a target language than in the source language. While you may fail to recognise some idioms, it is easier to recognise something that sounds odd or words you don't know, than to recognise that you are missing vocabulary you didn't think was necessary (e.g. the word "mufti" was entirely new to me when my son started school; prior having him in school, if I was asked to translate anything about coming in out of school uniform, I'd have never known I was "missing" a word, and would have used a longer expression instead).
Yes - I'd guess entrepreneurs have more social impact than salaried workers, because they do more innovative work. We'll write more about this in the future.

Note that the paper you cite is only about technological advances though, and only a fraction of what entrepreneurs do contributes to technological advances - a bunch of its just implementing stuff that's already best practice.
My wish is for Signal to provide what Telegram provides for messaging (multi-platform, sync, speed of message delivery, etc.). Just a web client alone is not going to be a convenient replacement (if it implies that the phone should be around or that activation has to be done every time the browser is restarted or cookies are cleared).
In an ideal world:

- open source, client and server

- federation (both for the ability to split the net/have a private/enterprise solution and for redundancy)

- multi device support (tablet, phone, desktop etc)

- clients for all major platforms (that is, not just mobile platforms)

- strong cryptography

- no phone number required (can be installed on your desktop/tablet only, doesn't _need_ a phone number but might offer to search for contacts that gave one instead)

Note that Telegram fails quite some of those, but as far as I'm aware it's the closest I can get at this point.
Arguably anyone following the project will be familiar with their version numbering policy. For those that are new to the project (including myself) a list of benefits in the title provides little information anyway as I have no background knowledge of the project before this release. Either way the best option is to read the announcement to find out more.
The features page looks well presented but has anyone actually used Godot? What are their experiences with it compared to writing your own games from scratch?
Quick aside - all the figures in the paper are per hour earnings figures.
What every compiler writer should know about programmers [pdf]
Optimal characters per line
The news is not that US SIGINT commit acts of spying against non-hostile nations, but that US SIGINT is no different from all those other nations which US media villainize when they are caught spying.

The day that FOX news no longer talks about russia and china when their spies are caught, those will be the day that everyone else will start ignore news about the NSA.
Cycling is best for health. You don't need to waste your money on Jim. Everyday if you use cycle for your transport then it would keep your haelth at a better stage. You can avaoid lots of diseases as well.
I don't think that's true any more - Microsoft have made lots of inroads recently that are starting to attract mindshare (Visual Studio Community is awesome and free; .net is open source etc). Even if it IS true, you should be free to call people out on it. HN needs to stay as a place where people can discuss things civilly. Disclosure: I work at a .NET shop, but am personally more interested in Python, Elixir etc
Really? The king of traffic can't monetize financial traffic? o.O
I got 1/3 through this article and the silliness made me stop. There was absolutely nothing controversial about imaginary and complex numbers in the Victorian era. The unprovability of Euclid's parallel postulate had a tremendous impact on mathematics and logic; Euclid was no longer regarded as a perfect model. The author's understanding of the etymology of algebra is absurd. The 'restoration and reduction' it refers to is setting a broken bone--moving back and forth from one side of the equation to the other like a doctor setting a bone--and not shrinking in size as the author seems to think. With so many untrue premises I have no interest in the author's conclusion.
> If you are a native speaker, rarely. Otherwise, all the freaking times (for the first ten years or so).

Not a native speaker. Not my experience at all. In fact, from my experience watching people learn English around me (and teaching some of them), reusing concepts like this actually helps them get the meaning because they can relate to words they know.

Maybe it's because such metaphors are pervasive in my native language too?

> E.g., consider the difference between a "cool guy" and a "cool attitude". If you think about it, they describe almost totally opposite situations.

I don't see how they're opposite. Hot-headed people (see how the metaphor is still at play?) aren't considered cool at all.

> Or consider "No, it's cool." After all, "it's hot" means the temperature is high.

What do you mean? "It's cool" = "the situation isn't hot". You don't have to worry about being burnt (again, same metaphor) by the situation.
To me the issue is the lack of context and pressure. Physical interfaces tapped into deep human perception. Sub millimeter movements, skin sensitivity, change of texture, response curve. None of that is taken in account in the desktop design world. At least before, software was designed for high throughput and underpowered machines (I often find AS400 UX as ugly as efficient, and in reality nobody cares about software being pretty). Now you get Material Design. 80% eye candy. Whenever I have to use KitKat I feel so relieved because it has centered, static, squary input menus. I don't have to avoid overlapping free floating (+).
Every new market causes a regression, until it learns lessons from the past. The learning phase is still going indeed.
...which is a complaint with the law, which is fine: you can complain about that law all you want. The problem I have is with stuff like their answer to the question "Could Apple build this operating system just once, for this iPhone, and never use it again?", which essentially is outright lying: the "master key" in question is their signing key, not some piece of trivial software they develop (and then sign) in order to automate this process for the FBI. Apple already has the only master key of relevance: that key already exists; the idea that the master key is something that they need to "build" and then would have to "protect" is them trying to divert attention from what is actually important.

Even if you think I'm wrong (to which I highly recommend you ask some other people, preferably strong developers, as the idea that this is difficult for Apple to build isn't me "estimating" here, it is the kind of idea that should be discarded at the face of it as it is so absurd... this is something they could assign an intern to and it would still be done in a few hours), then we are just talking about some different time period for someone to build the software here: whatever it is, it is fundamentally insignificant in comparison to Apple spending a few minutes to use their key and sign the firmware. The world isn't somehow different once that software exists, even if you think it is hard to build: what is fundamentally different is only that people realize the government might be able to force Apple to use their key.
Fundbetter: funding for narrative game projects and interactive fiction
xmpp is the solution.

use your own server, or use one of the many public ones. has clients for all major platforms, crypto is the best around (otr, gpg), does not require phone numbers or sim cards, is open and a public standard.
They still have to develop the different version of the software even if it's just changing some specific statements and recompiling and then signing. Not to mention that it also has to be tested, installed, access controlled etc. So it actually has to be built, tested and protected. What do they "outright lie" can you please quote?

> The world isn't somehow different once that software exists

It is, if it's made by Apple now, since it makes the legal precedent in how All Writs is accepted by Apple to be used. It even makes it a precedent for other companies too. That's why they question it and rightly so.

That's why if FBI or you would have managed to produce some cracking tool now, without Apple's help, it wouldn't matter. It wouldn't affect the development of even more secure phones by Apple.

Technically-hard-or-not-hard, as claimed by an-intern-or-the-Cydia-author is, once again, irrelevant.

> what is fundamentally different is only that people realize the government might be able to force Apple to use their key.

Government already tried to force them and Cook responded, literally: "We feel the best way forward would be for the government to withdraw its demands under the All Writs Act" so people hopefully already realize what is at stake and at least we discuss it.
"I think its important to reason from first principles rather than by analogy." -- Elon Musk

Maybe this guy is the next Elon Musk?

Jokes aside, isn't reasoning from first principles about going deeper and deeper to understand the root causes of problems, before working back from them? This seems foundational to problem-solving, but not necessarily an element of leadership.
Show HN: We wrote a career review of being a web designer
The article says they have no problems monetizing it, it's just that there's not enough interest.
Good stuff. I'm looking at doing something similar. Is your current gig your own product? Is it profitable or investor funded?
It fits into our recommender that customises your suggested career based on information about you: https://80000hours.org/career-guide/career-recommender/

Let us know if this is, or would have, been useful to you, and how it could be better.

We'll be discussing actively in the comments (here or on the page) for the next few hours.
Cortex-A32: ARM’s smallest, lowest power ARMv8-A processor
Does the OpenSSL library allow/plan for an Rust reimplementation (possibly side-by-side for a while) of the C bits?
Seems that would be best practice - assuming the goal is make everything safe Rust.
Dubai and Abu Dhabi the Most Searched for Properties
We have a miracle. It's called nature, and otherwise uber-smart idiots routinely underestimate its miraculous powers.
I guess they have several more years to introduce something. About the business model and monetization, the Telegram FAQ [1] has long stated this:

>Q: How are you going to make money out of this?
> We believe in fast and secure messaging that is also 100% free.

> Pavel Durov, who shares our vision, supplied Telegram with a generous donation through his Digital Fortress fund, so we have quite enough money for the time being. If Telegram runs out, we'll invite our users to donate and add non-essential paid options to break even. But making profits will never be a goal for Telegram.

[1]: https://telegram.org/faq#q-how-are-you-going-to-make-money-o...
Increase or maintain good funding for the sciences. A lot of people in the sciences aren't greedy, they just want to earn a decent wage doing what they love. Problem is that the grant situation now is so bad in scientific research, people are leaving in droves.

I was doing research on environmental effects on organisms and their offspring with huge implications in development. Now I am using my talents to get more clicks for a website.