skysight-inc/HackerNews huggingface dataset:
> You acknowledge that if you encrypt an item after you create and add content to it, there may be a period of time in which your item’s body content is not encrypted while being stored in our database

So.... the data goes across the wire in clear-text, and is encrypted later? Ummm, sorry, no.

First off, I'm not interested in anything that stores data that I might want to encrypt "in the cloud". It goes on my own server. Full. Stop. And sending data across the wire in the clear and encrypting later? ? I mean.... ???
assumed it was going to have something to do with computational complexity

is there similar software that one can pass source code to and get a detailed look at the overall and individual computational complexity?
Steven -- I applaud your team's approach. From my two and a half years in government I have rarely run into projects like you describe. We have lots of legacy systems, typically built without automated tests. Often a vendor is hired to build a "complete" piece of software, then given a meager budget to "maintain" it.
I wonder if this is related to quality of life. A country like the Netherlands with stronger social services/safety nets and more 'liveable' cities must have much better quality of life for the bottom quintile of society compared to the states, and it's that quintile that is most likely to get addicted/cause other social problems.

It seems like a common thread through people getting addicted to drugs is trying to find an escape for a crappy/desperate life, so logically if it's less crappy people won't need an escape as much, right?
is it though?

From the link:

The Asia America Gateway, which connects Vietnam and the US, will be serviced from March 4 to 6, the source told Thanh Nien.

That says, March 4 -> 6. Also only specifies Vietnam.

Edit: Spelling correction
I am not affiliated with 1password, but I am a security engineer.

You are asking 1password to fix a non-issue. Sniffing loopback requires root privileges on the machine. If someone can sniff loopback, they can just as easily reach directly into the 1password processes's memory and extract the password from there, or replace 1password with a malicious extension that sends all your passwords to the attacker, or just log your keypresses. These other strategies may actually be easier than sniffing loopback. There is no reasonable defense against an attacker with root access, and encrypting communications over loopback would be a complete waste of effort and CPU time.

Honestly I feel bad for 1password that this article insinuating a security issue in their product is trending on HN when there is in fact no issue (as far as I can see, from the information presented).
We take bitcoin for payout.
Streaming to stdout is more Unix-y, allowing you to pipe the response into further processes. For example:

curl http://api.example.com/json | jq '.["someKey"]' # etc., etc.
If you're a watch geek it's much easier to get Casio, Seiko (especially Grand Seiko), and Citizen watch models in Japan. Grand Seiko watches are gorgeous but not as well known outside of Japan.

If you can hit up a knife shop try to get a nice pair of Japanese scissors.
How Much Do Mobile Developers Make per App?
Therefore the government understands

NNo, some people who work in the government understand that. Others have conflicting interests of cognitive biases or are stupid or have other reasons for disagreeing. 'The government' is simply not a monolithic entity and outside of certain narrow legal contexts pretending that it is leads to fallacious conclusions.
"we probably need to capture some of the value of this technology via a for-profit company"

Why?
Yes. Like ntp.
Dean just changed his user photo. It no longer matches.
I don't think you can:

"[Wget's] ability to recover from a prematurely broken transfer and continue downloading has no counterpart in curl."
You do not need to factor large primes (or more likely, reverse point multiplication on elliptic curves), if you can guess a 4-digit pin code instead.
this is fixed! i just used that option a moment ago

gw devs / nice turnover / etc etc
Have they thought it's for syncing the time with NTP? You know, being a watch and all.
After vi vs. emacs, this is truly the great debate of our generation.
Mozilla is hardly unique there. Webkit and Chromium are also open source and Google is pro-Web as well.

The only real advantage Mozilla had was the technical advantage of having one of the few popular and mature browser engines available of which only their programmers knew well enough to work on. Since Webkit though, that advantage has disappeared.

You could say their image as a non-profit out to do good is a advantage. Maybe that is something they should work on.
From the paper:

>WebSocket. WebSocket servers are typically built over a few popular opensource
frameworks, such as CocoaHTTPServer [3] and QtWebKit [14]. All of
them provide a receiver method for getting messages from browser extensions,
which is used by Xavus to fingerprint this channel, and a response method for
replying to the extensions. The invocations of these two methods are identified
as the claim and the use of the channel, respectively. Between them, the server
is supposed to access the HTTP header Origin that includes extension IDs
attached by the browser and check the signature of the browser through the
API SecCodeCheckValidity. If these operations are not found, the app is
considered vulnerable to the threat from a malicious extension or app. On the
other hand, the attack from a malicious server against an extension cannot be
detected through any existing APIs.

This sounds to me like the app validates the extension, but the extension can't validate the app. In that case, using a shared key helps.
ECDSA Key Extraction from Mobile Devices via Nonintrusive Physical Side Channels
Fair enough. Perhaps I just need to adjust my expectations.

Or maybe there's a good reason for having two tools :)
Uhh...ever heard of Cubase?

In a professional setting (recording, mixing, mastering label-released albums), I've seen PT used far less than Cubase.

I see it used less than Logic, even.
Thanks - I am also interested in more traditional stuff, so I would love to find this place, but I will stay in Kyoto only so it is not very probable that I can get there.
(I "restricted" my question gadgets not because I don't care about the rest, but because it seemed more "on topic" for HN).
It does, it's part of Oracle Linux. Oracle obviously therefore believe that a CDDL kernel module is fine.
They monopolized the people that knew the math, written records that described the math, and the hardware that implemented the math. The actual crypto itself cannot be controlled, and in some cases was found by other through cryptanalysis or independently re-discovered.

That distinction is important - physical things like people or papers or computers can be controlled and hidden. It's much harder to keep knowledge itself bottled up, because there is always a risk that someone clever will discover it on their own.
I wrote a Koa middleware that I've found handy for this:

https://www.npmjs.com/package/koa-signed-url

It introduces the idea of a "signed URL", which can be verified or rejected based on checking a signature query parameter. You can send such a signed URL via email, text message, etc.
I'd be more than happy to pay for this if it was available in the Bay Area! Instead I pay, what, 1/3 the cost for 1/40 the bandwidth?
Show HN: Flexbox Defense – learn CSS flexbox by playing a tower defense game
Tiny 3-D Printed Building Shares Its Energy with an (Also 3-D Printed) SUV
Reminds me of http://dealbreaker.com/2013/07/electricity-market-rules-were...

>FERC built a terrible box, and the box had some buttons that were labeled “push here for money,” and JPMorgan pushed them and got money. You can understand the category mistake very easily:

>FERC thought the box was for generating electricity at market prices but with a robust backup system to ensure reliable supply, and

>JPMorgan thought the box was for dispensing money.

>It’s a perfectly understandable mistake to make if you have spent your career building and operating boxes that dispense money, as JPMorgan global commodities head Blythe Masters has. What else could the box be for?
How does that work in practice, anyways? I mean, cables these days don't just carry a bunch of fibre wires, but also high-voltage cabling to provide power to the repeaters. Isn't it risky / detectable to cut open such a cable?

Also, how is the spliced data actually exfiltrated back to land? The obvious candidate is either a leased dark fiber (which requires intimate knowledge of how the individual fibres are arranged) and laying a second cable (with the obvious disadvantage that cable-laying ships are rare and can easily be spotted).
Show HN: Collapse Comments on Hacker News
Το στοίχημα για τον τελικό κυπέλλου
Also putting this out there—for nicer REST API interaction on the CLI, and a little more user-friendliness, you might also want to add HTTPie[1] to your toolbelt.

It's not going to replace curl or wget usage, but it is a nicer interface in certain circumstances.

[1] https://github.com/jkbrzt/httpie
Ask HN: CMS for Saas Product
Dear, I'm looking for simple solution to add a landing page, pages with documentation and pricing page. I checked, Wordpress, google, instapage, Django CMS. I don't want to code, just enter the content into some nice design... what should I use?
Like a DFD?

Data flow diagrams were proposed by Larry Constantine, the original developer of structured design, based on Martin and Estrin's "Data Flow Graph" model of computation. Starting in the 1970s, data flow diagrams (DFD) became a popular way to visualize the major steps and data involved in software system processes. DFDs were usually used to show data flows in a computer system, although they could in theory be applied to business process modeling. DFD were useful to document the major data flows or to explore a new high-level design in terms of data flow. (copy/pasted from wikipedia)
I think that does a disservice to the much greater number of people who are not at Jane Street but contributing useful code and libraries. You also seem to imply that Jane Street is the one 'bringing multicore to OCaml' but that's not the case.

Jane Street certainly contributes a huge amount to the ecosystem, both in terms of code and other support, but they're not the only people pouring effort into it.
you mean like this one: http://www.hnjobs.io/#/11213227
I read about this 'visualization' ability that people are said to have during my senior year of high school. It's sort of like dreaming, in that you can 'see' pictures in a 'mind's eye'. I remembered having two dreams from growing up, so I kind of knew what this 'visualization' was supposed to be like. It's supposed to be a natural human ability, but for me it was not easy (some people are auditory, others kinesthetic, etc etc, but all the usual techniques didn't seem to help.)

Figuring out how to relax my body was 8/10ths of the journey.
While I agree all of this is subjective, I would argue that something being composed of "deliberate decisions to enforce a certain set of design contracts" doesn't mean those decisions nor the design contracts are good. Nor does it automagically make a good implementation.

In addition, making bad design decisions that you think are good is actually one of the best types of evidence for incompetence (though not neglect, in this case).

I don't personally have enough data to have a strong opinion on where Go channels falls here, but I don't think any of your arguments here have any bearing on the idea that Go's channel implementation is bad.
This is our initial implementation and we know it's limited. Enable encryption on an item FIRST, before you add content. From then on, any data you add to that item will be encrypted by your browser before transfer. The cloud server is not encrypting the data.
Re-Submitted because I uploaded it to the chrome web store, had some reports of people not being able to enable it or install it because of some recent security changes.

Just a tiny little extension that lets you collapse comments on HN. Any feedback would be greatly appreciated.

Here's the github link if you're interested https://github.com/Igglyboo/hn_collapse
I wondered about the earthquake as well. Context/maps:

http://www.bloomberg.com/news/articles/2016-03-02/magnitude-...
I believe that I own this watch and it didn't ask me to sideload an APK. Rather, the watch displayed a QR code that pointed me to an app the Google Play store. There may be something shady going on but the evidence here is not clear cut.
Show HN: Starter zshrc: Sensible defaults for switching from bash to zsh
The case we are talking about however, I believe, is where NYSE operates an apparently public market with delayed quotes for some players. Tptacek claims that my orders cannot even make it into the supposedly public market because someone will scoop up my order on the way, before it even reaches the delayed quote market and therefore, the market is not special because I cannot access it (which is disputable).
So we have an app that tracks on an hourly basis the following: people who hire against the law, people who work against the law, people who don't withhold income tax on wages, and people who don't report income to the IRS. All in a beautifully supeanable electronic format.
"I do not believe with the Rochefoucaults and the Montaignes that fourteen out of fifteen men are rogues. I believe a great abatement from that proportion may be made in favor of general honesty. But I have always found that rogues would be uppermost, and I do not know that the proportion is too strong for the higher orders and for those who, rising above the swinish multitude, always contrive to nestle themselves into the places of power and profit. These rogues set out with stealing the people's good opinion, and then steal from them the right of withdrawing it, by contriving laws and associations against the power of the people themselves."

--Thomas Jefferson to Mann Page, 1795. ME 9:306
English has "more haste, less speed" which I think carries the same message.
> Also, how is the spliced data actually exfiltrated back to land?

In the operations against the Soviets that've been made public, they physically retrieved the tap.
Comcast is investing in fiber https://business.comcast.com/docs/default-source/press-relea...
curl -C - -O filename url

-C continues from an offset; "-C -" uses the length of the output file as the offset.
How to Talk to Your Kids About Trump
Guess the 12 yo who was shot by a cop in Cleveland wasn't minding his won business.
Is ADHD an Advantage for Nomadic Tribesmen?
Having worked in sales a while back I can attest to how important getting the right sales culture is, and also how incredibly challenging this can be. Companies need to align the reps' goals with that of the company, and too often when high quotas are put in place the quality of a sale goes out the window and it's sell the software to whoever can buy it (regardless if they can afford it or use it properly) and let customer support / retention worry about that. It's the, "just hit your quota" attitude which can be very harmful to a company.

Best excerpt from the article:

>The machine, however, wasn’t nearly as sturdy as this confident talk made it seem. Behind the scenes, operations staff scrambled to help customers enroll in health care, an error-prone and frustratingly low-tech process that involved manually entering data into spreadsheets and sending it to health insurance carriers, according to former employees. Account managers felt like they were constantly putting out fires, or resetting the expectations of customers who had been given a hard sell.

>Zenefits’ compensation structure created big rewards for sales reps on the enterprise team, who handled the largest customers, despite the reality that, as Zenefits later acknowledged, its software and processes worked better for smaller companies.
They are designed with this in mind, and certainly hold up better than oil pipelines, which also have to be engineered to withstand earthquakes.

I expect it is unlikely for an earthquake itself to sever a cable, but knocking out power / knocking over a building that then destroys the cables landing site is possible, if rare.
LoLs! I stand corrected! :)
I am reminded of an ex girlfriend that I had that once asked me why I liked a particular type of food. She demanded to have a reason for what I liked about it. (Let's say it was steak for example). I didn't have an answer for her and we ended up getting into a fight. I said I just liked it and I wasn't interested in defining what I liked about it and being quizzed on it. It just made me feel good to have this particular type of food.

Likewise I never question why I like big heavy machinery or constructions sites. I just do. Something about it is interesting to me.
Undersea, on land, and outerspace, oh yeah.

Rumors abound of anti satellite/satellites (DS-P1-M and IS Satellites) and I think Russia, china, and the US have destroyed satellites with rockets. https://en.wikipedia.org/wiki/Anti-satellite_weapon

We have tinsel cluster bombs for power plants on land (BLU-114/b) https://fas.org/man/dod-101/sys/dumb/blu-114.htm

And undersea tapping is being done:
http://siliconangle.com/blog/2013/07/19/how-the-nsa-taps-und...
Not all the cables on that map actually exist yet, like the Hawaiki cable.
or a fleet of submarines that run around tapping them...?
As long as it flows it's relatively safe. Just step away if you spill some. Bad would be if you would be wearing shoes and accidentally spilled some into the shoe, where it can't flow off.
> women's' suffrage happened when it did so they could vote for prohibition

Woman's suffrage happened after the prohibition. The prohibition was the 18th amendment (taking effect on January 16, 1920), and woman's suffrage was the 19th amendment (ratified on August 18, 1920).
you can let it sit there too LN is mostly safe, dry ice can be a much bigger pain since there is solid to solid contact but even it isn't that bad.

You have quite a large thermal mass a bit of LN won't do that much damage to you, you can dip your hand into LN and keep it there for quite a while :)
You should all check out wpull!
OK, but their race is still irrelevant.
His business, his rules. He is right on this one.
Is it really a damn shame? I can only care about so many things. When it comes to local government I care about crime. I care about taxes. I care about overcrowding on the subway. I care about public schools.

It's hard to care about the policy details of broadband providers. My internet from Time Warner is pretty cheap, it almost never breaks, and it's plenty fast enough for Netflix to work. Why should I care much beyond that?
In general, you're probably right. But this is Comcast. I can't seem to imagine getting worked up about them being excluded from something like this after all they've done to fuck consumers.
I wish.

Unfortunately, git with submodules is a far cry from a single, coherent repository. Tooling is practically out the window (integration with any IDE, for example), snapshotting becomes a nightmare, coordinating your different versions becomes a nightmare.

Git sumbodules are good[1] for referencing external dependencies with their own timeline who don't depend nor interact with your project or code. They are not a great fit when your submodules are intimately related to the code around them.

[1] arguable---I personally despise them, but let's assume they're good

(disclaimer: I wrote the article)
Thanks.

We have a lot of that issue of "hire contractors to build, then use FTEs to maintain". I try to push back where I can because contractors that know up-front that they won't have to support the system are often not inclined to either follow standards (which are less exciting, I know, but make maintenance more predictable) and/or not be concerned about avoiding excessive technical debt up front.
I would pay to be able to time travel and replay my rest and relaxation!
This reminds me of an article I read where somebody recommended abolishing the $100 note, as it was too associated with crime, and it would inconvenience criminals to have to carry bigger bundles of $20s. I wonder if/how often criminal organizations use drugs as a substitute for money for being easier to transport, verify, etc. I wonder how much that would increase if they did abolish the $100.
I'm sure you know this, but it's not missing that feature. It's just that the syntax is different.
thanks for the clarification =)
I'll take option C) "Both, where appropriate". I'm working on a little side project that uses front end Mustache templating for allowing admins to build out some structured components, I can then reuse those same Mustache templates to render the components serverside for non-admin users consuming the service.
Discuss: Kickstarter to fund unmanned submersibles to follow a cable end-to-end, looking for taps
They don't get a free ride. Here on HN some of us call it out all the time. We just get downvoted to oblivion by all the google cube dwellers.
It's still an opportunity class. Do your best to get as good a program as you can, and learn the things that are best learned in school. (Nobody will ever learn Accounting on their own, so it's best to learn in school. You may be able to pick up Marketing Strategy and Advanced stats outside of school if you're so inclined)

Best of luck with whatever path you choose. Once you decide, go "All in" with it!
more recently didn't he lobbied for drone laws two years ago after he saw one flying near his property?
Would make sense to just tap into the repeaters. That is the common sense approach from someone (me) that knows zip about the setup but that seems like the way it would be done.
Let me put it this way. In the last say five years, I can't think of a single article I've come across where someone describes DTrace making their life better (except one I wrote in 2011: http://blog.reverberate.org/2011/05/using-dtrace-on-os-x-to-...), or a single time anyone I know or work with has even mentioned DTrace.

This is a technology that received an innovation award from the Wall Street Journal in 2006. Whatever impact DTrace is having today, it should have been much larger.
At the same time, Comcast is also run by adults who are perfectly capable of taking responsibility for their actions. They knew exactly what they were doing, so it's perfectly valid to also be angry at them for clearly abusing a loophole.
This line of thinking could be used to justify all sorts of stereotypes. Not saying that's good or bad,but one could talk about the median woman, black, white, asian...etc.
Seems to support the idea[1] that ADHD kids in simpler societies wouldn't have any problem at all.

[1] https://news.ycombinator.com/item?id=10988042
No you're right; I didn't fully comprehend your post. I thought you were disagreeing with the parent post but you were in fact qualifying it. I agree with everything you said.
Paswordless login actually fits even nicer in mobile.
You can make the email link open as a deep link in the app and continue right where you left. Context switching in the app is minimal and in mobile apps sessions are usually more persistent anyway

See http://www.drzon.net/passwordless-login-in-mobile-apps/ for what I mean
What about Squarespace? I've heard good things from friends who've used it.
very cool. been looking for something like this for a long time, just didn't have time to hack something together. Thanks for a fantastic resource.
he probably has someone unplug his router.
Yes :-)

I found that in Lynx ang Gopher+ source code.

The project is still active.
There's a decent market for selling consulting consulting services on top of open source technology. Being the expert on applying an open source technology to solve specific problems comes with a decent rate card.