skysight-inc/HackerNews huggingface dataset:
In the "Win" column for digitally-secured systems, the electronic immobilizer basically eliminated auto theft. The cars that are still stolen in significant numbers are the last model-years to not have immobilizers.

Car door locks are immaterial anyway, since any thief is just going to break a window. The immobilizer matters, certainly, but even an immobilizer vulnerable to sophisticated attackers is doing two orders of magnitude better than purely mechanical security.

[1] http://www.nytimes.com/2014/08/12/upshot/heres-why-stealing-...
This is exactly the point I'm making. Their problem was that they spoke aloud in a manner that does not properly reflect the sensibilities of someone they weren't even addressing.

EDIT: Herein lies the rub, and some might say the whole purpose behind CoC's. As a cop might say, you might beat the charge, but you won't beat the ride. Even if you've been tried by event staff for wrongspeak and found innocent, your whole experience is ruined.
That's the old version. Intel added two phases.
Okay, but how long would you think it sensible to look for, test and assess a package for being 'well-maintained' before you'd consider it a better use of your time to average a list of numbers?

If you had to, say, add a list of numbers together, without averaging them, would your first thought be to go searching for a package, given that you know some languages have a 'sum' function? Some languages have an 'add' function (separate from the operator) - would you go looking for a package to supply an add function if you (say) needed to pass it to reduce?
I don't encrypt because I have something to hide. I encrypt because I don't want anyone to tell me I can't hide anything.
It bums me out a little that there's not more HN hubbub over this. Andy Grove was a great businessman, but Bob Ebeling was a great engineer. Maybe just not in the ways that HN loves to celebrate.
To put things into perspective, I once did some back of the envelope maths which suggested that the governments that underwrote the development costs of Concorde spent something in the region of £2000 per flight ticket sold in today's money.

It's something of an understatement to say the business case for SSTs remains unproven.
I'm not sure anybody has much incentive to report this number accurately. Whether it's ISIS, European security officials, or the AP itself, it's in the best interest of all of them to report the highest estimate they can find.
The ones that appreciate and understand the underlying banter are the ones I like to filter for using this tactic.
> Is that going to help her get a job in Silicon Valley while competing with grads from top schools for the same jobs?

Yes, but not with a well-known company as their first gig.
Thats why somebody should fork Node and start building a batteries included standard library.
Virtually 100% of the target age group uses GroupMe
Ah, cool, that makes more sense (I couldn't think of a reason for that to possibly happen on the first use, since at that point the pinned TLS key wouldn't yet have been invalidated).
Doubtful he has that kind of time but he has staff who will. And if he has any integrity, he will at least take people's concerns into consideration.
>There’s a lot we can glean from data — a student’s learning progress, their habits and their strengths across a curriculum. But there’s so much more that’s hidden from view.

What's hidden from the view? Can you give examples?
Alright, take a simple function like average. How might someone naively calculate the average?

for n in list
sum += n
return sum / len(list)

Which will fail but will probably be caught in the code review. Then a cleverer developer might think to write

l = len(list)
for n in list
sum += n / l
return sum

Which will also fail but in more subtle ways, hopefully the senior dev will catch it in the code review.

Then they correct it to

l = len(list)
for n in list
sum += n / l
rem += n % l
sum += rem / l
rem = rem % l

return sum

But this could further optimized and might still be dangerous. This one might not be fixed at all in the code review.

The best algorithm might be Knuth's which is fairly non-trivial and might not even be the fastest/most efficient given certain unique JS optimizations.

Do you want to do this for every 'trivial' function or would you rather import average where (in theory) someone knowledgeable has already done this work and benchmarks for you and you get the best performing algorithm basically for free?
The FSF acknowledge that "open source" is a bad term as it's easy to misunderstand for "code for which the source is available to the public". I completely agree that source under NDA is a different scenario.
Too much of a good thing
So you criticize the maintainer for their large pile of (unpaid) work in the queue, but aren't willing to help out?

If you're worried about the project stagnating, why don't you offer to donate some cash? Why not offer to help in whatever way you can, even if it's just triaging tickets?
This was actually a really impressive set of demos. I hadn't really considered VR as just a virtual environment to do traditional computing tasks but it seems like it could have a lot of merit.

Always having a relaxing place you can go to and do your coding sounds pretty appealing. Especially in a world where companies continue to think that open offices are a good idea.
Looks like that link has a transient id and returns a blank page..

Real link here: https://www.fpds.gov/ezsearch/jsp/viewLinkController.jsp?age...

Agreed that this doesn't look like the actual phone contract. Cellebrite runs contracts for the DOJ every few weeks and that amount is quite low:

https://www.fpds.gov/ezsearch/fpdsportal?q=cellebrite+CONTRA...

Wouldn't be surprising if the DOJ had called them up, though, and also wouldn't be surprising if any purchase order surrounding the case was sealed for reasons of national security.
I wrote a client library for this in C# by reverse engineering what chrome did at the time (totally not legit/unsupported by google, possibly against their TOS). I have never used it for anything serious, and am glad now there is an endorsed way to do this.

https://bitbucket.org/josephcooney/cloudspeech
Ask HN: A very genuine question.

How do you propose we keep an eye on those who mean to physically harm others? How would you solve this?
Palo Alto's Prices Are So Crazy, a $250K Salary Needs Subsidies
Agree. How about creating "Digital Civil Liberties" rating for every politician ?
Several of the methods the writer is playing with involve DH parameters for which they can use Pohlig-Hellman to recover secrets. Pohlig-Hellman breaks DH when its victims are unfortunate enough to be in a group with a smooth order --- that is (I'm butchering this), when the group order factors into small primes. It works by collecting samples from the target for each factor of the group; each leaks a bit of the key modulo that factor. You knit the samples together with CRT.

I'm not entirely sure how this gets you NOBUS parameters though. You can find any small prime factors of the group order using ECM, so if you're relying on those to let you run Pohlig-Hellman then everybody else can do it too.

(But in any case, you should be locking down your DH implementations to use a fixed nothing-up-my-sleeve group, so even if this is a backdoor it would be a backdoor with flashing neon lights around it.)
Doesn't apply to Javascript, but something like Haskell's hoogle (stackage.org/hoogle could help with a small module approach. It lets you query for functions matching a certain type signature, like this: https://www.stackage.org/lts-5.9/hoogle?q=%5Ba%5D+-%3E+a+-%3...
What's an instance where people say a project is bloated but it doesn't meet some of these criteria?
If you haven't, I highly recommend A Pattern Language. It's full of fascinating insights into the ways functional design interacts with our lives (and perhaps moreso, how dysfunctional design impedes it).

http://www.amazon.com/Pattern-Language-Buildings-Constructio...
Has N6 and Note 4, just got iPhone 6s+ a month ago, can't believe I stayed with android so Long, the only thing I miss on iphone tho is the touch flow keyboard from windows phone, nothing on iphone and android comes close. :(
This is a terrible advice - please don't do it.

Say, your app depends on libraries foo & bar, and both of them depend on baz. Say, foo is bundled with baz v.1.1 and bar is bundled with baz v.1.2. If you used package manager you'd get baz v.1.2 and everything would work fine because baz 1.2 is API compatible with 1.1.

However, it does not mean you can use them interchangeably! If you pass an object created in baz 1.2 to baz 1.1 things might break because internal implementations of the two are different. Even having two instances of the same exact library may not work - e.g. if that library keeps some sort of internal cache.

NPM must be fixed so that packages that we depend on can't just be unpublished. Bundling everything together is not the right solution.
Is web typography broken?
I hate that customer support in start ups is considered nothing more than a leg up into a "real" job. It may not be the best paid job in the organisation, but it's crucial and certainly shouldn't be paid at such a fraction of other jobs that "promotion" to another department is the only viable option.
> The iPhone 4 stayed just as good as the day we bought it and my wife didn't bother upgrading until the iPhone 6S.

This isn't a typical experience. There's a reason that iOS9 is only on 80% of "active devices": people hold off deliberately. There have been many iOS updates since iOS4 that have caused widespread criticism for their effects on older phones.
Ask HN: Hosting for Startups
I have an idea: Managed Hosting for OpenBazaar servers. Guys pay me $x a month, I manage the software, update, backup.

Now for the actual hard work of seeing if that idea can be made into a repetitive business process.

I'm looking at AWS or Google Cloud to host. Because I don't have a lot of cash to plunk down on hardware and renting a rack in a data center. And spooling up instances as I get customers would be ideal, instead of buying hardware and hoping people show up.

Reselling even limited access to instances seems to put me in the 'Partners' side of their house.

Which seems a little silly. I can see _their_ point of view, but going through the hoops to be a partner might be more than I want to take on.

So .. hosting. Is there a better hosting option, one that will let me pay as I go?
Also in Ohio and quite happy here. The lure of higher wages in CA isn't so amazing after taxes and the higher cost of living. My salary here would be a typical developer salary in the Bay Area if you factor in that. I might have to drive to work, but it's only a 15 minute commute.
IBM split from Nuance a year or so ago- it's now its own engine.
I like to support people that do things to convey their opinion and protest a decision. Sometimes brazen behavior is warranted to get more attention to your cause. But not in this situation. What Azer did seems like a "knee-jerk reaction" performed mostly out of spite.
So the idea is that, say, you'd have hooks in your version control system so that Alice always sees lowercase_with_underscores, Bob always sees camelCaseLikeThis, and Charlie always sees camel_Case_With_Underscores; and then each developer sees a version of the code in which everything is consistent, but it's a different consistent version for each? (And the thing in your actual repository is whatever it is -- it could be w_i_t_h___t_o_o___m_a_n_y___u_n_d_e_r_s_c_o_r_e_s for all anyone need care.)

That's certainly better than having different bits of the code use different identifier styles. But it feels somehow a fragile way to do things. And I worry about encouraging bad habits in teams that don't set things up with such care.

And... can you really make a simple reformatter that will consistently do the right thing? Identifiers may make reference to things whose capitalization shouldn't be canonicalized. HTML. TeX. iPhone. DrMemory.

(Also, though this is a bit of a cheap shot: note that the three identifiers in your first paragraph are not equivalent according to Nim's rules.)
No, de-duplication and conflict resolution is much harder if dependencies are in a bundle. There are many better solutions to this problem:

* Fix NPM and make it immutable. If there's a legal problem allow a package to be flagged with a warning and redirected to its new name.

* Use bundleDependencies in npm

* and maybe even back-up your entire code directory
As someone who's worked with a lot of these engines, Nuance and IBM are the only really high quality players in the space. CMUSphinx and Julius are fine for low volume operations where you don't need really accurate response rates, but if you want high accuracy neither comes close from my experience.
> npm won’t suddenly take your package name.

"...unless we do, in which case we will."

I wonder at the cognitive dissonance that has to be there to type a thing like this when the entire shit show started with you doing exactly what you're saying you won't do.
Many of the senators have de facto lifetime terms. One can argue that writing to them makes even less sense.
I moved from Ohio to SF and got a raise. After 2 years, I've doubled what I was earning in Ohio. I also switched careers, from tenure-track university professor to web development.

My point is that code is the lingua franca of well-compensated digital laborers, which is the point the article hints in its closing sentence:

"Another customer service worker I’d talked to from a big software company decided that if she wanted to stick around the Bay Area, it was time to teach herself to code."
I don't see the advantage in supporting all styles. What you describe sounds like a pretty trivial benefit compared to breaking all of your ordinary text manipulation tools and violating the principle of least surprise.
Sure, but at this point isn't it about security infrastructure? As long as we frame it as Liberty vs Security, then there will be people who disagree and the side with the stronger emotional salience will win.

The response to "if you have nothing to hide etc." Should be "What is the password to your bank account?", not a more abstract philosophical argument.
This is really cool. Would love to use it in a project
If something is simply complete, can it still be proportional to something? Let me illustrate the conundrum with some other sentence:

"My complete and undying love for you is proportional to my blood alcohol level."

For values of proportional equal to caused by, I suppose.
FORD:

- Family

- Occupation

- Recreation

- Dreams

I'm not a natural talker. Using FORD has opened many, many conversations and, eventually, doors. I believe I found out about FORD on HN about 6 years back.
It could be argued that the power of lame duck presidents cuts both ways since they can act with less fear of reprisal. You may still be right about prioritizing congress.

Related, I once read an AMA on Reddit where a congressional staffer advised everyone to do their best to get op-ed pieces in newspapers which mention your elected officials, since it was their job and the job of the staffers they knew to compile such pieces for review every morning by the legislator.
In theory, does a backdoored firmware run slower? If yes, then can you detect a backdoor by building one yourself and benchmarking?

Or are the margins of error on repeated benchmarks larger than any performance hit due to a backdoor, or can something be backdoored without any performance hit?

What about power consumption?
Hmm. Noscript is flagging that this page's load of youtube is a potential XSS attack.
Engineering Proteins in the Cloud with Python and Transcriptic for $360
Please don't leap so quickly to psychoanalysing the presumed intellectual failings of people who disagree with you.

(I do not think your analysis is anywhere near correct in my case, even though I think Nim's identifier comparison rules are very unwise.)
The last time I did interesting stuff with these libs, I used CMUSphinx -- The documentation for Julius wasn't quite good enough yet, and CMUSphinx has great documentation.

Sphinx is supported by Carnegie Mellon and Julius by Kyoto University/Nagoya Institute of Technology.

I think the easier choice even today might still be Sphinx. Given the excellent documentation (they touch pretty much all the basics you need to know), and the availability of pocketsphinx (C) and Sphinx4 (Java).

There's also projects like this:
https://github.com/syl22-00/pocketsphinx.js
I took me a while to figure out that I would never find your interesting advice on 'smalltalk' in your last 3 sentences.
Whenever I see "complicated technology of which there are 1000 implementations" combined with "built around X" I think somebody just wanted an excuse to play with X and has no intent on building a good tool.

Package managers have a long history of being poorly implemented. Look at CPAN, RPM, Alien, Pacman, Nix, etc as examples of what was a good idea, but still has various flaws. We already have everything we need, it's just not all built into the same tool. Adding new technology to a new tool doesn't make a better tool, it just makes yet another incomplete tool.
The compiler is just as much written by random humans as anything else.
The World Wide Web is a subset of the Internet.
Not really challenging at all. ST subsidized the release of Keil IDE with a pretty decent amount of functionality. Use uVision Core[1] and you get a Crazy amount of control over everything (CMSIS is worth paying for, and if you're an academic, discounts are offered.). No licensing fees at all. Works with the standard ULINKs. What used to cost tends of thousands of dollars for a bond-out chip in the 80s.

The Cortex M3 (and any of the other ARMs that offer ETM[2]) is as good if not better than any debugger I've ever used[3], software, hardware, micros, CPLD's, FPGAs. You need to throw a few hundred down for the ULINKpro, but the Segger ST everyone uses I think speaks ETM. Making the jump from Arduino to UL certified production run consumer products with injection molded custom casing holding your 6 layer board has never been easier.

ST even offers documentation on how to use FreeRTOS[4] if you need hard scheduling requirements (though I'd go with Micrim, Wind River, or one of the usual suspects that has already been vetted if you're going to market in, say, the medical device industry).

[1] http://www2.keil.com/coresight/
[2] http://www.ecnmag.com/article/2010/07/debug-code-arm-cortex-...
[3] Cincom Smalltalk notwithstanding.
[4] http://www.st.com/web/en/catalog/tools/PF260200
I wonder if it makes sense to combine some kind of blockchain technology.
Wavegarden: Man made waves to bring surfing to non-coastal regions
Good question. For now, Apple seems to have the legislative branch on its side. Some Congresspeople such as Darrell Issa and Lindsay Graham have actually been educated on the technological issues.
"I’d become dependent on these shortcuts."

The intro to this article is as much a caution of becoming dependant on non-standard tools, as it is a pitch for omzsh. If you can't sit down at a normal bash window and get shit done, your shortcuts are hurting you.
> Now we can see how BCC was time-consuming business with profits that are not really exciting for software developer

In 2014, it was bringing in $4,000 an hour [0]. Sure, that hourly rate doesn't scale, but it was only 4-5 hours work for the entire year.

It's not surprising that sales weren't anywhere near the level they were when more time was invested in sales and marketing.

To me, it seems not so much that BCC was time consuming, it was that everything else consumed Patrick's time and there wasn't time for BCC except the bare minimum required to keep it up and running.

[0] http://www.kalzumeus.com/2014/12/22/kalzumeus-software-year-...
It sounds like your problem with C/C++ tooling is that it's hard to support Windows. The reason for that is simply that microsoft bundles its own proprietary C++ toolchain with the platform-specific tools that Windows developers need. Windows developers don't want to install a second posix-like toolchain, and os x/bsd/linux developers don't want to install a Windows-like toolchain because in both cases the new toolchain wouldn't integrate as well with the rest of the system, and it would add unnecessary complexity to the operating system.

The problem with proper unix tools, the ones that do one thing well and integrate with other programs as a part of their design, is that they make doing cross platform work a problem, because those other programs might not exist on other platforms. GNU Make works just fine on Windows, but you're not using just make when you write a makefile. Makefiles typically depend on GNU Make, pkg-config, gcc/clang (or another compiler with the same CLI), coreutils, bourne shell, and an assortment of a few other utilities. That means that Makefiles by design will only work on a single platform.

The other operating systems have essentially made themselves into the same platform for these purposes through the use of system package managers. I've heard Windows is kind of getting one? More like homebrew than what we have in linux/bsd-land but that might still help. But maybe Windows developers will still be reluctant to install software with MinGW dependencies. That would be unfortunate, but fair; I wouldn't install a package that had Wine/Mono dependencies just because some asshole wanted to use their Windows build system on Linux! Hell, I avoid installing smaller things with a Qt or GTK3 dependency simply because none of the software I use needs those and I don't want to clutter my installed-packages list for something that isn't important.

I'm not a huge fan of Rust's Cargo. The list of requirements that the Rust team had for their package manager and build system made sense, and if I had to design a tool that met those requirements, it probably would have looked quite a bit like Cargo, but it makes me sad that the most reasonable design is that which abandons the unix-like simplicity of the python and C (and perl?) toolchains.
This is literally one of the funniest things I've heard about in months. Look for my new python library isDict, coming soon.
You could probably have gone from tenure track university professor to delivering pizza and still doubled your salary provided you didn't end up delivering in a crappy part of town.
>And what of it? A lion has a difference of opinion with you about whether you're its dinner. Do we need to spend a trillion dollars and have a war on lions? What about Streptococcus? It's alive, it adapts, it wants to kill you, another trillion dollars?

The point about lion is good and that's why our ancestors had spent a huge amount of resources (money, time, hunters etc) to "eradicate" lions. Due to our ancestors' efforts and the consequential huge spendings towards this eradication, today we don't have to worry too much about the opinions of lions. Today the lions are rendered as what we proverbially call "toothless tigers/snakes".

A similar argument can be made about Streptococcus or (any such bacteria/virus or even any other such animal) and humans want to be in charge of things so much so that their opinions and thence their consequential actions do not become a significant danger/hazard to the humans.

Many fanatical animal lovers do hate this idea (of humans wanting to be in charge/control of other animals) too. But that is a different story.

Now with terrorists, the things become different in a very important manner. Lions and other animals are different species and thus their eradication problem doesn't first pose a very difficult "identification" problem. To deal with human terrorists, first we have to "identify" them and their sympathizers who can/do provide safe harbour to them and thus help the terrorists in their intended terrorist actions.
This "identification" problem is what requires mass surveillance.
This brings "cancer" to my mind, as in case of "cancer" also we face a very "identification" problem: problem of identification of dangerous cells.

Hope this helps.