skysight-inc/HackerNews huggingface dataset:
http://www.thoughtcrime.org/blog/lavabit-critique/

The whole thing is worth a read but here's the gist

"Unlike the design of most secure servers, which are ciphertext in and ciphertext out, this is the inverse: plaintext in and plaintext out. The server stores your password for authentication, uses that same password for an encryption key, and promises not to look at either the incoming plaintext, the password itself, or the outgoing plaintext.

The ciphertext, key, and password are all stored on the server using a mechanism that is solely within the server’s control and which the client has no ability to verify. There is no way to ever prove or disprove whether any encryption was ever happening at all, and whether it was or not makes little difference... The operator can at any time stop averting their eyes, an attacker who compromises the server can log the password a user transmits, and an attacker who can intercept communication to the server can obtain the password as well as the plaintext email."
> The inability to search within the current folder is also a joke!

You can search in the current folder. It's a setting in Finder > Preferences > Advanced > "When performing a search".
STNS: Simple authenticate provider for Linux users and public keys using TOML
I think Lavabit wasn't about All Writs, rather it was a simple pen/trace order?

Lavabit's problem was that they actually had access to the data, so they were capable of providing records and they didn't provide them. Then pen/trace laws require cloud email providers to provide this data to LE upon authorized request, and case law does not really support payment for hours expended to implement any data collection solution.

Demanding the SSL key in order to plug in their own packet capture (and we must presume appropriate filtering, yeah right) was a -- 'if you can't give us realtime feeds, we can get one ourself'.

So overall I think there are a lot of stark differences between Lavabit and Apple's case, thankfully. Apple is on much stronger legal footing. The corollary is iCloud and Apple has long since provided everything they had there, and there was no question they were required to do it.
Yeah, right..

There is no boilerplate or constraint how those 'flexible' solutions should be created, thus every developer writes however he wants and if those developers have not made constraints for themselves you will have a total mess, written in so many styles as there were developers. Jeez, I've even seen messed up Django apps, where you usually must follow some patterns.

Patterns, constraints, models, architecture are for a reason and if a framework/language/library makes you use some specific styles, it's much easier to maintain such projects when there is more than 1 person working on them.
Microsoft launches first preview of its Edge browser with extension support
For that reason, I'd prefer to see /no/ clicks go to new tabs by default, and let the user decide.
BetterTouchTool lets me use three-finger tap.
Maybe, but the cap is so oversubscribed now that even if they were banned, and even if the 1/3 of the H1B visas those kinds of consultancies take went to someone else, there's still no more guarantee you'd make the lottery/cap.
Turns out you can already lease humanoids for just a couple hundred a week to perform agricultural tasks. It'd be pretty hard to undercut that price.
the future of robotics is taking advantage of passive-dynamics. the problem with boston dynamics was they leaned heavily on active control, which makes locomotion energetically expensive. when you watch those videos, notice how lumbering the motion is and hoe hard those machines work. i would bet that that is the underlying reason why google pulled out.
More refactoring adventures
This is totally crazy. With a slightly different syntax it's really not so bad:

{a:b} for mappings from a to b

(a,b) for tuples of a and b

[a] for iterables of a

a | b for unions of a and b

Then factor out that nasty common thing and you end up with:

Optional[ {basestring: StringThing}
| [(basestring, StringThing)]
]

StringThing = (basestring, Optional[basestring | file]])
| (basestring, Optional[basestring | file]], Optional[basestring])
| (basestring, Optional[basestring | file]], Optional[basestring], Optional[Headers])

Headers = {basestring: basestring}
| [(basestring, basestring)]

It's not inherently complicated nor does it have anything to do with duck typing, it's just that the syntax chosen is awful.
Anyone who has encountered a book is familiar with the concept of pages. I doubt that people would prefer their books printed on a single strip of paper. Why do the same for websites. Not to mention that bookmarks are broken in both scenarios (single sheet books and infinite scrolling webpages).
Aren't protocols just a particular kind of abstract type? In Swift, "interfaces" or "traits" are literally called protocols.
I understand if the company is paying a good base salary, then the equity is basically bonus to compensate for working the extra hours and working in a company that could go out of business.

There is a balance. If the company wants you to accept a lower base in exchange for higher equity - then you better ask yourself, "hey, does this mean that the remaining salary buys that equity? If so, then why don't I start earning it immediately?".

Just because someone doesn't offer you a fair deal, doesn't mean you can't demand a fair deal!
You need to tell us how you currently deploy if you'd like to get suggestions on how to speed it up.
Git v2.7.4 released, fixes critical Remote Code Execution vulnerability
Update your Kindle or it will stop working
Who owns that hardware you paid for? Not you, apparently.
How does the government merely name a number out of thin air and the company now has to pay it? Can the government just declare the moon to be their property tomorrow? How would they enforce the delivery of these funds?
Student in US Sentenced to 15yrs in North Korea
Admissions know what they're doing, i.e. following administrative policies of letting foreign students paying fully jacked-up tuition no matter what.
Or: reload, and after the text is visible again, press the 'x within the URL bar to stop loading/executing the JavaScript... Works flawlessly for me.
GPS is below the noise floor at the receiver, IIRC.

UWB radar is also a thing.
IFTTT about to retire Pinboard Channel
I don't see systemd in there anywhere.
Celery does a ton of things that channels doesn't currently do. Celery has a lot of workflow concepts built in (Chains, Chords, etc). Celery also has prioritization, and a fairly robust ecosystem that channels may take a while to deliver.
For those of you that don't know about Slackware. Slackware is the oldest distro and it is still plenty alive today. When to setup linux on my computer in the early days with other distros (red hat/suse/etc), this would eventually crap up (rpm hell) and give me something unusable. Using Slackware forces you understand how everything works in a linux distro. This lets you fix your own problems.
> Also, it's interesting how quickly 'cool new tech' can become 'Enterprise' shudder when it's widely abused and misused

Is this the hipster corollary to coding? Sure, Java was cool when only 100 people were using it...
For example if the engineer in question was an unattractive male, perhaps also a minority, someone with weird hobbies etc.
depends on what stack you're using. Perl has excellent very low friction tools for separating stuff out (notably perlbrew, local::lib, carton). Python has virtualenv which is not quite as capable an isolation layer from my limited experience. The quick brute force way is to set up a virtualbox per client maybe using vagrant and/or docker and/or (?:ansible|chef|puppet) to help set up some of the turnkey stuff. Generally I work remotely on clients machines directly and they provide the virtual machines and vpn setup for me, or being a perl guy I'll work on bare metal and provide detailed installation instructions in some form or other.
Yeah, I don't think it's too difficult to pick the correct answer there...
Many of Asia's greatest cities were destroyed in the space of about 50 years: Constantinople in 1206 (almost Asian!), Beijing in 1215, Samarkand in 1220, Baghdad 1258. History might have looked very different if these cities had been saved.

For example, it's likely that much of the scholarship of western antiquity was lost in the closely spaced sacks of Constantinople and Baghdad. The Mongol destruction was particularly thorough in their destruction of scholarship: "The books from Baghdad’s libraries were thrown into the Tigris River in such quantities that the river ran black with the ink from the books."[1]

[1] http://lostislamichistory.com/mongols/
Meteor's DDP only can have it's annoyances as well. It's ok till you want to do something like upload a photo which it's not great for.
office team
I'm with you there
Can you explain the background to this story? This is because they only want to sell their solution?
> "Do you have the capability to retrieve this PIN number?"

The answer to this question is no, since the person would be no longer employed by Apple, would not possess the source code, and would not possess the signing key.

Even if you assumed that the court could force Apple to disclose these items to somebody who is now a third-party, it may be the case that there isn't any person who is capable of doing this. Are the same people at Apple responsible for code signing and writing the code necessary to do this?
So I do not know (in the mathematical sense) that ChipKill won't create a problem, but I think it is unlikely.

In general, if the ECC infrastructure works (e.g. DRAM detecting bit corruption and reporting it to the OS), the odds of an attacker finding a piece of RAM that flips bits "just right" to bypass the checksumming without triggering a OS panic are low enough that I'd rather worry about software bugs.

DoS may still be a pretty viable attack, though.
>By the way, what is the largest organization you can think that follows that swaps 'designated communicators' roles with no management?

Good question. I've worked at a fortune 500 company where people routinely ignored official communication channels in order to communicate with the people they needed. It becomes a lot harder to find the person you need at a large company and building relationships across departments becomes important.

It's rare in any organization that the people who have power are the same ones who get things done.
Haha yes, you are right.
> If JavaScript wasn't the best we had available to us to create dynamic UIs in the biggest distribution platform in the history of civilization, we'd be using something else.

This is circular: "Because we use the thing, it's the best. If it weren't the best, we wouldn't use it. We use it because it's the best."

Companies use non-best things all the time, even when the better options are cheaper, easier, faster, safer, etc. Political control, gate keeping, nepotism, kickbacks, drumming up showy re-orgs and migrations and initiatives for short-term executive bonus optimization ... there are endless reasons why executives and management couldn't care less what "the best" solutions look like and will use unequivocally crap solutions, solutions that are demonstrably wasteful and inefficient, if it gets them their short term bonus or promotion, or whatever.

> Help make it better or get out of the way...

Complaining is perhaps the most useful tool there is for effecting positive social change. It's not only helpful, but necessary and vital that we keep whining incessantly about how unreasonably poor a tool Javascript is, and how most of the work people choose to do with it or choose to invest in is clouded by mistaken impressions about the usefulness of that work.

Most of what we have done to the "biggest distribution platform in history" is to utterly destroy the value it held, to make it a cumbersome, psychologically manipulative stream of noise that, while still providing value, doesn't provide nearly as much value as it could if we just simply stopped fucking it up with poor web development priorities.

It seems we won't rest until there's an ad tagged to every single transmitted bit. And we can't slow down at all, lest short term bonuses be lost, so we have to evolve our way to every-bit-an-ad using whatever bad tools there are now (Javascript) as opposed to stepping back a bit to think critically about what we're doing, and what good tools would be to actually solve the problems we should solve.

Instead, libertarian brogrammer founders and VCs just spew Randian nonsense that no, this is the market economics, and if every-bit-an-ad via bad Javascript is what makes money, then it must be what the world at large wants. Ugh...
I actually think it's a lot "sexier."
3 things that Rowhammer taught me (talk slides)
Remote code execution in remote control software? Dameware vulnerability
Don't worry, it's recent and mostly just designed to help you figure out if you should flag an article as a dupe.
I'm jaded. But stories like this are planned to divert to things like what IBM are doing or job shops like Tata,etc.

"Oh look at what immigrants are contributing in entrepreneurial sense, but ignore how big companies are moving jobs overseas."

IBM and Disney, iconic US brands are at the for front of outsourcing local jobs using H1B scabs as the route.
This year Infosys, Tata, Wipro and IBM submitted more than 65000 applications [1] (which is the current cap). And these are not the only bodyshops in the running. If the law had been enforced then there had been plenty of H1-Bs to go around the year (or, at least till October/November) without a lottery like it always happens in the years when the "consulters" get cut due to poor economy.

1. http://www.myvisajobs.com/Reports/2016-H1B-Visa-Sponsor.aspx
I watched the videos, and I see what looks like machine learning managing those legs, and whether there is active or passive dynamics driving the motion of the legs is unclear. I am no expert in robotics though, so someone correct me if I am wrong. If you are suggesting systems like Theo Jansen's Strandbeest is the future of robots, you are sorely mistaken. How would a robot utilizing passive dynamics climb steps or a ladder, or dance, or pick someone up and jump across a gap?
Hypertable (bigtable clone) , Inc. is Closing its Doors
You should read up on how Communism plays out in practice. The Chinese government is full of billionaires who embezzle wealth.
There's a good list here that should allow you to decide for yourself:

http://prxbx.com/email/
Ask HN: Why is HN so outdated?
If 10% of developers on SO are students, and 2.5% graduate every year, does that mean every 10 years the population of developers increases by 25%? Do 25% of developers retire every 10 years?
Educated ambitious people of other countries move and work to somewhere where the opportunities are greater, and are willing to do so, leaving their home countries and families.

This is a filter which causes these immigrants to be successful compared to the average disadvantaged unmotivated american. It's the old high vs low skill immigration debate.
49% of US billion-dollar startups were founded by native americans?
There's a real trade off. I didn't mean to dismiss it (apologies if it came across that way). For some workloads, a 2.3 GHz Haswell runs absolute circles around a 2.5 GHz Sandy Bridge (mostly vectorization friendly ones). So if you care about newer architectures, now the API either needs to let you choose a processor type per zone (painful) or you end up taking it on as the provider (each zone has a single processor type). We also elect to maintain single-threaded performance across a variety of benchmarks which is a double-edged sword.

So they made a different choice: let the customer just decide explicitly. We went with "let the customer decide if they want". Most people internally at Google don't bother and I'd say we've been proven correct in the marketplace as well; if you need to care, we're transparent (otherwise, who cares!).
Oh the irony ..

> Want to take your AngularJS skills to the next level? If so, check out our flagship product, Angular Course. Through 115 HD videos, you'll learn Angular and the latest best practices as you build a fictional startup.
It can mitigate the DoS if you have enough spare RAM. if you are right on the edge that removed RAM will turn into an OOM condition and will become a DoS.
BUG INDUSTRIES: A Card/Dice Game for IT Nerds
I can see that it is working. Thanks for the amazing product. Will it be apt to share the model in which you are planning to monetise the product? Thanks once again! ;)
Another key difference -with an E3 there's no path to a green card. A number of friends have had to change to L1/H1 visas because of this limitation.
Do any tools like say Memtest86 use test patterns that will detect row hammer vulnerability and for that matter, is it something that can be fixed on any given system by changing the RAS/CAS frequency or the voltage?

Many years ago, I ran a couple of PC shops. When EDO RAM first came out we had a lot of problems with random crashes being reported by customers, usually when they were running Word. We would typically run memory tests for a few hours in QAFE, which was then the best at detecting errors, but it would consistently fail to find anything wrong with these systems.

It turned out that the most reliable way to reproduce the problem was to run the shareware version of Duke Nukem. So we had a copy of it on all our diagnostic disks. If a system could get through the first level without any on-screen corruption, you knew it wasn't going to come back to the shop, so that became a standard test on all new PCs.
> Does this mean that "unreasonable burden" is relative?

Yes, "unreasonable burden" SHOULD be relative. Not all tasks take the same amount of time.

An example I can use is a future court case that involves the safety of rockets transporting people to Mars. It becomes immediately obvious that any investigation and changes a court may demand would cost a large amount of money in such an expensive field.

It doesn't make sense for there to be a strict, absolute cap on burden, say $100000. Sure, that's the salary of an Apple engineer for the better part of the year, or several year's salary for people in other fields, but it's also a fraction of cost of a single rocket component and a tiny portion of the budget of a rocket launch for a company putting rockets into space.
Doesn't matter. The Judge merely collects all the pieces and then Orders them to work together.

If it reaches anything approaching this point (it won't) stopping it basically requires an individual to commit to doing the work then sabotaging the device when presented with it.

That's the act of civil disobedience. And you can expect to spend more than a night in jail should you grow the balls to do it.
One of the (IMO many) problems with using coloured coins for property ownership is that the real world is necessarily messy.

Disputes happen frequently, houses are seized, not bought outight, people die and ownership needs to be switched, any other number of scenarios might occur... on the flip side, what happens when a wallet containing the house is compromised? When you start to go down this line of thought, delegation to some authority begins to make sense...

To be honest, I found that every one of the interactions in the story has a similar set of limitations or problems. The whole thing reads as though it's been written by someone who's never actually been out in the world and interacted with people. Every one of the points can be pretty much countered with the same "OK, but what if something goes wrong with the transaction, or if someone wants to act in bad faith?"

To me this is the biggest fundamental flaw with unregulated cryptocurrencies - there are already a significant number of bad actors who are stealing coins but no "fix" (indeed this is by design) - other than calling the victims idiots and suggesting they act differently next time.

Unfortunately in the author's world, you're broke, homeless, and in every other way possible, SOL.
On the servers that I use the server will log to ipmi sel only after a threshold but the Linux OS will get an MCE for each error so a monitoring tool can detect and alert even before the BIOS logs anything.
That's untrue. The benefit is not immediate, but as soon as that child is 21 they are able to petition for immigration status for their parents for family reunification. In fact the majority of US imigration happens via family reunification.

http://www.migrationpolicy.org/article/family-reunification
Yes, it looks like the real problems occur (as also mentioned in his post) whenever encountering self-modifying code.

I wonder whether it would be possible to detect and then either pattern match or manually resolve those cases of self-modifying code, in case they are few and contained to a small section of code each?
Oh his is great! I couldn't summarize it sufficiently.

Basically, he did a complete 180.

You should listen to both his first [1] and third [2] podcast on the subject. In the first one he really lambasted supporters of encryption, and in the third he changed his view completely.

He quotes a good analogy here [3] and concludes his thoughts with a final opinion here [4]

I don't fault him for his first podcast. He came up with a reasonable point of view given the facts he understood. And when presented with new information, he changed his mind.

[1] https://www.youtube.com/watch?v=ZQAmlVFjJ9k

[2] https://youtu.be/9HK4IBscfMQ

[3] https://youtu.be/9HK4IBscfMQ?t=2m33s

[4] https://youtu.be/9HK4IBscfMQ?t=4m50s
Please turn your satire radar on.
Patrick Volkerding is hesitant about systemd, but not openly hostile, so he has decided to stay away from it for now, but hasn't ruled it out for the future.

People who are set against systemd should probably better look elsewhere (although their options are pretty limited).
And then SalixOS lets you benefit from Slackware without understanding much at all, like some kind of slack Ubuntu.
Newer versions of memtest86 has rowhammer test.
I'm a fan of Plottable, but the reusability aspect seems really interesting.
I just... I just love it.

Can't seem to select all my mail to archive though. I have a bunch of unread mail and I would want to batch read them all.
Almost certainly true. Also, how accurate are these optical HR sensors?

Chest strap monitors are somewhat more accurate than optical monitors:

http://www.wareable.com/sport/heart-rate-monitors-chest-stra...

And it's unclear whether the optical measures are accurate enough to inform health decisions. I can say we've looked at this at our company and it's a fairly complicated picture...
The story for robotics, it seems, is similar to classic AI - our models are too primitive and technology too crude.

Nature has its reasons to make everything from tissues of specialized cells. This is the way to achieve precision, elasticity and adaptability.
I've used Mix a bit and I didn't immediately see something that was so far ahead of Leiningen. Though I would say SBT is much closer in functionality.
Lest someone think this is incorrect, California anyway has "you must pay overtime exempt workers at least 2x minimum wage" (or they can sue). Start at the overtime page: http://www.dir.ca.gov/dlse/faq_overtime.htm and follow through on exemptions.

Source: have known founders who had to sign waivers agreeing not to sue.
There's no reason to feel jaded. What you say is absolutely true. That's why these reports always come from think tanks, without peer review, and half-assed analyses, but dressed in the clothing of rigorous, critical scholarship.
Atom's startup speed was heavily improved in 1.5 for me. I keep checking back every so often to see if it improves and they're steadily working on it. I think by the time 1.7 hits it'll be about on par with VSCode.
Did you also use ExcelNet to help generate the buzzwords to describe all the technical advancements in ExcelNet? Nice whitepaper btw.:-)