skysight-inc/HackerNews huggingface dataset:
I feel like there's good theoretical comp sci work to be done here to show that this system won't work. I've outlined two open problems below:

APPROACH 1:

Suppose we have a state issued crypto-system F0(Tc) -> Tp.
Alice decides to place another crypto-system F1 on top of that which the state doesn't know about.

Alice unlocks her phone which runs the state's system F0(Tp) -> T1. However, T1 is still encrypted by the unauthorized second-tier crypto-system, F1. This middleware piece of software then runs F1(T1) -> Tp and we have our plaintext. The state, of course, doesn't have the backdoor keys to F1.

The question is how can one prevent this secondary crypto-system from existing? And if one can't, doesn't it make F0 merely a useless ornament that unwraps one cyphertext matryoshka only to reveal another?

APPROACH 2:

idea: any system with a built in guarantee of access by a delegated third party is in contradiction with some theoretical constraints of a generalized security system and puts the whole construction in a lowered security 'level' which had a smaller set of assurances.

Given a user generated token Ku, ciphered text Tc, and plaintext Tp, you have decryption as a function:

F0(Tc, Kc) -> Tp

This requirement is for another key to exist for the State, Ka such that a decryption function F1 (which may or may not be the same as F0) yields:

F1(Tc, Ka) -> Tp

Ka is allowed to be a "salted" key on a per device basis so it can vary across devices as an input to F1.

It does this through another secret function, F2 whose input will be the per-device salt Ds, and a super-global law enforcement key Kl - our secretly held master key.

Law enforcement applies the secret key Kl on the Device and generates the device's master key, Ka by using the Device's Salt:

F2(Ds, Kl) -> Ka

This means that for the law enforcement it's

F1(Tc, F2(Ds, Kl)) -> Tp

Where F1, F2, and Kl are secrets. Tp, Tc, and Ds is known by us and we are free to change.

Here's the issues:

Kl is global across all devices.

F1() must always work regardless of user generated Ku although Ds is allowed to change as a function of Ku.

If I can generate as many Tc and Ds as I can, can we show that given a known F0, F1 and F2 can only be constructed from a exhaustibly reasonable finite set.

How about the idea that the cost of brute-forcing Kl, the master law enforcement key, continually decreases as the number of devices that Kl can open, thus the value of Kl, continually increases? What do the range of those slopes look like?
Clearly the writer is not a mathematician. It is easy to see that math can be illegal. It is enough to consider the obvious example of encryption in violation of various export laws and we are done.
you need to understand the data before it can be made to good 'use'

https://news.ycombinator.com/item?id=11272473
During the project I had to travel from San Francisco to Pennsylvania for family obligations. I managed to do a pretty good job of keeping my coding schedule up while flying and spending time with my family, but I ended up having to stay up pretty late to finish each day's website.

By the end of the trip I was really burnt out but I still needed to crank something out on the flight home. I had an idea for a site where you could enter a few hexadecimal color codes and the screen would transition between them. It seemed totally easy in my sleep deprived state but when I started working on it on the plane I totally floundered.

When I finally got back home to my apartment in SF, it was 9pm and I had virtually nothing to to show for my day's work. Also, I was now freaking out. I didn't know how I was going to be able to push up anything!

I took a look at what I originally wanted to do and what little I had done and realized if I reigned in my scope a bit, I could get a website out before I completely lost my mind. I pared it down to just two colors and cut out all the bells and whistles and just barely managed to get it out the door. And then I had a very, very nice sleep.
Time Table for B.Tech Part Time 8th Sem April 2016 Calicut University
Fwiw, I was comfortable with his/her behavior and there isn't a need to ban him/her for getting angry with me.

I'm a bit stubborn and probably should have dropped the discussion sooner.
The End of Emojitracker
That has everything to do with data collections. It won't always be something obvious as poor zip codes. When data of many people is collected it enables the establishment of certain behavioural types. Then when you come along with the few data points they know of you, the gaps can be filled. What goods you buy, travelling behaviour, waking hours can all be used to characterize you. Regardless of whether this labelling is fair.
Given you mentioned SICP... SICP is cool for its math and its puzzle-like problems, but I found http://scheme.com/tspl4/ a much better introduction to Scheme and more likely to help me solve problems with Scheme in the real world (i.e. a good reference book).
Any otherwise well-designed system with a built in guarantee of access by a third party is only secure if you can trust that third party. You don't need to prove any theorems to know that. I don't think anyone is arguing that such a system is impossible to build, they're arguing that no such trusted third party exists, and no one who actually cares about keeping a secret would ever willingly use such a system when alternatives exist.
I'm Peter, the solo dev/founder behind Outduo.

Feel free to ask me questions (after you've signed up) and I'll give you a hand if I can :)
Wow. Facebook had managed to fail on a thing absent in much less popular sites since the day one.

A CDN absolutely mustn't allow a user to browse to a file with a different extension than it was uploaded with. It must return 404 in this case. II think the flaw is much more severe than has been discovered.
All of the current wishful thinking by Comey, Obama, Fred Wilson, and others boils down to "Let's do a variant of the Clipper Chip."

Until the position of the side of the FBI moves off this mark there is not much to discuss.
Testing out keybase.io’s file storage (alpha)
Show HN: UserNurture.com Feedback Requested
Hi Everyone,

Im in the early stages of launching a new saas product. I was hoping to get the eyeballs of the HackerNews community to see if you guys can quickly perceive the value proposition and might see a need for it based on the landing page I've created.

You can find it at www.usernurture.com

I've already got a list of 100 people who gave their emails as potential beta users and I'm going through contacting them one by one to create the user stories that will ultimately drive the functionality of the software.

Would love to get any additional tips, insight, watchouts, impressions you may have.

As always Thanks HN Community!
I don't think that GPLv3-encumbered software would help here. About all it would do is make companies say, "download our app to watch this." keeping the status quo the same.
When I left there, 3 years ago, they were >5,000...
The 14-year-old Warcraft III gets update
"Let's have a dirty war on authoritarians" is the mirror image of Comey's threat that Congress will enact some horrible law if a terrorist uses encryption. A more palatable description of that threat would not be out of place in this debate.
https://news.ycombinator.com/item?id=11298688
Professor wins $700k for solving Fermat's Last Theorem
Define metacognition for me. I wouldn't be surprised if a forest (an organism composed of many trees and such) had a way to store memories for example. Ants have several forms of external memory assuming the colony is a single organism. Its harder to say if a forest or an anthill can reason about itself in part because we don't really understand how cognition works.

Edit: Killing a plant might be more similar to killing off chunks of an organism's brain cells. As such it may be ethical to kill individual plants assuming we maintain the integrity of any existing colonies.
Oldest human genome ever sequenced, could rewrite our history
Good point. Also have a look at https://deepstream.io , a realtime server that follows the same plug-in design philosophy
I hope the project releases the data so it can be merged into openstreetmap, rather than keeping it bottled up. (To be fair, OSM already has fairly detailed data on Dar es Salaam, whether from this project or someplace else....)
Developing application with Laravel 5 – Part 1
One obvious example is that AFAIK the VM doesn't support functions with a variable number of arguments (foo/1 and foo/2 are two separate functions). This means that you can't have CL-style &rest or &key arguments.
People do not bite the hand that feeds. How many stories have you read where the VCs get lambasted by founders and employees? Not many right?

Remember it's a two way street. Sure maybe there is some incentive for VCs not to be ass holes. But there is equal incentive for founders (many of whom are serial entrepreneurs) to stay liked by the VC community at large.

Final point: people with "fuck you money" as mentioned elsewhere in this thread, commonly don't give a fuck.
From TFA

Fix

Facebook quickly hot-fixed the issue by removing the forward DNS entry for photo.facebook.com.

https://fin1te.net/images/facebookxss/facebook-xss-12.png
Why Latin American economies are turning to Bitcoin
It's not voting exactly at the IETF, they nominally reject it[1]. Approximately it goes through the relevant working group (without voting but by "rough consensus"), IESG, various reviews and RFC editor.

[1] “We reject kings, presidents, and voting. We believe in rough consensus and running code” - Dave Clark, quoted by http://arstechnica.com/tech-policy/2011/01/25-years-of-ietf-... for example
Whose fault is it that phones use conflict minerals?
> The arrogance - that "we" clearly are right, so "they" clearly must be wrong - grates on me.

I don't think he meant it that way. He was well aware he didn't have all the answers. What I believe he was talking about was not the answers but the questions: which ones are people spending their time on? I think he's saying that the questions that most people in AI are spending their time on are not going to give us strong AI. Is that such a controversial claim? I expect most people in the field would agree with it.
XNA returns to the XBox via MonoGame
Wow. Now imagine tiling the floor, walls, ceiling, and outside façade of a mosque using such handmade tiles. Insane amounts of human labor involved.

Your video sucked me into watching videos about tilemaking. :-)

This one is kind of neat: https://www.youtube.com/watch?v=Og6cTlwBTrk
How will GPLv3 prevent smartphone, smarttv, etc apps from using DRM? About all GPLv3 and AGPLv3 would do is give a slightly smaller corpus of software to use in implementing. How much software did Apple open up when GCC went GPLv3?
At least they aren't developing a compulsive urge to crack farts...
The same company, DeepMind, already published about reinforcement learners reaching superhuman performance on many realtime games -- old Atari ones.

I know there's a lot of hype and ignorant confident opinions being expressed, but this sort of response seems really strange to me: in the last decade we went from nobody having a clue how we might automate Go in this lifetime, to 2014 when an article on prospects for Go by a premier researcher on game AI (https://news.ycombinator.com/item?id=11290112) did not even mention neural nets, to professional play last fall, to 5 months later crushing a top player and making high-level innovations, in a game said to be among the most deep and beautiful ever invented... and the most salient points are about how trivial it all is?
Top Features That Your Ecommerce Mobile App Should Have
I think this might be mostly because Senators and Congresspeople are basically like the old aristocrats, each dragging behind them a train of assistants and policy analysts that are working directly for them, serving as the technocratic backstop to their policy decisions. A short-term congressman necessarily will have inexperienced employees (at least, inexperienced in the considerations of that particular district), and thus—even with the very good normative beliefs (the things that are "their stance")—they will have flawed positive beliefs (their knowledge of facts and research that can inform "their stance.")

If you could truly split congress from its technocratic base, such that each new member of the House or Senate is just "plugged in" to a long-lived technocratic base-infrastructure (in the same way the President is!) then we could achieve much shorter term-limits while still achieving high effectiveness.
Except, claiming you guys are "Real Time" just because you offer a basic websockets implementation and positioning your offering as anything that compares to Meteor is a sham. You don't have real time. You have web sockets that anyone can trivially hook up with NPM. You're undermining Meteor's exhaustive real time functionality when you say that. You are also tricking would-be users who don't know any better. They will show up using your framework, have extremely limited (basically non-existent) real-time functionality, and never know what they would have missed had they looked more into Meteor.

Meteor offers a slew of real time features, propagating real time observation of the database up the stack through your webservers to your views, all functioning seamlessly with feature-packed APIs to query your data and make sure everything is kept up to date.

But I think you know this. Capitalizing on your juxtaposition next to Meteor only makes you look bad to someone that actually uses Meteor. You're trying to convince people who haven't used Meteor--and perhaps don't have much experience when it comes to real time--that Feathers is remotely close of an option if you have real time needs. It's not. And most likely a few months from now you will be using the open source--and decoupled from Meteor--Reactive GraphQL (Apollo) project they are developing as the basis for your real time functionality. Only at that point will you be able to claim your real time--but that's beside the point.

You've been around for years, and now your framework is just "a few hundred lines of code"?? That's because you're likely taking the marketing value of having been in the game for a few years (though minimal value compared to claiming you come remotely close to competing with Meteor), and using the name "Feathers" to back your latest reincarnation where your mix-n-match a hodgepodge of NPM libraries that anyone can easily do. Sorry you had to throw away a bunch of code--I know how that goes--but call it what it is instead of all this dishonesty: your latest NPM boilerplate. The newer and humbler Meatier boilerplate offers more realtime than you do!: https://github.com/mattkrick/meatier . And its author doesn't attempt to presume it's anything more than a highly useful boilerplate.

THESE GUYS (FEATHERS) HAVE NO REAL-TIME OFFERING, EVERYONE. DON'T BE FOOLED. If Real Time is what you want, these guys are not it. I find The dishonesty of their marketing unappealing and I hope anyone reading this does too. They are capitalizing on the "Meteor" name and its deep association with "real time" functionality, when in fact they are nothing like it.
Which is absolutely irrelevant. It's expected from a mobile phone to be able to send and receive SMSs. But SMSs can take several minutes to reach its destination in some areas. Long messages are split. And the experience as a whole is totally different. And of course, most people pay per message (individually or as a pack), at least globally. So, if someone wishes to send a message, it shouldn't matter what OS or app is being used by the other party. IF GP uses an Android phone as its primary phone, it may be problem if he is trying to chat with someone who uses only iMessage.
It was a lot of fun testing Onyx using Jepsen, though it did take some time to get things right. If anyone has questions about testing a distributed system in this way I'd be happy to answer them.
Terrorism is too real in that part of the world unfortunately as you already know. A 1KW windmill will turn into a 3 ton pile of smoldering scrap metal if the right mouths aren't continuously fed. Also the idea is de-centralizing power generation to skip the transmission step where all the leakage exists.
חדרים לפי שעה בקריות – Discreetroom
Pride goeth before destruction, and an haughty spirit before a fall.
Benchmarks are an important part of optimizing a program.

Another important part of optimization is profiling. Profiling lets you see where your program is spending the bulk of its time. Then you can make informed decisions about where to direct your efforts.

https://blog.golang.org/profiling-go-programs
Does Feathers support SAML authentication? I don't see it in the docs, but I figured I would ask. It says it's built on top of express, and express has SAML support... is it possible to leverage that?
Indeed - Internet Transit at scale (10 Gigabit+ ports) goes for around $0.63/Mbps at 95th percentile. [1] - for the above quoted 700 Terabytes/month, that works out to $1341/month, if it's evenly spread out on the lower 95th percent of the circuit at around 2.129 Gigabits/second.

[1] http://drpeering.net/white-papers/Internet-Transit-Pricing-H...
The project ( Dar Es Salaam mapping ) is using OpenStreetMap technology and Data. And related to the Humanitarian OpenStreetMap Team ( https://hotosm.org/ )

- http://ramanihuria.org/resources/

- http://ramanihuria.org/about/about-openstreetmap-osm/

- http://ramanihuria.org/news/

"Dar Ramani Huria is a community-based mapping project in Dar Es Salaam, Tanzania. Dar Ramani Huria (which is Swahili for “Dar Open Map”) is training teams of local university students and community members from throughout Dar Es Salaam to use OpenStreetMap to create sophisticated and highly-accurate maps of Dar es Salaam. These neighborhoods (known as wards) were selected because the are the most flood-prone areas of the city." http://ramanihuria.org/about/

And the Mapillary blog post:

- http://blog.mapillary.com/update/2015/12/17/worldbank.html

And the Humanitarian OSM blogpost:

"A day mapping in Dar Es Salaam: drainage in Chang'ombe"

https://hotosm.org/updates/2016-02-16_a_day_mapping_in_dar_e...
With access to the Amazon API cut off, comparison tool PriceZombie is shut down
I'm interested in the argument line that would be "Ok, let's assume you are impeccably honest, infallible, and have unwavering integrity and unstealable secrets ... even under those laughable, impossible conditions, it's still a terrible idea because of the following..." and go from there.
Ok, we've replaced that with (a less baity approximation of) the original title. Submitted title was "Feathers 2.0 – An open-source alternative to Meteor".
Ethics.
It doesn't make much sense actually. Comparing Peachpie-powered PHP5 and PHP7 doesn't have all that much value. With that said we are going to do it anyway in the next week or so, but we expect PHP7 to be faster. The real value comes from comparing PHP7 with Peachpie-powered PHP7.
None of this is related to continuing to use the Twitter API or our commitment to enabling developers to build on our platform

It is directly related.

Twitter desperately needs to decide whether you are a platform or a closed business. If you're a platform your job should be encouraging any and all innovation on there, and have clear pricing tiers which do not result in sudden jumps from free to large charges or access cut off and directly reflect the cost to you of serving the API. You should never be in a situation where you're emailing to cut off access (and yes this notice is shutting it down).

Successful products built on twitter should be celebrated, not forced off the platform.
I found this article a bit more palatable: http://news.nationalgeographic.com/2016/03/160316-tully-mons...
That's not really a protocol level solution. Sure, it works, if you know how to do it - but you don't automatically gain that knowledge "out of the box", you have to learn it. It is a real problem to anyone trying it out that doesn't understand why they can't send a message to someone who is offline.
Old CoyotePoint routers were just a commodity x86 motherboard with an ancient SSD instead of spinning rust. Junipers use a duo of x86 (routing engine) and ASIC (packet forwarding engine). Cisco has supposedly moved from that architecture to an ARM and ASIC pairing.

The ASIC is just a hardware offload for known routes. Unknown routes, admin work, and Ping packets are handled by the x86/ARM CPU. It's not too different from offloading graphics work to the ASIC on your graphics card, or your mining to your Bitcoin ASIC.
I'd be tempted to look at it more as brain:sensor (including skin surface, muscle feedback etc.) ratio.

A small brain for a large amount of inputs means the brain's representation is much more aliased than perception, and the internal algorithms work despite very fuzzy input. Cause for that ratio probably being that the brain is very high pass and only cares about high input spikes (i.e. very dull sense of tact, but sensing a sting still matters, so it still needs a high skin sensor density).

While a large brain for a relatively smaller sensory input means the internal representation is more detailed, or it's even creating synthetic detail from internal models of perceptions at the same time as it processes inputs, which would be where problem solving and awareness capacities kick in.
What is some good and not expensive SSL certificate?
Yep. This is how slack does it, least for their xmpp gateway. I imagine that their irc gateway is similar.
Oops, that's what I get for not investigating.

Hurray data! :)
NxN Go is PSPACE-complete.[1] That's an even bigger deal than NP-complete.

[1] According to some comment in /r/MachineLearning the other day. I haven't looked into it myself.
I don't think his comment was to be taken entirely seriously, but why do you have such a low opinion of him?
A lot of ircds disgustingly put some config options in at compile time, including things like the servername. A friend of mine had her irc server give the generic name for her ircd for several months because she couldn't be arsed to spend the time to recompile and reconfigure.
We are! We give $100k to vetted startups that aren't already big:
https://cloud.google.com/startups
Publish node modules with ease
qmail is not a modern MTA, that is true.

But qmail was a revelation in 1996, and a solid choice for at least ten years, despite never reving past 1.03. Those ten years were pretty ugly in the network services security world. djb's bounty was a significant statement in a crazy era.

No one uses qmail any more. But it was used by everyone who ran serious mail servers for a long time. The guarantee was well-tested.

It is not coincidental that Postfix uses a very similar multiprocess model. That is how you encapsulate security domains. djb didn't invent it, but he shined the light for everyone who followed.
here's a screenshot https://git.io/vaVeM
Questioning electric vehicles' green cred
Women are more successful if they make the first move, OkCupid data shows
To clarify, we don't do that on Compute Engine. The number of IOPS you get is tied to the volume size for Persistent Disk. You choose between the two flavors (SSD and regular) and then size your disk. That does mean you have to buy more GiB than you "need" if you want to go faster, but PD is much cheaper than "bigger VM" in most cases.

Disclosure: I work on Compute Engine.
What happened when I talked about sexism in tech
Researchers Identify Virus and Bacteria as Major Causes of Alzheimer’s
The End of Daylight Saving? California Lawmaker Wants to Abolish It
I spent a few months on emacs, mostly so I could experience the magic of org. I didn't get it. It's a super powerful outliner with scripting... Through that experience I rediscovered pen and paper, actually. No scripting, but I can write sideways and sketch things. A pocket sized notebook was the answer for me.
You may want to talk to a neurologist.