skysight-inc/HackerNews huggingface dataset:
Yes, technically illiterate people were using encryption without realizing it (or even knowing what encryption was) in the 1990s, both for files and other data at rest and for data in transit (e.g., via HTTPS.)

Certainly, the details of where and how encryption is commonly used has changed, but the substance of the debates over government encryption policies haven't changed much at all since the Clipper Chip and encryption-as-munition issues of the 1990s.
Why are they obligated to? The software is still open source. Fork it if you want to.
I don't think it is possible.
> We’ve also seen the ramifications of bad policies that tried to weaken security. In the 1990s, there was a concerted effort by certain outspoken law ...

Dillution of the message by polluting it with political nostalgia is annoying. Make your argument that it's pointless from a mathematical standpoint and help spelling it out, not from some guilt-trip by wrongs of the past.
From the guidelines you linked: If your work isn't ready for people to try out yet, please don't do a Show HN. Once it's ready, come back and do it then.

Blog posts, sign-up pages, and fundraisers can't be tried out, so they can't be Show HNs.

Their page has nothing to try yet, only a signup for a beta "soon".

I second the question in 2: I can't think of a way that can be legal. Google Music etc match your offline music collection, but you "have to" keep the originals.
> AMP allows you to tell your product manager: "Sorry! Not supported."

I like this reason. It's both a good reason for AMP to exist (albeit to solve a sad problem, with the product managers), as well as to justify not using it myself :-)

> Of course, with enough responses like this, a decision eventually comes down to not use AMP.

Perhaps. But having an external set of guidelines that relate to an all-or-nothing benefit (inclusion in Google's AMP program) seems helpful to me (from the eye of a developer who cares about bloat).

A small team of good developers could also formulate their own set of guidelines in order to avoid bloat and achieve fast loading. But those guidelines will have to be guarded by the developers against "political" forces, and there's a distinct possibility that more and more compromises will be made.

Exclusion from the AMP program provides a line in the sand, so to say.
Thanks for the background and the pointer. That is very interesting tech, and the key piece of exploiting the difference between wave motion at the surface vs at depth is ingenious.
Thanks for the tip, I've downloaded it and for sure will give it a try, but it seems like the game is abandoned, which, again, is a shame, because I love them Tolkien based roguelikes. Also, note, that TOME had quite different gameplay, with quests, world underground and above and many, many more feats.
I think it's illegal in all states if no subject of the recording provides consent, the split is between states with a one-party consent rule and an all-parties consent rule.
Anyone have a credible resource for when HTTP/2 might be more common? Akamai has it, but it's in "beta". The apache module is marked as "experimental". Cloudflare says about 25% of current browser traffic is from browsers capable of using it.
London, my first love
How John Kasich Could End Up Picking the Next President
This is how you stop progress: Shitting on the people taking the first baby steps to doing stuff better.
I'd argue that inequality is part of the problem itself. Assume that I am a cobbler and enter into a network where capital is distributed widely. I borrow $200 dollars from 1000 people (mediated by a bank) and buy a home.

The second network capital is concentrated and I borrow $100,000 dollar from two people (mediated by a bank) and buy a home.

Now I need to pay that capital back, with intererest. I can only do that by making shoes for people. Which network am I going to have a harder time doing that in? The one with 1000 people who have $200 saved in the bank? Or the one that has 2 people who have $100,000 in the bank?

Assume all people in the example have two feet.
What's also funny is how adults these days can so easily misconstrue a point, then blame imagined generational differences for their own failure.
So far Graal has been an experimental/research fork of the hotspot JVM. JDK 9 builds include JVMCI[1] as experimental feature which can be used to run graal without JVM modifications.

[1] http://openjdk.java.net/jeps/243
I agree with most of what you wrote here but, to be fair, the Oracle is a pretty reliable source of information. If you pay her a large amount of money for a "major consultation" she will explain one of the main game mechanics in detail. If you focus on gathering a lot of money by selling things to shops, you can pay for multiple major consultations in a single game and create an extensive set of notes to work from. Here's an example of one those major consultations:

Behold the cockatrice, whose diminutive stature belies its hidden might. The
cockatrice can petrify any ordinary being it contacts--save those wise
adventurers who eat a dead lizard or blob of acid when they feel themselves
slowly turning to stone.

There are stories of purported unspoiled ascensions[0]. Whether or not you believe them is up to you. It all does seem plausible though.

[0] https://groups.google.com/forum/#!topic/rec.games.roguelike....
DIY ADS-B for a fraction of the commercial cost
It is both, the implementation and all of the ideas behind it.

These should give you some idea on what is going on there:

https://golang.org/src/net/fd_mutex.go
https://golang.org/src/net/fd_unix.go#L237
https://golang.org/src/syscall/exec_unix.go#L17
I would argue that those bits of unfairness is part of what makes the game so addictive. As long as you have the right mix as to not to frustrate the player they'll keep coming back for more. I think you can see this in more modern games as well.

There were other rogue-like games that were just as much fun, super-rogue comes to mind...
I'll be the first to agree that the Obama administration most definitely went against the spirit of the 2008 campaign with its lockdown of certain secrets. That said, I find the headline number to be completely useless without comparison data. What was the ratio under Bush, Clinton, Bush, Reagan, Carter, and Ford? Also need to see trends of number and type of requests over that time. And who's making the requests and what are they for? Are we talking about requests for troop locations (reasonably rejected), Obama's Kenyan birth certificate (spurious and nonexistent), or investigation results in re torture and the financial crisis (legitimate and embarrassing)?
Inequality is a problem because inequality is itself empirically shown to be a source of disutility, independent of those other concerns you raise.

It may also be a problem for those other reasons, but that's not necessary for it to be a problem.

(People often mistake output and consumption measures of typical economic statistics for direct measures of experienced utilities. While they are proxies for utility, they are imperfect proxies, and one of the ways we know they are flawed is that they do not account for the disutility that directly results from inequality.)
This needs to get thrown out ASAP. The government is beyond delusional with their overreach, everything in the name of terrorism.
I love what I do and really enjoy contributing to what the company I work for does (web based education software). But I absolutely don't rewrite bits of the codebase or develop new features in my free time.

I love programming and working out how to solve a problem, but if it something my employer makes money off then they can give me the time to fix it. In my own time, I work on my own projects and challenges. Be it the automation bot I have running in my house or the games that me and a few friends create.

Doing work stuff in your own time can - and does - lead to the expectation that you'll do it more, so the business accounts for that and will possibly even count it against others that don't do it.
I... don't like NetHack. I've played it off and on for, I donnow, 20 years now and I have yet to get beyond level 5 or something. I don't quite understand how anybody is able to finish the game without reading spoilers and looking at the source code. Can anybody who as ascended explain to me how you're supposed to play this game?
Using Deep Q-Network to Learn How to Play Flappy Bird
Unless they convert repos to a proprietary format that requires a Github client to use, don't allow git cloning or pushing, and are trying to add Github-only features to git itself, then I think "embrace, extend, extinguish" is a bit overblown.
Instavest Hiring VP of Engineering
Instavest is building a Smart Brokerage to replace ETrade. We are searching for a VP of Engineering candidate to make our platform more robust, add new asset classes and enhance our product. This is an heavy-equity weighted role.

Our mission is to empower the individual investor so that he / she knows what to buy and when to sell.

Our Smart Alerts, backed and curated research ideas; and Leaderboard helps people become a better investor immediately.

STACK:

Python, Django, PostgreSQL, AngularJS, Celery, Javascript

TEAM:

Our founding team includes alumni from the US Dept. of the US Treasury, PayPal, and Locu, all of whom have been early employees at companies with significant success/exits.

APPLY:

Apply by sending your resume / github / any relevant information to jobs@goinstavest.com
Random models are very hard to analyze, so people rely on using very basic models - a good example is random graphs, where there is still a lot of research on the very basic Erdos-Renyi model, even if basically everybody is aware of its shortcomings regarding an accurate portrayal of real-world data (none). But it's a model where it's possible to get some good bounds for many problems, basically the only such model, so it's good for papers.

But how those "scientists" deduce things on the real-world based on these simplistic models is utterly unjustifiable. In many cases, we know that some statistical properties show the models are inadequate, yet they still dare to write their BS about how "the internet" or "social networks" work based on such trivial models... (and the media disseminates these idiocies, like Ted and Wired...).

Sad!
You can also use ranged weapons to blindly kill the things beyond the boulder. There are also a few ways to cheat back and win an otherwise unwinnable position.
That requires an arrow. It's possible to beat (9⁹)⁹ using tetration notation and no symbols other than 9. ⁹9 is 9^(9^(9^(9^(9^(9^(9^(9^9))))))), which is rather larger than (9⁹)⁹. ⁹(⁹9) is just icing on the cake.

I'm almost certain the story is a fake.
type speculation is not just needed for running C, running dynamic languages like ruby needs it just as much, or maybe even more so, because types are not known at compile time. At least C provides types most of the time.
> Good enough

Not really, no.

For example:

> Twenty-six local authorities used Ripa to spy on dog owners to see whose animals they believed to be responsible for dog fouling,

Before RIPA they would have done the covert surveillance and we wouldn't have known and there wouldn't have been much control over it. After RIPA they have to follow a legal framework, we know about it, and there are controls. This is exactly what ripa is for. It's supposed to regulate, not eliminate, regulatory powers. RIPA brings the surveillance that was always happening under tighter legal framework. This is not an abuse of RIPA. This is RIPA working as intended.

If you want to say there's too much surveillance you should just say that. There probably is too much surveillance in the UK.

RIPA:
http://www.legislation.gov.uk/ukpga/2000/23/contents

You want part two:
http://www.legislation.gov.uk/ukpga/2000/23/section/27

RIPA has several sections. Only one of the cases you've linked to are under the intelligence service authorisation level. The rest are under the
That Wikipedia link has a reference to the relocation of the Cape Hatteras lighthouse [1]. The way the article is written, it sounds like the light characteristic didn't change when it was moved.

I don't have any pre-1999 charts of the area to confirm the old characteristic, but that's surprising if true. It's one thing to have a bit of a Google Maps snafu when a building moves, but relocating a lighthouse and keeping its characteristic the same seems like it's just asking for groundings.

[1] https://en.wikipedia.org/wiki/Cape_Hatteras_Light
You're being hyperbolic. You bought a lot of stuff and returned a lot of stuff, and now you can't buy any more stuff from Amazon. You are not a "victim" because they no longer want you as a customer.
It'd be nice if this was an actual checklist. i.e. checkboxes rather than images of a checkmark so that you could run through it.
This isn't for long term storage, it's for ephemeral transfers between two well defined entities. Like if I, as developer A, need to give a large binary blob to another developer B. If we are not in close enough proximity for physical media transfer, something like this might be the next quickest option. There's no need to go through the work of distributed it through the ipfs network.

TLDR; different usecases.
Curta – a 1950s handheld mechanical calculator
And the media certainly has done everything they can to stop him.

No, they haven't. They've given him absurd amounts of coverage, which hasn't been nearly as critical as it might have been, and certainly will be once the media's interests ("Blow up the racist, stupid GOP!") stop aligning with his.

...since Trump is self funded.

There is no way Trump can fund his own campaign. He's simply doesn't have a billion dollars in cash. He's nowhere near that rich.
Yes it's going on, and half of it is hacked together in Excel.
The best thing you can say is a bug in kernel code that hoses my whole system is less likely to happen several times over. Suddenly, hackers or faults have to work through components' information flows. You keep ignoring that in your analyses. Also why I brought up CVE's because it's impossible that the microkernels had as many in kernel mode just by code size. Still plenty to be found in privilieged processes but POLA and security checks are way easier when memory model is intact.

Btw, one person here who wrote about QNX desktop demo mentioned doing productivity stuff while compiles ran in background with no lag. So there's that use case except not for BeOS. The link below will show you BFS was more like a combo of NoSQL DB, files, and streaming server:

http://arstechnica.com/information-technology/2010/06/the-be...

Due to its nature, compilation and build systems are about the slowest things you can do on it. I've seen numbers ranging from 2.5x to 20x slower than Linux but they didnt share specs. I'd swap out the magic filesystem for a simpler one if on a development box. BeOS was aimed at creating, editing, and viewing streaming media, though. Did that very well.

Re sandbox more difficult

No kidding! That's the entire point: get it right or make it harder to beat at least. Monoliths on mainstream hardware are amusement parks with free rides and victims everywhere for attackers. Microkernels on COTS hardware and even modular, typed monoliths on POLA hardware are a series of sandboxes with adult supervision during play and movement. Quite a difference in number of problems showing up and damage done.

Re more chances to succeed

You keep repeating this too without evidence. Attackers need vulnerabilities to succeed. They'll know some to use ahead of time or they won't if we're talking OS compromise. A flaw in one module lets them take one module no matter how many restarts. A flaw in two with a flow means they'll get it in first try. This is why you design it so each flow and individual op on them follow security policy.

The only time restarts give attack opportunities is if your using probabilistic tactics (eg ASLR) or they're waiting for intermitent failure (eg MMU errata). Any high assurance system better not exclusively rely on tactics (ever) and should account for latter (eg immunity-aware programming).

All in all, anything you've said about microkernel systems applies to monoliths in various ways. One model just limits system-hosing faults and hacks a lot better. The question is do you want to accept that risk to squeeze out max performance or eliminate that risk with acceptable performance? Microkernels choose risk reduction while mainstream monoliths choose performance.
The "problem" is how to make people better off. If you can make someone better off, without making anyone worse off, then you are pretty much by definitely not at the "best" solution. Because we just identified another solution that is strictly better than what we were at.
I don't see an easy solution here. Sellers end up raising prices to compensate for these kind of buyers.

Then, what happens is that new sellers enter the market and undercut you...until they figure out they are losing money.

The trouble is, there's no end to the pipeline of new sellers :)
Was this possible with any previously popular solution?

The only thing I can think of is patches via email, but that's just using no repository at all.
Possibly because this posed the expansions as floppy disks costing $4.95 – by the time Diablo was released it was on CD, and presumably the art required for expansions was much larger than a CD, and CDs were not as cheap as a single floppy disk.
>Are there people with similar backgrounds that have made the leap? I'm keen to hear from them.

One that I know of is Matt Welsh:

http://matt-welsh.blogspot.in/
One reason (but not the whole reason) is that trackers are always essentially dynamic content.
Sure, but the design constraints change along with. If the iPhone were Free, its security would have been designed to withstand any code changes, ala LUKS.
I hate this argument. Fantasy movies are expected to be internally consistent. That means they follow the fantastical rules they set down, and they otherwise follow normal real-world rules.

(Though I agree with coldtea that the PotC scene wasn't that bad.)
Agreed. I was expecting something meatier than "Welp, I guess the judge is going to take another look at the All Writs Act".
I don't know if you're in TCS or an applied branch, but my experience with TCS labs is that at most 10% of the lab (postgrads and teachers) are able to use some versioning system.

Not a joke: courses supposed to teach programming are organized with Dropbox and email attachments.
A different president might have taken an "efficient administrator and process reformer emphasizing high quality service" approach to being president. But that sounds pretty boring.

Also sounds a lot closer to what the job of an executive really is.
11 attempts were made in total this year by five teams:

Tencent Security Team Sniper (KeenLab and PC Manager): 3/3

360Vulcan Team: 1.5/2

JungHoon Lee (lokihardt): 2/3

Tencent Security Team Shield (PC Manager and KeenLab): 1/2

Tencent Xuanwu Lab: 0/1

Impressive.
The list (and book) was written by a guy who suffered from his financial dealings with Standard Oil and he is essentially explaining how they were able to get him over the barrel. It is a very cynical list.
Pointer casts in C (alignment, casts, and undefined behavior)
You're surprised a plugin has 1 less vulnerability than an entire operating system?
> Economics is such a complicated system that the expert opinions have long been biased toward the 'opinion' side

> A physical model of network effects that presents phase transitions gives us a view into the underlying reality.

Here, imperfect mental models (aka opinions) are replaced by imperfect computational models. There's nothing inherently superior about this model just because it has been translated into code. It should be regarded as a tool to understand the consequences of the assumptions that went into its design. If those assumptions are unsound, the model is unsound and will not reflect real economic systems.
The fact that there is only one commit is a bit disconcerting. It suggests that they edited, debugged, and modified the code "offline" until they felt it was "good enough" to share, so whatever revision history there was when the paper was being created, revised, and submitted, is lost.

Obsessions with code history are a little disconcerting. It's interesting to see, but has little relation to the quality of the paper (or the code base, for that matter).
I feel like in our present age SEO is vastly overstated.

Google at one point gave you a lot indicators to which pages people were landing on and why. Now all that information isn't shared with site operators, so it's impossible to qualify statements like "internal searchable interface lead to more Google search traffic".

Maybe it was true previously, maybe it was true even last month, but is it still true with the latest Google update---no one can measure.
Quibbles:

* You're right now fine with 2048 bit keys. The thing that jeopardizes 2048 bit keys might end up knocking RSA out entirely.

* There's really no point to fail2ban if you disabled passwords for SSH, and doing that is much more important than fail2ban.

* The checklist item for password security should make it clear that you need a password hash (PBKDF2, bcrypt scrypt, Argon2), not just a "hash".

Given the context, the only big thing that's missing is HPKP.
How much in taxes are people at the bottom paying?
Microsoft filed for a patent to detect number of people watching video on a console:

http://www.wired.co.uk/news/archive/2012-11/07/microsoft-pat...
There's a problem with viewing security as a "checklist" problem, it treats everything as binary, black or white problem/solutions. In reality, this is _far_ from the case. For example:

> Is TLS1.2 the only supported protocol?

Do you know what the implications are from actually implementing that? One probably should do additional research before making that decision.

> Have you ensured that your content cannot be embedded in a frame on another website?

X-Frame-Options isn't the only way to achieve that.

> Have you ensured that the Internet Explorer content sniffer is disabled?

This really is only relevant if your site is hosting untrusted content.

> Are you using fail2ban to throttle ssh login attempts?

> Have you disabled password-based login over ssh, and only allowed key-based login?

The first really is of debatable value if the second is also used.

> Do forms set a cross-site request forgery cookie?

Cookies are not the only way to do this. More common, in my experience, is including the csrf token in the dom (either in a form field as a "hidden" input or as a meta tag)

> Do you have an account recovery flow? Delete it immediately.

Lol.

It's a great checklist for someone who knows what every item on the list is and more importantly, _why_ it is on the list - but it is not something that should be blindly followed.
> a good idea to compromise a bit of privacy and convenience for the sake of security

Wouldn't using Chromium instead of Chrome get around most of the privacy issues?
I had a theory this was what caused me to feel really sleepy when attending lectures. Wasn't sure how to prove it, though of course it could make sense with the right figures plugged in.
Your failing monetization strategy is none of my concern. Run a Patreon or allow me to donate once every while instead of potentially hurting me psychologically. If you hold the opinion that i have no right to your ccontent without paying, use a paywall or similar. But your suggestion that I have no right to something is utter hogwash. Where are your basis for such claims? Where have I signed anything regarding this?

People calling out others and saying that another person has no right to this and that is nothing but forceful catering. You see others live happily and call them out on it. Go live in the pit of your misery if you will, but cease telling others what they can or cannot do.