skysight-inc/HackerNews huggingface dataset:
>Honestly, when you look at a lot of startups, nothing they do is even remotely difficult.

What do you consider difficult? Maybe it is because I am just a fresh-faced new grad, but I think there's a lot out there I would find hard to do, even with languages and frameworks aside, unless I trivialize it by thinking "oh that's just an application of solved problem X" or "it's just a lot of statistical plug-n-chug".
Actually, I have never seen that before but I'll claim it! Haha
oh, unless it's all via Periscope (owned by Twitter)
Do you mean this? http://www.reuters.com/article/capital-one-fin-insidertradin...

In which case, no.
Messy for Uber? Unless they've been discriminating against drivers by race themselves they're in the clear.

If driver race-rating data was ever publicized it'll be most damning against society in general, I think. I'd wager that Uber's passenger base is substantially more discriminatory than the company can hope to be on its most evil day.

The 5-star rating system is cover for a lot of things that I think everyone knows to some extent but doesn't enjoy thinking about.
That bugged me too, although it was such a fun article I didn't want to complain. :-)

What he really means is that his first snippet is the identity function. Like x*1=x or x+0=x. Whatever it gets, it passes along unmodified. I think it's actually kind of nice that he started with that. Sometimes it is not easy to figure out how to do, for instance with XLST.....
This may work nicely for a subscription business where you have 2 weeks to identify problematic orders. But what about everyone else? Should we silently fail on orders where a customer accidentally mistyped their CC#? Imagine all the extra work involved when you could have had them fix it on the spot.
Ricochet appears to rely on Tor's encryption, with an additional custom RSA handshake. That's two added levels of "nope" for me, but other people might feel differently.
WhatsApp allows you to verify keys. Apple doesn't. This makes a pretty big difference.

Also, iMessage's crypto protocol is cryptographically broken. It's been patched together in ways that prevent the obvious attack, but don't actually fix the underlying issue. Doing so involves replacing the protocol. In the mean time, those patches are not fool proof and someone may get around them.
It bothers me that the options for office are untrustworthy career politicians who lie and corrupt their position or naive single issue ideologues who understand too little and expect too much. I kind of wish politics was boring. Just vote for the boring candidates who know how to do their job and are happy with an average salary. Bureaucrats, but competent ones.
The client has access messages in clear text. A backdoor could easily deliver those messages to a third-party, yes.

This is not something E2E protocols can protect you from. You'd have to audit every piece of firmware and software on your device to verify that's not happening.
Also this quote from the book Zero to One: 'Max was able to boast, grandiously but truthfully, that he was "the Sherlock Holmes of the Internet Underground"'.
What's wrong with announcing "we don't approve and here is your punishment" of bigoted laws.

Many a company did not work with or in South Africa during apartheid for the same reason.. Was that wrong of them?
"Electric cars get cleaner every year because of this. Gas cars will always burn gas their entire life."

This might be true in the future but we aren't there yet unfortunately. This is due to the incorrect assumption that natural gas is a clean bridge fuel. Once you take into account the methane emissions/leaks from natural gas you end up with a fuel just as bad as coal and oil from a global warming perspective. This is due to methane being very dangerous greenhouse gas in the sort term (now - 100yr time period). This plus the emissions required to produce any consumer product like a car probably means for now electric cars not much better than a traditional gas car.

The only way to make these cars truly emissions free is to remove ALL carbon based energy from the chain. That includes car and battery production, charging, maintenance, and disposal. Until you do that your just switching the source of emissions around. The climate system doesn't care if the greenhouse gas comes from a car or a power plant.

The best thing we could do in the short term until we have a 100% green grid is to hold off on buying the car and walk/ride a bike :)

http://www.thenation.com/article/global-warming-terrifying-n...

http://onlinelibrary.wiley.com/doi/10.1002/2016GL067987/abst...
The last digit of a credit card number is a checksum, so it can catch most of those errors.

See https://en.wikipedia.org/wiki/Luhn_algorithm for details
Well that explains why this is still the same.

http://vevo.ly/qqqDbL
"And the US double taxes their citizens living abroad the same way."

Except they don't. You have an exemption for foreign income.

"It is even possible you have never set foot in the US yet are required to pay uncle sam's taxes."

I don't believe this for a second. You would be a US Citizen, therefore you would have stepped foot in US territory.
I just want to make sure I understand your comment... are you saying that illegal and distasteful acts are OK as long as they have interesting / poignant documentation?
Matrix uses the Signal protocol for encryption as well, if you want a fully free implementation of the same tech.

https://matrix.org/git/olm/
It's always an option to run a relay or bridge, with no exits at all. That's still helpful:

https://www.eff.org/pages/what-tor-relay
But what if you weren't even born in the US, much less have ever set foot in the US. Do you think it's fair to "pay a toll" when you're working in a foreign country?
This also applies to customer service. Nice customers get fast response times. Toxic entitled customers (especially of the free plan) wait 2-3+ days before getting a response.
The examples in the original Christensen book are a bit different from that scenario. As far as I remember, they're all about products in a lower market segment gradually moving up into a higher segment: 5" hard drives become good enough to eat the expensive 8" drives' market, initially weak hydraulic excavators gain enough power to compete with cable excavators, etc.

So in the car example, this interpretation of "innovator's dilemma" would mean that something like electric Smart cars would gradually encroach on Mercedes' luxury market. Clearly it hasn't worked that way -- so that suggests that consumer cars are fundamentally different from excavators bought by businesses.

(I know that Smart is actually a Mercedes brand. I have a suspicion that the huge investments that Mercedes made in Smart around the turn of the millennium were motivated by Christensen's theory so much in vogue at the time...)
If you go to Settings -> Account -> Security, you can enable the option that will notify you in case the key changes.

You do have to trust the client and opt in, but the feature exists.
Why not just refuse to do business with Vietnam, Nigeria, Russia, and other fraud havens entirely?
I suppose you're correct about the terminating newline case, in that the newline is only added once. I'm not sure what you'd call it, but I'm talking about it as if it were a kind of idempotent 'base case'. For example:

If you do

echo -en "" | ( (vim - -esbnN -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | xxd

versus

echo -en "" | ( (vim - -esbnN -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | ( (vim - -esbnN -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | xxd

These will the same output, so it is idempotent. However, if you build upon that and do

echo -en "" | ( (vim - -esbnN -c '%!xxd' -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | xxd

versus

echo -en "" | ( (vim - -esbnN -c '%!xxd' -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | ( (vim - -esbnN -c '%!xxd' -c 'w!/dev/stderr|q!' >/dev/null) 2>&1) | xxd

The result is not the same, and therefore not idempotent if you plan to add extra -c commands.
"Therefore judgments are enforced without the consent of the people."

That's not true in the least.

"Therefore taxation in the USA today is extortion."

That's even less true.
Really? How so? I can understand from scale perspective, but is it more secure than Telegram?
... What?

Cost of living index compared to San Francisco according to WolframAlpha:

Seattle -20%

Phoenix -42%

Austin -43%
WhatsApp uses a shared identity across text and voice, so Signal Protocol is used to secure both connections.

We've long planned to do the same thing in Signal, but WhatsApp is ahead of Signal here. Axolotl is now called Signal Protocol, btw.
Segwit is a softfork, but it's far from the first. See https://www.reddit.com/r/Bitcoin/comments/2y4mq2/list_of_sof...
And if you found that interesting, you'll possibly find this slideshow, a 2012 presentation by Brad Antoniewicz of Foundstone, interesting as well.

* https://github.com/brad-anton/VertX/blob/master/Attacking%20...

"Linux on a cris". Passwordless regular user, no shadow passwords, root with a crackable password, and a telnet server enabled.
how do you know it's secure other than what you read from the press release?
Re: software... So the first time you get in it the A8 has a zero to 60 of 20.4 seconds? That sounds about right.

I drove an A4 for a while and the gas response was absolutely terrible. You had to press it gently if you wanted it to respond immediately. If you gunned it or even just pressed a little quick to get across oncoming lanes -- expect about a half second delay. One of the worst cars I have driven. Taking it to the dealer the response was -- "that's normal". My boring ass accord responds to the gas pedal better than the A4. Maybe their higher end cars are better, but I wouldn't get another audi.
Maybe just track the employees and their ages? Objective enough?
Link to https://www.aerobatic.com/ which now supports Node. I'm too lazy to switch from GitHub Pages though.
Space Jump
Iceland has a population that is less than half - nearer a third - of the city I live in. On that smallish scale, direct action by a significant number of people carries a lot of weight I imagine!
(Sorry if I am reading too deep into this)
There are Mediterranean Greeks, Italian, and Spainards, and there are "White" Greeks, Italian, and Spaniards.

(Pardon the invocation of Godwin's law here) When Hitler envisioned his Aryan race, a source of influence was the classical "Athenian Greek." (Another random tidbit, as the story goes, he had such respect for the Greeks, it was with great reluctance that he invaded /greekpride ) Many Greeks still have Blonde hair, blue eyes, and hardly any hair, like my mother and her side of the family. Compare that to my father, who is from an island in Greece, we are basically darker than most Arabs you meet (and indeed thats how I came out. I am more easily passed as an Arab, specifically an Egyptian at times)

(To continue on my random tirade, sorry) If you basically draw an oval around the Mediterranean, from the Greek Islands, Sicily, to parts of Morroco, and such, you could basically pick a few people at random and we would all look related like brothers or cousins to most Americans.

And yes I am one of those crazy people who advocates Mediterranean as a different race than "White." All my life filling out forms, and applications, and throughout schooling, I had to mark down "White" and feel as if I was fraudulent. I am not sure what exactly the US uses as its criteria for a "race" but we are as different from a Anglo-Saxon, Western European type as Native Americans are. We have our distinct features (usually big noses, pronounced foreheads, and lots of hair!), share common values, and even have our own diseases!(see Mediterranean blood disease)
Ask HN: Cost/time/obstacles for developing a modern, fast MIPS64 board?
With the recent discussion about x86 and other non-open platforms (https://news.ycombinator.com/item?id=11422531) I was wondering how feasible a (free/open) desktop-capable MIPS64-based single board computer project would be. Commercial success/viability is not a requirement.

PINE A64 raised $1.7m via kickstarter, but it's a low-power SBC and I can't tell how this amount relates to actual development/prototyping costs. Many companies have their own (not so low-power) MIPS64 hardware (e.g. http://cavium.com/OCTEON-II_CN68XX.html) and there's even an old university project that designed and locally manufactured a MIPS board (http://www.cse.unsw.edu.au/~cs9242/asyst/) so it's not such an unreasonable idea, I hope.

Can any experts please share their insights and come up with an estimate for cost/time to develop e.g. an 8/16 core MIPS64 SBC with DDR4, PCI slots and other workstation board features, up to a working prototype stage? What would be the biggest obstacles?
Ah, the joys of Gettier.
How Software Gets Bloated: From Telephony to Bitcoin
> Whats App allows you to verify keys. Apple doesn't. This makes a pretty big difference.

Does it? It allows me to verify a key. It doesn't give me any ability to control what other keys it's working with.

This only helps me to make sure that the message I just got, I actually got from the person it's claiming to be. It doesn't give me any other protection though.

I agree about the broken iMessage crypto and I hope to see Apple upgrade the protocol in a future OS release. With their quick uptake of new OSes, a fix could propagate relatively quickly.
You can push up a series of commits, but each one is it's own code review so you want to do it less often. Another thing is if you have to add something to the HEAD^^ you have to rearrange your history and squash things together, but in the end the history is really clean. Also, each push of of each commit is versioned so you can easily tell what has changed between the last code review and the current; this is impossible with GitHub if you want to keep your history clean and compare different versions of the code review.
APT6 compromised the US government networks for years
I implemented the native OS X notifications in Firefox/Gecko some years ago. The native OS X API limitations were pretty frustrating (at least at the time, iirc), just didn't line up with the Web APIs all that well. Not blaming Apple, they weren't designing with our use cases in mind, just saying I can understand Google's temptation to avoid integration in order to retain control.

In the end it's a tough call about what you value more.
where was this line? I was around when 95 came out and don't remember that much excitement. Also in this case people are parting with a $1k for years just to save a place in line. Has that happened for any car before? that's what's unprecedented.
They sign NDAs for the process and get 100-thousand dollar layout packages for academic prices.

If you have a few spare million dollars, you still can't necessarily release a lot of data due to the NDAs - usually they give you models for the processes that are proprietary (and they invested a lot in developing, and so will consider any breach an act of war).
Which philosophers? The only one I've read in any depth is Aristotle, and while he is clearly very smart, I agreed with essentially none of it.
Whatsapp is often held up as example of a very successful company that has a handful of developers.
Signal's stuff is all GPL'd (AFAIK). Does this mean that WhatsApp's clients (and whatever else would apply) are also released under the GPL?
How not to suck at LinkedIn messages
> It had to have 5 stars in the 3 major categories.

Every vehicle I care about seems to have 5 stars in all categories. Safety of modern vehicles is exceptionally better than even just 10 years ago. You can achieve 5-stars in the original three categories with a $15k Honda Fit (Moderate front, side, and roof)

http://www.iihs.org/iihs/ratings/vehicle/v/honda/fit-4-door-...

> highest performance car ever mass produced

Take a look at Leguna Seca lap times. Model S isn't doing as well as "high performance" cars.

EDIT: Focus on the 1:48 laptime, the best one. It looks like it was a casual race for the most part. The 1:48 time however is a record not only for Tesla Model S, but for electric vehicles in general and should be taken as the "serious" indicator of the Model S's overall performance.

https://forums.teslamotors.com/forum/forums/model-s-laguna-s...

5-stars in every safety category with performance and cheap is like... Subaru WRX. Fords are a bit easier to maintain though, so I'd go with Ford Focus ST or Focus RS (and switch out the tires, because stock tires on that suck apparently)
I can see that but I think the self authenticating nature of Tor Onion Services and therefore bypassing bgp, dns and CA weaknesses is worth something†.

Maybe in the future when prop224†† is implemented the encryption will be more solid.

† https://media.ccc.de/v/32c3-7322-tor_onion_services_more_use...

†† https://gitweb.torproject.org/user/asn/torspec.git/tree/prop...
Sure, for that there is also colordiff.
Mysterious New Quantum State of Matter Discovered
I'd love an open-source appliance that lets me turn webhooks (and polling APIs) into a kind of pub-sub. Being able to inspect, modify, and run events would be an "immediately use this" feature set.

It would be something I would pay for to not have to host myself, but iff there's a clear migration path, i.e. it's open-source.
For some simple companies, this may be the right answer. However this grows in complexity as your business scales so don't forget about that.
By default, Telegram stores a plaintext copy of every message you've ever sent or received on their servers. WhatsApp does end to end encryption using the Signal Protocol by default, and doesn't store anything server side.
Isn't this illegal? Capital One analysts did the same thing and got fined by the SEC for it:

http://www.bloomberg.com/news/articles/2015-01-22/capital-on...

http://www.reuters.com/article/us-sec-capitalone-insidertrad...
> I don't think many parenting tips or guides ever speak in terms of training

Some of the sleep training for tiny infants is pretty brutal!
Yeah.... I am pretty sure he DOES know how e2e security works.
What's the incentive of not using TLS?
So in theory they could help by intercepting these keys and handing them to authorities without actually decryption the data themselves
You're right. So when you get a notification of a key change (for malicious or other reasons) it is up to you to verify that the user did indeed have a key change — preferably out of band, or at least over another medium.
It's a tiny country. I've been to rock concerts that had bigger crowds than that protest. (Estimates are 22,000 for the Iceland protests. Both Donald Trump and Bernie Sanders have drawn bigger numbers just to their rallies.)
I for one am still waiting for an actually useful electric car.

For reference, I currently have two vehicles: a 2008 Jeep Liberty and a motorcycle. The motorcycle is the commute machine.

The Jeep is family travel and hauling machine. The latter is the killer use case for a car for me. Recently cleaned out old furniture from my garage, simply opened the backdoor of the car, folded the rear seats over and loaded all the crap in. The car is dented, scratched, I don't care. A workhorse, at my disposal. Ski trips, bike trips, shit weather commute.

Where is the electric version of that?
McCrory campaigned as a middle-of-the-road moderate Republican. He immediately instead delivered on Tea Party values, and once the Republicans won a narrow majority in 2012, they gerrymandered the crap out of the state to cement their control. Not that I voted for McCrory in the first place, but I don't think anyone got what they were expecting out of McCrory, either.
What Hulk Hogan’s Gawker Lawsuit Means for Our Privacy
Yeah, an identity function is probably what I should be calling it instead.
Agreed! People who think copyright is some kind of actual human right drive me crazy.
Stipulate that Tor's encryption is modernized and drastically improved. I still don't think it's a good idea to build a messaging application directly on top of that, for some of the same reasons that it isn't a good idea to simply run a messaging application on top of TLS or Nacl. The service model and security requirements for a simple transport are different from those of a messenger.

That's what's so exciting about the WhatsApp announcement. WhatsApp is by all accounts a pretty great messaging application, and it doesn't just have decent encryption now; it has best in class encryption specifically designed to protect a messaging application, designed by experts who thought about this problem for a long time.
https://github.com/whispersystems/libsignal-protocol-java
Story of SegAnnDB – Fighting Cancer with Big Data Analytics
Life of an Indie App Developer: Marco Arment – Computerphile [video]
They claim to know how Tor works, which means his network is a _relay_, not an origin, and that by Tor's nature it would have no record of the file passing through, when it happened, or more importantly where it was from. Cursory knowledge of how Tor works would tell you that this was a dead end before they left the station. IMHO it's clear this is an attempt to try to hold Tor operators responsible for the traffic of the Tor network, and in so doing, dissuade people from operating Tor endpoints. There is no other reason for this action, it's good old fashioned scare tactics.
I can't reply to your other comment for some reason, so I'm replying to this one.

>If WhatsApp is so evil that they've backdoored their product

Unless they want to go the way of Lavabit, every company is evil when kindly asked to be. (Well, maybe it helps when you have the weight of Apple, but that wasn't even a NSL if we heard about it.)

>it is "supervillain monologuing for an hour while the hero escapes"-grade stupid to leave that backdoor in their source code.

And if they don't, a reproducible build process will cause someone to notice the binary doesn't match up and sound the alarm, somewhat similar to how a warrant canary works even if not everyone is checking it. (Sure, the company could always go back on their open source promise for other reasons, but at least everyone is left with a last known-likely-good inspectable and forkable version.)
Team members can also work in their own private branches that are pushed to a single repository - that's usually sufficient as a "backup".
That's basically the same thing as what I'm asking. I'll be happy to read the numbers when you get it going.
Cool. So FB/WhatsApp can't even decrypt messages themselves?
Do paywalls face as much fraud? My understanding is that industries that provide digital goods or services see a much lower rate of fraud because there's little resale value involved (and the cost of stolen/returned goods is much lower).
yep, just like that lol. No doubt the book is a great idea, but I always saw the "carbonite" option as a high end option. Books for regular people, eternity for those who can afford it. Anyways, best of luck with your service, it really sounds great!
PgConf.US Partners with Techie Youth for Annual Charity Auction
Similarly, calling thirty-somethings "old" is...maybe insensitive? I dunno, maybe it's ageist.

I don't know if I'd want to dignify it by calling it "ageist." But it's definitely a very callow, naive thing to say.
But it had a significantly better signal-to-noise (SCNR) ratio when looking for specifications, code and docs. The original "axolotl" term comes from a completely different domain, so it was easy to distinguish and filter for.

"Signal" in IT usually means UNIX inter-process communication.
Why would you not be able to use Github as a backup? Github keeps all the branches that are pushed to it, as any git repo.
Typing the wrong credit card number would be a legitimate error, not evidence of fraud. You can show that error. It won't affect how you deal with the actual fraud.
OT but https://whispersystems.org/workworkwork/ was great to read. I would definitely apply if I was in the market for a job.
Hip Hop is more than Rap
Well, people were able to figure out skype was not secure without the source.