skysight-inc/HackerNews huggingface dataset:
you should do better than picking on them for saying "military-grade cryptography"

Have you read Schneier's "snake oil" post? It's all about "how you can pre-judge products from their advertising claims" -- Schneier's words, not mine. You see a classic snake-oil claim, and you immediately know that they're getting stuff wrong.

it's been a long time since someone found an OpenSSL flaw that would move the dials for an attacker in a basic one-way-authenticated SSL session

The great thing about SSL for an attacker is that there are lots of ways to attack it. Do certificates with NUL characters move your dials? How about a certificate which is forged by exploiting an MD5 collision?

There's a reason every business book in the universe says not to disparage competitors.

I think you've already established from our past conversations that I'm a really crappy businessman. I didn't write this post in an attempt to steal ZumoDrive's customers -- most of them wouldn't be able to get Tarsnap installed.

I wrote this post as a security guy, because ZumoDrive's smug "even Cylons won't be able to access your data" attitude annoyed me. I hope you'll agree that I know something about security and cryptography and am entitled to speak from that perspective.
I feel for the guy. At least he tried to put a spin on the "argument" that your startup should use metrics to make decisions. We're gonna beat that horse 'til its dead.
The real question in my mind is whether the book provides attribution to Wikipedia as the source. If not, and if the book's contents are literal copies of the wikipedia article, then Wikipedia may be able to have the book(s) taken down because the attribution clause was violated (and thus the license). I've not looked into the Amazon listing enough to know whether that's the case or not.
Why is cursory usage of sed and awk hacker news?
Details at that scale are pretty irrelevant to you.

Sorry, but [citation needed]. Penrose, for one, thinks details on that scale are the essence of you.
And yet by doing so, he sells the video. Unless we see another article pop up in the next few days "selling the video," I think we have to assume this was it.
I was disappointed to see that it was $0.99. I expect something a little more functional, like a game or something that lets me play with the parameters for $0.99.
Should I have said "historical"? I am not placing a value in that statement, I am just saying in something short of an essay how we got here. What exactly do you think the origin of marriage is or for that matter religions focus on marriage if not on reproduction (be fruitful and multiply)?
I believe that such test suites would rival the complexity of the practical implementations. Reference implementations sound nice, and may work well for small things, but become large engineering efforts where they are really needed.

What would a reference implementation of a Linux distribution look like, for example?
that are just code examples how to use the provide interface, not real debuggers and not a description how a debugger should work.

1.4.3 Sections Not Formally Part Of This Standard

'Within the concept sections, subsections whose names begin with the words
``Note'' or ``Notes'' or ``Example'' or ``Examples'' are provided for
illustration purposes only, and are not considered part of the standard.'
One reason why I am likely it discount an argument that starts with calling something fascist.

The word has been so misused as to be parody now.

They may as well amend Goodwin's law.
If I was still going to school, i'd get on Chatroulette and ask people for answers to my homework.
I don't see this as a cat fight. People using online backup services are being sold "security". Not all users care about, much less understand, security to the extent that user of tarsnap do, but users should know if a product's marketing matches the reality of the product. It is common in most industries for a competitor to point out these gaps.

Colin provided a tasteful opposing argument to ZumoDrive's marketing, IMO.
A Libertarian Convert to Socialized Medicine
I was a physics undergrad at a very hardcore school, and I can tell you that I wasn't even remotely close to being able to do physics research upon graduation. Even after taking two years of full-time grad classes, I considered myself (and my fellow student) somewhat unprepared to choose a research field, much less do independent research.

Part of this stems from the fact that US undergrad degrees are much broader than in Europe. My understanding is that European undergrads specialize in a topic day one, whereas US undergrads take at most half of their college classes in their major.
Yes they do, that is true however I was assuming the value proposition for onlive involved greater/cheaper access to games and not simply the low hardware requirements.

xbox live is also much cheaper and isn't required for single player games. An xbox arcade is 170.00 dollars new - the same price as 11 month of the onlive service and you don't have to maintain a subscription to keep access to the games you have bought, yet you have the same advantages as onlive in terms of not having to upgrade your hardware every year to play the latest game.
GDB 7 has supported going in reverse for few months now: http://www.gnu.org/software/gdb/news/reversible.html
Spotlight failed on e^2...

Pretty cool, though. I've long known about Spotlight's dictionary definitions, but had no idea it could perform calculations.
Tomboy madness
I don't think serverside AES encryption is a big win for security at all. But that doesn't make Zumodrive "insecure".

Yes it does. The word "insecure" needs interpretation, of course: insecure against which attackers? The only sensible answer is "insecure against the attackers they are attempting to defend against" -- and for that purpose, encrypting data on EC2 prior to storing it on S3 is completely insecure.

If ZumoDrive had said "we don't encrypt data on the server, because we trust Amazon", we wouldn't be having this discussion; it's the fact that they identified (through their actions) people-with-access-to-data-on-S3 as an adversary they want to defend against which qualifies this as insecure.
Extracting sound from a video clip
The most expensive equipment is needed for flexibility and for general research, for narrowly focused problems you need much less, and less capable, equipment.
indeed. seems like author himself didn't learn the lesson he tries to teach.
Set Gmail as the preferred email application in ubuntu
US online ad spend set to overtake print
I think the book would definitely become a lot more interesting that way.

Chapter 1: Stacks

Chapter 2: Reverse Polish Notation

Chapter 3: Australia

Chapter 4: Penal transportation

Chapter 5: Slavery

Chapter 6: Prostitution

Chapter 7: Pornography

(and I wasn't even trying)
Steve Perlman: "The Process of Invention: OnLive Video Game Service" (vid)
>first calculator should have made his product look as much like an abacus as possible, so he wouldn't confuse the new user.

No, he should have made it look as much like a calculation sheet as possible, and he did (calculators were made for accountants initially). The point was that you should use the interface your user expects, unless you are attempting to fill a demand that hasn't been met.

>And saying new users can't grasp the way a proper computer calculator works mean you didn't try hard enough to explain to them. It's really taking the easy road.

It's not. Saying new users 'cant' grasp it would be insulting - it would be much more accurate to say that they don't have the inclination to. If I'm going to use a tool once per month on average, then a slow, clunky interface is far superior to a faster one that I don't know how to use yet.

>There should be an interactive walkthrough mode in every packed application in windows/osx.

That would be useful in a lot of cases, and we're starting to see more of them now that producing video isn't so damned difficult. But they still take time and effort to read; they still make demands on the user.

>it's actually very painful to use such a calculator on a computer.

'Painful' is a perception. It's painful to you, because you're used to something else - it is blessedly familiar to my grandfather; it was the only thing I showed him that didn't need explanation.
Is porn good for us?
I'm not talking about the examples. The normative parts of the standard do talk about a debugger.
I've just purchased my first server from Leaseweb as well (spoke with Robin too) and the deal is pretty nice considering the quality of bandwidth is supposed to quite good with Leaseweb.

The majority of my servers are with OVH though, they're not known for quality support but their prices are pretty low and do have a good control panel. However I guess it's best to find a server that suits your needs.
That's an interesting idea. I saw that thing earlier today where someone built a Wikipedia Trends.

Anyone know of other interesting uses of Wikipedia?
Where are they located? Are there benefits to the location, such as fair treatment of IP disputes? It would be nice to have a server hosted in a place where the ISP only unplugs you after a court decision, not before.
I've never been tempted to type "LOL WUT" until now.

I have been willing to pay for printed copies of freely-available digital material. I bought Dive Into Python 3. I even bought a pair of Lulu-printed copies of Why's Poignant Guide to Ruby.

Repackaged Wikipedia articles, however, is pushing it a liiitle too far. Especially given the price. Especially given how unclear the listing is about what's even in there (as Psyonic said, the stack article doesn't fill 144 pages).
Ask HN: How do I avoid the Second System Effect?
I've been a developer for 4 years, I've personally seen myself suffer form the second system effect at least twice. (2 different systems) I'm on a project now, doing a specific large task... for my second time. I have several ideas on how to avoid the mistakes of my first try, but i'm worried its too much. Any tips on how I can avoid going overboard, but still avoid the mistakes from my first attempt?
I wasn't comparing ZumoDrive to Tarsnap (except in the very last paragraph). I was comparing ZumoDrive to their own propaganda.
I have been head down looking at the server technology I want to use in order to help scalability of the application. If it is a powder keg I want to be ready.

I have also been working on use case and domain models, and layout design. (and checking HN obviously)
> People are resistant to sudden and dramatic change. Small changes over time often go unnoticed, like the proverbial frog in a pot of boiling water.

This is true, but the physical calculator interface is so old that it would take decades of careful enhancement and deployment to move its users up to a modern interface. Most of its users just want to multiply large numbers, or add a column. The word processor is a great example of the incremental interface changes you describe though.
Because of the ignorant, media-fueled misuse of "hacker", I have begun using the older term "tinker" again. As did Ed Felten for his well-established blog http://www.freedom-to-tinker.com/ .
You're talking about his quantum tubules theory of consciousness. Honestly, I think it's coming from the same emotional agenda that made Geocentrism and later Vitalism so popular. It's just the latest philosophical secret sauce.

Besides, that's just trying to explain qualia. Pretty sure no one thinks memories are quantum phenomena.
Curious. I thought of getting numbers to check rate of growth, if any.

With the default 'Relevance' sorting, it's 17,761 (as of 18:44 WET, today).

With any other sorting, it's 13,962.
Hayden Decided to play on Mongoose bat
Sed is actually Turing complete. You'd never want to do it, but you can.

It's in the same class of things as the BASIC interpreter written as troff macros, really.
Following both Colin's client-based design and Thomas's insistence on off-the-shelf crypto would have been possible and straightforward. Generate a PGP key pair for each client, encrypt/sign the data with it, then upload it to the service.

I'm not entirely happy with gnupg's security record either (it's better than OpenSSL, but not by far), but if you want to use off-the-shelf tools then I agree that this would certainly be much better.
New Trailer GT 5 “Nights”
The best way to avoid the second system effect is not to build the second system.

Stupidly obtuse, but nevertheless a simple truth.

http://www.joelonsoftware.com/articles/fog0000000069.html
Good deal, amazing it sold as much given how bland the cover is.

I expect they already have an audience and a reputation and didn't have to deal with getting noticed on a store shelf.
Recommending that developers implement their own cryptography after watching you talk for an hour is pretty close to professional malpractice.

You should hear my talk before you accuse it of constituting professional malpractice.
>start up that very calculator to do some quick calculations.

I suspect that had more to do with purity of work flow - I often open up a second python shell to do math in so I won't have to scroll the stuff I'm working on off the screen.

>I also believe that metaphors can sometimes continue to live past the time they should be expired due to sheer laziness.

How so? It's obviously not laziness in this case - there are dozens of alternatives developed, and Apple is particularly good about making conscious decisions about interfaces. I can't debate that statement in the literal sense (obviously they "can sometimes"), but I don't think it applies here - they left the calculator app as-is because presenting a familiar interface to the majority of users is more important for their experience (and therefore Apple's bottom line).
Stack (data structure)

Computer science

Internet

Pornography

Bam!

Regardless, the assumption that pornography would be in every book assumes that you don't cluster the data to topics with strong clique behavior and normalize the data to remove overly-linked (aka obvious) topics.
If the point is that a data-driven approach is more suitable towards "web developers" (in general, or whatever subset the article is referring to) than a visionary approach, then a more appropriate title could be "Why web developers have more to learn from Google than from Apple".

In the end though, it's just a lot of hot air. There are a million ways to make money, and a billion ways not to. You just have to figure out how the particular skill sets you have on-hand can translate to a one-in-a-thousand business model that works.
FingerWorks technology became the iPhone touchscreen.
That would be great. I'd love to see what you're doing. I want to build a small dashboard for at home for personal things and I'd really like to get one up for my company as well. It would be really good for everyone to be able to 'see' when we are productive or not.
One way is to adopt iterative development practices that focus on customers actual needs and not just desires. The first system should evolve to meet any unmet needs of the customer. Rather than trying to build a bigger and better second system.

In summary: small, iterative releases with direct customer feedback on needs.
Ask HN: What is the name of this font?
http://blog.perplexedlabs.com/

I like the font used in the logo (the "labs" part) does anyone know what the name of that font is?

Tnx,

BJ
Betaworks is a conglomerate of web applications: http://betaworks.com/work/

I like their About Us presentation: http://betaworks.com/about/ (made using Prezi: http://prezi.com/)
That would be a very bad move and very un-Apple.

What is a user supposed to do with that sort of notification? When I launch a program, I mean to run the damned program. I don't want to be told "I can't run this, go close something else first." This would be a huge step backwards in iPhone OS usability.

I don't care as much about background apps such as Internet radio streaming (sorry, especially since Pandora isn't available in Canada, I really can't care; I found that when I could use last.fm I didn't use it that much, either, which is why I didn't subscribe—there's no value in it for me). I suspect that most phone users don't, either.

I'd be much more interested in a better notification queue, local notifications and alarms, and things like that than the ability to run programs (like Pandora) in the background.

I'd be much more interested in an API to allow searching inside an application's data than running programs in the background.

I'd be much more interested in quick ways to switch between two or three programs that I use regularly without having to go to SpringBoard than running programs in the background.

My needs aren't typical, but I think that the need to run streaming audio programs in the background is, for now, even less typical.
Virginia Tech used to do that, back in the late 90s. 99% of people didn't know that, so when you initiated a direct connection via IM (or ICQ back then) you could find out all sorts of fun information.
It's kind of disheartening that an investor wouldn't recognize that having a huge gap between their utility function and the founder's utility function is a bad thing.
it is not even explained what a debugger is. The glossary has two sentences that uses the word 'might' to describe possible functionality. The documentation of INVOKE-DEBUGGER and the debugger hook just describes how the thing is called. What it is and what it does is not described. Is it a REPL? Does it have any commands? What does it print on entering? How are restarts presented? Are restarts presented? What functionality does it provide? Can I get a backtrace? How? I don't see anything like that described.
That doesn't have near enough abstraction layers.
The calculator app is much more intuitive than some text app for general users, just like the finder is much more intuitive than the terminal.
Isn't Mac POSIX-compatible too? Mac and Linux adoption combined are growing at 20+% per year.(today: 11.7%, last year: 9.7%, The year before that: 8%). Those are not new customers being acquired by the OS market, NO, that's customers being taken from Microsoft in an already saturated OS market. They are losing customers to Linux and Mac, and this is how they put a good face on a bad situation.

This is according to http://www.w3schools.com/browsers/browsers_os.asp of course
Yes, it's a very good thing.

Guys, I'm an emacs lover. I was just trying to nullify the argument against Soulver that the parent brought up by making an analogy to emacs which also has most of the functionnality hidden and yet is super great.
Venture Firms: Bigger Buzz or Bigger Funds?
The specific bug you mentioned really was the result of writing/choosing a bad D-H library. But, I agree with your your point that, even if you have a security expert on board, you are likely to make mistakes.

If Tor would have used an off-then-shelf D-H implementation that already performed that check, it wouldn't have had the vulnerability. It is definitely easier to pick a TLS implementation that is unlikely to have such flaws (now)--just pick what lots of others have been using for a long time. You could do the same with crypto primitive implementations, but you run into problems because the interfaces for different libraries are all different, and in particular the preconditions and postconditions of various operations might be different. So, user of a crypto library has to fully understand all the details in order to verify what is his responsibility and what is the library's responsibility. It would be great if there was a specification that specified what every D-H implementation must do, and what the user of a D-H implementation must do to be safe.

Actually, a similar problem exists with TLS. Right now there is a draft TLS spec. that attempts to standardize how TLS implementations check a server's certificate against the server's domain name. Since there's no standard way of doing it, its harder to verify that a given TLS implementation is actually doing it the right way. And, actually, this is something that OpenSSL and other TLS implementations punt on and force the application to deal with manually. As I'm sure you've seen, lots of applications actually don't even check at all!
It's hard to find advice on this because no one really knows. You're getting into relatively unexplored territory.

One thing you might consider is applying for Peace Corps (or some other volunteer development agency). What you end up doing may or may not be directly connected to CS, but it will put you into an environment where you're dealing with application of specific knowledge to practical situations. Think of it as a social justice internship. You get good professional networking out of it too.
I switched from Python to R as my calculator of choice for this reason.

I only recently discovered that there's a lot more to R than intuitive division of integers ;)
There are far too many factors at play to attribute the increased sales to such a small aspect as video embedability. However the label certainly appeared to be completely braindead in this regard. What harm could possibly come from allowing embeds?
Whenever I see a little Mac app that's apparently quite popular and has a price attached, I can't help wondering why nobody releases a Windows version with the same price tag.

Proven market + 20x customer base = potential success?

Note to whoever jumps on this: Do it with Omnigraffle first. I'll buy the first copy!
I think it's Freestyle Script.

http://new.myfonts.com/fonts/adobe/freestyle-script/
I don't think it's the same question - the function of a PhD for science researchers is very different from the MD/residency for surgeons, which is actually very different from the function of a JD and the Bar for lawyers (lawyers don't go through anything like the apprenticeship a surgeon goes through to become licensed, and a PhD generally doesn't provide a license to do anything).

Also, keep in mind that many people believe that the Bar and AMA are actually large scale cartels that do more to harm the public than good. This isn't necessarily an argument that credentials and licensing are bad per se, it's an argument that the scarcity of services causes more damage than the dilution of talent (for instance, nurse practitioners might be able to provide a very high level of service in areas where MD's currently enjoy a monopoly). I'm one of the folks who are frustrated with the cartel-like behavior of professional associations in the US (and elsewhere), but there's obviously a wide range of opinions on the subject - some think they should be essentially abolished, others think they are fine in principle but need to be reigned in to ensure that "protecting the public" doesn't morph into "protecting the cartel."

It's controversial, of course. But you might be interested in reading Milton Friedman's essay on the licensing of Medical professionals (just google for it, you'll find it quickly). Regardless of whether you agree with it, you'll probably find it interesting.
I worked with shanked on the prototype. But mostly it was all his work. We picked up again this week.
They're in Europe, specifically on an industrial area close to the city of Haarlem.

Leaseweb has historically hosted a whole bunch of 'controversial' sites, they've stood by their customers as far as they can but of course they do have to abide by the law.

See here for instance:

http://torrentfreak.com/leaseweb-forced-to-shut-down-more-bi...

Here is their DC from above, it's got to be an old picture because there were a lot more gensets when I was there last time.

http://maps.google.com/maps?f=q&source=s_q&hl=en&...
I agree that it is not specified in detail. I disagree with your assertion that the standard "does not specify the presence or absence of a debugger." A debugger's presence is specified. Its behavior is not.