skysight-inc/HackerNews huggingface dataset:
Who would accept it (at par value) under such circumstances?

Right. So, during the initial phase, all GD will be guaranteed to convert to USD when it expires because we'll literally have enough USD in our reserves. During this first phase, we will sign merchants to contracts that require them to accept GD at par with USD (i.e. one price) so a dollar is a dollar.

If there are people who happen to be paranoid about Greshm Dollar during that time, they will be able to spend their money to get rid of it. If they're not paranoid about it, they'll still probably spend it before they spend their USD because a dollar is worth more to them than something that will become a dollar in x number of days.

Then, later on, once we've established that GD is continually circulating and that our USD reserves are stable, we start increasing the supply of GD to be greater than our USD reserves. This process will be very transparent. Nobody will get screwed over. We won't make any promises to pay and then go back on them. For example, if we decide to only back GD at 90%, merchants can decline to renew their contracts.

It's all outlined in my white paper:

https://drive.google.com/open?id=0B2jhCMrrxoeONVNQTVd6NG5pNz...
I've referred to the USA lineup as popcorn TV. They are kind of fun shows with a little bit of comedy and a little bit of drama and suspense that don't force you to think too hard after a long day. Sometimes I am in the mood for something deep and dripping with intrigue (House of Cards) and sometimes I just want to lay in bed and watch something where it doesn't matter if I miss some small part of plot that becomes something big later (the shows you list).

I would add Royal Pains to that list. Cover Affairs was another one I enjoyed (I love spy shows and books) but is now off the air.
How to Setup Multiple Broadcast Receivers for Android Push Notifications
This is amazing!!! I am playing double dragon at work LOL
Meet the Girls Who Code in a Roxbury Basement
It's good to quickly grasp basic syntax so you can read code in unfamiliar language. However, I don't think that it's a good resource to properly learn language.

You will often miss learning the philosophy of the language (the $language_name way of doing it), the different way of thinking about the problems that the language provides and similar details, which are often not necessary to read a snippet of code, but you want to understand it in order to properly learn the language and make the most of it.

SQL is a good example of it. It might be trivial to explain the syntax of most common SQL queries, but thinking in relations and tables is not natural to most people so there's not much you can do with basic syntax.
Mr Ostriakov, a homeless man of Ukrainian background.

Somewhat doubtful that Mr Ostriakov is Italian, or from an EU member country. Very likely that Mr. Ostriakov had to illegally go to Italy to find work after Biden & co decided it was time to "liberate" Ukraine. Just a theory.
There's a third possibility not many seem to want to consider; he's telling the truth and it turns out the real Satoshi isn't the benevolent genius everyone imagined him to be. He's a fuck up con man.
RE WedWell: I think it's less about unique insight, and more about timing/positioning. Couples expect to communicate with vendors over the phone/text, they don't want to write paper checks, they want vendors to find them. We're doing a lot of things that do not scale right now, but doing our best to keep clients happy.

I will say that initial customer acquisition in NYC is our hyper focus right now. The great thing about opening this discussion up on HN is that there are so many minds out there looking at your problems. I'd be happy to hear any ideas on how to best acquire these clients initially. We're doing a bit of FB ads, and think this will be a heavy marketing lift. But as we monetize our first couple clients, we are getting a clearer picture of customer value.
I live in Canada so I always take health care for granted in these sorts of discussions. Knowing this, it should come as no shock to you that I also support universal health care.

What may be less obvious is that I also support universal education and in Canada we also generally have that, at least as far as K-12 goes. If I were a parent, my children would have access to the same quality of public education in a small rural town as they would in a rich area of Toronto.
Just be careful you're not ignoring the expensive parts of B2B businesses: sales/marketing/service, customer specific setup/integration/features.

There's a reason why other companies charge a lot and have "fat" orgs.

Also, "leaving money on the table" does no one good. Let businesses with budget pay you money. If anything, the money lets you improve the product for your customers - everyone wins.
Yes, that's been on my (long) list of things to check out.
As an african-american math ph.d. dropout, nice to know that 63% of people like me also didn't finish. Oh wait, it's awful. At least I'm not alone though.
Having written C for a living for about two years, I have to admit that a large part of me really likes C. But also, I would have commited unspeakable acts just to have a compiler switch to enable bounds checking, no matter how badly that would have affected performance.

Even when one knows what one is doing - or thinks so, anyway - these errors are so easy to sneak in and such a pain to track down. (Especially since we were using OpenWatcom whose debugger did not show useful data when the program crashed, which is usually the time one needs it the most...)
> Shutting it down for 100 million people not suspected or charged with any crime is an incredibly disproportionate, privacy-thwarting response to not being able to access user data in one criminal investigation.

What proportional recourse do you suggest when Whatsapp are effectively in contempt of court (in absentia)? In most jurisdictions, obstructing the course of justice usually has heavy penalties.
I don't think we're exposing native process semantics to WebExtensions, but the webRequest API can intercept and modify any request initiated by web content.

If this use case is important to you, please file a bug explaining your needs and/or fill out the survey at https://wiki.mozilla.org/Add-ons/Contribute#Improve_add-ons_....
The state isn't mandating anything. Store owners can physically prevent people from stealing their wares if they wanted to.
04/16 – The Best iOS Development Links
Oh, you are right and I am so wrong: for instance, people from the South of Europe are famous throughout the world for being as hardworking as the Japanese.

If you ever meet anyone from Dalmatia, ask them what their word "fjaka" means, then ask them why they have it...

And of course, terrorist is simply nothing more than a stereotype, because there is no pattern at all which could possibly correlate the string of terror acts. Those terrorists are actually Buddhists from Tibet, that's what those are!

How could I have been so wrong??? Horrible, deplorable.
Genuine question - could you please elaborate a bit on that? I sort of know what you mean, but I'm just an amateur. So the problem with large scale is creating algorithms that distribute and balance the workload on the servers, database access speed, optimal cashing, keeping 100% uptime, backup, separating different parts of the application and putting them on different servers, concurrency and solving the problem of simultaneous access to same resources? Anything else?
Exercising those rights is probably a non-trivial implementation detail.
The link you posted doesn't seem to work.

[How very convenient that the cutoff of adulthood is your own age]

I chose the number 25 because it is usually a few years after most people have graduated college and have entered the work force. The number 25 is used in many places as a "special" age. Insurance companies, rental car companies, hotel bookings, etc...

[you're going to insult vast numbers of functional adults, at least insult yourself in the process. Silly child.]

I don't know about your peers, but from my graduating class of ~1000, I would guess there were less than 100 who were completely independent by 23.

[First of all, you are in fact wrong. The majority of young adults do in fact live independently.]

I'll do some research on that.
Well, I still have a year left on my PhD, and I hope (with some reason) to get funding to continue after that. But I must emphasize that the language is still a little young and raw.
Not sure if I'm missing something, but does the padding oracle really have anything to do with the code being written in C?
While 2008 is somewhat old data, a cumulative 10 year phd completion rate of 57% sounds about what I would expect. That implies a cumulative attrition rate of 43%, which puts it within striking distance of say, the 75-80% attrition rate associated with Navy SEAL BUD/S.

The attrition rate jump around years 2-3 is almost certainly due to failing the qualifying exam, which in my experience is by far the largest eliminator.
Eh. I've spent almost a cumulative six years of my career writing code signing code. Both times I had only a couple of coworkers who understood everything, so most growth was self started. The larger project involved counter signing (signatures over signatures) and HSMs and was mostly my code, and I ran into a lot of people who knew words but didn't know what the hell they were talking about. I had to get very good at telling people "No, but..." because they always wanted to make decisions based on unverified data.

At the end I knew a lot about a narrow slice of security. I did not feel like an expert although I do feel like I got the job done (which in this field is very hard to say with a straight face).

I haven't touched that kind of code in 5 years and I'm not confident how much of it I could regurgitate under duress. But I'd like to think I'd know how to produce a signed document that's verifiable. If the key were stored someplace exotic (I don't recall how Bitcoin stores it's keys) that might be harder.

I would not be surprised if the real Slim Shady had trouble with it too, but it would cause me to wonder about exploits in the code.
Special Breakthrough Prize in Physics awarded for gravitational wave detection
Lilyhammer? The mafia and the Witness Protection Program have thankfully not become "ordinary" and "everyday." Certainly the main character tries to play the part of an everyday ex-pat in Norway convincingly, but the sustaining premise of the show is that he fails to do so.
Not as bad as seeing undefined behavior, suspecting concurrency problems and finally figuring out the clock on the chip wasn't working as expected. Squashing a hard bug brings a lot of satisfaction.
My understanding of the padding oracle vulnerability so far, mainly from the patch [0]: it's possible to make a "valid" message that has the pad length byte higher than maxpad (total_length - digest_length - 1) [1]. If you make it high enough, I think you'll push the offset used in the constant time comparison masks enough below 0 to entirely skip the MAC check [2]. But then your entire plaintext will have to match the pad byte to pass the check, and I think you can use that as a padding oracle.

In other words, constant time programming, which by definition means that you have to behave normally even if your offsets go negative, is HARD. (And when you don't put comments ANYWHERE, it's even harder.)

[0]: https://github.com/openssl/openssl/commit/70428eada9bc4cf314...

[1]: https://github.com/openssl/openssl/blob/70428eada9bc4cf31424...

[2]: https://github.com/openssl/openssl/blob/70428eada9bc4cf31424...

For the record, there is nothing Go or Rust could have done here. The bug is caused by having to write code that runs in constant time, by employing masks and behaving in exactly the same way irrespective of the pad value. If you want to blame the design of something, blame Mac-then-Encrypt in TLS 1.0.

See also The Cryptographic Doom Principle [3].

[3]: https://moxie.org/blog/the-cryptographic-doom-principle/

EDIT: Interestingly, this was found with TLS-attacker [4], a new framework to analyze, test and attack TLS libraries. Finding it was probably "just" a matter of sending a plaintext made entirely of the same right byte value, and noticing that the MAC check passes when it should not. However, so far we didn't have any tool or testsuite (which I'm aware of) to perform this kind of checks.

[4]: https://github.com/RUB-NDS/TLS-Attacker

IMPACT [EDIT]: to sum up, if a client uses AES-CBC to connect to a server with AES-NI support, a MitM can recover at least 16 bytes of anything it can get the client to send repeatedly, together with attacker-controlled data (think Cookies or such, using Javascript cross-origin requests).
> just switching to React.

That's what I did :)

I spent a whole bunch of time learning Angular1, was in a coma for close to a year after a bad accident, wake up and find my projects are all outdated and I have to basically learn a new framework. Decided if I was going to learn a new framework it was going to be something not made by google. React was simple to learn, unlike Angular. Everything you do in angular requires you to learn the "angular way", once you can create components and understand flux react is fairly straight forward and doesn't require you to re-learn web development.
That certainly jumped out, as well as the much higher female drop out rates. Shameful!

Edit: To be clear, I put the vast majority of the blame on the advisor, not the student. I would not have made it without the remarkable support provided to me by my mentor. Conversely, I saw much stronger researchers leave for lack of a good advisor.
> the production means are far more than enough to accomplish that

This is what baffles me: we have enough resources for everybody, but we somehow manage to justify how some people deserve luxury and excess, while others die on the streets. We're not talking about Comunism here, but the basic needs to survive.
The benchmarks aren't quite ready to be widely disseminated yet. With that said, I do record benchmarks from time to time in the repo to track progress, which you can see here: https://github.com/rust-lang-nursery/regex/tree/master/bench... --- You'll have to do the comparison yourself though.

There is some analysis---only for Rust's regex engine---with the definition of the benchmarks themselves: https://github.com/rust-lang-nursery/regex/blob/master/bench... (If you fish around there, you'll also see how everything is wired up.)

My plan at the moment is to publish something more comprehensive, but it will take time.

And yes, the benchmarks you linked are not only outdated, but misleading, and parts of the conclusion I do not agree with. It also doesn't include PCRE2, which is very fast.
So neither system can take care of all the people all the time? That was my point. It's time to stop pontificating that one approach is the only approach.
I don't think that qualifies as an engine or even tiny it needs both the ion trap and whatever's generating the laser is not that small. Sort of like building a tiny lava lamp while ignoring the lamp.
Civilized countries? Nice insult you got there, not very civilized of you though.
In theory that is the whole point of taxpayer funded support programs... we can't all be there, but we do all pay taxes for the specific purpose of having a better society (including things like food banks, soup kitchens, etc for people in need).
You forget that the thing voters want and the law that hits the books are often very different. By the time any measure gets out of Congress, it will, by necessity, have been carved up and divvied out, with all sort of exemptions and special cases and kickbacks.
Taxes would go up. But previously blocked productivity would be released, and socially desirable but marginal services would become viable.
The code blocks written don't tell the whole story - the analog to the .Class is the controller in Angular 1, which one would have to specify a controller name or define it right in the component, therefore giving equivalent lines for the most part.

It sounds like the person is awfully resistant to TypeScript as well, as the syntax for a component in TS is just

@Component({
})
class Foo {
}
I see plenty wrong with the stereotype. I've been on my own since 17, too. I'm 28 now. In that time I've worked at nearly every job you can imagine, with no parents to beg money from or go back home to live with. I know what grinding poverty feels like, and how it's all the worse when you actually have a full time job. Doesn't mean I wasn't financially independent. There's lots of us in the same boat.

I eventually ground out night classes while working and job-hopped my way into industrial automation and a halfway comfortable life, so I understand the appeal of passing judgement from a high and mighty place - but don't. It's a particularly pernicious intellectual weakness.
Broadway Lab | Austin, TX or Remote (U.S.)

Junior iOS Developer

Broadway Lab is a consulting company focused on iOS, Android, and Rails development.

We're looking for a full-time Junior iOS developer. The team is remote, but we're based in Austin, TX. You'll be working with our clients and internal projects (roughly a 70-30 split).

If interested, send a quick email with your github, links to recent apps you've worked on, and where you're located to michael@broadwaylab.com. Must be based in the United States.
An obvious counterexample is the sitcom "How I Met Your Mother", which featured an environmental lawyer, an architect (turned college professor in later seasons), a teacher, and a news reporter.
I think the i3 has great potential and mass appeal and is accessible at its price point. But having said that, I'm still confused why BMW went out of its way to design it as an "alternative car." I might be alone in this, but I find the car really ugly. But it wouldn't stop me from driving one!
Yes. From the article:

> 3. He probably would have gotten away with it if the signature itself wasn’t googlable by Redditors.

Did he think this wouldn't happen? He got the hash in some way, did he think nobody else would be able to find it?

He looks like a conman, but a clever one; this is very weak so far... except if there is another move in the works that we don't know yet.
In case anyone wants to learn about an effort to incrementally port some of the BoringSSL (fork of OpenSSL) primitives to Rust:

https://github.com/briansmith/ring

If anyone is looking to contribute and wants a "good first task", here are some tasks:

https://github.com/briansmith/ring/issues?q=is%3Aopen+is%3Ai...

Help is greatly appreciated :)
That doesn't look like a C specific error to me. In the release notes CVE-2016-2107 is listed as a padding oracle attack. Padding oracles are a logic/design error that is not easily caught by any language feature.

CVE-2016-2108 on the other hand looks like a typical C style memory corruption bug.
Hey there - glad you're liking it. Maybe I'll work on it some more, haha.
That's my problem with EFF as well. They mostly concentrate on "human rights" in general, but they're still "electronic". Sounds like a dissonance in their mission.
It's not a logical argument, and we could go into it blow by blow, but essentially what you're saying is that God doesn't want there to be a logical argument, oh and as to why? That's just a given, which also makes the argument unsound.
Well, you could drive around with water and a haz-mat suit in the car. Put the suit on, walk from the car to a decontamination shower. Or drive your car into a purpose built car-wash (I'm not sure it'd have to be purpose built, even. There are a number of chemicals and temperature ranges that are not so good for a human in a haz-mat suit that'd work well on a sealed car).

At any rate, I suspect that if you're the kind of paranoid elite that worries about escaping a bioweapon attack in your Tesla, you'll have your own converted nuclear silo to use as a safe-house. Presumably with suitable decontamination showers (for vehicles and people) at the entry points.
>Surely this could be treated the same? It doesn't mean that stealing food has been decriminalised. You'll still be arrested if caught, and you have to prove you were truly desperate.

But what a collosal waste of resources. What does a trial cost the state? It would probably be cheaper to just... feed the hungry people.
Arc: A flat theme with transparent elements for GTK 3, GTK 2 and Gnome-Shell
Progressive switch, we use TypeScript for new code and everything we touch old code, we try to convert from JS to TS. The tooling is amazing, even the skeptics in the team wouldn't go back to js now. Defining interfaces, using types really reduced the feedback loop and sped up our dev time.
The one thing that is wish is that templates could verified by the compiler instead of waiting for runtime (react uses views written in code and therefore you get that for free when using react + TS)
Couldn't a bytecode format have the same problem? Probably not with respect to parsing, but the semantics could still differ.
ES modules, the hard choice
I bet you've been pretty privileged in grand scheme of things, university, regular jobs, maybe the lowest point has been backpacking etc... Parent have at least one car, yawn yawn yawn.. No one is stealing from you, they are stealing from a supermarket. Privileged people always seem to think in black and white, theft is theft never an excuse blah blah, quite often making the cliche mistake of associating morality with legality.. I hope one day you don't need to learn this ain't always correlated..
Learn something everyday, quite surprising that solution with pumps was even considered and that it actually safe for crew and tank internal systems.
Where will the next president stand on nuclear weapons
"The past 150 years has shown across hundreds of countries that the current solution is vastly better than the boom and bust cycles previous, and has also demonstrated the benefit of fiat over commodity (like gold)."

Uh, no. Quite the contrary. Since the abolition of the gold standard, our economies were prone to fluctuations like they haven't been in decades. Because then the (central) banks can meddle with the quantity of our money to their liking.
Authorize.net Technical Updates
Sorry, but not ETA yet :( If you know good scala developers that wish to join us to implement this then it will be faster.
Out of the various pieces published on the centennial in Time, NYT, etc. this is by far the best. It goes into much more detail, personal and technical, and includes wonderful photos
Yes. Honestly, if they're having trouble living there at their income level in the current system, they should be looking at moving to a cheaper area already.
OpenBSD Foundation Announces Gold Sponsor DuckDuckGo
Do you mean, you wish they changed their communication approach to address the mainstream reader?
I happen to agree.
okay with me -- can troll away happily :)

but thanks
It's such a striking example of people ignoring their common sense in favour of a computer's (none)