skysight-inc/HackerNews huggingface dataset:
Thanks for the link! I was expecting something not well thought out, but the front page has a good answer to "Why not NaCl?" ... the short answer is that Inferno is a bit more conservative with choice of algorithms.

My main criticism would be that it supports AES256-CBC-HMAC. Encrypt-then-MAC should protect against CBC padding oracles, but CTS mode instead of CBC mode would be more conservative. I understand using CBC instead of CTR mode if you're afraid you might possibly have a flaw that reuses nonces (CBC and CTS modes leak less information than CTR if you have a nonce reuse bug). CTS mode is a slight tweak on CBC mode that modifies the final two blocks in a way that makes it immune to padding oracle attacks. Encrypt-then-MAC should also protect against padding oracle attacks, but CTS mode fits better with the belt-and-suspenders philosophy of Inferno.
It probably depends on your operating system (or configuration manager, ancient SOE, etc) defaults.
You could tell, open handed, that people would not be interested in the idea of the product, by the way it was executed, by the undertones of its justification for existence.

It was a product mandated for the sake of a company's bucket list at best. To earn a gold star for trying. To mark off a checkbox.

The whole thing reeked of groupthink, from a mile away. Censored behavior. Courting celebrities. Requiring real names. Activities restrained by pretense. It stank of corporate influence, of lunchtime business meetings, of shareholder concern. Poochie the dog, rastafied by 10% or so.

Nothing about it felt natural. Everyone has to wear clothes. No cursing please. Place your cigarette in the appropriate receptacle.

Worse still, all things were clearly designed to funnel back into some other thing at Google that was more impotant to the bottom line. Endorsements, trending interests, who's reading what, written by who, and so forth.

It wasn't designed to tickle the user. None of that is why people come to the internet and keep coming back. Not regular people.

You could tell that the people invloved in crafting the reason for Google Plus' existence were people who pay their taxes. Who drive safely, even if they drive expensive cars. Who spend their lives trapped inside a ribbed condom. Yeah, it's a condom, but it's a ribbed condom. So much better!

Facebook is also guilty of many of these sins, but it's what they do, it's ALL they do, and they don't get in the way of people behaving badly, or at least not in ways that would preclude them from just trying to have fun on a website they don't actually need to use. And that's where Google really crossed the line, by trying to needle people into jumping on the Google Plus bandwagon, and then by telling them to sit all proper and cross-legged too.
Muhammad Ali Dead: 'The Greatest' Was 74
We don't do that with web browsers these days. I get the feeling other apps on my PC (particularly a photo or video editor that had a "Share" function for Instagram) it would get tiresome.
People often use 'marrow stromal cells' or 'mesenchymal stem cells' interchangeably as scientific terms (but of course, there is debate) that refer to adherent colony-forming multipotent cells. We use 'bone marrow stem cells' as a non-scientific term that includes MSCs as well as hematopoietic stem cells and endothelial stem cells.

>Is there any reason you can't get this from whole blood?

The blood harvest process uses a machine, takes a few hours, and requires the prior administration of a protein that stimulates stem cell proliferation and release into the blood. It is preferable for some procedures, but for those reasons, not for ours.
Yes, you might have a big argument with your siblings, be very angry at them, and if they still got into a car crash you're still going to be at the hospital with them. There may be political differences but we're all human beings here.
Thanks for the additional references (Yes, I should have mentioned Amir's work also). A good basic point is that the central ideas of "reasoning with time" go back into the early 60s and -- unfortunately -- did not get into the mainstream thought patterns of everyday computing.

Terms often lose their meanings as they become religions and more rigid choices and styles. The two in question here are certainly "object-oriented" and "functional programming"!
Yep, went that route (Stripe Marketplace) and then realized later that it had to be tied to some charge. We wanted to payout users at end of the month so it wouldn't work for our case. Now, Payoneer is interesting. I really like Plaid interface to tie into the banks, do you know if it can integrate with it or even possibly have it's own Plaid like widget?
This is actually a dangerous source to draw conclusions from. Even ignoring the qualitative bias of H1-B workers having less leverage than an average worker with easy mobility which likely causes relative wage depression in that data set, the key issue is that a significant chunk of a high salary software engineer is in equity and it rarely shows up in the labor certificate application. So H1-B data is mostly base salary and can be misleading to use when drawing a conclusion on total comp. Extra care need to be taken.
Muhammad Ali Gone at 74
It lasts until you revoke the app or change your password.
I live in Pittsburgh. I don't know if it is a "rule", but none of the municipal applications I've built are apps. As we show how much less expensive responsive web is to develop and maintain, it will only get harder for efficient and competent agencies to propose to build an app. Of course inefficient, corrupt agencies will probably still build apps.
I wonder if there's going to be any noise over this outside the developer community. There was when Twitter pulled this nonsense, but their third party clients had massive followings. I, personally, have never heard of a third party Instagram client.

This has happened with so many services over the years, that one would think developers would be more enthusiastic about educating the end user with libre software. I do that aggressively with people I know. Too much to ask?
Muhammad Ali Dies: 'The Greatest' Boxer Dead at 74
I'm an American living in China and I used to own one of these. Here are my thoughts that I wrote down a while ago:

Why e-bikes are the next big thing

Like a car, they offer cheap on-demand transit to your exact destination. Unlike a car they do not support long distances, heavy loads or more than 2 people, but often those features are not needed by the urban commuter. Furthermore they lack many of the drawbacks of a car; getting stuck in traffic, the need for parking, the need for insurance, licensing requirements, high fuel requirements etc. Furthermore an e-bike is a signifigantly smaller investment than a car. Having it lost, stolen or damaged poses less of a personal risk to your finances. Unlike a classical bike, e-bike's do not require the user to be in shape or even exert effort to operate. Thus we see that in the personal transport market, e-bikes represent the best of both worlds for the urban commuter. We can see proof by demonstration that in the right conditions they can be enormously popular (China). Why haven't they taken off all over the world yet?

1. Topography. They are generally not powerful enough to go up steep hills. Sadly this rules out San Fransisco which would otherwise be
quick to pick up on an eco-friendly trend.

2. Weather. In the cold winter with icy roads these vehicles are unpleasant to drive. A 40 km/hr wind chill on top of 0 degrees will make you sick. The Chinese have invented a sort of bike apron/jacket that helps with this but although it is an unfashionable solution. For this reason the bitter North East and flat-but-frigid Mid West probably wont take to them (ruling out the otherwise perfect market of New York).

3. Regulation. These vehicles neither qualify as motorcycles nor bicycles and thus are often ambiguous or de facto illegal in many parts of
the states.

I think point 3 is a huge mistake. If the US is serious about green technologies, deregulating e-bikes would be a huge boon.

Further thoughts: People initially think e-bikes are unsafe. That is because of historisis. If e-bikes developed before cars then most traffic would be e-bikes for the practical reasons cited. If most traffic were e-bikes then they would be seen as enormously safe. In general they do not have the momentum to seriously damage pedestrians or other e-bike users. It is actually cars that are the dangerous vehicles. Furthermore if most traffic were e-bikes then the throughput of a given road would go up because about 4 to 5 e-bikes can easily drive in the same space currently used by a car. This effect is partially canceled by the fact that e-bikes are slower than cars, but within a city driving speeds are only about 30-50 km/hr anyway. The amount of parking space available in the city would also go up for similar reasons.
Consider yourself lucky. I've heard of checks being written on the side of a cow.

I expect this works out better for people who get physical checks returned to them. Shredding the cow is a no-no.
Did you ever watch The Sopranos? It's a more legal, slightly less unethical version of what Tony and his crew does to the sports store. They bleed it, leech it dry oil it's a shriveled corpse, ready for Chapter 11, at which point (or ideally before) they walk away.
ok, that makes more sense - thanks
+1 Had the same thought when I saw it. AppJet was awesome.
Muhammad Ali, titan of boxing and the 20th century passes away
Submitted something similar and got flagged. I would think "cell service not working" would be of interest to the hacker community from both network and functional perspectives.

Fwiw, my Cricket phone started experiencing issues around 4pm. Went from working normally to 'network not available' while sitting in the same spot.

Haven't dug out tools to see what it's doing, but seems to join the network after a reboot and then drop off after a short period (failure to transfer data?).
I believe it is adapted from this study: http://www.ncbi.nlm.nih.gov/pubmed/16041622 Thanks. I'll confirm and add an attribution, which should be there.
After reading the NYT's obit for him, all I can think of is, wow, what a full life and long journey. Being born after his competitive career, all I mostly hear about is how he was "The Greatest", but not so much about his losses and his comebacks.

http://www.nytimes.com/2016/06/04/sports/muhammad-ali-dies.h...
Facebook disabling messaging in its mobile web app to push people to Messenger
The first couple of times I called and confirmed that he did write the check. Also the banking systems keep copies of signatures so I checked the signatures as well.

Once it became a regular thing, we made a note on his account.
This is great. The only commit:

> final commit

> Erik Wittern committed 2 hours ago

If only there wasn't a typo in the readme:

> On top of that, TODOis™ uses native JavaScript, runs in the cloud, and loves big TODO data.

Time for a force push! :)
Do thoughts matter?
Six billion yes, but this is Fort Mac, not New Orleans. It is a working town. Insurance will pay out, the government will help here and there, but the town will recover largely on its own. Or, should the economic realities of lower oil prices dictate, the town will never come back to what it once was. Either way, the fire is not the deciding factor.
I'm repeatedly astounded by the FBI's overreach (though I oughtn't at this point). I'm also always surprised how much people wanna take swings at NSA when FBI are the ones abusing everything domestically (though certainly NSA are helping them, and they shouldn't.)
> Less work for developers?

Seems the most likely.
Muhammad Ali, the greatest of all time, dead at 74
Is there a there there? You'll know when you find it
The person responsible for the system can hardly be held responsible when they're on a break, can they?
User-hostile moves like this fill me with deep, deep frustration.
Interesting. I wouldn't be surprised if they want to get rid of nest given the recent negative publicity from the former CEO all the way down to the product causing google employees to post negative reviews and update policies causing backlash.

This is one of their big AI-driven products. I would be surprised if this is part of a larger AI draw down -- that deep learning wasn't up for this type of task. I would also be a little surprised that they would get rid of an "AI enhanced" product given their recent push towards AI.
Advantages of emotional granularity
I wanted to build a small side project utilizing Instagram, and when I read their API ToS, I was completely demotivated. Everything having to be about brands drilled in the fact that I, the user, am the product, and my interest in the platform even as a consumer dropped significantly.

I now post very rarely and almost never browse. Occasionally I'll look up a particular hashtag relating to some car/motorcycle I like, but that's basically it.

The curated feed shift (has that happened yet?) was also very bad news for me.
Sad day. A video that probably won't be played very often, but might be special to this crowd: a 1997 Apple commercial staring The Greatest, during their Think Different campaign.

https://www.youtube.com/watch?v=n83xzu2xH-E

The video was created to poke fun at Michael Dell, when Dell was being "rude", as Jobs put it.

https://www.youtube.com/watch?v=_hq0Ny1WgFs
Life After 44 Years in Prison [video, 6m 21s]
Great minds think alike. ;)
Do you have any idea how much software is run behind a firewall? If someone is even able to run my software that means they have full access to a shell and compilers for multiple programming languages. As such, there are much easier ways to run malicious code than to exploit a buffer overflow in my C or C++...

So really, your argument only applies to public facing servers or web browsers. Unless you're writing one of those, I think your argument is weak.
The art is beautiful, but I'd way prefer a PDF in terms of reading experience.
He was a really smart dude. The way he marketed himself was I think the first of his kind.

Plus he won some of his fights even before stepping in through the ring by getting into his opponents head. Just imagine Ali going to your yard a few days before the match in the middle of the night with a loud speaker
"4) (when needed) earmark the seats with buyer information and restrict entry to the actual buyer (e.g. use the purchase credit card, or photo-ID if cash purchase)"

which was already proposed in NY, per the article, but lobbied against hard by, you guessed it, ticket agencies and major secondary sellers. Shocking, truly.
Are they getting rid of messenger.com too?
> Nonce-exposing high-level crypto APIs are flawed by design.

No, and please don't encourage people to use bad crypto.

If you build an encryption (or authenticated encryption or whatever) function E(K, M) that deterministically turns a key K and a plaintext message M, you will leak information. Specifically, if you send the same message twice, an eavesdropper can tell.

If you use a nonce-misuse resistant function E(K, M, N) where N is a nonce, then, if the nonces are unique, you don't leak anything but the lengths of the messages and, if it's maximally nonce-misuse-resistant, then, with repeated nonces, all you leak is the fact that repeated messages are repeated.

But if your non-misuse-resistant cipher function is streaming, then you unavoidably leak repeated prefixes when nonces are misused.

The strongest mode out there is AEZ (assuming it's as strong as the authors claim), and it still lets you specify a nonce as part of the associated data.
If everyone is rational (ie., won't purposely screw themselves.) and does not change their maximum amount according to what other bidders do, then it kind of doesn't matter in the end.

[1] https://en.wikipedia.org/wiki/Revenue_equivalence
I believe Dwolla does this.
Here's one of my favorite sport highlight videos. https://youtu.be/072IsGDEpTc

His speed, footwork, and power is just incredible.
Muhammad Ali: Boxing legend dies aged 74
By my mind, 'treble' is more associated with amount (3 x some value) while triple means three objects (3 of something). I don't know about dictionaries, but that's how I understand and use the words.
I love Stripe for its of ease use, clean UI, etc., but yes their fraud/chargeback handling sucks.

My wife's box club business gets dinged all the time by fraudulent transactions. She uses CrateJoy, and they tell us it's our and Stripe's job to filter fraud. Well, I don't have a 24/7 SOC dedicated to filtering out fraud, so I have to rely on Stripe. Stripe, even with all the verification features enabled, still does very little to prevent fraudulent charges. My wife loses a not insignificant portion of her money on heavy renewal months (like 3 months after Christmas and most recently 6 months after Christmas) with people charging back for fraud or just because they want a refund. And of course Stripe is happy to slurp up the insane fees for it.

We'd move, but CrateJoy makes things really, really, really easy for her in terms of managing members and shipping. It's just a bummer to deal with this all the time.
If he was performing well in terms of "putting up numbers", but treating his (and Larry's) employees terribly to do it, firing him would still in my opinion be the right move, and would certainly not make Larry an asshole.
Seeing as you split your time between the two countries in question, what's your current preference? From my Bay Area perspective, Canada often seems pretty appealing.
In some cases, those market prices, as alluded to in the article, might not be so high if anything more than _fifteen per cent_ were actually available to the general public.
- Spend $18bn to acquire Whatsapp's current and future users

- Force people to download Facebook Messenger

- ???

- Profit?!
It tends to be the picking out and maintaining a wardrobe of clothes that takes the effort for most people I think, not the actual choosing of shirt and pants in the morning. Of course, billionaire CEOs could easily just hire wardrobe consultants to handle that for them - and I'm sure many do - but some don't care, beyond just being presentable. And so they wear basically the same thing every day.
This is hostile as fuck. Just clicking on the Messages icon on the mobile website launches Google Play Store.
Personally, I'm rather skeptical of the product, but I'd like to hear what HN users think of it.
Just an FYI for any Facebook product geniuses who might be reading this thread:

If you're serious about this, you're going to also want to remove any non-FB contact information for users (email, phone number) that might be displayed, because I guarantee you that rather than installing Messenger that's what I'm going to use if you let me.

And really, if you're going to be so blatantly user hostile, it makes sense to really be thorough about it.
My fantasy negotiation scenario:

ME: "Ok so you are willing to pay me 200k to work 8-9 hours a day, how about paying me 100k to work 4-5 hours a day?"

THEM: "sounds awesome"
Damn...whenever I watch boxing movies like Rocky, I always think the action and power look so fake compared to what you normally see when watching broadcast boxing fights. But I guess if you grew up watching videos of Ali, you'd have a higher expectation of razzle-dazzle.
That's pretty much what lldb is (or will be, for some reason it's not yet final though it's been out for a while) for.

lldb is to llvm/clang what gdb is to gcc and co.
I wonder how many people who aren't in Twitter's "first name club", aren't SV elite, actually get more than a:

"Sorry, your tickets were verified to be false. Here's a refund and $50 in credit for your next StubHub purchase."

rather than "we reached out to the Warriers (because oh shit, you have more than a quarter million followers) and got you better tickets".

Sorry, maybe that's the cynic in me...
Graphene coating makes nanomechanical parts frictionless
> At the moment, you can just dismiss the notice and go about your business.

Hah, if only it were that easy. When viewing messages in Chrome for Android, I get redirected to Messenger on the Play Store when I close the overlay. Then the Play Store opens again when I tap on a conversation.

Screw you, Facebook.
Might because of this new "Deep learning text" ? I know this will be mainly integrated into Messenger.
I think that video is from his training in Africa for the George Foreman fight. it might be in this movie:

https://en.wikipedia.org/wiki/When_We_Were_Kings

It's a great documentary.
Facebook's forced migration of their users from basic, functional chat is, in my opinion, more frustrating than any single decision they've made to date (perhaps second to platform risk materializing to those businesses built on top of them).

I once had a (protracted) debate with one of their earliest product designers who defended the decision unconditionally. His arguments were—more or less—"it's better for the user". If instead it was simply "it's going to improve our bottom line" I'd not have given much of a second thought. It's just changes like this that they attempt to spin as positive to their users that drive me crazy.

ETA: found the convo from August 2014 and pasted below. Note this is when they first disabled within the app (and you could start the download to trick it into letting you continue).

> Me: Jared, i get that they want to encourage adoption of the standalone app -- probably for some business purpose, now that they're publicly traded -- but why cripple existing functionality just to obtain that goal? make it annoying so that you have to dismiss the "upgrade" comment .. fine. the only reason i can see is profit, which is fine/just own it, but people are masquerading this as a good product decision for users which i disagree with (obviously).

> Jared: A force is rarely a good product decision. That engenders distrust, and certainly they did not predict the frustration that would occur.

I whole heartedly believe the standalone application is better.

I believe Facebook took a calculated risk, but not a disingenuous one, and not one targeted at making money, one of the form of 'you won't know how to fly unless I push you out of the nest and then, woah, how much you'll thank me' and their convictions, which were backed by engagement data, were unable to actually test the event of "forcing the change". The reaons I belive they took the risk were to minimize ongoing development of a duplicative codebase and achieve engineering focus.

Now, with similar information to Facebook, I ask myself what would I do - would I recall the change with a more transitional approach (e.g. 60 days until install)? Or your friend sent you a sticker / selfie / audio file, to view use the new messenger app? It's a tough question and I pose it back to you, what would you do?
The Natural Selection of Bad Science [pdf]
Why do phones, tablets, laptops, etc., not come at the very least as an option in a form WITHOUT integrated microphones, and with cappable lenses?

If I want a mic, I'll plug in a goddamned headset.
Yup, you can't even publish via API on Instagram. On the other hand, Facebook, Twitter and Pinterest allows it.
Something I consider but most articles do not: jurisdiction. I want and use a VPN in Sweden for a reason. I wouldn't go anywhere near any VPN with even a tiny US footprint. Similarly, I wouldn't use a VPN in my home country. Location location location.
When I navigate to it on my OS X and iOS platforms, it just pushes me to download the app. Was there ever something different there?
Do you have any experience with Sanaa Hachem and her Architectural Works?
I want to know about Sanaa Hachem and her Architectural and interior designing Works. She is from Chicago (Newyork). If anyone know anything about her, please give me feedback of her.
Hehe... as soon as Blake went out on injury, you could get Clippers - Blazers tickets in LA in the playoffs for $17.

LA fans are notoriously fickle, but still, I know several Blazers fans who took the opportunity to fly down and go to a game (albeit where they were in the vast minority).