skysight-inc/HackerNews huggingface dataset:
Exactly. The paper is frustratingly unclear on what the exploit scenario is.

"...we wrote a custom SSH client that
launches our spy program, the spy program collects the timing
signals during the handshake..."

I have a bad feeling that this means an attacker with a custom client can extract private key information over the network by repeatedly establishing connections with a vulnerable server.
I do it with vim and fireplace.vim, it took about 45 minutes to get going. Definitely worth it.
Solid State Drives 101: Everything You Ever Wanted to Know
its much easier if you can skip int8 and int16 and just use a single precision, if not consider a shorthand syntax for them like "u1234" or "d1234" or "foo = uint(1234)".

for libraries you can get the types from the library headers, "func a(foo int)" you know that x is int if they write "a(x)"

for new code just check the values assigned to variables (through all time); 1-10 as int, 1.xx-10.xx as float, etc. then use some switching to fill in the rest. but it never catches all the edge cases so you maybe you can use a foo<type> custom-syntax...

i did something similar for coffeescript to golang and i could get about 99% but i know it would break under real world conditions, ended with a custom syntax foo#type or foo<type>, and then they can use int8 and int16 and double and what not.
Just make sure to add in some DoD specific modules and I think you've got a winner.
> If you can't provide me with all of the features of messenger in the browser then that's fine.

And I'd also prefer if they don't try and hijack other features.

I had installed Messenger, but had notifications turned off because I don't care to be interrupted every time someone sends me a new message when I'm not actively participating in the chat.

Today, someone tried to call me (as in voice call), via the Messenger app. Because notifications were turned off, I didn't realise they had tried to call even though I had the phone with me at the time because it's treated as a 'data' call via Messenger rather than a real phone call.

Given that I can't separate the functionality of 'text chatting' from 'phone calls' made in Messenger, I've now uninstalled it so friends can't pseudo-call me via Messenger.
Absolutely. My thought on seeing this was 'Oh hey, the internets are leaking again'. This is really fringe stuff and it's just fascinating to see it bleeding through into the mainstream. Especially by big ass meme carrying billboards.

And the design is fascinating. No links, for instance. You see the sign and it piques your interest because it mentions names - which you have, and fraud - which you're worried about. You then either go about your business and just forget about it or you google 'legal name fraud' and bam! There you are in the scary backwaters of the internet immersed in someone's weird memes. A curiosity trap.

Physical billboards are (AFAIK) a new vector for this particular meme. And billboard ads cost around £200 a week in the UK (last time I checked) so this has cost someone, somewhere some money. Given the tendency of FoL/SC/etc believers to try avoiding debts with Jedi mind tricks, it's possible that 'someone' is the firm leasing the signage, but still, it's interesting.
Safe Sex με προφυλακτικό: 5 μικρές συμβουλές για καλύτερο σεξ -
> I think Facebook is trying to do the Google thing and have a bunch of discrete services under their umbrella, though they don't seem to have a clue how to do that.

I think they're doing fine, by their metric. People are not going to abandon their services anytime soon. Me and other HN users may complain but the rest of the world doesn't care.
Kx releases 3.4 Raspberry Pi build with libraries
I read his book 'power sex suicide'. Here is a good summary:

http://ronbarak.tumblr.com/post/25996121029/life-is-it-inevi...

In the book he expanded on what was needed to make the jump to complex life and his opinion on how unlikely it was. He made a case for how only a relatively small time window was available for it to happen at all.

I second the rec!
Realize that the computer's advantages can also lead to weaknesses. By this, I mean that a computer's powerful and precise memory means that it is better able to work off raw correlations, without as much of a need to abstract or seek out causal models. While this might turn out okay for detailed large but ultimately simple (stationary) patterns, it will not be so advantageous in more dynamic settings or scenarios with multiple levels of organization with differing dynamics.
For other people confused about the meaning of BP in this context, it means Benjamin Pierce Fellow.

It appears this talk was given in the context of the Benjamin Pierce Centennial Conference:

http://www.math.harvard.edu/conferences/bp/
Gravitational Motion in JS
In my experience in most parts of the USA and Canada at least (and I'd guess in many places in Northern Europe), napping in public places is frowned on except in pretty specific cases - parks, beaches, etc where the purpose of being there is to relax.

Of course you do see it on public transit in the early and late hours at times, and it's not a big deal, but its definitely not 'normal'. Napping at work is especially frowned upon, with perhaps the exception of someone going out to the park during lunch time.

The general feeling/culture (not necessarily my personal opinion) is that you should have had enough sleep the night before so that you can be productive for the day's work. If you've stayed up so late (partying or whatever) the night before such that you need rest during the day, you're short-changing your employer and teammates. A nap might be the right thing to do to restore your energy, but you should not have put yourself in that position to start with.

Of course these days I don't need to stay up half the night to feel like I need a nap in the afternoon... :)

[edit] After reading the article, I see that the Japanese culture connects the tiredness with working hard/late, which changes the perception. I think in the US and Canadian culture this can happen in some extreme cases - we've all heard (or lived) stories of people working like crazy to meet project deadlines, and sleeping in the office, etc. And road-warriors fighting jet lag are often given some credit for that tired/haggard look. Blue collar workers are more prone to given respect for being particularly tired at the end of the day, but napping or dozing off is still not really rewarded/honored like it seems to be in Japan, because of the quite different work-time expectations.
Discussion of news: https://news.ycombinator.com/item?id=11875399
do you have infinite time?
I was thinking of learning a modern language for the web back end. After analysing elixir, go and clojure I decided to go for clojure. Uhmmm, maybe go? I don't know :X. Stick with php? Meehhh
City Kids in Joshua Tree- annoying or good for them?
> Do you mean the program became relatively slower because of changes you've made to the regex crate?

Yes. The underlying reasoning is complex. When the regex crate got a lazy DFA (similar to the one used by RE2), the vast majority of regexes got significantly faster. Some got slower. This one in particular from regex-dna:

>[^\n]*\n|\n

Before the lazy DFA, compile time analysis would notice that all matches either start with `>` or `\n` and do a fast prefix scan for them. Each match of `>` or `\n` represents a candidate for a match. Candidates were then verified using something similar to the Thompson NFA, which is generally pretty slow, but the prefix scanning reduced the amount of work required considerably.

Once the lazy DFA was added, the prefix scanning was still used, but the lazy DFA was used to verify candidates. It's faster in general by a lot, but, the lazy DFA requires two scans of the candidate: one to find the end position and another to find the start position. That extra scan made processing this regex (on the regex-dna input) slightly slower.

I've since fixed some of this by reducing a lot of the match overhead of the lazy DFA, so my hope is that it's back to par, but I haven't done any rigorous benchmarking to verify that.

> Wasn't the program relatively faster because you wrote the regex crate to use Aho-Corasick for the matches required by the regex-dna task?

Aho-Corasick is principally useful for the second phase of regex-dna, e.g., the regexes that look like `ag[act]gtaaa|tttac[agt]ct`. (In the last phase, all the regexes are just single byte literals, so neither Aho-Corasick nor the regex engine should ever be used.) Performance here should stay the same.

On that note, I have a new nightly-only algorithm called Teddy that uses SIMD[1] (which replaces the use of Aho-Corasick for those regexes) and is a bit faster. I got the algorithm from the Hyperscan[2] project, which also does extensive literal analysis to speed up regexes.

To clarify, this optimization is generally useful because a lot of regexes in the wild have prefix literals. Even something like `(?i:foo)\s+bar` can benefit from it, since `(?i:foo)` expands to FOO, FOo, FoO, Foo, fOO, fOo, foO, foo, which can of course be used with Aho-Corasick (and also my new SIMD algorithm).

One also must wonder how well a C program using PCRE2's JIT would fair on the benchmarks game. From my experience, it would probably be near the top. It's quite fast!

[1] - https://github.com/rust-lang-nursery/regex/blob/master/src/s...

[2] - https://github.com/01org/hyperscan
This comment will be interesting to look back on in ten years if Trump wins.
It's pretty unusual for me to just stream C++ code directly. Even when I know what I'm going to write, it doesn't come off my fingers in serial order. So for programming, I need good placement of editing commands, not characters for text entry.

It's the other way around for natural language in comments, e-mail, blog posts, etc.
I blacklisted them over 2 years ago. Not missed. https://github.com/jakeogh/dnsgate
If you give it a try you'll see it doesn't work well and it's nothing like cursive or 'natural' handwriting. The sheet you have to fill in changes your natural handwriting fairly dramatically (it did for me at least).
Does it bother anyone else that whenever someone comes up with a strange or weird, non-mainstream idea, their mental health is immediately called into question?

Just out and out say it: you're bigoted against the strange idea that this person is presenting. Just because people don't live like you do, doesn't mean they are mentally ill.

Seriously, this "oh, mental illness" trope is really a drag. Please, whenever you consider "oh, mental illness" as a way of writing off someones opinion, check yourself. Not everybody agrees with the ideals proposed by the mental-health cult that currently has the West in its grip ..
Ask HN: Feedback for a Newsletter
Hi, I just self taught myself react last week. Although I never liked react at the beginning after learning it I felt react is much easier to work with and a good framework.
So I was thinking about starting a small newsletter that will make it easier for someone to learn react by themselves like I did by giving them easy to understand lessons.

I know there are so many resources out there, so many newsletter out there and you might ask why should you subscribe to mine. So I'm asking the question from you is it worth spending my time and money on teaching something that I self taught? It's nothing special just that the lessons will be easy by someone who self taught for someone who wants to left learn.

Honest feedback is much appreciated
With OpenBazzar, Everyone Can Be a Retailer, Without Permission
There's in fact a 2 year minimum period
When I talk to experienced motorcyclists, the biggest issue isn't the physical sensation of wearing a helmet. The problem is changing the acoustics around your ears.

An enclosed helmet that "hears" like a human, but filters the spikes (powering your iPod in the process)?
Once when the law was on my side I had a judge rule against me for a moving violation and he dismissed me with, "if you don't like it, appeal it to the county." I could've done that, but for a $90 no-point ticket it didn't seem worth the additional time and he knew that.

I agree with you that these radical ideas stand no chance before a judge who will not hesitate to send you to jail for not respecting the authority of the court.
You can do this now(?!)

In fact something as simple as naive Bayes will work reasonably well for that.

I'm not sure if you are aware, but in (say) image classification it's pretty common to take a pre-trained net, lock the values except for the last layer, and then retrain that for a new classification task. You can even drop the last layer entirely and use a SVM and get entirely adequate results in many domains.

Here's an example using VGG and Keras: http://blog.keras.io/building-powerful-image-classification-...

And here a similar thing for Inception and TensorFlow: https://www.tensorflow.org/versions/r0.8/how_tos/image_retra...
True, but is misuse facilitated by modern firmware really that prevalent? Or is it just as likely that an enthusiast would violate the regulations by building non-compliant radio equipment from components?

The only way to really prevent misuse would be to regulate the supply of any electronic components that could be used to build non-compliant equipment.

A better solution would be to include warnings with all certified equipment that it must be operated in accordance with regulations, as we do now.

I think the threat is being overstated and the proposed solution too bluntly applied.
Show HN: Create instantly shareable native app with a single JSON markup
Yes, most of the material is still very much applicable. Essentially it boils down to a collection of really good collections that makes your Java code more maintainable.
Knowing what a compiler does is basic knowledge. Knowing how to invoke a specific one from a command line is a matter of culture. It's like the difference between knowing the physics of baseball and the rules of baseball. One is general knowledge, the other is specific to the culture, and knowledge about the later implies very little about the former, and vice versa.

You'd probably be better off giving someone the binaries for a broken hello-world and asking them to debug it.
Show HN: Atom plugin to view Git modified files
Nobody sits down and streams out kernel code in serial order at speed.
Serbia and Siberia are 2 different places. Quite different, in fact.
Hi HN, I've worked on several apps in the past couple of years, and found that it takes too much effort going from having an idea to building an app and having the world use it. Also most cool ideas will never turn into an app because building an app is not a simple 5 minute thing.

I wanted a way to have an idea, turn it into a fully functional native app, and share it with the world, all in the next 5 minutes, as quick and easy as writing a blog post. That's why I built Jason.

Basically Jason lets you build a native interface to display and interact with any data format (csv, rss, html, json), any website, any API in any way you want, simply by writing a JSON markup and loading it. There's no need for compiling, building, deploying, or anything like that.

It's like a browser but instead of turning HTML into a web page, Jason turns your JSON into a native app. Everything from defining elements to styling to executing actions is described in a single JSON markup.

Please let me know what you think, or ask any questions. Thanks!
No, not into CNS. It is a well established procedure, is more than a little rough.
"Those stem cells were then purified, wiped of any memory of the disease, to later be transplanted into Molson through a blood transfusion."
That's crazy talk!
Wasn't that the (fake) one shown on Futurama? Or am I confused?
> It's less about your game history and more about your behavior directed at strangers

This is a bit like saying "it's less about the means, but about the ends". I don't think anyone's confused about your motivations.

> We're a player focused company, and if you're a total jerk to strangers because you've tilted, how can you be expected to make the game better for those same people?

I'm as jerk averse as the next person, but this reasoning is on the weak side. History is full of jerks who have made important contributions to their field despite of (or because of) their jerkiness. Edison, Ford, Jobs : all jackasses of epic proportions who all made quality products.

Ultimately, you do you. If you want to shit can jerks, then shit can jerks. I just feel like there are more germane - and less creepily invasive - metrics that can be applied to someone's job performance than their behavior in a game.

edit : I've responded to another one of your comments elsewhere, and just want to add some clarifying context. I really don't want to start defending in game trolls, because the specifics seem to be indefensible (racism, death threats, et al). My concern is a step removed into a hypothetical bigger picture, where everything we do electronically becomes fair game for assessment and auditing - and I see this as a step in that direction.
The "gender identity" thing is such an obvious case of ideology masquerading as fact.
Sorry - must have fumbled Update button. Now there.
Apple's keyboards are also easy to rearrange and don't get lumpy looking afterwards. This includes their laptops, whose keys are trivial to pop off and scramble.
I respect your opinion. I had a personal desire for a colourful log, and wanted better customization. Initially I set an alias and was good to go, but then I just sat for two hours and packaged it using setuptools.

For future versions I am planning one command change in the theme of git logs, and possibly setting up themes through config files.

The resulting library is a mere 5 KB in size and I got a hang of writing 'yolog' and getting the output :-)
If you can't build something yourself, then you won't know how it works and what the consequences of the relevant design decisions are. I do it because my goal is to learn how to do things right, not to get things done quickly.
A non-trivial term-constraint oracle, and a new Haskell teaching tool
A corollary of which is that the immune system runs on MS Windows.
Thanks, I obviously didn't go deep enough into it. Yes, he is definitely not trustworthy.
As somebody who uses Dvorak, don't learn an alternative keyboard layout. It makes pair programming, and more generally using other people's computers, an unnecessary pain. More importantly, there are better uses of your time, such as actually programming.
The document now leads to a 404. I guess somebody heard you ;)
It won't. Each blockchain will handle a different type of transaction (e.g. bonds vs. shipping) so cross-chain transactions aren't really needed.

(Disclaimer: This comment hypothetically assumes that blockchain blockchain blockchain mania actually works.)
Did the same for me too, seems logic if you look at the limited "data sample" they can analyze with the sheet you fill in
How many people can actually type in multiple layouts proficiently? I can program & type in Colemak and Qwerty equally at speeds over 100 WPM. I tend to use Qwerty at work and Colemak at home, minus tablets/phones.

Some notes based on my own experience:

* If you can touch type very well in Qwerty already, you may have a much easier time picking up a layout than the average typist. And you may have an easier time retaining more than one layout.

* What you're typing (context) is important with regards to adjusting to a layout. For example, if you learn Colemak and decide to try using the Terminal some time after you've become proficient, you might find it awkward - at first. I personally haven't found the type of physical keyboard you use to matter much with regards to this..

* When I was at the state where I could type in both layouts very poorly (due to muscle memory being confused), I realized I took many things for granted that eliminate needing to type quickly altogether like auto-suggestion/completion - and a lot about software development is about automating tasks.

* When I started to become proficient at Colemak and started to lose my proficiency at Qwerty, I developed a justification and bias that Colemak is way more comfortable for my daily usage.

* The most effort I ever put into typing was ironically typing tests, not programming =P. And those can be really tiring if you do them frequently regardless of layout.

Maybe I find these days that colemak is marginally more comfortable. Maybe I just don't type that much though, although I use the computer a lot. Software developers certainly don't type nearly as much as a "typist job" (if those still exist) in any case. If I lose my ability to type in Colemak, I don't think it will effect me that much. All in all, I can't say my transition was worth my time.
We're getting off track. America does a tremendous amount of the medical (and otherwise) science that helps progress modern medicine, and here we have a documented use of stem cells with an incredible outcome that is not encumbered at all with controversy. This is a win, no matter how calous you want to be about America. (New flash, religion affects the political climate all over the word.)
> many right wing persons and groups mistrust science for fallacious reasons

The political right distrusts science on climate change, the more radical factions even evolution. The political left distrusts science on GMOs, organic farming and nuclear power, the more radical factions even vaccinations.

I wouldn't be so quick to judge, which side is more anti-science. They seem pretty equal to me.
Sigh this topic always comes up. From a materialist perspective (which is the only perspective that makes sense in medical science), yes, any psychological phenomenon is ultimately a physical phenomenon.

But when people talk about the psychological/physiological dichotomy, they're talking about causes. A psychological cause for an ailment is one that is brought about by thinking — by the brain operating normally without any external interference. A physiological cause is one that requires an external agent, like concussive force applied to the brain, or asphyxiation.

Psychiatric illnesses are an interesting edge case because they usually deal with the balance of various chemicals in the brain that are supposed to be there. That balance can be influenced both by external factors (like taking a psychoactive drug, such as an antidepressant SSRI) and by just thinking. It's not as well understood how thinking influences brain chemistry, but meditation, for instance, certainly does.
I feel the next big advertising campaign should invoke common law to claim that the FB terms of service are illegal.
Lets think about it from ethical stand point. The kind of people who downloads and wants to learn is just a very tiny fraction of people in the entire tech population(Even most people in tech industry does not want to invest in learning). Their contribution will be significant. So what about the hard work the authors who had put in to create the course ? Don't worry their life will not be affected much(not like they will miss being billionaire). The only people who might get affected is the undeserved people who is taking advantage of intellects like the university.
Pair programming doesn't have to mean one computer or one keyboard.
I'm talking about education. Mathematicians work on useless stuff all the time. They don't teach it as part of their core curriculum.

Either way, Hardy was wrong. Number theory became relevant because of the work of people who thought it could be. There was hope for a practical application, even if Hardy couldn't see it.
And Plan 9 will never have more than 1000 users because it can't get a web browser to deliver a satisfactory experience.

It's a horrible chicken-and-egg thing.
My honest opinion is that unless you've written C, or assembly, I don't consider you a real programmer.