skysight-inc/HackerNews huggingface dataset:
"...Lavabit only used one SSL keypair ... poor architectural choices..."

Thanks for mentioning this. I was just now wondering if its practical, useful to use multiple keypairs.

What do you recommend? I don't know enough about CAs and SSL to how to partition risk. For instance, if Lavabit used their "parent" pairs to self issue "child" pairs, wouldn't the govt just ask for the parent keypairs?

Being a casual user, implementer, reader of crypto stuff. It seems to me the technically correct answer is for everyone everywhere to uses unique keypairs per relationship. If true, then I'm not understanding what practical mitigation an email service provider can do.

Thanks.
Did you try editing the DOM?
Hopefully Lavabit was using TLS with forward secrecy making this impossible:

https://en.wikipedia.org/wiki/Forward_secrecy
AS a former audio engineer THIS is so important for clear vocals.

> We are fans of being close-miked, and P-pops come into play there. But we make sure that we are within a foot of the microphone and usually a lot closer — close to six inches — in working with any of our on-air talent. That’s another element that goes into it.
The article you're linking to has a dateline of 1999.
Yes, it does.

The majority of C++ programmers make use of:

- RAII

- String classes instead of char* überall

- Vector classes instead of char* überall

- new and delete instead of malloc()/free() and casts

- References for out parameters instead of pointers

- Real enums, specially since C++11, instead of #define

- Smart pointers for memory management

- Type based programming to reduce errors

- Minimize the use of the pre-processor to #include and macros, only when they cannot be expressed via templates, const, constexpr and inline.

Most of the unsafe C++ code is written by the "C with C++" sub-community that are mostly C refugees forced to use a C++ compiler.

Also while the C++ community is pushing for safety with activities like the C++ Core Guidelines and reducing the amount of UB in the standard, the C standard community doesn't care at all.

The only thing that the C community has done regarding security was the Annex K in C99, which was proven so good that it became an optional feature in C11.
String literals in SQL were a mistake.
NPR (and their member stations) do not have advertising per se. Rather, they call it underwriting and there are very specific rules about what format the underwriting can take. Here are the guidelines:
http://www.npr.org/sections/ombudsman/2015/03/11/392355447/n...

I used to work at one of the largest NPR affiliate stations. Listener support is hugely important, most of the money we made came from listeners. IMHO, NPR is pretty successful in that they have built a model that supports quality journalism, at a decent scale, without a lot of annoyances for the user. Newspapers and other media orgs could stand to learn a lot.
> Facebook tricked me into downloading an obfuscated script

This title suggests Facebook is doing this, even though it's clearly a malware exploit
They do feed people nutritious food considering its probably the cheapest most convenient prepared calories you can buy that happens to taste very good. It may come as a shock but a lot of people like McDonalds. McDonalds doesn't care what it sells you, it just sells you what sells best. There is no global conspiracy to make Americans fat. Yes, there is a trade off between eating too much food like McDonalds and early death but that's a trade off people make. No different than the trade off higher income Americans make when they go to boozy brunch and buy homes that they likely can't afford. Are bars serving over-priced artisanal cocktails to upper income Americans "preying" or is lack of autonomy and free will only a feature of those in a lower socio-economic class.
The elder are not silenced, they can defend themselves.

> but also tried to use the fact that people were older as prima facie evidence that their reasoning was bad.

Like it or not (I don't like it either), but that may be an argument. Calling that denigration is the easy path out, but it leads nowhere. What has to be done is to refute it, however vulgar that might be. We're dealing with the results of a vulgar, uneducated, haphazard decision anyways.
The Increasing Cost of Consumer Startups
The content is still entirely readable. I'm not arguing that it's not annoying, I'm just saying you're over-exaggerating.
Writing Checks Doesn't Make You an Investor
They shoot for flat when they make them and they're indeed flat enough for sleeves-up radio work, but I have heard folks say (somewhat correctly) that they're a bit bright up high and don't have enough gas down low. I can understand Marco's opinion in the context of being an audio nerd, because they're flat, but potentially not flat enough for some kinds of listening.

But yeah, couldn't agree more. Price point.
> The NPR sound has so many tentacles. If we’re just focusing on the studio side, which was actually the easiest thing.

They didn't go into any of the other things.
How to Hire Entry-Level at an Early Stage Startup
> Unfortunately, every time the EU has an opportunity to change, the answer the Eurocrats give is the same: "Let's keep pretending everything is fine."

But is it really the Eurocrats who are blocking progress? It seems to me like most of the blame should go to the European Council. Whenever I see the Parliament (or really anyone) push for meaningful reform, it gets blocked by the Council.

Instead of blaming our national politicians for their failure to push for (or even allow) reform in the Council, we keep electing them and blame the EU for their failure.
Yep. I believe when I created my account, I picked ones that were definitely not real answers, ie. "What's your favorite sport?" answer "lawn darts".
Someone should write a retrospective on the Twelve-Factor App. Have these guiding operational principles changed with the technology / available network bandwidth?
Just give the wrong answer and keep track in your password tracker. At least social engineers can't figure that out.
A Scaling Magic Trick
That was a badly rewritten title, and we've restored the original. (Edit: never mind–the rewrite was at the host end.)

Submitters: please use the original title unless it is misleading or linkbait. That's in the site guidelines (https://news.ycombinator.com/newsguidelines.html). Making a title more misleading and linkbait is the wrong direction!

(Submitted title was 'Facebook tricked me into downloading an obfuscated script'.)
This is so frustrating.
Give https://interceptapp.xyz a try. Fully native. Currently in alpha.

Disclosure: I'm the developer.
As widely reported, Greece has no access to the financial aid for Greece. Those amounts are deposited directly to EU banks which bought Greek debt because of the ECB guarantee.

No more than 5-15% ever passes through Greek hands.
I would say, life is too short, try doing what you love te most. Also, beware that making more money will encourage you to spend more money so you will feel the need to make more money, again. Maybe a better question is: Who do I aspire to be like and which decisions can get me there?
All this time I thought it was frozen somehow in the 'OS X Panther' UI, I've only seen screenshots so I didn't realize it was a Java app.
>Alex Garden. Garden, 41, is the former president of Zynga Studios. Before that, he was a general manager of Microsoft's Xbox Live.

Xbox? Zynga? This company will have us buying $10 pizza-points for pies that cost $7. Also you could sign up for credit cards to get coupons.
How to build a just society
Even if you can in theory, it's still a bad idea to try to do that. Statistically speaking, you will get it wrong.
> There's a classical liberal case for Brexit, though, which Gove articulated reasonably well.

Correct. It really is hysterical watching the quibbling about currency exchange rates and the stock market.

To put it politely, they have no idea what they are talking about. These students have never bought an option or held a single share but it's very generous of them to worry about the fortunes of currency speculators and bankers. That thought did not have its origin in their heads. Ron Swanson and I are very relaxed right now, watching Yes Minister and drinking Earl Grey tea.
Why do you think this is spam, vs all the other discussions of commercial products on HN?
You're erroneously assuming the legal system is intended to work well when you're not wealthy.

For the same reason, never piss off a retired lawyer. The amount of asymmetrical pain they can cause you is virtually unbounded.
There are valid use cases for this. For example, web crawling needs to do millions of resolutions one time which completely nullifies the need for a cache.
> submissions here that are cracks, keygens, etc., and they always get flagged and killed

Those are almost always spammy. If there's something intellectually interesting about the post, that would be different. (Not saying that's the case here.)
He's had it up at that url since 2004, with a major update in 2008... says the Wayback Machine.
In other words an assembly line?

What about the machine learning algos which suggest pizzas based on previous purchases. What about the convolutional networks to recognize that each spray of sauce is truly unique and 'artisanal?'

Where was the speech recognition for ordering and the oven encapsulating drone delivery swarm?
The veggies in NYC's hispanic green markets are also really cheap. Same with the produce in the Korean markets, the Cambodian markets, etc.

While there might be something unique about the Chinese markets, I think in general stuff marketed to white people is just overpriced. Just look at how the cost of food at Smorgasburg compares with the cost of prepared food in Flushing, or at the price of housing between those two locations for that matter.
I guess they never quite solved pagination.
We s/DRM/Watermark/'d the title since people were complaining about that bit.
Here in Central NJ (Princeton area), fruit and veg are also notable cheaper in the Asian supermarkets. Which we fortunately have two.
Distasteful to who, precisely? Even the fact that NPR exists is distasteful to many. On top of that, any choice it makes as to what to broadcast prevents something else, possibly even equally worthwhile, from broadcasting.
I just ran in to this using Google Drive for Mac yesterday. I assumed it was a bug and sent them feedback to fix it. I had no idea this was a thing.
No, he's talking about audio (sound) compression.

https://en.wikipedia.org/wiki/Loudness_war

This is one reason why I've stopped buying "Remastered" CDs - they almost always sound worse. Shop at Discogs.com where you can specify the release date, or buy from a quality-oriented label like mofi.com
Quantum Computing: A Primer
You can use visitor to implement multiple dispatch, but that's not it's "real" point. The real point, as stated, is to allow polymorphic methods that aren't defined directly on the class.

I've seen a lot of implementations of the visitor pattern, and almost all of them used it for single dispatch.
Authy addresses the losing your phone scenario.

Edit: I realise you're probably referring to proprietary bank authenticator apps
It feels sad to click a link that makes one's browser freeze. The link in question is a fine example.
Not trying to be stereotypical but perhaps it's just because Chinese people simply value price more than other people?

one only needs to walk through Chinatown to see how much things are cheaper there. It's not just fruit and veggies but things like a haircut, repairing watches, bakeries and even pharmacies.
Talent for NPR might pull $300k (I have doubts) but if you're including everybody else when you say "employees" you're shooting astronomically high.

Radio pays notoriously bad. Local TV is just as bad, and they can't even afford photographers any more so reporters do their own shooting; I was laid off as a photographer when that change was made at a former haunt and newscast quality plummeted. (It's popular and spun positively now: Google "backpack journalism.")

Particularly local, you have to really love the craft to be in it. National/international is better, but to an extent. On-air talent soaks up the salary budget at pretty much every shop, universally, and to use a local example like KTVU or KRON I wouldn't be surprised if on-air talent was making $500k or less. You can do better at Google. The producer running the newscast is probably struggling to make rent. The camera operator certainly is, if they haven't yet been replaced with automatic, motorized cues driven by an overworked TD, who is just as worried about their own rent.

Ad-based business models suck, particularly when owners hate spending money. All media owners do. We got punished for the millions that had to be invested for the HDTV transition with 15% pay cuts at one station in the middle of nowhere.
sudo shutdown -r now.

1) It's already muscle memory.

2) It's not hard.

3) Other *nix OSs use is too.
Livestreaming as a monetizable channel for creators (which current tools miss)
In Sweden:
Swedish citizens really are the victims and their society has become too PC. It's not like here in the US.

If you hang a Swedish flag outside of your house you are automatically deemed a racist by your community. ANY semblance of pro-sweden is viewed as unfair by the immigrant community because they aren't swedish, because they aren't included. They've create a culture of everyone is a victim, citizens and immigrants.

It's really a fucked up situation. A situation I hope never comes to the US.
And the straight bananas, don't forget about them.

At last a free market where the curvature of the banana is subject to consumer choice.

I myself prefer the straight banana for optimizing my fruit salad.
Truecaller and Contacts+ do something similar, TrueCaller is very similar to what you describe

https://play.google.com/store/apps/details?id=com.truecaller...
That's incorrect. Cheaper produce is generally known to be the best produce.

For instance, it's summer in the northern hemisphere right now. You can't turn around without running into a ripe stonefruit (peach, plum, apricot).

Because the local trees are bearing right now, not only do you get high quality produce, but you get it for cheap because there's a glut of supply. But if you want an orange, you settle for an expensive, tasteless orange flown in from Chile, cause it's winter down there and that's when oranges become ripe.

If you tried increasing prices of produce in Chinatown, people would laugh in your face and move on down. The Chinese culture is very food aware and value conscious.
Brexit: Wave of racial abuse follows
Why Uber keeps rasing billions
preamps will cost a good couple thousand but compressors, etc... have now moved into digital computers. An expensive set of plug ins will cost $2,000 but you could get by with $200 easily as a professional vocal shop.
Would the short phrase from the website over TSL mitigate this? Even if someone could snoop the GSM, there would still be some (hopefully random) string that only the web server and client would know.
Chipotle sells fast food. Grocers sell stuff you have to wash and cook for yourself.
> When in reality they need the same skills as any good linux sysadmin, understanding protocols, understanding services, and being able to google well in english.

It requires much more. The most important being an intrinsic desire to break things. Persistence is another. Understanding of underlying tech and stuff follows.
The paper is at http://advances.sciencemag.org/content/2/6/e1600708
If it's important they'll leave a message. I tend to check the message right away so if it's an emergency I'll know relatively soon.
Additionally, if you're the emergency contact and I don't answer and you immediately call back, I'll probably pick up.

I don't normally block numbers, just let them voicemail me if I don't recognize it, but if a spammer will double-call like that I'll block them, and it means I'll pick up for emergencies.
> Yes, it does.

Where is this modern C++ culture that has resulted in large-scale codebases free of memory safety vulnerabilities? I've never seen even one, much less a "widespread culture".

> The majority of C++ programmers make use of:

None of this, empirically, results in safe code.

> Most of the unsafe C++ code is written by the "C with C++" sub-community that are mostly C refugees forced to use a C++ compiler.

I haven't seen any evidence for this. A lot of vulnerabilities are found in modern C++11.

> Also while the C++ community is pushing for safety with activities like the C++ Core Guidelines and reducing the amount of UB in the standard, the C standard community doesn't care at all.

I don't see any way that the C++ Core Guidelines are going to be able to succeed in creating a usable language that is memory-safe. Robert O'Callahan and I have elaborated why in other posts.
The Neuman U87 is a very popular microphone in the audio world in general (TV, radio, post-production and even music), especially for voices[1].

Going a little further, the mixing console you can see on the picture is a Lawo Sapphire[2], which NPR seems to have installed in 2012. According to this gearslutz post[3], a 12 faders + central section was starting at 20,000€ back in 2010. You can see on the picture that NPR has a 24 faders version.

The audio monitor on top on the console is an RTW[4]. It's kind of hard to tell which model it really is, but the TM9 for example starts at $4,200[5].

[1]https://www.gearslutz.com/board/low-end-theory/618100-mic-vo...

[2]https://www.lawo.com/products/radio-consoles/sapphire.html

[3]https://www.gearslutz.com/board/music-computers/864209-what-...

[4]https://www.rtw.com/en/products/audio-monitors.html

[5]http://www.rspeaudio.com/RTW-TouchMonitor-TM9-p/rtw-tm9.htm
The answer(s) to that question take(s) the form of documents with many dozens or hundreds of pages. For example:

https://github.com/isocpp/CppCoreGuidelines

So not the sort of thing one can answer in-line in an HN comment.
Among many reasons, I would choose C++ over those languages because it has operator overloading. Expressing 3D spatial math and linear algebra in a language without operator overloading is incredibly tedious.
If you want to publish more ZFS articles, I'd love to read about following topics from Adam and/or members of OpenZFS:

- using DTrace for ZFS operations insight

- state of OpenZFS, comparing illumos, FreeBSD, NetBSD and Linux

- myths and/or often cited problems (ECC, COW unfit for DB load, VM images etc.)

- ZFS version and feature flags wrt portability between illumos and FreeBSD versions

- pool flexibility work that will make it easier to remove devices

- comparison to btrfs, hammer{1,2} and flash filesystems

- the topic of zfs pointer rewrite

- garbage collection and safely removing traces of a file/directory in a COW fs

- rebalancing story compared to HAMMER and future work in this space

- built-in ZFS encryption (independent of system crypto volume support)

I should say that I'd only support an article like that if Ars allows parts of the written text to be incorporated into OpenZFS wiki/documenation.
Cause key loggers don't track mouse clicks. Lol.

Two factor is their best bet.
The elder are not silenced, they can defend themselves.

You could use that as an excuse for any sort of attack. In general, and especially here on HN, ad hominem is frowned upon.
I got caught by that the other day, too, and grabbed a screenshot. Crazy. Guess I'll pick my favorite artist from their exhaustive list.

http://i.imgur.com/DWKiy2a.jpg
Take note that Adam explained the limitations of APFS's current snapshot implementation and how it falls short in some important regards.
You've been posting uncivil and unsubstantive comments to Hacker News. We ban accounts that do that, so please stop doing that. Instead, please (re)-read the site guidelines and follow them. That means posting civilly and substantively, or not at all.

https://news.ycombinator.com/newsguidelines.html

https://news.ycombinator.com/newswelcome.html

Edit: oops, I misread that comment, so have detached this one from https://news.ycombinator.com/item?id=11980147 and marked it off topic.
It happens a lot in junk WordPress plugins. Even with built-in support for doing it better [1], far too many just use straight concatenation.

[1]: https://developer.wordpress.org/reference/classes/wpdb/prepa...
Yes they do so do quite a few others, but this is about the HSBC authenticator :P
> I realize that in terms of blatant power struggles to control the means of violence, tourists will lose. But lets not pretend that's anything other than the strong exploiting the weak.

Please don't go off into ideological boilerplate, not to mention flamewar fodder, like that.

We detached this subthread from https://news.ycombinator.com/item?id=11980175 and marked it off-topic.
Hear, hear! Thank you.
I would especially love it if github allowed repo owners to optionally charge for answer. While freely allowing answers from anyone else.
Distasteful was probably not the right word. Pandering means that you are giving something to someone, that they want but it is something that is immoral or improper to give and the judge of that morality or properness is the society the pandering is happening in. In this case the USA.

Choosing to compress your audio, or to play classical music instead of jazz is not immoral, at least not as judged by reasonable Americans, so it isn't pandering.

If what you are really getting at, is the idea of the US federal government providing tax revenue to NPR is distasteful to many, that may be true, but it doesn't mean that NPR is pandering to anyone. Similarly, FOX News may or may not be pandering to someone, but their acceptance of federal tax breaks isn't evidence of it.
On a differen note, it is a dollar a day for 10 years; not so much, is it? For the added value it gives.
David versus Goliath – A Tale About the Internet in Central London
Well good luck when the keyspace is one billion, and the current population is about a third of that.
Some of these are probably a little too deep to get much traction on the ars front page, but there are some solid ideas here (especially the oft-sited problems one). Thanks for the feedback!

We did run a big piece by Jim Salter a couple of years ago on next-gen file systems that focused on ZFS and btrfs (http://arstechnica.com/information-technology/2014/01/bitrot...), but yeah, I'd love to have more filesystem-level stuff showing up. The response is generally very, very strong—turns out people really like reading about file systems when the authors know what they're talking about!

edit -

> I should say that I'd only support an article like that if Ars allows parts of the written text to be incorporated into OpenZFS wiki/documenation.

That's more complicated, unfortunately. I am not a lawyer etc etc and I am only speaking generally here, but Ars and CN own the copyright on the pieces we run (though syndications like Adam's piece today are different), and wholesale reuse of the text without remuneration isn't something that the CN rights management people like. Fair use is obviously fine, so quoting portions of pieces as sources in documentation is not a problem, but re-using most or all of something isn't (necessarily or usually) fair use.

(again, not a lawyer, my words aren't gospel, don't take my word for it, etc etc)
Java 9 Additions to Stream
Definitely does HTTPS just fine.
I just realized the example on the same page (page 6) hints at the answer:

"For example, [1H2J2j;YNG42A] gives [1 2 2 j 2j; inf NaN -j 42 5]."

Looks like the codes are to avoid printing spaces by alternating with digits. Ugh, but ok. Code golf. Sigh.