skysight-inc/HackerNews huggingface dataset:
Don't have time for a detailed review. However, I like that you're working to replace IPsec with something simpler, easier to use, and with flexible deployment. Crypto algorithms look better than most VPN's I see as well. Good work on all that. Just remember to aid others' verification efforts later on by keeping it modular, minimal shared state, simple constructions in code, and so on. Whatever passes through a decent static analysis tool.

Also, one of easiest, formal methods is Design by Contract which can be emulated with asserts for pre- and post-conditions plus main invariants. Quite useful to encode operating assumptions in there. Such can also be used for automating test-case generation, fuzzing, dynamic analysis, and covert channel analysis. Oh yeah, definitely do a covert channel analysis on anything that gets near the keys to plug any leaks.
So instead of solving the problem (lack of housing that people can afford), you're going to solve a different problem (lack of expensive housing), hoping that eventually the solution trickles down to everyone else? How about, instead of adding a few hundred expensive units, you take the same amount of real estate, and add 1,000-2,000 less expensive units. It'll add more housing, as well as add it where it's needed most. Rather than waiting a few years for a game of musical chairs?
"And yet, and yet. It's easy for a generation that has only known peace and relative prosperity to forget that the arc of the political universe is long, and it bends toward wherever you point it. If that's toward chauvinism and isolationism, well, that's what you'll get."
A more interesting question is whether to compress or sign first.

There's an interesting article on that topic by Ted Unangst:

"preauthenticated decryption considered harmful"

http://www.tedunangst.com/flak/post/preauthenticated-decrypt...

EDIT: Although the article talks about encrypt+sign versus sign+encrypt, the same argument goes for compress+sign versus sign+compress. You shouldn't do anything with untrusted data before having checked the signature - neither uncompress nor decrypt nor anything else.
I went back to a smartphone after having lost mine for a period of months. I regret most of it every day. There are things I like about it. The GPS, the music, the podcasts, the camera; all in my pocket. It's just all the other stuff that it comes with — the notifications, the interruptions, the availability.

I know that's on me. It's a will power thing. But I'm only human. When I didn't have my phone on me, it forced me to really examine if I cared about something or if it was just fleeting. Like, who won the NHL MVP in 1978? If it was still a burning question the next time I was around an Internet connection, I'd look it up.

But 9 times out of 10, I'd forget. And wonder. And my life was better for it.

My current system is that I turn off all notifications except from my mother and wife. My email is not fetched unless I fetch it. I have no games on my phone. I've never had Facebook and haven't posted to Twitter in over two years. But with all that, it's still not the same.

I've relapsed at least twice since that talk. I have a phone. And it's still my boss. But I'm working on a bigger plan to abandon it all together. Whether I can get there or not, that's another story.
I think you're discounting the spite vote.
But half a pie is a slice of pie, right?
Axel Springer wins partial victory in German ad blocking case
I tried Node/Restify, but I just can't problem-solve using those tools, so I went back to ASP.NET/Web API using C#.
That sounds good. What's its current implementation language?
The troublesome part is the headline.
I can't up vote you enough. I don't even want Bluetooth to improve anymore. I have given them enough time and energy as well as money for them to improve. All Bluetooth SIG provided was disappointment, frustration, one after another.

I want something to completely replace it. Hopefully coming from WiFi 802.11.
Sadly I am not aware of anything coming.
Python. Django or Flask depending on the projects' needs
You are making the argument that whatever the company does is legal. That's fine and I don't disagree with it.

It's not just a matter of not understanding the entire legal contract. Someone could understand every single thing, but not realize, like you said above, "you won't be told about funding rounds if your contract doesn't mention it." They wouldn't even think about that because they aren't experts in that field.

I've negotiated plenty of employment and IP agreements. I've found 100% willingness to, at the least, discuss them. But employee options grants must often be the same for everybody. And for a normal employee (as opposed to some C-level executive hire), once you start negotiating "in case I leave early I want more rights" you are signaling bad things.

Really, all I'm telling people is "if you don't understand something fully, assume it's worthless." Your reaction is that, for some reason, employees should jump into the deep end of the pool and try to outsmart the VCs at the game they play every single day of their lives. And for what purpose? The vast majority of the time the options are going to end up at $0 anyway.

I say no. Assume legalese is written in order to screw you over. Smile and accept the options because you might get lucky, but never ever stay late at the office imagining how they will make you rich.
If you have a blob of encrypted data, that should normally tell you nothing about the plaintext, except its approximate length (assuming it wasn't padded). Normally, the length of the plaintext should tell you very little about its content; it doesn't do you much good to know "the message is about 4096 bytes". However, if you compress first, then you know the approximate length of the compressed data, which means you know something about the content of the plaintext.

As one of several possible attacks: imagine the attacker could supply data that will get fed back to them in the encrypted blob, along with your own data, and all compressed together. The blob will compress better if your data matches their data. So, repeatedly feed in your data and get back blobs, watching the total size of the compressed-then-encrypted blob, and you can predict enough about their data to guess it.
San Francisco collects no shortage of taxes.
The way to solve the problems that arise from the fact that organizations are not people isn't to treat them even more like people. You can't punish an abstract group. The others here are right: it would have enormous negative consequences. But that's beside the point. It wouldn't even do what you think it would do. There is nothing to punish. You're swinging your fists at a ghost.
Space is infinite. Surface area on habitable planets is relatively scarce.

Devising a way to cost-effectively stack housing volume in a way that is more acceptable to middle-class buyers than the existing condominiums or multiplexes would do much to alleviate the negative effects of suburban sprawl.

I think that elevating the street/garden level one story off ground level might work. That way you can make all the houses touch each other, and their utility easement tunnels, and still get vehicles in and out. Essentially, you pack the buildings in as tightly as possible, and make people drive or walk over the roofs to get out of the neighborhood. Heavy trucks would probably not be able to enter unless structural support for elevated roads somehow becomes much cheaper.
That sounds nice. It won't happen, but it sounds nice.

Every generation has felt they could do things better than the previous (old people shouldn't be allowed to vote has been stated lately), until they learn what it was the previous generation had to deal with. The mutual distrust among certain parties do go away after time, look at all the countries that were at war in WW2 that are now allies. But there is always somebody that jumps in to take advantage of the newfound peace and harmony to further their agenda. Sometimes it leads to a return of mistrust, sometimes it leads to war.

What you are describing is every agency of authority agreeing with each other across numerous nation-states, economies, cultures, and more. Some of which are directly opposed to each other, possibly violently.

The human race is simply not ready for that level of cooperation and will not for a very long time. Losing sight of that will only lead to hardship and suffering. Likely the only way for such a thing to happen is for it to be forced among people with violence. Then that status maintained for multiple generations until the old ways have been forgotten.

But your way is a nice thought and should be attempted at least.
Languages that are cool/hip/popular here will win.

Odd that Golang was left out with it fitting that criteria... but I still stand by the assertion :)
Bottles That Could Make Every Drop of Shampoo Count
Is there a way to connect from macOS to the VPN?
Updating our security guidelines for digital services
Thank you!!! This helped me find two memory leaks that I have been trying to locate for 2 weeks - in less than an hour.
It wasn't a live system but being able to attach to a running process and specify a timeout allowed me to almost completely filter out init and garbage collection from the output. Valgrind was not helpful, I was at the point of looking at raw core dumps (and now I know what the problem is it would probably have worked...)
does Google take server location into account when showing search results? edit: seems they might. This is a probable cause for the increase in your traffic

https://support.google.com/webmasters/answer/62399?hl=en
That doesn't necessarily make them wiser.
Seriously? No you don't. There is no way you are using Go in your every day production at it's currently level of maturity. And if you are, god damnit, I hope nobody has hired you.
Ender's Game!
Hey! Knew I recognized that username. You also make pass which I've been using since you released that too. Definitely going to give this a run. Thanks for more useful tools!
Tests belong in the project they're testing. Test tooling belongs elsewhere. It's not clear what your setup is, but it sounds like the tests themselves live in another repo. That's bad. It's not bad to have a separate repo for your tooling/test runners. As you've just seen, new tests need to go out simultaneously with new code.
How to monitor which files are accessed through NFS?
Yeah, anecdotal but every friend of mine that complains about BT does it in relation to their Android devices.

I've heard a couple of complaints about Macs but they're rare.

Seems the Android BT stack is just more... flaky. I wonder why...
I think make_clear is just not good style. It conflicts in meaning with std::make_unique, which allocates a std::unique_pointer. When I see make_clear I think it allocates a new, empty object.
> Does the server get a separate wg interface for every client that connects?

No. Each wg interface has a public/private key. It then has a list of peers' public keys and associated allowed IPs. By tying each public key to the allowed IPs of that public key, you can be sure that if a packet comes from wg0 and comes from a particular src IP, it comes from who you want. So no need for a new wg0 for each peer.

> Does this do a DH key agreement to guarantee forward secrecy or does it literally encrypt the packet with the peers public key?

It uses a 1-RTT ECDH key agreement based on the Noise Protocol Framework, with identity hiding, perfect forward secrecy, and so forth. So, it does what you hoped it does. :)

> Phase3 DMVPN

I'm not familiar with this, but I'll read up on it. Just found a large cisco document describing it. I suspect that "automatic discovery" wouldn't be very much to my taste, but I'll read up on it before dismissing it wholesale.
First of all, congratulations on launching !

This looks interesting and I will be sure to check it out when I get the chance. I see from the examples on the site that it's IPv4 everywhre. Is there IPv6 support ? If not, is it on the roadmap ?
3$ Here is World's “cheapest smartphone” by Indian company – APPlite
As mentioned in the roadmap and the cross-platform page, we're working on a cross-platform userspace client, so Mac and Windows users can use it too. It's in the works!
Remember interoperability in mixed-OS environments. You won't get uptake or contributions from Microsoft, etc. if they have to re-license their kernel in GPL v2. Getting all links encrypted by default might be a worthy enough goal for a BSD license that proprietary will mooch off of. We all benefit in such situations. Especially given how often they muck up VPN's when they code them on their own. ;)
Flagged for clickbait title
The simplest formula that I can think of is

pi/4 = tau/8 = atan(1) = 1 - 1/3 + 1/5 - 1/7 + ...

4 vs 8 doesn't seem like a change in the arbitrariness of the constant. The other major simple ones are:

pi^2 / 6 = tau^2 / 24 = 1 + 1/(2^2) + 1/(3^2) + 1/(4^2) + ...
pi^2 / 12 = tau^2 / 48 = 1 - 1(/2^2) + 1/(3^2) - 1/(4^2) + ...

Once again, 6 vs 24 (and 12 vs 48) is an arbitrary difference in arbitrariness. I'm not really aware of any commonly used series expansions that don't involve a constant multiply just to get to pi. On the other hand, I'm not aware of anything super-elegant that yield tau here either, so I think it's a tie at best.
Aye, a lot has changed! I know change in itself is a pain; despite the quantity of changes I did try to avoid unnecessary change, and batch the changes into a rare major release. I believe such change is worthwhile, and that it’s better in the long run to keep improving the API than to be tied down to past mistakes.

The renames (like d3.voronoi instead of d3.geom.voronoi) are superficial changes, so although it might seem disruptive, it should be pretty easy to update your code and habits. At least, I haven’t found it difficult… The more design-y changes, like the new d3.stack and d3.treemap, require thought to migrate existing code. But the new designs are much better, so I hope you find the effort worthwhile.
The original opinion describes an abstract organization of people in anthropomorphic terms as something that can be punished. That's absurd on its face.
Node at work and for quick projects, Elixir for fun.
WISP: “We’ve Got Customers from Some Very Interesting and Unexpected Industries.”
Google has code in C++, Java, Python, Go, and JavaScript spanning countless different products (Google has a lot of products), all in the same repo.
But the metadata is a form of structured data and as you state is semi known plaintext; i.e. the structure is known, and to a lesser extent also the data (some fields have a known or limited range of possibilities).

Aside from the headers the compressed data it self often has structure; take the Lempel Ziv class of dictionary encoders rely on repeating data to compress. It is just this fact that it is repeating means that you can guess with much higher probability than normal what certain bytes will _not_ be (because longest words that match the dictionary are chosen to tokenised to maximise compression); i.e. bytes that _don't_ match a word suffix in the dictionary will restart the search for a new matching word / token pair.

Having said that the plaintext itself is almost never random; but the key thing does the attacker have any crib that might be used to have a good first guess that can reduce the amount of work required.

So which is more guessable; the semi-structure, at the byte level, of compressed data, or the possible semi-structure of the original plain text? If you are dealing with a protocol that specifies compression (and in particular which compression method) you may have given away part of the game.

One way is to "bump up" the entropy and add "chaff" to the compressed stream before encryption; i.e. add some entropy but less than what would be less than the amount saved through compression. My gut feel is that the efficacy of this would vary depending on plaintext, compression method, and encryption method. You also run the risk of side channel analysis via CPU, RAM, power usage etc.
From the comments, seems like Other=Go ;) I'm in that camp too.
IPv6 definitely is supported. I should add some examples. Every place you see an IPv4 address an IPv6 one can go. They can even be mixed and matched. There's full support and it works quite well.

Thanks for the documentation suggestion.
How to Use Landing Pages to Fix Conversion
Looks awesome! I can't wait to play with it when it hits 1.0.

In advance of that, I'm curious: What's the tl;dr: on how this compares to Tinc? In particular, I'm wondering what WireGuard's mobile story looks like, especially in comparison with Tinc's (which is pretty rudimentary as far as I can tell), and about the extent of effort that's likely to be involved in ongoing configuration management.
In my experience with small teams, maybe one person will take testing & automation seriously. If they've got a couple small codebases to worry about, it's possible for them to manage. One giant codebase would be too much work.

Obviously not the way it should be, etc, but reality bites.
The Strategic Helium Reserve is a consequence of WWI and the desire to not be subject to shortages of Helium for lighter-than-air craft during wartime.

https://en.wikipedia.org/wiki/National_Helium_Reserve
I love the comment consolidation feature like Reddit
When I've had to use my mobile as an access point for my laptop, there's been a huge difference between Linux and Windows, due to Windows using a lot of bandwidth in the background for updates and "stuff".
How to make your speech instantly visual? Protokol – speech to text tech
Yeah I'm not saying the payouts are great. But let's say, pessimistically, that the lawyers took 80%; if they had done it pro bono, you'd get 5 coupons instead of 1. Better, but not by much.

A small payout could be due to greedy class action lawyers, but it could be due to the corporate lawyers successfully arguing damages down to nearly nothing (compared to the size of the class). The second one sounds more likely to me.

In the cases I've heard about, the corporate team had orders of magnitude more resources than the class action lawyers (think 3 lawyers working part time on the case vs. the corporation having an expert prepare for 2 years to appear once in court. I am not making this up.)

I'm biased though, the few class action lawyers I know are good guys, it's possible most aren't. I havn't looked at the field in general, and IANAL, so take that with generous salt.
CSS Zen Garden: The Beauty of CSS Design
Just added go
Law enforcement will love this. It will enable the prevention of citizens from making videos of police stops.
Endless Story with Markov Chains
There was also JavaScript Style Sheets: https://en.m.wikipedia.org/wiki/JavaScript_Style_Sheets
yeah, but what about compress, encrypt, compress, encrypt
..
compress?

:)
> The others understand better that you can respect yourself even without the overblown, unrealistic views on your own abilities and virtues

I don't think self esteem means what you think it means.
What k-pop can teach us about design
Unique voice verification by Protokol app
Java at work and python for side projects
https://telegram.org/faq#q-how-are-you-going-to-make-money-o...
Changes to Evernote’s Pricing Plans
My answer was perhaps a little tongue-in-cheek, because I agree they won't. You'll hear things like "we want to encourage our employees to give it their all" and "we believe performers should be well-compensated," but those don't really answer the question.

You also might be told "you are in the same pot as the founders," which is technically true except that the founders can still be never-work-again-rich after a 90% dilution, and the founders will typically have a seat at the table when the question of "how do we re-up people who have been diluted so low but are still capable of spiking the deal if they don't like it?" comes up.
Also interesting is which compression algorithm you're using. HPACK Header compression in HTTP 2.0 is an attempt to mitigate this problem:

https://http2.github.io/http2-spec/compression.html#Security
What do you mean by 'fix'? Who set it? I understand the US privatized its reserve, but I don't understand how the market seems so out-of-step with reality. What about other markets? EU, SE Asia - are they seeing the same low prices?
As a hardcore BSD user, GPLv2 is perfectly fine with the BSDs. They all ship with GPLv2 software by default.

FreeBSD doesn't like GPLv3, but OpenBSD and DragonFlyBSD don't have a problem with it. I don't know about NetBSD off the top of my head.

IMO this seems like something that should be GPL and I think you needn't change it.
> Just remember to aid others' verification efforts later on by keeping it modular, minimal shared state, simple constructions in code, and so on. Whatever passes through a decent static analysis tool.

Yes this absolutely is the goal. I'm trying to keep the codebase as small and clear as possible.

> Design by Contract

Working out the precise pre and post conditions of every state would indeed be worthwhile. For all state transitions of the protocol, I've worked out by hand every possible combination and accounted it for it. I should publicize this work (i.e. type up my handwritten notes), and then let others join building on top of it.
> Most of us don’t know that a serving of tomato sauce has more sugar than a serving of Oreo cookies

Most store-bought jar sauce has sugar in it (and tastes gross). You can absolutely make sauce that doesn't have sugar in it, and some of the nicer jar sauces are that way also.

> or that fruit yogurt has more sugar than a Coke

Again, maybe if it's Dannon, but you can also buy plain yogurt and put fruit in it. Sweeten to taste.

> or that most breakfast cereals — even those made with whole grain — are 75 percent sugar

Maybe Post/General Mills sugar cereals, but again it's not that hard to find cereal with low sugar content.

This article argues that the problem is solved with regulation, but a lot of what we eat is influenced by government subsidy (i.e. corn/corn syrup), which makes many of the unhealthiest foods inexpensive. The article makes it sound like all processed food is loaded with sugar and that grocery shopping is dangerous. That may be true of "food deserts" but it isn't generally true.

The nutrition facts are already there. If somebody can't be bothered to see that whatever they are eating has 30g of sugar per serving, what can you really do about it?
You should have filed a complaint either way. Filing a legitimate complaint with the FCC will get their attention ASAP. I've done it before with my ISP (RCN) and all of a sudden I was getting executive support and a much better deal. It works.
Wish the world were a better place? Sponsor RubyConfCo by Sandi Metz
US border authority seeks travellers' social media details
What hosting provider? IBM?
I don't know whether this is actually as good an idea as it sounds, but it sure does tickle the same sense of awesomeness in me that Virtual Light's Golden Gate first nurtured.
Yeah, but the article uses a lot more words to say it...
...collected from a mid-level bureaucrat in the early 18th century who apparently never had the opportunity to be willing to die for his lord, and which didn't become popular until the early 20th century.
And holy monkey, your comment is about as self referential as they get. You don't offer any coherent points to argue, you make a comparison so vague that, indeed, you do not actually tell us what it is, but rather just that you have a 'vague feeling of recognition,' and a bevy of insults that you don't elect to justify with specific reasoning (is the corporate death penalty idea violent, or is it something else that causes you to call the parent comment violent?).

You have every right to complain about situations you don't like, but because your comment so clearly exemplifies the very situation about which you are complaining, I would be foolish to give your complaint much credence.
VersionEye goes open source