skysight-inc/HackerNews huggingface dataset:
I knew someone will catch that. I was a bit sloppy on that sentence :) I will have to improve it.

1- We only need secure multi-party computation algorithm if we cannot trust the server. In cases that server can be trusted with behavioral fingerprints then we can use server to to do the comparison.

2- One can assume that in some cases the server should not know about the behavioral fingerprint. For example in case that this procedure is implemented as a service, it might not be proper to send client side mouse movement and key presses to the server. Still server can be trusted as a mediator but should not know anything more than fingerprints being almost equal. You are right that behavioral finger prints like mouse movement are fuzzy. Specially since agent and browser are running on two different threads they get different time stamps for each mouse location. In this case you have to introduce some acceptance for fuzziness as you mentioned. Some statistical comparison. This is not as easy as checking equality securely (like Socialist millionaires problem) but you can in theory turn any circuit and make it secure so that the circuit will only expose fuzzy equality and nothing more about the data. See secure multi party computation: https://en.wikipedia.org/wiki/Secure_multi-party_computation

But your concern is valid since in practice the computation involved to do secure multi party computation in this case might be demanding for a browser. I have yet to verify that in practice. Keep in mind that our case is a bit more relaxed than general secure multi party computation problem since we have a server that can be trusted a little bit. Maybe that can help us a bit in devising a secure computation scheme. Any volunteers to work on that? :)
> Anyone have a take on how successful this is likely to be?

I'm pretty sure at this point it will likely fail, Erdogan will retain power and will have carte blanche. Similar to Chavez when the people put him back in power.

Its likely a very dark future for Turkey in the form of a civil war or total collapse of secular power.

http://www.bbc.com/news/world-europe-36809083

> He was seen surrounded by cheering supporters, saying in a live TV speech that the coup attempt was an "act of treason" and the army must be cleansed.

Starting with the cleansing of the Army, likely.
>Firstly, if there is one piece of software that I want to be fast, lightweight, and most importantly secure, it's my terminal emulator.

So you prefer one written in ... C? Because C is secure by design? <rim shot>

Coding a terminal in Rust or even Go would be awesome, I admit...

>Standardised plugins: what standardised plugins? npm modules? Not sure what you mean here.

See the demo animation for a (silly yet awesome) example.

>250k+ Node modules

Point is to use them to do other cool things client-side. It's a Really Big Toolbox. The CSS/HTML part can potentially provide interesting options as well.

>It's not hate when people bring up salient points.

>>>without having to write any JavaScript, which is its own achievement.

The latter quote is from the comment I was replying to. It is not a "salient point," but simple JavaScript hate. His other points were that, in the past, he had written a JavaScript terminal as a school project that he ended up hating, it took him thousands of lines of code, and he'd done it before Node existed to provide the batteries. What salient points do you actually refer to?

I'm not really disagreeing with you about the terminal: Honestly I will keep my lighter terminal with tabs and good UI for most real uses. But I love to see people innovating; providing extendable architecture is the way we get great new features.

Maybe there's no killer feature in this one to justify the extra weight, but neither do I see the need to pile hate on it because JavaScript; even less because they had a bad experience in school writing a JavaScript project that was similar.
The modules are there so you can add features and you have the entire Node toolbox at your disposal.
There is literally almost a century of research in this area, and even a decade+ of much more impressive work on the natural language front.

If you care about anything beyond problem sets in freshman math courses, this post is noise, not signal.
I was talking more about how it affects end users. Understandability of the code and dependencies are irrelevant in this case. Load time is important, but LOC is only a proxy for that metric. It's not totally unreasonable to imagine a well-written app with twice the code start faster than a poorly written one.
Good point about the safety. That said, a nice Ag Cat or Snow AT can carry a hefty load of those pellets in the hopper and spread it with venturi or even a centrifugal broadcaster. Probably a ton or two or more?
52,477 downloads in the last day
335,554 downloads in the last week
1,448,740 downloads in the last month

Not bad.
I'm in the US, and this has been this single biggest factor in changing my finances. Move things out of accounts you have easy access to automatically, use that as an emergency fund and the source of any debt payments. Then just focus on your main account as your "available balance"
It's actually restricting our thought to an annoying extent that we've overloaded the term "operating system" so much. This isn't Sandstorm's fault -- Windows already has billions of people thinking "operating system" == "desktop environment" so the ship has already sailed.

I would really like a word that describes this set:

+ Unix CLI
+ WIMP desktops
+ Browsers
+ iOS touch interface
+ Android touch interface
+ Emacs (when used for general computing)

Perhaps "user environment" would work?

EDIT: For me at least "platform" doesn't quite fit. I think whatever word is best should imply "single user interface" which platform doesn't necessarily.
I don't understand why more people haven't flagged this story.
Great. The question was "what is the your favorite way to save money?", not "what's the best way to increase my net". The two ideas of increasing income and saving money are by no means mutually exclusive, you should answer the side that he asks for.
Why yesterday's Paris attack was hushed/flagged in this forum?
28 Missing 9/11 Commission Report Pages
> Given the focus on non-technical users, How does sandstorm mitigate issues that are caused by NAT and NAT traversal?

At present... not very well, to be honest. If you use sandcats.io (our dynamic DNS), you do have to open port 443, which means you need to understand router config. It would be cool to automate that with UPNP but we haven't gotten there yet. The prevalence of "hairpin routing" bugs in home routers is also a downer. :/

One idea I'd like to pursue someday is the one taken by IndieBox (no longer Googlable -- the one by Johannes Ernst): have a device which sits between your modem and your internal network, so that it can intercept DNS and make the server available at http://sandstorm or whatever. Then do UPNP to make it externally accessible (if desired).
Intel Readies New NUCs Based on Kaby Lake and Apollo Lake SoCs
Well the big one that LXC does and has always lacked is a story for how to ship code. Docker has distribution / hub, rkt has quay, LXC has... nothing.

If LXC had a registry long ago, I suspect you'd see a lot more people using it directly.

Now the big difference is that LXC is mostly (as of right now) a Canonical project and they have a habit of trying to compete with the world. LXD looks interesting from a technology POV, somewhere between Intel's Clear Containers (where they seem to have gotten the idea from), and Docker. I don't see it really gaining any traction however.

A few examples that spring to mind of them competing with the world and for the most part, failing:

* bzr - if you want a python vcs, use mercurial
* Upstart - we all know how well that worked out
* Dekko - their fork of the lightweight email client Trojita
* juju for config management. This one is arguably one of the best things Canonical has produced tech wise
* Unity/hacked up GNOME - because working with upstream is boring, and the world wants lots of Ubuntu phones
* Their own window manager, Mir, because they can do it better than Xorg developers who are writing Wayland with decades of experience.

The list goes on and on.
In the US the armed forces swear to defend the Constitution and to obey the President[1].

[1] https://en.wikipedia.org/wiki/United_States_Armed_Forces_oat...
The Playlist Professionals at Apple, Spotify, and Google
A good chuckle. The transition was like that proverbial bath that slowly but progressively gets warmer and you don't notice till you're cooked --except they messed up at the end "ZE DREM VIL FINALI COM TRU!" should be "ZE DREM VIL FINALI KOM TRU!"

That said, reminds me of the spelling of foreign words in Malaysia or Indonesia [1]. Phonetic using Latin script.

[1] https://en.wikipedia.org/wiki/List_of_loanwords_in_Indonesia...
Sandstorm is simple an intuitive which is what a lot of our decentralized projects really need a good helping of. I watched the recent Decentralized Web Summit, and there was so much talk about decentralization, yet so little talk about self-hosting, federation or the projects that are out there doing the dirty work today. It made me sad. People are looking for alternatives to silos, not every one of course, but a lot of people just get overwhelmed with the thought of self-hosting. Sandstorm is helping with that it seems. I wrote more about this here[0] if you're curious.

Keep up the good work!

[0] https://www.alami.io/post/decentralized-web-summit-2016/
Hey there!

This will sort of work, but you will for sure experience deliverability issues. Thats why Plivo and Twilio exist; you need to interface directly with SMS gateways to ensure all of your SMS broadcasts will reach their recipients.

Any thought to simply using an email list instead?
Ask HN: When Twitter is going to fix it's URL shortening?
Most of the time Twitter won’t let you tweet 140 character because of Twitter’s bad URL shortening strategy. Twitter’s shortened URL eats more than 22 characters. That is over 15% of Twitter’s 140 character limit.

So if we try to tweet something with a link in it, we actually have 115-120 characters to tweet instead of 140. That is around 85% of what Twitter actually provides, rest 15% is occupied by Twitter’s short URL. When Twitter is going to accept it as real problem and fix it?
>Above all, any given module has at least one other module that provides that same functionality.

In practice this means that you can often find a module that does exactly what you want.

I find that most modules have great test coverage, and I've found it easy to contribute to several high profile projects in the Node ecosystem. The concept of trying to contribute to, say, Boost, makes me cringe. I would just assume that anything I suggested would be killed or mangled in committee discussion, and this despite the fact that I have a friend on the committee. [1]

95% of the modules I'm using are either relatively high profile build tools or they have TypeScript definitions in DefinitelyTyped, which has a much more modest ~1800 modules. Still I've occasionally needed obscure functionality and have been able to find appropriate libraries for it.

[1] Actually, don't know if he still is, but when I was in closer touch with him it seemed like an unapproachable task.
Yeah, that was my thought. Cost per hour, drone wins. Cost per pound, above some limit, the plane wins.
Our search warrant case: An important decision for people everywhere
Hawa Mahal – Motu Patlu in Telugu
Nick Jonas Chooses DSQUARED2 for “Future Now” Tour – A Beauty Feature
Ah good, they finally published part of the list (I was discussing that with them in early march in person at MIT).

That said, I believe that list is incomplete.
Tram ride shooter for the HTC Vive
Since agents need to be authenticated once with users, the replay vulnerability should not be a concern. But a malware that sits on a client and potentially can access to agent keys can definitely be used to authenticate when phone is in proximity of infected machine. But that level of vulnerability on clients is pretty serious.
Ehh...

I wouldn't recommend enabling it on a server that gives out shell accounts to multiple mutually non-trusting users...

... but I also wouldn't recommend operating such a server, period. Linux has too many vulnerabilities on a regular basis for it to be practical -- yes, many are userns-related, but many aren't.

On a single-user desktop, enabling user namespaces is irrelevant. (User-root separation does not matter on a single-user desktop. All your sensitive data is in your home directory.)

On a server machine that runs one service, again, enabling user namespaces has no significant security impact. If you are running multiple services on one machine and relying on UID separation (with no other sandboxing) for defense-in-depth, then, sure, enabling userns adds risk -- but again, disabling userns does not completely eliminate the risk.
The monarch can dismiss a prime minister (not happened for > 100 years).

Actually, in Australia the Queen's representative (the Governor General) did dismiss the Prime Minister[1]. Interestingly, the Governor General position is closer to a ceremonial president in many other places in that they are appointed by the PM. If the PM at the time had acted to sack the Governor General that would have been just as legal as the other way around.

(Actually there are some good arguments that sacking the GG would have been "more" legal, in that the GG is supposed to act on the PM's advice. Fortunately the PM didn't push the issue, because that is the road to real trouble)

[1] https://en.wikipedia.org/wiki/1975_Australian_constitutional...
Yeah that sounds like me! ;-) Although by '03 I was in grad school; ACM stuff was probably '01 or '02.
We have been looking into it too... ;)
U.S. military has launched a new digital war against the Islamic State
In response to your meta question, I found it weird that you specifically asked if the parent felt bad about the 4000 men but not the 34000 women. Though I didn't downvote.
I just replaced three flat ceiling mounted LED lights that I would have expected to last much longer than they did. The crappy power adapter they come with was putting out 5v more than it is supposed to. It was consistent on all the lights so I assume it was done on purpose to burn them out. There is probably money to be made selling adapters that output the correct voltage.
It's same like Reichstag fire. Now Erdogan is more powerful to change constitution with presidential system.

ps: I'm turkish
Are you referring to developing a windows standalone application in C#?
So you can use Algorithmia as only a component of your ML pipeline, or you can use it to try out various out-of-the-box algorithms before taking the effort to run your own. Finding the best setup takes lots of experimentation, anything that can speed that up is useful. We should have easy access to the best performing models in all categories of data: image, video, audio, text, decision making (RL).

Also, these guys could offer support for these models on private cloud servers, to enable privacy.
This is not about being a liberal democracy at all.

If voters don't have the opportunity to get a truthful look at the society they live in and the people who would like to be elected, their votes are meaningless.

You need freedom of speech and a free press to get that perspective. A democracy without freedom of speech and a free press is no democracy at all but a facade hiding an authoritarian state.
this discussion might provide answers: https://news.ycombinator.com/item?id=12099254 (flagging is done by users)
I'm personally most interested in getting Kubernetes to provide support for the Open Containers Initiative specifications. And it would be really awesome if you could use runC as the executor for Kubernetes. Or at the very least, the rkt executor generated OCI configuration files so you could use other OCI-compliant runtimes.
Speaking of which, what is the status of Cap'n Proto? I was looking at using it for a side project recently, but it doesn't look great on the surface: there haven't been any updates on the site since March of last year, and that post was to address a security vulnerability.
Maintainable JavaScript (2014)
You're right! It was '02, in Honolulu.
Where is that chart from, from the book mentioned a few comments above?
I imagine the refugee crisis wouldn't exist. People with computers rarely go outside.. (but seriously they would be able to work remotely much like the Indian tech sector)
Facebook, Twitter and YouTube blocked in Turkey during reported coup attempt
> "Google's policy seems to be radio silence in all cases"

This may be an intentional decision to cooperate with law enforcement. If they only go silent in the case of ongoing investigations, then "Google went silent" functions in the same way as "the warrant canary disappeared" does for other sites, which could in theory jeopardize an investigation.
https://news.ycombinator.com/item?id=12104279
Not entirely on topic, but is the 80/20 principle recursive?
Just a thought - I don't know the word aquaponics. I'm a native English speaker but not living in an English-speaking country, so I don't know if most people do know the word.

It might be worth using another word on the website, in addition to aquaponics, to make the concept more vivd. Something like "self-" something or "auto-" something (sorry, can't think of anything!).

I know you have other descriptions on the site, but the title in the end is "an aquaponics farm", and this is probably how other people will describe it to friends/etc.
So let's crunch the numbers a bit. There are already supercomputers with 40k CPUs, let's go all out and plan to use 80k CPUs. 8TB NVMe cards have been out for a couple years, we should be able to get 16TB cards by the time we're assembling. We should be able to fit four per CPU with a compact design. That gets us to 5EB. That's dangerously close to the 16EB limit, and that's with 2016/2017 technology. And the point where you start having trouble isn't 16EB, it's under 8EB, when you stop being able to use the normal user/kernel split or have all the memory mapped into kernel space.

> Then again, super computers aren't really running the same architecture as the rest of us.

Sure, but there are pushes to make datacenters act more like a giant computer, so there are niceties to a shared address space that aren't restricted to traditional supercomputers.
Can they anonymize the data before receiving it from their clients? It would be a great advantage to be able to use their service in a privacy-conscious way.
This is nothing new, JS just evolved the problem to the next level. Perl and CPAN had notoriously bad modules and each subsequent language has made packaging easier. And now JS is available with easy packaging or just by including a URL to the package. This problem is inevitable. JS just is the current most widely distributed and used language.

I think we have to learn live with crap code and find ways to surface the diamonds. A rating system for packages would be great. Maybe based on developer ratings, amount of contributors/community interaction, and number of unresolved issues?
Looks like a more polished version of https://cronwtf.github.io minus the awesome name and cat picture
Actually the secure comparison protocol is the easy part - even generic SMC techniques are getting really fast these days. Also, they only involve about as much heavyweight crypto as a few TLS handshakes. Extracting a per-user fuzzy fingerprint from mouse and keyboard movements with enough entropy to make brute-force infeasible might be harder.
Direct release link: http://intelligence.house.gov/sites/intelligence.house.gov/f...
"hard assets" means "things that people would want even if the bank that gave them out collapsed". People wanting shiny things is seen as a more reliable collective hallucination than any specific economy.
The Swiss WIR system might be what you're looking for.

https://en.wikipedia.org/wiki/WIR_Bank

https://www.quora.com/How-does-the-WIR-Bank-work
Something like this https://m.youtube.com/watch?feature=youtu.be&v=YRL0u61dLnM
Note that during the Little Rock crisis in 1957[1] it wasn't inconceivable that this could have happened.

The state governor initially used the Arkansas National Guard to block black students from attending Little Rock Central High. Eisenhower federalized the Guard and ordered them to protect the students and let them integrate, and also sent in the 101st Airborne.

[1] https://en.wikipedia.org/wiki/Arkansas_National_Guard_and_th...
If we provided these areas with internet access too via satellite or balloon, you would likely have a whole legion of educated young people fixing problems from within their own society, rather than an outside force mostly wreaking havoc despite its intentions. I don't know if the average American would scoff at the idea, but I am dead sure that it would turn out better for everyone than the path we took.
Cap'n Proto is essentially a sub-project of Sandstorm. Lately, there hasn't been a whole lot of churn in Cap'n Proto land as it is doing what we need it to do. That said, there are a few features I'm becoming increasingly eager to implement, probably later this year. The biggest one is three-party handoff: when Alice holds a capability pointing towards Carol and sends that capability to Bob, then Bob should form a direct connection to Carol rather than proxy requests through Alice. This will be important for improving scalability of the cluster version of Sandstorm, although at the moment it's getting along fine without it.

But yeah, Sandstorm uses Cap'n Proto extensively, so if there's no updates to Cap'n Proto, it's because its biggest user hasn't seen a need to make many changes. :)
Yelp may have a value, but it is not proportional to the square of the number of users.
I don't understand why Cloudflare is used by so many sites. I would guess that for 95% of it's users, it doesn't solve any real problem.

http://www.slashgeek.net/2016/06/07/cloudflare-making-intern...
Links I found interesting:

http://www.beyondlogic.org/usbnutshell/usb2.shtml

http://electronicdesign.com/boards/480-mbitss-signal-integri...

(neither explicitly discusses FPGA USB 2.0 implementations)
No, shiny metal has a (mostly guaranteed inflation rate/cannot be printed carelessly) finite supply. Paper (now mostly digital) currency does not.
OpenStreetMap is at parity with Google Maps.

EDIT: Don't make it sound like we should allow for-profit companies to hold us hostage.
I wasn't aware of Sandcats.io. Thank you for mentioning it.

While it doesn't address all issues, it does go a long way towards mitigating them. I must also take this opportunity to commend you guys on how transport security is handled; the fact that traffic remains secured end-to-end using a host certificate rather than terminating security at the proxy puts sandstorm well ahead of anything else in this space.

Secure, easy, and open source. I'm sold as both a developer and an end-user.
Thank you for taking the time out to reply.
I won't press on this issue any longer; I believe that the links that you have provided are adequate starting points for understanding this issue a little better. Once again, thank you for the reply.
PS: Some of the comments that ESR has made over the years are shocking; I was absolutely gutted to note as much after reading Harding's blog.
How about because they serve hundred of terabytes of our images for $20/month? It has been well worth the money.
I appreciate that the HN community doesn't feel the need to sugar coat something that is obviously bullshit. If you don't want people to critique your work, don't post it on discussion forums.