skysight-inc/HackerNews huggingface dataset:
Both RSA and Elliptic Curve will fall to practical quantum computing, so the idea that you should use (weaker, slower) RSA today instead of curves because of QC is... dubious.

If you see quantum computing as a practical threat (because: you're encrypting and storing static data that needs to resist cryptanalysis for 20-50 years), you need to use a post-quantum cryptosystem. Unfortunately: nobody knows which pq systems will truly hold up to practical quantum computing, and it's possible --- even likely --- that implementations of pq schemes have dumb errors that nobody has thought to check for yet.

That's why Google's first foray into deploying pq crypto feeds both a curve computation and a Ring-LWE PQ computation into its KDF, so that unknown bugs in the RLWE exchange can't destroy the security of TLS. That's how you would seriously account for quantum computing in SSH.

The recommendations in this post are solid.
I worry about the same things he does and I also lean towards his approach (although I'm not as involved as he is). Think of it like this, if you're worried a certain technological development will change life in ways you do not think are beneficial, isn't the best defense against that to develop that technology yourself before others do, so you not only know exactly what it effectively is capable of as well as being able to shape the way it develops from a technological, legal and narrative perspective?
Wave was actually rather great for groupware-like work on textual documents.
Longwinded. As long as I am being paid $990/hour to read it, no worries.
Let's do it. https://github.com/BurntSushi/ripgrep/issues/40
If you are a parent, remember that YouTube results and suggestions can sometimes be rather "suggestive". All society needs some baseline of a moral code and an algorithm doesn't understand that.

Imagine if your child asked an adult neighhbor about the movie "beaches" and they responded with the same answers YouTube does. Go ahead search beaches. Or Beach, or vine.
Asana, with a loosely GTD workflow
Another burntsushi project was recently posted, but didn't get much attention:

https://news.ycombinator.com/item?id=12559515
I don't claim to be well-versed on WWII history, but that's my opinion until I hear a convincing argument as to why using a nuclear bomb was necessary. Just saying it was the "best option" isn't too convincing imo. There were many prominent scientists who advised against using it, so it wasn't a unanimous decision as you make it out to be.

> The firebombing of Tokyo itself did much worse.

Are you considering the aftereffects of radiation on top of the civilian death toll?

I think the U.S. is quite fortunate that they bombed Japan and not another country. Only the Japanese could so quickly recover from the horrors of a large-scale nuclear bombing in such a short period of time. It makes people who blame the U.S. look bad because "oh but they're doing fine now, so it wasn't that big of a deal".
I down voted and left a comment.

Appealing to child stalking as a way to emotionally charge your argument about radio reception is a disingenuous tactic for this conversation. What's more, people who actually work to promote and secure a safer environment for kids don't need people like you constantly exacerbating parental paranoia with a constant back chatter stranger danger.

Please refrain from emotionally manipulative rhetoric.
Show HN: Lamp – a soothing lava lamp
You could say all the same things about AOL and AOL Keywords 18 years ago...
I wish your comment was at the highest level. Everyone seems to be attempting to make the same point in the other subthreads. The example here makes it crystal clear.
It was never illegal. It has always been legal. Debates were around asking if people could change the law to make it retroactively illegal.

Also: down voted again for emotionally manipulative and outright vile rhetoric. If Hacker News is a place for free speech and open debate, you casually turning every conversation you can to molestation, rape and violence is a violation of the social contract we all have to keep the tone civil, and hurts the goal of honest debate.
Fantasy Tourism [1].

A VR app or game that lets me explore (or live in) fictional cities and places from popular works or standalone art. Like Hobbiton, Coruscant, the torus-city of Sigil from Planescape, or the Venice-on-Mars from the Aria manga/anime.

[1]: https://medium.com/@Razengan/virtual-reality-fantasy-tourism...
> Even a cursory study of this subject going back to the manipulations in China in the 1930s makes it pretty clear that the US/Allied cause was righteous.

Ah, but who ended up pardoning the scientists behind the atrocities committed against the Chinese for "precious" data?

I think "righteous" is too strong a word to use when talking about war. Reminds of the Crusades tbh.
Hasn't Windows supported software RAID for quite a while now ?
Rather than a consumption tax (i.e. VAT or GST) a better tax would be an asset tax. Of course such a tax would be highly unpopular with the rich so it has zero chance of ever being implemented.
I got my first few hundred users (aside from friends) by searching twitter for people complaining about the problem I was solving and showing them my solution. Luckily I had stumbled onto a good product market fit and It worked really well. Also posted on relevant subreddits. Everything since has been organic growth.

Edit: my hn clent is buggy and keeps replying to your comment and not the parent thread. Sorry.
Is the upper end getting much higher with aggressive automation efforts like those in Rotterdam? (https://www.flexport.com/blog/port-automation-oakland-rotter...)

Smaller vessels can be cleared out inside a day, but the larger ones are still a project for all but the best equipped ports.
I really like Elm, but the language has some limitations at the moment.

Right now imo, Elm shines as a path for developers to discover the nice aspects of ML without the a lot of upfront investment. As projects get larger, the verbosity and repetition may drive people to check out more expressive languages like Haskell or PureScript.
A Step-By-Step Guide: Hugo on Netlify – Netlify
Yes, the casualty figures for the bombs include radiation.

From what I can tell, it is difficult to make an argument against the bombings of Hiroshima and Nagasaki based on the civilian toll. The pacification of Japan without the bomb would seemingly have led to far more civilian deaths.
The problem is that grep will never obey .grepignore. That's so confusing as to be a deal-breaker.

Also, what about programs that have search functionality as part of their design, but not as their core function? For example, I don't want my text editor to search .min.js files. I'd even prefer it if such files didn't show up in my editor's sidebar. Do I have to add *.min.js to .searchignore and .atomignore? (Or if the editor people ever work out a standard, maybe it will be .editorignore.)

If I had to draw a Venn diagram of ignore patterns in my text editors, my search tools, and my rsync scripts, they'd mostly overlap. I don't deny the need for application-specific ignores, but there is a large class of applications that could benefit from a more generic ignore file.
> People coming from poverty don't have family that can make up the 10% that you didn't cover out of pocket

They get almost $24K free money in 4 years of free money in Pell Grants
They get about $27K in 4 years subsidized Stafford Loans

People in poverty also get other kinds of grants/fellowships.

The Nature article was about people from poorer backgrounds not being able to be Scientists. The truth is they receive plenty of money for college and as I pointed out there are many in NYC that are doing just that.
There used to be an OS X editor called Pepper that was basically PE for OS X. I don't think it's still around. I can't find it except in very old references.

There is Eddie [1], which is based on a BeOS editor and is written by a former Be employee. He's very responsive to feedback. I worked with him in improving its LaTeX support.

[1] http://www.el34.com
As Twitter's potential new owner, I hope Google does something about this spam
I remember seeing this in an HN thread a while ago...
https://news.ycombinator.com/item?id=11822442
Hmm I get an error at that URL:

"Not found! Sorry about that. We cannot find your Hacker News account, n00b101, listed on any current applications. If you received an email to update your founder profile make sure you followed the precise URL in the email."
I used this to create a site for an orthodontic practice and the ease of maintaining it compared to using Wordpress has impressed me.
"Google has developed a brand problem"

You're spending too much time in the HN/Startup echo chamber. Google has no brand problem with public at large.
Right there with you...I setup a home Proxmox cluster for LXC / QEMU. Runs home automation apps, Plex, Gitlab, Rundeck, etc.. I like to call it Cloud Corner.
Predicting vote pledges via social alignment
This. It's baffling; we've "solved" email – anyone can have an account with any provider and is able to mail anyone else – why haven't been able to do the same with instant messaging already?
Uber drivers protest in the West Zone after colleague's death (Brazil)
I tried alot years ago and loved it, but it had the huge caveat that it didn't write changes back to a maildir. This made it really hard to incorporate into a multi-device setup. Do you know if this has been added? I didn't see an obvious answer on the github page.
Can someone explain to me why RSA 2048 is "recommended to change"? It's still the default for gpg keys and as far as I know is widely thought to be secure for at least few hundred years!
Is there open source database of geo data for wifi hotspots? Or even closed source?
Game Engine Containers – handle_map
The sad thing is that it could have been relatively easy to address by allowing something like a disqualifying disposition as long as the tax is deferred.

I'll probably take advantage of it to exercise some of my shares, but I will have to stick within the range of where I know I'll be able to pay it off within the next seven years even if I never see value for the stock.
This analogy isn't exactly fitting.

The pizza delivery person isn't acting as your agent and representative.

If you work for a company, and break something serious for a client - it's not you who gets sued, it's your company because you were acting on their behalf.

These lawyers were hired by Oracle to conduct legal matters on Oracle's behalf - if they win the case, it's not the lawyers who take home the prize - it's Oracle. Conversely, if they lose, it's not the lawyers who pay the penalty - it's Oracle.

So, it's not out of the real of possibility that Oracle will be fined or penalized in some way.
Multiple Hobbits as a prototype, Multiple PowerPC 603s in production.
Did he also give away promotional google pendrives by any chance? and ask for special access to the office buildings? This sounds dodgy as f. I think your office park was being pentested.
Does any one know how Palantir started? I.e. from what I can remember it seemed to come out of nowhere. How did they manage to get such huge contracts from the start?
She certainly realizes the causal relationship. The Google search results are raised, because at this point, it's not the revelation that is the subject at hand -- rather it is a criticism of the procedure that was not followed, and what matters.
http://hello.com/ I'm not 100% sure of it now but at one point there was some side group inside google building this.
It's not word salad. It's written idiosyncratically, to be sure, but the author's points are laid out clearly and in an ordered way.

There's certainly room to attack this piece, but incoherent it ain't.
Yes Windows has had RAID for a long time. There has been various limitations. I don't think you can boot a RAID 0 volume, for instance. It's certainly not as flexible as Linux's model, but Windows usually isn't.

As far as hardware RAID controllers, at least you get a battery-backed write cache that will "just work" without the OS, right? As in, you don't need to boot the OS to finish flushing. Or maybe I've just bought into the hardware RAID marketing. It does seem simpler, as in less to deal with, to let the card do it and just present whatever volumes desired to the OS.
https://www.reddit.com/r/IAmA/comments/4c27ss/im_pieter_hint...
https://wigle.net
Haiku is pretty damn fast. Its kernel (NewOS) was written by one of the BeOS developers and the whole system's architecture is generally pretty similar to BeOS.
Both gcc and clang have flags to emit raw object files. At which point, your porting work really centers around making sure you have a good standard library in place, and that your kernel has a reasonable implementation of parsing a binary format like ELF or PE, etc.
My thought is that this would be problematic in markets with natural monopolies. There aren't a lot of mom-and-pop power companies. (There are plenty of moms and pops selling power, but as I understand they sell it to the power company who resells it to you by burning less coal.)
For startups not within site of profitability or IPO, it's going to be around a third of the preferred price.
37 pins of GPIO with an external D-Sub connector, plus DAC/ADC with Libraries built in to the OS.

https://www-s.acm.illinois.edu/bug/Be%20Book/The%20Device%20...

http://www.hardwarebook.info/GeekPort
Gödel predicted Trump. Film at 11.
The guy didn't even accomplish anything. He tried to solicit donations and involvement from Trump supporters online and they quickly told him to beat feet. In their own words, "memes are not for sale" because "meme magic is real".

Meanwhile, the NYTimes has a story about Hillary's real, operational, online propaganda machine: http://www.nytimes.com/2016/09/23/us/politics/hillary-clinto... I can't help but wonder if the Nimble America story is being pushed to bury this.
The UK wasn't the greatest example either given the not so distant history of Northern Ireland.
It's been said before, but I'll say it again:

It's not somehow patriotic to pay more in taxes than one is legally obligated to pay.

The key word here is "obligated".

Google doesn't evade taxes - they pay what tax law obligates them to pay.

They just happen to have a team of accountants available to ensure they pay the correct amount (read as: the amount the US Government has decided, through tax laws, that a corporation like Google should pay).
They are certainly great within their fields, but one thing Kaparthy is particularly good at is social media. While in grad school he was quite active both on HN, Reddit, and Twitter. He had fantastic blog posts that made difficult subjects seem comprehensible. Perhaps it's just part of being part of a younger generation, but Jeff Dean doesn't share that feature.
RSA 2048 is still the openssh default, i.e., best current advice from the openssh authors. The fact that this article's author labels that as "yellow" is a red flag.
I would totally have paid $3 for advance access to the rest of the story at that point. I need to know!
Let's put and end to hotel price gouging
Am I the only person who doesn't have their only private email server or pseudo-anonymous address?
The further a lens is away from the film plane or sensor (this is what 50mm or 135mm refers to), the larger the background appears for the equivalent foreground. It's called lens compression. http://www.bokehworkshop.com/public/charts/lens-compression-...
The difference is that the executives buying Palantir's products don't know or care what any of those acronyms are, and they're willing to pay a lot of money so they don't have to find out.
In Userify (ssh key manager that only distributes sudo roles and public keys -- you keep your private keys[1]) we're going to be disallowing DSS keys soon.

I like this post - it's good advice overall. Keys are easy to handle and in some ways more secure than certificate management (which relies on extra unnecessary infrastructure).

1. https://userify.com
This money would be better spent on Universal healthcare (AKA Single payer). Free to all citizens of the USA.

This money is only going to the contractors involved. It serves no other purpose. Send better drones to the planets.
I can't say I speak for the “Haiku community” short of being friends with some of the developers and hanging in the IRC channel, but … no that's not a common attitude. Haiku prefers non-copyleft licenses, but doesn't avoid the GPL like cancer. Heck the default compiler is GCC (and will be for the foreseeable future) and the web browser uses WebKit.
Smyte is hiring an infrastructure engineer
You really couldn't. Yes, people who were online recognized AOL keywords the way they do URLs today, but it never had the pervasiveness that Twitter does. News channels show tweets and hashtags. A large fraction of news shows up on Twitter before it hits other sources of news. It's the platform for putting up a smoke signal, a firsthand account, or a story as it develops.

(None of which inherently makes it profitable.)
just wait for project tango rollout, inb4 "How does Google know the layout of my flat and brands I use?".
This is super interesting. How would I go about working with these guys, considering that they're in Palo Alto and I'm in London? I understand there's a bunch of hops you have to jump through in terms of visas, but I've never really looked into it.
The article claims that RHEL7 supports Ed25519. Maybe RHEL6 and older do not.
But would you fight all bigotry?

If a group of black people said "No Whites", would you fight that?

Or if women opened a store (or a gym) and said "No Men"?

Or if Latinos started a scholarship fund and said "Only Latinos may apply"?

Would you call out racism if someone didn't support Ben Carson, or sexism if they opposed Carly Fiorina, or sexism if they joked about Trump's "hands"?
You should learn about the history of GM. Specially from the early 70s to the late 90s. Lots of horrible management decisions. You will learn how they gave toyota and honda the US domestic market on a silver platter.
This existed 15 years ago, called WiGLE.
I always find it interesting to see the disparity between comments here, and in /r/netsec on matters like this.

Here: Generally positive.
Netsec: Most upvoted comments being complaints and assertions that it's bad advice. And for some reason, upvoted comments about NSA involvement in curves (which is exactly what 25519 is not).
The imminent USSR invasion from the north played a significant part in the calculus of Japan's surrender.

Well, it added to things falling apart at an accelerating rate in just about every way. I'm of the opinion that the USSR's actions didn't hurt in the least, but we have absolutely no way of knowing if they were critical, and if so, how much. Probably the biggest thing was making the Army look even more incompetent, when they needed to be squelched ... well, that had been needed for decades....

Because the real action was in far off Manchuria, which we were ever more effectively cutting off from the home islands. And it wasn't like the USSR had the ability to project serious power into the latter without our help (and even then there main effort was of course focused on Eastern Europe), there was no serious "imminent USSR invasion from the north" in the offing.

At best, they could have taken a port on northern Hokkaido, which would have been utterly obnoxious after the surrender, but wouldn't change in the least the calculus of the Japanese plans to resist on the southern home islands where we were the critical threat. And where they had a real chance of "winning" as they perceived it (see Hell To Pay for lots more details) ... although that might not have turned out well given our chemical weapons capabilities, which those who didn't know about the Manhattan Project were ramping up.

In fact, after the Navy busted those railway ferries than ran from it to Honshu (some had steam turbines and could do 17 knots!), causing a severe immediate transportation problem due to the lost coal supply, I seriously doubt Hokkaido's contributions to the war effort going forward could even be significant, especially since we were hardly finished in cutting the link between the two islands.
Yeah, I don't get it either.
I strongly support SpiderOak but I agree with you. Even if they don't keep logs of that stuff, they could or could be ordered to do so. They obviously think the "ordered to do so" part is a real threat because they dissuade used from logging in through the website.
github doesn't support ed25519 keys does it?
Why do you say that? What they recommend rarely is what I end up watching, but it's usually ballpark correct. So much of what motivates your daily YouTube viewings is externally, so there's only such much you can do. They are aware of this,

> Historical user behavior on YouTube is inherently
difficult to predict due to sparsity and a variety
of unobservable external factors.
Musk is pretty divisive here to be honest. I see tons of anti Musk comments. I assume from your tone you aren't a fan of his, so I think what we're both seeing is confirmation bias that everyone is against our opinions.
The planes talk to each other and run a common protocol that tells the pilots what to do to resolve the conflict. The problem is when one of the pilots doesn't listen to the nice robot voice yelling at him to DESCEND NOW!...
Ask HN: Should I contact a startup's ex-employees for opinions?
Hi HN people - I've been searching for a job and got an offer from some startups. A lot of those look pretty good on the outside and everyone seems happy when interviewing. Glassdoor sometimes tell a different story, but I don't trust those anonymous reviews. Is it a good idea to reach out to ex-employees for their stories? Thanks!
I don't use Twitter much[1], but I see the opposite. They selectively censor to push their type of politics. They hide trending tags they don't like. I don't trust them at all.

It'd be great if Google bought them for one reason: see what they do with the censorship part. Will they continue picking off tags they don't like and open up the idea that Google is deliberately biasing things? Or will Twitter users suddenly see popular trends they never saw before?

1: The website is hostile to consuming content. If you scroll down a few pages of tweets then click an image or something, you lose your spot. Pressing back brings you to the bottom of the first "page" of tweets, not however far you had scrolled. Add in the slowness and wow, it's really quite a bad experience.
DigabiOS is a Linux-based live–operating system for matriculation exams
We had a good convention for our Angular project that wasn't too bad. Certainly a lot more discoverable than the rails project I worked on before it.

I'd like to see a lot more formal work on discoverability. There are a lot of libraries being written by "smart" people who are behaving very stupidly right now.
> Without the ISS Brazil could for example attempt its own station, or help China instead.

Are you kidding me? Brazil does not even have launch capabilities and may never have. It's "space agency" employs 6 people, including a typist.
Both GitLab and GitHub do in their SSH implementation.
They could already do this using Twitter's API. Seems like a stretch of a reason to buy Twitter.
Treatment of Snowden Proves US Govt. Doesn’t Care About Your First Amendment
> 1. Only supporting DFA-able Rust regexes. I'd love to use a lighter-weight regex library in ag, but users are accustomed to full PCRE support. Switching would cause me to receive a lot of angry emails. Maybe I'll do it anyway. PCRE has some annoying limitations. (For example, it can only search up to 2GB at a time.)

The standard trick here is to use the faster method for searches that it supports, and use the slower but more capable method only for searches that require it. Parse the regex, see if a DFA will work, and only use PCRE for expressions with backreferences and similar.
Bay Area Deep Learning School will be live streamed this weekend