skysight-inc/HackerNews huggingface dataset:
This thinking is why Heartbleed was such a disaster. Everyone left it to someone else, and the end result was OpenSSL being the only serious choice. Yet even the 'experts' got it wrong -- way wrong.

I'm not advocating everyone and their mother implement their own crypto. But some software diversity is a good thing. These algorithms aren't quite as scary or fickle as the documentation and existing implementations make them seem. Especially if you stick to good software like DJB's stuff.

For instance, using montgomery/edwards curves instead of weierstrass curves eliminates a lot of the difficulty in writing a constant-time implementation of ECC. And the 25519 implementation comes with a fast, constant-time implementation of a prime field type.

Yet even DJB's stuff can be simplified. You can knock off a good 80% of the scary code at a cost of a mere 10% of performance. To Google or Facebook, that may be unacceptable. But to me, that's entirely worth it. Now you have a tiny library that is easy to understand, and easy to audit.
I was skeptical, but then saw:

author	Thomas Pornin

Yeah, "should not implement your own crypto" doesn't apply to him.
How about Spacemacs? It has Vim bindings (by default), comes with a very reasonable set of plugins for generic tasks, and has bundles available for most languages.
you should have read the rest before commenting. This is ideal for embedded targets and C is the best way to write a truly portable library for these small targets. Consider that a lot of embedded code is designed to avoid mallocs() altogether and that helps a lot.
Google movies is no more
Thanks! I started using it on two machines already, no problems so far. It's great that it runs from a single Docker container without any stupid "curl | sudo bash" scripts.
So it was deliberate on part of the board, still made him look like a trojan horse from the outside as supposedly he was there to get the company back on track.
Presumably the U.S., but my source doesn't specify.
That makes no sensen. Polling means the core is running at 100% all the time.
If I came across your SQL, I'd probably hunt you down and give you a hug. There's so much horridly formatted code and it's unusual to see a developer care.

I prefer to uppercase command syntax to make stand apart visually from the parameters of the query. I don't agree with your conjunctions at the end of the line, I actually prefer commas at the beginning of the next line though I don't do that so as to conform to convention. I also use the AS keyword to explicitly denote aliases.

If I had it my way, all SQL would look like this:

SELECT t1.col1
,t2.col2
,t3.col3
FROM table1 AS t1
JOIN table2 AS t2
ON t1.col2 = t2.col1
JOIN table3 AS t3
ON t1.col3 = t3.col1
AND t3.col2 = something_else
WHERE t1.col1 > 0
AND t2.col2 <> t1.col4
ORDER BY col2
LIMIT 100
From stackoverflow import quick_sort
You didn't mentioned the most important thing to make readable SQL and that is demonstrated in your clause: use the "join" keyword instead of doing the join in the "where" clause.

I can always auto-reformat a complex SQL in a IDE, but if it isn't using join clauses, it will stink.
Came here to say the same; really struggled to see the difference between before and after. :) I think I'll enjoy reading the comments here more.

(Quite liked SQL Prompt's auto formatter, but a shame so hideously expensive).
Huawei Mate 9 is huge
Ray Tracing Experiments with POV-Ray (2013)
That varies per country, I don't know how it's in the US but there are countries (for example: Brazil) where some taxes can only be spent on specific areas and those are determined by the law that created them.
It certainly is! That's why I choose software that I think is beautiful.

I may think a terminal window is beautiful - if I do then I will choose a terminal.

What I won't do is purposefully use user-hostile/ugly software on principle - if there is a better choice I will choose the better choice.
Using the Pipo X9 mini-pc as a tabletop SDR receiver
Emacs is definitely more of a platform you can build your own editor on, choose whichever parts you like and then you get an editor perfect for your needs.

Vim is more of an integrated "this is what you get and it's this way or the highway" sort of deal. Of course there's some extensibility but nowhere near to the same degree.
The architects and BAs in our office are expected to bring their laptops and get a little work done during meetings. And it makes sense, since they're often in meetings for at least 5 hours out of the day.

The developers don't have laptops, so we just lose development time when we're in meetings. Although we generally get just enough work assigned to us that we can still work only 40 hours a week, so I'm not really complaining.
This is my experience as well. 10 years of smoking analogs lead me to ecigs. Used ecig for 3 years. Went from 18mg to 0 in the last 6 months of me using. Continued using 0 nic for 2 months. Now I am 8 months clean of all nicotine products and 6 months clean of ecigs in general.

It was easy because of how gradual it was and that I was still able to satisfy the oral habit of smoking while kicking the chemical dependency. Smoking while driving was a huge hangup.

As a side note - if you buy good hardware and good quality liquid, the whole experiene is better than smoking as well. Forget the vape "culture". IMO ecigs are more convenient, taste better, feel better, and so on.
Are there mature versions of rust for the hundreds of microcontrollers that people are in production right now? Most of them have a decent GCC port and C works on all of them..
My understanding is it generally takes years. First it is reviewed by multiple security professionals who look for known attacks. Once it is generally thought to be ok it sees limited real world use. There it generally just takes trial and error time.
From his CV http://www.bolet.org/~pornin/cv-en.html :

AES (Advanced Encryption Standard, 1997 to 2000): co-author of the block cipher DFC
eSTREAM (ECRYPT Stream Cipher Project, 2004 to 2008): co-author of the stream cipher SOSEMANUK (admitted in the final portfolio)
SHA-3 (2007 to 2012): co-author of the cryptographic hash function Shabal (selected for second round)
PHC (Password Hashing Competition, 2013 to 2015): author of the password hashing function Makwa (finalist, was awarded a "special recognition")
Author of the sphlib library: optimized implementations of many cryptographic hash functions, both in C and Java.
Author of RFC 6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA).

Yeah, doesn't apply to him.
Given that this is a reasonably small code base (compared to, say, an OS kernel), an idea would be to use a language that provides strong guarantees about correctness the implementation. For example, Spark Ada can be used to do that.
Alternatively, keeping the implementation in C, a similar level of assurance could be achieved by developing the library along with a specification, and requiring any extensions to pass some kind of correctness proof based on this specification.
Definitely, most of my crypto searches ends up landing on one of his answers :)
Retailers look into the future of shopping with augmented reality
I hate how you're getting static for this. In my personal life I became a lot more successful when I stopped giving a shit about other people as much. I now have a much more fluid morality without being a "bad guy." There's something to be said about how society teaches us to be team players and to not be the squeaky wheel, yet its the non-team players and the squeakers who often win out in life.

I think its okay to be sociopath-lite. I believe guys like Jobs were like this. I don't think he remotely was a full blown sociopath. He genuinely cared about the experience of his users. I also this we downplay the sociopathic tendancies of techies who may be on the autism spectrum like Woz. Woz is brilliant, but I don't think he could relate with non-techies. I don't think he ever really understood the benefits of usability while at Apple. He was all about code and hardware and gave no shits about grandmas who didn't want to learn basic or type in archaic commands. Jobs on the other hand cared about usability, but also gave no shits about people in his way.

I think there's a wonderful, dare I say, synergy between aspie indifference and leadership sociopathy. They're 80% on the same page and compatible personalities who can work together, but that last 20% is different and focuses on different but important problem domains. Gates/Ballmer is another good example. Or Jobs/Hertzfeld during the Mac years. Or Newell/Lynch at Valve. Or Page-Brin/Schmidt.
Government sites that look like archaic disasters are like that because the money was pissed away by people who have no desire to learn and want job security. I watched it happen a lot. Tech leads, with tech lead salaries who don't even know simple things like dependency injection and MVC design patterns. Yeah, that's where your tax dollars are going. I'm hoping that I can start my own business and get into this space. There's a lot of money sloshing around, at least I can bring real value and deliver working products while I'm collecting some of it.
I can see the logic if you need to scale fast to win but for many things I think that isn't necessary, frankly I like the 'lifestyle' business approach more even though a lot of people seem to sneer at it.

I'd be happy with something that makes a comfortable living and crucially genuinely helps people, I'd consider that a success and its better than playing the unicorn lottery, plus in the UK the SV attitude of throwing money at everything simply doesn't exist anyway.
So how is the workflow?

1. Click "Login with Portier"
2. Enter email
3. Click on link in email
4. Be logged in

?
That would be pretty entertaining. Realistically they could do a lot of product placement for sex toys, lube, condoms, and things that fit the target demographic :)
take a look at: http://blog.codacy.com/2015/07/03/how-to-learn-scala/
Some people have no problem quitting cigarettes

It's probably genetic

Also it seems to correlate with risk of Parkinson's
http://www.medscape.com/viewarticle/832391

( huh that seems to be paywalled? Google "Ease of Quitting Smoking May Be Early Sign of Parkinson's")
I agree that Ada is a lot better than C, but the guarantees Ada provides are different from the guarantees Rust provides.
I'm curious what kind of obvious examples you might have in mind for someone who never took any business classes.
> Yet even DJB's stuff can be simplified. You can knock off a good 80% of the scary code at a cost of a mere 10% of performance.

Wouldn't you say DJB (et al) did that themselves? https://tweetnacl.cr.yp.to/
Claimants in 'Brexit' case welcome court ruling
I'm probably drawing from a limited sample, and might not be articulating it well, but I would add:

Developing a business plan that depends on a web-based product to succeed, then, instead of focusing on developing the product, hiring a bunch of assistants and reps to do the product's job by hand. You hear the words "concierge," "curated," and - worse - "bespoke" thrown around a lot when this is going on.

The actual product development ends up getting bogged down in a lot of the things that article discusses. My impression is also that there's often an overly-ambitious tech stack for what amounts to a CRUD app with a few feature tweaks.
The very fact that you're having this conversation indicates that not everyone here agrees with your definition of startup. If you want Hacker News to be a Silicon Valley only / Paul Graham acolyte space, I think it's a battle you've lost already.
> How do you imagine any company actively "protecting" from this specific attack vector by knowing exactly these details?

Adobe patched flash before it public. Chrome protects from the specific Windows problem. Using Chrome for the time between the announcement and a fix would mitigate the attack. This course of action would leave anyone who was not already donig it safer, and in this case is easy to do.

> The attackers are faster, exactly during the time between the publishing by Google and the patch by Microsoft it's the attackers who are better off by the orders of magnitude.

As I said above, an easy mitigation exists above. Using Chrome for a few days if you weren't already if all you have to do to protect yourself from remote execution of this until it's patched.

It's not any one person or organization's place to decide the course of action for everyone else because they have secret information. The responsible thing to do if people have the the ability to change how it affects them is to disclose this information. To do otherwise is to make everyone's decision for them. It's the same principle that leads to the freedom of press. The people have aright to know about information that affects them when their choices matter.
4 Basic Steps to Promote Mobile Application – Code95
Disposable ecigs are much more convenient, and are a more natural way for people to switch. I also find refilling liquid to be a nuisance. The Njoy Daily has become my favorite.
If they link engagement to performance, why didn't they use Inferno?
Well Martin also worked on scalac, with all its warts & problems, so you can't say that it will be better just because he's also working on it. :)

IMO much more important is the fact that Dotty is being developed after several years and iterations of scalac. Ideally this would mean that the problems to be solved, and the different ways to solve them are known. Dotty can do this without having a large legacy inherited code base. To me this is more important.
Start Emacs, hit Ctrl-h and then t (C-h t in emacs lingo). Brings up the tutorial, it's a quick intro to editing. Now open an org mode file, and open the Org mode info manual: Ctrl-h and then i, then m, which'll bring up a prompt, type "org" and hit enter (C-h i m org RET). By time you'll find your way to use it. Both emacs and org-mode lend themselves to excessive customisation, and learning a bit of Elisp unlocks incredible power.

There are a myriad of packages and tens of starter kits like Spacemacs out there, it's quite possible that looking at these, one does not know where to start. I suggest you start with vanilla emacs and build up your personal and most-fitting experience. Takes some time but definitely worth it. It's like a city, you may have read ten tourist guides, but until you go out there and explore, you know nothing.

That said, this is my set of most basic "sanitisation settings" for emacs:

(setf
;; Always open a new buffer if default is occupied.
async-shell-command-buffer 'new-buffer

;; UI.
visible-bell t
uniquify-buffer-name-style 'forward
save-interprogram-paste-before-kill t
font-lock-maximum-decoration nil
;; Search help more extensively.
apropos-do-all t

;; Ignore case when completing file names in minibuffer.
read-file-name-completion-ignore-case t
read-buffer-completion-ignore-case t
completion-ignore-case t
completion-styles '(initials substring partial-completion)
find-file-suppress-same-file-warnings t
enable-recursive-minibuffers t
;; Save bookmarks after each bookmark command.
bookmark-save-flag t

;; Do not ring the bell when killing in r/o buffers, put the
;; kill in the kill ring but do not modify the buffer.
kill-read-only-ok t

;; Search modes default to regexps.
search-default-mode t)

(setq-default save-place t)
Deep Learning in Aerial Systems Using Jetson
Redgate's SQL Prompt has a great auto formatter with definable rule sets, if you use SSMS - and have the budget for it.
As a non-Brit, it seems to me that it's high time for Queen Elizabeth to ride in on a white horse and start swinging a sword around the halls of her corrupt government.
What are Org users doing for mobile access? Using the phone to ssh to an emacs? Using mobile org? I also saw an Org plugin for an iOS editor. How do you keep it synched?

I need tasklists to be accessible on the phone.
Then don't upgrade. If they are notes from five years, you probably don't need the latest version.
Thanks for these. Way more direct than the article.
Well just take the example on their page for example. With ESI you would fire off to a server process that has to then go seek a user, then build up some HTML using a templating language in python or whatever you're using and return it to varnish.

With edgestash it looks like varnish holds the template, compiles it, caches it, then injects values in to it from JSON, which is easier for the server to generate and easier for varnish to inject the values from.

For HTML that's very dynamic based on user data ESI isn't an ideal solution, you either end up with a ton of includes (and thus a ton of requests), or you end up basically having only the shell of a web page cached by varnish. With edgecache you would have a single request (or a handful) returning all the data as JSON, and varnish would have a cache of basically the entire page to inject the values in to. Your server-side code doesn't have to deal with HTML at all, it just provides data. I'd say it's less competitive with ESI and more closely competing with single page apps, but you're moving the load back on to your server so clients aren't downloading javascript for injecting data in to HTML templates.
Running an FB campaign focused on performance is, like I said, a game of finding the lowest on-target/high-conversion CPM (conversely: finding your intended audience at its cheapest). It's not in Facebook's interest to disclose this information too easily, as part of their profit margin comes from squeezing campaign spread.

So my thinking here is that their tools are poor at performance optimization by design, so that we have to jump through hoops, experiment and throw money at different audience mixes in order to find just the right creative-segment-budget allocation. So I don't think that is headed to change so long as they are allowed to keep playing black box and walled garden.

I was astounded how easy it was to get better CPA/ROI running Facebook campaigns on, say, DBM or Criteo even at a premium on the CPM. It goes to show just how lacking their tools are in fast audience and creative optimization.
Even if the two agencies are funded and operated separately, their talent pool surely is not and I can't imagine their wouldn't be significant technology transfer because of it so the end result would be the same.
Rust can't target the same platforms C can. Rust is also (generally) more memory intensive than C for similar programs. This makes its use in embedded situations a non-starter (at least for now).
Doing something manually is a great way to test an idea. It shouldn't interfere with building the automated product though.
LastPass supports 2FA (Yubikey, Google Authenticator, etc.) and it's pretty seamless and works well.
> As I understand things, there was a vote on leaving the EU

You understand incorrectly. A referendum has no legal binding in the UK, it is essentially the government asking the population what to do - it might decide to ignore the results altogether.
This sounded very interesting.

However, it seems it's been developed "in secret" and the only public commit is a huge import of all of it. :/

Too bad, the development history would have been very interesting to read, digesting it all at once is harder.
A great book on this is "The Halo Effect". It specifically calls out "Good to Great" as an example of really poorly done research that does nothing but call out coincidences.

The one part I loved about the book is when it provides tips on how to identify these "empty" claims. Things like "we spent 3 years putting this analysis together!", which does nothing to support their claims, but just creates the impression that "wow! this must be true!".

https://www.amazon.com/Halo-Effect-Business-Delusions-Manage...
Test Festlove App
Festlove is a music based app that notifies (push notifications) the user on events based on their musical preferences and distance. These events range from music festivals, concerts, DJ sets and can be developed into greater. The user can set their radius from local, regional, nationwide and even continent wide for the music lover who is willing to travel to see their beloved artist.

The app will also give the user suggestions on festivals, concerts and artists they may like or want to attend based on their preferences keeping the user always "in the know" of the artists and events they want to attend. Also the app searches tickets and vendors for the use, giving them all the information they would need.

I need people to test the app! if you are interested in testing one of the hottest apps to hit the IOS store comment or email n.buwu@festlove.net with your app store email address to be added to my TestFlight!

Festlove is completely free to use and has the potential to completely change the music industry.

check out my website : www.festlove.net

Positive criticism would be much appreciated!
This was a criticism I heard a bunch while I was trying to evangelize Persona. Persona and Portier almost replace all of the guts of a user database, except for small needs of user profiles (which will likely forever be site specific) and user continuity, which is a much bigger issue and the source of the most pushback against Persona I heard from potential site owners.

User continuity and conjunction (as a user here are three emails that all represent "me"; this one I used in the past but cannot access now; this one is my "primary") is definitely a complicated problem and there are definitely some domains (corporate) that need to be stricter with what they allow than others.

The best argument I found was that all of the major website frameworks in use today (Rails, ASP.NET, Laravel, Django, what have you) provide in the box solutions for user continuity given the existing "standard" of username/password connected to an assortment of email addresses and/or OpenID Connect connections. The easiest way to implement Persona (or Portier) in most frameworks and continue to take advantage of built-in user continuity was as "yet another vaguely OpenID Connect"-like option in the potential giant wall of login brands, which means that it competes with Facebook/Google/GitHub/et al login for mental brand space.

Obviously there is no "easy" answer here, but it would definitely help sell Portier to potential sites if there were some answers. Perhaps some sort of user continuity service (or service options) would be useful as another microservice in a "Portier ecosystem" even if it is just barely on par with the built-in templates of the average web framework today. That could help make it easier to "sell" it as a drop-in replacement for all of the bulky weight of web framework user systems rather than "yet another login option in a sea of them".
Rust uses LLVM on the backend, so it gets a lot of platform support for free. Not sure how mature that stuff is yet though. Maybe someone who's used Rust for embedded can jump in and comment?
Silicon Valley’s “megacommute” even worse than L.A
Actually, C is a horrible language in many respects, but it is also the only language that can achieve any kind of decent compatibility in embedded systems, which is why I used it.

Also, when I say that BearSSL is written in C, it is partly a lie: some of it (especially X.509 certificate decoding, and handling of handshake messages) is done in T0, a new Forth-like language that I invented for the task (compiler is provided, and produces C code), specifically to have coroutines (incidentally, it means that most of that code read things byte by byte, with relatively few accesses to buffers, thus less potential buffer overflows).
This. It's the pre- and post- transitions that are the most invisible and harmful. I think 15min is conservative, in my experience 2+ hrs for a 1hr meeting is average.
Also be very careful, with "Dirty COW" hack, anyone can become root as long as they can run their own binary on any shared host.