skysight-inc/HackerNews huggingface dataset:
Many interfaces of yore didn't do USB (especially ones with lotsa I/O). So many jumped on the FW train due to bandwidth and the fact that USB 3.0 just wasn't in audio hardware developer's sights.
Good thing voters are incentivized to vote correctly like they were incentivized to answer correctly in this survey. Oh, wait.
How we design games now and why
Feedback Request: Scaling Engineering Teams
I think it's both fair to say that reference counting is a form of garbage collection (dynamic lifetime determination is dynamic lifetime determination), but also remark that reference counting has notably distinct performance characteristics (some good, some bad) compared to a tracing collector.
I'm saying that whether or not he was a great teacher is independent of whether or he was god. He can be a great teacher and still not be god.

Are people saying he's a great person because he's god; god because he's a great person; or independently both god and a great person? I'm arguing that they don't necessarily have to have a causal relationship and neither implies the other. (Ok ok maybe being god implies you are also a great person... but the other around way is not true)
"Someone monitoring public CCTV" is where it tends to break down.
Yeah, this would be really simple, and even without this, I do not believe that fingerprinting the phones and using that as an ID to join identities is that complex these days?
AEAD normally only means actual AEAD constructions (think AES-GCM/OCB, Chacha20-Poly1305 - not combinations of primitives providing authentication (=EtM, eg. first encrypt with AES-CTR then MAC with some HMAC).

But yeah, some of the criticism reads kinda nit-picky / "I'm going to find false things in here". But on the other hand he provides good hints how the article could be improved.
thanks - worked.
Regardless of how a person votes, they're voting for a feel-good reason.

Some people's identity gives them pleasure in voting for the candidate that rationally maximizes the Good, for some subjective measure of the good. These are the 'social preferences' Gellman talks about.

Some people's identity gives them pleasure in the tribe, and they want to vote for the people like them and around them to fit in, especially so they won't be confused with the Enemy.

Pretty much everyone has both tendencies, which are inherently in tension. This is cognitive dissonance. People don't like experiencing this, so they end up choosing to believe both in tribal politics and that their tribe is the rational one, which is the most convenient way to cut that Gordian knot.

Now, we can debate which tribe is more rational. I think currently in the USA the blue tribe has more people motivated by the desire to be seen as rational. Then again, we'd also predict that's what everyone thinks. So probably that debate wouldn't be productive.

This experiment is useful because it tells us that money is a very useful way to cut through the bullshit of tribal beliefs. It also might give us hints as to how to design our electoral system to tend toward more rational options.
Its up now, check
Cheers mate! As someone who always lived in the "Western World", it's very refreshing to see some reasonable thought about facts and context concerning a "non NATO" country, even if it's rather in the comments instead of the article itself.
That's good, thank you! And it's only installed on mine and a few friend's devices, should be ok
> I don't understand ad networks enough to grasp how fraudulent ad inventory works, but as this article shows - you can make a killing exploiting it..

Someone has some "sites" that they show to an ad network or an advertiser and tries to sell the impressions on those sites. They receive "ad tags" in exchange, and the theory is that users are exposed to the ads shown by those ad tags, and the advertiser is satisfied.

However, once they have "ad tags", they can do whatever they want with them. They can find the URL signal that represents "give me money" and arrange to fire that signal.

> As is stands, is there any sort of compliance measure (or regulatory body) to monitor/prevent ad fraud in these networks?

No.

The Media Rating Council[1] was endowed by congress with special powers that allow participants to talk to each other antitrust protections kicking in, but these conversations are extremely non-productive.

[1]: http://mediaratingcouncil.org/
Sure, but Netscape Composer was a WYSIWYG editor as well, not a web page inspector/debugger like Firebug. Honestly, there was not much to inspect or debug in web pages at the time...
This is actually an old accusation of Nintendo going back to the original NES and it's cartridges.

The truth then (and likey today) was that demand is hard to calculate and supply costs money. Nintendo I'm sure greatly underestimated the demand for NES Mini convincing themselves that 'nobody wants to play classic games today but what people actually want is new games with our characters and bits of nostalgia put in'.

They were wrong of course as evident by NES Mini sales versus that of Wii U sales.
Couldn't recommend this enough, though I do wish I had portability
The article recommends Chacha20 Poly1305, not some combination of primitives.
Aww, I still remember the old C&H sugar ads on TV when I was a kid. "C&H, pure cane sugar, from Hawaii..."

https://en.wikipedia.org/wiki/California_and_Hawaiian_Sugar_...
Replikativ: scalable distributive p2p system for confluent replicated data types
Doubt it, they won't have any peripherals for their aging unconnected G4 tower.
The simple way to do this is to use the authenticator app on each of your phones and scan the QR code at the same time, when you setup 2FA. Since it's time-based, your apps will always be in sync and showing the same code.
This is fascinating work (IMHO).

As a side point it points to what I consider the major risk of products like Roundup (glyphosate): as a side effect it breaks up the shallow subterranean structure of fungal hyphae, bacteria etc that manage water percolation, nutrition, soil replenishment etc. Glyphosate has been attacked as causing cancer (I still doubt that) but it is probably very dangerous at the macro level, where people aren't paying attention.

The real fix is robots doing the farming (weeding, pruning etc) instead of humans and chemicals. Probably in my lifetime.
You have to applaud him for trying. Building anything as a learning exercise is an investment in yourself, and I'm encouraged when others are ambitious about it.

We've all had "don't roll your own crypto" pounded into us, but nothing teaches a lesson as soundly as trying something yourself. I've tried, failed and learned a lesson from far less ambitions endeavors.
If it's something sparkling new you probably want to use NaCl or for more involved use cases a Noise implementation.
Nobody accurately forecasted the Wii's popularity. Nintendo would have been insane to actually make as many consoles as they ended up needing.

Nintendo's released a lot of products and while not having enough supply is annoying, dramatic oversupply can be catastrophic.
Show HN: Siphon.js – A data extraction library built for scale
Very useful to know, thanks. I'm somewhat torn about whether to keep or replace mine, apart from the whine it's a lovely little machine.
Periodic jobs is great for overnight regression testing, things of that nature and the few examples I gave above. That'll be a great (re)addition. But still, the ability to create random jobs like in Jenkins without having to create a repo, etc would be a huge plus along with easing ops teams into performing server maintenance via CI.
We're excited to bring enterprise-level data extraction to the open source community. Our library handles scaling with fault tolerance and built-in parallel processing in addition to handling HTTP request limits using proxies and customized request throttling.

We'd love to see what you can do with Siphon! Feel free to give us feedback on our Github :)
Yes! I had 2FA set up on AWS when they announced it for retail, and after I set that up, my retail one was required to log into AWS.
Yup, we switched to Jenkins a while back for a similar reason. We're changing a bunch of our tooling for a new project because we can, but we didn't even consider switching out Jenkins. It's ugly but it works and it isn't worth figuring out anything else. The promise of Blue Ocean and the new declarative pipelines helps a lot although we probably won't bother trying it out until it's out of beta.
What do you mean by this then?

> Another example: criticizing that he mentions appending a MAC (you should choose an AEAD!)... when later he recommends using an AEAD.
Rust doesn't use region-based memory management, though the borrow checker does somewhat resemble it. And the reason to use a GC is that it often works well enough for tasks that aren't especially demanding.
I definitely agree that it shifts a burden in the easy case, but once you develop an intuition (which happens at a different point for everyone) for what's going on, in my experience, it fades into the background. And when you make a mistake, the compiler is there to tell you what you did wrong, you fix it, done.

YMMV, of course.
Not no reason - as I said, the tablet mode is useful. Just not in the scenario when you're normally be using a keyboard and trackpad.
Impressive project!
Nor any mention of Pokemon Sun and Moon's record breaking launch: http://www.forbes.com/sites/erikkain/2016/11/30/pokemon-sun-...
7 brilliant Christmas gift ideas under ₦25,000
Parametric programming in R
You're quite welcome! The election and the aftermath has had the curious result of making The Onion headlines look almost indistinguishable from real news, so if unless you put some serious effort into following what happens it's pretty easy to not be able to tell what things are people joking about terrible events and what actually happened.
NTP has rate limiting built into the protocol (https://www.eecis.udel.edu/~mills/ntp/html/accopt.html), but Snapchat appear to be using a large list of servers.

Also, NTP runs on UDP rather than TCP, and it only requires one packet from each party to exchange time, so it's harder to rate-limit it without making your server unreliable.
Humans as a whole have a revealed preference for tribal cohesion over accepting reality.

It was probably a beneficial trait when the Dunbar number roughly matched the number of people with in a day's communication.
Yes, but arriving at the conclusion is very fun. Although, don't hold your breath for Cryptography II. I've been waiting for it for years.
Touche! "Don't try to use grandiose (and incorrect) words when something simpler will do." :)
Yeah. I find it a haughty article because he's not acknowledging the elephant in the room, which is that GC is not a solved problem despite all the whiz-bang techniques ... and that the Go people aren't being dishonest or ignorant of these techniques, but rather, judging those techniques not to be so useful for the class of programs they care about.
In-flight hacking system
Is there a latex editor that can show the end product side by side while you're writing the document?
Thanks for finding this. Very enjoyable read, even in spite of its flaws of reasoning.
That's sort of convincing me that Markdown + arbitrary HTML is a fundamentally unstable idea. What's the use case for it? GitHub allows a subset of HTML tags; sites like Reddit allow none.

I mean, I use Pelican's Markdown support in my own blog, but I wouldn't be unhappy about having to use <i> instead of underscores.
I don't doubt you but can you explain this in greater detail? I have filed for the foreign tax credit and it disqualifies most non-income taxes. I would presume royalties would be covered by this.
I'm pretty sure AUR has everything :) But the OP was talking about ARM, which I'm not sure about the state of ARM port for Arch Linux. It's also true that one can also find PPA, but there's big convenient when it's installable right away without needing to search for PPAs.
True, neither architecture will ultimately solve the problem of an attacker having absolute control over the lower layer. No way around it.

Federation does has the nice property that it gives you some choice over who controls the infrastructure you use, but in this case it would mean moving to a different country.
> and funnily enough HN believed them

That reeks of a very cheap excuse to just bash HN given the dramatic generalization you're throwing around.
In the order from brainstorming to real project it's:

- piece of paper and pen

- Clear https://itunes.apple.com/us/app/clear-tasks-reminders-to-do/... (not only as Todo App, but also to make outlines for topics)

- Sublime Editor + Markdown + (private) GitHub repository
In the order from brainstorming to real project it's:

- piece of paper and pen
- Clear https://itunes.apple.com/us/app/clear-tasks-reminders-to-do/... (not only as Todo App, but also to make outlines for topics)
- GitHub repository
Could also be a version of the Hawthorne effect. [1]

In this particular case the money was a proxy which was more powerful than words meant to say 'your answer is important' or 'your vote counts'. It's actually hard for me to put in words this concept but intuitively it is what seems is happening.

Ok so let's take as an example upvote/downvotes on HN. Many of us give little thought to the impact and do it impulsively at least in some cases. Now let's pretend we know there is an impact, even minor, financially. We will pay more attention and I feel at least be more likely to carefully consider voting in either direction.

Remember with money also people tend to not want to be wasteful it doesn't feel good. Nobody takes even pennies and throws them in the trashcan.

[1] https://en.wikipedia.org/wiki/Hawthorne_effect
Would any body else put the same trust on whatever authority the external auditors or pentesters display?
Presuming the subjects truly believed their first-choice answers were factual, then why would they be under the impression the researchers want to hear something else?
I'm not impressed by things I don't read, either.
I've run into the same issue.

One of the main frustrations is you don't know if the output is correct until you manage to reproduce some known key/document exactly.

When you're debugging anything else, you can sort of see what's wrong as you come closer to a correct solution. A crypto scheme is only correct (you've put the right things in the right places) when it's exactly right. Until then, you have a jumble of characters.

It took me ages to match ECDSA on java with Python. In the end, it was because of some fine print where I needed to hash one version but not the other before signing.
That's assuming Mr. Rich controls capital. But a lot of Mr Riches aren't actually very rich -- they just happen to be well paid laborers in high prestige fields.
Technically, you could create an isosynchronous wireless protocol. But 802.11 ain't it, and neither is Bluetooth. Both are very tolerant of lag and have little guarantee of latency.
I do use a Hackintosh for my desktop, but that's not really a viable option for the general public, and even for myself I'd prefer to just have Apple start selling decent desktops again.
Right, the DNS records weren't expired, they were no longer accurate. I'm not sure what the word for that is. The Windows DNS Cache on the local machines was inaccurate. Basically, I couldn't access any websites I had accessed before, but if I tried accessing a new site it worked fine. If I forced a DNS request for a site I had already visited, that site would start working but all the other sites would still be broken.

I knew what the problem was because I had run in to that issue a few years back with my own computers. After I updated my DNS, all the Windows computers were having issues, but none of the Linux ones were. That's when I learned that Linux doesn't typically cache DNS records on local machines.
I'm currently running the 9550 with ubuntu 16.04 and can confirm #2 on your list. It's pretty annoying. Bumping the brightness up helps a lot, but when on battery and/or late at night that's a terrible compromise.
All the Hacker News kids are crazy about microservices right now.

In three years, people will have realized it wasn't such a good idea, and moved on to the next "this will solve everything" fad.

Once you have seen enough of these fads go by, it's pretty obvious.

I'd be careful about extrapolating future directions of computer science from something that seems cool this year.
There is no fairness in cryptography, only math.
Rating, ranking and recommending: Three R’s for the internet age
> ...because the chance of your vote making a difference is so small.

...in national elections. Federal systems are designed with this in mind. In recent decades, more and more issues have become national issues, which erodes the influence of the individual voter. And, on top of that, if the power of the vote is ineffective, you can always move in a federal system. So the erosion of choice is compounded.
The only reason I'm aware of for rolling a custom crypto would be fighting against automated attacks. Even ridiculously simple protection can prevent a script from automatically collecting the data. If there's a lot of data streams and each requires human interaction to decrypt it, it can significantly raise the cost of breaking such data. In that case it's probably best to make it just an additional layer over some well-tested method.
IBM engineers ensured that Concourse can run on linux/ppc64le. There are also Mac workers and, I believe (based on looking across the office to a Windows-facing team) Windows as well.

The only reason it's possible is because Concourse uses the Garden API for container management; in turn Garden can create real or I-can't-believe-it's-not-real containers for the target platform if there's a backend for it.
a man that claimed to be God is either a liar, a lunatic, or God; to say such a man is a great teacher but not God stretches the limit of rationality.

Ridiculous.

The latter is certainly not implied by the former. It presupposes that a person can't be both a liar (either deliberate or unintentional) or lunatic and a great teacher, a conclusion that has no basis whatsoever. It's a emotional statement, not a logical one.

Frankly, I'm astounded anyone would put that forward as a defensible claim... though I'm sure it's a very compelling "argument" to someone predisposed to the conclusion.
Texmaker is pretty close. It doesn't update live, but I've never actually needed that capability. Tons of other useful features too. No affiliation, I just use it a lot.

http://www.xm1math.net/texmaker/
Nothing happens to items in the queue in such a case. New workers will automatically respawn, and the adapter that links all the workers on the back-end will re-attach to newly spawned workers. Clients formerly connected to workers that are now gone will have to re-attach to new workers by socket.io.
Overleaf.com is an online site that works that way.
Post-election 'Subway Therapy' sticky notes taken down – but not thrown out
https://news.ycombinator.com/item?id=13219871
There is one big one, but I mostly saw my comment being in line with your policies: the game is a game. You say yourself have this on pages like http://benchmarksgame.alioth.debian.org/dont-jump-to-conclus...
And most humans are lazy f%$#s who throw things away rather than recycling them.
We used internally to do some analytics on build and test output (we had a lot of data). In retrospect I would not use it again. Performance wise it was ok, but pricing model sucks. Non pro version does not support user authentication and that was the only thing we needed from the Pro version (Server)
Had there been the Oettinger flat-six available in US-market transporters from the beginning, perhaps the minivan market would've turned out a little different....

Wanna know why inline fours bolt up so nicely in Vanagons? Because VW originally intended to put an inline in them. I mean, do you really think VW wanted a an air-cooled engine with friggin' ignition points in a 1980 model? And an anemic, decades-old engine design in a 4000lb. (in the case of our Westfalia) vehicle?

Had VW not done their usual (IMO) half-assed planning and design, it might have been different. But then they wouldn't be VW, would they? :-)
Anyone know if you can use the authenticator
app on more than one device?

Not only can you do that, you can scan the QR code in the image in the article and get the author's TOTP credentials in 'Google Authenticator'.

The normal way to do phone-based 2FA is a QR code with data of the format "otpauth://totp/yourusername?secret=1F56D7AFLONGBASE64&issuer=Amazon" where the secret is the secret needed for TOTP [2] one-time code generation.

As such, you can write down the secret (or print out the QR code) and scan it into other phones (or use it with tools like oathtool on linux) and they'll then generate identical codes to your main phone.

Obviously, if you store your TOTP secret alongside your password or keep a copy somewhere that isn't safe, there's no point in using 2FA. And if people fuck this up too often 2FA users will start insisting we install twenty shit proprietary apps (one for steam, one for salesforce, one for symantec vip access....) and nobody wants that. So use your new powers with care!

[1] https://www.eff.org/files/styles/large/public/2016/12/19/ama...
[2] https://en.wikipedia.org/wiki/Time-based_One-time_Password_A...
This sounds like everyone here is about to get into an argument over hand position. I feel like the hand being positioned hear the bottom of the computer is the result of you knowing that you can scroll with your thumb like that. Wouldn't your natural position after using the keyboard be to just relax your hands which would put it right near the trackpad? It seems like moving your hands out to the side of the computer/table/desk is a self-fulfilling improvement as you most likely wouldn't put your hands there if there wasn't a touchscreen. There would be no benefit or convenience to it otherwise. On top of that, you'll most likely still have one hand resting near the keyboard for typing which further worsens the inconvenience.
But when two sides are acting from different facts, different understandings of the world, both can reach different conclusions while still being rational.

If you truly believe that one candidate is a lizard-person, the rational thing is to vote against them. When everyone you know and trust also believes in lizard-people, and you are unable to test for yourself, the rational person also believes. The answer to the problem is accuracy in facts, a wider dissemination of reality. The rest will follow.
I like Troy, but I need to put in a word here against pursuing certifications.

There are no employers in security that I know that anyone wants to work for that take certification seriously. The best people working in security --- not just in application security but in network security, red-teaming, exploit development, and cryptography --- don't have certificates.

If you want to work in startups, a hiring process that even asks if you have a certification is a big red flag. This is less true in the broader tech industry, but while it's probably not a good idea to discard a prospective Fortune 500 employer just because they ask if you have any certifications, it is certainly reasonable to pull the ejection lever hard if an employer cares about them.

Every minute you'd spend pursuing certification is better spent building programming skills.

For whatever it's worth, I still stand behind everything in here:

https://krebsonsecurity.com/2012/06/how-to-break-into-securi...
طلاق بازیگران ایرانی بسیار معروف و سرشناسی که باورتان نمی شود
Oh wow! Man this is so rad. This can help me kick my dependence on Typora / Dropbox Paper for class notes and continue the VSCode loving.
> it falls back to email + phone, both of which can get taken over easily.

How easy is it really for someone to intercept a phone call Amazon makes to your number?

(edit: I'm not arguing, I really don't know)
But if they are in part this study it doesn't matter.