skysight-inc/HackerNews huggingface dataset:
Ok, so I'm going to only comment on some parts.

First: They're proving that they can generate the encryption key based on password and salt. Which is exactly how you generate the encryption key. "We have the full key. We only used MD5 and didn't write a single line of code." - regardless of whether the key is generated in the described way, everything's fine. This is exactly the input and output elements you'd expect.

Regarding key generation / KDF, you can see it in the official docs as well: https://www.openssl.org/docs/man1.0.1/crypto/EVP_BytesToKey.... which actually say you should probably go with PKCS#5 2.0 instead. But really with high enough count, it shouldn't matter that much if the hash is MD5. Collisions have been found, but it's not collisions you'd be looking for when decrypting messages. You'd need to find the original string from multiple applications of MD5, which does effectively involve bruteforce.

The last part: "The question is, what the hell does this number mean, and how do we interpret these results?" - this is actually something you can find in the source. No need to raise it as an interesting question. (for the curious, it's the CRYPTO_THREAD_ID https://github.com/openssl/openssl/blob/6f0ac0e2f27d9240516e... )

"This number is, also, what the padding oracle is mysteriously spitting out." -> it's actually what your memory fragmentation / aslr is likely spitting out. The number is affected only by the system, not by the contents of the file.

This is just trolling. It happens.
Even compiling a chromium shell includes some telemetry! Every browser collects some telemetry and websites do more.

There is no networked computing experience that does not allow vendors to extract metadata.
Which core services does Y Combinator recommend startups use?
Ie legal, accounting, etc. Do they have a full-stack recommendation?
i can't contribute to an HSA without subscribing to a high deductible plan.

" basically a membership in a clinic where you pay a monthly fee in order to get cheap access to your doctor... The monthly fee is substantially less than typical health insurance premiums."

But... I still need a high-deductible plan to contribute to an HSA to deal with catastrophic issues anyway. high deductible plans are putting colleagues of mine in to $1000/month premiums already - saying "spend even more $ each month on a membership plan" isn't going to cut it for most people I know.

5 year ago a 'high deductible' plan cost my family <$300/month. Today it's close to triple what I paid just a few years back.
Yes, they are. They are fighting for my right to use whichever service I like to drive me from point A to point B.
Alternate perspective:

"Rethinking the Transmission Gap: What Behavioral Genetics and Evolutionary Psychology Mean for Attachment Theory", https://www.researchgate.net/publication/303952365_Rethinkin...

"Top 10 Replicated Findings From Behavioral Genetics", http://journals.sagepub.com/doi/pdf/10.1177/1745691615617439

I would really recommend reading the above (in particular finding 9 from the second survey). The media has a strong bias towards environmental theories of human traits.
Have you actually seen the numbers in the article?

MacOS has about 1% market share worldwide.
Thanks, all I see is 'Please turn JavaScript on and reload the page,' which makes me want to comment, 'the web is dead, and we killed it' — but that's not fair.
How UC exploited a visa loophole to move tech jobs to India
Up's love interest is, ah, obfuscated for the sake of trying to avoid spoilers, unavailable at the time of the "main plot", but there definitely is one.
> Auctioning visas may make it into a market, but don't delude yourself that it would be free.

Exactly, because auctioning visas presumes some kind of artificial limit to the number of them, that some politicians pull out of their asses. See elsewhere for my 'optimal number of immigrants' link, which explains this in further detail.
What I find annoying is that searching Google on a desktop or laptop still returns a lot of AMP results. They're supposed to be Accelerated Mobile Pages, it would be nice if they'd filter them out when searching from a standard PC.
Her view seems to be:

The climate is probably getting warmer, and humans probably are a significant part of that, but the uncertainty is enormous. The proposed climate change solutions are probably almost completely ineffective. The political tribalism of orthodox climate science is really harmful; it is important to make all data public and important to engage with people who have non-orthodox opinions. Credibility has been destroyed by the tribalism and by brushing aside the enormous uncertainty.

More:

https://en.wikipedia.org/wiki/Judith_Curry

http://dotearth.blogs.nytimes.com/2009/11/27/a-climate-scien...
I had a poor experience was cancelling Adobe Premiere Pro. Let this be a wake up call to Adobe. Make it easy for your customers to come and go.

Treat your customers with contempt and well, the bitter taste in my mouth will take years to clear.
Try talking to some ex-Uber drivers. I don't think I've spoke with one that felt adequately informed by Uber.

There may be adequate information now, but only because enough people bought in to Uber's marketing had poor experiences, and have talked about them.

I also don't think "enough readily available information" is a good standard to judge commerce by. There's enough readily available information out there for sufficiently prepared people to not get sucked into, say, a Ponzi scheme. But that does not absolve somebody running a scam, because they are doing their best to find people not yet prepared and then energetically deceive them. My standard is more like, "Does the entity with more power use that power in a way that the entity with less power later comes to find harmful?" By that metric, I don't think Uber scores particularly well.
Why do you assume those other things are harder to detect? Computer vision is tough, and human detection is one of the most researched problems in the field. Uber's self-driving cars were running red lights not too long ago. And it's important to understand that a video is not a live demo.

If Google has an approach that works for them and it depends on the maps - that's fine. I'm just pointing out that they (probably) made a decision a long time ago that they are going to use those maps to further their self-driving technology. It's a design choice, with pros and cons, like any other decision.
Even more annoying: when the entire article loads, I read the first couple paragraphs, THEN it hides everything behind the "Read Full Story" link! It's infuriating!

AMP gives a great user experience on mobile, at least speed-wise. I haven't had any real complaints as a user. (Disclaimer: I work for a non-Google Alphabet company.)
Great idea, especially for critical infrastructure. This makes sense and would seem to have big advantages over closed source systems.
The one line would be functional. Here is a good example:

list(filter(lambda x : ('widgets' in x), mixed_widgets))[0]['widgets']

I almost always go for more lines of readable code rather than less lines of unreadable code. But in cases like this, you can either write that as one line of garbage unreadable code or six lines of garbage unreadable code. So I'd rather just leave the overall codebase more dense to make it easier to understand the program flow, and then leave a comment explaining what that line is doing.
If you don't qualify for any subsidy, you should definitely just purchase health insurance directly through the carrier.

I initially purchased insurance via CoveredCA (no subsidy) and they just acted as a middleman between my family and Blue Shield without providing any benefit.
Judy (Zootopia)
Hiro (Big Hero 6)
Elsa (Frozen)
Ralph and Velellope (Wreck it Ralph)

There are plenty more. I think it has more been current society that is recognizing it more.
I remember hearing a similar story about the adaptation of "Do Androids Dream of Electric Sheep" into Blade Runner. Ridley Scott was convinced that the protagonist was a replicant. Philip K Dick (and Harrison Ford) disagreed. In my mind, Scott had the more "cinematic" interpretation, and Dick had the more "novelistic" interpretation.
I've been using streisand for a while (from China) and it's great; the main reason I can see that you might want to use the linked project instead is that it has a lot less surface area so it could be more secure (it's a lot easier to harden/audit openvpn alone than all the services streisand includes).

That said, if I was going to pick one protocol out of the selection offered by streisand, it would be l2tp/ipsec instead of openvpn (assuming you're hosting on digital ocean. The networks on AWS and GCE are more restrictive and you can't serve l2tp/ipsec from there). I found this to be easier to set up (the client-side software is already included in most operating systems) and to have the best performance.
You can't skip on the time. It is one of the main reasons to do fast food, after all. And it has been a long time since I bought soda.

Still, I feel it is impossible to list ingredients and recipes without building a straw man. Research on average amount spent eating out and eating in would be nice to see.

My point is it is easy to save money doing either. It is equally easy to spend more than makes sense doing either. My gut would be that eating in is cheaper. My gut is also that it is easier to waste food at home. Is amazing how many times we let something ruin in the fridge.

And again, neither of those gut checks are data.
That statement is too strong and not correct. For examples of when a marginal tax rate can be over 100 percent, see the first answer here: http://money.stackexchange.com/questions/1258/why-would-you-... and here: https://www.epionline.org/wp-content/studies/shaviro_02-1999...
Firefox on Android has full support for extensions, including uBlock Origin. I was surprised and very happy to discover this. Unfortunately it is a little less integrated.
Thanks that's great advice. It seems there is absolutely zero discounts using CoveredCA when you earn more than $50,000 a year.
OK, so the first part demonstrates that given a password, OpenSSL generates the symmetric keypair using MD5 and a salt. So what? That doesn't break AES since the only secret thing in the system should be the password/key. The issue is that the entropy of the key is actually half what it is supposed to be. The second half of the key is derivable from the first half. OK, that's pretty bad but still not entirely broken.

Next: padding oracle attack in OpenSSL. Reported on
https://blog.cloudflare.com/yet-another-padding-oracle-in-op... Looks like it is fixed now.

There are various complaints about memory management, double free errors and "sloppy" programming. It isn't clear to me that these have any further security implications but I am by no means an expert.

The last part talks about information being leaked when an attempt is made to decrypt using AES with a bad password. It isn't clear - neither to me nor to the author - that this information has any utility in narrowing down the search space for the key.
Every atom in that box is an observer.
It probably would have prevented the Tesla crash with the semi that cameras couldn't see due to low contrast with the sky. So I'd say pretty important. I'm actually shocked that Tesla has done so well without it.
I had a hard time understanding how this could be true, until I read the simple math example presented. The problem seems to be one of externalities. Each individual driver is selfishly optimizing for his own travel time, but by choosing to drive in a short-congested route, instead of a longer-sparse route, he's negatively impacting the travel times of everyone else around him.

It's been well proven in economics that externalities, if unregulated, will produce sub-optimal outcomes. That the way to restore optimal outcomes is to impose a tax that's proportional to the negative externality imposed on others. In an ideal high-tech world, this can be achieved by having differential prices that each driver has to pay, to use each road/highway. In a low tech world, narrowing/closing a road is akin to imposing a tax on certain routes, which explains why it can counter-intuitively help us get to a more optimal outcome.
I'm curious: How much difference would having a GPU make in this situation?

I also wonder how many people think of saving TensorFlow state to disk?
Glad you like it. I work at Disney Animation. I have been pushing to get more "Innovations" posted but it's not always the easiest thing to get "secret sauce" published.
https://www.disneyanimation.com/technology/innovations

I also helped push this forward to get other divisions to think about open sourcing code more often. http://disney.github.io/
Dell is really pushing the envelope when it comes to monitors. I was tempted to get a 4K monitor during the holiday season, but decided not to when I found out that I had to upgrade all of my graphics cards and laptops.
Perhaps, but that's an argument that needs to be made. It wasn't.
Still no official client for IIS. Maybe in 2017!
Show HN: Flatpickr – lightweight js datetime picker
Because that data is viewed as proprietary and useful for ads. In fact it's the reason Apple ended up making their own maps! They didn't want to share that info with Google but it was the only way Google was gonna allow for turn by turn directions in the app.
I don't think it's a minority view. At least in my case, I'm fine with clicking on an AMP link, but I'm always aware of:

* How difficult it will be if I want to share the link with someone (because I don't want to share an AMP link).

* How difficult it is if I want to go exploring around the site that has the thing I am reading.
.. or spend the whole $40B and cure all forms of cancer, once and for all!
What software connects to a known botnet to allow connection to a VPN?
Measuring execution performance of C++ exceptions vs. error codes
where's my money back when I don't use any of my health care benefits?

I don't think you've fully grasped the concept of "insurance".
This finding is also stressing me out. My son is 2 1/2 years old. Did I love him enough in his first year? Any way for me to tell? The article seems light on such details.
It's possible, but if LIDAR is actually a fundamental breakthrough technology at $7500/per that opens up lots of other new markets, it will require buy-in of many, many entrepreneurs seeking to find uses for this technology. Betting on that likely looks a lot worse to Wall Street than betting on self-driving cars.
My wife and I have done this for a few years, for reasons that sound similar. Works great for us.

In our case, she has always done the books and we have always been able to have enough carrying around money.

Budget carefully and make sure you set aside time for each other.
We're discussing what would be realistic in our world, precisely because what's happening in the show is implausible. How Dolores behaves wouldn't be relevant to this conversation.
An easier alternative is to tunnel everything through a SSH connection.

I use putty tunneling+proxifier (on windows) and a python script on my ubuntu box (The name is escaping me at the moment).

It's very simple to setup, doesn't require a ton of configuration, and can be just a secure as a VPN connection.

I've never been a fan of OpenVPN. Configuration is cumbersome and performance wasn't that great.
How Lisp-family languages facilitate building bioinformatics applications
I agree, but let's not let perfect be the enemy of the good.

PhantomJS works well enough, 2.5 will hopefully work better. `--headless` will be even better than that, but it isn't here yet.
allowed slavery for decades

And doesn't anymore.

only allowed a minority of citizens to vote for most of its history

And now does.

These are both examples of how the US has improved over time. I would be very surprised to see a reversal on either of these. If there were, people would similarly question whether it was still the US in anything but name, even if this had been the situation in the past.
New Debian Developers and Maintainers (November and December 2016)
One way to understand CQRS is to realize that even the traditional model relies on CQRS underneath, it just so happens that the relational databases hide some of this behind a blocking wait on commit while a background thread reads and flushes the event log (consisting of SQL statements written to a redo log for example). Really what you are gaining by inverting the database like this is a lot more flexibility and simplicity for initial development and subsequent change management (maintenance). The flexibility I speak of manifests in your ability to tweak availability by introducing controllable circuit breakers with availability at the expense of some latency or alternatively putting an upper bound on latency at the expense of some availability (with every tradeoff fully documented and demonstrably adhered to).
Admittedly I could be told I'm nitpicking, but Pacific Bell never renamed itself Cingular (not directly anyway). PacBell was bought by Southwestern Bell in 1997 and became SBC. In 2000, SBC Wireless partnered with BellSouth's mobile division to create Cingular. Cingular then bought AT&T Wireless in 2004. SBC later bought AT&T and renamed itself to the company it just bought, aka AT&T. In 2007, AT&T nee SBC bought BellSouth and thus finally owned all rights to the Cingular name, which promptly was dumped and instead renamed to AT&T.

The phone company space is the most incestual circle jerk mess imaginable. Judge Greene has to be rolling over in his grave!
"Stress" applied to a lab rat is effectively psychological trauma.

My interpretation of this experiment is that social skills play a part in sexual attractiveness for rats, and that traumatizing them as teenagers adversely impacts their social skills.
Oh now, what nonsense. We're not talking about spontaneously manifesting outside of the "sandbox," we're talking about simulated objects/intelligences comprehending the medium in which they are simulated and then learning to create effects in that medium as if they were working from the outside in.

For example, if you were simulated as a series of electrical signals in a computer, and if you were simulated as having some decision-making capacity, you could decide to take certain actions inside he simulation that might, for example, contextually outside the simulation, change one electrical signal from 'on' to 'off'. Like, "this is the 0 1 switch that represents the aliveness/deadness of SpriteActor32605." If you knew you were in a simulation of this type and you learned how to locate memory addresses, you might be able to execute a rowhammer attack, for example, and gain some sort of user access and more straightforward method to interact with the signals out of which you were made.

I'm not indicating that it would be easy or even that it would be necessarily useful, but particularly if there isn't someone 'monitoring' the simulation (as in, the simulation is the result of randomness and there's nobody trying to eliminate unexpected behavior from the simulated beings), there's every reason to imagine that we could begin to understand and learn to manipulate the medium out of which we were made.

If, you know, we are actually in a simulation and dependent on outside information for continued existence. Which is not settled at all, merely proposed as an explanation for some of the peculiarities we note here.
Anatomy of a Hoax: The Sokal Hoax 20 years later
We are working on a direct path from AMP pages loaded from Google Search to the canonical to fix the link issue & sharing will use the canonical link where technically possible.
Like their predatory lease program. The terms are clear as mud for the desperate
person this attracts.

http://image.et.xchangeleasing.com/lib/fe9412737265067b77/m/...

https://consumerist.com/2016/05/31/5-things-you-should-know-...

Are pay day loan patrons really making an informed decision because the interest percentage is written on the wall?
Neural painter in browser
Volunteers with finite amounts of time.
On the contrary, Kalanick is directly appealing to the conscience of the community. Whenever regulators attempt to shut him down he appeals directly to the public: "Bill de Blasio/Shiv Sena/Telangana Taxi Association/etc wants to take away your ride!"

Many in the civil rights movement also broke laws for their own profit or other benefit; they wanted the right to work any job they were qualified for, live in any neighborhood, etc. What's wrong with that?

Does one need to be completely altruistic to oppose injustice? Victims cannot protest, only uninterested third parties?
My criticism of philosophy nowadays is not that it isn't valuable to read, but that it's not read from a historical perspective. Instead, people to often read i.e. Aristotle as if it contains modern truths. While some parts of Aristotle remain true, his ideas have been greatly refined over centuries, and integrated into our culture to the point that uneducated people in the modern world often have a stronger grasp of practical philosophy than Aristotle did.

But too often old philosophy is taught and read in a vacuum, not as history but as a source of practical modern philosophy. This results in repeated resurgences of bad ideas that were refined away by more modern advancements in philosophy, but are revived when people read old philosophy uncritically. Few people have an understanding of the refinements to even refute many older philosophers claims.

Moreover, there are many accepted ideas which we take for granted that should be more deeply questioned which come from philosophy. For example, the pervasive Socratic idea that mind and body are separate entities is all but disproven by modern understanding of the nervous system, but it's deeply ingrained in our culture, and needs less reinforcement, not more.
Get a spouse who works and is gracious enough to pay for your health insurance via his/her company plan :-)

That's how I do it, but this probably puts me in the "lucky" category...
Fast food is absolutely not cheaper. It is perceived to be cheaper due to bad education and poor judgement. With a cheap slow cooker, bulk brown rice, bulk beans, fresh produce and a little bit of (optional) bacon, you can make a gigantic, delicious, filling, nutritious beans and rice dish for under $5, which will feed a family of 6 in even the most expensive city in the U.S.

Dried beans and dried rice are ~$1/lb purchased in bulk in Seattle. Fresh produce is available cheaply year round at every grocery store. The same goes for salt, black pepper, bulk spices.

All of these except the fresh produce and the bacon can be purchased literally months in advance, and are available online. The fresh produce and the bacon are a once-per-week affair, (which might be a genuine accessibility issue for some). The prep time is literally less than 5 minutes for the whole dish once you have it memorized and can cut a vegetable.

Source: I cook for myself every day. I prefer big cheap one-pot slow cooker dishes.
Wine bottle prices and beer prices are available everywhere. It's not that hard to compare them.
This is a great point. Additionally, in a world where there are many competitors with self-driving cars, I can't imagine roads not having and API of sorts to simplify the work cars have to do. Instead of painted line markers, why not IR beacons or something similar. Could be the same for road work signs or temporary barriers.
This is really great! I didn't even know this was possible thanks!
Seeking spouse with good health insurance plan...
Citations needed on those violations.

(I work for Google, and cannot access your data)
You could also use the list comprehension form of that:

[x for x in mixed_widgets if 'widgets' in x][0]['widgets']

More readable? I dunno. More "Pythonic"? Definitely.

Related: I wish the list type in Python included an analogue to dict's ".get(key, default)" operation.