skysight-inc/HackerNews huggingface dataset:
> For "words" to generate a collision, you'd have to increase the input domain by allowing "words" to mean any sequence of bytes (e.g. bytes of jpg image or audio file).

That is way overkill - the input domain could just be strings of words. Each word of a typical English text adds about one byte of entropy (2^8 states). We get a probable collision by having a number of text states around the square root of the number of hash states (because of the birthday paradox). So, sqrt(10^48) = 10^24 = (10^3)^8 which is about (2^10)^8. So the space of ordinary 10-word strings is big enough to give a sha-1 collision, without invoking inputs like binary files.
Oh how I envy your use of C++14 every day. Here we are still trying to migrate off VC2008 and C++2003.

Variant and optional would be really useful if only I could use them. One day, one day...

(ps doesn't stop me writing using these new features at home on other projects)
>something React-like as part of the web standards.

Hell no. High-level APIs should remain in user space, they are too often optimized for short term thinking, prone to breakage, and inefficient.

Most of the current DOM specification has been around since 1998-2000, and the spec hasn't made a single breaking change. Standards committees have an obligation to not break the foundations of the web, framework authors can do whatever.
The have a pay by month option, it just costs more.
I agree with this one. You are never so free as you are between jobs (for whatever reason). Even if you can't afford to take a far away trip, go see family for a week, drive somewhere new, or just goof off all week for a week.

...but yea, also file for unemployment immediately. Your former employer paid for that safety net.
Not automatically resending messages after keys have changed might be a good start.
This just goes to show the importance of picking sound defaults. WhatsApp gets this horribly wrong. Regardless of whether it's a backdoor, their default behaviour is dangerous because it leaves users vulnerable to MITM attacks.

Let's not get hung up on semantics, and focus on the HARM.
Show HN: Poor Fox – A beautiful CLI app for keeping track of your expenses
Freenom World – A fast and anonymous Public DNS resolver
FTA:

He always felt constrained at Apple in terms of what he could discuss publicly — resorting to off-the-record chats, surprise presentations, and the like," the person told us. "Similarly, I know he was constrained in recruiting and other areas. Eventually I know that can really wear people down."

Running an open source project with lot of contributors requires open communication. Recruiting constraints is self explanatory.
See my comment below, they do have a pay by month option. It's just harder to find and costs more per month than an annual paid monthly.

I used it for a few months in 2016 - cost something like $50 CAD/mo
I've used signal for quite a while but went back to Threema because the messages were delayed too often.

What are opinions about Matrix (matrix.org) used with the Riot client?

This combo checks all the boxes that Signal checks (including the Olm ratchet, a close relative of the Signal ratchet), and adds :

- decentralization (run your own server)

- no need to disclose your phone number
It is speculation, but it is far from baseless.

Not all speculation is inappropriate; sometimes it is the seed from which a correct conclusion ultimately grows.
Blockchain. Is It Worth Your Attention?
Don't forget the RIAA curve!

http://sessionville.com/articles/what-is-the-riaa-curve
I doubt it, the price of one AppleTV is subsidized by future iTunes purchases.
Like PulseAudio in its early years, systemd bothers a lot of people because it was pushed out before it was quite ready, and therefore breaks things that used to work. But also like PulseAudio, it solves a whole lot of problems for which the solutions were becoming increasingly hacky and unstable. I don't believe a slower roll-out would have helped in either case, because many of the issues were undetectable without a broad user base.

Anti-Lennart partisans would say here that both pieces of software are broken by design and leave in a huff. I sympathize with their aversion to complexity, but I'll take a complex init system and simple configuration over a simple init system with baroque configuration.
Plenty of places have that many parking meters - you need one per pair of cars.

You'd end up paying the council a small premium to park and charge in front of your house, I suspect. Which isn't great but at least works.

(I've seen someone charging a normal vehicle battery with an extension cord from a third floor window of an Edinburgh tenement..)
> I think there are actually very few people who would take such a risk, even though I think it's a necessary risk if you want to be part of "huge, if true."

I beg to differ - we will never know the number of people who take such risks due to survivorship bias. I have a hunch that a lot of people through the ages took risks that never paid off and they never got famous, instead, they bankrupted themselves, got committed into asylums or lived their days in anonymity. No one writes biographies about them, if they did, no one would want to read them.

> dare to spend years of your life grinding away (in relative isolation) on something that seems crazy, with no guarantee of any success, but full of promise.

If I were to come up with a VC creed, it would probably be very close to this. Distill it down to concise Latin and you got yourself a bona fide VC Firm motto.
Blockchain is now one of the most hyped, hotly debated, controversial, and yet promising technologies since the inception of the Internet. It is often mentioned in Gartner, Forbes, the Economist, and other reputable resources. Indeed, this cutting-edge technology has the potential to trigger a revolution in a significant number of industries! Of course, as with any system, Blockchain has many advantages and disadvantages. This [Blog Post] sheds light on some of them. Read it to decide whether Blockchain is worth your attention.
While at Apple, I once had to get director approval to get an unreleased version of iTunes for some feature I was working on. It took a couple weeks to plinko up the management chain.

When I finally got the build the interface was a slightly lighter shade of grey. It was fucking stupid.
Shame that we can only upvote articles, not downvote
Send an email to your peers explaining that although you might not agree with reasons, you understand management needs to do what they think makes sense. And that you enjoyed your time together, wish them success, etc.
There are balancing processes which remove CO2 from the atmosphere, so if we could stretch out the oil extraction over a couple of centuries we'd be in a much better position.
So same amount of information gathered but distributed among a larger group?

Can't decide if this is good or bad.
Please don't use Tor for torrents.

https://blog.torproject.org/blog/bittorrent-over-tor-isnt-go...
I find it easier to ask what standard they work to. If someone says "I write C++", I would ask "what version?" as there is a significant gulf between 2003 and 2011 standards, for example.

Or, as is very common, they are not sure and it you will know that they don't know enough C++, or are in danger of writing C++ like it was C.

If someone says "I play the guitar" and you ask "acoustic, electric? hollow bodied?" and they don't know, you'd be surprised.

If someone says "I own a Volkswagen Golf" and you asked what mark (4, 5, 6 or 7) and they didn't know, you'd assume they knew nothing about they car or didn't have to replace any parts on it, even simple things like windscreen wipers as they'd have bought the wrong ones.

It's the same with C++ - the spec makes a huge difference so we should probably all be aware of what we're writing.
If £280 is the retail price then it's £233 before VAT (20%) is added. At the current exchange rate that's $283 (US).
There are no "illegal websites", only some illegal activity on legal websites. Just like there's some illegal activity on legal roadways, but we don't block the roads do we?
I imagine trying to run a consensus-driven open source project from within a super-secret topdownocracy like Apple is next to being an impossible task. That Lattner did it for as long as he did is impressive.
I agree this isn't a backdoor. Facebook is already a Trusted Third Party with the responsibility to deliver an honest closed source client binary, as are Apple and Google for delivering the binary unaltered to the end users.

This backdoor cannot be exploited by third parties, only by Facebook themselves, who already have much easier ways to intercept or manipulate communication. So although I don't think Whatsapp makes the right trade-off here (people get a new phone only once every few years, so why optimize for that edge case?), I'm not concerned about the privacy implications either.

I suspect other commenters here are confused about the nature of the Signal protocol, and who you have to trust for the system to be secure. If you used to believe that Facebook is 100% unable to intercept or tamper with Whatsapp communication, then this would be upsetting. But since they're a trusted party already, this changes nothing.
The easiest way to automate building and releasing your iOS and Android apps
I believe he is implying that there is still slavery on-going in the US, and will be going on for 15 more years at least.
Electric cars were initially more common than those powered by gasoline. Gasoline has very high energy density and they aren't really that fiddly: It is fairly common for an IC vehicle to rack up 200k miles with no service but consumables.

Unless electric cars ramp to crazy levels overnight, they will have the effect of keeping fuel prices low.

Demand for oil is (mostly) inelastic, with small surges in supply and demand responsible for large swings in price. As electric comes online, it will reduce those surges. When it gets more common, demand will shrink, lowering prices even further. I don't see electric powertrains taking over all the varied use cases for vehicles for a long time.
I have an Android phone with a 6 inch screen, switch's screen is only .2" bigger. My phone even has a better resolution.
> in the classical description of thermodynamics.

The "classical description of thermodynamics" is only an approximation to the fundamental definition I mentioned.

I'm sorry, but I won't be able to continue this conversation.
Swift itself was a huge surprise.
They might be more convenient, for journeys up to the battery's range, but they're also much more expensive upfront.
What you've said here, whether true or not, is a much more general notion than the linked topic, which is a specific, documented vulnerability in an app popular largely because it is ostensibly secure.
I do not see this as an actual rebuttal to the idea of it being a backdoor. The article makes two points:
1. Ultimately, verification falls to the user, so even in a secure system, user error, misunderstanding, and/or laziness can result in becoming compromised
2. Clients can lie to us anyway

The point about this "backdoor" business is that the WhatsApp client does not even give the user the chance to even make a mistake of skipping or mis-executing validation. Instead, it will just make that mistake FOR you, every time, for your convenience!

That utter failure of design, and breach of trust, enables a remote actor (the WhatsApp servers) to access secure data. So yes, it is a "backdoor".
> They required complicated mecanical trickery to use.

What? I haven't used a cassette in over a decade, but I still remember how they are used, and it didn't involved complicated trickery. Turn on and open the deck, slide in the cassette, close, and press play. Maybe rewind when you're done, and eject.

Streaming music is arguably more complicated, but that's not stopping it.
Which is why chrome is moving toward a policy of only allowing web store extensions, end of story.

It sucks, and nobody is happy with it, but at the end of the day it's the only thing that seems to be working.
Because we were already 99.x percent the same as Neanderthal, so if you take 4% of a Neanderthal genome and replace those sections in a human genome, not very much actually changes.
Alternative: OpenStreetMap !

"The following companies offer consulting, tile-hosting or other services for sites wishing to switch to OpenStreetMap."

https://switch2osm.org/providers/
Apart from the horrifying punctuation, I can't see how the quoted paragraph is technically incorrect. Some kind of real-world validation is required before you can trust that a public key really represents a given entity (at least, that's how I'm interpreting "verify fingerprints") and so it follows that if users don't validate the public keys of their correspondents, they can't know for sure that their conversations haven't been MitM'd.
Couldn't agree more. A billion-dollar pharma with nothing in the market? Nothing to be marketed in 2017, possibly not even in 2018? Hmmm... I've seen this before...
I don't know about Apple at all, but I've worked in environments where there was a heavy security culture and super tight protocols re: external communication.

In short, it's really stressful and frustrating. In my case, our external communications required high-level approval unless there is a specific protocol in place.

You get to a place where it's just too stressful.
> Since 2003 ... nominally advised clients on cybersecurity, but people who have worked with his firm say the advice is focused more on liability mitigation for companies rather than implementing best security practices.

Yeah, I can see that coming handy when you work for the government...
I would also be a bit hesitant about job prospects. My last job was at a large nonprofit in SF on their data team, and both my boss and my only non-contractor coworker were PhDs who fled academia. Salaries for the tech teams in general were 25-50% below market and overtime was high, and there were still PhDs taking these jobs.
It's official: Nokia 6 Android 7.0 smartphone announced with Snapdragon 430
This is not good advice. Although it is true that you don't need to sign these docs, many countries have very low legal requirements for statutory redundancy pay. UK definitely, US too I believe.

If the company is offering more compensation and you are ok with the strictures of the paperwork, then it is entirely sensible to sign. However, as I said further up the chain, this is a legal document and it's worth getting a professional opinion.

Obviously, if the document has strictures that you don't want to or can't agree to, then absolutely don't sign. You are definitely not obliged to but the company is then only obliged to provide the legal minimum.
People always forget that part!
Well, are we surprised?
The 3DS has some excellent third party exclusive games, mainly RPGs. I really can't think of anything comparable on the Wii or Wii U that I feel I'm missing out on, except for the first party titles.
I am also a Pandora fanboy. I pay for their ad-free service. I have heard more "new to me" music through Pandora than any other source, and for that I am truly grateful.
The music streaming services are competing now with exclusive albums (this was Tidal's big draw; are they even still around?), to the detriment of their users.
Show HN: Free Chapters from Cloud Is a Piece of Cake
If the secrecy wore him down, why is he moving to Tesla which is equally secretive? I'm not convinced by this argument.
Right, but imagine good art direction AND raw power.
Write yourself a side project using as many features as you can.

Or write a cheatsheet (multiple pages) for C++11 onward, taking care to detail example cases of each new item or construct or keyword.

You'll know no end of idiosyncrasies in no time.

Remember, that was ~6 years ago and that's a long time. If we're still writing C++2003 and haven't fully looked into C++11 and beyond or learned swathes of it (like many many many of my colleagues and C++ devs I meet, some of whom call it C++0x), that means they're working to a spec 14 years old (C++2003). 14 years old is a teenager.
Mapbox allows you to customize tile sheets as per your fancy. You can even select what symbols will appear at a given zoom level.

[1] https://www.mapbox.com/help/customizing-map-colors/
Strategy Is Dead. Hacking Company Workflow
Is this only saying it is a feature, not a bug?
It's sort of happened before - https://en.wikipedia.org/wiki/General_Motors_streetcar_consp..., that time on purpose. The Market didn't really decide on universal auto use, GM did.
Reminds me of Michael Burry and others in The Big Short, who shorted the housing market, but had to wait a long time for the market adjust.
Quick Side as the two commenters in this thread seem knowledge.

I assume xbegin is a memory barrier. But is it a full fence like mfence or lock prefix?

I see a lot of benchmarks using TSX for locking, but one of the nicer features of lock compxchg or lock xchg is they carried an implicit mfence this was nice because it forced reads/writes before the instructions to be completed.

I know xbegin/xend do _more_ then an mfence for reads/writes within the RTM region but do they provide fencing for instructions _after_ their execution?
The solution to this is to have multiple independent clients all working with the same protocol. This way it doesn't matter if an IM service handles your public keys, cause if they send different ones, they can't prevent the client from notifying. They simply don't control the client.

In general, it is the control of FB over the whatsapp client where the vulnerabilities lie.
Start testing on a mid range Android device on 3G and tell me you still believe that.

On mobile it's not just the file transfer that takes time: it's the JavaScript parsing and execution (on a single core) that hurts too. iPhones are massively faster than Android (especially cheaper Androids) at this, so many developers don't realize how much performance cost there is for a growing majority of their users.

Given how many different versions there are of popular libraries I'm personally skeptical that CDNs give you much of a chance if the asset being preloaded from another site. I'd love to see real numbers on this though.
This proves that poverty is a real thing and not some figment of imagination.
Yeah, I never took enough chemistry to be confident I could get that correct or I would have done it myself. I've done Physics 101 BotE work on HN before but I'm pretty sure I'd have screwed this up. :)
RISC-V at Scale: GRVI Phalanx Joins the Kilocore Club
They don't call them Zelda Boxes for nothing. I'll admit I'm biased, but I see nearly every Zelda game as easily in the top 3, if not the killer app of each Nintendo system.

Maybe so, but there's no way[1] I would by a console just because I want to play a single game. It takes at least half a dozen exclusives that interest me (announced, they don't all have to be released yet) for me to consider buying another console.

[1] Not actually true: I'm considering buying a PS3 so that I can play Demon Souls. But a second hand PS3 is very cheap, so its not really the same thing IMHO.
Tech articles are the absolute worst at being click-baity.
It's not at all meaningless but reflective of the fact that notions of race (or something like it) are entirely subjective and variable across cultures, even across time within cultures. Whites, as an American example, did not in our recent past include all kinds of people from countries in the Mediterranean or Eastern Europe. The same is true of ethnic categorizations.

And yes, some ethnicities being susceptible to diseases is a social construct because ethnicities follow the same shifting standards. Your talking about the intersection of an imprecise categorization with biological understanding that is only dependent on the latter to remain true. It's useful today because (in some societies) it can signal aspects of biology. But human societies in the future could have entirely different notions of race and ethnicity that change or renders the overlap meaningless.
I subscribe to tidal. It is expensive.. $20/month for "hifi" streaming. It is the only streaming service that offers lossless streaming. Their catalog is good - if I can't find a band it's not a huge surprise.
Their playlists are pretty decent - I miss a bit of the community playlist building that spotify has. I like that there is a company offering a better quality of music and am willing to support that.
In 2011, I was "laid off" from my job along with almost everyone else when the scraps of my company was acquired. It wasn't a surprise to anyone that this day was coming, management was completely open with us about the dire situation of the company and most of us stuck around until the bitter end hoping that our options might be worth something (they weren't) or that we would get a severance.

From looking at people's LinkedIn profile, everyone from developers, to managers, to the L1, and L2 tech support staff had better jobs within a month. Once recruiters got a whiff of the company being in trouble, they started contacting people. Don't ignore recruiters. I have 15 recruiting contacts from different companies in my contact list.

I put "laid off" in quotes above because immediately after I was laid off, I did contracting work for one of my company's clients (based on a written agreement they had with the acquiring company). After that contract was over, I spent a day contacting every recruiting company I knew. Three days later, I had a phone screen with a Fortune 10 company, one day after that I had an in person interview. By that evening I had an offer letter. At the time, I was a an experienced developer but a middling .Net developer trying to get into full stack development.

Moral of the story, aggressively reach out to people, recruiters aren't evil, study up on interview prep, and don't be afraid to take chances on going after jobs that you might feel that you are not 100% qualified for. I've conducted about a dozen interviews over the past four years. I don't care if you meet all of the bullet points. I care if you are "smart and gets stuff done." And if you are an aggressive learner.
....or, they look up in the manual when they have to change the wiper blades.
It's actually very accurate technically. The Guardian article seems to miss the basic point.

The encryption in WhatsApp and Signal and Apple messaging all are all built to protect data from others in transit not necessarily from the service provider itself.

No system where a central service provider manages both key infrastructure and message delivery can ever be secure from MITM by the service provider unless you do manual key verification through a different channel. Signal does provide the means to doing so by physically meeting a person and verifying which is good. But are you truly going to be able to explain these concepts beyond techies?
* http://www.weeklyosm.eu/

* http://www.openstreetmap.org/help

* Tips for new (Pokemon Go) mappers:
https://blog.openstreetmap.org/2016/12/30/tips-pokemon-go/
Our species?
> USB-C

Nintendo having an history of using proprietary cable, this is great news. Having the possibility to charge all of your device with one cable and sharing a unique powerbank is something really cool.
Building an Alexa Skill as a Web Service on Heroku
I was implying that they haven't bought new blades because a Mk4 wiper blade will not fit a Mk5. You cannot shop for wiper blades without knowing what your model and mark is.
There's no notification blindness. If a key was changed after a message was sent, then the sender would simply be notified and they could choose to resend using the new key. This is how Signal works.
> BI also pointed to an incident in 2015 when Apple’s entire networking team quit over Apple’s refusal to allow them to participate in an industry-wide network security forum known as the Open Compute Product.

How big is the "entire networking team", how many people are we talking about here?
Until the Lion Learns How to Write, Every Story Will Glorify the Hunter
Nice detail!