skysight-inc/HackerNews huggingface dataset:
This kind of phrase replacement in calls was on the NSA's priority list years ago, according to the Snowden leaks.
It's all about choice. We have huge choice when it comes to food - I can live on noodles if my circumstances go downhill. Entertainment I can forgo, and I can live with my old mobile phone.

But if I get pregnant or cancer, I have no choice - I have to get treatment or die.
Why the ‘gluten-free movement’ is less of a fad than we thought
How to Nail Your SaaS Trial [Free EBook]
> This is contrary to WhatsApp's claim that even they cannot snoop.

They claimed that once a message has been delivered (double check mark),.

> The only notification might be that rekeying warning

The rekeying warning is a fundamental part of WhatsApp's security. If it's disabled, there are many possible attacks, not just this one. The blog entry explains it pretty well.
Ask HN: Is OMEMO a good alternative to Signal for federated XMPP?
I recently learned about OMEMO, which is trying to replicate what Signal did with double ratcheting, but on top of Jabber/XMPP.

https://en.wikipedia.org/wiki/OMEMO

What does the HN community think about this protocol? Is it a good idea?

And also, how are the actual implementations? From my experience, OTR implementations were horrible and often incompatible with each other, and I ended up going back to plaintext (oh, the times before Signal).

Conversations seem nice, but I don't like this quote from wikipedia - "E2E encryption there are OpenPGP, OTR Messaging, and OMEMO to choose from."

I am not sure more choice is good in this case. But I don't know the application itself, maybe it's done well.

(edit: well, it looks a bit confusing in the app itself, unfortunately. https://conversations.im/images/screenshot_encryption_selection.jpg Default is plaintext?)

Also, how is the server support? How error prone is it, etc.

edit: also, how is the support of group chat (like Signal has) and of synchronizing devices (like Signal has with mobile-desktop sync)
But take gaming (or the web) for example - same subset of the market, and gaming is now a huge market and culturally significant.

However, there was, in certain respects, a kind of community for those above examples that I don't really see.

Maybe there's some path to get before the inflection point happens.
A very informative article.
> But the nature of the jobs hasn't changed.

I don't know if that's really true. A lot of pharmacist jobs are essentially retail sales roles.
Given that Matías Duarte had a big hand in both Android and WebOS, I would imagine it wouldn't look all that different.
The problem is that the "oomph" of the message and ability to spread it is lost for largely the same reasons. Jessica worked for a long time to get the ears of so many people. A pen name is far more likely to get lost in the noise or have its credibility called into question.
> willing to make catastrophic sacrifices to make security applications popular and viable for the "lay person"

I call those "completely reasonable compromises".
Yes, but in Signal, it doesn't have bad security consequences when its meaning is misunderstood.
Awesome suggestions, and +1 for TypeScript! I've been using TS in some of my small projects, and combined with VS Code[1] it's a great experience for me.

I just wanted to add that I think a good JS IDE is worth having. I mentioned VS Code before which I think is great, but I'll also suggest JetBrains' WebStorm[2] which has excellent JS support (and TS support), but in my opinion VS Code is getting to be just as good.

[1] https://code.visualstudio.com/

[2] https://www.jetbrains.com/webstorm/
I use a 5.11 Rush 24 Backpack, very useful, so strong. http://www.511tactical.com/rush-24-backpack.html
Daybreakers. https://en.wikipedia.org/wiki/Daybreakers

People are vampires farming the remaining humans for their blood.
Sayre's paradox
In some contexts, Ashkenazi have been considered white.

Not that I'd argue for that.
It hurts the company too. Because people will leave if they're undercompensated. And recruiters are looking for people based on skills, not negotiation skills. If they find someone undercompensated for their skill set who fills a role they're looking to fill, they -will- poach them.

Paying people what they're worth benefits everyone involved.
Memo to Tech Professionals: In 2017, Ask for a Raise
> I think there's a stronger correlation for religious people being active climate change deniers. Surely the creator would not destroy EVERYONE all at the same time?! That would be capricious and unfair!

Climate change won't kill everyone at the same time, though.
Thanks. Yes, they are :) Currently working on making the hardware selection both broader, customizable and more reliable, and then I'll try (again, turned out to be hard so far) to get into some US-american APIs.
http://myoffshoreweb.com/job/10_oil_rig_jobs_for_females.htm...
Considering iOS forbids self modifying code, lots of tricks aren't even available.
I wonder if you could configure StumpWM to use vim-like leaders? http://stackoverflow.com/questions/1764263/what-is-the-leade...

I'd love to be able to "right-windows o f" right windows is the leader key, o would be open, and f is for firefox. "right-windows o c" to open chrome
Of course they are. It's a scientific question that has somehow turned into a political debate.

But that's separate from the question of your position on the thing itself. Do you think anthropogenic climate change is a thing, or not? If not, then you're kind of dancing around it. If so, then I don't get why you're so upset.
What. How have I not heard of this? Watching it tonight, thanks.
The double check mark might just mean WhatApp rekeyed both parties and have read the messages themselves.

And the "fundamental part" is disabled by default...
Laserdisc failed because of cost/competition from competing platforms. 3D TVs were an add-on to a commodity product to help differentiate it in a technologically stagnate market. Google glass was experimental.

VR on the other hand is a technology evolution. You could argue we're too early in the adoption hockey stick. But I doubt you could even begin to compare it to those other products.

It seems like there are already enough early adopters to fuel the growth it will require (product-wise) to get mainstream adoption.

As others have mentioned, this has only scratched the surface in the consumer market. But the B2B applications are so wide that this could be huge there alone in terms of simulation, training, and business process automation.

I doubt someones poor experience with some early stage VR tech is enough to discredit the wider potential of the platform. Even if the consumer gaming side is niche for another half decade.
How to regain my attention span...

Quit HN

/s

...

/s
Wii fitness was not fitness. It didn't approach anything of a challenge other possibly pushups, planks and a couple of other bodyweight exercises.

In VR you have to move a lot more for things to work and the the games are not fitness specific. It definitely gets your heart beating because you often have to hop around like your boxing or doing burpees. Burpees don't look that exhausting, but the constant floor to standing movement makes it challenging. I think this is what makes VR more physical.
I agree it's worth reading. But you're conflating Everett, whose theory does not hold up well to peer scrutiny, with everyone else who thinks there are problems with Generative Grammar, which is teased but not actually examined by the article.
One checkmark = message delivered /
Double checkmark = somebody read it. That somebody might as well be WhatApp doing a MITM

The double checkmark stuff the blog talks about just means you cannot retroactively rekey already sent (old) messages.
WhatApp inserting itself as a MITM can however read (and double checkmark) and new messages after they did the MITM rekeying
This. So much this.

Let's consider three other facts:

1.) WhatsApp is owned by Facebook. This is a company that's has publicly said through a former, nepotistically appointed director that privacy needs to 'go away'. Their sole purpose is to extract as much PII from users as possible for resale. Offering a completely private messaging service doesn't seem to be in their financial interest.

2.) There is no way to independently verify anything being claimed by Moxie/Facebook. No WhatsApp specific source code - which is clearly different from Signal - why? Furthermore, no view into the infrastructure at Facebook. The latter is more reasonable, but seriously, why are we trusting a company whose CEO calls its users "Dumb fucks" for trusting it with their data?

3.) The Client is updated regularly through auto updates, so it seems possible that many of these notifications could simply be bypassed based on Moxie's own described MITM attack.

Moxie, fuck your blog post. It has some decent points, but helping Facebook is probably the opposite of what decent privacy advocates should be doing. More likely you've helped them be more covert about doing evil shit than helping users. Hope you enjoyed the cheque though.
Is an app like this enough for that purpose?

https://play.google.com/store/apps/details?id=com.googlecode...
All the VR goggles are 1440p max, so we haven't seen "4K" yet to see how good it is.
Bernie Madoff is cornering the prison market on Swiss Miss hot chocolate
I'm in a cab typing on my phone but good Google searches are "llvm lifter" and "symbolic execution" or "SMT".
Is being conflict adverse inherently "dumb" though, when people's responses to it are gendered?

Or think of it this way, is the ability to negotiate aggressively that much of a value add to a company, and if so, is that worth more then the interpersonal skills that a less conflict prone person might have developed in areas like team work?
Or just artificially enlongating the game. I quit the original FF when the story basically told me I would need to revisit the entire game's locales for some tenuous plot reason.
The guy who found this "vulnerability", for example?
Several days? The news of his departure isn't even several days old. Even if he asked lattner to comment five minutes after his email to the swift list, that wasn't a reasonable time to wait before publishing.
> This allows WhatsApp to MITM.
Technically, yes.

Users could verify if they have been MITMed by verifying the Security Number (just tap on a contact, view contact details -> Encryption). This assumes the WhatsApp app doesn't just display the old safety number.
What on earth do you mean by tech is 10x as diverse? And what specifically is so much more compelling to women about the "social side" of being a lawyer?
1. "It’s ridiculous to compare any living person to Hitler or Mussolini."

2. No mention of Hitler. A point by point comparison to a historical and previous description of fascism.

3. Not Hitler, talks about conservatism and totalitarianism.

4. No mention of Hitler anywhere.

5. " I am not suggesting that what is happening in the United States replicates in every sense what happened in Italy and Germany. "

6. "The Republican presidential candidate is not a Fascist, but his campaign bears notable similarities to the reign of Italian dictator Benito Mussolini."

Compare these viewpoints to the claim of "But people really were saying Trump is literally Hitler."

Edit: I should also say that I don't doubt you could come up with something somewhere where somebody claimed that Trump is "literally Hitler." However, it is not a prevalent or even mainstream viewpoint. Even calling Trump a fascist, and defending it based on evidence, is a pretty extreme and rare viewpoint.
Personally, I thought the ACA was a very honest plan. The individual mandate is a very clear statement of: healthy people must get insurance so that we can offset the cost of requiring that sick people can get insurance. I never had any illusions that, as a healthy young person, this would do anything besides increase medical costs (including insurance premiums) for me, as a trade-off against the possibility that I may one day be one of the older and/or sick people that it would benefit. I hoped it would decrease costs because we would no longer need to subsidize the uninsured by making up for care providers' lost revenue, but I didn't think that would (especially in the short term) be anything besides shifting that subsidy from being included in the cost of care to being included in premiums and federal taxes.

I was pretty sure it was going to make things more expensive for me, and I don't think it was sold any differently than that. I was not in favor of it, largely because I didn't think it would survive politically long enough for me to switch from the "loses" to the "benefits" category. We're sort of seeing that now, except that I'm actually sort of optimistic that its 6-year (or so) survival has enshrined it or something like it.

I believe a repeal-without-replace plan will be completely disastrous for the incoming government and that whatever government is next will have popular support to backtrack, and that a repeal-and-replace plan will end up settling on something very similar, maybe even with some free-market-based improvements!
The Eiffel Tower was built for the 1889 World's Fair. A wooden hut was not state of the art in 1903.
If someone plays crazy, the solution is to go back playing simple near optimal poker aka playing the cards, calculate expected values and bet accordingly.
Did any employees express skepticism re the worthiness of this as a goal?
Yeah, SSH is at the complete opposite end of the scale in how it handles unexpected key changes - it won't even let you connect unless you manually edit known_hosts, whereas WhatsApp automatically uses the new key without any possible way for the user to stop it from doing so until it's too late.
> This allows WhatsApp to MITM. Whatapps can rekey both Alice and Bob, decrypt both their messages from that point onwards (incl unsent messages) and forward them re-encrypted with their real keys. The only notification might be that rekeying warning, if the users have turned it on. In this scenario even the double-checkmarks are present. This is contrary to WhatsApp's claim that even they cannot snoop.

You've just described a "man in the middle" attack. It is endemic to any public key cryptosystem, including Signal and PGP, not just WhatsApp. The notification that you see in WhatsApp, Signal, SSH, PGP, or whatever is the defense.

> PS: I just check on my phone if those notifications were turned on. There were not. And I'd never turn those off myself, which leads me to conclude that the rekeying notifications are off by default (in their android app)

Key change notifications are off by default in WhatsApp. That's probably going to be a fundamental limit of any application that serves billions of people from many different demographics all over the world.

Even if they were on by default, a fact of life is that the majority of users will probably not verify keys. That is our reality. Given that reality, the most important thing is to design your product so that the server has no knowledge of who has verified keys or who has enabled a setting to see key change notifications. That way the server has no knowledge of who it can MITM without getting caught. I've been impressed with the level of care that WhatsApp has given to that requirement.

I think we should all remain open to ideas about how we can improve this UX within the limits a mass market product has to operate within, but that's very different from labeling this a "backdoor."
To expand on this argument a bit, if you think the Government/Whatsapp are specifically out to get you (eg. willing to mount an active attack against you specifically), then WhatsApp is propably the wrong messenger for you.

If on the other hand you want a reasonably secure Messenger that you can use to chat privately with everybody and their Grandma then maybe you should not expect that it does super complex security thingys that 99% of its users just don't care about and don't want to be bothered with..
Nice slippery slope argument. If you're really so ignorant that you truly don't believe that society on a whole treats the same behavior differently depending on the sex of the person who's doing it then you really need to get outside.
>> So they built a Slackbot that assigned and circulated dishwashing responsibilities around the entire workforce
> I'd quit. I hate doing dishes. Can I just agree not to use the dishes?

Exactly. I don't use the dishes at work, so I'm not washing them.
In the world of security, technically means actually. Life or death situations require zero trust technologies.
Lithuanian is closest to the original proto-indo-european language keeping more of it's features than any of the hundreds of other languages that spawned out of it.

It's hard to say any language is "oldest" because languages are alive and the people that speak them change constantly. The pieces that make up the language though are indeed very old regardless of the fact that "Lithuanian" hasn't existed nearly as long.

>Among Indo-European languages, Lithuanian is extraordinarily conservative, retaining many archaic features otherwise found only in ancient languages such as Sanskrit[5] or Ancient Greek. For this reason, it is one of the most important sources in the reconstruction of the Proto-Indo-European language despite its late attestation (with the earliest texts dating only to c. 1500 AD). The phonology and especially the nominal morphology of Lithuanian is almost certainly the most conservative of any living Indo-European language,[4][6] although its verbal morphology is less conservative and may be exceeded by the conservatism of Modern Greek verbs, which maintain a number of archaic features lacking in Lithuanian, such as the synthetic aorist and mediopassive forms.
So, they voted to repeal it, offered no plans for replacement, and you want to act like "repeal and replace" is a more fair characterization?

The GOP has been talking about repeal for year(s) now and has nothing to show for a replacement plan. Meanwhile, as part of the resolution passed, they took aim at specific provisions that, again, were things praised in the grandparent comment.
LibDems and SNP.
Whatever you do learn ES6. It's the Javascript used today by most startups. Try to learn how to manipulate the DOM without jQuery. Learn React. Learn how to setup a project using Webpack.
"I'm locked out of prod VPN. Can you shoot me a copy of your key pair over secure messenger? We're encrypted and verified, so it should be fine."

The attacker in this scenario not only gets access to message plaintext but can also cause messages to be generated that wouldn't ordinarily be sent.
It's constitutional because it's a tax and the government is allowed to tax its citizens. You can either buy health insurance to fulfill the tax or you can pay the fine to fulfill the tax. Also, as many people have said, you just picked all the good parts of the ACA and said you want to keep those. It doesn't work that way. In order to get those good things, you need healthy people signed up. The only way to get a lot of healthy people signed up is to mandate insurance.
But is it a skill that matters for the job? How does the ability to cajole a better salary correlate with work product? IMO, it doesn't in most cases.

I've worked in a variety of places, from rigid union seniority scales, to 100% commission, to traditional corporate bands. End of the day, as long as the pay was enough, there's not much difference. Assholes, incompetents, average, high skill and genius people existed in all of those environments.

The other thing is the future time wasted through the negotiation process and dealing with the issues created. Dealing with a aggressive negotiator is a signal of a pain in the ass to me, better to cut bait.
> This allows WhatsApp to MITM.

If you're operating under the assumption that users aren't going to check their peers' key fingerprints, then you could just give compromised keys from the beginning -- no rekeying necessary. There's no way to protect against that scenario. That's not a fault of WhatsApp.
The Skype client was obfuscated, encrypted, and riddled with anti debugging boobytraps, none of which prevented people from figuring out exactly what it did. (Not exactly a formal analysis, but probably news to the people who think messaging apps have never been reversed before.)
I was under the impression that under the current US medical system that it is impossible to get a pre-purchase price on a lot of medical care. If you are going into hospital for a knee replacement you can't get anyone to tell you the total bill in advance.

One major difference is the actual price paid for a medical service by an insurance company is much lower (often 10%) of the cash price.

Another is that the you don't know what the insurance company will cover until months afterwards. None of these apply to normal consumer items where markets work.

The most efficient USA healthcare system would probably be to just expand the VA system to cover everyone and put a tax to pay for it.
Anyone staging an e-commerce website needs to use an EV SSL certificate.

Please stop perpetuating this myth.
Ask HN: Become a PHP expert
I know that PHP isn't the most popular language here, and it's not my ideal choice, but assuming that I need to become an expert PHP developer, what are some good resources I can read to accomplish that? I'm concerned with application structure, PHP gotchas, security, everything needed to deploy a quality PHP application. Any thoughts or suggestions?
The traditional search algorithms and heuristics from last time also did so, leading up to practical search engines and social networks.
Google's cache is more likely to already be populated with the answer than any ISP other than the huge ones.
Deep Learning Foundations
No, every Toxcore and Tox client welcome any contributions of any kind. Toktok especially. The sentiment I think we were going for is that we don't have the time when we're already working on the road map we started with.

I think it's a recurring comment (If you know the problem, why don't you fix it), because it's really easy to drive by, shit all over someone's project (that they've put a lot of time into) then move on, leaving everyone who still cares about the project to feel shitty. This is in to way directed at you. You've been nothing but helpful, supportive, and understanding! You're most certainly one of the good ones. But not everyone else got that award for today.
What about css and cool animations? Parallax is not cool anymore?
Call me cynical but most of the time "no negotiation" initiatives are really anti-employee initiatives.

How many of these companies end up paying in the top pay ranges?
Noooooo. The cost curve was NOT bent downward and if you can show me any evidence it was I'll certainly change my opinion.

What did happen was that a whole lot of people suddenly became the beneficiaries of a brand new government welfare program that wasn't paid for in any way by cost savings anywhere. I've got CBO studies to back that up.

Yes, we raised taxes on some rich people. Big deal. A pittance on what the spending required.

What we DID do was shift a whole lot of insurance costs onto people who were already paying a bunch: the middle-class.

If you want to know who really carries the weight of the ACA, look no further than a family of 4 with two incomes making about $125K between them. They saw their premiums rise, their deductibles grow, and their choices shrink.

There were winners: primarily, under or unemployed adults and those with pre-existing conditions that couldn't get coverage anywhere. Single mothers in some cases who couldn't otherwise get coverage under Medicare.

Everyone else who already had coverage they were paying for got screwed.