skysight-inc/HackerNews huggingface dataset:
Not really, there's a bunch of groups around the world that work on breaking elliptic curve crypto.

It takes only a few years of mathematical training.
It does. left-to-right linear time parsing is the idea that's about 15 years old and turned out to be most efficient and most performant.
No worries, I misinterpreted it. I think we derailed the original conversation in this thread.
There's a common belief among regular people (not actual knowledgeable of the philosophies behind the concepts) that "open source" means everything is free. As a company which sells hosting and development based on an open source project, we see this all the time. That's why we generally avoid mentioning "open source" at all in our marketing (as does Newsblur and SugarCRM, from what I can see).
Xenowatch
From a privacy point of view, it would be awesome if you stabilise the NoJS version of your search page:
https://duckduckgo.com/html/

* The above landing page doesn't work (typing a query and pressing enter returns me back to the same page).

* Even if I manually enter a search URL like this https://duckduckgo.com/html/?q=test it doesn't fully work (page navigation and requerying is broken).
Supposedly, they leverage machine learning across those areas as well...perhaps not as the primary foundation, but used there nonetheless.

http://venturebeat.com/2016/11/02/uber-is-rolling-out-a-big-...

https://newsroom.uber.com/inferring-uber-rider-destinations/

There's other references, but you get the idea.
I don't think see that as a particularly strong correlation here. I see comments on both sides that are grey or dead, many of which have clearly violated the guidelines.

https://news.ycombinator.com/newsguidelines.html
> "so-called" cryptographer

That would be an astoundingly stupid thing to say about Phil Rogaway...
$20/month for each of the top 20 sites you use is $400/month.
Prescriptive versus descriptive views of language. English doesn't have the equivalent of Académie française, and even its edicts are well-regarded recommendations, not definitions. Well-regarded style resources such as the Chicago Manual of Style explicitly recommend using singular they and their.

https://en.wikipedia.org/wiki/Singular_they
I enjoy clojure a lot, I've had some difficulty getting started with cljs though. It seems like all the guides on getting set up with tooling are out of date. I'd particularly like to use it with node for scripting tasks, since the Clojure startup time makes it impractical to use for anything that isn't a long-running task.

What have you used to get up and running?
Global temperature will rise enough to disrupt the global food supply somewhere between 20 and 50 years from now.
The catastrophe will be seen in famine and war over resources, not in higher flood insurance cost and taxes to pay for levees.
He's saying $20 per service, though.

The way to make the economics work is the same way the economics of cable TV work - bundling.
And they had a subsystem for 16-bit OS/2 applications until Windows 2000:

https://www.microsoft.com/resources/documentation/windowsnt/...

https://en.wikipedia.org/wiki/Comparison_of_Microsoft_Window...
You can already disable flash, javascript and cookies by site. That covers pretty much everything from site logins to WebGL.
Eh, it is not at all a new feature. Lavasoft AdAware did this in the 90s, running on Windows 9x. Apparently Murus Firewall does it as well.
I remember using this sort of applications on Windows (a very long time ago; those were the days of Windows 98, whose famous stability drove me to Linux and BSD). Can some of its users help me shed some light on the use case of such a program on an open source system? I mean:

- Signed packages from trusted repos should not need firewalling, at least not if you're using a serious distro rather than a hobby project. This isn't true in the general case, of course (hence things like OpenBSD's auditing of base packages), but this is a personal firewall, it's not exactly intended for server-grade equipment...

- If you install packages from dubious PPAs all over the Interwebs, a puny kernel module is unlikely to stop the two rootkits that you've probably already installed. Same for a system that has already been compromised.

- Untrusted applications (which you're running straight on your system, rather than nicely tucked in a VM with no network access because...?) -- as practical experience on Android and Windows shows -- will generally break as soon as they can't do their snooping because they'll segfault or block waiting for the answer that never came to the package that was never sent anyway.

I see a lot of talk in the Linux desktop field about building lines of defense against untrusted programs. I see why this is relevant to users who are routinely running closed-source programs (no, I don't personally audit every line of code running on my system, but a public source code repository is sort of a stupid place to hide malicious code when there's so much fully closed code being purchased from "app" stores and downloaded from all over the web and whatnot). I find it hard to understand why it would be relevant on an open source desktop.

Things like Wayland's sandboxing, I get to some degree -- it's only a matter of time before JavaScript code in a browser will get access to more stuff from your computer, which will eventually include stuff like keystrokes and mouse events and whatnot, so it'll have to be properly sandboxed. But why a personal firewall? What sort of applications do you find yourself wanting to block, and why for heaven's sake are you running them on your Linux computer, when it's really 2017 and there's plenty of choice in terms of applications.
You Can Change Your Personality
Hello, thanks for the kind words! And sorry for guessing what your goal was, I used the wrong words probably, what I meant is that for me the highest value of Jocko at a first glance is the tremendous operational simplification provided by the fact it does not need ZK while implementing the same protocol. Of course I guess the project is currently ongoing, but once it will be a drop in replacement for the Java implementation needing ZK this could be very interesting for many users. This project could also serve to Kafka developers as an inspiration to also remove ZK perhaps, I guess that they already reasoned towards this idea tons of times btw so there must be some rationale they have (based on their design choices) to keep it.
There's a part of me that "enjoys" this. When patents hit small fishes - like X-Plane - (and for no reason), nobody seems to care. When a $630B company pays too much in patent royalties, it's big news. Perhaps Apple could deploy parts of its capital towards changing the system, but for everyone - not just for their fees.
It's easy to get this view from outside, but there's lots and lots of people working on this stuff within the field of cryptography that people in software engineering don't hear about because their work doesn't quite have that focus on implementation, that, for instance, DJB's work has.
Yes, I've seen standards committees and this is very typical. For most committees take the average IQ of all members and divide by member count. The only exceptions are those that are very well run by people with social skills and a good understanding of communication and where that kind of behavior and character assassination is banned.

It's just that the consequences of stupidity in crypto are higher, as I said.
Show HN: Unzip from 500MB remote archive in 400ms or less
This isn't original research by @based2, it's primary research, authored and reviewed by credentialed scientists. And even if it was, this isn't Wikipedia - HN is a great place for primary sources.

I would much rather read this (or even just skim the abstract and conclusions) than some so-called "scientific journalism" that typically distorts, exaggerates, and confuses the issues.
Studying language is a pursuit. Learning a Language is a journey!

My little daughter does not study Spanish or Japanese, but she keeps learning interesting bits of these, just because it's fun to know. She'll have easier time studying should she decide to.
Definitely. What I was looking for was a quick way to see what tools are trending in given niches. Stackshare achieves that.
Honest question: Do bug bounties with such low bounties really do more good than harm?

A bug bounty incentivizes people to look for bugs. But when you find an interesting bug like this you have the option of either having the possibility of making millions from the social engineering possibilities alone, or claiming the bug bounty and get $10k. Of course claiming the bounty is the moral thing to do, but some people with both the skill and motivation to do bug bounties are bound to have lower moral standards.
Show HN: Learn foreign languages by playing games
And yet it does, try to create a simple API in Java vs Go and look at the memory of both program, there is no need for white paper to see that the JVM at least will allocate 100MB~~+ where Go will start bellow 10MB.
I believe the idea is to be more of a guerrilla evangelist for DDG, but the brand name makes that hard.
The quest to create animals with human organs
You mean like Chrome Profiles?
Demos are not production games, it's kids teaching themselves. I should have written "beyond CG classes and demoscene".
While i really love static typing, saying that Go type system help here is... plain false.

Go type system, like its predecessor Java, C and company do not help for that. These are not sound type system.

At best they are help for the compiler to decide how to allocate memory or to try to get polymorphism.
I think it's been several years since I've actually visited duckduckgo.com. Modern browsers make it really easy to set DDG to your default search engine.
It will be there soon. Looks like all the changes to support this landed recently. Though it's not so much DDG being in the list, but the available search engines will be the last 5 search engines you visited.

https://bugs.chromium.org/p/chromium/issues/detail?id=348360
I disable 3rd party cookies too, but I've had several websites that have failed to work properly because of it. So now I've had to whitelist certain 3rd party cookies (e.g. accounts.google.com, payments.google.com, etc.). But since these domains are whitelisted, they can set their cookies from any website I visit. With the idea rlpb proposed, each website (and its permitted 3rd party cookies) would at least be in its own container.
I didn't know forbes blocks ad block. I dislike pay wall links but we post those. And the mods chime in when people complain. Maybe one of them can make a verdict here too.
> let the courts decide

This is a terrible idea. The judiciary is there to adjudicate conflicts based on the law as created through the legislative process. Not to craft their own laws.
No disagreement on the lighter touch of the benchmark in this case, it was primarily for illustrative purposes. If you have ~ 10 GB of data then all the standard serial index creation should perform just fine. It's the same case more broadly for Citus, if you only have 10 GB of data there's no point in thinking about scaling it out, it's not until you get to 100 GB or larger that you want to consider something beyond a single node or likely need more parallelism.
This is built into most browsers--you don't need to forward the query through a third party.
Ahh yea, the fine days of ZoneAlarm ;-)
I've noticed that on monitors at 120hz and 240hz, full motion video starts to look strange. Not just high resolution animated graphics renderings, but also legacy recordings of live action pre-dating HD standards.

Old NTSC and PAL recordings, and even Black and White TV shows like I Love Lucy or Leave It To Beaver, take on this interpolated, ultra-modern slick feeling of remastered image post-processing.

I can't tell what's going on, but I see it when I view certain monitors, at friends houses, in department stores and at some fast food restaurants that provide a TV in the dining room.

Re-runs of TV shows that I've watched hundreds of times on CRTs and first generation flat-screen monitors, have a certain quality and leave a distinctive impression, that a subset of recent monitors augment, contaminate and tamper with.

I can't tell what's going but I know it when I see it. I suspect that there may be some software inbetween the transcoder circuit and the final illuminated raster that attempts to reduce flicker, and provides virtual frames automatically tweened when low frame counts are encountered.

Few people agree with me, or notice a difference, but it's there, man.

It's there.
There's actually lots and lots of people attempting to break these primitives; just take a look at the proceedings of CRYPTO, EUROCRYPT, FSE, CHES, etc.
The awesome lists project is interesting as well, but it lacks some sort of ordering.
Drips in Hypocrisy.
And your evidence is what?

A proper study would require at least the following:

1) Take 40 random adults, give them a 5 year paid vacation with a job guarantee after the experiment.

2) Give each of those adults a nanny who is available 14 hours a day and is thrilled to repeat words 50 times any time you ask.

3) Give the adults a teacher who praises them profusely just for being able to repeat a goddamn alphabet after 4 weeks or longer.

This is obvious to anyone who is not dependent on the academic industrial complex. But go ahead trying to impress people with "studies".

Hint: Go through all papers published in the 20th century and see what percentage is relevant, especially in sociology and behavioral psychology.

Most papers are useless.
Some of the obvious achievements in China can't be faked. Shanghai, Beijing, ShenZhen and other first-tier cities are very impressive, not just in pictures. These are not Potemkin villages. The impressiveness is evident edge to edge, all over town.

Westerners often don't know where to look for problems. For example, the walled-off hutongs in Beijing during the 2008 Olympics were cordoned off because they are prime luxury real estate being renovated, not because they were slums. The irony is that the Chinese did a bad job preserving enough of those old courtyard homes.

There is both casual and acute corruption in China, and that is hard to cover in the news. Concealing corruption is in nearly everyone's interest. Nobody will like you for uncovering it.
He addressed this:

> Java has a bad reputation for memory usage among people who have never run substantial programs because a Java hello-world (or other small programs) will often allocate itself a decently sized heap. Java programs also take a while to start up because of the JVM, but that doesn't make Java slow.
Syntactic loop fusion in Julia
Interesting comment, thank you.

> willing to make completely foreign sounds

I am afraid this may be not enough - it seems that we lose a perfect Fourier analyzer (and synthesizer) built into our brain at an early age.
Yes the whole VM come with debugger, dynamic tracing and all by default. This is also distributed by default.
Were Addicted to Our Phones – What Are You Going to Do About It?
I don't appreciate ddg results much, but I realized not long ago the feeling of joy by knowing I'm not being tracked for any thing I search.

I can throw anything at it carelessly.
To be perfectly honest, there's no reason it can't be used on more 'prime time' real estate, but the primary converting audience thus far has been smaller web apps (averaging ~10-100 messages a day / surface) and 1-X person shops. I plan on continuing to target that segment to continue to feel out what features are needed and desired as it organically continues to grow (largely from referrals).
It's the "soap opera" effect caused by interpolation and it is another anti-feature in TVs these days. Bluerghh
Bane of our existence: Trump speech has uncanny echo of Batman villain
Fake Physics
Remember app for learning foreign languages
I'll find the actual mailing list post, but to get a flavor for what Rogaway dealt with at IPSEC, here's a snippet from a post Pinboard coughed up for a simple [rogaway ipsec] search. This is Perry Metzger, who is just my favorite.

It appears that by failing to be as vicious as possible about Phil
Rogaway's lack of understanding of the architecture of IPSP that I
have inspired people to take him seriously. It also appears that Phil
has been lobbying people to have them comment. I can understand how
even an intelligent reader, going through his comments, could become
confused about the architectural issues here. However, let me say that
I found his comments to be almost completely without merit. Other than
a few comments about places where the text used ambiguous language
(i.e. textual ambiguity) I found almost nothing of value in what he
had to say.

Later:

Found it. It's Bill Simpson:

> You do not facilitate analysis
> by saying that Photuris is only required to work when its
> primitives are drawn from a certain concrete set of possibilities;
> exactly the opposite-- you render cryptographic analysis impossible.
>
Thank you, thank you!

It gladdens my heart to hear that *self-described cryptographers* find
that analysis is impossible!

I was worried that there would be some subtle flaw that would facilitate
cryptanalysis. Now that you have assured us that it is not possible,
that makes Photuris the only protocol that has ever come to perfection!

Emphasis mine.
For years Apple has insisted on charging royalties for app features they have nothing to do with. When I make my app better and raise the price of my app, a bigger fee goes to Apple.

Now all of a sudden, Apple finds royalties oppressive?

I am sick of large corporations getting better treatment than consumers. If consumers can't sue pharmacy companies for using patents to set a high price for a life saving drug, then neither should Apple be able to sue Qualcomm for using patents to set a high price for CDMA chips not available elsewhere.

Billion dollar corporations should be left to their own negotiations without government interference and allowed to screw over each other (as long as they follow the law). The government should instead focus on stopping these same corporations from screwing over consumers and small businesses.
I have been watching this guy's videos, and there are a lot of interesting details about what life is really like in China:

https://www.youtube.com/watch?v=1At2H-lIJog
4% growth is still pretty good tbh
This is about rats, rather than humans.
You'd probably like Self-Destructing Cookies[1]. It's an addon that deletes all cookies set by a page after you close the tab by default, though you can change it per-page to delete only on closing the browser or never. It doesn't prevent the cookies from being set, but it does effectively prevent tracking if you close tabs frequently.

[1] https://addons.mozilla.org/en-US/firefox/addon/self-destruct...
Firefox profiles used to be more prominent/accessible. Then about 5 or so years back, Mozilla decided to dumb down the UI to better imitate Chrome. Now I think you have to actually launch Firefox from the command-line with special arguments to use profiles (or else install a third-party plugin to manage them).
I get what you are saying but even to get that you had to (manually) define your model and it's fields and relations and that is only the most basic thing you can ask of an api, but how about the following tasks: requesting a subset of objects using a few filters, requesting only specific properties of objects, specifying what users can and can not access info about those objects, making sure garbage does not get into the database (input validation).

All these things have to be manually solved by you in your controllers, there is no scaffolding for that, while in Sub0 all those things are already solved, most of what you have to do is define your database schema and the rest just works.

As an example in terms of time invested (based on specific personal experience):
To build an api the way you describe for a product like Basecamp it will take a good developer at least a few months. With sub0 we are talking 1-2 weeks.
You know what I can't ignore? Your failure to provide a single example of anything, "horrific".

But that's ok, because am more interested in the idea that there are some "horrific" things that can be ignored.

I understand you have to make it real in your mind because otherwise, you would have to live with the knowledge, that you're a liar and that is untenable.
Yeah but I often use other computers. I often thought about having a shorter name under elinks for instance.
Even better: You can work an making "google" a generic term for searching – "I'm googling it on DuckDuckGo" – which increases awareness of other search engines and decreases the association of the common activity "googling" with the company "Google".
and in dutch
Gee, another indirect reference to the newly elected United States President. Considering MSNBC host went as far as calling the acceptance speech "Hitlarian". I was hoping to escape it here.
>English doesn't have the equivalent of Académie française, and even its edicts are well-regarded recommendations, not definitions.

Even if it did, I suspect either the US or the UK would reject the country that wrote it.

>They with a singular antecedent has remained in common use for centuries in spite of its proscription by traditional grammarians.

I was being a traditional grammarian. "John has a flower. Their flower smells good," sounds as incorrect to me as, "John ain't got no flowers." For me, the more important the point I'm trying to make the more grammatically correct I try to be.

Of course the spoken word is completely different. I think a message can get a lot of additional value misusing the language.

Maybe I should just realize, "ain't nobody got time for that."
We added that to the title above. Thanks!
Star Wars: I Find Your Lack of Network Segmentation Disturbing
Considering the direct parallels someone would draw between scientifically studied torture and nazi experiments, I'd be surprised if anyone was allowed to officially sign off on this.
Only if you're White. People have done tests on this. Here are examples from Twitter and Facebook.

https://i.imgbox.com/lt0FctbH.jpg
https://i.imgbox.com/w9jzb1AS.jpg
Oh thank god other people can see this.

Sometimes I feel like I'm noticing fnords.
As I said, it's bad as a tutorial:

It enforces the stupid idea, that you rasterize 2D triangles for a 3D renderer. People, who think this way are then completely shocked and mystified as to why there is perspective distortion to the surface attributes.

And then, on 2D triangles, it enforces a bizarre notion that a triangle is not flat, so the surface attributes gradients can change from scanline to scanline.
I turn all of those Chrome features off everywhere anyways. I find the handlers to be especially annoying. Why the fuck would I want that? There's a reason I use Mail.app and it's not because I love using email in web views.
Oh, sorry, I misread.

$20 per month per service seems like a ridiculously huge jump for services that are currently "free with advertising," though. Surely nobody is making $20 per user per month with advertising.

At $20 a month per service the bigger problem would be people like me who can afford it just fine but don't think most services provide nearly that much value.
Why are you blaming the OP for your broken ad blocker?

Forbes has more money to spend on blocking ad-blockers than the ad-blockers have to spend catching up. This a game of cat-and-mouse, and you chose the side with fewer resources. What did you expect?