skysight-inc/HackerNews huggingface dataset:
The article points out that Apple did switch to an Intel manufactured modem at one point, but they allege Qualcomm retaliated by withholding a rebate payment to Apple. I'm assuming that Qualcomm has a list price for their chips, but negotiates a rebate on that price if a contract is fulfilled, or some other generic business promise is arranged.

It also goes on to suggest that the portion of payment Qualcomm received from each phone sold is a percentage of the retail or wholesale price of the phone, pointing out that increasing the storage capacity of a phone from 128GB to 256GB, which I assume does not alter the bill of materials supplied by Qualcomm in any way, results in a larger payment to Qualcomm. Your point that Apple should not have developed a CDMA phone makes sense, but it also means that millions of people would be stuck on a network without an iPhone. Apple got so much shit from the public for having an exclusivity agreement with AT&T here in the states, which in large part drove early jailbreaking progress to open the carrier lock, that it makes good business sense to try and reach those potential customers. I would imagine that Apple reluctantly agreed to a contract for CDMA modems that was less than favorable to Apple in hopes of renegotiating at a later date when Apple became more of a dominant customer, and has since failed in all of their tactics.
I use Scala.js too. I haven't been able to set up a working sourcemap with our workflow of Scala.js -> Webpack -> JS. It's difficult to debug the mangled JS output but I can just about do it--barely.

By contrast, reading BuckleScript's output JS is a breeze. No name mangling, idiomatic style, sensible code flow.
That's better than US based sites.
If you citizen of the US, then government don't have directly access to your e-mails.
There has to be something seriously wrong with you to want to keep up this charade for so long. At best, you are pathologically dishonest.
-- Kalman Filters vs HMM (Hidden Markov Model):

"In both models, there's an unobserved state that changes over time according to relatively simple rules, and you get indirect information about that state every so often. In Kalman filters, you assume the unobserved state is Gaussian-ish and it moves continuously according to linear-ish dynamics (depending on which flavor of Kalman filter is being used). In HMMs, you assume the hidden state is one of a few classes, and the movement among these states uses a discrete Markov chain. In my experience, the algorithms are often pretty different for these two cases, but the underlying idea is very similar." - THISISDAVE

-- HMM vs LSTM/RNN:

"Some state-of-the-art industrial speech recognition [0] is transitioning from HMM-DNN systems to "CTC" (connectionist temporal classification), i.e., basically LSTMs. Kaldi is working on "nnet3" which moves to CTC, as well. Speech was one of the places where HMMs were _huge_, so that's kind of a big deal." -PRACCU

"HMMs are only a small subset of generative models that offers quite little expressiveness in exchange for efficient learning and inference." - NEXTOS

"IMO, anything that be done with an HMM can now be done with an RNN. The only advantage that an HMM might have is that training it might be faster using cheaper computational resources. But if you have the $$$ to get yourself a GPU or two, this computational advantage disappears for HMMs." - SHERJILOZAIR
It's not even per-window. If you open an Incognito window and log into a website, any other Incognito windows will share that same cookie jar and thus also be logged in to said website. I would love a way to keep them distinct, but simply opening a new window won't do it--you have to close all Incognito windows/tabs to clear its temporary cookie jar.
We already know that Lavabit design was bad and that is why everyone is moving to E2E.

Still I found no evidence that Lavabit handed over anything but encrypted data and access logs. The only thing I found is [1]: "He says he's received "two dozen" requests over the last ten years, and in cases where he had information, he would turn over what he had. Sometimes he had nothing; messages deleted from his service are deleted permanently."

He has complied with warrants because he had nothing to transfer. Nothing was stored and there is no legal obligation to modify your service to store passwords. When he was asked for TLS keys, he had to shutdown the service to prevent leaking all the passwords and redesigned the server.

The difference between not looking away and Lavabit design is that nothing is exposed if the server is seized.

The design of old Lavabit was not sufficiently secure and there was no way to check if it is more secure from the users' perspective, but still no reason to call it snake oil [2]. Snake oil is a product that is advertised as secure when maker knows it is insecure. Lavabit design was correctly described on its website and source code was promptly published after the shutdown so it is possible to verify that described features existed.

[1] http://www.forbes.com/sites/kashmirhill/2013/08/09/lavabits-...

[2] https://news.ycombinator.com/item?id=13447919
That's kind of a strange takeaway from Boneh's RSA attack paper, which is a survey of other researchers; IIRC, no two of the attacks in that paper came from the same researcher.

Bernstein is a bit of an odd duck in this regard, but if you look at some of the other "great personages of cryptography", you'll see that they're minting PhDs who are themselves going on to do important work, so the capacity of the field is expanding, not contracting to a single Bernstein monoculture point.

Bernstein's position in the field of practical cryptography is a product of an almost monomaniacal focus on commodity hardware performance and ease of use. The Bernstein monoculture will pass --- probably soon, after CAESAR finishes, or if people start taking pq crypto more seriously.
fantastic project -- I've been waiting for someone to tackle this!
Anatomy of a Crushing (2011)
I'd love to see if there's a similar uptrend in usage for other services who advertise privacy as part of their value. Anecdotally, a large chunk of my social network has joined Signal just in the last few days, and without any prompting from me. This is speculation, but it may be that many people who were ambivalent about surveillance under Obama are concerned about surveillance under Trump, and we'll see more user demand for privacy for the next few years.
the question is not what fps does the human eye see at (nonsensical question). but, "At what threshold does the human eye no longer notice an increase in frame rate"
An Implementation of Double Array Trie
Aha, you're right (I don't use Chrome, so I was just assuming the GP was more up-to-date than me on its current features).

I recall Opera 12 had per-tab incognito - I'm not sure, do any current browsers have it?
Underscores qua underscores are not a problem. But the underscore in the name of Watch Underscore Dogs is worth calling out for the way it underscores the absurd degree of edgewank throughout the game.
Why to put your payment gateway on Referral Exclusion List?
Some days I spend an hour, most days less than that. I'd estimate that on average it'd be about 20-30 minutes if we include the linked pages I do click on.

Probably less than a few minutes on the comments section, but I do try to up vote and comment on links I've clicked on and found useful.
TypeScript is somehow less radically functional than Clojure. (PureScript would be even more radical, of course.)
> That's kind of a strange takeaway from Boneh's RSA attack paper, which is a survey of other researchers; IIRC, no two of the attacks in that paper came from the same researcher.

I think I had that sense about individual items there, like Coppersmith's attack.

> if you look at some of the other "great personages of cryptography", you'll see that they're minting PhDs who are themselves going on to do important work, so the capacity of the field is expanding, not contracting to a single Bernstein monoculture point.

That's great news.
Too much probably, doesn't help that I am dissatisfied with my job. I'm going to have to go back to pomodoros for time management.
Do what? Post articles from Nature?
What Did Neanderthals Leave to Modern Humans? Some Surprises
Another accelerator is Axel [0]. While aria2 supports all kinds of protocols, Axel supports Axel HTTP, HTTPS, FTP and FTPS. Both are excellent and I've used aria2 for a very long time.

[0] https://wilmer.gaa.st/main.php/axel.html
Holding the opinion and writing and article about it are very different things. They're free to do both, but the latter may be more poorly received.
This is a good overview I think, although it doesn't get into specifics: https://realworldocaml.org/v1/en/html/prologue.html#why-ocam...

Of course the rest of the book is a great read too if you're so inclined.
If I'm on an engineering team that's using Dart or TypeScript I'm not going to lean on functional programming patterns the way I would if I was on a team using ClojureScript. Idioms matter when you're working on production stuff with other people.

But sure, TypeScript appears to dwarf all other compile-to-JS languages in terms of actual usage.
Refactoring Across Multiple Code Repositories with Gradle and IntelliJ IDEA
Good stuff. I have FB friends that are farmers who should appreciate this. Thanks for sharing!
Qualcomm's response: https://news.ycombinator.com/item?id=13449956
Last time I looked at Aerospike, I read that it was designed for very low-latency network links, and was apparently not particularly suitable for use in the cloud (where latencies is typically much spikier than in within a single rack you control). Anyone using it in production on Google Cloud or AWS, for example?
Spamming original research is not in the spirit of HN.
Here is the setup: Literally dozens of companies paying $150k+ (base) for engineers with experience. Upward pressure on wages and working conditions. Cross-pollination of lessons learned between companies.

People always think about startups, but there is an army of engineers at profitable tech companies in the bay area that are well comped for work that generally is free of death-march conditions.
It's just too much to type.
Have you heard of Ocsigen/Eliom? It's a complete OCaml system for web development.
Is there a way to actually estimate how much money I would have to give per month to compensate for the ads I see on the web? Perhaps some browser plugin that counts ad impressions? I doubt that any one web site makes $20 per month from my visits.
Try: Time flies like the wind but fruit flies like bananas.
Had you preferred he joined the relentlessly attacking of Trump over the leaked video recording?

What is more important, the content of a private conversation between two people off-camera, or drone strikes? Or is the content of such private conversation more important than say, keeping a private server for government business and outside of official records?
A lot of basic db operations is basically built into rails scaffolding though. for instance /object/1 automatically gives u id 1 back without any extra coding.
There is a button in the top right for profile switching. For me, it has always popped up a new window in a different profile, not closed the existing window.
I'm genuinely not trolling here: what are you worried could happen if you didn't do all of this stuff with the extensions and settings in your various profiles? What does it mean to trust a website?
At Repair Cafes, ‘Beloved but Broken’ Possessions Find New Life
When developing a new basic technology the milestones are often vague, and they're generally not open to DD. So hitting milestones in taken on trust and open to interpretation quite often.

Sink cost doesn't work quite the same way. It's more that they evaluate the investment as good because someone else put in a bunch of money (and they expect know what they're doing/did good DD).
The blog post was pretty clear that the text is actually "mozilla", it's just that the Zilla font has a ligature for "ill" that will display it as "://".
You seem to be correct. He never went to prison for pgp.

But apparently he thought up pgp while in prison for nuclear protests.
Fuji Heart of Sharjah Photo Walk (Sharjah Old Schools, Souqs and Museums)
Yes, bangs are great.
Google Mont Blanc
I often experience that ddg gives me results from really old websites. In cases this is OK, but when used for tracking down bugs or software errors it can be frustrating.

Still love you though!
No, the (implicit) point in the start of the thread is that multiple other encrypted mediums don't leak as much. Use them instead.

If you care enough to use encrypted email, you should probably seriously consider abandoning email. (signing is different - that's proof of identity and non-modification, useful in many non-private scenarios)
Can we please stop posting this ad-blocker blocked shit? Thanks.
> Using supervisors to recover by retrying allows you to correct for instability
(network faults, oversaturation, locking and such) [...]

Using supervisors to retry operations is going to make your system unstable.
Supervision tree is not about handling semi-expected faults, it's about
starting things at boot time and restarting them in a predictable manner
(along with any dependencies) should any of them crash unexpectedly.
While it could be the NSA, I think with things like IPSEC simple over engineering is more likely.

Over engineering is an absolute plague in software. In ordinary cases it just makes things buggy, hard to maintain, and bloated and inefficient. In crypto though the consequences are much more severe since every little ounce of complexity in a cryptosystem exponentially increases the likelihood of exploitable bugs.

DJB's boring crypto talk is worth reading:

http://cr.yp.to/talks/2015.10.05/slides-djb-20151005-a4.pdf
Yeah, I know it can be done, I use Chrome because it's more convenient to click the profile icon and pop up the new profile in a new window. In my experience with Firefox profile switching it's always been a much more involved process than the two-click Chrome process.
i've been in situations where the lead, alpha programmer(s) pretty much decided everything and criticized the work i was doing to an extent that i felt helpless and demotivated.

it's probably good to somehow radically adjust your role/attitude/relationships in such a working environment, if reasonably and sanely possible.

if not, it's probably better to leave than to try and "stick it out."
I don't know about that. I'm sure $20 is too much for some people, but in the United States, at least, $20 isn't much compared to the other costs of accessing the web. It's very easy for a DSL, cable, or mobile contract to cost $50-150 a month already.
Companies that speak about the subject seem to choose either the monorepo approach or the complete opposite, with thousands of them (several repositories per developer !)

Is anyone using one repository per team, in order to share code more easily but without the need for complex tools that can deal with a true monorepository (not everyone can build something like Piper/Blaze)?
I've actually been playing around with building a Screeps AI in various languages, and found the sizes the be interesting. It's not really apples-to-apples since all of the implementations aren't near the same, but I think it provides a bit of context in terms of order of magnitude. Everything using the closure compiler with advanced compilation (for screeps I don't usually minify, but I think the dead-code elimination is important when comparing sizes):

Bucklescript: 16K

Haste (Haskell): 36K

ClojureScript: 144K

It's worth noting the Clojue version is the furthest along, and the Bucklescript version is the least, but all do some ffi and list manipulation. I did some simple tests with ghcjs, but it was producing files over 1m even for simple "Hello World" type code (I think because it includes the entire Haskell threaded runtime), so I didn't go very far with it.

[1] https://screeps.com/
New Zealand aims to recruit 100 of the 'best tech talent' to move to Wellington
We Need Better Stories
Good catch :). Changed description to "Simple compiler..."
sudo vi /etc/hosts is just a few keystrokes away..
The ciphers aren't the problem. The protocols are. IPSEC is insanely over engineered, as are most protocols these days.

It's not just in crypto. I was looking at the guts of web sockets the other day and was like WHY WHY WHY WHY WHY. I usually find myself asking "what problem does this solve?" over and over when I look at modern systems.

Of course even with my strong bias against it I am still occasionally guilty of over engineering. I just rewrote a major system to de-engineer it. I just keep thinking I will need it even when I have YAGNI tattooed on the inside of my eyelids.
Why do you say it's use-case is limited to 'side projects'? Seems it'd be just as useful for prime time to me...
> I understand that it runs on BEAM, much like I understand that IronPython runs on the CLR.

Those are different cases. Your question is more like "what is faster: C or
Fortran?" than "what is faster: C or Python?".

> However, IronPython's performance is slower than C#'s performance due to the dynamic nature of the language

No. It's slower because IronPython is an interpreter, while C# compiles to
byte code, not because one is statically typed and the other is dynamically
typed.
Ask HN: Reading Suggestions to Improve Technical Writing
I am looking for any reading suggestions (books or blogs) that could help me improve my technical writing skill. I find myself need to involve more with less technical people in my new role. I feel like I could not explain the technical stuff really well, often in verbose that makes them overwhelmed. I'll be grateful if someone could point me to a good source.
Thanks
Toddler Rescues His Twin Brother Who Is Stuck Under a Heavy Dresser
I agree. It was the parent comment that advocated supervisor trees as a way to mitigate runtime type errors.
"Latest commit by zedtux over 2 years ago"

well.

but TBH, I'd love to see some Little Snitch-like thingy on Linux.
It's still likely too large to really consider for mobile use, but yes - far better than downloading everything.
Still I found no evidence that Lavabit handed over anything but encrypted data and access logs

There isn't any evidence of that or the contrary. He had all the data. We don't know what he did or did not turn over.

Snake oil is a product that is advertised as secure when maker knows it is insecure.

Take another look at this (and Moxie Marlinspike is being generous and sympathetic). It meets your own criteria precisely.

https://moxie.org/blog/lavabit-critique/
Ask HN: Got a working MVP. Now what?
Last week I launched my new MVP (https://wwww.flagspam.com). Already got one corporate customer and I'm trying to see if there are more potential customers out there (I know having just one client is big red flag).

The main problem is that I don't know where to get started or what should I do.
I found this list: https://github.com/mmccaff/PlacesToPostYourStartup, did a couple of posts but wasn't very successful. I think my potential clients are startups who haven't developed a content reporting system yet, but I don't know where to find them.

I know Dropbox started with a landing page and a YouTube video, but how did they do to make it viral? Did they use ads? How new companies end up in tech blogs like TechCrunch (I know isn't a good example)?

Thanks!
The counter point article - old habits die hard, but they do die - adds an interesting dimension too. Any theory that seeks to explain cause and effect relationship operates with in a set of constraints. A theory that works beautifully under one set may fall apart under another.
>>you might wanna test if anybody is interested in playing 3d-labirinths before you create 50 of them<<

The labyrinths are not that difficult to create actually. The hard part was creating a level editor. Now that the level editor is done it is relatively easy to create the labyrinths. You are right, I have no idea if anybody will be interested in a game like this. I imagine there are people that like these types of games so I'm counting on that. It is a gamble. Worse case scenario I will be able to reuse a lot of the work for my next game, especially the level editor.

>>It could be fun if I race faster of course - what about having special items to be able to zoom out and take a peek at the whole map<<

I've been thinking about doing stuff like that if it will make it more fun and doesn't increase the scope considerably.

Thanks for the comment.
It depends where you live but I wouldn't say the society I was raised in (Western Europe, mid nineties) and educated had some strategies in place to defend against media fallout (high school courses and radio/tv programs).
Brute forcing JSON Web Tokens in C
The English language is more than just a collection of words, it entails grammar as well. "Their" is plural. For singular, it's "his," "her," "its."

For example, the sentence, "Pat has a flower. Their flower smells good, " doesn't sound right because "their" is plural. "Pat has a flower. Its flower smells good, " doesn't sound right either because "its" is reserved for things and not people.

Also, the dictionary isn't a good source for grammar. It contains definitions of words, proper or not, like "ain't" and "irregardless."

https://www.merriam-webster.com/dictionary/irregardless?utm_...

https://www.merriam-webster.com/dictionary/aint
Does anyone actually use e.g. hashcash though? I love the concept, but it's useless if nobody can use it.
I think Clojure or ClojureScript is a very important as a member of the Lisp family and yet also compiles to Java or JavaScript. This is complementary to languages like Elm or Haskell which emphasize type purity. I have gone the second route, but many people dislike it.

I once ran a meetup with ClojureScript Koans and people loved it. I should hopefully add a few.
IntelliJ IDEA Ultimate Giveaway, Enter Here:
It was a combination of over-engineering, a lack at the time of understanding of the field of cryptography and a pervasive belief among IETF types that the field could be understood from first principles by anyone who was good at Unix, and standard-issue bloody-mindedness.

Phil Rogaway is one of the world's great cryptographers; it's from him that we get OCB, OAEP, PSS, UMAC, XTS, SIV, and many others. Even non-cryptographers might be familiar with him for his "Moral Character of Cryptography" paper†.

I finagled a spot next to him at a dinner in Chicago once and asked him why he doesn't participate in IETF crypto standards (even with a recent renaissance of CFRG with Kenny Paterson at the helm, more expertise is badly needed). The impression I got from his answer is that he'd foresworn that kind of work.

If you look at his experience trying to contribute to the IPSEC standard, you can see why: he enters mailing list threads making clear, obvious statements about cryptographic soundness --- for instance, "it's a bad idea to chain CBC IVs". He's immediately attacked --- and attacked personally, for instance by being referred to as a "so-called" cryptographer (or something like that; I'm going from memory) by a clique of standards nerds. Rogaway goes so far as to circulate a petition/critique from other cryptographers --- people like Ron Rivest --- and that's shot down as well. The standard is finalized with things like chained IVs in it.

That's not enemy action. Or, if it is, the enemy is the standards process, not the NSA.

† http://web.cs.ucdavis.edu/~rogaway/papers/moral.html*
Erlang took this other way around by designing a system that enable you to not handle all these errors.

I am more from this school of designing a system around the reality insteas of trying to patch it everywhere, praying we have enough fabrics to catch it all.

But it would meam rethinking how we build stuff. That was not at all a goal of Go.
Journalism under Attack: Be careful what you write if it might upset activists