skysight-inc/HackerNews huggingface dataset:
> someone publishes a new piece of code that by their own admission is not a significant improvement over TweetNaCl?

That one is a tough call for me. If I brag too much, I can be dangerous. Too little, and nobody uses my stuff. I'm not sure about the significance of the improvements, but they are undeniable: except for curve25519, everything is more readable, faster, and a bit more useable than TweetNaCl (curve25519 is merely more usable).

There is also one significant contribution I did not brag too much about: my Argon2i implementation is much simpler than the reference implementation. I'm considering adding support for multiple lanes (maybe with threads, maybe not), and Argon2d. The result should be RFC worthy.

Was re-implementing Argon2i from scratch good engineering practice? I don't know. What I do know is that I ended up uncovering a long standing bug in the reference implementation; one that complicates implementations and hurt security a little bit.

I think Monocypher was worth the effort, even if just for Argon2.
Can you qualify that third point?

What's considered reliance? What's the name of some place that stopped using email? I can see a drop in businesses that are running their own email, and that outsourcing maybe represents a big shift in terms of how they see it as "not critical and must be kept in house" but I don't know that they rely upon it much less.

How are these businesses messaging and communicating?
>"They may as well say "we only hire liars"."

That bares no resemblance to reality.

Here's some free advice, if you don't know jQuery, and you keep seeing it in job adverts, just learn to use it. Blaming recruiters for looking for it will get you nowhere.
It sounds like you left because you were burnt out. The fact that you were incented by larger bonuses doesn't change that. Many industries and companies use bonuses as a way to incentivize over-work (Wall St in particular) and they expect and plan for a certain percentage of employees to quit each year because of it. The fact is, the more you pay employees, the more you can demand from them. And most of the employees who quit to find a job with better work life balance aren't leaving because they got paid too much, they are leaving because they were too stressed out.
A beta-bet, if you will.
Please stop posting unsubstantive comments to HN.

We detached this comment from https://news.ycombinator.com/item?id=13637838 and marked it off-topic.
Passengers like flying on planes not made by Boeing or Airbus
I agree, it is a real PITA when using <7" phones.
I've tried to collect some S/MIME resources (corporate users, software support etc.) in some GitHub gists available at http://smime.io/ - however the recent "ousting" of StartSSL hurt the (free) S/MIME adoption for individuals and neither LE nor Google CA are an alternative yet.
Sure but that doesn't mean they were "based on ", i was mostly curious about that part.

afaik, they were just based on a pure common sense not based on Hinduism/Buddhism etc. There is a video on youtube of him talking to some Buddhist scholars where he goes into this.

Unfortunately this common misconception of miscategorizing him as "hindu guru" which instantly turns off most westerners, stopping him from gaining much wider acceptance.
I filed a report through the "report a website issue" button at the blog homepage. Hope they fix it soon.
She is in custodial care but she's functional enough to visit people, take a dog for a walk, play videogames and paint pictures. When she's at our place we try to behave like responsible parents. Maybe it is the best part of her day to guzzle a quart of soda in one go, but as someone invested in looking after her I don't want her to suffer from diabetes later.

Also, have you noticed that many kids like soda but have poorly-developed reasoning skills because they're not finished growing? I object to people exploiting that to make money while avoiding the taxes to pay for the predictable social costs.
The thing about phantom threats to national security is they never seem to go away.
Not bad, a second close just behind YAML in my picks.

Nothing can beat this:

name: Taylor Swift

Absolutely nothing, no matter how you dress it.
I think the question is: Do you know what percentage of your visitors that applies to?

I don't disagree with your mindset at all, but could you be missing out on a large percentage of users and now know about it?
I run a service called Blockmetry [0] that measures exactly that, directly from pageviews. Some numbers get published regularly [1]. The percentage from August (last public number) is 5.2% of non-bot JS-enabled pageviews did not fire the analytics tag.

The short answer is that it's significant on an aggregate level worldwide, but the reality is that it varies _massively_ by country, device, day of the week [2], and even different sections on the same site. Additionally, there is small percentage of pageviews that have JS disabled you have to account for. This analysis was on HN earlier today [4] saying 0.2% of pageview worldwide have JS disabled, but, again, with huge variation (notably, Tor, but elsewhere too).

Q4 numbers are not released yet, but the trend is generally up, with some notable drops. Get in touch if you want more info or to set it up on your site [5].

[0] https://blockmetry.com/
[1] https://blockmetry.com/weather
[2] https://blockmetry.com/blog/weekday
[4] https://blockmetry.com/blog/javascript-disabled
[5] https://blockmetry.com/contact
Ideas are free Talk about yours
I am getting the same. Tried about 15 minutes ago and then again just now. Still showing the Page Does Not Exist error.
You think men go in tech to get laid?
To the first order it is the fact that a liquid only propagates pressure waves while a solid can propagate shear and pressure waves (which propagate a different speeds).
Gif Loaders – Build Your GIF Loading Animation
I'm pretty sure it was just an obvious play on Google X. But googlers are not without a sense of humor.

http://hooli.xyz/
Any food can cause gastrointestinal pain. If you eat a lot of it :) Also any food that tastes good can be reasonable claimed to "promote overeating".
Here's the Google cached version - http://webcache.googleusercontent.com/search?q=cache:https:/...
It's laggy for me too. FF 45 on Debian.
>"Falsehoods Programmers Believe - A brief list of common falsehoods. A great overview and quick introduction into the world of falsehoods."

https://spaceninja.com/2015/12/08/falsehoods-programmers-bel...

>"Falsehoods programmers believe about names"
>"People have names"

Is this a joke?
There is an --ignore-crawlers option that works well for me. Next thing I'll try to get working is to have the --ignore-referer=<referer> option parse Piwik's referer spam blacklist https://github.com/piwik/referrer-spam-blacklist
It's still in the early stages honestly. I will probably share more after the first paper is published.
The way to do it is to have it be a standard feature of the email client. Your client, if it supports it, generates the public/private key automatically. Every time it sends an email, it includes the public key. Every time it receives an email, it stores the received public key if there is one. Every time an email is sent, it encrypts it automatically if the address book has the public key.

Over time, it will work its way into most peoples' email, whether they are aware of it or not.

I know the metadata will still be plaintext, but if I am sending my tax return to my accountant, I don't really care if someone discovers that I am sending my tax return, but I do care that the tax return is encrypted. And I would demand that my accountant upgrade his email client.
> a lot of bots still don't execute JavaScript

I operate a service that measures this (see another comment on this discussion), and all I'll say is you'll be very surprised how many bots actually execute JS, especially stealth bots. You have to be careful either way.
Why AWS has such a big lead in the cloud
For anyone who wants to learn linear algebra, I highly recommend Gilbert Strang's book and course from MIT: https://www.youtube.com/watch?v=ZK3O402wf1c.
This is indeed a good explanation - I admit I was not aware of this detail of the K8/K10 processors.
> You keep plaintext archives and drafts of your messages, because that's a fundamental feature of email clients going back 3 decades.

Name one PGP-enabled MUA that actually does this? None of the popular ones (mutt, enigmail, claws) do it. They didn't do it in the 90s, because that would have been stupid, and they don't do it now.

You could have said indexing and search if you wanted to point out actual usability problems with PGP-enabled MUAs.
I think you misread the origin of the Judaeo-Spanish ladino. From the wikipedia page [1] :

"This Judaeo-Spanish ladino should not be confused with the ladino or Ladin language spoken in part of North-Eastern Italy, which is closely related with the rumantsch-ladin of Swiss Grisons (it is disputed whether or not they form a common Rhaeto-Romance language) and has nothing to do with either Jews or Spanish beyond being, like Spanish, a Romance language, a property they share with French, Italian, Portuguese and Romanian."

[1] https://en.wikipedia.org/wiki/Judaeo-Spanish
> It was not as lucrative as the classified but it was a major contributor to people actually buying newspapers. They simple did not have another choice if they wanted to know what was going on.

Yes, absolutely. But the point is that while maybe people wouldn't have bought a newspaper that didn't have news, they still weren't willing to pay for the news component. When offered a choice between not having news and paying the actual cost if providing it, people have always opted against paying for it.

An obvious analogy is search engines. It's a useful and valuable service, but so far, users have not been willing to pay for the cost of providing one. Every search engine exists either as a loss making venture or is used as traffic/data generation for something profitable which cross-subsidises it. (Even DDG is profitable only due to their ads.)
S-expressions will take you ten seconds still nobody uses them. YAML is made to simplify the lives of the reader and the writer, not the parser. Let the parser suffer, let the coder rejoice. You pick your own level of suffering, I pick mine. Deal?
Disney's CEO says there are too many ads on TV: going direct online within 2017
It isn't about an exit strategy; it is hard to get funded if you have little defensibility.
For me, that version refreshes indefinitely. I recommend reading the plain-text version: http://webcache.googleusercontent.com/search?q=cache:https:/...
It's more of a general defense against how immigrants and refugees are dehumanized when they're used in political manipulation.
Please don't. This crosses more than one line and can't lead anywhere good.

We detached this subthread from https://news.ycombinator.com/item?id=13635827 and marked it off-topic.
The Pirate Bay Must Be Blocked in Sweden, Court of Appeal Rules
1. Have those Rust programs already been rewritten to use SIMD and measured ?

2. How many years already has SIMD not supported on stable been posted as a response in these discussions ?
Ah, the only Nikon 1 series I've tried was the S1, I was quite impressed. Tiny, light, great pictures in good light. I can totally see why people like them; precisely the reason that people are now flocking to Fuji and Sony's systems.

I have many Nikon lenses, if I could use them with a mirrorless body (Dx or Fx), I'd buy it in an instant. I'd probably take it and my 35mm f1.8 with me everywhere.
> The ultimate goal of Earth Sciences is to understand the past, present and future...

That is the ultimate goal of all science.
That's a 25-year-old revisit of even older studies dating back as far as 1960... none of which controlled for key elements like carbohydrate intake.

Even so, check out this element of its conclusions:

"The greatest response is expected when baseline dietary cholesterol is near zero, while little, if any, measurable change would be expected once baseline dietary cholesterol was > 400-500 mg/d. People desiring maximal reduction of serum cholesterol by dietary means may have to reduce their dietary cholesterol to minimal levels (< 100-150
mg/d) to observe (even) modest serum cholesterol reductions while persons eating a diet relatively rich in cholesterol would be expected to experience little change in serum cholesterol after adding even large amounts of cholesterol to their diet."

It didn't even differentiate HDL from LDL, let alone the actually harmful subsets like small-particle LDL.
Here is the original report from Citizen Lab:

https://citizenlab.org/2017/02/bittersweet-nso-mexico-spywar...
Why not both? I like a DSLR best but a good P&S is a lot more usable than a phone. For one thing you can operate it without having to look at it because it's got physical controls.

Sticking with my parallel guitar argument, that's like saying that you should use an app to make guitar tines unless you're willing to invest in a Martin or Les Paul guitar. In reality someone's favorite guitar might be a $10 thrift store purchase that delivers far more satisfaction than (insert your favorite guitar app here).
Gender is not a spectrum (2016)
(almost) Free Monitoring Calls via UptimeRobot and Nexmo
You already have a TCP connection, so NAT and firewalls don't matter here. Proxies have to be web socket aware anyway.
I very well could, but I'm not going to find out. All it takes is one blogger somewhere to see that I collect stats like "70% of my visitors block tracking" and then the smear pieces start with wonderful headlines like "X tracks users that explicitly disabled tracking" and I lose a significant portion of my user base.

I've had it happen before, i'm not going to make the same mistake again.

It's kind of a hamfisted approach, but if you block tracking, i'm going to treat you like you don't exist. It's not that i'm trying to punish anyone, it's just that the analytics seems to be the ONLY reliable source of getting any kind of information about what people use. Surveys only reach an extremely small subset, or nobody at all (i've had them get a 0% response rate while there were tens of thousands of daily users), unsolicited feedback is almost 100% negative and a large percentage of it nonsensical (things like "I hate the new update"... What am I supposed to do with that?), requests for feedback on new features or changes might get a few good responses, but I have no way of comparing those responses with actual usage (especially when one gets linked on reddit and suddenly gets 10X the number of responses simply because it was linked on reddit). And then if you decide to go against what your 3 responses to a problem requested, you'll get more blog posts like "x asks for feedback, does whatever they want anyway". I'm sorry, but I'm done with that. I go by usage numbers and patterns only now.
I made this pretty quickly: http://kuuv.io/i/L4rZomr.png Slower than if I just used Python with tkinter since I wanted to learn a new UI framework with Clojure at the same time... But it's literally just a dropdown and some buttons wrapping some system calls to 'gpg'. I never bothered with the 'decrypt file' since I can remember 'gpg --decrypt' easily enough. :)

So I agree using GPG isn't very hard, it's easy to make it even easier for yourself, and I think its usability flaws are overblown. Unfortunately as a comment further up said "the GPG CLI acts exactly as I expect it to...and I don't expect non-advanced users to use it." Only advanced users use the CLI these days. Not because it's particularly complex or hard or a poor experience, they're just given no reason to, and no training even if they had reason.
To be fair, your site looks like one of those weird overly ambitious overpromising products like

* http://madmaniak.github.io/pro/
* https://thegrid.io/ (seems like their site is having some difficulties)

Before yours, there have been many products that promise to enable programming for everyone, many of these have been scams, utter failures or were just overly marketed mediocre software packages.

The things is, the way your video seems voiced to "sell" rather than "explain" what is going on, as well as the odd, or at least "unique" hacker aesthetic of the website makes it look very dubious.

I have no idea how to showcase a product like this the "right" way, maybe there is no "right" way, but I can certainly say that the aesthetic, big claims, confusing video and ambitious future plans give the project a bad smell.
It's horrifying. I can't even imagine what it's like to have to confront your own mortality at such a young age. Especially without the love and support of a caring family.
"N-bit theory to prove that an N-bit program"

Am I the only one who thought of Curry-Howard correspondence?
Funniest ad placement seen in a while:

"Spinning within Earth’s molten core is a crystal ball"

... with the Canadian Foreverspin.com ad just above this. I want one, and please, keep on spinning.
Yeah, part of my motivation for doing a lot of maths study is exactly that I took that Andrew Ng class. You can get through the class without knowing multi-variable calculus and linear algebra and what-not, but that class made it clear to me that learning that stuff would be hugely beneficial.
Startup Button
To go back to said comment to see what was actually said:

> First: it needs to be made clearer why anyone would use this rather than Nacl/Sodium.

... and a comment about how a few test vectors is not a serious cryptographic audit.

So it seems that the parent agrees with you, and nobody told anyone to stop doing what we're doing. The thing we (well, I; I don't want to put words in tqbf's mouth) did say repeatedly, is "the answer is still libsodium". It seems like that, too, is something you agree with.
> random-nonce supporting package

Wait a minute, what's that? Does it just mean nonces big enough to be random, or something more I should consider for inclusion in Monocypher?
>"There are supplementary texts that also discuss the approaches to attain it."

The more interesting question is, why are you trying to attain it? What is it that makes people seek enlightenment?
The next "latest and greatest" thing out now (or soon) is a system by some of the luxury car makers (I think Audi and/or BMW?): "smart lighting" headlight systems.

Basically, instead of just a headlight bulb with hi and low beams, they use a single bulb (probably LED) and a TI micro-mirror array, controlled by a computer-vision (and other sensors) system to control the headlights to do some pretty amazing stuff:

* adaptive high-beams - lighting only the areas that need it

* auto-highlighting road-side obstacles (like animals or pedestrians or cars)

* placing "signage" at the feet of pedestrians to warn them

* highlighting of signs (and only the signs) with high-beams

Imagine the car steering the beams where needed, when needed - brightening things for your attention, dimming areas that are unwanted (oncoming traffic, for instance - to keep from blinding the other drivers), placing other information on the roadway as needed (for you and/or pedestrians), etc.

I think right now it is still a "beta idea" - still being developed. It seems plausible, but it might be something that proves too complex to be practical. The other downside of it (maybe the greatest downside) is that replacing bulbs (not too mention the module!) is probably going to ultra-super expensive.

Of course, most of these luxury cars already have a "service position" of "remove the entire front portion of the car" (or, if doing something interior, "remove the entire dashboard") - which already puts you into the several-hundred dollar repair cost range before anything is done...
>you need another backup option before you're allowed to remove the SMS option.

This was the answer. Google prompt isn't allowed with hardware tokens. Backup codes evidently don't count. So the only way is to set up Google Authenticator on a phone. Authenticator from f-droid works. After I set up Authenticator, I no longer got the "Something went wrong. Try again" toast when trying to delete the sms number.

Edit: Just realized what Yubico Authenticator is for :)
You seem to imply that there is a non-political, non-activistic way of doing it. How would that work?

Because from where I'm standing, if you e.g. implement gender as binary, you're not being more objective, you're just supporting the opposite side of the people you perceive as activistic.
The Argon2 improvements are interesting and I'd love to hear about them.

Re: usability of other core primitives: I'll bite. Places where you don't get to solve a hard coordination problem to agree on a nonce matters. I know you document that you can't use a random nonce (and that's accurate), but I think that is an important safety regression.
It's very much unlike a legal search. Legal searches require no participation on the part of the accused. I do also oppose compelling an accused person to open a safe, but I have no problem with the authorities breaking into a safe with a warrant. Likewise I have no problem with the authorities confiscating a hard drive and performing any transformations to the data they please
I belive this is the first time the Swedish judicial system has decided to order the blocking of a (list of) particular DNS entries from being resolved in Sweden. Swedish ISPs must now filter out a list of about a hundred named domains from DNS resolution.

Here is the ruling (in Swedish): https://www.documentcloud.org/documents/3460821-Svea-HR-PMT-...
> Even that damned Coast Guard can get your 2FA code now.

Posting unsourced and absolutely false claims does not help anyone, honestly. I would even consider it harmful.
> "spiritual" junk

Have you read the article? Understanding how things work is one of the fundamental quests of humanity. It might not be a scientific journal, but calling it "spiritual" junk is unfair.
1. Yes, but nobody's bothered to submit them because there's no point.

2. 1.75, which is coincidentally how long a stable version of Rust has existed. :P
Alternative title: The Spyware I Use on Every Site I Build
helicopter + dude on a rope
Why is that actually considered dysfunction? And why just valley?
You make a good point and I see where you're coming from. But I've gone through a few text tutorials that just fly through the topics without going into enough depth or examples. I think if you're fairly advanced in a skill, sometimes it's hard to relate to the mindset of someone who is new to it. Like, oh, this is so easy to me, I only need one sentence to explain it. But really it needs a whole paragraph.

It's all a balancing act of course. Like you said, has to be both clear and fast.
In many countries retirement insurance is automatically witheld from salary.

In Poland it's 19,52% of salary. https://www.mpips.gov.pl/ubezpieczenia-spoleczne/ubezpieczen...

In Australia it's 9% http://crr.bc.edu/briefs/australia%E2%80%99s-retirement-syst...
Start with a free product, and then add optional paid features onto it.
Direct quote from the press release, "Last session, waylaid in committee YODA was."

http://farenthold.house.gov/news/documentsingle.aspx?Documen...
Just because one branch of government performs an action rather than another does not change my views of the action. A court cannot compel someone to testify against themselves just because they're the court, right?
Electronic Loneliness (Adilkno, 1995)
Please stop posting links to paywalls.
1. enter company you don't work at and steal laptop at lunch hour

2. walk to cafeteria with laptop that looks like any other. let owner watch unlock it for you.

3. profit!

4. optional, return laptop before lunch is over for full stealth.