skysight-inc/HackerNews huggingface dataset:
I see 16 bytes of hex after the anchor slug for the encryption feature, e.g. for 'https://nofile.io/f/86JiUNYM6QK#5827800f46cef978', the key is '5827800f46cef978'.

The key is absolutely does not contain enough entropy, because your key material is only comprised of the ascii-printable hex chars converted into a byte value. So instead of a byte having 256 different possibilities, a byte now will only be one of 16 values. Bruteforcing these keys would be incredibly trivial. To decode the hex into actually random key material, you would have needed to do something like hexToBytes("5827800f46cef978"), which would yield a correctly random byte array of [88, 39, 128, 15, 70, 206, 249, 120]. Note that this is half the proper key size required for AES-128.

I also want to echo the concerns already voiced by others in saying that key material needs to be generated from a strong random provider, and not just from the hash of the file.

I say this in the interest of privacy of those who might use your service, so please don't take any offense: please disable the encryption feature entirely until you can get assistance from someone with extensive experience in implementing crypto, because as it exists now, the implementation is fatally flawed.
Man, I sure loved _Heavy_Metal_ when I was a teenager. Sex, drugs, rock and roll, fed all my nerdy escapist fantasies. And you know that first scene, when the scientist comes out of the space shuttle in a corvette and flys down to the ground? That's what I wanted to be when I grew up.
Sort of my point. You may think you only hire good people, but by comparison you are hiring middle of the road. Thus, you clearly don't know what a top 1% engineer looks like.
To crap was a bit exaggerated, sorry. :P

Localhostr was great for a while for just uploading stuff without needing to bother with accounts or RapidShare's wait-a-minute-or-pay thing. It makes sense why you scaled back the free version (I can imagine that these services quickly get expensive to run..) and started requiring accounts. But personally that's the point where it was roughly equally annoying to upload to Hostr and my own server, and so the latter just made more sense for me personally.
> You people have too much time on your hands to go and pick at the wording people use in their presentations.

What kind of argument is that?
Firefox for iOS is a lie. It's a non-Firefox browser just set up to sync FF settings and bookmarks and kinda look like Firefox.
That's quite the hyperbole.

The performance gains that come with newer browsers (generally) should allow websites to run on older hardware. Not to mention support for new protocols and compression that lead to smaller assets being sent to all devices.
Automattic/Google-Docs-add-on: Publish to WordPress from Google Docs
Choose the perfect automation platform to manage leads
> Our descendants will pity us, as we pity ours.

That's pithy :)
Google Data Studio now globally available
Oh, duh. Wow, dumb me. One of those "can't see the forest for the trees" mistakes on my part. Thanks for the reality check!
Maybe you could set up some caching.
And what do you think the impact on biotech VC money will be? Would you invest in a company if the gov't could confiscate the intellectual property?
I think our ideas of Utopia differ
AWS Database Migration Service – 20,000 Migrations and Counting
Yeah, I'm absolutely not against researchers and specialists and people who /work on/ this stuff being well paid, it just seems like the bulk of the profits goes to shareholders (I'm guessing mostly large institutional investors) rather than getting reinvested back into other efforts for the greater good. I'm questioning whether we really need that component of it all.
Ok, we injected an 'into' into 'inject Little Snitch'.
THIS. I think basic income makes everyone becomes the same ... but people inherently need structures to climb up -- "power processes". Ted Kaczynski describes this very well in his essay "Industrial Society and it's Future" (crazy guy but actually saw the problem clearly) http://editions-hache.com/essais/pdf/kaczynski2.pdf
I still think there are infinitely many amazing things to unlock and discover and everyone can be involved at various levels (whether it be experimenting and trying new things or being "subjects" in experiments) or coming up with experiments or areas of study.

The people at the top of the hierarchy would figure out the experiments with different levels / skill sets people could do.
In this sense we would transition to an economy where we try to build the "System" to fit the "needs" in terms of power processes of humanity -- not just sustenance. In other words the economy becomes one where the people who are rewarded and get to the top are those that are able to create structures that enable people fulfill higher elements of maslows hierarchy than pure food and entertainment.

I don't think infinite resources equals the death of capitalism -- but rather, in a world where the bottom rungs of Maslows pyramid are fulfilled the only things of value become "systems" that enable people to exert power processes.
I didn't think I was disagreeing... can you expand on what you are seeing?
Damn. Wish I was Greg.
MoonScript is extremely cool. What are your thoughts on MoonScript in the browser? I know you have an online "Try MoonScript", but what would be the best way to use it in a real (hobby) project with DOM manipulation capabilities?

Please don't give up on MoonScript :)
X evangelist, where X is a job that has yet to be replaced by bots
As some others have mentioned, the title vs the text confuse a little.

The main difficulty in the thought process is what is meant by "my job". Of course, it can't literally be just my job. It would have to be a class of jobs. What class? I do a little supervision, a little data analysis, a little CRUD app maintenance/development. The hardest part of my job is translating customer requests/requirements into action without adverse side effects. So we can imagine a NLP+AI type bot could potentially solve that problem.

So in that case, there's now globally little-to-no demand for intermediate level programming and analysis. So I can't just switch to another, similar job.

At that point, what happens depends strongly on the environment. My wife is now in training to be a nurse. Has she completed that training and is so working when the automation event occurs? If so and if her job is unimpacted, then we simply downsize our lifestyle to accommodate the reduced income.

Does basic income exist at the point when the automation event occurs? If so, that's a fallback.

Have any new industries appeared as a result of new technology that don't exist today? If so, what kind of entry requirements are observed? What timeline would I estimate to attempt to retrain? Could it be done before the target industry itself is automated away?

As a final fallback, I'm lucky to have a supportive family in the area. I would describe my situation and offer to do their household chores in exchange for room and board.
Mark Zuckerberg Harvard's commencement speaker
How can I grow a social network like Reddit in my country?
I've built a social network similar to reddit for the Albanian speaking people. I've seen similar websites also in Turkey (eksisozluk) and in Serbia (ispovesti) that have a lot of monthly visits monthly.
Now I'm in the phase of growing my social network. What could be some first growth hacking tips that I could try?
That's just a bullshit excuse. Uber attacked healthy markets with proper consumer protection, and more importantly: wider social protection. And it did so with blatantly illegal tactics that were clearly detrimental and socially undesirable.

Uber is just a criminal organization acting solely out of greed.
I literally made a scene laughing at this while sitting in a hipster cafe complete with Edison light bulbs.
There are a lot of givens and provisos to make the Monty Hall problem work[1], but in the end if you stick with your door you have a 1/3 chance of winning and if you switch you have a 2/3 chance of winning.

[1]Monty must always open a non-winning door based on his insider knowledge and always give you the chance to switch, and of course the prize has to always remain behind its original door.
Yes, for example some take months with everyone loving you the entire way, for a single person to interview you and reject you without a reason.

I'm glad I had those interviews early on, so now when I see an interview start to drag on, I cut it short as it doesn't look like a priority on their end.
This seems like a big mistake to me.
Caching is basically what the vdso things do. In my recollection, they basically grab a good time from the kernel occasionally, and then use userspace accessible things like rdtsc() to offset from that authoritative timestamp. So it turns millions of syscalls into one.
The example reminds me a bit of inkle's ink interactive fiction scripting language:
https://github.com/inkle/ink
For time?
C++ would not have helped as a target language for compiling Ragel, at the level the compiling is done. Actually IIRC Ragel enhanced their output to mitigate that kind of situation, and the intermediate language they target is still C.

I'm not sure anybody targets C++ as an intermediate language when emitting code at this level. (I do have written some code that emits some C++, but at a wildly different and higher level). I'm not sure this would bring any value.
At an absolute fraction of the cost of a new drug. All they need to do is prove their drug formulation has the same bioavailability as the branded drug. The cost of doing that is measured in a few millions of dollars.
Yes; in 1997, I created a simple Javascript-like embeddable scripting language for the network security scanner product I was a part of (Secure Networks Ballista). Instead of a BSD-style sockets interface, it was designed around direct access to the network interface and had a standard library that implemented Ethernet/IP/TCP, and the language had primitives for picking apart and composing packets. We used it to to write low-level network tests without writing C code.

At the time, there was no mainstream realistic option for embedding popular languages that lots of people knew into C applications. A few years later, I'd have solved the same problem with Tcl and a few extensions; then Python, then Javascript.
Out of curiosity, I thought that genetics was the domain of gpus?
Hey, co-founder here: I'll be the first to say that the chat interface isn't for everyone. If you'd prefer to get the facts with minimal extra stuff, Penny might not be for you. What we've found from working on this from so long is that the chat interface goes a long way towards making finances relatable and easy to understand. For most people, the biggest barrier to personal finance literacy isn't education; it's motivation. So celebrating wins like paychecks coming in actually helps a lot—feedback says people love being told they got paid and celebrating.
With how big these chips are getting, I wonder if the next iteration will have an HBM last-level cache on chip.
I agree with you on the semantics. They didn't break the encryption, but they certainly did get around it / bypass it.
You can trust the leak without trusting the leaker. I believe everything wikileaks has leaked has been legit. I also believe they frequently make extremely misleading statements(like the Seth Rich stuff) to push their own goals and I wouldn't doubt for a second that they would lie to push forward their own goals/or mask them.
They are insecure from the perspective of protecting people from targeted government surveillance though. The security model doesn't support it.
> ...would still be pedantry at its finest.

Why would correct use of terminology be "pedantry at its finest"?

What people are concerned about is intellectual dishonesty. The presentation does not go to much effort to show, for example, why the term "mid-stack inlining" needs to be introduced for Go. Do other languages not have this kind of inlining? Does comparing and contrasting other implementations just not matter?
Not likely to be a problem if you have FusionIO drives. Likely to be a problem sooner or later on everything else. A definitive recurrent issues on all cloud providers and NAS/network drives.
The iPhone is not a luxury good
I followed the web link and still hit a paywall. Perfect.

Edit: I went to the "Top Stories" link, which was right above the identical (and paywalled) search results link, and that got me through.
Awakening: A Sufi Experience: Pir Vilayat Inayat Khan

-I found it for $2 at a STRAND Bookstore wilst out for a stroll in the city. Best $2 spent on a book, EVAR.
@a tme whn I didn't know how to explain the utter crystallization of something fascinating but grand, though obtruse happening in my innards, this book shone light on alot of what I was waking up to, hence - Awakening!
Yeah,

The test seems like "I will screw with your sense of reasoning a bit and call you irrational when you don't respond the way I think you should"
All these discussions remind me why I loved pure mathematics so much. Every theorem requires a proof, and nothing is really a fact on its own, but a logical derivation from an assumption. I guess you can call these "2nd order facts"?
Why wouldn't he suddenly be? Because he exposed the corruption of the party you supported?

He was never neutral or objective on the subject of Hillary Clinton. And isn't it convenient that despite our knowing of multiple politicians whose private email got hacked, hers is the only one he felt was worthy of publishing...

So, yeah, not exactly a "sudden" lack of objectivity on his part. Also it's been demonstrated his followers will turn a blind eye to things that don't fit their narrative.
And the HN discussion:

https://news.ycombinator.com/item?id=13763759
Taxpayers May Be on the Hook for Next Failed SpaceX Mission
Location: Berkeley, CA (San Francisco Bay Area)
Remote: Yes
Willing to relocate: No
Technologies: Ruby, Python, Javascript, Wordpress, Machine Learning
Résumé/CV: https://www.dropbox.com/s/fm61tmiooo0mfks/JacobKopczynskiResume.pdf?dl=0
Email: ja.kopczynski [at] gmail.com

Early-career developer currently doing small-scale contracting, looking to expand my horizons toward working in data science. Already well-equipped for 'Data Engineer' and general ML research assistant roles, willing to take internships for purer data science experience.
Wow, never read anything before by Taruskin. What a combination of sensational prose and command of musical and political history. I'll be seeking out more of his work. Here's a primer for anyone interested: http://www.sfgate.com/music/article/UC-music-historian-Richa...
DC Implodes, an excerpt from the extreme conspiratorial fringe
Samsung may recycle recalled Note 7 hardware as a new phone
I could see it being some sort of shared memory problem, where the system is misallocating memory because it's running out of free space.
This is clownish:

1. Only a tiny minority of macOS users use Little Snitch, and they're not necessarily the most sensitive/interesting targets.

2. If you're competent and you have enough privileges to inject a DLL into anything, the odds are overwhelming that you also own the kernel. Why would you waste time with a goofy firewall add-on package?

I joked on Twitter but I'm "ha ha only serious" about this: if you had this entire portfolio of tools and exploits 2 years ago, I'm not sure you could have gotten a job at Immunity. The leak is fascinating. The technical details: not so much.

I thought the Shadow Brokers/Equation Group dump demonstrated a not-especially-skillful group of inexperienced-seeming pentesters who happened to have acquired some interesting bugs on the black market. Today's dump shows a team that's way less impressive even than that.
Awesome to hear!

Do you have a general timeframe?

I'm going to be deciding between Azure Mobile Center and AWS Mobile Hub in the next couple months for a personal project.
That's just wasted money.

Why would a drug company spend money on DTC advertising if it "wasted" money? Your comment suggests they'd be better off not doing it at all.
Yeah, not having it on my wrist for the 15-20 minutes daily during my morning shower to top up the battery is a real deal-breaker /s
Understandable at your point.

Maybe I shouldn't have mentioned it at all since my main annoyance is when google does it. :-]
Choose a new career where the margins are small enough to not justify being replaced by bots before I die.
ah yes, sorry.

is there a trusted compilation service that uses a distributed agreement mechanism, à la blockchain or DHT for validating some git/svn hash against a binary.

every downloadable source publishes its own binary hashes but the whole practice is somewhat moot in the event of server compromise, not to mention build reproducability.
Robert Hansen: Self Interview
Have you looked at Crystal before? It's a compiled statically typed variant of Ruby.
If I knew, I'd be the next Hume :-)

I suspect it couldn't be a physics result, because the question is something like "Why does the universe follow natural laws at all" and/or "what IS a natural law, in metaphysical terms" ?
A couple reasons:

1. Those other platforms didn't really exist when we first launched. Messenger launched their platform about nine months after we started Penny.
2. (The real reason) We still don't think we can provide a better experience via a chatbot platform than we can with a standalone app.

To motivate that second point:

The benefit to a chatbot platform is that you meet people where they already are, and "signup" generally has lower overhead.

The downsides are many, though. Most platforms don't allow for things like securely submitting username and passwords, e.g. when connecting a bank account (although Messenger is starting to allow webviews, which can be repurposed to handle this). Browsing your aggregated transaction history, changing the category of a transaction, viewing your balances, etc. are all poor fits for a chat interface (again, Messenger has only recently started to address this). Pre-populated responses aren't first-class citizens in most chatbot platforms. We get more control over the UI, e.g. when displaying animated graphs, in a standalone app than we do within chat. There is/was no way to lock individual chatbot threads behind passcodes to protect your privacy... and on and on :)

Finally, there's also the problem of discoverability, which no chatbot platform has solved in a convincing manner. Downloading a standalone app is a pain, but once you get over that initial hurdle we think the experience is still significantly better than delivering Penny over a chatbot platform.
Free social media analytics – Pretty awesome
The conclusions are correct. Talking about them isn't sensationalist just because you think they're foreseeable.
> I think a lot of people in this thread are hating on NYTimes today for this headline because of the inaccurate WhatsApp encryption news stories of recent.

More because we're all getting blown up with "Signal is broken" messages and have to answer them one by one because of misleading/disingenuous headlines. Yes, 'bypass' is technically correct but the implication of the headline is that the problem lies with the named apps. This is not true and actively problematic.
What happen to Python support? It was supported in the release candidate.
That doesn't solve everything. There are still textbooks published that use CGS instead of MKS units. Both of those are metric. Non-SI units are widely used in space (e.g., arcseconds).
Well, I think all of this is just stories that we tell ourselves. Are some engineers better than others, yeah sure, but we're not gonna find that out in our silly little interviews we conduct.

I was being tongue-in-cheek with my first post, but I do think there is a flipside to what you say in the OP. If the people giving interviews are 25 and have only had one job since they graduated, they may mistake an unfamiliar way of doing things as incompetence.
How terrible for them — all they did was drive people to their destinations in return for money: the passengers and the drivers benefitted alike.

And how cruel of the Norwegian Crown.
Good and bad are opinions. 9/10 studies saying coffee causes earlier mortality (not saying this is true, just giving an example) is a fact. For me the enjoyment of coffee might outweigh loosing a year of my life, and wind up saving the government money on my pensions and healthcare in the long run. So is this good or bad?
A library providing infrastructure for writing applications around event loops
I can't speak for grandparent poster, but when I read the article, it seemed like it was more advertisement than journalism. So it passes the duck test. It doesn't really matter to me if anyone actually paid BBC to run the story, because to me, it is at least 51% advertisement and no more than 49% news story.
I'm sorry, that's not clear to me. What's the significance exactly?
With no information (that I can see) about where these files are hosted, or who or where the organisation is behind this, using this could be a big mistake.
> That's why the CIA doesn't operate inside of the United States.

False [1] [2] [3] [4] [5] [6]

[1] https://en.wikipedia.org/wiki/Project_ARTICHOKE
[2] https://en.wikipedia.org/wiki/Crusade_for_Freedom
[3] https://en.wikipedia.org/wiki/Project_MKUltra
[4] https://en.wikipedia.org/wiki/Operation_Mockingbird
[5] https://en.wikipedia.org/wiki/Project_SHAMROCK
[6] https://en.wikipedia.org/wiki/HTLINGUAL
> such as Little Snitch (I think?)

Correct. It is likely users allow their primary browser full access to all hosts on ports 80 and 443, if not all ports.

Additionally, launching the browser gives you easy access to all the tastey session cookies and access to their keychain (I assume a lot of people give their default browser on OSX keychain access).
As a man, learn to accept a life of celibacy. Sadly, women's tendency to evaluate men by their occupation is not going to change as quickly as the jobs market.

(This is admittedly a dystopian view, but I believe it's possible.)
To think in this example of a binary worldview in logical thinking it would be a genetic fallacy. Everything that comes from one person is good and everything that comes from another person is bad/evil.

https://yourlogicalfallacyis.com/genetic

>That's an extremely oversimplified explanation of the world.

It isn't a over oversimplified it is an actual legitimate worldview in Philosophy/Ethics for many individuals. There is not one worldview that is up to each individual and different cultures. I wasn't trying to paint everyone but I am stating that many people absolutely think this way.
Eh, years in a federal jail cell seems like it's not worth even $1 billion to me. And they made a lot less than that.
To fix L.A.'s traffic, we need tolls
> bugs in the Windows process scheduler

Blaming windows is just a desperate excuse from AMD to justify its lack of performances. Don't be tricked by that.

It's possible -and rather common- that there are motherboard issues on the first generation of MB, which again, is not a a valid excuse but a bad thing that desperately needs fixing from AMD and a sign that it's still in testing phase.
Also: OmniGraffle and Sublime Text license keys (registered to "Affinity Computer Technology")

https://wikileaks.org/ciav7p1/cms/page_25264141.html
https://wikileaks.org/ciav7p1/cms/page_9535650.html
I just want to say thanks to the VS team for all their hard work. VS is by far my favorite MS product.
They're not the same, but they're pretty well indistinguishable for anyone who isn't omniscient.
Experimental pure mathematics using Sage [video] (2015)
I agree. However, the reality is that software changes constantly. We can accept change and move on with life, or fight change forever.