skysight-inc/HackerNews huggingface dataset:
If there was a bad response to a critic, this will be it. While Sirer's post was a bit terse, this response doesn't earn brownie points by going the same route.

First, they start off as many "responses" in crypto currency seem to start that is - saying this is all FUD and the critic should stop spreading FUD.
They also take the Trump route, not a great choice of words - "fake news".

Where I lost them was when they equated themselves as being so important to crypto currency space that critiquing them can be used to tag the whole space as being a giant ponzi scheme.

On still persisting, I found their clarification on "asynchronous price discovery" very funny. The point of a market making algo is to "make the market" ie they have to act as counter parties to each trade irrespective of whether there is a buyer or a seller (ie not a price matching algo). The price discovery in that process happens on how the market making algo is written.

Though I guess being programmers and writing a document for programmers they had to go with a technical term. But with someone who understands economics on their team, they should have done away with it.

All said, the most important part of a market making algo is not to provide liquidity or smooth prices. As Sirer put it, smoothing prices is a bad idea. If something is volatile it is because the market deems it to be so. Going against the market is not good.

I hope these guys watch this video carefully to understand how trading works:
https://www.youtube.com/watch?v=RLySXTIBS3c
Side-channel-resistance is a property of the algorithm, not of the implementation.

As technion says, ChaCha20 was designed such that the evident software implementation resists such attacks; however, Schwabe and Kasper also have a high-quality software implementation of AES.

Hardware implementations are a different beast altogether, and a lot of expertise has gone into making hardened AES implementations in hardware (as forg0t_username says, masking helps - but this is an entire field of study. Look at some CHES conference papers to get an idea.)
Censorship circumvention for one.
Big firms like to use it, but most developers who work there probably don't; they just suck it up and do it for the paycheck. Source: am a developer at a big firm being forced to use Java.
To be clear: you think that someone stealing an unlocked bike is not "in the wrong"?
Archive-by-VM has been attempted from time to time. In the case of VFX there isn't a single server, but many different workstations, servers, render blades, etc. So preserving the entire pipeline in amber is a challenge.
Russia threatens to ban Telegram
> Does anyone feel a tinge of guilt using the amazing technology that Google provides?

Why?

> I think Google is overall a pretty "evil" (I use quotes because the term is loaded, and the reasoning is too long to easily state) company.

I disagree, but even if I didn't why would that make me guilty about using libre technology from them?
First of all, glad you were able to do this and keep Uber accountable - and thanks for putting in the effort where others would have given up.

It's expected that you'll try to resolve things before filing a suit, and it's expected to try to settle if possible once suit has been filed, but it's not my understanding that those negotiations necessarily involve giving info to the other party that isn't to your advantage except as part of actual discovery. Were you told at some point by the magistrate or court otherwise that you had to do that?
eh, I own an Acer Chromebook R11 and am pretty happy with it...

The battery life is wonderful for that price bracket (~8-10 hours, <300€). I used crouton for a few month, which enabled me to install Ubuntu 14.04 in dual-boot. you could switch between ChromeOS and the chosen Linux window manager (i first used unity but switched to i3wm eventually).

At some point, i removed it again because I hardly used the Linux environment anymore. There a pretty fine text editors as offline chrome-extensions available (i.e. Caret) and that was the only two use-cases I had for the laptop... browsing the internet and making text notes.

BTW, a lot of webapps, or "Web browser app" as you call them, have offline support. So no, you don't need an internet connection to use them.
I actually take the bus most places, I only drive once or twice a week, to the grocery store or so. I have no real skin in this game. In my experience, and in the OP's experience, "share the road" is a dumb, dangerous solution that leaves everyone unhappy. Bikers should refuse to put up with it. Demand real lanes.
"The golden rule of investing -- regardless of asset -- remains not using more than you can afford to lose."
I agree with this point, but it is also
important to distinguish investing from speculation/gambling.
I've seen "merely" large corporations, let alone governments, insist on root access to boxes customers are not normally given shell access to at all, for auditing purposes. To answer the implicit question, no, I don't think this is really all that abnormal, it's just that even many HN denizens may not be aware that this sort of thing happens more often than they realize.

The idea that they're doing it to develop backdoors is at least sort of silly, on the grounds that they are perfectly capable of dumping the firmware of these boxes once they import one and developing exploits against the actual image. In fact, that's not even a "nation-state" level of capability, there are plenty of individuals who can and do accomplish that for merely "bug bounty" money. Given the restrictions they have at looking at the source code it's not clear to me that it's going to be much easier for them than just doing it based on firmware dumps.
We're just showing the capability; it's not like we're throwing a ready-made attack kit on the internet. And it's not like we could coordinate disclosure with "everyone who has ever shipped an AES implementation".
The standard lib has java.nio which is a vast improvement. I usually throw in Apache Commons IO as well, but Guava is comparable.
How does Ethereum help with retail? It's not like the smart contracts can verify that the customer has actually received the physical item.
Is there any option to break source-level compatibility? (Automatic translation to old syntax will still be possible and seamless, of course).

If yes, I can draft a proposal.
Lying about these things is trivial to see through. One or two follow up questions and now the candidate is a likely liar. I'm definitely biased against liars.
Not saying this is bad, but...

Instead of giving money to a tool like this, you could just use ctags/etags, both of which are Free Software. It doesn't show detailed graphs like Sourcetrail does, but it allows source code traversal by function definitions, and supports a crapton of languages.
No, not yet. There is a feature request: https://github.com/CoatiSoftware/SourcetrailBugTracker/issue...
It looks like someone threw a pinch of erlang in a Chef recipe. Like bash, but every English word operator has been replaced by space ships, angry squids, ternary operators, && all the other things that make code hard to read.

But... I still love Nix, and you get used to it.
Any tips for how you sold Scala? I don't even like it but I picture the sell to be at least as hard as Clojure, at least if you're selling Scala honestly... Clojure can't hide its alienness anywhere but a Scala intro can. I'd like to find a way to push for Kotlin at the moment, which would be nicer day-to-day than plain Java plus open the door later for other JVM languages.
"Algorithmic countermeasures" - that is, switching keys quickly - can indeed hinder side-channel attacks. Be careful not to introduce more problems than you solve, though - hand-rolling your own crypto is something to leave to a team of experts (because you definitely want someone reviewing your design!)
I work with Tom at Datto. He presented all of his design decisions at the OpenZFS developer conference here: http://open-zfs.org/wiki/OpenZFS_Developer_Summit_2016#Prese...

Slides: https://drive.google.com/file/d/0B5hUzsxe4cdmU3ZTRXNxa2JIaDQ...

Video: https://youtu.be/frnLiXclAMo
more intelligent email marketing flow/autoresponder providers/SAAS -- Drip, Klaviyo, ConvertKit, Customer.io etc have ALL grown hugely over the past few years. If you bootstrapped a half-decent business in this space you probably became successful.
So how do the Russians know that the code they see is the one generating the binaries sold in Russia?

Maybe this is more about training and retaining Russian tech talent, creating friction for foreign vendors, and spreading a proto-fascist FUD and distrust of governments all over the world.

Because yes, I would think inspecting binaries (probably secretly) would be more productive in pursuit of the stated goal.
Flipkart Wants to Pay Just $400 Mn for Snapdeal (was $1b)
> There are no external UI DSLs (i.e. html or xml files).
> The entire UI is written in Dart. This, for me, is a
> big win.

This view amuses me. It is obviously held as an opinion, and isn't one I disagree with; but goes heavily against what everyone was aiming for with the likes of HTML. To the point that it is kind of hard to believe I'm seeing it.

I give it about 4 months before there is a UI language that is not "code" that is usable here. Pushed by the other side.
from looking at the article they look like a/b testing tools.
I need CUDA drivers for what I am working with, and I have found no way to install it in Guix. Otherwise, it looks interesting enough.

(Sexps are usually not my first choice, I think it is a "lazy option" for people who do not want to write parsers / design their own syntax. Even then, they are better than current Nix expressions).
> It's not an an evangelism article to convince those not using C++ right now.

I get that. Maybe I should have added a disclaimer to that end.

> In other words, a programmer thinking about writing a web app to track food recipes

You're maybe the 5th person who's made thinly veiled barbs about me being one of those despised subhuman web developers, so I'll just answer this once and for all :

Though I have written web apps in the past, I'm not really a web developer. What I am is a developer who builds shit that people use - be it desktop apps, mobile apps, games or web-apps. I don't give two shits if I'm using RubyScript or a goddamn magnetized needle : if I need the tool I'll happily learn it. My only problem here is I can't find a good reason to learn C++. That's all.
If you are interested in bufferbloat and TCP, Google's BBR is a really interesting attempt at solving part of the problem. See http://queue.acm.org/detail.cfm?id=3022184

BBR is a sender-only modification to TCP that basically solves the problem of large buffers.
There is a utility method `Files.readAllLines` [1] (even since Java 7) which gives you a List<String>. Since Java 8 there is even a lazy variant `Files.lines()` [2], which returns a Stream<String>. Though you gotta be a bit careful with that last one and be sure to close the underlying reader, as mentioned in the docs.

I get your sentiment though.

[1]: https://docs.oracle.com/javase/7/docs/api/java/nio/file/File...
[2]: https://docs.oracle.com/javase/8/docs/api/java/nio/file/File...
SpaceX goes for a launch doubleheader this weekend
> Serious question: Is it simply a strong math phobia, or have people neglected the skill for so long that they've actually forgotten middle school level maths?

One bit of anecdata - I started using computers because I was terrible with maths and they did the numbers thing for me.
Exploring Kotlin’s hidden costs – Part 1
Their stuff is not mostly open source.
3:1 would be an extremely low -- I've never seen a shooting ratio that low in my life. Shooting just 4.5 hours of footage for a 1.5 hour film, for example, is unheard of.

Even a 10:1 shooting ratio was pretty low for indie features in the 35mm days. Nowadays it's not uncommon to see shooting ratios upwards of 30:1 on digitally acquired productions. (Although that number varies a lot with the director.)
Forced? Like with thumbscrews?
Maybe I've gotten lucky, but through my career and various bouts of job hunting, I don't think I've ever encountered a company where HR (in most cases a recruiter) did more than a super-basic phone screen. They make the initial contact, find out if I'm actually interested in the job, and then the actual interview is with 1. the hiring manager, 2. his/her peers, and 3. peers of the role I'd be moving to. I've never encountered a situation where someone from HR is asking me technical or behavioral questions. Is this really that common?
Bash is still worse. Probably. I know it is ubiquitous, but if I can avoid writing Bash scripts, I do.
>GitLab's CI runs on every branch push, which I dislike, since you can push a branch that isn't ready yet for backup purposes.

What's the downside of deploying a review app for something that's "not ready"? It's (presumably) just deploying to a development-only environment of some kind anyway. I'd also argue that you should be pushing almost as regularly as you commit. It increases the opportunity for discussion of what you are working on and it's also useful to know "does this still successfully deploy?"

Here's an excerpt of a .gitlab-ci.yml file from one of my projects: https://gist.github.com/kelchm/fc8ca06dd3e44a42fa640ed7a8e84...

Basically, the functionality is as follows:

1. Any branch other than 'master' automatically deploys to a development environment (AKA a 'Review App'). Multiple of these review apps can exist in the development environment.

2. Merges into master are automatically deployed to staging

3. Tags which match the form '/^v.*$/' are considered production releases and result in a manual deploy job being created.

It's a really simple and powerful workflow.
Yeah, now your VPN provider can instead. So much better.
NASA launches lightest and first 3D-printed satellite
A real virtual company, in the cloud. This just might be the future, just as infrastructure and services are hosted in the cloud.
[a.i.] RESUME just posted a live demo with real time resume analytics
I don't know Java gets such a bad rap from the current generation. If I had my way (which I rarely do) I'd start any new server-side project on Java with Spring Boot. Everything about the stack is so fine-tuned and battle-tested. There's libs for everything under the sun. I can follow every stack trace even in a multi-threaded environment. Debuggers are extremely dependable. The IDEs are top notch. I know it's verbose and I prefer it that way. You spend more time reading code than writing and I'd rather see it all spelled out than encoded in punctuation marks. Otherwise, I'd go back to Perl.
I don't really see any advice here that's not generic.
+1 for ATP. I don't even have any Apple hardware but I like their style, not so much technical, but focusing on other aspects engineers tend to care about (UX, product quality, economics, etc).
There's a much simpler solution. Cops sell drugs on the market. Sellers have to physically mail the drugs to the customer, so they need a mailing address. Then instead of mailing drugs they raid the house. Pretty easy. And to get sellers they can buy drugs and trace the drugs they bought back to the dealer.

The FBI may not be able to take down the entire store, but they don't have to.
I could not agree with you more! I use nix daily, and every time I go to edit it a nix file a voice in the back of my head says, "you should really start that Haskell to Nix compiler you've been thinking about."
[edit] ha! just notice the next comment talking about hnix. Great minds... :)
Two Britons arrested over Microsoft hack
In theory, yes. In practice, just grabbing your unlocked laptop and running off is a lot simpler than our/my colleagues' attack. ;-)
Because you live in a purple or yellow country - https://freedomhouse.org/report/freedom-net/freedom-net-2016
Especially when banking
Serverless Payments with Stripe and AWS Lambda
Hide browser history from employer?
The thing is though, even for Minneapolis, the total length of bike lanes/paths amounts to what, maybe 5% of the total length of sidewalks/walking paths? (spitballing here looking at Google Maps)

Which just strengthens my point: even quite modest efforts can result in big biking gains. And that's in Minneapolis, who nobody is going to accuse of having great weather for biking.
> But those inspections also provide the Russians an opportunity to find vulnerabilities in the products' source code -

this is the biggest part of the article. If the Russians are trying to hack US govt/corps/people its really helpful to have the US security companies show how they check.
Use JavaScript Libraries for Typography on the Web
I'm writing Java all day long and I love it.
> perform their financial housekeeping around this time

Definitely. That's my monthly budget day. If I see some subscription I don't really need it'll get cancelled on budget day.
Do You Have the Right Stuff for a Growth Business?
I would never log my daily 3km ride to work in Strava, and I've had it count my after work singletrack romps as commutes. How strava thinks it can be a good source of commuter data is beyond me.
Unfortunately no, except maybe for some very minor tweaks that have a chance to be included in vanilla nix, but otherwise this would most probably either mean the death of this project or a split in the (already small) community, which I both don't want to see
Forget the lone genius-innovation is an evolving process of trial and error
I wrote this document: http://catern.com/posts/deps.html which briefly compares both Conda and Nix among other things.

(warning: it's very pro-Nix :) )
If the road/street is wide enough then there should be separated bike paths. If the road is narrow then the speed limit should probably be lower anyway.
You would get absolutely slaughtered in a public market setting if this happened -- I love the idea of ICOs giving non-accredited investors the ability to invest in risky ventures, but you have to wonder about the diligence layer that comes with it, especially as organizations like Bancor do not have nearly the legal requirements for transparency.
Sounds like you're really stretching here.

Share the road works fine as a solution without dramatically overhauling current infrastructure. Just don't be a mean driver.
Well, the UK has what is pejoratively called "Windows for Warships: https://en.m.wikipedia.org/wiki/Submarine_Command_System#SMC...
Right now, in America, your browsing history is basically for sale by your ISPs. That it may not be actively happening right now is coincidental - it is an impending certainty.

If you are okay with that, godspeed, but I think you would have to be deranged or clueless (or both) to be okay with the idea that mega-conglomerates can sell your personal browsing history to the highest bidder.

There are myriad other legitimate concerns, but this alone makes the whole debate something of a non-starter in my opinion.
If you want to see one way of doing this, have a look at how D does it: The function mangling and v-table (for single inheritance) are matched between the two languages.
Could you really not have thought about this a bit harder? I do think that anyone here should generally just get a cheap tier VPS (or use their own existing VPS or colo or whatever depending) and run a VPN for themselves via algo or similar vs a public commercial VPN service offering, but the point of doing so isn't that complicated. Individual->Internet mediating VPNs are about shifting your effective general WAN traffic entry point from the Internet edge (the local ISP, which for many of us amounts to a single monopoly provider or a public WAN point which is also not at all trustworthy) towards the Internet core backbone, where there is extremely robust competition and in turn customer responsiveness. It's an economic hack. There are many ways my ISP might be tempted to not work on my behalf, be it active (monitoring traffic for their own advertising benefits) or merely through laziness (not putting up any resistance against even warrantless mass surveillance requests), because I have nowhere else to go and they know it.

Whereas OVH/DigitalOcean/Linode/Scaleway/Amazon/Google/whomever all have much stronger incentives to put their customers first and foremost. In terms of business model (due to how utterly trivially I could rip down a VPS and set of containers/services at any one of them and set up something identical at any other at any time) they're much more closely aligned with customer interests.

It has nothing to do with any illegal behavior per se (at least in the USA, in many countries "illegal behavior" may encompass things we consider basic rights), it has to do with economic alignment and additional privacy/security at a cheap price.
Upcoming CakePHP Roadmap and Releases
A few criticisms of the article here, but its as good a guide as anything I have seen, not focusing on the programming equivalent of Trival Pursuit questions.
OpenGL/Vulkan are not programmingd languages (though they can be accessed from C, C++, Rust etc.)

C is great but, in my opinion, is not productive enough.

Rust is strongly geared towards safety, which is great in general, but is surely not a 1st priority in gamedev (you often have a perfectly "safe", as in memory-safe and thread-safe code which fails to render 3d graphics correctly).

This leaves us with C++, which is indeed performant, arguably productive and has a benefit that there is a vast amount of libraries that are already written in it.

However, C++ is horribly complicated general-purpose language with quite a legacy bag.

What I'm saying is that one could imagine (and design) a language aimed at gamedev which will be simpler, nonetheless performant and have productivity features specific for gamedev/gfx.
Algo and self-hosted VPN in general is only good for some applications though.

- IPSec will be blocked on many places where port 443/TCP isn't and OpenVPN or similar could work. So it's not ideal for free wifi, enterprise or school networks.

- You will still get DMCA takedowns from your datacenter or cloud provider if you don't choose one carefully

- You're limited to a single IP so if you're using it for a scraper and get blocked, you have no option of just clicking next IP.

Commercial VPN providers are often able to hit all these points.
This was before full-digital so probably not.
I agree I phrased that poorly. My point is humans are predictable. If you leave an unlocked bike, it will get stolen. Yes, it's the thief's fault and the thief is wrong, but you could have done something to avoid it, too.
Porting a Symfony 3 Application to Flex
That wouldn't help. If you go to https://foo, before the server can even redirect you to https://www.foo, it has to present a valid cert for foo without www.
I learn a lot from Barabar Oakley's book "A Mind for Numbers".
http://barbaraoakley.com/

I wrote about some of my take-home messages from that book here:
https://www.quora.com/profile/David-Lawrence-6 "How I study hard"

Abhishek Pillai wrote about what he learnt here:
https://medium.com/learn-love-code/learnings-from-learning-h...

I have completed 3 MOOC courses. I was lucky that they tied in with my job.
Agree. It's a pretty bad idea to use centralized commercial VPN services.
A lot of places have quite a lot of streets that don't even have sidewalks.

I occasionally see people walking to the hospital here, in the lane on a 25 MPH street.