skysight-inc/HackerNews huggingface dataset:
OT but what's your beef with phoronix ? I'm not a regular reader but it seems a nice site about opensource stuff.
> atheism, which if the constant preaching of is any indication, seems to be turning into quite the religion...

I've actually noted this. The whole "Bless You" debate squares that point.
My point is more about critical thinking and how religion takes that away
from people. Is anyone in argument that it is a bad thing for large groups
of people to think the same way without due diligence? Pretty sure most
people see large groups thinking as one as a bad thing. You can call it atheism,
or what have you, but essentially we're talking about freedom of critical
thinking vs. freedom of religion. I don't care for religion, or people
thinking in large groups as one, so I lean towards people's right to think
critically.

> Pinning the blame for Mauritania's slavery problem on "religion" takes the eye off the ball

Let's ask: Why is there slavery in Mauritania? What would make people
okay with their own enslavement? No education about what slavery is?
Sure. Let's say it's to do with education. Now, who's putting a stop
to education? Whoops. Here's to taking the eye off the ball, esoteric
style. I tire of hearing how people will solve the world's ball of fire
that is enslavement, brutality, ignorance by throwing a pail of water
over it when the real problem is the factory making the lighter fluid.
Jesus. How did this guy ever get a job as a radio journalist?
There is a difference between being dumb, and doing something dumb.

About once every 2 months I forget how to operate a door. I put my hand on the door handle, push, and walk right into the door, because I forgot to twist the handle. That's a monumentally stupid thing to do, but I don't think it necessarily means that I'm monumentally stupid (at least I hope it doesn't :).

I'd be interested to hear why you think every evil person's actions are dumb when evaluated in the long term.
By consuming lots of RAM (more than will fit on a single Si die), it means effectively that the defender is able to leverage the economies of scale that go into optimizing the memory bus of his commodity server. This makes it so an attacker who can produce his own chips (or to a lesser extent, use FPGAs or GPUs) has much less of an advantage over the defender.

While CPU speeds, transistor densities, and cache sizes have gone through the roof, the 60-80 ns memory latency of off-chip DRAM has been nearly constant over the last few decades of computing.

"Memory-hard" builds the work factor on that.
Lessons Entrepreneurs Can Learn from Teachers & Students
Very best collection and useful information to find all kind of tablets on one platform
Likewise, on a 4S with iOS 5.1.
"They show people blowing their head off with a gun in the afternoon news while children are watching"

Do you actually think this is a true statement about the US?
Reading that article from lwn.net is amazing. The irony of the gcc community users screwing over their customers in order to preserve their ideology, and its parallel in the 'commercial' software business is really amazing. Seriously. "We won't make plug-ins because that would open the door to making money on GCC" vs "We require a key disk to prevent folks from copying our software and using it for free."
Yes, that's right. It doesn't mean that you are hopelessly non-cognitive if you can't understand the complexities of cryptography. (As I said, I certainly can't.) It just means that unless you are one of the very few people who are 1) exceptionally mathematically talented and 2) able to have spent your entire life studying the subject, it's unlikely that you could make an informed choice.
So I had coffee with that guy behind those HomelessHotspots
Space exploration will inspire more children to become scientists and engineers. Space research grows the pie and hence you need not think that it is taking money from schools. Space research spending is rounding error compared to war spending anyway.
It takes an arbitrary PRF that is in practice virtually always SHA2, and practically always a well-known cryptographic hash function. If you're going to bank on a cryptographic primitive and you have a choice between "cipher" and "hash function", you pick "cipher".

Also, for lay developers, choosing a crypto construct for its modularity is like choosing a smoke detector because it allows you to use different radiological bits in it. You're not supposed to be messing with those bits. The whole point of the package is not to have random developers changing them.

Also, I want you to note something:

You pick AES not because it's a standard but because it's the product of a contest in which many of the world's best cryptographers competed to design the replacement to DES. That's not what PKCS standards are. A PKCS standard is simply something that survived a standards group discussion.
Given that he was 89, it sounds like he lived a long and full life.

I was expecting this to be the story of a guy who died young using his own product. I was glad to see that wasn't the case.
Cool. How does it turn the HTML into an actual jpg image?
Do you actually get projects from the Hacker News Contractors spreadsheet?
I'm just curious. I'm thinking about deleting my entry to not get spammed, and to not have too many inquiring minds know who I am. But if the list actually results in some freelance work, then I'd leave my name on it.
A very quick approximation seems to indicate it still isn't feasible. I saved 2 32x32 JPEGs using Gimp at quality 30. One is a cutout of a face from a photo, the other is random noise generated using the filter in Gimp. The resulting JPEG files were 427 bytes for the face, and 525 for completely random.

Now, I have no idea how much of that is the header. So, to help guess that, I saved a solid white 32px image with the same settings, and it was 164 bytes.

Worst case, generating every possible 427 byte file at one hundred per second, would take ~ 4.8×10^1008 × universe age (per http://www.wolframalpha.com/input/?i=2^%28427*8%29+%2F+100+p...)

Even if we figure all 164 bytes of the white file is header info, that leaves 263 bytes of image data in the face image, which would take ~ 5.4×10^613 × universe age. (Per http://www.wolframalpha.com/input/?i=2^%28263*8%29+%2F+100+p...)

If we got down to an 8 by 8 pixel black and white image, and generating 1 billion per second, it would still take 6 centuries. (per http://www.wolframalpha.com/input/?i=2^%288*8%29+%2F+1000000...)

So even a massively reduced version of the problem is still ridiculously impossible to explore.
Agreed. Malcolm is an author and entertainer. It would be a perilous decision to place his works on the same level as a peer-reviewed scientific journal.

I wish we could expect readers (particularly journalists) to ingest everything with an open and critical mind.
360 deg view of Space Shuttle Discovery's flight deck
Check for broken links on your website
Option 1: Rely on what everyone else does.

What happens if that method is flawed? You hear about it as soon as it's discovered and it gets fixed quick.

Option 2: Roll your own stack based on a personal understanding of cryptography.

What happens if that method is flawed? Perhaps only you and an attacker could possibly know such a thing. You have to be ever vigilant and you have to acquire an incredible amount of crypto knowledge. If you ever leave the company they are pretty much fucked from then on until whatever you wrote is replaced.

Don't roll your own system.
I wanted to just download it too and had the same feeling when confronted with the slider, but I don't want to pay for it as I don't know if I'd actually get around to reading it. My choice was just not to consume it at all rather than offend the author and out myself as a cheapskate by taking it for free.

Not sure if this is rational, but it's an interesting reaction.

I'd be interested to see stats comparing the bounce rate and revenues from this experiment to a) regular paid downloads, b) direct free download link with no slider.
Been reading his blog for a while and was wondering what he was up to. I'm wondering if they have plans for any social features--couchsurfing for startups. It'd be tricky as hell due to NDAs, but with referrals acting as the vetting it could create a whole new level of startup community.

Not knowing the logistics, maybe that's just too sticky an idea. Either way, it looks damn useful, especially with that in-house photographers part. CL photos are SKETCH.
I'd say that in 9 out of 10 GCC creates faster code than LLVM/Clang (I see typically 5-10% difference in performance oriented code), add to this that LLVM/Clang lacks strong special optimization strategies like PGO (profile guided optimization) then it's a clear win for GCC. GCC also supports more languages and architectures than Clang which simply mirrors the needs of Apple (ObjC, C, C++). If you are on OSX then yes, there's likely little reason for you to use GCC since OSX ships with a (5 year?) old GCC version and also obviously because Clang/LLVM integrates much better with Apple's proprietary XCode.

That said I use both, and at work we test our code against both toolchains (and some other compilers aswell). The static analyser in Clang is a welcome addition and the error diagnostics/reporting is top notch so it certainly has strong features even though it falls behind GCC in code optimization.
Go isn't failing. It's actually doing quite well. I disagree with the design and implementation of almost every part of the language, but credit where credit is due: Google has created a language that a lot of people like.
1. Sorry my bad! I will take care of it next time.
2. Hopefully in near future..;)
One of our founders left with 5% equity vested -- fundraising red flag?
We're looking to fundraise and don't want this to be a red flag, but we don't want to screw him over. Suggestions?

The team is fine with his current equity position, but this could look bad to investors. He also put in $10k to support company costs and a year of work. He's a good guy, but there wasn't a full-time role for him any more. Is there a way to leave him with a solid stake while not raising concerns when fundraising? Thanks all.
Interesting coincidence. Just found this library at around lunchtime today after having meddled with VideoJS and OSM Player. While VideoJS seems to have the fastest setup time, its the least flexibile and i couldnt even get OSM working. I found jPlayer to be the more robust and flexible. Seems like they've thought of pretty much everything. Its like the jQuery of media playback. Im expecting to use this a lot more in the long term.
Scala: Sink or Swim? Part 1
This makes PBKDFs
very di fferent than the general-purpose KDFs studied here. In particular, while passwords can be
modeled as a source of keying material, this source has too little entropy to meaningfully apply
our extractor approach except when modeling the hash function as a random oracle. Also the
slowing-down approach of PBKDFs is undesirable for non-password settings
See p. 3 here http://www.tarsnap.com/scrypt/scrypt.pdf
After lieing the way he did he finishes by talking about honesty? Seriously? I wonder how much he made off of this whole debacle, I doubt that he did it for free out of the kindness of his heart and to bring these "terrible things to light". I have the same issue with Michael Moore and "Sicko" what he showed about the Cuban healthcare system was a lie/fabrication I know because my wife lived there until 2005 when she was granted her American residency. Always look for the agenda before you believe something like this, trust but verify.
wooooo tell us how you really feel about Toyota's goofy advert
I have the korean QSENN DT-35 keyboard. The first time I opened up the cmd, I couldn't find the '\' and had to click random keys until I found the ₩ key :-D
not sarcasm folks--unless people dont like green solutions???
And none of them link directly to NSFW reddits.
just try reloading the page on your browser after pairing and it did work for me!
Uh oh. I remember when Microsoft announced a similar program. That really kicked off the malaise that MSFT's in now.
Which has a lot more to do with learning how to learn another language.
I assumed everyone understood that the monologue was part fabrication. It fit together so well that it couldn't have happened as it was told. Frankly i'm surprised at the outrage. I thought it was masterful storytelling that pointed out a genuine problem. I don't care if it's not 100% factual.
Yeah I'm aware. My point is that they obviously aren't too bullish on cash if they are offloading $45 billion of it.
I have no idea how golden parachutes relate to a discussion of dividends vs. stock buybacks. Enlighten me?
It would be really funny (in a bad way) when we'll discover that a law that we use with the intent to "further progress", actually does the opposite and hinders it.

Unfortunately this won't happen unless the patent law goes to the Supreme Court over this or a bunch of companies lobby Congress with hard data showing them that patents hinder progress.
"Cargo-cult numerology"? It's a fun excuse to eat pie. Most semi-educated people have an idea what pi is, and can easily make the connection.
Check out these 892 unique ways to partition a 3x4 grid
One of the unfortunate aspects of this episode is that, as Daisey says, the problems he discusses are mostly real. He didn't have to lie.

For example, he could have talked about the N-Hexane poisoning without lying. He could have cited news reports, or traveled to interview people, or done it over the phone, or even gotten the info from secondhand interviews. He could have said "imagine a man who..." and proceeded to paint a painful picture based on the facts that were already public.

But he didn't. He chose to pretend he had met these people. He would say that made the story more emotionally impactful, and maybe that's true. But it also poisoned it. It was a very condescending move to pull on his audiences; there is neither artistic nor factual integrity in it.

If he had stuck to the facts, he would still have had a great performance. Too bad.
Show HN: A small idea. Thoughtprocess : Twitter for your project.
sorry for that, it is just my blog. Shameless self-promotion :-(
"... and finishing the episode with audio pulled out of context from my performance was masterful."

As apologies go, a raised middle finger on the way out the door would convey the same sentiment less disingenously.
http://stackoverflow.com/questions/934012/get-image-data-in-...

An important caveat is if you have any images in the canvas, they should be hosted on the same domain or you have to resort to CORS workarounds http://en.wikipedia.org/wiki/Cross-origin_resource_sharing
Yes, you can always install a .apk file directly via download, though there are a few steps to the process (turn on "developer mode" or whatever, then find the unassociated downloaded file and launch it). Amazon seems to be making it work with their market app though, so it's probably not insurmountable.

But no, I wouldn't consider that a "best" of the two worlds. Adult sites like reddit mix "clean" content and NSFW stuff all the time, and dumping them in an unsupported bin isn't likely to make anyone happy. If there's a curation step, there also needs to be a opt-in for people who don't mind the occasional nudity with their geek news.
Study Shows Free Games Use Loads of Battery
In short, protect your device from physical access by untrusted people, and don't connect it to untrusted machines. Use a PIN or device password just in case someone else does get ahold of your device.
> No. This is incorrect. This is exactly the right attitude for most developers to have about cryptography, because on a subject as complex as cryptography most developers (including me!) are nowhere near smart enough to understand the ins and outs.

I hear that a lot, and it always reminds me of Jante Law[1]. Its a disservice to keep telling people that they are too stupid to understand something. Too ignorant, perhaps - that can be remedied - but everyone is not too stupid to understand crypto. It's simply another field, mostly mathematical, and goof-ups are easy to make and often very costly.

edit: I should also make another point. Cryptography is exactingly and excruciatingly hard to do at industrial strength. I am not recommending people go out and roll their own crypto for production systems. It's possible for the initiated to do right; it's possible to get initiated. The uninitiated almost certainly will goof. I'd like to further point out [2], which is a discussion and break on a homebrew crypto, for a taste of the difficulties and mathematical sophistication needed.

[1] http://en.wikipedia.org/wiki/Jante_Law

[2]http://phrack.org/issues.html?issue=64&id=10#article
A quote from JangoSteve that really resonates with me: "There are ways your users tell you your product is too cheap, without actually having to tell you. One good indicator is when you have a lot of people signing up, and then not using it, in which case your product is so underpriced that it attracts indifference."

Our product attracts a lot of indifference. This is good in the short-term (free money), but ultimately we don't get to provide the value we want to provide, garner feedback from their regular usage, and they also eventually cancel and not even switch to a competitor.
To be honest, if anybody breaks into your web application it is very unlikely to be because they broke any encryption. SQL injection or man in the middle type attacks are far far more likely.

What you need out of an encryption package is in the event of being tested for PCI compliance or any legal liability investigation into a breach. You need to be able to say "all of our encryption is done with bcrypt , it's the industry standard an complies with X Y and Z".
Good to know. I'll have to consider switching away from Underscore's sort, which is probably equally slow.

By the way, quicksort.js is code you wrote, right? I assume that's too nice and concise to be from the Dart generator...
Couldn't each artist copyright their individual performance though?

I know that wouldn't make a difference here, just a tangential question.
Data Breach Remains a Hot Story
One of the worst features… forces you to force-quit.
This is great. Do any HN'lers plan on going?
(This is written from an American perspective, and reposted from elsewhere - but I think it fits.)

For much of my life, when we spend money on space, we get not-space.

For the money we spent on the X-30, X-33, X-34, and X-38, when Dan Goldin was NASA administrator, what did we get? Not-space. (At least the X-37 is up there spyingflying.)

The orbital space plane program, the one that was Sean O'Keefe's thing - neat plans, more capsules than planes IIRC, but ultimately we got not-space from it.

The Vision for Space Exploration, under Michael Griffin? Rocket designs that were approximately equivalent to throwing your astronauts into a paint mixer. A system about which the review panel said that "If they gave us the system on a silver platter, the first thing we'd have to do is cancel it, because we couldn't afford the ongoing costs." A lot of money, a launch pad rusting in the Florida weather, and a whole lot of not-space.

And for all the money we spend on human spaceflight, we now send Astronauts up as passengers in Soyuz rockets.

Now we're spending $18 billion dollars - figure subject to change, always upward - to build the SLS - the Senate Launch System. (Another estimate has it at $40B for development and the first 4 flights.) If all things go as planned, it will launch once every two years, launching an unmanned trip around the moon in 2017 and a manned trip to the moon in 2019. Schedule subject to change - always slipping.

Does anyone thing that SLS has a chance of working? Or is it just going to become another not-space program?

How about the replacement for the Hubble Space Telescope, the Webb Space Telescope? In 1997, it was going to be launched in 2007, and it was going to have cost 500 million dollars. Now we've spent 3.5 billion on it, and it will launch in 2018. Maybe. That's a ton of money to spend on not-space - and it's money that's been taken away from the moderately successful bits of NASA, like the Mars program, which doesn't have a mission in it after 2013's MAVEN.

I don't mind spending money on space. I like space. I've been following the MER rovers for nearly a decade. I think COTS and Commercial Crew are brilliant, and hope that they will continue to exist with a program structure that rewards results, rather than existence. Commercial space is the last best hope to get a domestic space capability.

But times are tight. We're massively overspending as is - borrowing tons of money our grandchildren will still be paying back. So increased spending is far from free.

Is it worth it? I say yes. Spend money on space. Where do we get that money? Let's stop spending it on not-space, like we have been.
Team discovers how bacteria resist a 'Trojan horse' antibiotic
These are all valid criticisms. Apologies for using "cipher" where I meant "algorithm"
I think the effectiveness of lectures might depend on the student as much as the lecturer.

I can remember some lectures (6-10 years ago) and their content quite vividly, even if they were fairly unidirectional and to large audiences. I find that if I start looking up something that was explained in a lecture, it will trigger the memory of the lecture, even if I couldn't recall it previously. This almost never happens for things I learned from books or the internet - if I've forgotten them, I have to relearn them. It also seems to take me much longer to understand something from a written explanation.[1]

I can only assume it's to do with multi-sensory input having easier access to long-term memory. And maybe there's an emotional element, too: reading a (factual) book is an emotionally neutral experience. That's not the case when you're watching and listening to a human.

And I'm sure the effect is more pronounced in some than in others. Many other students in my year did very well despite missing lots of lectures; I think I missed about 5 of what must have been about 2000 and would have needed to do vastly more revision to pass exams. I suspect I would have dropped out of university if it hadn't been for lectures. As it turns out, I had essentially zero intrinsic passion for my subject (physics), but the good lecturers made it interesting.

[1] I realise this is anecdotal and hard to verify. The most direct comparison I can think of is this: I remember that when trying to catch up after a lecture I missed, it took me much longer than the 50 minutes to understand the covered subject matter using the blackboard notes and reference books.
Putting the I in Story