skysight-inc/HackerNews huggingface dataset:
I can recommend the book "The Time-traveller's Guide to Medieval England" - it mentions the amount of military training that both knights and commoners were expected to perform. Basically a knight was trained from a very early age to fight - no way would an average 21st century male be able to compete in skill or strength.

Even for commeners they were still often legally required to spend a significant amount of time working on their marshal skills - mainly archery.

http://www.amazon.com/Time-Travelers-Guide-Medieval-England/...

e.g. Here in Scotland there was a time that games like golf and football were officially banned as they were seen to distract men away from military training for the wars with England.
Per HackerNews' guidelines (http://ycombinator.com/newsguidelines.html): "anything that gratifies one's intellectual curiosity." There's plenty of news on HN that's not directly related to the tech industry.

I thought the article fairly interesting in expounding some of the themes in 'Prometheus', and at least for me, garnered some interesting discussions with friends
Yes I agree, but I couldn't find a comparative chart showing performance tests for all the depicted languages
Yeah if you ask questions that are way more advanced than the material being covered or the level of the other students, you probably were a net negative on the class. Class settings work only if everybody is at roughly the same level, so that you can all improve at the same rate. One person taking up a disproportional amount of time is being rather selfish, which is generally regarded as a negative thing in most circumstances.
You can compare success versus failure.

Success: check authentication, process data, commit, return 2xx status.

Failure: check authentication, return 4xx status.

The reason that you don't get any information from the difference in timing between the two branches is because you already get that information from the status code.

Now on the other hand, if you use naive string comparison, different failure branches will take different amounts of time. That is a security hole, and it's not what we're talking about here.
"Can Java Web Servers give me the same features of an evented/non-blocking I/O? Answer: Nope"

I wonder if OP knows about Jetty, which seems to be exactly this.
Falling Skies Season 2
Falling Skies Season 2
http://huntto.com/falling-skies-season-2 Falling Skies Season 2 nvades a lot of our window screens for just a further summer season via Next month
The software team I work with moved to Python two or three years ago and has found it to be fairly stellar at meeting the specific challenges we face.
Fair enough, could've been posted later. I just found the article intriguing and a good basis for some interesting discussions I had with friends after watching the film
Or frameworks such as Play!, which use Akka on the backend.
not even listing IE and Firefox hehe.
Fencing has only a few moves so people don't know the game won't enjoy it as much as a spectator. But it's an extreme competitive sport. As with any competitive sport, it's lots of fun for the participants.
NSF Petaflop Supercomputer Begins Science Journey
A little redundancy is a good thing. It compensates for the randomness with which many posts fall through the cracks. This article is an example. It's interesting and surprising (surprised me, at least) and deserves a discussion. Had it got one the first time around I wouldn't have reposted it.

It has fallen through the cracks again though (edit: or so it seemed). Perhaps somebody else will figure out how to repost it in a few days :)
How and why Amazon get into the cloud computing business
Thank you for speaking up. Just as it's crucial that women not be silent when being excluded from tech, it's just as (if not more) imperative we hear that you're not feeling discriminated against. Especially when there is a rallying cry from men saying that you should be, or that we should hold Microsoft responsible for this great sexist faux pas.

This community is overcorrecting in a bad way and starting to identify sexism where it isn't. Usually, women don't correct this assumption. Please keep doing so. I hate that the definition of the word "sexist" is starting to evolve to mean "offensive".
Best answer to any question like this is "use the right tool for the job."

In the case of Java and Python, Java is quite clearly better suited to large strategic code such as core systems, whilst Python on the other hand is ideal for quick, often rewritten and short lived applications (e.g 1-3 years life)

as there are many accounts of startups rebuilding their platforms 1-2 years in, i'd suggest theres a good business case for using lean and quick technologies within the first few years, whilst your innovating and learning your business
Spain requests bailout to save banks
Here is something interesting, TLS Version 1.2 has been the required standard for protection by the US Government since December 2010 due to no longer allowing MD5 to be used in certain cases.

https://blogs.oracle.com/xuelei/entry/tls_and_nist_s_policy

This has actually been interesting for those of us in the government sector since TLS 1.2 for example is not yet supported by so many different libraries/clients that I know of people having to get exceptions for their products to still be deployed in federal instances...
If Bezos loosened up control, there could be an EXCELLENT secondary market of colocation space directly connected to AWS in all zones. The Mall next to the Mall, still makes the Mall the main attraction. Give me 10GE, infiniband, etc out the back door of an AWS data center and I will give u the world!
"Basically the unix bits are (far) less resource hungry than Photoshop.."

I had never thought of it that way round!
Java if you're selling into banks or other Enterprise, otherwise Python for expressiveness, tools and sanity. Much of what gets done is going to happen in the database anyway ...
not to mention ctrl+click does the same in visual studio with productivity power tools plugin.
"Sexism" and "creepiness" are not synonyms of each other.
Yay. Here we go again.

> Development: Java will take 2-3 times more lines of code to implement the business features.

That will be true most of the times. Also consider that a good part is Java boilerplate(getters-setters, anonymous classes where you should have lambdas, everything inside a class), and some of it is just bad programming.

Peter Norwig's spell corrector in Python:
http://norvig.com/spell-correct.html

In Java:
http://raelcunha.com/spell-correct.php

> Deployment: Slower Deployment Cycles.(hence slower iteration).

Errrmmm, how is that property of Java? Deploy it as often as you want. How is Java stopping you?

> Concurrency: Can Java Web Servers(e.g Tomcat Apache) handle high level of concurrency? Answer: Debatable

Answer - My memory might be playing tricks on me, but I remember a few years back tomcat was a reference implementation, and wasn't to be used for production deployments. Currently, the http://tomcat.apache.org/ homepage claims Apache Tomcat powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations, so I might be wrong. But that's not important - what's important is you have jetty, netty and other options which are pretty fast in practice.

> Node.js,Twisted : Can Java Web Servers give me the same features of an evented/non-blocking I/O? Answer: Nope

Nio? Mina? Netty?

> Python is slow in execution.

Python is slow when it comes to raw CPU. If your app is CPU constrained, either write C extensions or divide work between computation units. Most of the apps are IO constrained, and you can use gevent or equivalent to make it faster.
"Punching himself in the head"?

FWIW, I don't think the author is a native speaker of English, and may mean something closer to "facepalm" than "beating the shit out of himself".
The previous submission also never showed up in my RSS reader.
I e-mailed visa about something similar with their new upcoming V.me service. They suggest that you use md5 to generate the tag which is known to be weaker than SHA-1. I was a little surprised that a company like Visa would mess up on crypto and not know to use HMAC instead of just a simple hash. Never heard a response from them either.

Here's what their documentation says:

Language	Standard Syntax for Generating MD5 Hash
Java	import org.apache.commons.codec.digest.*;
hash = DigestUtils.md5Hex(string1+string2+string3...);
PHP	$hash = md5($string1.$string2.$string3...);
Ruby	require 'digest/md5'
hash = Digest::MD5.hexdigest(string1+string2+string3...)
Python	import md5
hash = md5.new(string1+string2+string3...)
I never said I was against all taxes. The government needs to pay for the services it provides. I do believe the government needs to limit its spending.

I am concerned at what points we tax, and eating the seed corn is not a good thing. We need capital to fund business creation and expansion. Fairness is secondary to people being able to find jobs and having opportunity. Our tax system is so badly screwed up because everyone needs their exception or rule as opposed to looking at where we need to tax and how to make it simple and sustainable.

"I would take economic stability over growth any day. It is commonly accepted that taxes prevent the overheating of an economy by absorbing capital that would otherwise be directed towards superfluous investments."

I would need to see some information on this, as it makes some rather large assumptions about the government's use of the money.
The issue with any of these devices has nothing to do with tech and everything to do with the entertainment industry. The sad reality of where we are at with content producers leaves the consumer hunting around between any number of sources to find the show / film they are looking for, only to find that often it isn't available in their region. Using a purpose-built media device only compounds the issue because the manufacturer may or may not have struck the necessary deals to provide access to the particular service that is offering the particular show that the consumer wants to watch.

For a consumer who wants to 'cut the cord' on cable, the best option is still a PC-based solution because you don't have to even worry about compatibility with Netflix, Amazon, Hulu, itunes, youtube or the dozens of networks who stream from their own video portals. Worst case, you have to pull something up in a web browser if the source isn't supported directly from your media center software of choice. With a closed box solution like Apple TV you are beholden to the contracts and relationship that Apple has with those services, which are subject to change.
The Savannah Fund lays a pipe from East Africa to Silicon Valley
Well, if you have an internal collision hash(m1)=hash(m2) and both messages m1 and m2 are of the same size, then it seems that one would also get hash(m1|key|size) = hash(m2|key|size). So, I cannot really see how appending the size will help.

(All subject to optimistic assumptions about block sizes, etc.)
PC Repair Chicago-Managed Hosting-Video Production
Need Virtual Private Server Hosting? CMS Managed Service Provider in Chicago. Computer Repair for Home &amp; Business. Corporate Video Production &amp; Web Design Firm.
I just submitted something that I need doing - looking forward to seeing what you guys are capable of doing.

EDIT: One feature I would like to see is for you to have an automatic email confirmation of a submission, including the original submission body itself as a record of what was requested.
Very interesting, thanks for this :D
هل الورد اجمل هديه
Your point about padding and length bytes is spot-on. I actually left this out of the explanation, although it's interesting, because I felt it a useless diversion: something that's safe except in an easily describable subset of cases is still not fit for purpose when specially designed tools without these problems exist.

Point being, although hash functions might work most of the time, their general construction does not make them safe for this purpose. You can't say something is 'mostly secure' because it works 'most of the time'. The times is doesn't work will affect someone, and for them the system is not secure at all.

Plus, implementations with weird edge cases make for horrible debugging, especially when it comes to security.
If we exclude cultural differences, I think the most cringeworthy thing about this is its total misapprehension of the target audience. Of course, this includes assuming the entire crowd is male and loves nob gags; but if I was to have live music on for a bunch of developers, that is the last thing I would think of.

Enduring that travesty would be totally analogous to hitting up one of the UK's many tacky nightclubs that host an 'electro-house' (read: trance) night every Friday and have the same monotonic 'MC' drawling all over the track.

Maybe it's fine in Norway and they love that sort of thing, but I think it'd be very difficult to reconcile the developer and trance scenes elsewhere.
Fairly common story, buddies that were quitting school around 15 couldn't compute percentages, yet they did all kind of crazy calculation on the fly with their own non-regular currency unit system to sell drugs. I couldn't follow any of them.

More than motivation (indeed money is a strong one) they had a purpose and a concrete/tangible object to reason about. You can and will test your ideas otherwise you will experience failure. Nobody make mistakes twice when they sell.
For very marginal definitions of 'English speaking' only. By any such definition, Germany, all Scandinavian countries, Belgium and the Netherlands would be 'English speaking countries'.
It got tired after a few years.
This is also true for a plethora of sports games as well, specifically racquet based games. Swinging the racquet is less than half the battle -- footwork, in most physical types of activities, is much more important.

Omnidirectional treadmill? http://en.wikipedia.org/wiki/Omnidirectional_treadmill
I'm curious if the peripheral market as a whole is shrinking, with netbooks, smartphones and ipad-type devices being more prolific for daily computing? Are people less willing to but money into a better mouse for the home pc since they simply aren't using very often anymore?

It is a shame though, Logitech has made some of my favorite peripherals over the years. I wonder if they should have pivoted towards accessories for mobile devices a few years back?
Password leaks bigger than first thought
SChannel in Win7 supports TLS 1.1 and 1.2 but IE disables it by default.
Establishing connections in parallel to speed up HTTP
It's his responsibiity to make sure someone is watching it for him or to watch it himself, though. In the ideal case, someone would offer to watch it for him, but I'm guessing that didn't happen here.

That said, I do like the idea (suggested elsewhere) of pooling some money to get him a new one right away.
I saw nothing useful in that video. It seemed to be a Raspberry Pi powered by car voltage, and a trick display. Basically a computer that can be used in the car, but I already have one in my pocket.

Some text explaining why this is useful, and how this particular thing is being used, would be helpful.
I would limit the problem domain so that delegation is easier.

1) submit unit tests in format XYZ
2) tests pass
3) receive code

Generate high level reports off of submitted code (kloc, cyclomatic, whathavs).

Another one would be

Design the urls for a REST interface and the JSON responses, worker implements code to support REST using framework A/B/C.

Or, implement algorithm in paper FOO using Python, Julia or Ocaml, should be able to read this dataset...

It has to be fairly constrained or else it is hard to specify and complete projects. They should come back within the same order of magnitude that one would complete them in anyway w/o either party being overworked.

One could also, instead of money, implement it as a sort of quid-pro-quo, I see a simple task (for me) that I could knock out, this gives me credits to spend on other projects. Virtual currency of code.

Also, licensing is an issue. I wouldn't want to work on code I couldn't keep. This just seems wrong to me. The only way I am ok with it, is if the rates are really high and that doesn't seem amenable to a site like this.
> Two critiques of the article, however, would be the complete failure to mention the deflationary risks of bit coin. You may agree or disagree with whether that's a problem, but it is one of the biggest, most consistent criticisms of bit coin out there, and it seems a tiny bit negligent not to at least mention it.

One point to consider is, that there is a free competition between different cryptocurrencies. There already exists some more inflationary bitcoin clones, and probably more will come. The markets will choose the currency, which they think is the best for them.
Having fenced a wee bit in high school I was shocked to get to waive a claymore around - a ~1.5m long two-handed broadsword has a lot of inertia.
"Node.js,Twisted : Can Java Web Servers give me the same features of an evented/non-blocking I/O? Answer: Nope"

I eat my words. Fixed it on the post too.
.ng = Nigeria
HNCache in development
In this sense, every hash function is equally unsafe, even HMAC.
لماذا نتكبر على الاخرين.....
>Python is Slower.

Or use any of the JIT interpreters. Yes there is definitely scope for making it faster.
No, there's a lot wrong with _Applied Cryptography_, and those things have very little to do with the fact that AC writes about IDEA and not AES.

If you read _Practical Cryptography_, you don't need to read _Applied Cryptography_. AC is a book full of trivia, and of encyclopedia-style descriptions of random block ciphers with minimal attention given to the actual real-world attacks on implementations of those ciphers.

I strongly advise that you not waste time reading AC. If you're lucky, you can read it and just lose time; if you're unlucky --- and a lot of my clients have been --- you can find yourself having learned stuff you'll later need to unlearn.
would love to know the distribution of money donated. is it a bunch of "1 beer donations" or is it more of a power law?
Most medicines have already been obtained for him. He has friends and the foundation helping him in Argentina, the main thing is the laptop.
I think we have to define the reason behind your desire here: are you looking for relevant work experience for the function of procuring a job, or are you looking to educate yourself in that area so you can personally become better at it?

If it is the latter, I would suggest that you find some local organization or non-profit groups that you could become a board member of. Obviously a group that does project-oriented things would be best, but festivals, film festivals or groups that hold fund-raising activities are all good places to get your feet wet in terms of managing a project and leading teams of people. It can also be an excellent networking opportunity, and the right employers look at voluntarism as a big plus, especially if you can use it to demonstrate leadership skill. Who knows, there may even be some larger groups or not-for profits that could benefit from some IT skills as well.
HNSearch seems broken right now. Nothing recent that I'm searching for is coming up:

http://www.hnsearch.com/search#request/all&q=password...

http://www.hnsearch.com/search#request/all&q=bradbury...

http://www.hnsearch.com/search#request/all&q=patent&...
Another one could be generate skeleton sample applications. I am often trying to wire together a bunch of technologies and if someone built a 300-500 line toy sample app that I could take an extend this would go a long way.

Examples ...

Take d3.js and cubism.js, generating time series plots from data out of a postgres database using tornado or flask.

Use spring,jdbc template,jetty,redis,jackson,jersey to create a caching web server pulling data from postgres, caching into redis and returning JSON data. Use this sample schema and JSON payload for the sketch.
You seem to be saying that who you're around isn't of great importance. If so, I believe you should reconsider. If not, please clarify.
Idiomatic-css
In practice, attackers just guess the bit length of the message by writing the Ruby script that generates the 100 candidate messages at different expected bit lengths and feeding them to their fuzzer. The bit length issue is not a real one in practice.

In practice, length-extendable SHA-1 MAC functions are mechanically exploitable; they'll be discovered quickly by competent attackers who don't even have access to your source code, because attempts to break them require very little code and even less time.

It is a very, very bad idea to put off fixing a problem like this because you've been led to believe by someone on a message board that MD padding is going to be an obstacle to attackers. It isn't. The Flickr MAC break required MD padding, too; Thai and Juliano broke it just the same.
That was my thought as well. If I need to buy some fancy hardware and swing it around to play a game... I'll probably just go buy a practice foil and sign up for a class instead!
What are the alternatives to Sortfolio now that it's dying any day?
How about the best of both worlds (and more) - ocaml/haskell
Does the number of passwords in the hashed list matter in terms of how easy or hard they will be to crack? Does this have implications for a rainbow table-type attack?
That is definitely interesting, thanks for the link. Seems like a whole different sort of financial system than what we're used to in developed nations.
>Deployment

I need to compile the whole thing if I have to make even a tiny change. Therefore, deployment becomes an event. Events tend to be planned and managed, hence slower.
Your site generates me @7tags.com email addresses, but http://7tags.com says it's run by a domain reseller and that it's for sale. How come?
Hawala has been operating primarily for remittances to family back home for decades in the West.
Linaro doubles performance for Android ICS
The technical term for this is "concern troll".
Reminds my of the sci-fi story I read a long time ago about a guy who liked to take evening walks, and was harassed by the police because nobody walked anywhere anymore so he must have been up to no good, or mentally ill.
I've been researching and trying to plan out how this will all happen for about 5 years now, and it's amazing how far away we still are in many senses. Ponoko is a huge step forward, but I would love to work on making the "Napster of Forks".
Also there is Dark Messiah of Might and Magic in the First Person Sworder(?) range.

Not a very realistic game, but very enjoyable.
Hm... I get the color one, and the position one in theory... However, if you have a real-life video, how do you determine where the "center of the ball" is? How do you even define what an object is, what are it's edges, and in which direction did it move?
Well, you also missed that it was a marketing slogan, and from a single campaign at that.

Whereas Apple's focus of making simple computers/software for common people to use was a constant in their corporate story.
> The short answer is that a typical modern person (gamer or no) is much less fit than anybody from the age of melee weapons, let alone knights.

But I don't have smallpox. Or cholera. Or an iodine deficiency, because I live so far from the ocean.
Who are we kidding? It was definitely a 'he'.
How come you can put random ridiculous claims in contracts in yor USA without this having no legal power?

It seems to us from the outside that the legal system of USA no longer makes any sense. What is bad that USA forces other countries to copy its broken legal system.