skysight-inc/HackerNews huggingface dataset:
Why shouldn't the IV be available to the callers? How are you supposed to implement cryptography where this is not available so that you can send data from one source to another (such as encrypted using a private/public key system) so that they have the same IV for decryption.

Why shouldn't there be a choice to offer separate encryption from authentication?

How does interoperation with other libraries/platforms work. For example trying to interoperate with Java for Diffie Hellman has for instance meant using an library that does BER/DER and decoding the values ourselves because Java uses an older standard compared to the library we are using on the C++ side (Botan). We have to have the ability to manage keys ourselves. All the higher level abstractions create all kinds of issues because the choices made don't let us interoperate because they are different from what the next library chooses.
Prior to Lion, Cmd+D means "don't save" in the dialog. With Lion, it's Cmd+Backspace.
I don't recall ever hearing a viewer / user complain about what the developer called the thing. I also don't remember ever reading a blog where a start-up founder obsessed over it, although I'm sure there's been one or two that we never heard of.

Therefore, I simply don't think about it and typically just use "login". It's recognizable, it simple, and users know what to do with it. Everything else is simply keeping you away from the more important parts of your project. Just one man's opinion.
We heavily use elasticsearch as part of Kiln's infrastructure. We've actually found it to be an insanely useful tool: it scales extremely well, it's highly redundant, it's trivial to extend, and it is fast. We've managed to move every last bit of our search infrastructure (including source code), using over 100 million documents representing 182 GB of data, and we still get search times around 10 ms or less. It's so fast we've got an entirely new feature built around it coming out in the next few weeks. It's just that awesome.

The only downside we've hit with ES is poor documentation. In all other respects, if you need search, I can unconditionally recommend it.
Asynchronous Calls in C++ and the Continuation Monad
Between "Unfortunately, the domain was harder to come by than a tequila shot at an AA meeting" and "This is the digital version of “smoking him out” (like you would a rabbit in a hole, not a pothead in a dorm room)." I couldn't stop laughing.
Yeah I never found it very good either though the regular sublime has a lot of good stuff in it it is just hard to find and get used to. (Kind of like when you start using vi you don't do stuff the fastest way but the way you learned that can approximate it using x+i rather than c)

The best way I found to do it is to use the ctrl+shift+p (may be cmd+shift+p on mac) menu which has keybindings next to the names so you can find the keybinding if you forget it

You can do custom macros as well but those aren't seen in the menu but if you look for tutorials they are there, not quite the same as vi but workable.
Making your content viral
I'm sorry about the error, I'm wondering why you received it.

-Do you have more than a small number of Facebook friends? That might be it.
It's A Part-Time Gig; But A Full-Time Frustration
It seems some Facebook profiles aren't returning friends lists from Graph API. Working on it right now. Feel free to send me or Tony a message about it.
"[Rotator cuff tear] also commonly affects orchestra conductors, choral conductors, and drummers (due, again, to swinging motions)." - http://en.wikipedia.org/wiki/Rotator_cuff#Rotator_cuff_tear

I wonder if this could be a side effect of Leap. The motions required are not as violent as those of conductors, but then again there are finer/weaker muscles in our wrists/fingers that could be affected.
Me too.

I find it fascinating that pretty much every religion has a messiah theme. The big three of course, but also Buddhism, Hinduism, Taoism, and ancient religions like the Mayans and Persians.

It's such an out there idea - that of a saviour to return to impart perfection - but so prevalent that I'd love to see a more intellectual exploration of the topic.
I think that most people that bash OO fail to understand how to use it properly.

From my experience many are also pretty bad at doing ADTs in module based languages.

OO has quite a few powerful concepts, and not all languages that are OO based explore the same set of concepts.

This is why the best languages to work with, are the ones which offer multi-paradigms, allowing the developers to pick the best abstractions for each scenario.
Largest BitTorrent Trackers Go Offline in Protest
Isn't the title misleading?

- The guy wasn't domain squatting at all.

- They weren't Wedgies.com (they were Wedgi.es)

- They didn't sidestep him at all. They negotiated fairly.

If you like domain stories, check out Klouts.. (Which I actually prefered to this story). I kind of felt mislead after reading this artciel (albeit it was an enjoyable story).

http://techcrunch.com/2011/10/29/how-klout-got-klout-com/
The "Rich guy not made happy by wealth after all" story is so old that I am surprised anyone is still surprised by it. Every other novel they made me read in middle/high school had this as its message. I am very reluctant to use the term "smart" for anyone that runs into this problem.
Not sure you could get more narrow-minded than that. I'd suggest opening up your outlook a few millimeters and try to envision some of the zillions of ways this could be used. Here's a hint: you might not be sitting in front of a PC.
Exactly.

The other important point is that those terms are only "the same thing" to atheists. Non-religious and agnostics don't identify with atheists at all really.
Why would it be better in one of those languages?

I'd be very surprised if it was as easy to set up the problem in R or Macsyma. In those languages, you'd probably need to write loops to generate your constraints (but maybe I'm wrong, I'm no R-expert).

But I'd love to see code proving me wrong.
Oh wow that is really hilarious. The majority of application downloads from your network are worms, specifically the lilyjade worm (browser extension), which, once installed, spams peoples facebook to exploit pages where the extension is again installed and used for click-fraud.

Funny how it takes your team over two months for application takedowns. You're more than aware that a vast majority of you're users are from lilyjade variants. Now you're taking credit for malware downloads. Those aren't 100M users, they're 100M downloads. Stop hyping yourself up.

Further reading if anybody is interested:

[1]http://krebsonsecurity.com/2012/05/facebook-takes-aim-at-cro...
[2]http://www.exposedbotnets.com/2012/05/facebook-lily-systemma...
There's no free lunch; anything that can track a set perfectly is going to end up taking as much space as just maintaining it in a more straightforward way.

In the case of your specific suggestion, though, the problem is this: what if the bloom filter says "I've seen it (but could be lying)", and the "opposite" filter says "I've never seen it (but could be lying)"? Then you still have no idea whether the object is in the set.
Kontron KTT30 puts Tegra 3 on a miniITX board
Ask HN: $30 for 4 clicks on Reddit??
I think in practice most OO programs end up with two general kinds of classes. Some are more for data structures, e.g. User or Address classes, and others are more for functions like IOWriter or DAOs.

But there aren't strict dividing lines between these two types, you end up mixing and matching functions and data as you see fit to help organize things. So you might put state into your function classes, such as the DB connection in a DAO:

db = DBGetter.get("serverAddress;dbName;username;password;")
userDao = new UserDao(db)
User user = userDao.getUserById(123)

You might also end up putting functions in your data classes, but you might not. As an example, to calculate the distance between two addresses you could put the function in the Address class:

float miles = address1.distanceTo(address2)

Or you could create a DistanceCalculator class that mostly just holds functions:

float miles = distanceCalculator.distanceBetween(address1, address2)

There are pros and cons to either design, personally I would go with the second one, but the point is that you have a choice. OO provides a flexible framework and there are many ways to design your classes. That's why there are a bunch of books on OO patterns and best practices, to help design the structure of classes. You can even work in a very functional/stateless style if you want to.

What OO gives you are tools for organizing your code but you can organize in many ways, some ways that help and some that hinder. As others have said, it's just a tool.
AC is equivalent to a lot of things. There's a collection of them on the Wikipedia page.

http://en.wikipedia.org/wiki/Axiom_of_choice#Equivalents

Something I find pretty interesting is that some of these equivalences break down in weak systems.

http://www.math.uchicago.edu/~antonio/RM11/RM%20talks/mummer...
You've never been burned.

Hiring foreign employees is a lot different than hiring locals. Depending upon the country, sponsoring a visa can cost a lot of money and, more importantly, a lot of time. That lost time takes many forms. You'll have reams of paperwork. You may have interviews with immigration departments. You may need to find and/or furnish an apartment. You may need to spend weeks holding the new hire's hand after he arrives, teaching him how to deposit his checks in his new land, buy groceries, etc. And you may need to set your plan in motion months ahead of time to keep the organization running smoothly.

So when you invest all that time into bringing someone on board, and then they just quit shortly after arriving ("LOL broke up with gf seeyaltr"), it hurts. It hurts bad, for months, while you scramble to find someone else. And it's not the kind of mistake you make twice.

Without understanding exactly how it works in Denmark, I can nonetheless understand an employer's reluctance to subsidize a foreigner's love life.
It's also important to understand the perceived success of predictive analytics in the context of the problem being solved.

For example in predictive analytics used to determine product distribution at major retailers, the goal isn't to be perfect. The goal is to be a little bit better than what humans (or their previous methods) could do. If you go to Target management and prove that your predictive analytics is 3.3% better at predicting how many blenders they'll need in each of their stores, but that 3.3% netted them 5 million dollars, they'll sit up and listen.
RIP ‘7 Habits’ author Stephen Covey (dies at 79)
Except that to implement TLS for example you NEED to type OpenSSL into your code, and to set the allowed ciphers for the connection you need to type AES.

I agree with you that Keyczar is good to use for certain use cases, but that isn't always the case. Instead of always telling us to use Keyzcar how about showing us how to use the primitive libraries more correctly to have secure applications YET at the same time allow us developers to have the flexibility to use them as we need to use them for compatibility with other implementations or with government requirements (for those of us in the gov't contracting world).

You are in the unique position that you have seen all of the mistakes and know how to avoid them and thus could help developers avoid those mistakes as well.
Online surveys need to be "less boxer and more brief". Wedgies is doing a damn good job of solving that if you ask me.
> "He was wearing a helmet, which is good news."

Though the importance of your PSA still stands.
Kanji contain repeated elements ("radicals"), which form something of a graphical alphabet. Learning a new character's form is not too difficult then, you can identify that it's radicals A, B and C, in this kind of arrangement. Basically, it's neatly pre-chunked for memorisation.

The pronunciation of kanji is more difficult than their visual layout, and arguably where most of the burden is in Japanese. A single kanji can have pronunciations it's picked up from several periods in history. In practice, it just means that it might have a handful of different pronunciations in different contexts. Learning all these contexts takes time.
IOS 6 beta 3 now available to download for developers
I found it confusing because it was using capital letters when shift wasn't implied. So I'd hit shift to capitalize like it displayed and it'd be wrong.
Ok, yeah, I understand there is no simple answer here. Thanks for your clarifications earlier.
How would this change for example if instead of using just plain AES you use AES with a block cipher mode (CTR-BE/CBC/or others just no CBE)?
You would probably have to give people a unique address to send coins to, along with a corresponding secret code to use for their withdrawal.
I use both vim and emacs. It keeps things fun. One day I'm a vim hacker, the next - an emacs guru. It keeps things fresh and interesting.

Not enough money for apple products and don't need any.
The title is also misleading because it claims they "sidestepped" the owner. They did not sidestep the owner at all; they tracked him down and paid for the domain.Sidestepping would have been filing a complaint with ICANN about the lack of proper contact information. Which would have been cheaper and possibly quite effective.
Textmate: ⌘-[ for shifting left is "History > Back" in Safari and happens every time when it's the last shortcut in drill mode, which happened to me both times I tried.

Otherwise nice tool. I agree with the others about visual feedback. For Photoshop: Show the part of the palette you want instead of the name of the tool.
Yes I agree. That is pretty messed up. Specially for a production web server. I think if this is a vendor, I sure hope they get called on it by Apple. If this is Apple, well, I sure hope customers make sure Apple learns to develop secure .Net apps.
Darn, I was going to answer the blog's question:

What do you wish someone would make for you?

... with something like your observation. Ah well, that HN community is already on top of it.
Correlated.org limits you to the questions they ask every day. Wedgies is empowering it's users to ask whatever they want. Think about how many more data points that is.
Which little PC to buy? Quick comparison of Raspberry Pi & more
This is an appealing idea and it took me a moment to see why it wouldn't work (other than the part where you simply don't have enough information).

It's correct to say that the bloom filter will produce no false negatives and the OOABF will produce no false positives, so if your OOABF returns true or your bloom filter returns false then you know for sure whether you've seen the item before. The trouble happens when your OOABF returns false and your bloom filter returns true, in which case you might have seen it before.
Well if 95% of the population use a term to mean one thing, then arguing that no it really means something else doesn't get you anywhere.

And no, I'm not conflating those. In C++ and Java, classes are, among other things, namespaces. When you declare a method in a class, it ends up in that namespace. Where it is defined is unimportant.
Just look at the iframe source, you'll be able to see the link I posted.
The thing is, when the bloom filter returns "I've seen it", you still need to resort to the array that has the actual keys.

A good way to look at the problem is that you have N keys to store (because you cannot have false positives). So with N keys, if you want less than sizeof(N)*N bytes, the only real answer is compression. So either you just discard data (what the OP does), or find a clever way to compress things.

The benefit is that you're only testing for existence, so that gives you some leeway. For instance, suppose you are getting random 8-byte user IDs. You could store, say, 1M of them in a hashtable, then take those items, sort them, and store deltas. Instead of 8 bytes per item, you'd only need 44 bits on average (2^64/1M) to store the differences. I believe this is what the OP suggested at the end of the article.

So, it really depends on the key types, and the penalty for forgetting an item. At a really high penalty (say, something that needs to perform an ACID SQL transaction), maintaining a compressed block of IDs is rather attractive. Whereas, if it's just sending an extra write to a high-perf write store, maybe it doesn't matter, and the OPs quick forgetful array is useful.
Five Obamacare Myths
Hunch also did something like this... and sold for a pretty good amount. So perhaps, depending on how it's implemented, it may meet some folks' needs.
The article is just a paraphrase from the "referenced" article on 9to5Mac: http://9to5mac.com/2012/07/15/apple-store-overnights-happeni.... Better give them the credit by reading and linking their article instead.
What is Media Manipulation?--A Definition and Explanation
Patent was http://www.google.com/patents/US6970917

What I find most concerning about this is that the -idea- of responding to control messages sent via special e-mails was deemed worthy of $8 per unit. The end company doesn't get enough $s per unit to value individual ideas this highly. Even if I were willing to grant that this is an idea deserving of patent protection, and even if I was willing to consider $0 to go from the idea to a functioning implementation, there are definitely hundreds, probably thousands, perhaps even millions of ideas of this complexity involved in this one product. Individual devices would have to be priced like airplanes if this is deemed a reasonable price for each individual detail of how it works.
First rule of contracting: The client's emergency is not your emergency unless they're explicitly paying you to deal with it right now.
Well, the interview with the scientist from HP clearly states software would have to written very differently to make full use of this technology. So I want to see how that works. You seem to know a lot more about it, so what am I missing?
Sadly not - instead you'd get disagreement from the two structures, with no way to resolve it.

If the bloom filter says 'yes I've seen it!', and the opposite filter says 'nope, not here', which is accurate? You know it's either a false-positive from the bloom filter or it a false-negative from the opposite filter, but that's the limit of your information. Effectively, you've partitioned your set into three: [definitely not, ambiguous, definitely seen].

If you want to know 100% of the items you've stored with full fidelity, you need to store information for all of them (e.g. in a hash table). Which is a valid thing to do, but requires a lot more memory than the author of this article was willing to use.
I don't understand why we are making handcuff with keys. Wouldn't it be better to have cuffs that lock but can't be unlocked. The only way to get them off would be to destroy them. Think zip ties that are structurally stronger.

Maybe the destruction method would be something like UV light to melt the cuffs.

Is it so important that we have re-usable cuffs?
From the article: "They were insular and struggled with intimacy, but they did believe in restraint, reticence and service."

Its been my experience that people who believe in service, which is to say they believe they are there to serve the organization/community/nation in order to help it achieve its goals, are the people who make great institutions.

People who believe in wealth acquisition and power make corrupt institutions.

The former live to empower everyone else, the latter live to dis-empower everyone else.
Four Weeks to Apply for the 2013 Knight/Mozilla Open News Fellowship
The use of ORMs should/does eliminate the need to write any of the data structure classes. They still exist but they're automatically generated and updated. And the use of your second implementation allows you to separate your state from your business logic.
Very cool idea. Excited about the possibilities here!

Wish there was more meat to this post though...nothing but the wireframe of what you did to get there.
Seems rather pointless. If a command is useful, you'll get muscle memory from actually using it.
Fair enough, although, I think a procedure change and a "transfer authority" function could easily cover this. The transfer function would basically be: original cuffer presses the transfer button, swipes his print, the receiver then swipes his print, and the transfer is done.

However, in a broader view, yeah, there are probably better ways than fingerprints handle keys once electronic locking mechanisms are introduced. Probably something akin to a 2-factor cryptographic mechanism.
One entry missing:

I won't make use of programming languages that make it easy to do security exploits
Chalkable Launching App-store and eLearning Platform for US Schools
My bad... I don't have any friends in this Facebook account.
Worse, it's a frame of a BGR article referencing a 9to5Mac article. This is quite bad.
They're lucky to have you as a friend. But the friendship started before they became wealthy, right? That way they'll never have to wonder if you're working some kind of long angle.
Facebook acquires Spool without company or assets
I experienced the exact same thing last time I was looking for a job. I had companies go completely silent, then contact me weeks after I had already accepted another position. With the dearth of available iOS developers in the valley right now, I don't know how these places hire anyone at all, let alone good devs.
Trello can now show you everything you're working on at once
You do know they'll use your suggestions as their playbook now, don't you? These days, the US Government seems to be using 1984 as their playbook, so why not this, too.
NZ judge in Kim Dotcom case calls US “the enemy” on IP policy
This is what we do with rootbuzz, and it works well.

You'll want to acquaint yourself with custom segments if you take this approach too.

custom segments (from the google knowledge base):

http://support.google.com/googleanalytics/bin/answer.py?hl=e...

this blog post does a better job of explaining how to use them though imho:

http://www.searchenginepeople.com/blog/monitor-seo-projects-...
This is a rather lazy argument I often see levied. It provides no real insight, and defends against everything equally. "Gotos are just a tool; On Error Resume Next is just a tool; null pointers are just a tool; etc."

That said, I think Joe's original article against OO was ill-informed (which is surprising, given his status), and this article rightly points out that Joe's arguments are bogus.

I don't think anyone disagrees that religious battles are stupid. But to sweep all discussion about tools under the "hey man, different tools for different jobs" just avoids critical thinking. If you don't want to participate in these discussions, don't. It's like a discussion on Windows Phone 7 UI, and someone comes along and says "lol, doesn't matter, Windows Phone 7 will never take off".
Hey man, the cold and the rain just makes you appreciate the summers :p
Yelp's Jeremy Stoppelman: a profile
Hopefully you enjoyed the "reticulating splines" error at the very least? :)
International Tourism + Social Networking + eHarmony.com = Triptrotting.com
This is useful. However, it is larger than a bloom filter, because a bloom filter needs one bit where this stores a value. I suspect that this asymmetry is unavoidable, but I can't prove it. Anyone?
Think zip ties that are structurally stronger.

Zip ties themselves are easily circumvented with a razor. If stronger, how much stronger? Do you need heavy-duty bolt cutters to get them off?

UV light to melt the cuffs.

Wouldn't a UV light source then be an easily-producible key?
Wow! I just started reading his book (http://www.amazon.com/Seven-Habits-Highly-Effective-People/d...) this weekend and was reading it at lunch less than an hour ago!

Sorry to hear, it's a great book.