skysight-inc/HackerNews huggingface dataset:
This is not an effective workaround. Without your suggestion, the length of encrypted packages is f(x), where x is the chosen plaintext, and f(x) happens to be smaller if x correctly guesses one character of the secret.

With your suggestion, the length of encrypted packages is f(x) + E, where E is a random variable (noise) that does not depend on x.

Because of that, an attacker simply has to repeat the attack sufficiently many times to gather statistics on package lengths until there is one value of x for which packages are clearly shorter on average than for the rest. This is very similar to the type of sampling you would do in a timing attack.

So your suggestion does make the attack slightly more complicated, but qualitatively, the system remains broken.
well, as pointed out in the article, this attack is most likely to be done if you are nation state, so you can see the packets, but the victim is using https so you can't watch it directly.
The most common (productive) change I've seen is a move to something that's closer to the pull/kanban/lean approaches.

For example a pattern I've seen a few times goes something like this:

* Teams get good at breaking down and estimating backlog items, they tend to all become the same "size" and need about the same amount of "work"

* Product Owners get good at prioritising the work so that the most valuable stories are at the top of the queue

* Dev team and product owner turn have a collaborative relationship rather than a boss-minions relationship.

* The combination of those three factors means that the planning meeting basically turns into "we do the next N stories" where N is the number of stories you get done every sprint. So the utility of this meeting disappears.

* The process of work flowing through the team starts resembling single-piece flow. Everybody works on the next most important thing.

* People start continually delivering, rather that just being able to deliver at the end of the sprint.

* The last two points mean the utility of breaking work into sprints kind of vanishes.

* Everybody notices that they're doing flow-ish things rather than batch sprint-ish things and starts looking to the lean / kanban world for ways to optimise the process further.
>> Add-ons can do a ton of damage, and you'd be amazed how many people click through the install warnings without thinking

That reminds me of the bit in 'Windows Vista Airlines' from 'If Operating Systems Ran The Airlines...'[1]:

"After answering yes to so many questions, you are punched in the face by some stranger who when he asked "Are you sure you want me to punch you in the face? Cancel or Allow?" you instinctively say "Allow"."

[1] http://www.tensionnot.com/jokes/operating_systems_and_airlin...
It will even become impossible to oppose as a contributor with a CLA installed.
Nutrition Science Initiative launched
Actually it's very good news.

It means that no single zealot or bad apple can stop the code from being used in ways the users want.

E.g like this Rémi Denis-Courmont guy, a VLC contributor working for Nokia, killed the iOS VLC port for violating some GPL technicalities, despite the code being available, the users wanting it, and the team porting it to iOS for free.

And you still get GPL with their MIT licence: "The Foundation confirms that with the MIT licence, if someone desires GPL licensing, they are free to make changes and re-license it under the GPL."
This is close to being a direct channel to my brain. Perfect!
Everything you need to know about the nano-SIM in iPhone 5
AppScale (http://appscale.cs.ucsb.edu) or Typhoonae (http://code.google.com/p/typhoonae/)
Something that immediately springs to mind would be guided tours. EG walking round, say, Pompeii/Arlington Cemetery/The Pyramids and having audio notes/lectures appear on the spot you are standing at.

Maybe a framework that lets people implement that as a service/app for their particular site?
Quicklisp is still just a layer on top of ASDF. It's still there, you just don't have to deal with it as much.
The best undergraduate project I ever did was one where we had to design and simulate a 4 bit microprocessor (this was 1991). Whilst it pulled together strands of our analogue and digital electronics classes the biggest impact was on my software development. It brought the programmers model of a CPU completely to life and stuff that I knew I now Knew. I became a pretty mean C programmer (even if say so myself) because of this.

How far you go down the rabbit hole depends of how much of this supporting knowledge you need to work at the level you work. Given the layers of software abstraction that exist in systems these days is it really necessary for a programmer to have a detailed knowledge of how a transistor works? Not at all. Your much better spending the time building a mental model of how your VM or OS layer is working and going to interpret the code you write. Or even looking up and understanding the layers that will use what you write - like users and customers (now there is a real challenge!) For sure take an interest in all things, but as you go down the layers your thinking can be increasingly abstract and like any model, plain wrong and it won't really matter.
How about padding to a multiple of X bytes?
IOS6: identifierForAdvertising silently removed from API?
Hi everybody,

we've been preparing our SDKs and systems for iOS 6 in anticipation of the final new identifierForAdvertising to take over the advertising world and were completely surprised to see the interface silently removed from both the final specs and the xCode Beta Documentation. Can anyone confirm? What's going on here?

Best,

Dominik
I wish they would add softkey support and toro support for the Galaxy Nexus. I'd love to try a build out.
Nvidia  Performance: Windows 7 vs. Ubuntu Linux 12.10
>* But the iPhone is the best trick in their bag. And in the last few years, some people have gotten sick of seeing it.*

Some people or some journalists/nerds? Because the numbers surely don't point to people liking it any less, actually quite the contrary.
Definitely. I can't see everybody having one of those in a year or two.
I think the "Jobs path to success" is largely misunderstood in that there is an assumption that anyone can mimic Jobs and achieve success. The problem with this line of thinking is that while it is true Job didn't rely on market research, the reason why he was able to do that he had an innate understanding of what people will like. You can't unfortunately teach that and without it, the "Jobs path" is a recipe for disaster.
I understand and agree with your point, as it is scientifically based. I remember seeing a great TED talk on the effect this is having.

But to play the Devil's advocate, if this person doesn't do this, wouldn't someone else? I mean, in a market with such a great demand, how can you ever detract users from this?

While we can both agree on the detriments this can have on people's lives, what can one person do to fix it? I know that not building this sort of site is a start, but you do have to understand that whether or not this person does this, the world will be roughly the exact same.

Censorship can't be the answer either, as that trades one negative aspect for another, and there's also good evidence to suggest that there are some good from porn sites (people in relationships stimulating it?).

Anyway, I guess what I'm asking is, how do we fix this problem, without trying to tell someone to avoid making money? Because that's not going to work IMO.
That was a bearhug? I was hoping he was going for a suplex :-)

Mr Van Duzer sounds like a cool guy though.

Also for me the .com is redirecting to the .org.
You did the right calculations. Often the XX% increase is barely sufficient to cover the mortgage / rent differential for a hypothetic move close to the new workplace.
I'm trying to stay motived to go the gym, so my last year or so of reading has been heavy on the testosterone - Lee Child, Stephen Hunter, Bernard Cornwell etc. I'm currently reading all the James Lee Burke Dave Robicheaux books back to back.
Introduction — An Introduction to libuv
It seems like PayPal is starting to realise the mistakes they have committed, and they are trying to rectify them.

Most importantly, PayPal know they are screwed. This reward isn't a reward, it's just an absurd incentive to prevent them losing their market share. This is just ridiculous, I don't see how liquidity of your funds is a a form of a reward, your funds should be liquid in the first place because it's your hard earned cash.
Yes, we live in a police state over here. Please send help.
I just noticed it redirects from sleep.io is all. It seems like while .com's are great, having something like sleep. whatever is pretty awesome. I was just curious as to why you chose one redirect over the other.
Streaming media could have larger carbon footprint than plastic discs
My initial thought was that this is a site for the upcoming RoboCop remake.
That's great. But um... I can't use NFC anywhere, and I sometimes like to use my phone when it's plugged into the charger.

So that's not such a great set of features for me. In fact, it's actually worse.
Censorship on porn is not going to do anything. I don't think it messes up your relation. In some cases it can even boost relationships.

And what if porn was censured? There would be a lot more crazy people on the streets.
Answer quickly: how many piano tuners are there in the city of Chicago?
I'm really in love with Boot2Gecko, it's the future
I'm not familiar with the specifics of legislation, but surely it must be pretty shoddy if companies are allowed to charge for adapters which are needed to make the phone comply with the rule?
then an attacker will pad it to be close the threshold of the multiplier. The difference between X multiples and X+1 multiples will still allow the attacker to determine the difference in compression size.
Are mobile mechanics a new thing in the US or is this different? Lubemobile here in Australia has been around for 30 years and I'm sure there are competitors.

Is it just the collation and quoting that's novel?
wow, this are really good news :)
Free trade deal to restrict Internet freedom
Just as a counter: I have also been using it for a few months, but I am not a transit user. I feel the routes have been great and it has been a big addition to my phone.
DTerm - A command line anywhere and everywhere
> I don’t know how Philips designed Compact Cassette, but if they were not purposedly user-centered, at least they had better luck.

If it wasn't luck, then Philips lost something along the way. In Dutch tech circles, Philips is infamous for continuously making exactly the fault that the RCA made in this article: too much invention, too little market research.
Internet freedom curtailed in new trade deal
Unlimited music from youtube videos (very alpha'ish)
I guess they will need to include the adapter with the phone here in EU, otherwise they can be in serious trouble with even a sales blockade by EU as one of the options.

Here is a FAQ about the Micro-USB from the European Commission:
http://ec.europa.eu/enterprise/sectors/rtte/chargers/questio...
> In short, Firefox OS is about taking the technologies behind the Web, like JavaScript, and using them to produce an entire mobile operating system. Just let that sink in for a moment — it's a mobile OS powered by JavaScript!

This kind of happened before: http://en.wikipedia.org/wiki/HP_webOS

What went wrong? Well, apparently[1] there were some big performance issues—and IIUC Gecko has some of those already.

[1]: http://www.slashgear.com/hp-ipad-2-webos-testing-double-touc...
3 hours later after I did some research this reply was extremely useful.Thanks.
I'm not an expert, but yeah, I'm fairly sure these will need to be included in the box for iPhones sold in Europe.

Off topic, but the Lightening connector has 8 copper strips, and it's a 9 pin connecter. Presumably, the outer metal strip is the 9th?

Does this adapter lessen the capabilities of the connector?

I mean, are their legitimate functional requirements that the 9-pin connector addresses beyong the capabilities of a micro-usb? I've seen a comment or two on blogs, but no explanation.
Good point. I should probably also let people choose their own tune for extra randomness.
And that is why designers should not be allowed to make websites. That thing is ultra-slow, not beautiful, billion pages scroll... dafuq.
Looks pretty but painfully slow in that demo video.
Conroy takes swipe at 'arrogant' Twitter
Scientists make water boil without bubbles
I've tried to visit http://thevanduzerfoundation.com/ but it actually redirects me to the old site
can you tie in SMS - avoid need to use mobile but still have a number?
I assume in the box you'll get a charging cable that has lightning at one end, and standard USB at the other, which then plugs into a USB charger.

The USB charger and cable are then reusable seperately.

That's what you get with the current iPhones anyway, and I believe Apple were one of the one's pushing for that to be acceptable under this law, even though it's not really complying with the spirit.
Facebook experiment boosts US voter turnout
Yes, the additional pins are for things like audio in/out & video out, making the Lightning connector more capable than microUSB alone. So this microUSB adaptor will be usable for charging only.

In terms of the legislation that's ok, as it only specifies a common charging format, not a common accessory connector format.
Doesn't the article you link to point our performance issues with the TouchPad _hardware_?
Watching Lit Motors presentation definitely gave me the
"I want one" face expression. I hope to see some of their vehicles on the street one day. The video in which their creation is being hit by a jeep was very impressive too.

Zumper gave a very good pitch too. They went straight to the point, showed a product that works well and solves the problem that I'm currently having. "Neighbourhood preview" is a great idea and I'm eager to see them starting it in London. Finding a good flat (browsing through all the scams and incomplete craiglisty ads) over there is a challenge!
WebOS had a proprietary Javascript SDK or something lame. Firefox OS runs on pure HTML5 standards.
No way, well, in fact I won't support IE until they launch IE10, the first IE that gives support to HTML5
If your project insists on copyright assignment (as the FSF does) then there's a single copyright owner and the project can make any licensing change it likes. Otherwise (assuming you don't manage to get explicit agreement from all previous contributors for their past changes) the only licensing term changes you can make are those which the previous license already permitted. For instance, many projects use a "GPL v2 or any later option" wording, which would allow them to later move to GPLv3 even though they had previously accepted contributions made when v3 didn't even exist.

In this case it looks like jQuery was previously dual-license MIT-and-GPL, so anybody who contributed to it was saying "you can use these changes under either MIT or GPL". That means it's entirely OK for the project to switch to "just MIT", because "MIT" was an option all those contributors were permitting already.
It's an interesting project, and I'm all for competition, but honestly I don't see the value proposition for an OEM to put this on a phone instead of Android. Rendering JavaScript faster is great, but does that really outweigh all the benefits of the Android ecosystem?
The attacker controls at least part of the body such that he can select the length of the message. If the attacker pads his guess such that the total message length is N X+1, then for a successful guess the message length is NX and for a non successful one (N+1) * X. You would need too give the message a random length independent of the body to make this attack unfeasibly.
TDD & ETVX - Can they be equated?
None of the adapters offered so far look like they're going to support use inside existing docks/devices -- the best you can do is the use the cable adapter and then sit the phone nearby.

On top of that, there isn't even a Lightning dock for sale from Apple!

This change seems badly thought out, and shaving a few mm from the overall device a poor justification for the massive expense and upheaval involved. When even hotel rooms have caught on to the popularity of the dock connector, changing it should have had better reasons.
> This kind of happened before: http://en.wikipedia.org/wiki/HP_webOS

Yeah, and I find the complete and utter lack of any mention of WebOS in TFA troubling.

> What went wrong? Well, apparently[1] there were some big performance issues

Your link points to insufficient hardware though, not software issues. Hardware which seems to have been the main recurring problem on all WebOS machines (according to reports, there were also issues with the software being shipped far too early for v1.0, against the wishes of the engineers working on it)
I have very little first-hand experience with Apple products, but based on the wording in the EU FAQ linked to above, that assumption is a bit strange.

Since the EU "understanding" specifies micro USB, i.e. the connector on the phone, your solution goes completely parallel to this requirement. I don't think it would be said to comply in that case, what if the users have chargers with fixed cables, terminating in micro USB plugs?

Then you can't just substitute the Apple cable.
That might matter for a cluster, but that's (obviously) not the target market for a Pi.

If you only have less than $100 to spend, a better $/FLOPS ratio of a MacBook (or anything else, really) doesn't matter. One is available, one is plainly not.

For people that CAN spend enough this usually is just a (third? nth?) gadget to play with. Like in the article (because, it's really just a neat way of playing with gadgets and lego, not 'useful' in any sense that can be quantified).
Can someone please fix the submission title, too? They should have time for the missing 'l' in "built", now.
And using gcc -S allows you to get a few extra annotations (variable names etc.) using the -fverbose-asm flag.
Depends on how the font is packaged.

If the font is packaged as a dataURI in CSS then browsers wait for the CSS to be downloaded before rendering the page to prevent FOUC
Thanks. Permit me another question, as my Google fu would surely fail me when trying to find the answer amongst the wash of 'its a money grab' 'Apple should just use micro-usb'.

Why was the original dock connector 13 pin, and why is 9 pin ok now?
"Just let that sink in for a moment — it's a mobile OS powered by JavaScript!"

Scary thought ;)
> WebOS had a proprietary Javascript SDK or something lame.

WebOS was straight webkit with additional APIs for telephony and hardware access, and a bundled framework to help with laying out.

Said framework having been extracted for regular in-browser JS[0]

> Firefox OS runs on pure HTML5 standards.

Firefox OS runs straight Gecko with additional APIs for telephony and hardware access, without a framework to help getting started.

It's the exact bloody fucking same thing.

[0] http://enyojs.com/
> Yes, the additional pins are for things like audio in/out & video out, making the Lightning connector more capable than microUSB alone

I don't think we know this yet, details on the Lightning connector specs are sparse, aside from it being "all-digital" and "adaptive".
I agree with schoash, I don't understand why would I want to share my to-dos, that would be a total invasion of my privacy
Well, considering that the same chipset (APQ8060) was also used in some variants of Galaxy S II, I really don't think so that Touchpad hardware was that bad.

And the fact that after installing Android 4.0.4 on it, it feels like whole new machine (speed-wise) - I really blame webOS here.
Instead of changing the old port with Lightning, they could've changed it to microUSB.
Ask HN: how to find out all hn comments that got more than x upvotes?
Is there any way to find out all hn comments that got more than x upvotes in last y number of days?

I saw that the community voted to get the comments votes displayed (http://news.ycombinator.com/item?id=2445039), though it doesn't seem to be in place yet.

Actually - I just found it:
- Most points in last 24 hours for all posts: http://www.hnsearch.com/search#request/all&q=+&sortby=points+desc&start=0&filter[fields][create_ts]=[NOW-24HOURS%20TO%20NOW]

- most points in last 24 hours for all comments:

I tried this but does not seem to work (best is 1 upvote):
http://www.hnsearch.com/search#request/comments&q=+&sortby=points+desc&start=0&filter[fields][create_ts]=[NOW-24HOURS%20TO%20NOW]
I think the only major advantage of Firefox OS is that it helps you run full HTML5 apps.

The apps are cached, auto-updated, and easy to code. They run on the phone and on the desktop alike. That's it. The only OS that really compares, is actually Chrome OS, except Chrome OS has not been ported or made to run on phone hardware.

If it's not fast enough, it will not work. If it is, it has a small chance of making a difference.
Uffff that seems a really hard market, you'll have to fight really strong, hope you have luck
It is. Sounds like a big waste of performance to me.
You'd be surprised, Mozilla is going to launch this with Telefonica next year in Brazil. That's happening.

We're also working with plenty of other partners to bring this to other areas, so there is definitely interest.

I think what appeals to them is the open, customisable nature. Also, remember that this isn't meant to compete with Android and iOS, it solves other problems beyond performance and feature-set.
How is an adapter a valid way to obey the law? The goal is that you don't have proprietary chargers in the box. i.e. the goal is the charger, not the phone.

If apple sells the phone with their charger, that has a proprietary interface that are not obeying the law, adapter or no adapter.

To obey the law the charger must have a microUSB connector on it, and they need to offer phones with no charger at a lower cost as an option.

The goal is to reduce waste, instead apple is increasing it with this adapter.
I agree I just put in notice at microsoft to do the same. I'll be making around 30-40k less from my current low six figure base salary. 40-55k if you take into account bonuses & stock.
This is what I was wondering about. You can do a heck of a lot of different things through a thunderbolt port. You don't need seperate copper pipes/pins for each function... It's not a miniature switchboard, with a bunch of tiny cables plugged into each pin.
This is nothing new.

Looking at BMGF (bill gates foundation) annual reports for 2010. Total assets: $37b. Grants: $2b (barely over 5% minimum mandated by law)

http://www.gatesfoundation.org/annualreport/Pages/annual-rep...
We have plenty of challenges to overcome but it's nothing that can't be fixed. We're fully aware of some of the frame-rate issues on the really low-end devices (like in the video) and are actively working on improving that (it's a main priority to get 60FPS).
You'd be surprised at how well JavaScript performs when allowed.
Except if, you know, microUSB specs don't cover everything they need the adapter to do.
Can anyone come up with a feasible reason why they haven't done this? Other than allow the connector to go in either way up, what advantages does Lightning provide?
Domain of working with C implies working with hardware and raw code - instructions that CPU executes. Same as working with JavaScript(in browser) suggests knowledge of how browsers parse HTML, generate DOM tree and subsequently render it.

When things go wrong it is useful to have knowledge of n-steps deep to immediately cut through ton of output and nail down a few places things seem to work not as expected.