skysight-inc/HackerNews huggingface dataset:
To expand a little, the NSA also required the initial permutation of plaintext bits. This was done before the first 16 rounds of DES, and looked like this:

58 50 42 34 26 18 10 2
60 52 44 36 28 20 12 4
62 54 46 38 30 22 14 6
64 56 48 40 32 24 16 8
57 49 41 33 25 17 9 1
59 51 43 35 27 19 11 3
61 53 45 37 29 21 13 5
63 55 47 39 31 23 15 7

Which meant "put the 58th bit of the plaintext into the first position, put the 50th bit into the second position, etc, and THEN run through the encryption algorithm."

At the time, it was totally unclear why you had rearrange the bits in this very exact way. After all, you were about to encrypt it (and obliterate any plaintext patterns) anyway. And would it be as strong if you started with the 57th bit, instead of the 58th? The whole thing seemed so arbitrary.

Now it's true that this is robust to differential cryptanalysis, but it's also true that these bit permutations significantly slow down software implentations of DES. But it's trivial to implement the initial permutation in hardware.

In the 1970s, the hardware required to crack DES costed $20,000,000 US dollars [1] (about $120 million in today's dollar [2]). The general tinfoil-theory at the time was that 1) only the NSA had the resources to build such a machine and 2) by forcing DES to use this initial permutation, the NSA was giving themselves a significant "head-start" over everybody else using software to crack DES.

[1]http://www.krapp.org/hydra/courses/analysis/3-DataEn.pdf (PDF)
[2]http://www.wolframalpha.com/input/?i=%2420%2C000%2C000+1970+...
The Kessler effect is supposed to take decades to make near Earth orbit unusable.

If your app survives that long, changing operating systems is a more pressing problem than the immanent destruction of GPS.
This is the best thing I have ever seen on HN. Kudos.
I use the Fitocracy iPhone app to keep track of the weight and number of reps for each exercise. It helps me push myself to get better. For example, if I deadlifted 300lbs for 5 reps last week, then this week I shoot for 305 x 5. I find that this type of tracking is the only reliable way to make progress. Plus, it's great motivation.
That's nice, but $500/week might get you two full-time programmers in India. Cost of living is a huge factor in determining programmer salary.
Scrollbars Through History
>Scoolteachers but not linguists is a very particular use of the word "stature".

I believe I implied linguists twice, once falling under the "etc" banner and once again in "authority figures". If you choose not to read that, I can't take the blame.
The most useful context to use FreeMind, in my experience, is when planning a project.
After weeks of discussions and meetings and specifications, it's difficult to remember all the details, nuances, and dependencies that simply need to get addressed before project completion. It's simply not professional to "forget" to address a legitimate, solvable issue raised offhand in a meeting 4 months ago. It's fine if the issue isn't solved, but at least it remains in the hopper and it is known.

Simple example:

Product
- Features I'm excited to work on
-- the new customer lookup workflow
-- the Google mapping API

- Features Customer has requested
-- bulk download and emailing of electrical schematics documents
-- text ripping of PDF invoice documents

Here's the kind of discussion that would ensue as a result of the above 6 nodes:
- How come only invoices need to have their text ripped? It's no more or less trouble to rip text from 1000 documents vs 1000000 documents.
Wouldn't it be a nice feature to impress the customer with fulltext fuzzy search of all their marketing and technical documents as well? I remember that conversation - one of the engineering people asked me whether this was possible a few months back.
Hmm, this sounds like a document management system. I'm trying to reinvent the wheel. This must have already been solved.

----

As a result of asking "why X for foo here, and not X for bar there", it's easy to be comprehensive and thorough. That is the secret sauce of FreeMind. If you organize the tasks and ideas sensibly, you can apply simple questions to analyze them and generate valuable ideas and ensure nothing is missing.

The second bit of secret sauce is: I have a deadline for end of week to demonstrate text ripping features of the accounting documents. But but but - the back of my mind is screaming - but that Google mapping API is really interesting and I bet I could get it done in less than ten minutes. How cool would be to map all their customer invoices on a map of the earth?
And it would be really nice to research an open source document management system.
And, and, it would be kind of neat to see if that system had a "bulk upload/download" feature - I mean, that sounds sensible enough?

All those questions/concerns/thoughts are unfocused, de-prioritized noise. I'm not getting anything accomplished and I'm in danger of getting even less accomplished if I follow any of those thoughts.

To combat this in FreeMind, I simply create another toplevel node called "Today's focus", drag the priorities into it from the other nodes, and then fold all the other nodes so that I don't become distracted.

... this, as evidenced by this sprawling post, still requires discipline to work. :)
Yeah, and using the lean startup method on a HN post like this is particularly deceiving (considering HN is usually for stuff that's been built).
It is only a 1k chunk. This sucks for chat-type applications (<1k per message) and slow apps.

Also, in that example, you can't use gzip. If I use a nginx+apache setup, I can do output flushing and gzip. I hope nginx fixes this issue.

*This affects php/fcgi.
For financial items you could use two factor authentication. Or if your service has something that can be done with a lower set of privileges you could use persona there and fall back to "more secure" methods for anything with financial effects or account changes.

The use case seems to be more for sites like twitter, hacker news, reddit, etc...
Right now I'm working on www.dolisted.com.

You enter things you have finished and it presents you with a graph of # of tasks/day with a summary of each day displayed as a tool-tip.

It is currently at the MVP stage, feel free to provide feedback.
I think it's rather an example of how the Judicial branch keeps the other branches in check. If the NSA had its way, they'd be able to listen in on every conversation you ever have, track every site you visit, record every communication you ever make. They would do the same for everyone internationally as well. The difference is that we have the Supreme Court protecting US citizens to some extent, so the NSA cannot legally wiretap your phone just for kicks, but the Supreme Court doesn't extend the same protection to citizens of other countries.
also the word "it" is missing from "Know what will cost you to acquire customers"
What is the self-hosted equivalent of this ? I have been struggling with this problem quite a bit.

I have a bunch of web apps which are quite a bit different - off the shelf forum software, wordpress, custom code, etc. - and I want to tie them all together using a single signon. What should I be using ? I distrust myself enough to know that I would prefer not rolling my own security protocol.

I know that there are solutions like Kerberos, etc. but is it really practical for a bunch of websites running on Rackspace + EC2 ?
how can i send a wap push?
Thus is the nature of a living language. Everyone has their own interpretation of how the language should be used, and it's up to everyone to find common ground in order to be understood. Debates, even inconsequential debates, are an integral part of understanding the words we assign arbitrary meaning to.
Things are hardly so absolute.

The United States Constitution is the highest law, and provides for different treatment of foreign and domestic matters, so your statement is obviously false even under the most broad interpretation of "the government".

The President/Executive (closest to what many other countries would consider "the government") is also limited in most matters by the laws passed by Congress, so even assuming domestic regulation of cryptography were Constitutional (and I don't personally believe it would be), if Congress has not passed a law giving the Executive the authority to regulate it, the Executive cannot do so.
My wife always rolls her eyes when I fill out forms with dates in YYYY-MM-DD (ISO 8601) format. I feel it's my duty to help in this small way to liberate people from crappy date formats. :)

For electronic record keeping, the benefits over the American standard of m/d/yy or the British standard of d/m/yy are plain.
using "fsck" is worse.
Agreed. As long as quality extends beyond technical / business skill sets to include communication and effective conflict negotiation.
You can already get a 7" android 4.0 tablet off aliexpress.com for $53, shipping included.
http://en.wikipedia.org/wiki/Business_method_patent
This story reminds me of an episode of the American TV show "Cheers", where the bar tender (Sam) was playing against an experienced player. However, since he wan't good at chess, he was cheating by having a computer play his moves, and having someone in another room give him directions over an earpiece. Inevitably, the computer crashed (or the earpiece failed, can't remember which), so he made a random move. This threw off his opponent, who over-analysed the situation, and ended up losing.

Now I'm wondering, which happened first -- that TV show episode, or the Kasparov game?
SEO Results: What To Expect Now and Later
The point is that the government may not have the authority to do X or to create a law to do X. They may have the ability, but the supreme court decides if the authority exists.
I don't get why I should pay for this service. I could just download and install pandoc for free on my system. Am I missing something?
Just some background info: The new contractor, Orascom [1], has been issued a licence to operate the North Korean 3G Network [2]. Orascom is both a telecommunications and a construction company.

I doubt that their plan is to use the hotel exclusively as a giant antenna, but it's not unlikely that finishing the facade was a political priority, while operating the hotel is not.

[1] http://en.wikipedia.org/wiki/Orascom_Group

[2] http://en.wikipedia.org/wiki/Ryugyong_Hotel#Construction_res...
> I believe I implied linguists twice

Tenuous. But we clearly disagree about what it is that linguists do. I go by this description:

> "Does linguistics tell people how to speak or write properly?

> No. Linguistics is descriptive, not prescriptive.

http://www.ling.upenn.edu/courses/ling001/prescription.html

which to my mind means that they do not "talk about proper grammar vs improper".
The last point is the best. I frequently step away from a project and take a shower or go for a walk to think about what I'm doing. Usually the problem is that I'm over complicating things and the answer will come as an "Ah-ha!" moment.

Conversely, I have to do something like read or watch a movie before bed to get my mind off of whatever project I'm working on or else I will lay awake thinking about it.
They've also said they're not terribly interested at doing very much hardware, and that they worry about Windows 8's usability as an OS.
Middleman looks great; Spar attempts to help on deployment as well as development. Excited to see folks building/using frameworks like these.
This link posted says they are looking to rename Personas to something different, but it doesn't look like its actually happened yet (or what it will be called). Given that the getpersonas.com website is still calling them Personas, I'd say the Personas name is still alive and well (and easily confused with the new Persona product)
Google Now Letting Creators Download Their Original (Source) YouTube Videos
Do a patent office search for "system and method" and you will discover that they certainly do qualify. There was a period where they did not, but then some appellate court suddenly decided they do and now you get what we have here.
No since what I do is pretty experimental side projects and fine to just use the persona end of things. Also I don't currently have anything public running right now myself (as it just entered beta so I won't release until v1.0).

If you haven't tried it out yet I encourage you to do so...it only took me 30 minutes to get up and running the first time around.
It's targeted at people using a cloud provider like Heroku or Appfog, who want to use pandoc but can't install 2-3gb of software along with their app.
I don't do triathlons because of the time commitment involved. I'm training for a marathon and that's a big enough commitment.

I still think the best way to learn to be an entrepreneur is to be an entrepreneur.

If you enjoy a specific sport or activity, enjoy it for it's own merits. Rarely do things like marathons or Ironman or sports make sense just as ways to keep in shape - unless that's the only thing that will motivate you.

So what I am saying is that sports are great on their own, no need to justify them by assuming they "build character" in other parts of your life.

My guess is that success-oriented people do triathlons, not that triathlons produce success-oriented people.
If you had a browser, say Opera, with native support for the BrowserID protocol, then you would not see login.persona.org. No requests would be made to a Mozilla server.

login.persona.org is two things:

1) A JavaScript shim for cross platform support (Opera + BrowserID support would avoid this)

2) A Fallback Identity provider (eyedee.me avoids this)
When are the specifics of this being announced?
I started surfing about a year ago and I initially thought of the crowd sourced conditions app but I realized that people hate giving that info away and that friends form SMS based surf checking networks that serve the same purpose.

I really like this approach and could see it working at popular, touristy spots, clever idea.
>C# and java are definitely not the solution for new applications which are expected to generate revenue for the next 10 years.

That doesn't even make sense. Both C# and Java (and JVM, CLR languages) will be used in new billion generating applications in the next 10 years and more.
It was not my intention to defend China. But what's with the other 90% of debris? 40% USA, 40% Russia, 10% other is not far from the truth, I guess.
Love Work
As a teaching moment? I've been told a story about a group of embassy staffers (state department, not the other kind) that were in the habit of being rather loose with sensitive conversations over the local telephones. This was during the cold war when secure conversations often meant driving into the office to speak face to face, which could understandably make weekend news rather unwelcome. This apparently made some folks on station rather unhappy, but repeated admonishment fell on deaf ears. The reported solution was to remove a tiny bit of insulation from several of the phone wires as they entered the building on the roof. This lead to a very occasional clicking on the lines as wind would move the wires and cause a momentary short which blossomed into a newfound respect among the corps for communication protocol.

Most people learn much better by doing (or getting done).
No, but there are tons of people making $300 laptops. I think that did more to kill the netbook market than Apple did.
Oh, sorry, I didn't mean that the DRM in Steam adds value - but taking Steam as a whole, Steam itself is viewable as a DRM system that adds value (in all the ways that make Steam awesome).

The core DRM in Steam (if we ignore the flakiness of offline mode at least) is clever, consumer-friendly, and unbeatable: You simply do not deliver the executable to users until the game is out (but they can pre-load assets, which can optionally be encrypted to stop any pre-release leaks from them).

That's not to say Steam might be marginally improved without that, but in my day to day it has never caused any problems that wouldn't exist without it - in contrast, CD ROM based DRM such as Securom has caused me several headaches.

It's also worth mentioning that the DRM on Steam is opt-in: While the big publishers see fit to ship extra DRM on top of Steam, many of the games I have installed through Steam will actually run fine if I launch the executable directly, without starting Steam.
Alright, that makes sense. Great idea and reasonable pricing, I wish you the best of luck with your project.
> It's alright to say "fuck". We're all adults here

How do you know? There might be kids reading here...
How startup sausage gets made: The Launch Pad reviewed
I like this reframing. I've used it as my primary motivator for engaging in aerobic exercise.

I used to struggle to jog a mile at a slow pace, now I'm training for a marathon.
If you're new to bash completion scripts...
Google's blog post about it: http://dataliberation.blogspot.com/2012/09/your-youtube-orig...

I'm trying it out myself. 130GB to download all my videos though. This might take a while.
> Persona works like email because every identifier is an email address, not an opaque OpenID URL. You don't have to have the NASCAR-esque "Sign in with OpenID Provider X, Y, or Z" login page if users can actually use an identifier that that already know.

OpenID URLs need not be opaque - I use my regular <realname>.com URL as my OpenID, and have a stub in the HTML of /index.html that points to the provider that I want to use when I authenticate (which I can change any time I please). It's called delegation. I think using DNS as an identifier is better than email (as that's kind of what it was built for), but not a viable option for the masses. Mozilla did a good job with Persona.
I believe different providers other than Mozilla can host it, and you can use one of them instead of Mozilla. That works just like email hosting. Persona is an API-level protocol. Whoever implements it can host it. It just means the end users need to maintain a separate password entry with the other hosting provider.
If they do that, it will be HUGE here for us in Uruguay and other Latin American countries.

Any reduction in price means a 2x reduction here due to import taxes and other stuff, so a decent U$ 99 tablet will be the first quality sub-U$ 200 tablet here.

They will also be available for direct import - you can't buy most stuff online here without paying heavy taxes, but sub-U$ 200 after taxes and shipping can be imported directly for personal use.

I will personally buy several, if this is the case (one for me, one for my gf, and some for my family members).
It sucks.

Lose internet unexpectedly? Your downloaded games are inaccessible.
I wholeheartedly agree that exercise increases the ability to focus at work. I would even go as far to say that people who are not doing it are leaving some latent ability at the table. This is also true of sleep and nutrition, not just exercise.

I do want to remark briefly on what is admittedly a minor point that you made, namely that triathlons are highly recommended "... even if just doing sprint/olympic/half distance." It is a common misconception that the longer the distance, the more difficult or meritorious it is to complete. However, this is not true: It is not the case that one races an Ironman at the same intensity that s/he would for, say, a sprint-distance triathlon; rather, in order to last the entire duration of the longer distance, s/he is racing less intensely. (A person who performs a sprint-distance triathlon at the intensity s/he can hold for an entire Ironman is not racing the distance.)

Let's go to running for a concrete example. A topnotch overall pace in the marathon is 4:50/mile. But a miler will run a single mile in 3:50, a whole minute faster than marathon pace. (Note that these are typical competitive times rather than world-record times.)

With all this said, I would be remiss not to say that I agree with the overall sentiment that one should take baby steps rather than brashly pursuing unreasonable goals.

In response to your final question, I haven't done triathlons since college. At the moment, I am working on getting into shape to finally break 5:00 for the mile run. Next up is breaking 1:00 in the 100-meter swim. I'm still figuring out what a reasonable goal is for cycling... maybe 5 miles in 10 min.?

After I have all the pieces, I'll put them together and start doing triathlons again :-).
Working on http://rushtap.com, trying to turn it from a side project into a bigger side project.
The Stylistic Subtleties of Sans-Serif Typefaces
The problem is, that if it aspires to be a generic channel for distributing software besides games, the DRM side if it is bad enough to be concerned, even if it won't replace other open channels.
My wife doesn't seem to care too much, though I think she's asked me about it before. The big benefit is that it's nonambiguous. No one is going to see YYYY-MM-DD and be confused about the date (YY-MM-DD is a different story for at least a few more months). Natural sorting in electronic systems is a huge plus, though.
This appears to be a mobile browser thing when searching google with https.

Search https://www.google.com in a desktop browser and you will get a results page where the links don't like you directly to the result page, they actually take you to an http redirect page which then forwards you to your final destination (which now gets a "google.com" referer.

On my iPhone and my Nexus 7 if I do a search on https://www.google.com the results page does not have the http redirect link. So the final destination does not get a referer.

This seems to be a behavior on Google's side that is different for desktop and mobile browsers, there's nothing specific to Apple here.
I do sprint and Olympic distance triathlons. A marathon takes far more time to get ready for than an equivalent time length triathlon because you just need to be pretty good at 3 sports rather than really well trained at 1.

The downside of triathlons is the expense, bike, gear, shoes, wetsuit (in most areas), etc.

I agree with your point about it getting you ready to be an entrepreneur. The plus side is that staying in shape makes me better at everything.
I agree with your points. Perhaps my use of "drop a few coins" sounds a little more dismissive than I was intending.

Artistic patronage is when a rich guys pays you a salary to produce art. When Michaelangelo worked for the pope, his "day job" was to build the pope's tomb :).

Gittip allows people to tip artists, and it does this very well. Can it truly be extended to patronage?
I haven't bought from that website specifically, but some coworkers and acquaintances have bought from dealextreme, alibaba, etc. They are incredibly bad.

Several have resistive touchscreens, most have modified Androids that don't have Play store and don't install what you want, most have quality issues (for example my coworkers' has wifi connectivity problems), bad battery life, and overall terrible experience.

I'll gladly pay double to ensure good quality and a good experience.

Edit: aliexpress is part of alibaba (which is part-owned by Yahoo IIRC), so it's very likely what you get is similar to what I'm describing.

Edit2: browsing, it seems most do come with capacitive touchscreens now. I don't see any with free shipping, but I'm not in the U.S.
It's interesting that as societies get nearer to gender equality, men and women converge on how they select a mate.

It's disheartening that the linked article chose to report this with such a sexist linkbait title.
I wrote all the way back in November, 2009 that three co-founders was better than two. http://spencerfry.com/threes-company I've since changed my thinking that two co-founders is a lot better and that both of those two people should be technical or design.