skysight-inc/HackerNews huggingface dataset:
Despite coups, despite wars, etc. the embassy has been held as being above all that. Civilized societies do not invade embassies, they do not hold diplomats as hostages, they do not kill or threaten to kill diplomats, period. This is true even in a time of war.

When the Japanese bombed Pearl Harbor with a sneak attack the US did not storm the Japanese embassy, they did not hold Japanese diplomats hostage. They did not claim that the Japanese diplomats were secretly spies. Etc. That sort of boorish behavior is not and should not ever be tolerated. If you cannot tolerate the continued presence of a country's diplomats in your country then you eject them, you do not hold them hostage. Period.
It is funny, and I do think it reflects a lack of imagination. I attended Startup School yesterday and one of my main goals for the day was to find reasons to invalidate the music-site/service/etc. idea I've been working on for the last couple of years. I couldn't find any, so today I'm putting efforts into not pissing it away and launching it this week (or next).

Depending on who you mean by the "everyone" who is looking the other way, we may be thinking in similar directions.
system for getting IP addresses of infringers to the copyright holders

That's not how it works.
Simply Explained: Multithreaded vs. Async as the hamburger restaurant
They're 8-digit decimals, not 10, so it works out to 0.96 MiB.

I think the parent's solution works. The typical separation between numbers is about 2^7: that works out to 8 bits per number -- 7 for the length of the '00...0', plus one length-one '1'. 8 bits * 10^6 is 1 MiB exactly. You need a variable-length encoding, so you can fit 2^7 in 7 bits while still allowing larger numbers to be encoded.
It is possible. Just a bit complicated but possible with proper encoding. Definitely not easy to code in an interview. Or in a day of work.
Duplicates are allowed, so you could for example have 500,000 zeros and 500,000 99,999,999's, which are more than 100 apart.
It was very smart of Apple to have picked up Comex; an even slightly less savvy firm might have made an enemy out of him instead. But just because it was smart for Apple doesn't mean it was the right role for Comex, who probably has his pick of any security, software protection, or low-level infrastructural kernel-hackey type job the industry.

It's hard to keep anyone in our field for longer than a year or two, and with the reputation that Comex has built, it's probably much harder to hold on to him.

So this seems like the closest thing to a happy ending there was going to be from his direct employment at Apple, at least this time around.

(I know nothing of the particulars here!)
Weebly was YC Winter 07, which roughly coincides with his "18 month" milestone, no? I don't recall him offering much data in the YC realm, so that could have been an overall force.
My problem with computer science pseudocode
> * Most people that are willing to move end up in Silicon Valley*

What basis do you have for that claim?
As noted below, MIT had a significantly higher target than any other school. The jump from 15 to 25 for MIT was ~50k points while NUS (26k students) got to 25 around 25k total points. Remember that by "not cheating" there are only ~10,000 MIT students (undergrad and grad), so the goal is impossible without cheating (there aren't that many faculty members and staff).

It wouldn't surprise me if they assumed it would be cheated, so this was an attempt to improve their fraud detection. After all, it's not like these extra 50,000 accounts actually cost much to Dropbox. They each will presumably have only the starting files in them which are all duped in every other account.
Algebra (the art of rearranging equations) is not necessary anymore (you just need to know how to realize how things can be quantified - the naming of variables of computer programming). Arithmetic beyond use of calculator is useless.

Maths as traditionally taught is the leading cause of high school dropouts rates and probably a lot more damage than tahat (people who might have been scientists turning to arts instead).
Facebook Creator To Debut Wirehog - 2004
Just to follow up (not sure anybody is reading this thread anymore though):

I've just rolled out Facebook sign in (only for those who'd like to post new jobs), manual moderation of all offers (say goodbye to "niggers" and "dicks") and email notifications (which might end up in your "Junk" folder so be sure to check it, will fix this a bit later).

Thank you all for you feedback and I hope Haltura is now more or less usable ;-)
It doesn't. And it looks easily broken the more I think about it. Anyway, running time would be unusable. This is not the right path. Don't drink the Google kool-aid ;)
Do you believe ghosts are topical at HN?

> Absence of proof can't be proof of absence.

Learn about the null hypothesis -- the scientific precept that assumes an idea without evidence is false. It saves huge amounts of time in the game of sorting out everyday reality.
Just another instance illustrating that at the "free money" level of business, bridges are fireproof.
I do not want to discuss race/national IQ differences, this is a sensitive topic and does not really belong here. I am quite sure individual IQ differences are not controversial though and cannot be "dwarfed" by good educational processes.

The French textbook looks reasonably rigorous but as you say it is intended for "scientific" students. Thats basically what I was talking about in my post - you need to select for gifted students before moving on to complex math (not that derivatives are particularly hard if you do not have to prove theorems). In US I believe differential calculus belongs to AP Calculus high school classes. No idea about their level but content on the internet looks similar, maybe less rigorous.
You're right, I misread that. Still, that's an information theoretic bound, and I'd like to see anybody achieve that. That's not a lot of room to play with until you hit 1 megabyte. Unless you're doing something complicated across multiple numbers, that variable length encoding will already waste 1 bit at which point you're back to 8 bits and already way over budget. Additionally, if I generate a random array, sort it, and compute adjacent differences, then around 30% of the numbers are greater than 2^7.
We don't care what smart people think - there aren't that many of them.
Hmm, that doesn't follow, I can have 0, and from 99,000,002 - 100M.
My dad made an animation with a visual effect in the same spirit: https://plus.google.com/109509141493915423605/posts/jokA4Ccu...
Rsync sends only the changes, wherever they are in the file. So if you set up a "while 1 rsync remotefile localfile" kind of script it will converge on the correct version of the file with minimal overhead.
Actually hiring 50 people sounds more like a decisive plan than "exploring a strategic bet".
Previous discussion (2 hours ago): http://news.ycombinator.com/item?id=4679965
I figure it's a legal liability issue. What if the NYT provides instructions for removing the adware, and if following those instructions create problems for some user(s)? NYT's legal team probably concluded that it'd create unnecessary legal exposure.

The culprit should not be NYT; it's the company that's spreading the adware.

An interesting thought experiment might be: what if TiVo replaced TV commercials with their own ad's..?
It depends on how you define 'ghosts'.

I'll tell you a little story. In March this year someone I loved deeply died. It was the woman which I would marry this month.

I've bever really believed the fact that there are people who could speak to those we have lost. The fact that my girlfriend died did something to me that at first was something that came to me as the shock. But being advised by a remarkable friend made me realise that it wasn't my mind playing tricks. And after reading about it, going to her grave and being completely open for what I felt, I saw what happened. She wanted to talk to me, to ask me a final question. And this was the only way to ask that question.

Is it a ghost? Yes. But not the spooky one. And not everyone can see or talk to them. If you want to block them, they will ignore you. And believe me when I say: it's not a blessing or gift. It's a world full of pain.

Because of the nature of the subject, it's very hard to find people who are willing to talk about this. Business will use it to make money, and science ignores it, because it's difficult to test it.

Who am I? 26 years old, C# programmer for a multi-million company. A year ago I laughed at your question. Now I'm answering it, because you asked for it.
plz definez hack for me
This article is pure hype from top top bottom. It begins by discussing spam, then it segues into a discussion of profanity and hate speech as though they're the same thing. But conspicuous for its absence is any discussion of freedom of speech, the usual limiting factor in removing content some may find offensive, including hate speech.

I think the article was actually written by an automated content generator that read a bunch of similar articles and created a simulation, but without any deep understanding of the topic it's supposedly about.
I agree with you, I just feel like that is basically the understanding of variables (names of concepts) and not maths. So, you need to understand what measurements to take/can be taken, and then set up that system and feed it to the black box machine learner.

Now, there still need to be some people who understand how things work in detail, but this is much smaller than what is being taught (most k12 do not need to know maths or physics or chemistry etc). They do need practice in abstract thinkng and this would be much better done with programming (a playful, creative, logical, and useful activity).
Uh, maybe. but there are far easier ways to hide messages.
Oyuncular İçin - Oyuncuyum.Net
Yes, as psychological phenomena -- that is, I believe that people actually do see ghosts, sometimes.

The shortcuts our brains take to make sense out of the flood of input from our senses mean that it's quite common to legitimately see things that aren't there, though.

So I certainly don't believe there's anything actually there -- no troubled spirits, no influence from beyond the grave, any of that nonsense.

If someday there's any supernatural phenomenon that stands up to a James Randi style test, I'll wonder what's going on. As it is, every "ghost story" I've ever encountered is far more easily explained by brain tricks and human error than anything remotely supernatural.

"Absence of proof isn't proof of absence", but that also applies to teapots orbiting the Sun between Earth and Mars, of course... there's no sense in spending time chasing down silly ideas that aren't even rationally coherent when you dig into details.
How about creating the main email as a normal account (not group) and forward messages automatically to the staff accounts. Then give staff accounts the ability to send messages from the main email?
I wouldn't expect the NSA to be involved with sourcing of hardware for the rest of the federal government (unless the continued fear around supply chain management completely takes over, which I suppose is possible, as it's probably the number one concern presently among a lot of agencies).

While they exert a disproportionate amount of guidance to other agencies, that is generally orthogonal to their primary motivations.

You can certainly make a case that NSA pushes NIST towards making guidelines for things that they favor, but I don't seriously believe that's at the expense of weakening other agencies (at least not as a goal).

As to classified and up information, the NSA can't get enough ECC, and many of the Suite B implementations of other standards are just a version of the standard that works (and is "certified") to use Elliptical Curve Cryptography (like TPM Suite B, which we work on).
Hacking Dropbox's SpaceRace to win is pretty glorious.
Got the following compile error when running make (Lion + XCode 4.5.1):

bison -W -d parser.y -v --report-file=parser.gen.info -o
parser.gen.c
bison: invalid option -- W
Try `bison --help' for more information.
make: *** [parser.gen.c] Error 1
CTR mode turns block ciphers into stream ciphers, and the best way to use AES is in CTR mode.
> That means that no number may be more than 100 away from any other number once fully sorted (7 bits)
It's possible that 90% of numbers are <1 million, and the remaining 10% are > 91 million. That's a 90 million delta possibility.
They might well have done that had Pearl Harbor been an overthrow of Congress rather than a bombing of a far-flung military base. It did result in Japanese Internment after all.
> aren't there also going to be many situations when the right thing to do is use an array?

Sure, with a language that has super slow boxing semantics....

Just look at BinaryTree. The benchmark would show a very different picture if it would compare Tree<Integer> implementations instead of allowing a primitive int.
Wow, that has to be one of the worst user interfaces I have ever seen for a mobile device since the old extremetech.com site.

If you visit the site from an iPhone and have it in landscape orientation, a black overlay is shown with a message that the site is only designed for portrait mode. Tilt to that mode, overlay goes away but then none of the content is usable because they've overridden native scrolling with some mixture of CSS and javascript. And it's broken.

To top it off, they've disabled copying so there's no easy way to even share the ridiculous message

To all designers: STOP. Quit being clever with mobile versions of your site. Just display your normal site with your normal content.
It'd be great if the help text contained some examples rather than simply a pointer to the website, and if you added a man page. When you're in the middle of a terminal session, switching to a browser can be really disruptive.

Also, if you tag releases with a version number and make them available as downloads on GitHub, you'll have an easier time getting Jq into Homebrew, the OS X package manager. I wrote a formula for you, but AFAIK you'll need to add in a real version number before submitting a pull request to Homebrew: https://gist.github.com/3928074
> The Constitution has something to say about that.

It has some say, but lately it's been repeatedly ignored.

> which is significantly smaller than the Internet industry, by the way

Unfortunately, I feel that the content industry lobbies way more than the Internet industry as a whole. This is slowly changing, but we still give far less political contributions than they do.
Hah, I hope RIM can get there stuff together and pull through, I'm not really a fan of any of there products but they're one of the last bastions of the Canadian tech sector and I definitely want that to grow so that I don't have to move to the states. It wouldn't be horrible but I like it here.
Not surprising after reading what the CEOs of Oracle and Salesforce have been saying in the news lately.

I don't use Oracle (my customers tend to be budget conscious). Even without Oracle experience it makes some real sense to whenever possible use free software if the total costs of software development, deployment, and maintenance are less - assuming equivalent functionality, scalability, etc.
Aciicmez's BTB attack looks at the branch predictor, and is potentially valid against any implementation which branches based on sensitive data. There's a whole class of these attacks which look at instruction paths, including a new one by Zhang et. al. against ElGamal at CCS this year, but they usually target asymmetric ciphers. In particular, since AES doesn't have key-dependent branching, these attacks don't apply.

I do agree with you that x86-64 is extremely complicated, and that new attacks might crop up due to some future optimization.

As for the paper:

Yeah, AES-NI is sort of the final hammer against AES cache timing attacks, since it doesn't use the cache at all, but I felt that a paper on AES cache timing would be remiss without mentioning it :)

There are two parts to the multicore argument: the first is that it complicates things massively, and the second is that it can be a complete mitigation if used properly.

First is the complication bit, and that's just saying that the attacker must understand almost everything about the multicore implementation, including multilevel cache behavior and (possibly non-deterministic?) replacement strategy. I'm willing to believe that, were this the only hurdle, a dedicated attacker could still succeed. I was looking at a single core machine, so I didn't have to deal with the complexity here.

For the complete mitigation, you need to rely on platform support for core pinning. If you're allowed to say "I want to do encryption now, give me my own core for 400ms", then, since the 4KiB T-tables fit into your core's L2, attacker threads on other cores just can't examine them during use. This complicates the VM hosting model and might be a decent DOS attack, but it does completely stop cache probing attacks.

Finally, as you said, my work can really only apply to AES on the x86 on the desktop. Change one of these variables (such as AES to ElGamal or RSA or Blowfish), and side channel attacks might still exist. Such is the problem with negative results :)
Luckily, they made the point target for MIT >> population, so it's irrelevant.
The New Outlook.com : A Not so Hot mail yet?
Cool - could that be done in squares and randomly across the page? I'm going to build a concert/fan site/photo/blog and its going to be very generic. Having a very subtle background pixilate may be a cool look.
For those playing along at home, AES-GCM is AES in CTR mode plus a variant of Wegman-Carter MAC function to authenticate the data.
It's worth noting that MIT is still at 15gb even while in first place.
Here's a related Wired article from 2008:
http://www.wired.com/gadgetlab/2008/09/briton-invented/

Edit: At the time, it looked fishy. I did some digging, & it looked plausible enough:
http://www.metafilter.com/74747/The-Birth-of-the-Ipod#225151...
In SF, Noisebridge (https://www.noisebridge.net) has a CNC mill, among other things.
>Strong passwords will not be cracked. It's not possible.

What qualifies as a "strong password" against such a tool?
State of Technology #80
Yep, definitely based on location. For me, it shows the India leaderboard first.
@Dylan16807 Maybe not a requirement, but this could cause information leakage in some scenarios. I'm also pretty confident I couldn't come up with a hashing scheme as good as MD5. I'll leave that to the crypto pros.
You are such a weirdo ! Love it !
Interview with John Young and Deborah Natsios of cryptome.org
guess-post=puff-piece-for-his-company issue aside, the article is kinda just stating the obvious... which is that you should geographically place your startup where it makes most based on the type of company you are building.

Many folks are already living in SF/Bay Area and start their company without thinking that maybe it would be better to do it elsewhere.

I live in SF yet my own startup, WP Engine, is based in Austin because we're very operations and server orientated. I wouldn't start that kind of company in the Bay Area as there's just no advantage. We now have some Marketing and Strategy presence here, but operations remains firmly in Austin.

Equally, I personally wouldn't put a heavily social-orientated company in Austin as there are many important partners you need to get chummy with to succeed who are based in SF/Bay Area.

It's just about weighing up what labor and partners you need, and putting your company where it needs to be. Not everyone can do that (family ties, visas, etc) but if you're already in the Bay Area it does make sense to consider whether moving out would benefit your startup.
This was fun to read; thanks. It's interesting how side channel attacks can be both assisted and complicated by new hardware; usually, advances in hardware tend to favor attackers slightly more than defenders, but even just by pushing operations below attacker measurement thresholds --- without even trying, that is --- hardware makes some side channels very hard to exploit.

If you're an HN'er reading along at home, Aciicmez' BTB timing paper (you should just be able to Google that) is very very very cool. They not only realized that you could theoretically watch the caches used by the branch predictor to build a trace from which you could recover RSA keys, but also came up with a very simple way to profile those branch predictor caches; that is, they designed a "spy process" like Osvik and Tromer did for memory caches that targeted the BTB instead.
Why do people call themselves entrepreneurs?
Collect signup emails with a Heroku friendly service written in Go
Coaching and review
This is less of a problem when he patient has been paying into the system his/her entire life, the premiums of which are not subject to profit margins or administrative inefficiencies (as much), and medical care costs less than half of what it does in the USA.

End of life care is surprisingly affordable when the above conditions are met.
OK - here's one for Halloween. My niece asked for some sage to smudge her house - I didn't think any thing of it. Anyhow - during conversation I asked how my nephew is doing, he's 4. She said he won't sleep in his room for the last week. I said 'oh? is that bad?'.

Apparently she heard someone upstairs walking around then all of sudden he started screaming hysterically. She said it took her 10-15 min to bring him awake, into full consciousness. He said someone was in his room - on the ceiling. I'm like "Uhh...hmm that's weird".

She goes on to tell me he's had an imaginary friend - Maria. He's seen him talking to her, playing with her etc... I said "when did this all happen?". She said after her mother-in-law gave her an old chair that belong to a great grandmother or something.

Then she goes on to tell me that her mother-in-law came over to drop off old picture for her husband. One of them my nephew points out "Maria!"...his imaginary friend, the lady who the chair belonged to...

Needless to say - she doesn't think Maria is bad - but perhaps someone else is there or got invited in.

After smudging the house - which she said was very odd because the house started creaking like crazy, everything has subsided - and they got rid of the chair.

Anyhow - I considered getting the chair to play a prank on some friends - see if anything happens to them.

Always hear of ghost stories but kind of cool when you bump into one so close.
A nonce when implemented correctly doesn't expose the client to replay attacks at all unless I'm missing something here. When requests come in, store the nonce + timestamp and ensure that requests with the same nonce + timestamp are only ever executed once.
That's exactly what I was thinking the whole time
> Also, for anyone reading, getting into Vet school doesn't mean that you're not competitive enough for standard med school; quite the opposite. Getting into vet school is damn hard.

We were always taught in school that becoming an animal doctor requires better qualifications/grades and is harder than becoming a human doctor - presumably as there is more than 2 anatomies one must become an expert of.
If you're going to say the content industry can ignore the Constitution, then what's to argue with? If they can do that, they can do anything. Disney can charge you not only for copying Mickey Mouse, but for also for simply having mice in your house.
Arduino Due Announced - 66x faster than existing Arduino