skysight-inc/HackerNews huggingface dataset:
Question: What if I want to encrypt some text?

Answer: Use PGP, Keyczar, or NACL.

Question: What if I want to use EAX? GCM? CCM? AES-CTR? CMAC? OMAC1? AEAD? NIST? CBC? CFB? CTR? ECB?

Answer: You will perish in flames.

Smart cryptographers already grappled with the problem you're talking about here, concluded that non-crypto-engineers were never going to get these details right (professional crypto engineers don't even get it right, and there's a whole academic field dedicated to why), and designed high-level libraries that don't expose primitives like cipher cores, block modes, and MACs. You need to be using those high-level libraries. You need to start treating things like "CTR" and "OMAC" like plutonium, instead of like AA batteries.
This is nice in theory. I think this doesn't happen because when you take people's money they're suddenly your "customers" and think they're entitled to a phone ASAP and if there are any unexpected delays you have upset the hoard. As soon as you take someone's money, they're a customer support liability.
What We Used to Launch ThoughtStreams Quickly
This is kind of amusing, in a way. It always seemed weird to me that large corporations were willing to invest so much in promoting Facebook - From CNN promoting it on every commercial to big brands creating departments to manage 'Social Media' - e.g. Facebook and Twitter.

Did they all think this was free advertising, forever? FB is (at least now) a publicly traded, 'walled garden' after all, and Twitter isn't much different.

Looks like the social media revenue model is becoming clear: All your customer are belong to us, pay up.
Consumers usually have an expectation of quick turnaround, and when they don't have a quick turnaround, they expect good feedback about when to expect what they paid for to be delivered to them.

In light of that, no, we don't really have the technology to automate all of those business decisions (especially so early in the product lifespan) and give a precise prediction about when a consumer can expect the product with acceptable reliability. There are too many factors that can delay delivery by a day or two, and accuracy within a day is extremely important for good customer service.

For a mass-market phone like this "It'll get there when it gets there!' is not an acceptable response to people who need a phone right now, or in the very near future. This isn't a raspberry pi.

There's no use pretending that high tech supply chain management is a simple process, and any hickups are really just ploys for media hype.
He refers to "our tens of gigabytes of data" in the post on his site. [1]

[1] http://www.aeracode.org/2012/11/13/one-change-not-enough/
But what kind of apps do you want to make on Facebook if you don't use Facebook yourself? How do you plan to test it, or even make sure if it fits the ecosystem?
How to Include and Forward request in JSP
Introducing Android 4.2, A New and Improved Jelly Bean
I share your feeling, but having talked with folks who are emotional about how "bad" this show is, I realized that there are people that wish a show would come along and explain to their non-techie or non-Bay Area friends what the place is about. That desire seems to emanate from a need for acceptance (well understood) and compassion.

I have found it is similar to trying to explain what being in love is like to someone who has never been in love. You can say "There is this other person who you would walk on glass, barefoot, to get to and help." And they say "What? You don't have time to put on a pair of shoes? Seriously, how much longer could that take?" Not having experienced the emotion they can't imagine how much of your 'self' you are willing to put aside without question.

So your midwest relatives just end up thinking you are 'weird' and you have to be ok with that.

So I speculate that that is where a bunch of the angst comes from, people in the startup community would love to be understood by people outside the startup community but can't communicate that difference. So they are sad that Bravo tried and missed completely. But as you said, it wasn't Bravo's goal.
Brush Up Biology - Growing Micro-organisms
As TeMPOraL correctly pointed out, it is not content users voluntarily signed up to receive -- its content that they "liked."

Facebook is following the same game plan Google has used: give away free traffic at incredible volume, then start charging for it.

I believe Facebook's mistake is that they should have some sort of transparency in regards to why they are charging what they are charging. In Google's case, what you are charged is based on what your competitors say its worth (ok, not really but that is Google's story and pretty much everyone believes it.) From what I see, Facebook is just throwing out a number which page owners see as extortion.
I keep seeing these blogs that have two things in common: They look identical and the content tends to positively reek of the stereotyped self-important Valley attitude.

Out of curiosity, I clicked the "SVBTLE" link at the bottom of this one:

Svbtle is an invite-only network of people who strive to
produce great content.

Ah ha! Granted, this could only speak to the intersection of this website's users' interests and those blogs' topics.
How is this helpful? How does it help to point out that so many of the people who are deploying crypto are so boned that their systems are compromised before the crypto even comes into play? Help me understand this. If you can't get the basic systems programming concerns of your software right, what business does your system have telling users that it's "cryptographically secured"?
Indeed, I've heard they tried using nfc's on customer baskets to track their movement around the store and see where they stop and for how long.
Very interesting.
I'd like to know why they had 16 employees. I'm probably just overlooking something, but it doesn't seem to me that you'd need more than a handful.
Airbnb Launches Neighborhoods
What kind of migration support are you providing if we decide to switch to AppFog? Your support quality and service level has dropped off a cliff in the past 2-3 weeks, in my experience.
Reducing commute and other wasted time is probably still the low hanging fruit for most people. If your work is sufficiently varied, I don't see how 60-80h/wk is unsustainable at at least 1.5x the work you'd accomplish in 40h, if (and only if) the other hassles of life are taken care of for you -- no cleaning, commute time, etc.

I don't think I could do a single task for 80h/wk productively, but I could certainly do my primary job for 40-60h/wk productively and then spend 20h/wk doing meetings with users, conferences, etc.
I would still like to see some sales data. While I wouldn't expect Google to do anything like this, there exists the possibility that a company could create the appearance of a massive sales by limited the supply and slowing their servers, effectively making people think the phone sold out in massive enough numbers to bring down their services. Artificial supply constraints is a well known and commonly used tactic to increase demand.

Again, I wouldn't say Google would go to these levels of showmanship just to sell a phone, but seeing actual sales data in front of you shows more pieces of the truth than not having the data.
_Inflation is higher for the things they purchase_

I don't agree with this. The Consumer Price Index is how we Americans typically measure "inflation" which measures the change in retail prices of a "market basket" of goods from period to period. The Bureau of Labor Statistics goes to great lengths to determine this market basket. You are essentially saying that the BLS is favoring a higher income basket over a lower income basket and if they focused on the latter, CPI would report much higher inflation. I don't think this is true. CPI is far from perfect, especially if you introduce Austrian definitions of inflation, but I think they do a good, consistent job. Here is a BLS description of market baskets.
http://www.bls.gov/cpi/cpifaq.htm#Question_6

I agree with others who replied to your comment that hypothesize this dynamic is the result of a disproportionate impact to a low income household's bottom line from price inflation. This essentially the concept of operating leverage applied to households. Assume a typical family needs to spend $40K a year to pay for the basics. A $50K household will have $10K left over and a $100K household will have $60K left over. If prices increase by 5% on the $40K, that's now $42K. The $50K household has $8K left over, a 20% reduction from $10K previously. The $100K household has $58K left over, a 3.3% reduction from the $60K previously.
I completely agree, but is it possible that Google and/or LG have contracts with their partners that they may not create obligations to more than a certain amount of product at one time? Might these products sell out because, contractually, they cannot sell beyond a certain deficit of materials?
I don't think most people want to limit their interactions to their close social circle. The Dallas Mavericks have 2+ million likes - I'd guess a majority of those fans would want every single update they make in their feed, and would value those updates much more than the photo of an ex-coworker's baby making a mess. Do they want Walmart updates? Probably not, but I think the Twitter model for the feed works better for users than the Facebook model (unsubscribe to things that clutter your feed).
I agree - too much drama. I've been doing startups in Silicon Valley for awhile. Silicon Valley has its ups and down, with much in common to the 'normal' world. If you're contemplating suicide, or losing yourself in the glory of your work, you're doing it wrong.
Indeed, we have this chicken and egg problem. That's why we are focusing on the HN community for now: it is feasible to be quite up to date for the frontpage, even with just the three of us! But as you said, we are actively trying to find contributors.

For now we are not giving automated summaries because we obeserved that people tend not to edit summaries even if they are automatic and hence of lower quality. What is your experience on this?

Thanks for the feedback!
Well the thing is people are not prone to edit a summary that's already there. It's actually easier to start from a blank slate.
Are you still working on hnsummaries.com? I would be interested in talking with you.
Scary, but I think worth doing - congratulations.

Having been a landlord in the past, I can also very easily see the market for your product. I really needed it, in fact, and I think your major issues are going to be getting the onboarding experience just right, and letting the landlord / agency communities know about it. (In fact, it might help landlords do it without agency help, which is nicely disruptive.) Those are nice problems to have.
Missing from this blog post, but made clear here (http://blog.cryptographyengineering.com/2012/05/how-to-choos...) is that you need to USE TWO DIFFERENT KEYS, one for the cipher, the other for the MAC. This makes it practically impossible to forge a valid message, since even if someone forged an apparently valid cipher section they'd be unable generate the corresponding MAC (unless they already had your keys, in which case you're already toast).
Strikedebt.org and rollingjubilee.org
For all you hackers that failed and carried a crushing debt burden for years like me, if you have finally found some success, please donate and help relieve others of 20 times what you contribute. They buy debt for pennies on the dollar and then forgive it:

http://strikedebt.org/

http://rollingjubilee.org/
You misunderstood me a bit. I gave PI as an example of constant that _can be_ delivered and it is well-understood why it has a certain value. I agree this wasn't a good example, PI is indeed mathematical constant, although it appears in physical equations.
I don't really agree with that.

Sometimes C is inappropriate (eg you'd be nuts to build a website in C yet some sites do offer real time services)

Often the data set and/or logic required makes C an inappropriate language (eg you wouldn't use C for AI nor for some types of database operations).

And even in the cases where you're just building a standard procedural system, sometimes the interface lends itself better to other languages (eg C would be possibly the worst language for real time websites.)

But even in the cases where you're building a solution that's suited for C, there are still other performance languages which could be used.

"Real time" is quite a general term and as such, sometimes it makes more sense to use scripting languages which are performance tuned. Which is where writing 'good' PCRE is critical as RegEx can be optimised and compiled - if you understand the quirks of the language well enough to avoid easy pitfalls, eg s/^\s//; s/\s$//; outperforms s/(^\s|\s$)//; despite it being two separate queries as opposed to one.
The Manager's Oath: Do No Harm
Hey pud, OP here.

The thing is, we never say the domain. We say the name of the company. I totally agree that "Learn dot dot com" is confusing. But "Learn dot" isn't. Vast majority of people use Google to find things on the web (that was the theory). Last couple weeks of trying it out has backed that up.
Thanks. I started to look into Pyjamas which is all goodness of GWT but written in Python. Node.js and Restify look good. I will need to explore more on these.
The main reason I wanted to have multithreading in my app was to send notification emails on a separate thread than the main one, when an action is taken by a particular user and others interested in that action and are subscribed for notifications. It's like follow/notify model. I haven't found a solution for this yet.
27 states federal petition to secede from the united states
But isn't it written, when you give access to Twitter account, that it could be used to post things for you?
while g+ haven't yet (like the linux desktop year yet) reached the average joe crowd, and I really like this guy, mentioning myspace sound bonkers. another possibility is some of his businesses just go well with the myspace crowd.
If people are willing to pay that, it's the market price.
I recently liquidated a small portion of my 401k to help with home-buying costs. The tax penalties were steep, but are required to be deducted up-front. So, I liquidated X, and they sent me a check for roughly 0.7X.

I think you have a good point about the merits of getting a loan and liquidating only if you HAD to; I thought the author's points were interesting though about paying a tax penalty now rather than an equity stake to an investor.
Kaltura and Google Bring Enhanced Video Support to Wikipedia
I dont think its over the top at all. The creator does video and animation, and he is obviously good at it.
To me it is because of the sizes. 3.5" vs 4.8" screen is a major difference- the iPhone4 looks made for your 5yr old to play with in comparison.
I still don't understand why they don't take pre-orders. Even if it's just a "pledge" and not a transfer of money it would serve the double purpose of demand-sizing and wait-listing.
Thanks for the tip - this worked for me as well, although I felt kind of dirty doing it (the poor servers!).
> I don't see where he gave permission for the app to post Tweets for him. He gave it access to his Twitter account, but that's not the same thing.

It is exactly the same thing. If you give something access to your twitter account, you are giving it the ability to post, and therefore, tacit permission to post.
Here are the key things you need to learn:

1. Memory Management - Java takes care of it all for you, whereas in C++ you have to manually allocate and de-allocate memory, otherwise you will have memory leaks.

2. Learn the Standard Template Library (STL). C++ has a much smaller library of pre-built code that Java. The STL is very good for some basic data structures like map, set, etc.

3. Pointers - Java has references, C++ has pointers. You need to learn how to use them safely.

4. Polymorphism - Similar to Java but syntax is a bit different

5. Operator Overloading - You can redefine operators such as "+" or "-" to make your code look cleaner. This can be dangerous, but very useful if done correctly.

I think that is a good start. Overall the transition to C++ should be relatively easy once you master memory management and pointers.
No. The "third party libraries" you're talking about are, from my experience (my whole job is looking at random applications deployed in production for problems like this) things like OpenSSL and crypto++ and CryptoAPI and Common Crypto.

Tony isn't complaining that developers implement the AES cipher core themselves and screw it up, or even that they're implementing their own block cipher mode code. He's saying that even when you use third-party libraries, if you haven't chosen a library that is specifically designed to avoid mistakes, you are boned. And he's absolutely right about that.

Also, from experience: virtually nobody uses the good high-level libraries. What library did you use last time you built a feature, like a password reset token, that relied on crypto?
40 hours?

No. Average worker productivity has skyrocketed since 1980 with the introduction of computers and automation technology. Salaries have remained flat. A 20 hour work week with the same salary would be far more reasonable (though still very far off the mark of paying employees according to the value that they produce).
Hoeveel mag je lenen om je eigen woning te bouwen - Je Geldzaken | Je Geldzaken
The whole point is to compare the hardware to see how price competitive the phones actually are.
Pi is not a physical constant but a mathematical one; I.e. it can be derived a priori, without a physical universe. A physical constant would be Planck's, or the gravitational constant, or c. Those may well be "arbitrary" for all I know.
See: http://forum.xda-developers.com/showthread.php?t=1419170

The OTA was released this morning (I've flashed my unlocked Galaxy Nexus to 4.2).
I find this story to be complete BS. I find it hard to believe this much volume in one day from one site and everything worked like a charm. The payments gateways worked flawlessly? I think this is just a publicity stunt to drive traffic.
A more secure Flash Player for Chrome on Macs
Silicon Valley is not a place. Its a figment of your imagination. San Francisco, San Mateo, Palo Alto, Mountain View, Santa Clara, San Jose are places. But no one wants to read articles and watch crappy TV shows called "The Real San Jose". To me, what people do in "Silicon Valley", they can do anywhere else. Start-ups, Self-employment, Big Companies exist in many other parts of the world. All it is is regular people making a living. And for some of these people, work defines who they are. For others though, work supports the life they live outside the office and nothing more.
As always the price of a thing is what the market is willing to bear, not the sticker on the box.
I just placed an order for the 16GB model. I don't believe it's sold out.
In order to avoid this problem, I bought one of these microSD "sticks" a couple of years ago: http://www.amazon.com/gp/product/B002HGFKR8. I also bought a miniature lobster claw hook (http://www.amazon.com/gp/product/B003HFEQ3W) to attach it to my keychain. It worked amazingly well: the stick never got lost because it attached to my keychain via the base instead of the cap, it was tiny enough to never get in my way, and the memory was upgradable to boot. On the downside, speeds were pretty slow and the microSD card occasionally got dislodged, but these were relatively minor issues for me when compared to the benefits. Unfortunately, it bit the dust a couple of months ago — wonder if there are any faster alternatives?
Well, you are measuring two different things. Pi is not changing at all.
First: I agree with all of your practical advice. I'm making a meta point to security people like you and the author of the linked post.

And I'm not sure it's "helpful" really . It's more musing on whether or not this kind of advice is hurting more than helping. What you are saying amounts to "Crypto is really hard so use expert-authored solutions." But in my experience what people hear is "Crypto is Hugely Important and I'm using a expert-authored solution and using the same jargon, so you need to listen to me about all that security stuff and do what I say even though it's totally impractical."

Broadly, I guess I'm thinking that this creates little BOfH monsters, where a more nuanced, "big picture" frame might engender more thought about costs and tradeoffs.
Why is a proper MAC preferred over simply encrypting the plaintext after appending a checksum or hash.
Seems obvious, I wonder why we haven't had this before?

Great looking app, I'll be signing up soon.

FYI, I would seriously look at formatting a reservation system for restaurants, salons, etc.

When I had my restaurants we still booked 80% of our reservations over the phone, and calling back to confirm took ages. Being able to send a quick text confirmation, and to quickly sort the messages visually would be a huge value prop to that industry.
"The typical routes out of MBA programs are managerial or consulting roles." How does this sound: "The typical route for a CS grad is a job as a software engineer at SAP". Get it?

As a startup founder let me just say that NO degree prepares you for a startup. I guess you are right on one thing, the common denominator: "People with experience" - with my caveat of: regardless of your background. Your comment comes across like a double standard - which I do mention out above.
But should you? Your employer will not reward you for it with anything that could be considered reasonable when compared to the value you are creating for them.

What people can do, and what employers are willing to pay for, are two very different things. Employers, by and large, have adopted a strategy of paying employees as little as possible, divorcing their compensation from the value of their work. Capitalism says that employers should receive as little work of as little value as possible in return.
Google Chrome Blog: Securing Flash Player for our Mac users
I don't necessarily disagree, but remember that while you may be saying "learn dot," your users/customers are saying "Hey, you should check out learn dot dot com." You can train your team, but you can't train your customers.
$ell your creations on envato.com :)
In that case:

Learndot: "Our company is called learndot."

Customer: "Learn dot what?"

Learndot: "Learn dot nothing - that's the name of the company."

Customer: "Learn dot nothing?"

Learndot: "Well, dot com."

Customer: "Learn dot com? Why didn't you say that?"

Learndot: "No, it's learn dot dot com."

Customer: "Dot dot?"

Learndot: "No, the first dot is spelled dee-oh-tee."

Customer: "???"

I hope I'm not coming across as snarky. Naming isn't easy.
If they don't make any mention of inventory on hand for the launch then what is the point? Who cares how fast something sells out if it's not put into context.
Lambdas in Java SE 8 or co-evolving libraries, the language and the VMD
Isn't the model always been clear: advertising?

You can run around in circles moaning about how it isn't "fair", but it isn't the Mark Cuban who built the infrastructure or attracted the users with a core product on Facebook. Secondly, Facebook never guaranteed 100% reach, I'm not sure why Mark Cuban expects it (and for free!).
Crypto is hard.

The point of this is you shouldn't even be using algorithms directly. If you need to touch crypto at all you need to learn about it, and the more you learn about it the more you'll realise just how damned hard it is.

Absolutely use common programs like GPG and common libraries like OpenSSL. In fact don't use anything else, and don't even think about implementing this stuff yourself.

I agree some sort of authoritative set of info would be good. Very hard to do though.
Here's it is as markdown, with the bullets preserved:

https://gist.github.com/4067487

The subject "Urgent News about PHP Fog" rubbed me the wrong way. I think "PHP Fog is Shutting Down" would have been better.