skysight-inc/HackerNews huggingface dataset:
I don't see how a reasonable person would conclude Al-Khabaz's actions were malicious. People with malicious intent do not draw attention to themselves prior to the event, nor do they advertise the exact attack that they will use.
No, it's the other way around; a block overlap is effectively a guarantee it's the same file with the same key.

Suppose they are using 1MB chunks. The keys are 16 bytes. The 1MB chunk may be 2 ^ (8 millionish) different things, the keys only 2^128 different things. Thus, two different 1MB chunks, to be the same file with different keys, must have two of their possible 2^128[1] encryptions overlap out of the possibility space of 2^(8 millionish); that any two different chunks would even have such an overlap available is exceedingly, exceedingly improbable, let alone that the two users would end up with the exact correct keys to have actually manifested the overlap.

There are only two plausible theories when an overlap occurs: 1. It is the same file with the same key or 2. Someone's worked out how to artificially create a collision. And those two are hardly equal in probability either....

[1]: Yeah, that's a simplification since there aren't actually 2^128 valid keys. Roll with it. Actually I've taken a number of small liberties for simplicity; none of them matter.
I've read the book and it's an amazing read, both for details of what occurs in the camps, and for the issues Shin faces trying to assimilate in both South Korea and the U.S. Beyond symptoms much like PTSD, he has perverse difficulties with money and personal finance. At the same time as he expects to be cared for in a bare way (because the camp existed to give him a really shitty place to sleep and really shitty food), he's deeply suspicious of any largesse shown to him--it's either a bribe requiring action, or an unexpected windfall that he must consume immediately to avoid it being taken away from him by a stronger inmate, or the possession of which might be grounds for further punishment. He has trouble saving money or conceiving of budgeting his money. He has trouble planning beyond a few days in the future because, in the camps, nothing was in his control, so planning was not just immaterial, it was counterproductive and risky.
The requirement of a signed release doesn't seem to apply to user-posted content. The requirement applies to sites considered to be the producer of the content.

For example, if this requirement were enforceable against user-posted content, online adult personals wouldn't be legal. A little quick Googling finds me the Stranger's adult personals disclaimer: http://thestranger.selectalternatives.com/gyrobase/adult. According to 18 USC section 2257, you aren't considered a producer if you are limited to things like photo or film processing, digitization, distribution, an ISP, etc. (http://www.law.cornell.edu/uscode/text/18/2257). Similarly, IANAL, but it seems that adult sites have a certain amount of protection for user-posted content similar to YouTube's copyright safe harbor.
Storify Allows Private Facebook Posts To Be Seen Publicly
The DMCA protects service providers against copyright violations, not extortion attempts.
I somewhat agree. How about not charging the fee until someone actually applies for a project? For now, I'll just refund empty projects.
DMCA is not what you think. She does not hold the copyright to her nude photos unless she took the photos herself. The photographer or the company that employs the photographer holds the copyright.

A valid DMCA take-down notice, may only be made by a rights holder.
That is just crazy. If the papers need to raise money to pay journalists, they should put up paywalls. This is working at the New York Times, so why not in France?
The animations jump around in a visually unsettling way on an ipad 4 as the page loads.
Define "securely". Against whom are you defending? What threat modes are you considering? What do you expect your accountant to be able to do? What do you expect them actually to do when they read this "secure" email?

It's really not clear what you're asking ...
I often see this with sites that assume a GitHub account has an associated public email, when that is not always true. The Devise gem for Rails has this issue, if you are using that.
That's mostly right, yes.
I'm very familiar with load-balancing, apache, varnish, mysql, etc. I think because of that using a CDN didn't even cross my mind, (although I think they might be a good fit for this type of site).
A lot of people get engineering degrees as a signalling mechanism to prove they can do hard work, not because they have any interest in becoming engineers. Formal training in a subject combined with a lack of intrinsic curiosity about the subject makes the worst engineering managers you will ever meet.
You haven't actually demonstrated any fallacies here. You need to prove your claim that business is a formal logical deductive system. Note that this is a well defined mathematical concept. We know precisely what we are talking about when we say that.

You then need to show that business decisions/operation are sentences/statements in this formal system. Then you need to show that these formal systems that describe a business include Peano axioms for Godel's theorem to even apply.

All this to show what we freaking already know trivially. Business are not complete :D. There are other business ideas that are "orthogonal" to what any business does.
You're wanting to have your cake and eat it too. People say: crimes should not be treated differently just because you use a computer to do them. I agree! If I was running a bar where I solicited jilted ex-boyfriends to send in naked pictures of women, and then plastered them all over the wall and purposefully profited from the business they brought in, then you can bet I would be charged with a crime! Acting in concert with someone else to violate someone's rights makes you liable in meat space, and the same should be true in digital space.
You should add bitbucket too, they have an auth api as well.
Animals are a lot more tolerant of death and mayhem, too. For example, if radiation caused e.g. a 10% incidence of horrible birth defects, a lot of animal populations could survive that just fine, but humans would be horrified at the very idea.
people overuse shared keys

This is not a drawback of key-based authentication versus passwords because you have the exact same problem with passwords. If you want to explain proper key-management then explain it. But don't make it sound as if key-auth was some esoteric option that should be carefully considered versus password auth. Key auth should always be the default and password auth should always be disabled, exceptions to this rule are very rare.
Clients are fed up with broken promises and shoddy work from the hordes of "freelance" sites and low-cost development shops around the world. Similarly, the best Indie designers and developers struggle to be matched with great clients and differentiate themselves online.

Many have tried to fix this and some succeeded to an extend. The deeper issue with such an initiative is how can you maintain the quality, that you promised, over a period of time.

You have to be on it all the time and you cannot let anything on its own. A good developer may be over-worked and may not deliver on another project, whilst she did an awesome work on the earlier one.

Disclaimer for this plug: I'm one of the co-founder of http://lxidd.com/ and we have been trying to solve this problem at a larger scale and magnitude. We're opening up only to select Clients and only via referral and introductions.
Hi,

Can you try signing up again? The $50 is the submission fee, separate from what the developer gets.
Thanks for the offer, but it's not necessary. If it was just a "sci-fi movie database" site, your domain would be good, but I plan to extend the site to sci-fi tv shows and books as well, so I'm happy with the current domain.
Tried to fill out my profile after initially only saving my email address, but the textfields don't take my input anymore ...
The OP is still being naive. For 1.5k-20k transactions, you have to pretty much do (or at least start) payments the old fashioned way: 1) vet buyers and 2) wire transfers, bank transfers or checks. Going with the payment startup du jour is not prudent.
The obvious C optimization is using getc_unlocked and putc_unlocked, which cuts the C run-time in better than half, beating out Haskell by a smidge.
Programmer Interrupted
Sorting by rating is possible now.
Mainly becuase it's basically an email subscription which I avoid unless I know what value I'm getting ahead of time.

Site looks good, btw, I hope it goes well for you. I was just offering one insight into a potential reason people might not sign up.
Fantastic write-up. Thanks for doing this. I was searching for an article exactly like this and it's good that i can learn from your experiences of the newer providers. I've used Worldpay, SagePay/ProtX and Paypal in the past and completely understand your frustrations.

Wish we had a dwolla equivalent too.
I hear the automakers are also really suffering. And Google is deriving all kinds of value from them. Lots of people will use a search engine to research any car buying purchase, and those searches will monetize extremely well. So clearly the tax should be doubled, and the other half used for subsidizing the French car industry. Surely anybody can agree that it's for the common good to ensure that the French industrial base isn't further eroded.
Norvig still wins, IMO. Statistics may not explain everything, but it does an amazing job of separating the explainable from the unexplainable. I still see this as the requisite Minimum Viable Product for Artificial Intelligence. If we sat around waiting to perfectly understand neurocognitive linguistic processes before we tried to replicate it, we wouldn't have a functioning Google Translate for another 200 years.
Ahh. Could be me just being dumb but you might want to clarify that on the site. "you both can take it from there." is a bit ambiguous.
250USD minimum for a project? How exactly did you come up with this price?
This is an import duty exactly like charging 5-8% on wine and cosmetic sales in the US.

Also, I'd be surprised to learn that Google is actually collecting money in France as opposed to Ireland based on the way I've seen almost every other software company structured. So I'd suspect that the revenues in France are essentially 0.
I just figured that out and pushed a fix, here's hoping that was it.
Well.. Can she say something else? I mean - wouldn't any statement remotely similar to "In light of the recent events we will think about our approach and adapt our methods" basically admit guilt and having been wrong before?

In other words: Is this surprising, in any way?
In the case of Rwanda, a great deal of the breast-beating that followed had to do with the fact that Western nations could have done much more to prevent the genocide than they did (at least on paper). The strategic situation with North Korea mandates that the only thing to be done to relieve the suffering of North Koreans would be to restart and win the Korean War. China likes having North Korea as a buffer state on that border (which is why they intervened the first time), and at least in decades past, Russia and China had ideological reasons to prop up the regime.

More immediately, Seoul is within range of the DMZ, and North Korea has 80,000 pieces of artillery aimed directly at it. In the renewal of hostilities, Seoul would be flattened within hours, and Seoul has 15 million people living in it. More than Russia and China, that gun pointed at South Korea's head has always mandated extreme caution when dealing with the North (and allowed the North to get away with provocations that would have been crazy anywhere else).
I completely understand. I'll put that at the top of my to-do list.
The 180 day hold is standard practice. Virtually all US merchant account agreements have clauses specifying when a reserve account, holding part or all of the merchant's transactions, will be established (when? at the processor's discretion, really). If the merchant is terminated, funds in that account are held for up to 180 days to cover future chargebacks. PayPal inherited that from the two banks underwriting all their accounts -- Wells Fargo NA and JP Morgan Chase. The policy predates PayPal's founding, and isn't anything unusual.
Yes - they make the point of sale in Ireland (I suspect they are already doing this) so that no money ever lands in France.
The way you have piched it, doesn't show a difference from other freelancing networks:

"Then, you can review their profiles and get in touch with the ones you like" – that's how it works with odesk/freelancer.
"When you see a project you like, just click on Apply. Project owners will be notified of your applications and will review your profile to determine if you're the right ..." exactly ...

"Short term projects" – these websites already showcase plunty of such.

Now you have added restrictions like $50 and only saturday to see projects.

I think there's an opportunity for a dev marketplace where client post a project, and it automatically finds a right candidate.
You should look into bitcoin (at least know about it and how it can help you as a merchant). Any payment company that deals with credit cards is not just a payment company but a fraud detection service; at least that is what it should be selling themselves as. Fighting CC fraud (and bank transfer fraud) is a challenge as the system was not designed for the digital space.
With Ortiz's political aspirations this seems like the worst response she could possibly make. It seems to me that the public would respond better to something like "we'll review our practices to ensure we're best serving the public." They could then just sweep it under the rug and wait for the public to forget. If it came up again they could then they could issue a statement along the lines of this one.
iOS developer in the Springs working on expanding my businesses. Currently in Amy Hoy's 30x500 class; definitely interested in meeting fellow technologists/entrepreneurs.
Randomly. What are your thoughts on it?
Bear in mind that Bullyville - who are behind the other lawsuit against a different revenge porn site that's mentioned in the article - have a financial interest in online extortion schemes in general remaining legal.

Last time I looked, the only apparent source of revenue for their entire network of sites was ads on cheaterville.com for various companies offering to remove your profile in return for thousands of dollars. Looking at the source code, the ads were inhouse and I couldn't find any information on how to place ads with them - so they've obviously come to some kind of private deal with the takedown extortion sites.

It's probably in their interests to get the porn extortion sites taken down too. They've managed to pick something profitable but not heinous enough to get negative media attention, and the porn extortionists are a potential threat to them.
Thanks for the suggestions, including sci-fi tv shows is also in plans. I'll look into adding links to apple site.
I spent a couple of nights last week reading the beginners course. I've put together a couple of simple websites already, but always using a "copy-paste-hack it about until it works" methodoly.

The beginners course was a great way to get the fundamentals straight in my head. Very well written and understandable.

Thanks Shay!
Got it. It's probably not for those immediate issues, but how would you feel about a "rush" option for a higher fee?
'Securely' means that only my accountant can read the message and view the files. I'm afraid I don't know what a 'thread mode' is. I expect my accountant to view the information I provide, reply to me securely and then submit my tax return on my behalf.
Aaronson's reply to Dyakonov (on quantum computing scepticism)
Good idea, especially when combined with online learning (cousera, etc.)

A friend of mine in Germany used to meet up with an American studying abroad at his university for 2 hours a week. One hour they'd speak English, the other German.

I imagine it's not that uncommon.
Quantum Computing for High School Students
I agree - and this is a clear import duty on a product. Hence France should be referred to the WTO to remove it.
Yeah, you also should sue Google for https://www.google.com/search?q=site%3Atexxxan.com
> Your hate boner is clouding your judgement.

Should be a button or T-shirt.
> Unless the article means that the key itself is a derivation (a hash?) of the password

Why is this an issue? Other people call this 'issue' PKCS5.
"those where"

</grammar nazi>
How to hire salespeople for your startup
If you're a gun salesman, you can get in trouble if you sell a gun to someone knowing that they're going to use it to kill someone. You don't get in trouble if you just sell a gun that happens to be used in a crime. I think this is a pretty common sense state of affairs. In this case, if GoDaddy continued to host the site after being made aware of its nature, why shouldn't they be held liable for helping to perpetuate the crime?
The "no man's land" DMZ between the Koreas is doing very well: http://news.discovery.com/earth/korean-dmz-teems-with-wildli...

Edit: http://www.guardian.co.uk/environment/2012/sep/06/wildlife-h...
First, I don't think that what Amazon, Google and others do is just "seen as tax avoidance". Their scheme is clearly devised to minimize taxes they pay in countries where taxes are high and pay most taxes in Ireland and Luxembourg where they are lowest. UK also remarked it and is searching for ways to counteract it.

Second, this idea is just an idea, not a law project or proposition. There have been reports as official as this one inciting free downloading and instead, we got hadopi law...

Third, I find this idea quite interesting (at least new). It is quite different from other internet taxes (Germany's google tax for example) in that it gives a reason for taxation other than the worsening of old businesses. The real idea being that the exchange of personal information for internet services is a trade that needs not be untaxed, as barter can be taxed.
Baffling that you mention the guidelines when your blog psot (although not submitted by you) had a tremendously link-baity title and had little of interest to say.
You're still stumbling through systems you are not explicitly invited into. I understand why you might feel that good intentions validate the act, but assuming that all administrators are so gracious would be dangerous :P
Yep. I have a 'smartphone/player' which sites at home, only used for testing.

I use an LG 'dumbphone' daily, with physical buttons and no internet.
The project that I am working is document-oriented, meaning that the schema cannot be well controlled. We end up with a lot of code is very guarded code that looks something like this:

if(((json.author || {}).lastPublish || {}).publishDate)) {
do something
}

It can be replaced with:

if(jsonPath(json, "$.author.lastPublish .publishDate")) {
do something
}

Or better, get all book publish dates, regardless of number of books, if any even exist, and those that might have a missing publishDate:

publishDates = jsonPath(json,"$.author.books[*].publishDate");
Stop being creative! You'll give us all a bad name...
Bodegas Ramon Bilbao Winery, D.O from Rioja
Plea bargaining has been here for many years. As bad as it can get, it is the default operating mode. Trumping up accusations in order to scare the defendant is a negotiation tactic that comes in package with it. So what can we do ? Is it a good idea to ban plea bargaining? I read that 90% of law suits end in plea bargaining, so, banning this avenue would DDOS the legal system.

Justice being the best your money can buy - it's a sad reality. They can charge an innocent and he would have to spend all he has to prove he is not guilty. How can we stop that?

Maybe we need more lawyerless law suits, like those from Small Claims Court, to even the playing field.

If only we could get rid of mandatory minimums and put common sense back in the driving chair, it would be much better. Mandatory minimums are one of those thought free zones of US, together with the war on drugs, war on terror and "won't anyone think of the children?". I believe we need more common sense and ethic into our justice and less automatic rubber stamping of convictions.
I've honestly no clue - from my perspective it was a statewide edict passed down last fall - there's probably more to it but I've not been filled in.
Sorry about that, I'll look into it.
Duh? Why would google have to participate? If the journals don't want people reading online, why do they put content up in the first place? Then they can always ask google to no longer link to their content if that's the problem..

No, the real issue is that they don't know what to do, or are afraid to take risks and do the right thing so they try to take the money where it is. And I'm not being hypocritical, I sincerely do not see why it would be fair for google to pay the newspaper: seems to me like it's a win-win, where google gets ad-money, and the newspapers get traffic. Now if the newspapers are not capable of transforming traffic into money, that's another issue, and google isn't responsible for that..
Some of this was useful. Thanks. It's fun to hate on Hotmail users, but perhaps the person's ported over to Gmail and just uses their old hotmail handle because they saw no reason to change. I'm not sure that filter is any more legitimate than one that would include AOL or Yahoo.
Considering the blood lust bullying creates on here, I'm quite surprised to see so many people rush to the defense. This is nothing more and nothing less than a site profiting from and enabling bullying. Maybe if the victims were more sympathetic to the HN crowd...
With your bar example what crime could you charge the bar owner with? It's a very sleazy thing to do but I don't know of any laws in the United States that it violates. If the ex-boyfriends took the photos than they own copyright to them and as far as I know the subject has no rights to them.
The Carte Bleue system is more or less deprecated/integrated now, AFAIK they can all be treated as Visa cards
The Chinese government appears to have completely blocked GitHub via DNS
Is there any point in having medium-grey text on a slightly lighter grey backgound, other than to make it very hard to read? http://contrastrebellion.com/
The entire article can be summarized as: "depending on your user base you may or may not benefit from tutorials". I was expecting to see practical advice, and came away disappointed.
Yeah, it's very common. But it's hard to find people outside your circle of friends who'd like to do it.
http://colorlessgreen.net/
assuming that the majority of the work at commercial company X is done by people who weren't long-ago HS students themselves, often with minimal training and support at their company, I agree, there's likely very little difference, other than the mistakes will be more open and easier for people to see and fix.
It seems like poor form to post publicly the names of people who are using your app because they admit they've lost a bit of control over some part of their lives.
I'd make that optional.

If it is optional already, make it obvious that it is optional so that you don't lose conversions on the front page.
> ...then you can bet I would be charged with a crime!

What crime? I can't think of one that would apply.

> Acting in concert with someone else to violate someone's rights makes you liable...

This might be where our opinions diverge. To what rights do you refer? I think your right to privacy may be waived when you consent to have the pictures taken and sent to a third party without a written contract.
Of course not - that would be an admission that they did it wrong.
Pretty sure if they were to add a whitespace sensitive syntax ala python/coffeescript and get it compiling to js they'd be riding to victory. From what I can tell there is actually a project https://github.com/turbolent/ralph to bring dylan to the web.