skysight-inc/HackerNews huggingface dataset:
Was about to state the same. The encryption is Dotcom's shield against future lawsuits toward himself or Mega. The simple fact that it is technically 'impossible' to know what users store on their servers protect them from the megaupload situation happening once again.

As read elsewhere, do not store any confidential file on mega: the encryption does not protect the user, but the platform itself.
Windows Phone Freelancers
If you're a freelance dev looking for windows phone work, please sign up on matchist.com. We have an interesting project but no devs with this skillset. Also, if you're a .net dev, sign up as well. We have many projects but not too many .net devs.
No normal bank can hold your founds for 180 days for "review". If any bank in any EU country tried to do that, they could get sued to hell.
Yet paypal can get away with it, but how? I don't know.
Great quote. Chomsky has an amazing talent for really getting to the heart of issues and framing them in useful and insightful ways.
Lisp's homoiconicity comes with the cost of some extra syntactic weight that Haskell doesn't have to bear. (It's also nice that "lambda" is considered so important that it's given a single character in Haskell).

I'm not familiar with J*, and it seems to be difficult to search for. Do you have a reference so I can go learn about it?

http://rosettacode.org/wiki/Sorting_algorithms/Quicksort#Has...

http://rosettacode.org/wiki/Sorting_algorithms/Quicksort#Com...
ANd 'DEL' is 0x7F in ASCII - so it would punch all the holes, the only way to make 1 char punch turn anything to the same thing.
Warning to hackers

Hackers are the new Sicilians and blacks.

Don't snitch.

Snitches get punished both by:

The person being snitched upon

The person who is being snitched to.

This article and many other comments herein support this view.
Sounds like we need a tor-like protocol for Ethernet.
Also, they have labor strikes,

http://news.infoshop.org/article.php?story=20101209231616269
My preferred method is a couple hours of Nethack.
Two completely different issues:

1. Exploit discovery.

2. Automated service attack.

From the information given, it seems Al-Khabaz did exactly or better than what was expected of him for the first.

But why, if he was simply check for the existing vulnerability after informing of the first, did he launch an automated attack?

I suspect Dawson College has sound reasons to treat him the way they did for both instances.
Good Ratchet, Bad Ratchet
Hybrid Cloud Power
The Inauguration (Instagram Style)
Amazon Woos Advertisers with What It Knows about Consumers
Design Like No One Is Patenting — How SparkFun Stays Ahead of the Pack
As a mechE, I was brought up on Matlab. We were taught to use ii, jj, kk... as our index variable names. Many years later, I still prefer them to i, j, and k.
Would you prefer "stop posing"?

You're complaining about social priorities that have arrived at tweetable pictures before diabetes management -- while noting you haven't the diligence to apply yourself to the problem. Well gee whiz I am just not sure I see the point of that particular statement. Except to put everyone on notice of your noble intentions.

And as I noted, at length, it's my experience that this sort of thing does more to hinder the people who are quietly getting on with exactly what you'd like to see done.

So please get busy. If you cannot manage that, get out of the way.
The first part of the article is of unusually low quality for Ars Technica. It seems like the author is trying to bash Mega for being reportedly lazy in their implementation.
This really is a shame because the parts regarding entropy, deduplication, and the conclusion, are very relevant!

> Files and folders, therefore, are encrypted with symmetric encryption. Symmetric encryption means the same key is used to encrypt and decrypt your data; this is less secure than asymmetric encryption (where one key encrypts and a different key decrypts), but it's faster and easier to implement.

Asymmetric encryption is not appropriate for encryption of large amounts of data (or would require incredibly large keys to work). Symmetric encryption is always used to encrypt large chunks of data, and asymmetric encryption can be used to encrypt a symmetric key.
The article seems to hint that Mega was lazy in its implementation, that's not really true.

> For the data stored in Mega, the encryption key used is generated for you at the time of sign-up and is itself hashed—or scrambled—using your account's password.

The key can't be hashed, or it couldn't be recovered. A hash is meant to be un-reversible. Unless the article means that the key itself is a derivation (a hash?) of the password. This would indeed be a major issue!
If the key is encrypted using the password (hopefully after running it trough a PBKDF), it is fine.

The absence of a password change option is indeed worrying, but the absence of a password recovery option is reassuring. If you lose your password, then you lose the ability to decrypt your key. If you lose your ability to decrypt your key, you lose your data.

It indeed is problematic that you can't back up the key though!
>It's not really mutable, because it isn't a variable. However, if there is a variable by that name, Matlab will use it instead of the complex constant.

This is what i mean with a sort of special syntax. It's awful corner case.

I don't like the Python syntax either. What would be wrong with Math.C(1,1) for 1+i? Or how about 1 + Math.I ?
the worst part about this whole article is that the professors voted to kick him out -- not the pointy hairs.
Isn't in-browser crypto clown crypto by definition though?

After all, unless you audit all the code fetched each time you load the page, they can mess with the code client side at any moment without anybody noticing. Is this not more telling about the limits of webdev rather than the skills of Mega's coders?
People run all the time. When you get caught it's a fight or flight response. It doesn't have to be entirely rational. Usually it isn't (few people actually out-run the cops).

This has been known for a while. It was reported (and discussed on HN) when he was first arrested.
The whole article didn't make such a claim either. Your hate boner is clouding your judgement. Your article is far more biased and far less useful than the original. Especially all the random off-topic nonsense like "you should totally add error checking" and "lets change the style for no reason because I want to pad the length of this".
The design is optimized for Retina Displays – the typo is perfectly readable and the contrast is great; on 2x devices.

Less so on 1x though, agreed.

https://s3-eu-west-1.amazonaws.com/d013/Screen+Shot+2013-01-...
Personally I am with Norvig on this issue. Statistical methods work and are progress.
How much speedup can you get with CUDA or OpenCL?
Nice to finally have something going the other direction; The recent SoundCloud redesign is a usability nightmare.

> SoundCloud: Mind if we keep playing music after this song with no indicator of how to stop it or setting to prevent it from happening? Too bad!
> These free courses (some offer certifications) offer an excellent path toward obtaining the requisite background for becoming a data scientist. I’ve put together a BDR Data Science “pseudo degree program” for you to follow.

Here's my question as a have been thinking about pivoting into Big Data recently.
I have a non-technical BA degree, but taught myself programming and have worked as a Software Engineer, Sr Software Engineer and Lead Engineer at a variety of startups. Since I dont have the math background I have been taking classes on Coursera in math/data science etc.

But I am torn on whether I need a MS degree in Applied Math/CS/Statistics etc. What is recommended? I have already read many blog posts/quora etc on the subject.

Also, do people compete on Kaggle etc to get their skills up?

These Free Big Data learning materials are great, but all the job postings for these positions want graduate level math capability, which makes sense. Whats the best way to jump int this?
They advertise themselves as "THE PRIVACY COMPANY". Any problems with that image should be exposed and shamed.
I really don't like the "Virtuous Cycle of Web Applications" [1]. It claims that retaining users amounts to doping them up every now and then with a "new functionality" to excite them and get them to use it again. Basically, feature spam.

Perhaps you're reading more into it than the article actually said?

Another perspective would be that shoving every last feature in your new user's face on day one might be overwhelming and thus counter-productive. If you have a lot of functionality to offer, it might be better to start with the basics, and then adaptively introduce more functionality -- starting with the most relevant -- until the user is fully up to speed.
Deploying Node.js with systemd
How can you be so attached to taking your hand off the home row to move around? Or to that arrow shape?

This comment thread is kind of blowing my mind, how can so many people have an issue with this? It's such a tiny simple thing to put into muscle memory. Are you guys all hunt and peck typers?

I feel a little bad for being insulting, but it really is hard to imagine so much resistance to memorizing j=down, k=up.

The hjkl pattern is the same pattern as the arrows at the top of dance dance revolution and people seem to pick that up pretty quickly.
>I still wonder to this day why Haskell programmers want their language to be loved so much.

I don't. I just talk about it so that some of the brighter people out there will try it out. This increases the pool of people for me to hire as haskell programmers that can get started right away instead of having to learn first.
Technology is not the web
At least once a quarter I'd have a student working on some programming assignment on one of our unix-ish systems where they named the executable "test" and couldn't figure out why it wasn't doing anything they expected.

I also got to the point with FORTRAN (yes, I'm old) students where I'd cut them off and tell them to count the columns and make sure each line started with 6 blanks, not 5.

My favorite bug is still some piece of C code buried in a library that was like this:

if (flag == TRUE) ...

Or there's the old for loop typo (much easier to detect on today's high-DPI screens):

for(float x=0.0; x < 3,4; x = x + 0.1) ...
Canadian Government loses personal information for 583000 students
> Unfortunately for Mega, it's generating the RSA keys with Javascript, and the method employed doesn't do a very good job at all of capturing entropy.

I think that the vast majority of security experts advise that none of the crypto should be done in JavaScript, especially key generation.

But I'm guessing they wanted to do it that way so that the key generation is done on the client side. They could generate high-quality keys on their servers through the normal means of doing so, but then they have access to all user's private keys, and part of the point of this service is that the users don't want to trust the service (ie, Mega).

Thus they decided to generate keys on the client, but probably had to debate whether they wanted to get Java involved or not. (Java applets, as far as I know, would be able to access the system's native entropy pools for good quality entropy.) For simplicity and ease-of-use, perhaps they decided to avoid Java. They are probably also anticipating the release of native crypto libraries in JavaScript in the relatively near future, which would likely include access to system entropy, and so they may consider this a somewhat short-term problem.
Good bank robbers use digging equipment, not guns...

http://www.spiegel.de/international/zeitgeist/berlin-bank-ro...
True, but then sites who are cavalier about security are unlikely to be the ones who think of hiring professional pen-testers.
Agh, not again. As far as Kurzweil theories are semi-crazy and border on beliefs, he is not forgetting about social learning. What you are forgetting is that these things could be done much more faster on a machine than on a human being, especially if we had a better grasp on how they happen. Especially considering they don't need to also develop a physical body. And some things that we learn when we are babies could be "built-in". Also, I don't believe that Kurzweil would say "We wouldn't deliberately build in any pathologies of any sort."

And to finish this rant, the idea is that this "improved social learning" would also be applied to humans, not only to AI, because it would be a really important tool. And that may be the main reason why we would develop something like that.
1) It's referred to as "satire." It's fairly conspicuous considering that I left out a description of the actual product, placing emphasis only on the age. It was an attempt to demonstrate the absurdity of this practice.

2)The app is a fine app. I don't believe that it is comparable to Fruit Ninja, but still a fine app. Why does this make me either a hypocrite or a troll? How is the quality of his app pertinent to my actions at all?

3) This is an entirely unfounded ad hominem attack. If you really believe this, then I give up. I can't argue against people who dismiss me because they think I'm envious. I think my points are of merit and pertinent to the conversation. This is supported by the healthy number of up-votes it has. If you want to dismiss it as "bitterness," I can't stop you and I don't really care.

4) I'm not comparing ages, I'm comparing stages of learning programming. Whether he's 14 or 40, he has only recently begun programming. A beginner at 40 will face similar challenges. Learning a new skill is difficult for anyone of any age. Your logic is either a) circular and incoherent inasmuch as it is predicated on having prior knowledge about programming when one is first learning programming, or b) not applicable because it deals with a factor that, as I've already said in my above post, is irrelevant.

5) The pricing comment did not pertain in any way to his app. It was directed at the "support independent developers" argument to which I drew parallels from his practice. I am aware that the app is free. If you actually read my comment and considered it, you would notice that it's not directed at the kid.

5) What dictates that I can only provide criticism about the app itself? It is totally within the realm of reason that I critique his marketing practices, etc. Why does the fact that I criticized his use of the age belie my "belief in what I'm writing?" Why is this a rant? It was a pretty well-structured argument touching on what is considered a contentious practice.

6) No, you are making an (unwarranted and incoherent) big deal about the fact that I did. I think his app is fine. I wouldn't use it, though.
I think one of the most important features of typeclasses is the ability to be polymorphic on just the return type of an expression. For example, there is a typeclass called Read which comes with a function called read:

read :: Read r => String -> r

That is, you get a function from a String to whatever type is in the typeclass. It's the opposite of toString. This is also used in a whole bunch of other contexts like numbers--numeric literals are polymorphic, letting you add any numeric type you want and still use literals for it.

As far as I know, Go cannot do anything of the sort.

There are some other nice features of typeclasses, like the ability to have multiple types. That is, you could have a typeclass for multiplication that allowed you to multiply two numbers, two matrices or a number with a matrix. You can even have typeclasses that are recursive, allowing you to define them for an infinite amount of types: you could have a typeclass for functions of any number of arguments, for example.

I think Go interfaces do none of that as well.

Now Rust, on the other hand, actually* has typeclasses.
why the downvote ? My comment was based on what is written in the grey box on top of this page https://www.paymill.com/fr-fr/documentation-3/introduction/b...

You should consider that direct debit as a payment method needs an activation process of about 7-14 days. Therefor you won’t be able to use direct debit without completed activation process.
Please note too that this service is only available in Germany right now!

EDIT: checking the terms of service fine printed at the bottom of the page I finally found this

3.1 The merchant receives the right of use to the Paymill platform limited to the duration of the contract,
territorially restricted to the following countries, which is non-exclusive, non-sublicensable, non-transferrable and non-assignable. Countries in scope: Andorra, Belgium, Denmark, Germany, Estonia, Faroe
Islands, Finland, France, Greece, Ireland, Iceland, Italy, Israel, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Austria, Poland, Portugal, Sweden, Switzerland, Slovakia, Slovenia,
Spain, Czech Rep., Turkey, UK, Hungary, Cyprus (Greek part), Vatikan City (State). The right of use is valid
for access to the platform via the Internet and for use of the functionalities associated with the Paymill
platform in accordance with the regulations of this contract and the documentation. The merchant shall
be entitled to use the documentation solely for the connection of the utilized data processing system to
the Paymill platform and to store the data transmitted to the merchant via the Paymill platform on its
data processing system or a data processing system of a third party authorized by the merchant.
The article reminded me exactly of Diaspora, but more about the gamma-ray burst in the plot. If you haven't read the book and are interested in this sort of thing, I highly recommend it.
Github passes 5M repositories and 3M users
This is a great game and it's well-suited for the iPhone format. It took me a few minutes playing the "Frenzy" mode before I realized I could use both thumbs (duh). How are you liking Unity compared to Obj-C?
Colleague had a long long debugging session doing MDA based code generation, turns out JET (java/ibm/eclipse) template engine had a stupid arithmetic bug, the kind you'll only investigate after everything in the stack has been checked.
Listen, the remark above which you are currently criticizing was not bitter and was not a complaint about my situation. It was intended to be supportive of raganwald. Perhaps it utterly failed. No big.

If you would really like to help me, I would appreciate if you stop trying to give this sort of "social" feedback to me, especially publicly. It isn't going to help me. I understand the social challenges I face far better than you do.

However, there is a type of feedback I am in desperate need of and cannot get. If your remarks to me actually are motivated by a constructive impulse, I could really use some feedback, probably privately, to help me start turning some of my stubs into posts. There is a yawning chasm in that regard which I don't know how to cross and no one can tell me how to cross. I could use a sounding board to help me bridge it. Otherwise, please just let it go. I am making inroads on quite a lot of things.

Thanks.
That's not how it works, though. Rough steps for how a system like this can work (bearing in mind that Mega might be doing it entirely differently):

1) Alice takes file P and hashes it to produce key K

2) Alice encrypts file P with key K to produce file C

3) Alice encrypts key K with key U (her user key) to produce key X

4) Alice sends key X and file C to Mega for storage

When Bob does the same steps on a matching file, the only things that differ are key U and key X -- these are his user key, and his user key for the data. That means that Mega can deduplicate file C freely, because they're identical.

Note that Mega never knows the hash of the original file -- key K -- or it'd be able to decrypt the files.
Plus quicksort is a classic morass- by the time you harden it enough to deal with real world data you could have written a proper merge sort with similar average case performance and much better worst case guarantee. My rant on quicksort: http://www.win-vector.com/blog/2008/04/sorting-in-anger/
Excited to use this, but I don't have installation instructions...
Until just now.
I am not a Godaddy fan by any means, but I'm finding it difficult to ascribe blame to them for this incident. Godaddy lets people register domain names; it is not their responsibility to censor content.
or the color of my tie

This kind of response further devolves the discussion. I said nothing so flippant, and suggesting so is disrespectful to me.

Neither of those are ways to disagree with someone's words.

Hypocrisy shows that someone either doesn't understand a problem, or that they are not honest in arguing against it. Finger pointing shows that they want someone else to solve this problem for them, which suggests that they feel superior to the issue.

Hacker News has specific guidelines discouraging incivility as well as a long-standing antipathy to Ad Hominem abuse.

To paraphrase your original article, Why the fuck do people on Hacker News always cry "ad hominem" and point to the guidelines so much? Ad hominem attacks are far more common in real life, when people actually know each other. I am only aware of you insomuch as I have read "your words", so why are you so quick to assume that I disagree with you personally?

Your original post is either naive, flippant, or blinded by emotion. It isn't constructive, it denigrates the work of others, and childishly demands that the world be a better place.

Don't lean on ad hominem, that only serves to mask that there are far bigger problems on the table.
I don't agree that expulsion is the correct reaction, but when he ran the pen-test software, what he was doing was wrong. It's one thing to stumble upon a bug while you're developing an app, and report it. That's totally respectable. Running pen-testing software without permission is akin to walking up to a stranger's home and testing that all the windows are locked, with a crowbar.
I'd be totally in favor of this lawsuit if they hadn't included GoDaddy (as much as I don't like them).

But at least we can see once again how well the Streisand effect works:

> TEXXXAN.COM has currently been placed into MEMBERS ONLY MAINTENANCE MODE due to scheduled maintenance and updates. Normally this would be unnecessary but unfortunately the extremely large amounts of traffic to TEXXXAN.COM has caused overloads when performing scheduled maintenance.
I'm sorry to hear about your father.

The patient experience survey[1] is not for serious events like your father's.

There are other methods used to capture that kind of information. The Hospital Event Statistics[2] database is one method.

I fully accept (I've already said in this thread) that the NHS complaints procedure is sub-optimal. Often people say that complaining is as traumatic as the event. People seem to understand that mistakes happen, but when clinicians appear to lie about those events most people are (rightly) hurt and outraged. I've seen a lot of improvement in the complaints handling of one trust in one county; I have no knowledge about other complaints departments. (But I suspect they're pretty bad.)

There are organisations like PALS which should be feeding information back to the trust, even if you're not making a complaint. They should also be helping you with the procedure of making a complaint if that's what you want to do.

LINks don't talk about individual events, but should listen to people talking about general experiences.

I'm not sure what can be done about the process of recording patient and relative experience after serious awful events. I welcome any suggestions.

[1] (http://www.dh.gov.uk/prod_consum_dh/groups/dh_digitalassets/...)

[2] (http://www.hesonline.nhs.uk/Ease/servlet/ContentServer?siteI...)
Oh, the things a little syntax highlighting can prevent...
Thanks for posting this -- I just went and fixed just such a loop in my own code.