skysight-inc/HackerNews huggingface dataset:
So long as the first restaurant is called Cafe Alpha and is staffed by an overenthusiastic female android, I'm happy.

(Go read Yokohama Kaidashi Kikou to get the joke ;)
well, you know. i can see now why the ccc guys hate him. my coworkers said he was a douche. and I can also see how they would say he talks more sales than skill...

but the other side of it is, he's kinda right too. he's recruiting from the ccc. a good place to recruit from. and he's talking about ACTUALLY making money on stuff. it's kinda what my mother was saying when i was doing mainly opensource stuff. she said, why are you working for free, and I said you don't understand.

Germany is a kinda socialist country. I know, I grew up there. That's why there's a whole bunch of great open source projects coming out that place. And then the americans come, and make money on it.

I'm kinda derailing, and I could go on, but I'll just leave it at he's a douche, and he may be a fraud, but the guys he's trying to recruit from are not. And he kinda has a point.

And look at him now. He's got a shitload of funds, enough to pick a fight with a government, and where's the CCC? It's still hiding behind political correctness, still doing stuff years ahead of defcon, and yet everyone talks about defcon instead.
SJCL, which Mega appears to be using, includes SHA2. They could have used SHA2 if they needed a secure hash function. SJCL also includes HMAC; they could have used HMAC-SHA2 if they really needed a MAC. CBC-MAC was a bizarre choice.

(I'm trying to address the general questions, like "why would I use or not use CBC-MAC", without getting into the general craziness of Mega's design or the idea of doing crypto in browser Javascript.)
That is very interesting. Do you have any pointers as to where one can read more about the psychogenesis of such things?
I was a Java developer, and when Sun was acquired by Oracle, I knew it's time to move on. Now I'm coding Ruby, and whenever I look back, I see Oracle raping Java - suing the good guys, adding malware to Java installers, increasingly introducing new security holes. It's such a sad sight...
Trust me in a situation of that order, you must be worried about converting your home into a food and water facility rather than worrying about electronics.
>I think it's fair to say that this is just you making a scandalous, link-baity headline to get attention.

The HN community is going to know that MS does not generally charge a subscription fee for IE, so I was not trying to be scandalous or link-baity but concisely describe my post about this unique instance IE is subscription based.

> For you to say "Microsoft charges to use Internet Explorer" then is clearly a mis-characterization of the service.

In my OP I clearly describe IE is part of the Xbox Live Gold Account which includes other benefits, I even named online game play and access to other premium content as additional benefits, so do not accuse me of mis-characterizing the service. Besides, my point was MS should not bundle IE into the paid Xbox Live Gold Account, rather IE should be a free service on the Xbox.

>It's borderline libelous since the headline is not true. The truth is that, if you have an Xbox Live Gold account, you can access the internet because one of its benefits [1] is "Explore the web on your TV with Internet Explorer for Xbox."

Did you go out of you way to make this statement to bait me because my HN profile says I am an attorney? First, my headline is true. Obviously, if IE was always a subscription service I would not have posted about this issue. I posted this because it is odd MS does not allow Xbox owners to "Explore the web on your TV with Xbox" for free,

If you are going to take MS's side on this issue that is fine, but at least justify why you agree IE should be part of the paid Account and not free service on the Xbox. In the OP I even help people make the argument for MS by suggesting posters name other hardware manufacturers who exercise similar policies, in otherwords what other hardware manufacturers require consumers pay them a monthly fee to "explore the web on your TV with (blank)"?
I would love one Email is in my profile as requested..kh
Well I wanted something gimmicky where the patron saw it being made "fresh"
Any machine can be made adequate for programming. Hack at it. So the only concerns I have left are: design, portability, durability. This thing is moving bits from space to space! It goes on subway adventures and inter continental. Macbook Air with Fedora Linux.
The question is going to be reliability in the long term. Carls Jr. uses a burger conveyor to cook burgers (stick the patty in and in a fixed amount of time it comes out perfectly cooked) for example, but they also have many moving parts and if it breaks, that is half the burger capacity gone (they have two per store usually).

With a complex machine like this, keeping it from breaking is the key. If it works well though...this really could change things.
I always encrypt any data sent to 'arbitary hosting' using GnuPG and recipients public keys. Has been working well so far. I'm also eagerly waiting for ECC version to go mainstream. My current signing key is 1024DSA key which is known to be weak. File lockers are nice service, you just need to secure any private data.
Encrypting files in the browser with javascript is a perfectly valid approach to security storing content. It's just hard to get right.
Mobile is a top trend in IT industry. It seems that almost every industry march into mobile industry.
Basically, they use CBC-MAC to verify the integrity of their script sources. This is pretty bad because a MAC is not resistant to collisions, and given the original key, it's trivial to generate alternate data that gives the same output. A better approach would be an HMAC, using something like SHA1. Doing so makes it much more difficult to perform this type of attack.
Do you mean you can buy components in Neihu or just see the companies HQs? When I lived in Taipie, it was before the metro reached Neihu so I never fully explored it.
I don't think you can blame the US government for Dotcom botching this implementation, though.
You could watch The Ascent of Man by Jacob Bronowski.
No doubt this is the future of fast food. Been wondering for years why a big player like McDonalds wouldn't come out with such an automated process and came to the conclusion it must have something to do with the economic consequences this would bring along. The amount of minimum wage jobs this would destroy, would have a very devastating impact on the U.S. economy.
Hello Orangthirty,

I understand your reservations but if you want to know about my background just ask. there is no need to attempt to slander my reputation.

If you have a product i will get you 100 customers.. but if its an idea we can only call them beta testers.

The value of the service i am looking to provide is to test the market for your idea and find out what you should be building

If you want answers, ask for them next time and don't try to slander my reputation.

Thank you
FELIX
What do you want to hire them for?

A lot of it comes down to recognizing the right tools for the job, and writing-from-scratch absolutely as few of those tools as necessary. Even very good practical crypto users can make mistakes... although in this case, Mega has used the plastic end of a screwdriver to pound nails.
I had 12,000 emails in my inbox (Gmail) a bit ago. Just archived them all.

Honestly it does feel a little bit liberating :-)
Is browser-based crypto ever feasible?

I'm surprised you're entertaining the idea. (Edit: Sorry. I misread. I was only hoping to learn something new.)

It seems like at a minimum users would need to disable all browser extensions before uploading their content. That doesn't seem realistic, so browser-based crypto seems dubious.
Need Help Finding HTML5 Application Resources
I began using codeacademy less than a month ago and have successfully finished the JavaScript, HTML&CSS, and JQuery tracks. I didn't expect to be a master at them, but I did expect to learn how I could at least go about making a simple but well-designed web application in HTML5.<p>Can someone point me in the right direction as to where I can learn how to actually begin the process of creating a web application? Thanks so much in advance.
Just realized that Graph Search is a great tool to aggregate homosexuals in any area - "Men who live nearby and are interested in men" (or replace "men" with "women"). Great tool for taking homophobia to a whole new level. One can of course argue that liberal groups can use this information for an opposite purpose.
Honestly, I have to be nervous logging into my personal account with other people standing around. The "Recently Viewed" and "Recommended for You" are full of things I'd really rather my family members and most of my friends see.
Bureau of Labor Statistics: median salaray for NYC are is $50,820. Median more so reliable for that sampling size of people. Put it in perspective. What's in it other than money? A cooler experience? A new opportunity. Shoot for so much more than money.
Korean names are in the order Family Name then First name. They refer to him by his family name, so its easy to confuse him, his brother, and his father
The TF700 has a known problem with its internal storage being incredibly slow, which could be what's causing your problems. http://forum.xda-developers.com/showthread.php?t=2066849

Firefox on Android has always been fairly fast for me, for what it's worth.
"yummyfajitas" may have been a quant, but if he's at all sincere about the questions he's asking, he's still a blithering idiot, and deeply dishonest to boot - with himself, if no one else. Here's more on the massive criminal fraud that he failed to see swirling all around him (unsurprising, perhaps, given the source of his paychecks).

http://www.pbs.org/wgbh/pages/frontline/business-economy-fin...
This may seem like a bit of a brazen comment, but... what about french fries? A burger is boring, a burger and fries is a very American meal.

They point to elimination of tile floors, aprons, hair nets, and the like, but if the customer cannot get an order of fries from this robot, the restaurant will still have to have traditional kitchen infrastructure to make french fries.
I'm not entirely sure they could. They probably felt that simple cooking of pre-prepared ingredients and then assembly wasn't an interesting problem to solve, especially since staff can also handle the other requirements of food prep (keeping equipment clean and sanitary for example).

The addition of providing a superior experience (custom meat combos? Slicing ingredients on the fly) might not have occurred to them. I think that emphasising the high output gourmet burger is the way forward. Especially since McDonald's has already proven that "Masstige" does have a spot in the food prep industry.
The GOAL of this is to get you 100 beta-testers BEFORE you start development, so you can make sure you are building the right product from the start.

My proposition however is still open to you. Send me an email and we'll talk
refreshing!
What, in your opinion, would be an appropriate platform?
it comes out perfectly cooked

That's a somewhat subjective statement.
I'm not entertaining the idea! I'm not interested in picking apart Mega, but I am interested in how people choose crypto primitives and what libraries they have available to them.

Don't do crypto in browser Javascript!
Hello 1773biz.

Everyone that contacts me via HN will get this service FREE. If this free pilot class is successful and I sense a real market for this service, I’ll launch it commercially on a larger scale.
Dotcom was not able to hire quality programmers because few (if any) would work for an illegal enterprise.
This is what I think is the speculation. Let us speculate you wanted to build a "legitimate" Pirate Bay type system, what would you have to do in order to pass the 'sniff test' for litigators while providing an otherwise easy to use service?

I am not in any way at all suggesting that Mega is doing this, or that they are even trying to do this. I am simply observing that there is an interesting case to be made where you can swear under oath you did you best to make the site secure, and yet people more sophisticated than you broke into it and had their way with you. How much liability does that protect you from? Any? All? I haven't got a clue here but I find the question an interesting one. Perhaps Eric Goldman will chime in.
We've found it's easiest to just ask for email adress twice in the initial form (and try to prevent pasting for the second field). Works pretty darn well. Email confirmation is a hassle to build and often for users to act on, from our experience.
If automated movie rental machines are so popular why hasn't Blockbuster invested millions in this idea, or are these "RedBoxes" just a cute idea that won't scale?

In 10 years I think your comment will look just as silly.
So all they have to do is switch to a proper hash function. Probably even MD5 would do.

Other than that, their system is pretty clever, they are basically shifting the server load of strong-HTTPs'ing everything to the client.
IIRC they currently mandate Windows compatibility to launch any game on Steam. You can't publish a Mac only game for example.

If Valve are serious about launching their own platform , they're likely to apply as much muscle as they can in order to get games on there.
15" Retina MacBook Pro.
WTF!?

Critique is a common learning method in many other fields, like art, music, design, journalism, and politics. Hand feeding and teaching is fine a dandy at the beginner undergrad level, but you reach a point quickly where you have to rely more on yourself to become better. Criticism starts out from your teachers and peers, and eventually you learn how to be self critical on your own.

But you are right, this isn't for most people; PhDs aren't for everyone.
This is sort of a weird assumption to leap too. Would "People who like the page Black People" also be targeted? Would Republicans target people who are marked as "liberal"? Or maybe I'm overly optimistic about homophobic people being either dumb enough or unmotivated enough to do such a thing.

Heh, if anything, I'm more worried about it bringing back a resurgence of random messages from people who found me through the old search which allowed you to search by these characteristics. A less reputable part of me would find it interesting to find other people who share interests with me and are gay in my area... I'm currently in the Midwest with a limited number of dating options.
A Cool jQuery Cheat Sheet
Fries shouldn't be a difficult problem to solve. Donut Machines have been doing something similar for a long time (production line deep frying) and I imagine that Fries wouldn't be very similar if you wanted a consistent output.
And oh.. you want some potential cheating women (or men)? Try "Married women who like Ashley Madison"... ;)
Edit: Ugh.
It's not worth having this argument in public.
Let's just say I strenuously disagree, and I was just as much there as you were.
Really interesting read. I've only ever built one feature websites so I never came across this problem, but it indeed is an awesome problem to have. "Lots of users, lots of features, what do we do?" must be such a fun problem to solve, especially when everyone is getting paid. I need a job :(.
Reminds me of old school ultrashock.com
Is the problem with the JS language itself, with certain JS runtimes or with just the idea of running a program inside a web browser to do crypto?
Looks quite neat. I'd like someone to bring some fresh approaches into this however, instead of just basically the Appstore interface with a different skin. Especially for web-apps I'm still not that sure how important the appstore starting point for finding apps actually is. How about a unified search built into the OS with priority set like 'installed apps > other available apps > local data > Google Search' ? Of course, for those who want to search by category it's still good to have a curated list somewhere. But isn't the search for webapps basically the same as a Google search with some meta information sugar on top?
The apps that I have experience with have all been no-cost.

I don't know what an IAP is, so I can't comment. :-)

edit: Thanks to Samuel for the explanation. No, I don't have experience with IAP.
Prison? That might not be the worst of it. http://en.wikipedia.org/wiki/Kilgour-Matas_report
Really?

Can you generate a JS file (that will actually execute) with the same MD5 as

alert('Hello World');

MD5 is 7ecf458bad499f6815cbc10ed597dd3a
That's what I thought when I discovered how it worked. The "WUBI" install type is (was?) a supported install type in Ubuntu. But it's been working fine and I can't think any fundamental reason why it would be unsound.

I should say there have been non-fuse related hitches with the integration with Ubuntu (grub problems).
Now here's where we will see Kim Dotcom's true colours:

Will he fix the problem and thank marcan?

Or arrest him at gunpoint, seize his property, and charge him with as many felony counts as possible?
This is the point of taking your idea through the customer development process.

Specifically to discover who your customers are and how to best reach them
Don't even need to do that -- I have Ubuntu windows open on my desktop via HyperV.

It just works.
SuSE?! That is just cruel.

The realistic choice for servers today is either Debian or CentOS. This is what you'll find in pretty much any large deployment and for good reasons.

Ubuntu may be a distant third candidate due to its recent popularity, however it was never really meant for servers. Many of their policies are problematic in a server-env and most of the perceived popularity stems from inexperienced people who, by default, use on their server what they know from their desktop.

And please don't recommend SuSE. That is really just cruel.
Not necessarily, if you look at it from the perspective of a meat's internal temperatures.
I almost feel bad for all the people without education. Robots are killing their jobs, one niche at a time.
So it's fatally broken. But everyone's ignoring Mega's upside: you get to send your sensitive data and money to a charismatic, egomaniacal scam artist!
I was asking a question not making a judgement.
You're misunderstanding the problem and so attributing it to the wrong thing. If you can change the core interaction of the mock and that doesn't make any unit tests fail, then you're not writing the right unit tests. Fix that and this problem goes away.
At this point, you should probably just cut Google in on part of your book revenue. :D
> Aaron committed suicide because depression is a disease. Aaron made a very unfortunate choice. Jeff is right in that we lost an amazing person… someone whom we all should have helped. But I can guarantee that Aaron wasn’t thinking of software or what his death would mean to our community when he made his decision. All he wanted to do was stop the pain.

I realize this is a touchy subject for lots of people and I dont mean to offend anyone. However, I feel obligated to advocate that Jeff's reasoning may have been that "Aaron was not really depressed, it as a mental and moral choice, he was already playing with all of his cards so it was a strategy" -- If Aaron didnt leave some last words stating his intentions it is hard to say for sure, isnt it? There are many people in human history outside of Christianity who have committed suicide on moral grounds[1] and while I honestly have NO IDEA which way it went, speculating strongly on either perspective seems unwise. There is a wide range of reasons why someone would do something like that. One of them is definitely mental illness and depression, one far less likely reason is the case for honor and morality -- e.g. to continue to strike the enemy and strip the enemy of their ability to attain victory no matter what must be sacrificed of ones self. Since Aaron was already playing with what he deemed "his life" some amount of mental illness could have pushed him over the edge. It could have been one, the other, or a combination of the two. I have no idea which and I dont think anyone really does, maybe Aaron did not even know. But as far as I have read all of the possibilities are on the table... Jeff was reasoning that no matter what the punishment, if the intention is to show that a law is immoral the person breaking the law should go through with being punished by the system to respect the law and have it changed. Since Aaron didn't do that, that is why he went "off the rails"

1. http://en.wikipedia.org/wiki/Seppuku
TPB AFK: first trailer for upcoming Pirate Bay documentary
Why would you use a MAC at all here? There is no secret. The hash comes from the "secure" server. What they needed was a plain old hash, not a (H)MAC. This is just an integrity check.

Also, MD5 isn't broken for second preimage attacks.

People like to repeat the blanket statement that MD5 is trivially broken, but in this case, it isn't. Still, it wouldn't be advisable to use here because it's broken in enough other scenarios that it makes people uncomfortable in general now. If they did use MD5, it's still a nation-state or significant crypto breakthrough before anyone could attack it.
> "They say they aren't making equivalent profits."

The concern is that this will be the case in the long run - i.e., the desktop search market will contract substantially but mobile searches won't make up the difference.

We know that mobile users, at least with the phones and UIs available today, are lower-intent and lower-converting than desktop users. This is a pretty big looming problem not only for Google, but for anyone whose traffic is disappearing into mobile - Facebook being the most obvious one that comes to mind.

The worries about mobile are IMO legitimate, though it isn't quite time for breathless worry.
Android's performance problems are more to do with architecture than anything else:

- Prior to 4.x the "highly optimized JVM" was "highly interpreted".

- Access to the display is gated via userspace (SurfaceFlinger) which must be invoked to composite every frame, and at least in 2.x (if not still true) unconditionally repainted the screen each frame.

- Accelerated 2D did not exist in Android 2.x, I'm not sure if it exists yet.

- None of the standard GUI widgets knew how to handle partial repaint. I think this was fixed in 4.x.

From the perspective of getting lag right, you only need to ensure there is some native code that can scroll around a bitmap efficiently. As for how that bitmap gets rendered, a few hundred thousand lines of C++ stands a much better chance of efficiency than an unoptimized, initially interpreted Java GUI framework that has no native way of expressing "allocate this temporary on the stack" ever did.

The choices made for Android might have been valid when painting a 160x200ish 16bit display (about 64kb per frame), which AFAIK was roughly the original target hardware prior to the Google purchase, but for 800x480 24bit this quickly turns into a need to generate 34mb/sec to render at 30fps, all done in software, chunks of it interpreted, on (what was initially) a 500mhz ARM11 CPU. Really helps frame the panic Google must have been in to get something on the market and fast.
Shameless (relevant) plug: I wrote a little iOS app for getting to Inbox Zero in GMail. It spits one email after another at you, forcing you to triage using the subject line and a few lines from the message. http://app.net/emptyinbox
I love my serial midi cabel since the early 90s.
Cant imagine the BIG players sitting on a table discussing a standard for music communication. It feels wrong that technology Manufacturers todays not able to give us a simple way for e.g. charging battery for all mobils with ONE Cable. Happy birthday MIDI.
This just in:
Athlete who trained doing 110m hurdles for 10 years not as good at shot put after only 2 years of training.
Step 1. Unchain him.
Steve Jobs Talk 1983 - Center for Design Innovation by TNW