skysight-inc/HackerNews huggingface dataset:
That's a claim that hasn't been independently verified. Absent such proof, I'd expect there to be a ready mechanism to get key material off the chip.

Even if the claim is correct, there is no guarantee that the implementation that does use the key material can use it in a way that doesn't reveal the key in another way.

Other supposedly secure key storage mechanisms have had disappointingly little luck against determined attackers. Ask any cryptographer about attacks that reveal key info in deployed and implemented crypto-systems.
R.I.P Mr.Ebert - I've spent many an idle hour reading his works, many of which, quite frankly, were more entertaining than the movies themselves and opened a whole world of cinema to me.
If it's any consolation, you wouldn't have to write any Ruby code with Jekyll. You'd only write HTML templates, Markdown/Textile, and a sprinkle of YAML.
Ebert made his name in movie criticism but he was one of my favorite writers, period. I've read him since I was in junior high...it sounds silly now, but the way he would give four stars to what seemed like just a shallow blockbuster action movie but then justify it for doing shallow action wonderfully...that taught me a lot about how to judge things on what they purport to do, rather than just against what you, the writer, prefers.

As good as his four-star reviews were, I still loved reading his 0 to 1 star reviews. He was at great at ripping movies as he was as exalting them.
> It doesn't seem the author is complaining about all externalization, just the externalization...

... he personally does not like.

That's where the irony lies. He is saying "don't externalize in this [personally valued as annoying] way; do it like this [personally valued as less annoying] way."

He's suggesting people stop externalizing by way of another mode of externalizing. It's still externalizing. The implied meaning of his article is not congruent with the literal meaning of his suggestion for improvement.

[edit: clarity]
Ebert really was an eloquent wordsmith.
Sharing is caring (to a certain degree), if your sharing is not just pure bragging, the I can see only positives on it. E.g. somebody sharing on how good the food is in a new restaurant is genuinely happy about the experience and wants his friends to check out this restaurant too, as they might like it as well. This is good motivation and basic human nature
. Vs somebody that goes in a very expensive restaurant (that everybody knows about) and shares just to brag about it/ show their social status (this might just elicit envy from their friends, another basic human emotion). Delivery style and context are very important in this case.

On the other hand I have friends/ acquaintences that don't share at all and just keep it to themselves. To me this is selfish and just as bad as over sharing. A good friend will share both good and bad news. People that share over selectively, or dont share at all are on the selfish side.
Jesus. What a brilliant effing writer, whether you agreed or not, and a fundamentally decent man.
While it might be cheap to remember a critic by something as sensationalist as a scorcher - and Ebert was of a higher caliber than to build a career on the entertainment value of them - his review of "Highlander 2" has been a favorite of mine for its good-natured bickering about the gaping holes in the film's logic: http://rogerebert.suntimes.com/apps/pbcs.dll/article?AID=/19... (Cache: http://web.archive.org/web/20121026130620/http://rogerebert....)

I think what set Ebert apart is that he consistently judged films in the context of their ambitions. An action film was good so long as it had effective action; films purporting to be more cerebral in nature had rather more to answer for. He resisted the ivory tower most other writers with his level of film knowledge would climb.
Probably the same reason civil engineers design every individual component several times stronger than they need to be. Redundant safety points mean multiple things have to simultaneously fail instead of just one thing.
Wrong, stop, I can personally name forty people working on it right now. Cancer is not a single thing, and progress is made on every front, every day.
Agree, though is it actually much different from say http://www.apple.com/macbook-pro/ ?
It isn't a rom. It's a launcher. You can download and install it from Google Play.
So, Did Tim Ferriss's BitTorrent Book Gamble Work?
Not half bad, but drawing on a line of S.J. Perelman's about a movie that "... provided a snug return for its investors, and was retired to be cut into ukulele picks."

And if you like entertaining reviews, the "Cloudland Revisited" pieces from The Most of S.J. Perelman are well worth the price.
I'm not sure what you are talking about at this point. You are mad because taxi drivers are supposed to follow the law, because of slavery? Seems a bit incoherent.
I bet you have had to write some SQL... (:
There's also gdbtui which is built-in (gdb -tui or "layout next" when in a gdb session) and not too bad to at least view the code and type commands at the same time.
That job posting couldn't be more boring. You'd have to kill me to get me to consider that job.
From the THR review - part of the reason I liked Ebert - he wasn't fundementally getting his rocks off on being a cynical asshole:

http://www.hollywoodreporter.com/news/roger-ebert-dies-film-...
“I am, beneath everything else, a fan. I was fixed in this mode as a young boy and am awed by people who take the risks of performance.”
Negotiating two rounds in a single shot
I can think of no better way to learn about the art and history of movies than to read through Ebert's Great Film articles. He did such a great job of putting films in context. I loved how his "Great Films" articles always had a good mix of films from the first movies to recent years.

http://rogerebert.com/apps/pbcs.dll/section?category=REVIEWS...
discredit the NK government by showing a bunch of kids can hack them.

enable the masses in NK to access the real internet.. create dissent.. initiate homegrown civil war.
At the risk of dissecting the frog, the wit is in the assumptive twist about The Brown Bunny.

He was right, by the way: he did indeed get thin (he stopped being able to eat after losing his jaw to a surgical mishap), and Vincent Gallo is indeed still the director of The Brown Bunny.
Go to bed at 9pm, wake up at 6 and work 1.5 hours before work.

And then you have weekends.

Project idea:
Create URL shortener in Ruby on Rails that works like tiny.cc (very useful).

Then write in your resume that you have 1.5 yrs experience in Ruby on Rails. This is hot shit right now.
Death of Jody Sherman a Wake-up Call for Startup Founders
>Even though this information was accessed, the passwords stored by Scribd are encrypted (in technical terms, they are salted and hashed). Most of our users were therefore unaffected by this; however, our analysis shows that a small percentage may have had their passwords compromised.

Could someone explain me what this means: "our analysis shows that a small percentage my have had their password compromised" ?

Do you think this refers to the fact that they might have conducted a statistical analysis which evidenced the fact that _potentially_ a relevant percentage of password could have completely decrypted?

I mean, is this warning just the outcome of a statistical analysis on the possibility that password could have been decrypted?

Or they are still just referring to the fact alone that a small percentage of hashed & salted password have leaked?

I have gone through the "check your email" form. And this was the result:

>We're very sorry to tell you that your Scribd password was among those compromised. If you have used this password on any other services, you should change it immediately.

Compromised here refers to leaked, or potentially decrypted based on some sort of statistical analysis they made?
That twitter quote is pretty funny.
Meteor Rendering - Meteor Devshop 2
Yes, of course. Thing is you can't really predict huge growth scientifically, but you can make good growth happen artificially. Now, if you are lucky, the product will catch on and grow naturally. But its mostly luck. Still, not a bad thing, because you can make a fortune without crazy growth. All you need is a very focused marketing message and a niche that is dying to give you their money. How do you find those? I'm not telling.
> As good as his four-star reviews were, I still loved reading his 0 to 1 star reviews. He was at great at ripping movies as he was as exalting them.

It's typically harder to write a good positive review than a good negative one. It's often hard to come up with praise and word it so that it doesn't sound like a bunch of thinly-veiled cliches strung together. This was actually Ebert's greatest strength, in my opinion.
Despite the fact that I feel weird about Facebook making a phone, I have to say this page is awesome!
Ask YC: Should we re-submit our application because the answers are too long?
I am very embarrassed at this, we applied to YC for the current batch but somehow missed reading the 120 words limitation! There are 4 of us; we are running a startup which has some clients and revenues so we could take out just one full day together for the application. I learnt about the 120 words limitation today and am feeling massively stupid. Should we edit and re-submit as a late application? (Of course, it would be the same idea / startup)
Philly Enterprise Hackathon apply by April 19 for $125k in cash and prizes
http://en.wikipedia.org/wiki/Salt_(cryptography)
He was active in tech circles long before that sort of thing was cool. He was a passionate advocate for Apple and the Mac during the dark days before The Return of Steve, for instance, and used to write a regular column in one of the big Mac magazines (can't remember which one, unfortunately). You couldn't read the columns without realizing that he wasn't a non-techie posing as one -- he really was a power user, a gigantic nerd who loved everything Mac at heart.
I agree with this. Media queries are a tool that eliminates the need to maintain separate HTML templates for mobile- or tablet-specific versions of a website. They work well at this task.

Element queries as described by the author address an entirely different set of concerns, which is that modular components of HTML might be re-used in varying situations, and depending on the implementation you might want to style them differently. Media queries are the wrong tool to solve this problem.

The problem is that when we want to use this:

.testimonial (max-width:27em) {font-size: 0.8em;}

We have to use a context-specific style definition instead:

.testimonial {font-size: 1em;}
.signup .testimonial {font-size: 0.8em;}

Or, better (from the parent):

.testimonial.vertical {font-size: 0.8em;}
.testimonial.horizontal {font-size: 1em;}

You might still have to revisit each of these styles in a media query to apply changes depending on the global presentation. So while the proposed element query might eliminate the need to chain selectors, I do not believe that it simplifies media queries in any meaningful way.
Ask HN: How to develop competitive spirit?
Ok. This may sound weird to many but let me tell you my story.
I am a proficient developer and entrepreneur. I always come with many big ideas. But, as soon as I realize that it will affect someone else badly directly or indirectly, I stop working on it. Whenever I think that if I win , someone else will lose, I stop participating in that competition.
I hate Amazon and Walmart, as they destroyed many local shops.
I learnt quite a lot in robotics but gave it up when I realized that many people will lose jobs because of automation.
These ideas have got fixed in my mind and I can't remove them. I am not able to progress in the real world but I can't find any flaw in my ideas. I don't understand why people compete.
Does any one of you feel the same? Did you ever have this thought? If yes, how did you overcome it? Or do we even need to overcome it?
> We've added file-level JavaScript variable scoping. Variables declared
with `var` at the outermost level of a JavaScript source file are now
private to that file. Remove the `var` to share a value between files.

I think it is convenient to be able to declare global variables like that but perhaps there should be a way to monitor those ; in other words, it would be really convenient to have some form of alert system to notify you when a new global variable is created.

That way, globals created by mistakenly forgetting the 'var' keyword would be easily spotted.
Don't the lionesses actually do the hunting?
Sounds to me like you need to have a discussion with your friends or pare down your friends list. If you are old enough to have a boss and a schedule, your friends should be old enough to not post a photo of their morning accomplishment. Problem solved.
Love those guys. As a junior designer, their work are very inspiring. I also love medium. I've found great deal of content on startups and building stuff. Didn't know they worked together on Medium. Great find.
It's simple. TextMate 2 for your GUI editor and vim when you need to ssh into a remote box. All of my remote machines have rmate installed so it's TextMate 2 90% of the time unless I need to use NERDtree and that's where vim is handy.
It is with a heavy heart we report that ... Roger Ebert has passed away
Vim is an awesome editor. its not that hard to learn. i used the man pages to learn vim.
Scientists 'read dreams' using brain scans
Stole my line! ;) "Sounds like you have a friends problem not a Facebook/Home problem"
Well it doesn't really matter if you expect it or not, the fact still stands that they do.
Mark Zuckerberg on Facebook Home, Money, and the Future of Communication
Is that a question or a statement?
I agree, I often will write promise wrappers for other people's stuff, but for the external surface of my module I have callbacks.

Also, callbacks ARE sometimes nicer than promises, etc... especially if you have CoffeeScript function syntax.
I always preferred his 0-1 star reviews to his 4 star reviews, only because he would skewer them with such masterful language. Ahh now what do I do when I want to laugh at a review about a woefully bad movie?
Your Facebook Home experience, like the website itself, is solely determined by your freinds' activity.

Term: Facebook IQ

Definition: The floor function of the IQ of the set containing all of your Facebook "friends"... and all of their friends.

In plain terms, on Facebook you can never be any smarter than the stupidest of your friends (to the second degree).
I know a lot of people (including my grandmother) that extended their lifespan significantly thanks to cancer research.

It's still far from perfect - my grandmother ultimately died from cancer-related complications, but she got a 10-year extension on life, I'd say it has advanced.
I don't know which code Brendan was using, but using the http://shootout.alioth.debian.org/ implementations I ran some tests of my own:

Performance counter stats for './nbody.gcc_run 50000000' (5 runs):

6232.525219 task-clock # 0.999 CPUs utilized ( +- 0.09% )
533 context-switches # 0.086 K/sec ( +- 0.43% )
1 CPU-migrations # 0.000 K/sec ( +- 66.67% )
166 page-faults # 0.027 K/sec ( +- 0.15% )
27,385,819,080 cycles # 4.394 GHz ( +- 0.05% ) [83.31%]
19,494,722,200 stalled-cycles-frontend # 71.19% frontend cycles idle ( +- 0.07% ) [83.30%]
6,403,657,640 stalled-cycles-backend # 23.38% backend cycles idle ( +- 0.21% ) [66.70%]
31,905,910,193 instructions # 1.17 insns per cycle
# 0.61 stalled cycles per insn ( +- 0.01% ) [83.37%]
1,902,954,908 branches # 305.326 M/sec ( +- 0.05% ) [83.36%]
39,925 branch-misses # 0.00% of all branches ( +- 31.16% ) [83.34%]

6.239027874 seconds time elapsed ( +- 0.08% )

Performance counter stats for './nbody_rustc 50000000' (5 runs):

6970.131625 task-clock # 0.999 CPUs utilized ( +- 0.07% )
601 context-switches # 0.086 K/sec ( +- 0.33% )
5 CPU-migrations # 0.001 K/sec ( +- 7.41% )
1,024 page-faults # 0.147 K/sec ( +- 0.02% )
30,587,917,853 cycles # 4.388 GHz ( +- 0.04% ) [83.31%]
19,368,464,950 stalled-cycles-frontend # 63.32% frontend cycles idle ( +- 0.06% ) [83.34%]
7,348,766,082 stalled-cycles-backend # 24.03% backend cycles idle ( +- 0.84% ) [66.69%]
36,479,184,126 instructions # 1.19 insns per cycle
# 0.53 stalled cycles per insn ( +- 0.01% ) [83.35%]
2,404,008,283 branches # 344.901 M/sec ( +- 0.04% ) [83.35%]
65,846 branch-misses # 0.00% of all branches ( +- 11.89% ) [83.33%]

6.977211938 seconds time elapsed

The C version is here: http://benchmarksgame.alioth.debian.org/u32/program.php?test... . It appears to be the fastest C verson on the site. The Rust version looks pretty gross (it's likely very old code), I'd like to try porting the C version to Rust (it's only 140 lines) and compare the results. Note also that I'm using a version of the compiler that's so new that it's not even in the official repo yet, containing optimizations for floating-point math.
comScore Reports, Apple widens its lead on Samsung in the US
Thoughts on Facebook Home
http://blog.zencoder.com/2012/07/23/first-look-at-google-com...
As it turns out, fighting cancer is hard. Really, really fucking hard. "We have met the enemy and he is us." Or rather our own cells, mutated through a million different gene changes with a million different causes. Progress is being made every day; it only seems like nothing compared to the massive multidimensional scope of the problem.
Unfortunately, college age is the time where some people have bosses, and others post photos of what they did last night. I have a pretty small friends list, to be honest-- it's just some of the people I know don't always think before they post ;)

It's definitely not a problem with Home, but it's definitely exaggerated when you use Home.
The problem is that the weakest link in the chain is the problem. Also, alcohol.
Facebook are trying to do to Android what Google is doing with Chrome to the desktop.
Sometimes require.js feels a bit heavy for what is mostly a straightforward concept (AMD), so I use a much simplified version of the pattern: https://gist.github.com/potch/4156519
Looks like another chicken and egg problem. Your friends won't learn to behave unless they see a reason for it. Knowing that you use Facebook Home might become that reason if they also start using it and see other crap (pun intended) on the screen.
Facebook Home destroys any notion of privacy
It has to do with margins and focus. Companies time and time again sell /shut down profitable divisions, simply because they're not performing "good enough," whatever that may mean. Google essentially has no competition in advertising so anything else is a joke compared to that. Who knows?
I try to go down to parallel, and I do sit back on my heels and spread my knees apart. I have not done the video thing but I have researched it and had it critiqued by people at the gym and by physical therapists.

The amount of time I've spent trying to refine my form and then have it do nothing for me is demoralizing. I understand that's the only suggestion people can come up with, and I understand why. I mean, I'm just some random guy on the internet and from that perspective the likelihood that I'm just cluelessly doing it wrong is high. But there comes a point for me at which I can no longer be satisfied with that answer. I've got better form than hundreds of thousands of noobs who successfully do heavier squats than me every single week. I feel like I'm chasing a holy grail of form religiously, like if I could just find the right number of centimeters to separate my legs or the exact right angle of my knees or the exact right balance of weight on my heels then everything will work out.
I loved his critics. Except those where I had a different opinion.
Is it hard to make facebook your home screen for part of the time? That'd be pretty cool, hit a button to give your phone a huge facelift* as you walk out the office door each evening, or set it to switch automatically at 5pm and back at 9am.

*if you see what I did there.
>Now that you know they are using scrypt, how will that impact your actions?

For one, I'm much less annoyed/pissed off at them now that I know they use scrypt. I'm not about to cancel my account and never use them again. And I'm not freaking out about whether my email and password have been added to a botnet cracking script running against every other website out there.

I've gotten so accustomed to hearing of companies using MD5 + salt and thinking that's secure, that is a pleasant surprise to find one using bcrypt, and downright mindblowing to find one using scrypt. Yes, my expectations are low.

>wouldn't it be better to suggest that all services provide this information up front?

Yes, absolutely.
I actually had to use something like this for a class in college… maybe 2 years ago? It was the worst thing. It would auto-grade, tell you your score, and how you could improve it. However, there was almost no way to actually respond to the grade. It would often tell you you didn't cover a specific topic, even when you had. There was no way of pointing out where you had discussed it, no way in the program of asking for a human review, anything.

All this, of course, was exacerbated by the class being run by possibly the laziest professor I had all throughout college (all essays were graded by this, all tests in class were taken by clicker, all notes were Powerpoint slides provided by the book's publisher). Possibly, in the hands of someone who actually cared about teaching, a tool like this wouldn't have been so bad—but it seems to me that someone who cared about teaching would just grade manually to begin with.
The Waiting Game: Fast Food Queuing Theory
I love the idea. It will give Rust lots of feedback about real-world, practical problems that arise on large-scale software. I think it will make it all that much more likely that Rust will be an industrial strength systems language.
Is Meteor winning now? Commit activity of Derby.js (and Racer) seem really low. I already switched once from Meteor to Derby for more flexibility (npm packages, server-side express routes, etc.). But I'm wondering if Meteor now has more momentum.
Why Does HootSuite's HQ Have Bulletproof Glass?
This particular behaviour can occur because the process is disallowed to call fork() and can be done with setrlimit() (see RLIMIT_NPROC). There should be other protections, though, because forking a "ls" is not the only way to access the filesystem.
Agreed. I think I saw that async in C# has exceptions that behave as one naively expects they should. That would make JS so much more awesome, even with callbacks. The worst part of them isn't the pyramid, IMO, so much as they all the horrible repeated "if error...."
> How long was the salt? AFIK, MD5 hashes with an insufficiently long salt can be bruteforced with open sourced CUDA setups.

The length of the salt has little impact on security beyond 16 bits or so, where it's still feasible to generate rainbow tables for all salts.

If you're storing plain hashes, it doesn't really matter whether it's MD5, SHA-1 or SHA-256 - the work required for a brute-force attack is largely the same. The next step up would be using a key stretching algorithm like PBKDF2 or bcrypt.
Alternatively, they start to think it's funny and start purposely posting the content-- until they're unfriended, that is ;)
It looks like were entering the second Apple vs PC era. Just replace "PC" with "Android", and you'll get the same:

- majority of the market uses PC/Android
- Apple's product is more polished, PC/Android is more open to 3rd party developers
Still waiting for naked domains...
Very sad to hear. I read his reviews, not really to know how a movie was received and whether or not it is worth watching (though you can do that too), but to get a nice summary eloquently discussing the motifs, symbolism, and story line of a movie after actually having watched one. I don't know where I'll get that now.

Two big thumbs down :-(. RIP Ebert.
May you describe exactly what type of equipment do I have to buy? Dumb it down, please.