skysight-inc/HackerNews huggingface dataset:
Reread my comment: the bill contains measures that make it difficult to use the act to defend copyright. If it's a backdoor SOPA (the venn diagram between those two acts are two adjacent disconnected circles), why does it do that?
I think I've only ever seen this from banks or medical organizations, where the annoyance is a little more acceptable.

I'd much rather they send me an (encrypted) e-mail, but I understand why they can't.
Note that they renamed the company from ExtJS to Sencha so some may be using that term instead (though adding Sencha doesn't make a huge difference: http://goo.gl/XXlnp)

But I guess it also includes people looking for the Japanese green tea https://en.wikipedia.org/wiki/Sencha
If NSA is trying to retard cryptography, why are they getting people to migrate from RSA-1024 to ECC? Can you find a cryptographer that believes RSA is the future?
Ha, I thought I was the only one to get annoyed by redundant messages: http://devel.io/2011/05/08/electronic-communication-etiquett...
Faster, More Flexible Queries with DynamoDB
Your Future in Internet Business Development
"She told me she did sell a wool sweater to somebody who went home and washed in hot, it shrank, and then heard no ends of complaints about it, so she resolved to never sell wool sweaters unless they are specially commissioned."

n=1 there then, right? Perhaps she was a bit to hasty based on that single data point?

One of the things luxury brands do is bake into their costs margin to account for customers like this. Or to account for unreasonable people.
The Official Yahoo Weather App Now Available for iPhone
There are many laws that were intended for x and subsequently used for Y. This is the whole problem with not watching the policce and prosecutors and trusting them to do public good. They have their own career goals and personal failings getting in the way of public goods.
Of course not - he's far too busy being Satoshi.
I recall reading an article about a pair of grad students who realized that there was a correlation between price and perceived value. IIRC they were researching condom use in the third world and figured out that the locals would use condoms purchased at stores, but would discard condoms passed out for free by NGOs. So the grad students started their own NGO that uses "cool" Trojan/Durex-style marketing to sell condoms dirt cheap.

I can't find the article, but it may be this group:

http://www.law.harvard.edu/news/bulletin/2005/summer/classno...

Also see:

http://www.fordham.edu/images/undergraduate/economics/facult...

From page 4:

Obviously, the whole point of providing condoms is that they be used for sexual activities...They are not meant to be used, for example, for water storage. However, if they are free, then there are a large number of possible uses for condoms that generate positive utility even though the benefits do not cover the costs and they do nothing to prevent the spread of HIV. For example, Epstein (2007, p271) reports that when the CSM run by PSI in Zimbabwe tried to distribute free female condoms, the officials found that people were removing the plastic rings and selling them as jewelry.
Ah, that's fair

I guess the trade-off is here that the api key cannot then be retrieved from a GUI either (because the server doesn't actually know the original key!) .. from a UX perspective, most companies show your active keys in a GUI with ability to selectively remove or replace.

Though I can't think of a mainstream API that hasn't let me retrieve api key from GUI
Ask HN: Opportunities with online audio?
Hello HN'ers.

I've become a fanatic for the Web Audio API and Javascript. I'm curious what HN'ers think might be a profitable space to focus on in this area. This is just an exercise to broaden my personal awareness. Thank you.
(I work at Stripe.)

We've thought about closing HTTP access in the past. As with a lot of security, it's a usability trade-off.

We work hard to make sure that people only ever access Stripe over HTTPS. Most people use the Stripe API through an existing library. Since the API doesn't work over HTTP, any such library is guaranteed to use HTTPS. Stripe itself is on Chrome's built-in HSTS list, sets HSTS headers, etc.

The scenario Stevie describes is unlikely to be an issue unless the user is implementing his or her own library. In that case, though, they're almost certainly going to be using test API credentials. Stripe's API will never return a successful response when you access it over HTTP, so you'll figure out that you can't do this on the very first request.

More broadly, what exactly is being defended against isn't particularly clear. There are much easier ways for someone implementing their own library to screw up (skipping cert verification is extremely common and leaves you perpetually vulnerable to HTTPS MITM), and there are many other plausible vectors for an attacker.

Even if we did change this, we'd only have solved one small class of accidental key leaks. You could accidentally specify "stripe.com" instead of "api.stripe.com", for example, and stripe.com will of course always accept HTTP. Or you could typo the domain and send your key to someone else entirely.

If we ever did want to solve this, we'd probably do something like:

- Monitor HTTP Authorization headers sent to api.stripe.com.

- Notify the user if they ever accidentally send a secret key in the clear.

- In addition to notifying the user, we could potentially roll the key automatically (though this runs the risk of breaking production code).

But I don't think disabling HTTP helps much. (I do think it'd be good if we started monitoring the frequency with which this happens -- if it's common, we should certainly do something like the above; if it ~never happens, it presumably doesn't matter.)

Separately, I think that the HMAC-based signature scheme that Stevie proposes is something we might want to do at some stage. A very early version of Stripe actually had something very similar. The issue with all protocols in this vein is that they involve considerably more complexity on the user's end and are harder to debug. But they definitely have some nice security properties.
Ask most voters to explain the reasons they voted the way they did and you would find a big disconnect between not only what they thought the candidate said and what the candidate actually said, but also between what the candidate said and what they do.
if you take some physically grounded data and change units, you won't recover different eigenvectors as long as your input data is good.

I don't think that's accurate. Consider a set of points distributed along a line in 2D. If you do PCA on these points you will find that the 1st eigenvector points along the line and the second is orthogonal to it.

If you now rescale the axes so that x is measured in meters and y in light years the slope of the line will change and so will the the 2 PCA eigenvectors.

However the relationship between the 2 eigenvectors and the distribution of the data points will remain the same. The first eigenvector will still point along the line and the second will still be orthogonal to it.

In machine learning one is interested in the distribution of the data not in whatever units they happen to be measured in, hence I don't understand MacKay's objection.
A Mother, a Feminist, Aghast
Option 1 may be your best option however I suggest you get someone who can also think for the future. So basically a 2 in 1 guy i.e. architect and admin guy who is very ambitious and willing to take your business to the next level. Offering share options might also be a great incentive to attract highly skilled individuals.
In 2011, China built as many coal plants as there are in Texas and Ohio combined
Hiawatha, An advanced and secure webserver for Unix
The XXX Factor: 7 Rules for a World-Class User Experience
I don't recall seeing a definition of a "attack" when I skimmed the bill. Since every website is always under "attack", what's to stop a company from handing over everything, all the time?
There is no anonymity in Bitcoin. There are ways to go about this, such as selling BTC for LTC and then back to BTC, and there's been a suggested modification to Bitcoin called zerocoin that would make it anonymous, but by itself, Bitcoin is not anonymous.
To be fair, the majority (52%) of Dems voted against the bill. Contrast that with 13% of Republicans.
I use Windows as my main OS, and by default npm -g installs packages to %AppData%, which is user-specific. I guess it's different on *nix, then.
My favorite is nelnet.com (manages my student loans) who emails me to tell me I have a message, after which point I log in to the website, visit the message center, and click on the message which starts my browser downloading a PDF usually containing several pages of terms and branding bullshit and a sentence or two of actual text which most of the time is nothing I needed to know anyway. And of course the link text of the message that I click on is something useless like "Message regarding your account".
Xero is a big deal here in NZ, probably our leading on-line success story so far. happy to see it pop up in HN, even if it is the other half of a YC alumnus... ;-)
CB Insights disagrees: http://www.cbinsights.com/blog/trends/venture-capital-2013-q...
"larrys, My list does not directly contradict the success of just about all luxury brands that have been successful. They would probably agree."

But your first sentence said 'My experience with prospects "with enough money"' where is the evidence (even anecdotal) to indicate that luxury brands would agree?

While luxury brands certainly have customers that fit all the points that you make I find it very hard to believe (from my anecdotal experience) that what you are saying is ubiquitous among luxury brands and that they would agree.
If the person you get your encryption keys from is "voluntarily" helping protect the nation what is really secure.
unrelated: it could really use more screenshots in the tour.
mass effect and the whole japanese industry of dating simulators have already extensively proven your point.

you don't need to specifically target women , i assure you.
This seems to the the mentioned paper, but I haven't found a copy of it yet.

Clayton, R., Osborne, R., Miller, B., & Oberle, C. (2013). Loneliness, Anxiousness, and Substance Use as Predictors of Facebook Use. Journal of Computers in Human Behavior, 29, 687-693.

http://dx.doi.org/10.1016/j.chb.2012.12.002
I couldn't find the context of the quote, but the quote alone doesn't imply it would help to complain, only that it would feel good.
Any idea why most of the world is completely blank on that map? Is there really nearly-zero javascript work done in South America, or do they just use a different search engine?
I have worked directly with one of the bidders, won't say which or in what capacity. As far as I'm concerned, this will result in six billion dollars thrown right into a hole, with no enhancement to "cybersecurity." I don't expect anybody to take my statement seriously since I provided no evidence, but I for one now see this as a giant waste of fucking money.
I like your thinking!

I have a few ideas.

First and foremost I think the internet needs to focus on one issue at a time. Once you divide the activists the whole message gets blurred and no one cares. (Case in point, look at occupy wall street, what exactly did the protesters want??)

Point two, it can't involve petitions, those are stupid and counter-productive.

Point Three, activists like to be involved. Have a way for people to earn points contacting their representatives or helping the site in other ways and perhaps be able to use those points to vote on what issue to tackle next, or the actions presented for an issue?

Really I'm picturing something like a cross between reddit and stack overflow geared towards political action. Power users can vote on issues, have meta discussions in the background, but normal users just see the one issue that's going on at the moment with a simple interface that explains the issue and has 1-3 meaningful actions they can take.

My thoughts for the 3 actions could be: Call your representative, Request a pre-addressed envelope be mailed to you so you can write a letter in your own words, or donate money to pay for mailing the pre-addressed letters to people.
Rational self interest.

It's not like they're shy about it.
Re-Ask HN: How to start Antivirus business (different timing)
from scratch?

I mean, software/tech aside, how does one get virus signatures?

Is there some repository, paid or free?

Your anecdotal experiences would be very interesting as well, in case anyone here runs some AV business.

---------------

Re-asking this again. Previous "thread" with the only but very interesting commet:

https://news.ycombinator.com/item?id=5570255
For some time I've been wondering how enjoyable the books would be now that I've watched the HBO series, in which the first season covers the first book if memory serves.
The joke may be on Zuckerberg
Does this new activity mean that Blogger will not be shut down in some "spring cleaning" in autumn?
We just launched Hello Social and we're liberating social media
Wouldn't readers be better off if the author wrote about this problem with PCA in the book, instead of ignoring it entirely?
This looks awesome! Is there anything like this for local code though? The IntelliJ/Eclipse debuggers don't seem as well designed as this one.
Clickable link to the previous "thread":

https://news.ycombinator.com/item?id=5570255
NSA has a duty to protect American commerce. For example, it is in their best interests that companies like Boeing, Google, and Goldman Sachs are using encryption the Chinese, French, and others can't beat.

This isn't the cold war anymore.
Yeah, it seems like the whole idea really got watered down somewhere along the line.
Go on Amazon and look at the "Best sellers" as that might give you an idea of what people are reading. However seeing individual reviews of each book may be your best bet as that gives you the through insight about the material.
tptacek, you've given some of the more informed comments on this thing. Could you put together a primer on what you think of the bill?
Wow, this is one of the best blog post that I've read in a long time. Very simple and straight to the point that customers really dont' know and dont' care about the technology used as long as it brings solutions their problems.
To be fair, that's just barely a majority. But I suppose it's great in the "lessor of two evils" sense.
here's a transcription of the "trials" sequence:

## TRIALS

TRIALS

Once a year, I take a month & I read everything I can by one author.

This year I read 4 books by Thomas Bernhard in one month.

And the year before that, it was everything by Denton Welch in one month.

But - in 2009 - see, this was very very dangerous - I read everything by Franz Kafka in one month.

I started with "Amerika."

It was August.

I read The Castle.

## READING

I read The Trial.

I read all the short stories.

I read The Stoker, even though it's (verbatim) the 1st chapter of Amerika - because I really enjoyed Amerika.

I read all the deleted stuff.

All the Blue Octavo notebooks.

The Burrows and so on.

I skimped on the letters.

(Don't care who he was outside of his own imagination.)

And when I was finished, I felt done.

It went quick.

## BURN

I finished early.

I was done.

I was decimated.

To program any more was pointless.

My programs would never live as long as the trial.

Hadn't he told Max Brod to destroy all of those books?

He had sad to burn them, my friend, to burn these books.

But look, here was Amerika, thoroughly reconstructed.

## YOUGETIT

And yet completely unfinished, in my hands.

What if Amerika was only written for 32-bit PowerPC?

Can an unfinished program be reconstructed??

Can I write a program and go, "Ah, well, you get the gist of it."

If The Trial was written for 32-bit PowerPC, Max Brod wouldn't have to burn them! He would just be like, "How do I even get this thing off the hard drive?"

## EYES

But no.

It wasn't written for 32-bit PowerPC.

It was written for eyes.

At the end of Amerika, we don't even know how Karl gets to Oklahoma.

Who cares - he's in Amerika and he goes to Oklahoma.

In that last chapter, they say, "Does everyone have their identification papers?"

And a woman pulls a large bundle of papers out of her baby carriage - her perambulator - and raises them.

Karl has no papers, he simply raises his hand.

## FAREWELL

This is good enough, so they let him by.

What if he had not told Max Brod to burn them?

What if he had just not said anything to Max Brod except, "thanks a lot," and, "A fond farewell to you!"

In fact, seems weird he didn't burn them himself.

Tuberculosis doesn't stop you from burning paper, right?

A thousand pages.

Two thousand pages.

Maybe three thousand pages.

## FIRELESS

That's a lot, but I think he could have doone it, even alone, even with tuberculosis.

Imagine Kafka's fiendish little face rubbing his hands over that fire!

Seems fun.

Or he could have hidden it inside an old 32-bit PowerPC.

No one's going to look there.

Just goes to show that you can't trust people who aren't you.

Of course he didn't want them burned.

That was just Kafka, writing his own death.

The ending has his signature on it.

Reality's kind of a medium, maybe greater than paper.

## TORN

We all want life to have the same texture that we read about in novels.

Promise me you'll never read all 3 Kafka novels in a month.
Samba in the valley
Actual Study:

http://pss.sagepub.com/content/early/2013/04/11/095679761246...
I would think that in practice the overwhleming majority of hyphenated .com would also have an unhyphenated version (even if just a squatter)
I did mean within the context of security and handing it over to authorities without due process, but it can easily extend to contradict your proposed scenario. If they claim that said negligence was even tangentially related to some other good faith effort to facilitate anything security related, they get a pass.
Yeah, Facebook comments are what originally drove me away from TechCrunch. It was actually a blessing as the site took a nosedive in content quality around that time anyways.

Disqus has been making some poor moves lately as well, I don't like their new embedded comment form and surprising everybody with stealth ads is just bad taste.
Republicans view Libertarians as closer to Democrats. That's a fairly unbiased sign that they don't correlate very well with either the so-called "left" or "right" designations.
Teen: I Am Not the Boston Marathon Bomber
The entire series?
What authority does the NPA have to force providers based in Japan to do this?
I think this generation and perhaps the one before has forgotten, or in the case of the previous, has never been taught that we employee these people. Without us they do not exist. It's regaining that mentality that will be the catalyst to having our freedom back.
I often search on "backbone" - docs are the first result. Same with "angular" and "ember".
David Foster Wallace on Ambition [video]
Former Israeli Prime minister begins tech venture “Genesis Angels”
I think their secret sauce, aside from obviously being attentative to customers, is to have small teams, 6-7 is considere ideal team for development of games and I would project that to pretty much anything. Just enough talented people to get the job done and nobody to interfere.
Any user who upvoted this story should lose all of their karma. A grade schooler could point out what is wrong and horrifically unscientific about this blog post.
Right, but the problem will be caught when the app is still in development. Then the devs will fix the app and by the time it gets to end-users, it won't do that anymore.
It's 2013. If you find yourself. Use the internet to connect. You don't ever need to be face to face. You could be in mars all by yourself and connect with others so long as you have internet. There are tons of python projects out there. Volunteer.
Sleeping on it is the best solution at least in my opinion. However if you are stubborn like I am and just want to fix the issue, then you would just hit the vending machine and start throwing coins at it. Finally you get to indulge yourself into a great number of chocolates to relieve the stress.
Thank you this last piece of info :) very inspiring.
Roundtable Recap: April 18 – From Singapore To Israel
why not simply reverse it, like they do in the sale of used Levis and suits?

Force the high end designers to measure everything thigh hips, waist, shoulder width, etc.

Then let people sort down based on drop down settings

THEN suggest others that fit the settings they used.

Don't actually ASK for their measurements.
'Backdoor SOPA?' Those are your words, not the EFF's, and they're concerned about a lot of this legislation besides the abuse by copright holders.

Anyways, I believe you're referring to this section: 'Does CISPA do enough to prevent abuse of the law for copyright enforcement?'

Here's the relevant text from that section:

CISPA’s definition of "cyber threat information" includes information directly pertaining to a threat to "confidentiality." But what does confidentiality mean? The definition encompasses measures designed for preserving "authorized restrictions on access," including means for protecting "proprietary information." "Proprietary information" is not defined, and could be read to include copyrighted information. For example, one type of restriction on access that is designed to protect proprietary information is digital rights management (DRM).

The problem here is the vagueness of the language. As others as have pointed out, the concern is not so much about intent of the language, but abuse of the vagueness to strongly serve the interests' of copyright holders over the general public.
I think I'm also unusually snobbish about materials.

If you go to a crafts store they usually have a big section of wall devoted to acrylic yarn. You might find one or two kinds of wool yarn and maybe a blend, but it's pretty clear that grandmothers who knit stuff for their grandkids value 20 hours of their time less than the $10 or so difference in the price of the materials.
Proves: 3. To determine the quality of by testing; try out.[1]

The expression "The Exception that proves the rule" is just a wry way of saying "Well, that's not a perfect rule."

[1] http://www.thefreedictionary.com/prove
"Get the best people then get out of the way and let those people do their jobs"
Detecting Faces with Ruby: FFI in a Nutshell
Sign up on the site and they'll mail you when you can order. If you only need FPGA, you can get the Mojo (see link elsewhere in thread) from May.
Welcome to the endemic problem of deflationary currencies! People get undue credit just for being there first.
Interesting when putting in programming languages and checking Compare to category

http://www.google.com/trends/explore#cat=0-5-31&q=scala,...

Then go and check by city instead of region

I find it overwhelmingly eye opening
> for me it's creepy to put it in a sexual context.

For me as a Brit, the only connection I have with cheerleaders is the web portrayal, and from what I can see they are popularly portrayed in a sexual content. A quick googling gives this sort of thing:

http://bleacherreport.com/articles/560723-nfl-sexiest-cheerl...

Frankly I'm astonished you don't see them as sexualised.
Please, there is no mention of force anywhere. Not in the title nor in the article.

Urge is very different from force, and furthermore they are urging ISPs to voluntarily block Tor communications.
If you are discussing something private that relates to your account/server/network, the rule of thumb is to avoiding sending anything over the e-mail for security reasons.
Nobody said anything about soon.
It's possible that they used a Bloom filter to compactly represent the list of banned words. This would allow them to share the filter without explicitly sending the list of banned words, so you'd never see a "foul-mouthed" network packet. But it could also return false positives for random strings, like perhaps "sffcei".

http://en.wikipedia.org/wiki/Bloom_filters