skysight-inc/HackerNews huggingface dataset:
VSRE sounds like a good idea, as long as the recipient is on close enough terms to not be offended (or stifled) by "expected". (The witness will please answer with a simple "Yes" or "No".) Maybe VSRPA (Very Short Reply Perfectly Acceptable) would be more appropriate.
I did the first set and loved it. Are you running much of a backlog? I sent that in about two days ago.

Actually, looks like an email mixup. I didn't reply directly to the more recent email and composed a fresh mail to us@cryptopals.com which doesn't work (although I did CC the other address as requested). Just forwarded my submission.

Edit: Just got set 2.
God says...

4:14 And my temptation which was in my flesh ye despised not, nor
rejected; but received me as an angel of God, even as Christ Jesus.

4:15 Where is then the blessedness ye spake of? for I bear you record,
that, if it had been possible, ye would have plucked out your own
eyes, and have given them to me.

4:16 Am I therefore become your enemy, because I tell you the truth?
4:17 They zealously affect you, but not well; yea, they would exclude
you, that ye might affect them.

4:18 But it is good to be zealously affected always in a good thing,
and not only when I am present with you.

4:19 My little children, of whom I travail in birth again until Christ
be formed in you, 4:20 I desire to be present with you now, and to
change my voice; for I stand in doubt of you.

----

I wuv God.

God says...
burnest Donations acquired solemnities trembled Oil abstemious
leaveth sailors woman's remove that ceased haply consecrateth
confirm honourable applauses WooHoo hence tamedst lettest
shook prose abundant devised forsakest hooks seeks evil
deformities finds Truth performing scanning compassion
rushing distributing hay denieth unsung_hero unsuitably
fallen ordinarily novelty Isaiah gladdens parents tattle_tale
NOTICE faculties rejoicest allegorically handyman sunk
School detail something silence skin are_you_feeling_lucky
erred when unarranged learner Name bulk leaning flower
peculiar abideth relapseth increase wishful_thinking talkers
Latins deaf seasoned Indiana disordered show Shhh Bishop
wrested unhappily baseness counted fruit-bowers endeavour
Covetousness boldly
One think that I think may be oversubscribed at EC2 is the API layer for controlling things like instances, ELB's and autoscaling. This seems to be most obvious in Virginia. During the lightning storm in Virginia last summer, it seemed like API access fell off a cliff. I'm guessing that was because everyone was trying to move their services from the impacted availability zone.
File "./socode.py", line 297
print ', '.join(contributors_list)
^

IndentationError: unexpected indent
The FDIC is where most of your IT security requirements will come from. Below I have listed a few items which make the cloud a non-starter. In summary, it costs $20+ million dollars to start a bank. The reason every small bank has the same crappy online banking and digital services is because everyone except large institutional banks has to outsource everything to a handful of third party providers who can maintain these requirements.

As far as your business idea, you should check out simple.com. They have been working on the problem for years and have just barely managed to cut enough red tape to provide a not terrible user experience for a handful of tasks.

Have a full accounting and audit of every VoIP device, VPN device, wireless device, switch, router, modem, firewall, and proxy server connected to the network.

Demonstrate physical access controls for employees, vendors, and anyone else who may have access your equipment.

Every single person with physical access to customer information devices must have a 10-year criminal background check performed (this is actually a federal law that applies to the Finance, public education, public transportation, etc industries).

Formal configuration and patch management procedures for all devices (including upstream routers and switches).

Diagrams of physical and logical network topologies.

The Fair and Accurate Credit Transactions Act of 2003 requires physical destruction of devices storing customer data.

Reporting of all physical security incidents to FDIC IT examination.
#nethack on freenode is also worth attending. Though probably not very related to #hack.
There was a great article on exactly this subject some time ago on HN, but I can't find it right now...

The examples were also a lot more compelling than in this one. If someone can find it it would be great!
Thanks for the tip on legalities. I know bank laws differ in every country but now I'll look into that.

Totally agree with A. What do you mean by B though? As in secure wireless transactions and maybe the crackability of Android phones?

*update, just started reading on mobile security now
Interesting example, as I actually know people at a company that have that kind of leeway. And are actually doing it. :)
What work do you do in the area?
Show HN: _vm – a generic version manager framework
I have seen many of these posts recently and I honestly do not understand. I use Google products and it definitely beats out most of the competition and doesn't interfere with anything worse than any other product out there. Sure the internet is changing, and you can either go with it (or not). Switching to many different products to complete the same tasks (many of them worse than Google products) seems kind of silly to me.
Calls Grow For Google To Oppose CISPA
Do you have anything on certificate verification? Not that I actually know anything about it, but.. here, I think these words from Moxie Marlinspike about sum it up:

"I’m not actually a supporter of the general adage “never roll your own crypto.” I believe that cryptography is a fairly closed system, and that it’s relatively straightforward to learn how to carefully use cryptographic primitives to build protocols securely. Certificate validation, on the other hand, is something that I would recommend people avoid doing themselves, if possible. It’s mired in cruft and gotchas."[1]

Moxie covers a few examples in the link, but it would be interesting to see some more along those lines.

[1] http://www.thoughtcrime.org/blog/strongtrustmanager-mitm/
As an Indian, I can tell you $10/hr is some thing like dream pay I can imagine.

With 16 hour schedules and no weekends. I can make something like 2,40,000 per month.

That is something like the pay super-rich people get paid here in India.

Your ordinary programmer is worth around just less than a dollar per hour.
What a lapilli rain from erupting Mount Etna looks like
Images and sounds from the latest (April 20, 2013) eruption of Mount Etna, Sicily.
People working on those "artificial" and "useless" problems are the reason you can build said businesses with "real problems".
I think it would be more trouble than it's worth to take an x86 emulator and try to make it do ARM as well, unless it was written with multiple CPU types in mind in the first place.

But more importantly, it's written in JavaScript -- this is an exercise in learning Dart.

I do refer to various C-based implementations from time to time, though.
Is not hearing about the Streisand Effect a counter-example against the Streisand Effect?
This is really valuable info, thanks!
Interesting idea to add on later, thanks. Bitcoin's not popular yet in my country.
Abbreviation needed? Phrase the question such that a curt response is encouraged. A la, "Herbert: we're meeting tomorrow at 2 in my office to discuss the new release of jquery. Be there?" (The question tends to elicit a "Yes" or "No")
The best channels are "Invite Only," and I'm not allowed to share their addresses.

thought i was OG since i'd been on EFnet since before the Split, but this guy is in channels that are obscure.

we've probably never heard of them.
I'd suggest that for most of my cases that are not source code that I'll stick with ack.
Oh, you are in a trap.

If you have taken a huge loan(>40 lacs) to for your apartment. Especially in India- Hyderabad or Bangalore doesn't matter. You are likely to spend the next 15 years worrying about EMI's.
The context changes are what can take a while IMO opinion.
Interesting premise. Unfortunately, the only animation that worked for me was the tweening one.
Methinks they did a wee bit more than that.

http://www.nbcnews.com/id/33882559/ns/business-us_business/t...
exagerado.
Of course not, but it's a big difference to say counter-indicated for one issue vs, leading off a post with "It is not safer".

The point of this story is whether Tylenol IS safer, and that's mostly contingent on the person (and studies showing its own inherent risks).
First of all, almost any facial surveillance system would simply reject images like those from Lord & Taylor's. The pixel density is simply too low to even attempt plus the downtilt would also likely trigger a rejection. That's how facial recognition does work in practice.

Even if the system would allow it, not only would false positives be enormous, you'd probably miss the match as well (false negative).
I glanced at the code files from the inventor. It doesn't look like the kind of algorithm you implement yourself.
K&R was the first and only book about C that actually worked for me. Everything else was verbose, confusing, and left me with no more than the ability to do basic character apps. I read dozens of the "hundreds of books on it", and they all left me incompetent at C. K&R allowed me to become useful in the C language, including hacking on kernel modules.

I'm sure there are other good books on C. But, I never found one. They were all too long, and hid understanding behind verbosity.

K&R also made C fun for me, revealing it's nature as a well-crafted tool. Reading a lot of real C code also helped...I finally really learned C soon after migrating to Linux, where code for everything was available.
Come on. Quit downmodding people for a common misunderstanding. To any American "Amazon do" really does sound off.
AMD has only stayed in the game to begin with because Intel was 'forced' to license x86 to them in order to avoid government anti-trust prosecution.
Youtube videos down/not playing
Youtube videos throwing up blank screen with a comment in the HTML body. Affects all browsers, all devices, multiple machines.
On a similar note, it is hard to imagine folks who spend time on a video like this one being that good at their core business!

http://www.youtube.com/watch?v=okueA9dFcnc
I don't think that Google is acting in opposition to open standards _in general_, because for the most part they benefit by them.

What's clear is that:

- Google is seeking to increase the monetary value of its users

- the way to do that is with social media (see Facebook, who are winning this battle hands down)

- they will push open standards under the bus where necessary, in order to drive users to Google+

As the former PM for Reader puts it (https://www.quora.com/Google-Reader-Shut-Down-March-2013/Why...):

"Let's be clear that this has nothing to do with revenue vs operating costs. Reader never made money directly (though you could maybe attribute some of Feedburner and AdSense for Feeds usage to it), and it wasn't the goal of the product.

Reader has been fighting for approval/survival at Google since long before I was a PM for the product. I'm pretty sure Reader was threatened with de-staffing at least three times before it actually happened. It was often for some reason related to social:

2008 - let's pull the team off to build OpenSocial
2009 - let's pull the team off to build Buzz
2010 - let's pull the team off to build Google+"
Nothing stops you from prefixing your function with an underscore.
I idle and answer/ask on FreeNode's ##math. #haskell is also pretty chill, people are always willing to explain stuff. Yes, this includes monads for the kth time, forall k >= 1 :).
There are comments like this every time a company does something dumb, tries to hide it, then it blows up in a big way. I absolutely agree with the sentiment, but I actually do wonder what the true probability of the Streisand Effect actually happening is.

Surely their are plenty of shady happenings like this that never get up voted enough on reddit, HN, etc, so the Streisand Effect never happens?
Compared to the 26 ECU m3.2xl, the 20 ECU c1.xl underperforms it by 3x (basic web, JSON struct) in my tests.
The Web is a small subset of the Internet. There are many other protocols to enable the sharing of data between individuals and platforms, and it looks like Google wishes to deprecate at least some of those in favour of its own end-to-end solution. I think that killing off Reader in favour of G+ is the start of acceleration in that direction. I hope I'm wrong.
yeah, choosing to do this in python might not have been the best idea.
For some more fun with American English, try http://fine.me.uk/Emonds/
My experience with SANs is that they are anything but consistent. Local storage is a better idea: fewer moving pieces to go wrong, fewer moving pieces to understand and debug, fewer possible sources of contention, and the latency is low.

SANs in a cloud environment optimize for the wrong thing. Servers by and large have a high uptime -- since their falling over is comparatively rare, this is simply a problem I've never had difficulty with. What I have had in spades, before I learned better, were database problems due to wild fluctuations in latency to the SAN.

It doesn't help that when SANs kick the bucket, they tend to affect a lot of things.
hey you mispelled #swag
I worked with Mike for a couple of years on Newton. I had tremendous respect for his breadth of understanding of systems, from transistors and batteries all the way up to user interaction. He was a hardware designer who really understood software, too; in my experience, that's rare.

We've lost another great engineer to cancer. This sucks.

My condolences to his family, friends and co-workers.
Data shift to lift US economy 3%
Thanks - I've corrected that error.

See my other comments on this item for rebuttal of your other points :)
This is a very scary image for AMD:

http://i.imgur.com/pCiDEKP.png

Their revenue is falling, and falling consistently.

They pretty much lost as a CPU manufactured in every area - desktop, laptop, tablet, phone.

Their only option at the moment is to keep making the best damn APUs and GPUs, and try to invent something new. I wish they came out with a 1000-core CPU or something.
#node

#python

had a good day at work bashing php in #node and suggesting 'rewrite it in php' to everyones questions. 3 php flame wars with 2-3 ppl in on it
If you manage to find it, I'd love to read it :)
http://legiscan.com/CA/text/AB1291

Rationale according to the authors of the bill:

This state has previously recognized the importance of
providing Californians with transparency about how their personal
information has been shared by businesses by enacting Section 1798.83
of the Civil Code into law in 2003

Businesses are now collecting types of personal information
not included in the original law and sharing and selling it in ways
not contemplated or properly covered by the current law.

- Some Web sites are installing up to 100 tracking tools when
consumers visit Web pages and sending very personal information such
as age, gender, race, income, health concerns, and recent purchases
to third-party advertising and marketing companies.

- Third-party data broker companies are buying, selling, and
trading personal information obtained from mobile phones, financial
institutions, social media sites, and other online and brick and
mortar companies.

- Some mobile applications are sharing personal information,
such as location information, unique phone identification numbers,
and age, gender, and other personal details with third-party
companies.

Proposed changes to the 2003 law:

This bill would instead require any business that retains a customer's personal information, as
defined, or discloses that information to a 3rd party, to provide at no charge, within 30 days of the customer's specified
request, a copy of that information to the customer as well as the names and contact information for all 3rd parties with which the business has shared the information during the previous 12 months, regardless of any business relationship with the customer. This bill would require that a business subject to these provisions choose one of several specified options to provide the customer with a designated address for use in making a request for copies of information under these provisions.
#emacs, there are lots of really smart people there.
"the shuttering of Reader in order to make way for that ghastly Google+"

There's a lot of erroneous assumptions in there. Reader was never really a product with much support, it was more a labor of love of a small dedicated team. Reader was not shutdown to "make way for G+" anymore than any of the other spring cleaned services were shut down because of competing services. Even the original (ex-Googler now) Reader engineers have pretty much outlined many of the reasons, including the decline of RSS, which was killed off in large part by people moving to services like Twitter, Facebook, and Tumblr.

It's really regretable, but it's time to realize that the rest of the world moved on, and if we want federated, open services, it's going to have to built from the ground up, and in a way that users, not hackers, will want to use it.
Did an Apple 2.0 story touch a nerve at Samsung HQ?
I really wanted to get into academia because I had the perception that you got paid for thinking smart thoughts and occasionally writing about them, but when I actually tried academic research it seemed to be about 80% politics/grantwriting and 20% research delivery, so I went into private industry. If you have sufficient reputation to have a sinecure from Google, that's certainly an option for subsidizing research. Even if you don't, a lot of research in our field is not terribly expensive to do, and the materials/collaboration required to do it are within the grasp of e.g. anybody who runs a business which gives them sufficient scheduling flexibility. You can even get published in Real Academic Journals (TM), which surprised me.
When I'm programming, I close all email and instant messaging applications, as well as put my phone on Airplane mode. I find limiting interruptions in this way to be incredible for mental focus. I highly recommend it, if you don't already do this (?).

I also use the following website to set a timer for however long I have to program (whether it be a 15 minute sprint or a luxurious 90 minute block):

http://www.online-stopwatch.com/full-screen-stopwatch

As for the main topic, I have this as my signature:

Hi [name]

Thank you,
Paul Santana

I copy and paste the person's name from the To: field in Outlook (this ensures I never mistype someone's name), delete the last name, and write a few words in the middle. Done; professional and courteous email template without any additional effort.
If you select the text option though, you're free to add html if you click the <html> button.

Also, while it can be limited in themes, you have full control over the HTML and CSS, so really there's not much you couldn't do that you would need to for a simple blog.
Comcast is a bad example since they are furthest along deploying IPv6 of any of the major US ISPs. They have coverage for 50% of customers.

But only 1% of traffic is IPv6 mostly because customer equipment doesn't support it. Cable modems need to be upgraded to DOCSIS 3.0. Most consumer routers also don't support IPv6 including many models currently for sale. The manufacturers don't seem to have plans to release upgrades for IPv6 support. The third part firmwares like DD-WRT and OpenWRT have some support but it still isn't great. Most customers wouldn't be willing or able to install new firmware.
Do you mean Verlet.js?[1]

Note that box2djs is also very capable[2], and has been around for years (it is port of Erin Catto's great work on Box2D[3]).

[1] http://subprotocol.com/2013/04/18/introducing-verlet-js.html

[2] http://www.jeremyhubble.com/box2d.html

[3] http://box2d.org/
I had been thinking along similar lines in physics research as a post-doc, and wrote my experience and ideas up[0].

Then I got fired (unrelated to me writing that post:), and went in a job interview with another prof, who have read my post, and started off the discussion with that. In the end, he have seen the value, the ideals, and that the problems outlined were valid (he also worked in the Bell Labs which is one of my inspiration).

In the end I decided that instead of joining another lab, or as the OP working in the industry, I'll wing it and see if I can set up things the way I want. So now my "main job" is to do research and set up the lab I would want to work in, and get the people who are just as ambitious on board. "Tall order" doesn't even begin to describe it, let's see what happens.

[0] http://gergely.imreh.net/blog/2013/02/academia-is-failing-bu... "The Academia is Failing But Not For Everyone"
Brett, who leads First Round's platform team, was a film major at NYU... plus I have to imagine that they could outsource most of the heavy lifting to contractors to do the editing, mixing, etc.
The most likely cause is in the mysql driver. Go provides an interface for drivers to implement, similar to how JDBC does in Java. One of the go developers, Brad Fitzpatrick, commented [1] that the actual code used by the benchmark looks OK. The discussion of these test results on golang-nuts [1] triggered a number of performance related pull requests [2] to the mysql driver used.

Also of interest: https://code.google.com/p/go/issues/detail?id=5323

1: https://groups.google.com/forum/?fromgroups=#!topic/golang-n...

2: https://github.com/go-sql-driver/mysql/pull/52
https://github.com/go-sql-driver/mysql/pull/55
I suppose I just don't know what to blog about. I should really learn how or hire someone to do it for me.
This looks like a decent amount of work went into it.

Can the user change the differential equation being shown? By the way, what equation is being shown here?

In my browser (Safari 5.0.6), initial conditions get rounded down to nearest integer. E.g., y(0)==1 graphs the same as 0, y(0)==1.8 graphs same as 1.

You might re-think the title of the "go" button, since it doesn't really "go" anywhere. Maybe "set"?
Again sorry I offended you. I wont make this mistake in the future.
I think very highly of Marlinspike, and he is clearly smarter than I am, but he is wrong on this point. No, one thing I will say about our challenges: we don't spend time on certificate parsing. We thought about it, but decided people were unlikely to run into a lot of new X.509 implementations that can't handle a NUL byte (and things like that), at least not as likely as the other bugs we showcase.

Edit: I read this comment out of context. Sorry. Obviously, I asked for examples of flaws we could cover. Thanks for offering one up.
Ubuntu 13.04 Final Beta is out
Type "sudo do-autorelease-upgrade -d" in the terminal to install.
My news combination is hackernews+quora+Vice.

When I'm really bored I read your older quora answers, some of them are great for laughs. True story....
This is not conscious consumerism. This is a childish temper tantrum.

Chrome has better developer tools. If your job is being a web dev and you purposely make your job harder because you're mad at Google for shutting down Reader, you're not being rational.
#xkcd@foonetic
Nah, farsighted :) Seriously, you just wait.

If you're a user on a commercial system you didn't pay for (Google, Facebook, etc.) then you're not a customer, you're cattle. Your value is directly proportional to how much the company running the system knows about you.

I don't like where Facebook is going, and I think Google is following in their footsteps, albeit helped along by an excellent reputation for quality and fair play, especially amongst geeks.

Maybe I'm just being a curmudgeon, but I think Google is playing the same 'embrace and extend' card as Microsoft did back in the day, just for slightly different reasons.