skysight-inc/HackerNews huggingface dataset:
Ah, well done then if it's included in the second video! Being at work, I didn't really have time to get that far. :)
It's not that the Japanese are bad at software. But the big electronics companies never realized the importance of software/hardware integration. Sony even has a lot of in-house expertise that is probably just not put into god use. There is no reason why the on-screen menus on a top-of-the-line Sony TV should be slow when they also make the PS3 operating system.
I think you mean CBC mode IV, not CTR mode IV. If they'd been using CTR mode, not having the nonce would be a dealbreaker for the attack; no matter what the cracker did, it would never generate the right keystream.

(I don't think using CTR mode would have made a lot of sense and am not saying the use of CBC mode is a design weakness; it isn't.)
<snark>
Yeah, it'll be a shame to see how much effort they have to expend re-shooting all these when the API gets rewritten again next week.
</snark>

:-)
A federal judge takes on 'copyright trolls'
Kindling, also emergency clothing if you have a lot of the cotton-paper type and maybe a stapler or something...
Just an anecdote, which I know is not the singular form of 'data', but still:

I respect Mozilla as a company, but have no desire to work there (despite there being a lot of technology fit) because the CTO, Brendan Eich, made a donation of $1,000 to support Prop 8—a 2008 California ballot measure which banned gay marriage. Sure, I understood that his views were not those of his employer. But that doesn't make it easier for me to want to work for/with the guy.

See, I don’t think it’s about the public message that companies send to their consumers. It’s about the message they give to potential hires: you’ll be working with these people on a daily basis. Depending on the dispensability of the employee in question, a company may choose to fire someone rather than potentially rule out a large number of future employees. It’s an economic decision.
Now that this has been deemed a "terrorist attack", doesn't this fall under the jurisdiction of the military justice? Irrespective if the guilty party or parties are US citizens or foreign nationals - or I suppose even if they are just suspects or persons of interest - can't they be detained indefinitely without trial? Or even worse US citizen or not, suspects, without trial, can be added to the Kill List.

Kind of scary, especially with the internet creating suspects for the government.
Recently: x64 support, Bluetooth support, WiFi improvements, and a package manager and porting tools.

In answer to your questions: Python definitely works just fine on it, as do Vim and the terminal emulator. I have no idea about Ruby, but I'd be surprised if it didn't work.

That said, what'll bite you is the lack of browser support. There are actually good browsers, mind, but you don't have your usual Firefox/Chrome duopoly fully available. There's also no virtualization support. While I don't know what your web dev workflow looks like, mine needs at least something along the lines of LXC/FreeBSD jails for me to actually get stuff done.
"I'm not sure whether or not to call it Unix-based"

Quoting the first comment..."something not Unix-based".
I too am a little surprised at how little attention Meteor seems to get. I attribute this to the fact that it sells itself as a client + server technology, rather than a potential client-side only tech (being fed by whatever server you want). When you sell yourself as a client+server then you might have a difficult time attracting the attention of all those who have significant investment in a different back-end, be it Node, Rails, or whatever. But yes, I agree, Meteor looks awesome. It's also got a steep learning curve. And much like Ember or even--I would argue, Angular--it's difficult to see the "magic" right off the bat. And given how new Angular and Ember and Meteor are, there is still a dearth of tutorials, videos, and books to help new comers see the value and get started.

So I'm definitely keeping my eye on Meteor.

That said, correct me if I'm wrong, but doesn't Ember have something similar? If the data changes in the database then won't Ember update the client to reflect this? I'm not exactly clear on the distinction between Meteor's "Live HTML" and Ember's approach.
Apparently Orth later stated that:

>“[That was] just the normal daily back and forth I have with Manveer,” Orth wrote on Twitter later. “Apologies for offending non-cities. I was trolling him personally.”

http://venturebeat.com/2013/04/05/microsoft-studios-creative...
Startup Drama
Stored XSS In Facebook Chat, Check In, Facebook Messenger
technically, it does not seem too far fetched.

I don't really know why, but I thought of the infamouse "we have root" quote of Mark Shuttleworth.

Also, if Google is able to install automatically software on your phone (by following your input in Google Play, of course), I wouldn't be surprised if they could brick it remotely.
You should see a code editor, that looks like Sublime, that you can write or paste code into. What browser are you using?
It makes sense if you look at this as a promotion/market research instead of a first batch of sales. And I think that's exactly what they're doing, giving the product to a large group of people who can reach a larger number of people to introduce their product.

It's also a bit of market and use testing since they'll be able to see how people are using them and improve or expand the application offerings in those areas.
Thanks for clarifying! It's like i had all the concepts there - out of band and SS7 - but didn't really get the details. This is why I love HN.
I like it, good thinking
Please just stop!

The same photo repeated several times has two guys with backpacks that are both identified as suspects in one but then an unattended backpack in another. and then at least three others people/bags identified in other pictures. How many bombs were there? I only heard of two explosions and I believe one undetonated bomb found.

And then there are the pics of the two men (one with a white hat and backpack and one with a blue shirt and duffel) that later are pointed out as "backpack missing" but fails to note that in the "backpack missing" picture they are in a much more crowded spot and you can't see if he has the backpack hanging in front of him like people often do when in a tight crowd with a backpack (also similar to what the dopey looking "beard guy" suspect does with his backpack slung over his forearm in other pics).

And noting that in some shots they were not "watching the race"? Wow... guilty of being distracted, people watching, day dreaming, etc, etc, etc of many possible reasons that in one random snap shot in time you are not looking precisely where everyone else is.
Hi Michael

We just hope you will order your boards through circuits.io :), but we will not tie you in. You can download your gerbers and have your board produced elsewhere.

Karel
i picked up glass yesterday at google's campus. they are freaking sweet! not worth $100k though. $1500 was plenty :)
Facebook Chat Box - Multiple Vulnerabilities
Yes, Sweden has "fri bevisföring". And why not? If evidence proves that someone is a criminal, it is not less true it was retrieved by controversial means. "Fri bevisföring" means that the court makes the decision whether the evidence is valid, based on circumstances in the case in question.
I'm not sure how you couldn't minify this compared to JSON? Could you provide an example?
Haiku is built on object-oriented principles, so the question is really whether you consider C++ as used in the project to be modular and simple. The API is pretty clever, mostly built on implicit threading and message passing. I consider it a pretty decent API, so I would say yes. The existence of replicants is a pretty compelling demonstration of the flexibility it affords: any view can be marked as "replicable" and then copied onto the desktop or any other replicant target.

Now, because data is exchanged almost exclusively using BMessages and everything is C++, if you're using C++ it's highly modular. If your definition of modularity and simplicity implies Unix processes passing plain text between them using pipes, you probably won't find it all that inspiring. My knowledge is all vintage BeOS R4 so I don't know whether Haiku is more multilingual today; I'd guess probably so, but if not, that would be a detriment since I'm not overly fond of C++ and wouldn't consider it "simple."
New study: Female role models empower young women
I think that regardless of what employees say, if it has the potential to negatively influence the company's business in any way, there's likely to be repercussions. Even if we choose to disassociate our statements from employers, I think the general public will think something along the lines of "Some MS employee said X" = "MS said X".
Damn them all for canceling SGU. Still bitter about that.
I'd love to see how Go 1.1 compares against modern JITted scripting languages, because I think those will be a major part of Go's current and future competition.

Hopefully the benchmarks game will one day include those JIT variants. V8 is there, but sadly for example PyPy, HHVM (Facebook's PHP TJIT) and LuaJIT are not.
I am always in awe of these guys just for the sheer dedication. This is what, 12 years? And at least as far as I've seen they've been consistently active through it or at least it's never seemed dead. Yet they're still a good chunk away from an initial release milestone. I remember some folks used to rave about BeOS that's seldom been matched, but daaamn it had to have really been something to keep people going 12 years and several more to ship.

I wonder who owns the intellectual property rights these days, or if there is something unsolvable about the licensed components. I know Jean-Louis Gassée is a notorious asshole at times, but it really seems like somebody should just give the code to these guys. It's not like they're ever going to market it again.
Why the spectacular loss to V8 in the Regex tests? Is Go's regex engine a naive implementation as of now?
This is less of a first round of sales and a more of a public beta test and market research rolled into one.
Block 3rd parties from tracking you on the web
Reddit Thinks It Can Solve the Boston Bombings
A 25-year old Amiga 2000 still provides background music at home (when the wife is away). A couple hundred megs of Mod files provide hours of nostalgia. Some people meditate with incense, Amigans ruminate to the sounds of 80s tracker beats.

Here's a sample of a great mod: http://www.youtube.com/watch?v=dZWgXiVJbpI - albeit from a lame demo. There are thousands more available at aminet.net.

I've tried replacing the machine with emulation, but there is something comforting in seeing the old girl in the corner serving as well as she ever did. Perhaps devices living beyond their natural lifespans comforts man's worries over his own perishable nature.
4chan finds potential Boston bomber
>>It would be nice to compare it to the old version.<<

12 days ago

https://news.ycombinator.com/item?id=5494113
The encryption is done on the device. Other people's devices (obviously) won't have your encryption key, but since Space Monkey will have a web interface to get at your files, you can tell that Space Monkey will have access to your key.

Regarding durability, the Kickstarter page mentions:

Q: Is my data safe?

A: Yes! Super safe. Here’s why: when you put files in
Space Monkey, you not only have a copy of everything on
your Space Monkey device, but each file is chopped up into
tiny pieces, encrypted, then stored to dozens of locations
outside of your home, in such a way that even if half of
those locations were destroyed, all your files would still
be safe.

We (yeah, I work there) are gonna be taking the reliability and privacy of the network VERY seriously; no one would want to use a storage service that loses your data.
Seagate Goflex Home. http://www.newegg.com/Product/Product.aspx?Item=N82E16822148...
If anyone still remembers RSC (Runescape Classic) and would like to continue playing it, this is the most popular and well-kept private server for it FYI: http://www.rscemulation.net/
>> It's bullshit propaganda,

Source? Do you have ANY evidence of this whatsoever?

>> "Oh noes! Don't hack our taxes!!" Logica is a big, bloated IT services company that makes (shitty) custom software

Are you suggesting, because Logica is big, bloated, makes "shitty" software, or makes tax software, they should be open game to hackers? You are ridiculous.
This is the most interesting piece:

That’s why today we are also announcing a commitment to match Amazon Web Services prices for commodity services such as compute, storage and bandwidth. This starts with reducing our GA prices on Virtual Machines and Cloud Services by 21-33%. Regardless of how you choose to buy Windows Azure, you’ll get the benefit of this price reduction. As our operations GM Steven Martin said, “If you had concerns that Windows Azure was more expensive, we’re putting those concerns to rest today.”
Spaces are not a problem in values and need no escape. To escape a newline in a value, just indent it appropriately. For example:

myKey this is a multiline string
and the indent on this line indicates that.
It can even be 3 lines long :)
someOtherKey and now this is a separate key/value pair.

Like URLs, new lines and spaces are not allowed in keys.
They don't really need the code at this point anymore. They have as much BeOS compatibility as they'd get nowadays... now they're focusing on driver compatibility, porting more recent software to it and finally moving to GCC4 rather than BeOS's GCC2.95, IIRC. Also, more architectures.
Unfortunately for him, what his words meant in context is irrelevant. He gave the public a hint that Microsoft might feel like people should just put up with the always-connected nature of consoles, and that Microsoft intended to steamroll the naysayers. That's just bad PR no matter what anyone meant to say or who they meant to say it to.
Painful yet interesting. I'm looking forward to the post-mortem on this.
Looks like a load balancer issue: http://status.37signals.com/status/campfire/2013/4/17
I think it's a terrible idea to judge other people's political decisions until you've walked a mile in their shoes.

If you are a professional, you should be ready to work with anyone, not just the people who agree with you.

Your view is not objectively correct. To insist otherwise is fascism.
It's not multilingual at all, unless you use the GTK ports or stick to console.
Glucose is 'simple' sugar, like Fructose or Galactose (as opposed to 'complex' sugars which are just chains of simple sugars).

Glucose is what your cells oxidize ('burn') to make energy. Assuming you are reasonably healthy (namely, your liver and pancreas are functioning properly) your body will keep the amount of glucose in your blood around 80 to 110 mg/dL (4.4 to 6.1 mmol/L for those of you not in the US). It does this in a variety of ways... You body can produce more insulin to shift the glucose into the cells, and some cells (mostly in the liver) can chain lots of glucose molecules together into a big 'storage' molecule called glycogen. If your blood sugar drops too low, your body will cut back on insulin production and start releasing glucose from your glycogen stores.

Another side effect of your blood sugar getting a little low is that you get hungry, and being hungry is distracting. It not that your body is _actually_ low on glucose... A normal healthy adult has plenty of glycogen stores, and long before those are depleted your body will start breaking down stored lipids into their component fatty acids, which your cells can metabolize just as effectively as glucose.

http://en.wikipedia.org/wiki/Blood_sugar
http://en.wikipedia.org/wiki/Glycolysis
Object.create() is not considered idiomatic JS rather than using the new operator.
Bitmaker Labs wants to turn Toronto into the next Silicon Valley
m.theglobeandmail.com/life/the-catalysts/matt-gray-runs-an-intense-program-for-programmers/article11283260/?service=mobile
IOS Browsers Speed Bakeoff
Refactoring Legacy Code Bases, Free Online Event May 8
D'oh! Thanks, corrected.

And I was just on everyone else for conflating CTR mode nonces and CBC mode IVs...
Jagex also maintains the Classic worlds for those who maintained a character presence there, private servers are actually being taken down left and right as they violate Jagex's terms and their legal team is quite efficient (there are many news articles about their legal battles as of late)
I think his point is that if we encourage that mentality and don't fight it on twitter etc, soon no accounts will be associated with the employers unofficially, and thus we won't get any of the news that leaks out that way. Our loss.
The OP isn't siding with freedom-of-speech or honest dialog - he's standing with people who accidentally say the wrong thing in public.
"If you're interested in something not shown then please take the program source code and the measurement scripts and publish your own measurements."

http://benchmarksgame.alioth.debian.org/play.php#languagex
Indeed, there has been so much new innovation in the client side mvc world lately. much kudos to ryan for putting this together, very useful!
Investigators Will Crowdsource Clues to Boston Attack
I have it on good authority (actually I don't remember any of the details except that I found it funny) that routine configuration of various machines inside the most advanced semiconductor fabrication facility in the world was done via hand-carried 3.5" floppy disks as recently as last year.

If it works, it works. The cost to "upgrading" something like this is staggeringly high when you factor in the likelihood that the change is going to break something.
Will JavaScript take over the programming world?
Anyone recognize the electronics found inside the Boston bombs?
https://pbs.twimg.com/media/BIEHtbWCQAE1TrT.jpg:large

https://pbs.twimg.com/media/BIEHzjDCMAEpTNZ.jpg:large

I design electronics for a living, so these boards caught my attention.

The green board has some round corner notches. (Those are to avoid the screw posts in a rectangular enclosure.) While not exactly unusual, they ARE distinctive.

I'm guessing they are some kind of remote control electronics from a place like ebay, especially since the battery used (https://pbs.twimg.com/media/BIEKumUCcAA6KtF.jpg:large)probably came from ebay:
http://www.ebay.com/itm/Tenergy-8-4V-5000mAh-Flat-NiMH-Battery-RC-Car-Traxxas-/330516737294

The green pcb looks similar, but not exactly like an E-flite Blade CP (RC helicopter)- so I'm guessing it's a different model from E-flite.

https://www.google.com/search?q=blade%20cp%20pcb&psj=1&bav=on.2,or.r_cp.r_qf.&bvm=bv.45368065,d.aWc&biw=1868&bih=995&um=1&ie=UTF-8&hl=en&tbm=isch&source=og&sa=N&tab=wi&ei=vchuUeT8IMWzygHIiYCAAw
Androids can be potentially bricked by a system-signed app [0], I wouldn't be surprised if it has a similar counterpart in Glass.

[0]: http://developer.android.com/reference/android/Manifest.perm...
Russ Cox, in response to a regex benchmark vs. Python/Ruby.

"You assume the benchmark is worth something.

First of all, Ruby and Python are using C implementations
of the regexp search, so Go is being beat by C, not by Ruby.

Second, Go is using a different algorithm for regexp matching
than the C implementations in those other languages.
The algorithm Go uses guarantees to complete in time that is
linear in the length of the input. The algorithm that Ruby/Python/etc
are using can take time exponential in the length of the input,
although on trivial cases it typically runs quite fast."[1]

[1] https://groups.google.com/d/msg/golang-nuts/6d1maef4jQ8/yg4N...
Troll (mostly white-hat, these days) here. Had a gray-hat trolling habit as a teenager and in early 20s. Now I try to direct any hypergraphic tendencies to worthier causes. Denouncing idiocy is charity work that I do. However, I've "trolled for good" quite a bit and have really suffered for it, as the world unfortunately knows.

The guys at the game company didn't deserve to be fired. They were engineers having a (somewhat obnoxious) private conversation. Adria Richards did. I can't defend her, because her job was PR and she condescended to a mean-spirited, name-and-shame attack on people she didn't know. (She didn't deserve the onslaught of horrible things said about her, clearly, but she fucked up and deserved to lose her job. I've lost jobs over less.)

I hate the private-sector politician life more than anyone, as one can tell by my railing against it, but if your job is to be the public face of a company, then you choose not to have the same rights to public/private separation as most people, just as elected officials can't let their guards down. So that's why I can't stand with Adria.

That does not apply to people like Aaron Orth. CEOs are public faces; almost everyone else is a public individual. Orth being fired over that tweet is just ridiculous. This is why I hate 99+ percent of corporations. If you turn your back on someone just because he becomes unpopular, then you are of no use to anyone. Corporations with no moral fiber deserve to be dissolved, and their resources reallocated to the public interest. I am all for private enterprise, but only if it stands for something. If you fire someone because an off comment gets negative attention, then you don't have any moral constitution anymore and there's no reason to allow you ("you" being a company; I'm not advocating killing people) to continue to exist.
Hmm probably not feature wise. This was hacked together on the train. One advantage though is sharing code quickly (no download or reg) in any browser.
This option probably wins on cost and ease of use. For technically-minded people that can afford CrashPlan, though, this product may not be compelling; that's okay. Not all products are right for all people.
Geeksphone release Keon and Peak next week.
Want to share what exactly you learned from these pictures? All I see is circles drawn around random people carrying black backpacks.
The media learned as in "became informed" but did not learn in the sense that they "improved".
Excellent! A full-screen button on the youtube player would be nice to have.
Obama threatens veto of cybersecurity bill
It's oddly amusing that a similar outage occurred exactly one year ago, 17 April 2012: http://www.theverge.com/2012/4/17/2954949/gmail-outage-april...
I think I'd remain skeptical until the specific details emerge. Let's not forget weeve is doing federal time for running a script to download email addresses from a public website.

I'm not saying it couldn't be legit, but I think we can all agree that TPB is well into the realm of "find me something that'll stick on these guys"
Lessig live tonight on CopyrightX: Free Culture, 4/17 7:00PM EDT, 11:00PM GMT
Free Culture, April 17, 7:00 PM ET (11:00 PM GMT)
William Fisher, Copyright, Spring 2013
Speaker: Larry Lessig

This webcast is part of a series of special events from Professor Terry Fisher's CopyrightX courses offered at Harvard Law School and on EdX, respectively.

http://tfisher.org/hls1x-copyright.html
The problem is that it's seriously hard to improve meaningfully on Unix.

Take a look at Plan 9, for example. Plan 9 (which is not Unix), was meant to be the 'next iteration' of Unix, taking the Unix philosophy to the next level. http://en.wikipedia.org/wiki/Plan_9_from_Bell_Labs

The reason Plan 9 failed to catch on, despite being strictly better, is because it didn't provide a significant enough improvement.

With non-Unix OSes, you not only face the challenge of providing not just an improvement, but a significant improvement, but you also face the challenge of providing a complete toolset[0] that people have come to expect. Plan 9 mostly failed in this regard, despite not even deviating that much from Unix. I can't imagine how much work it would be to do the same 'from scratch'.

[0]Let's not forget that the reason GNU tools (particularly gcc) caught on was precisely because they were able to provide this complete toolchain.
Gartner predicts 15% enterprises will still use XP after support ends