skysight-inc/HackerNews huggingface dataset:
This touches on a lot of points I believe in as well. Nothing worthwhile is easy. I have 3 kids, a wife and a dog. I'm involved with two ~3 person start ups and work about 10-11 hours a day, 6 days a week.
Doesn't matter if it's MD5 or SHA512. You can extend either hash function in the exact same way (http://en.wikipedia.org/wiki/Length_extension_attack)
> This means that as long as you have one example of a signed message, you can forge signatures for that message plus any arbitrary request parameters you like and they will authenticate under the above described scheme.

If all requests are made over HTTPS, how could a third party intercept a signed message? How is this any greater of a risk than a third party intercepting user login information? (This is a serious question; I'm not being flippant or saying 'gotcha')
@Metaphor
public interface Life extends Box<Chocolate> {
}

Shouldn't this be @simile?
Could you go any more left-liberal in your new definitions of countries?
You don't get to make up the definitions.
Design is great but why should I use your product? I can use Skype which supports video and groups so your idea isnt new or revolutionary and in fact is lacking in comparison to your competitors.
You need a edge. Something that no one has except you and something that people are in desperate need of.
If I make a new interface that is an mix of io.Reader, io.Writer and io.Closer and I call this interface YouDidNotSeeMeComing -- then the file struct would also implement it... without even knowing it!
Roberto already merged that, I see :)

I just made a PR for a pile of changes on top of that.

And I'm just a docs guy really, not affiliated with Unbit (the project's main sponsor) at all.
We're also one of only three countries in the world with no mandatory maternity leave and the only "developed": http://www.americanprogress.org/issues/labor/news/2013/03/08...
It's interesting that most of the countries with the higher levels of paid vacation and holidays have some of the absolute worst economies. Portugal? Spain? Italy? France? Greece?

Yeah, how's the guaranteed vacations and holidays working out for them?
That's where labor boards come in: companies can get fined if employees don't take their vacation.
The Reason Why Nobody Likes The Stuff You Write
> who's to say your comp isn't being adjusted downwards to compensate?

Who's to say everyone wants to go to work more to earn more money?

> Meanwhile, if you're making near minimum wage, aren't you more likely to be fighting for additional hours rather than looking for reasons to give them up?

Not when it's paid time off.
This is so much more awesome than Glass, it defies description.
No "rate shock" to Obamacare premiums in California
Bottom wage earners can and do create Labor Unions to allow for negotiation.
Some ideas, depending on what you need (I can't say how good these are):

http://www.keyczar.org

http://nacl.cr.yp.to

https://github.com/jedisct1/libsodium

http://www.gnupg.org
I agree!

I found no libraries that give std::bind functionality in C and GCC extensions also doesn't offer any solutions.
Hi, Tesla chat rooms are private and you can invite users only via email.
How? If I understand how Airbnb works then they don't run the rooms, just the booking. So what's illegal about taking appointments?
Considering those jobs all get paid vacation, you are missing the point entirely. It is the some-high-school educated, sick guy at Subway that they are talking about.

Seattle (just the city) recently mandated 3-days sick leave for all employees in businesses in the city. The sky has not fallen yet and it remains to be seen if there is less flu because the cooks and waiters aren't coughing in your $30 tech worker lunch.
My 25 days "paid" vacation a year was no more "paid" (when I had it) than my 52 "paid" weekends a year.

It's simply non-discretionary time available for me to not come into work, the cost of which has already been deducted from my salary.

That's not to say I didn't value the generous amount of time off, and that's not to say Americans will find it easy to negotiate such an amount of unpaid leave. But let's be realistic about what "paid" vacation is.
> it's dominated by the weak php developers you speak of, but if you just filter everybody out who charges less than $20 per hour[1], you'll get rid of most of them and be left with some good people.

As a freelancer who picks up quite a bit of work on Elance, I can vouch for this, from my end of things.

The key to success, both on the client side and on the freelance side, is absolutely brutal filtering. There are many opportunities there, but you need to dig for them.

Some tips for success looking for talent on Elance:

1. Be sure to invite well performing freelancers from the geographical area where you reside to your project. There's really no need to go abroad, there's plenty of talent available wherever you happen to live. You skip any cultural and communication issues that might crop up if you go with somebody abroad.

2. Again, be sure to invite the right freelancers to your project. In fact, make the project invite only. Anybody who is worth their salt on Elance doesn't search for work. They only reply to work they are interested in when they are invited to it. I get several invites every day and for whatever reason, on weekends, I can get over a dozen a day. Weekend warriors?

3. Always do fixed price projects. With a fixed price project, you'll know exactly how much you'll pay and can reduce the cost of the project intelligently by pairing down the features. With an hourly project, I'll just throw a number I charge per hour at you and you're nowhere closer to knowing how much you'll pay. One guy can get the job done in 10 hours, another in 2, you have no idea which is which ... stick to fixed price.

4. Be sure to provide as much technical detail into the project as possible. Try to break things down into achievable milestones. Clearly specify the features you need and the work that you want done. I ignore projects which simply specify what qualifications you want me to have. Let's assume I already know how to do the work or I wouldn't be looking at it. Tell me what the work is and be specific.

5. Reject proposals. If you're not going to go with a proposal, reject it. I do not like submitting proposals in a crowded space. It tells me the client isn't involved in the process. There's no way in hell you're entertaining a dozen proposals or more. More than likely, you'll pair it down to 3 or 4. Do the pairing from the very beginning. If you wait until the end, many quality freelances will choose not to even submit anything because they do not want to deal with the crowd.

6. Include your name in the project description. Just the first name is fine. I need to know what to call you, right?

7. Immediately reject proposals that don't include your project specifics. If you took the time to write a details project description, expect me to read it and to respond to it in kind.
The double Irish arrangement isn't a loophole, or if it is its a loophole that's the fault of the Irish by not taking account of US transfer pricing rules. The basic problem is that transfer payments within multinational corporations makes it hard to account for income, and rules to attempt to achieve that accounting are easily undermined by tax haven jurisdictions.
Vim habits
We haven't had any significant change in inflation after QE.

We need more stimulus on top of it!
>Also, out of curiosity, in his timing attack example, the difference in time caused by the string being equal seems like it'd get absolutely swallowed up by the random nature of the universe - do those things actually work in the real world, on real servers with varying loads and numbers of users and network traffic?

You could make each request many times, and then average them together. I don't know how many requests you'd have to make to overcome the random fluctuations though -- probably a lot.
True Believers == ideologues. Even then, if they truly believed, they'd have no trouble describing the democratic paradise they think they are installing.

I can't recall ever hearing such pronouncements.
Haxe "compiles" to JavaScript. So I imagine it may be suitable as a replacement for JavaScript if you wanted such a thing.
> if one person gets sick, it wipes out the workplace

This is on my "if I was in charge, I'd fix this" list; I spent most of this January sick, I attribute this to coworkers who couldn't take time off.

You really need to get a lot of sick days and then management needs to keep you out of the office until you are well. That includes stay-in-bed time where you get better instead of attempting to work, plus working from home for a few days.

The cost of having an office full of sick people is huge, it's a massive moral and productivity problem, ignoring the health implications. The policy of having combined sick and vacation days as "PTO" is broken.
> You seem to be suggesting that a business would be doing something unreasonable by moving any of its operations into a jurisdiction with lower taxes [...]

Moving to or setting up a subsidiary in a different jurisdiction: Completely fine.

Doing the same thing for the sole purpose of avoiding taxes: Not fine.

I really don't get what's so hard to understand about that. How many employees do Google or Apple have in Ireland, the Cayman Islands or the Netherlands? And how many in the US? Quite simple, I think.
American Expat in Germany here...My salary would absolutely be higher in the U.S. In Germany I get 6 weeks of vacation. I make more than enough money to live comfortably, though. I definitely prefer a liveable salary and time to spend that money, rather than lots of money but no life.
Bio-Hackers, Get Ready
The United States didn't become the most powerful country by following others.
I'd look into http://www.infusionsoft.com/

It combines marketing automation with sales, and I've heard it's easy to use and works well; they hold your hand for the first 30 days to make sure you know how to use it to its full advantage.

Planning on using it at my next company.
Having set up multiple pcs for friends and family I often got calls from especially my parents with "it says I should update something, I didn't know what to do so I closed the window, what should I do now?".

I found the solution (for windows machines) a tool called Ninite (http://ninite.com). It makes an installer with a lot of commonly used apps such as flash, chrome, java, Skype, TEAMVIEWER (for additional iFamilyTechSupport cases) etc.
Every time you run this installer it automatically updates all of the applications with the newest version. Another bonus is that you don't have to click "next" or "install" and you don't have to worry about toolbars (no more Ask toolbars when updating java!!).

They do have some "upgrade" options where the installer runs silently in the background in my case it was enough to make a simple task that is set to run once a month and the instructions I gave haven't caused confusion yet: "Once a month this small thing appears, just let it do its thing and click Close when it is done"

Just make sure you enter these applications and disable the update notification settings so you avoid the phone calls you can't do anything about.
The Fujitsu ScanSanps are like what sex would look like if it were a scanner.
One of the problems with cryptography is that "solutions" are not as generally applicable as one might want. There are a lot of assumptions that are made, and violating those assumptions is usually a disaster.

For example, when it comes to encryption, it is typically assumed that all messages are the same length. If your application does not make this guarantee, encryption may not provide you with any security. You could wind up in this situation:

https://news.ycombinator.com/item?id=2661890

Think of it this way: asking for a list of tried-and-true crypto solutions is like asking for a list of tried-and-true database schemas. There might be cases where it will work, but for the most part you need to put some thought into what you are doing.
Wouldn't that indicate that she should find another position?
Obviously, the people that are better than them at negotiating holidays should live a life of leisure while those that are lacking should live a life of toil and strife. </sarcasm>
Has mechanical clocks' time passed?
> "low quality, and doesn't add to the discussion"

That was my reaction to your last paragraph, as well. Every time there's a thread about dealing with certain challenges of poverty, someone comes along and accuses the rest of us of having unrealistic expectations of poverty, and makes some snarky remark about hybrids or hookers or macbooks.

Instead of dragging the thread down, why don't we elevate the discourse?

I personally have plenty of real case studies to go from. There was the divorced mom of 3 whose ex hid his assets so he could duck child support, who my wife and I helped move between 3 different shelters. There was the mentally ill guy on disability who I took to the hospital on occasion, and who thanked me for teaching him to shop because for the first time in his adult life he had food at the end of the month. There's the single mom, recovering from mental illness, and her son who live with me right now. There are over a dozen homeless guys who come to my church on Sunday mornings for free hot breakfast, and over 6000 families who come to our food bank each year.

Would the information in the original post, or the comment you were criticizing, help all of those people? No, but it could help some of them.

Knowing which foods give the best bang-for-buck in terms of calories and nutrients, and having some basic idea of how to combine them to make some viable meals, is a big deal for some people. Gaining the basic confidence to attempt actual cooking, instead of feeling like you must rely on pre-packaged convenience foods, is a big deal for some people. Learning certain time management skills, such as planning ahead and taking a few minutes to start beans soaking in the morning, is a big deal for some people. Yeah, this thread as a whole is a pretty theoretical exercise, but it does have valuable practical implications even for those dealing with real poverty.
It will be..

http://www.kickstarter.com/projects/andrewgodwin/schema-migr...
IIRC, it was the Founding Fathers who were critical in allowing slavery to be legal. I wasn't aware that they were considered to be particularly left-wing.
> This is just as disingenuous as the parent and isn't even close to representing the most common situation.

http://datacenter.kidscount.org/data/acrossstates/Rankings.a...

http://en.wikipedia.org/wiki/Poverty_in_the_United_States#Po...

http://www.pbs.org/wgbh/pages/frontline/social-issues/poor-k...

> 47.6 percent The nation’s poorest kids primarily live in households headed by a single female (pdf). Nearly half of all children with a single mother — 47.6 percent — live in poverty. Indeed, the children of single mothers experience poverty at a rate that is more than four times higher than kids in married-couple families.

Further reading:

http://www.google.com/search?q=single+mothers+poverty+rates+...
This article is about unsolved questions in computer science philosophy, not computer engineering practice.
So those who can only add little marginal value shouldn't get a break or be allowed to stay home when sick for a couple of days? Like it or not we have an enormous population of working age people and, as the chart shows, only about the 40th percentile and above are adding enough value for that. Those below do not have any negotiation power (they only have ever had a little because of heavy unionization in the past).
Directly support TV show creators after watching their shows
A preemptive kickstarter of sorts. Can someone pokes some holes for us? :)
| It sounds like you're another victim of
| indoctrination from somewhere.

To be fair, that are probably a good number of people that would vote for such a thing if they felt it would increase the value of their stock portfolio.
If this is the downside of having a DRM-less, open web then so be it.

Isn't it the case that anyone who has purchased this template and uses it on their site that someone can then scrape the template? The source code is already out there. You're fighting the medium not the man.
Corporations are organizations of private individuals (either employees or shareholders), all of whom already pay taxes.
A few years back, I jumped into what I thought was a design position at a local web company. I was wrong.

I was then forced to learn JavaScript. I watched Douglass Crockford's Good Parts, and also listened to quite a bit of a Python podcast called Python Osmosis. I went from very basic/naive JavaScript on my own to a world where using VMs, SSH, Git, JavaScript, hand-rolled CMS's, and fast turnarounds were an everyday thing.

What did I learn? Forced immersion is the best way to learn. Don't allow yourself an "out", but allow yourself space.

There's a lot of ways to manage this path. I'll outline a few.

- Find a mentor - while this seems daunting, there are a lot of people who are itching to teach. It works best if there is a formal agreement (and even a pay-based relationship) for an allotted amount of time with some concrete goals.

- Start a project - Doesn't matter really what it is, because when you are making something, it is allowed to evolve. Decide a problem you want to tackle, and tackle it. Doesn't matter if this is reinventing the wheel, because you are learning how people built wheels; however, it always helps to try to solve things that haven't been solved before, so that you do it "the hard way" - this helps with retention and future problem solving abilities.

- Get an internship - build a relationship with an agency that is willing to pay you something to hack on stuff, and let you make mistakes. There are a lot of agencies with space on their teams that will be open to this.

Overall, the most important thing is to be diligent and remember that everyone else is learning constantly, too. Just because someone you know writes great tests doesn't mean they know testing. They learn every day. Jump into the fast moving river, and you'll quickly learn to swim, or get out of the river.
Furthermore, "find the bombmakers" is useless when the population of an entire village has been pressed into service in making bomb components like wooden pressure triggers. Thus the entire village are bombmakers.
Substantial discussion: https://news.ycombinator.com/item?id=5729564
the cress seeds placed near the router had not grown. Many of them were completely dead. While the cress seeds planted in the other room, away from the routers, thrived.
jacobian acknowledged that oversight hours ago...

>Fact is, we just forgot to mention it. Django's working so well on Py3 that it kinda seems like no big deal any more, so we forgot to mention it in the release notes. I'll fix that once I get a chance.
Is something like Haxe really that in demand?

I haven't heard of Haxe much (the last time was probably on here) but in theory it seems like a great idea.

I wonder why it's not more popular?
This was the realisation that made me finally understand joins (although they're certainly not generally implemented like that in practice!).
> Next time I'll read the article before submitting it, sorry.

So what was your thought process in submitting that article?
Then there is the question; Is your app likely to ever be attacked at all? By someone good? With a lot of time?

If not, perhaps hiring a cryptography expert is overkill, and you are better off just using whatever your framework offers, or integrate some library yourself. You are not a bank.
How is your statement relevant to either the article or the article headline? The news is just that there's a correlation between A and B, which suggests that either A causes B, B causes A, or A and B both relate to some third factor C. Where did you see an unjustified claim of causation?
> The ~9,000 people who knew to vote for collective bargaining power should not be punished by the ~11,000 short sighted ones.

Whoa! This is a very dangerous mindset - "if election doesn't go as per my wish, majority must be stupid".
You can ask, but you probably won't get it.

Some people don't have the luxury of choosing which job they take. Sometimes there's only one.
The name you're looking for is "Unsolved problems in computer engineering." I agree; there should be an article for that, but it should be kept separate from this one.
If you're making minimum wage then adding more paid vacation days is only going to increase your total compensation.
What we really need is a cryptography language, to do for cryptography what SQL does for databases. I should be able to say, "Messages have this form, and they need to be encrypted end-to-end with authentication and without surreptitious forwarding," and have the right components assembled for me. Unfortunately, our understanding of cryptography is not well-developed enough to create such a system, and so we still fumble around and usually produce systems that are vulnerable (did you remember to have a good source of entropy? did you make sure your messages are all the same length? does your system compose well with others?).
I didn't; that's how they seem to be used in the 21st-century world. To be honest, though, the "Nth World" classification is of questionable utility.
Try duplicating Silicon Valley, United States.

If the US were some magical recipe for innovation and entrepreneurship, then I would expect Silicon Valleys to pop up in every major metropolitan area. Certainly, if you think that the world is big enough to support more than one if only the laws changed, then it's not much of a stretch to think that the US could too.

Perhaps New York would be a good choice. It's on the coast, at a similar latitude. It has a large, educated and diverse population. It's got access to oodles of financial capital (probably more than the Bay Area). It has the same federal laws and (I presume) similar state and municipal laws.

Why aren't tech giants popping up in New York just as much as the Bay Area?

Edit to clarify my point:

This leads to one of two conclusions: either the US is not so exceptional and Silicon Valley is an historical accident, or the world is not big enough for more than one. In either case it doesn't make sense to accuse the rest of the world of dropping the torch of innovation and entrepreneurship.
In the areas where these blimps will be deployed, there almost certainly hasn't been the same discussions of privacy, tracking, corporate abuse, data breaches and perils of giving personal information out on the web nor the 20 years of background to go with it. You don't suppose Google will be educating the future web users to protect themselves from Google, do you?
About the timing attack on HMAC that the article mentions. It takes thousands if not hundreds of thousands of requests to gather the data (and let's assume you can indeed extract the data out of all the noise cause by network latency etc...), and any properly designed API should have a throttle measure built in to prevent brute force attacks like this.

A good, secure API is protected by a variety of measures, not just through the request authentication component. Of course you should still make your auth as secure as possible.
Two conclusions you could have come to here:

A. "Ah, I've brought up a politically charged tangent and people are downvoting to keep the discussion on topic"

B. "I'm a martyr to the HN hivemind!"

Yeah, definitely the second one.
exactly what I did. Gave her (my grandmother, 78 years old) a macbook first and she never used it in years. Just too many different buttons to press. Gave her an iPad with Path, Safari, Pages and an AirPrint-Printer installed (all other app-icons hidden on the second screen) and she recently told me it was "the best gift she ever received"...mission accomplished :)
While I feel your pain, your complaints make the Bahn sound much worse than it is to the non-calibrated outsider. We're complaining at a very high level.