skysight-inc/HackerNews huggingface dataset:
My piano teacher had me practicing sight reading very specifically. I don't know if that's important, perhaps? I was able to sight read just barely well enough to get the certificates, but I've never been able to do it honestly, or play by ear. And back when I still practiced, I was a fairly decent pianist.
That said, the key for security is to design an app where compromising the server isn't possible.

That's simply not possible. There's always an exploit somewhere. Continually kicking the can of security "upstream" and being confident that your stuff is secure so long as no-one else messes up is naïve and myopic.
Many of the presentations from the Bitcoin 2013 conference were uploaded to YouTube today: http://www.youtube.com/playlist?list=PLUOP0P68GJ3BGjfqoLLnzA...
You have acquired just enough rope to hang yourself with.
They were both visibly compressed and/or cracked.
Minors have largely the same rights as adults. There are reasonable restrictions on those rights, but the default is not "no rights with a few exceptions". It's "all rights with a few exceptions". For example, schools are allowed to place some restrictions on students' speech, but they cannot forbid speech unreasonably (e.g. cannot require pledge of allegiance; could not force students to remove black armbands protesting Vietnam War).

And no one said the school can't ask about drug use. But the students can refuse to answer.
> it blurs the line between the "content" of my inbox and advertising

Yeah. They used to automatically file non-spam promotional emails into a separate folder where you could safely ignore them, but now they just go into your regular inbox! Money-grabbing so and so's.

(...is what you'd be saying if this feature were being eliminated rather than introduced...)
Good point since most cord cut viewing still happens on bundlers (Netflix, Hulu, amazon prime, pirate bay).
Busbud
Image Layout Algorithm for Facebook Photos
Indian Bachelors -> US Masters CS is a well worn path.
I like that! From now on, when you want to introduce some new crypto idea, just make sure not to call it a "product", then issue a $1000 contest to assure people the idea works. Why doesn't everyone do that?

Oh, wait, I think Schneier answered that:

Contests are a terrible way to demonstrate security. A product/system/protocol/algorithm that has survived a contest unbroken is not obviously more trustworthy than one that has not been the subject of a contest. The best products/systems/protocols/algorithms available today have not been the subjects of any contests, and probably never will be. Contests generally don't produce useful data. There are three basic reasons why this is so.

They are:

1. The contests are generally unfair.

2. The analysis is not controlled.

3. Contest prizes are rarely good incentives.

I'd submit that (1) doesn't count here, because the idea you're demonstrating is so obviously flawed that contestants aren't at any disadvantage. But (2) and (3) are absolutely valid here: there's no structure to the contest (it's a bunch of Hacker News people poking at a page at random with no collaboration, milestones, or test plans), and $1000 buys ~3 hours of cryptanalysis work if you source it from software security people instead of actual cryptographers (who bill north of $450/hr).

I have no idea who you are and so I don't want to sound like I'm offended by what you've posted. But you are like the 100th person to staple SJCL onto a web app and posit that they've created something more secure than a private wiki. Actual professional cryptographers have addressed similar claims in the past. Here's Nate Lawson:

http://rdist.root.org/2010/11/29/final-post-on-javascript-cr...

Instead of the brinksmanship of offering a contest, why don't you instead just listen to the arguments people are making and try to learn from them?

Triple bonus points for noting that AES and SHA3 were the products of design contests, after Schneier wrote this, and then observing the differences between those design contests and the one at the top of this thread.
> So they're giving me sub folders ("tabs") for my inbox folder. How very 1999.

And this is why /r/technology is going downhill.

OH, wait a minute! Never mind..
This bar sounds really very high. I read things like this a lot, but it doesn't match up with what I see.

No employer has ever asked me for a github address, or a list of open source commits. I put github on my CV via a goo.gl url last time, and counted very few visits. Yet they invited me for interview.

HR filter by qualifications, and hiring managers filter before phone screen on what you claim in your CV. Then they assess at the interview whether you were lieing.

If you were genuinely famous in the OS community, or had spent a year full time making an amazing product they could see, I think things would be different. For most software engineers, 80% of our work is for our employer. I've made some awesome stuff for other people. It's not on github. My boss wouldn't like that.

Is the above really a good recommendation? I'd say at least the MS would get him through the HR filter?
How school reform preserves the status quo, and what real change would look like
We can argue about the merits of downloadable solutions but that isn't a flaw in this application. I'm willing to make it easy for you: You can even have the database to let you crack it without first having to break into my server.

I agree with you that there are risks to browser side crypto but how are they any different from upgrading software without reevaluating the security of each upgrade? Browser-based crypto also has benefits; most users prefer using web applications to installed all else equal because it's easier.
There's always a post like this about articles like these. Market rate for people with master's degrees is still significantly higher on average.

If you don't match the average, you are much more likely to get lower quality candidates apply to your job. If you, as you claim, pay them less than people with 1-2 years less education, you are pretty much guaranteed to get the worst candidates.

This latter point usually ends up leading to "I've worked with so many people with masters and they are all bad!"
Erm, how does everyone agree on an exchange rate? They would all have incentive to manipulate their exchange rate for arbitrage. That alone means that not everyone or even any meaningful number of people can become exchanges.
Swart's Ten Percent Rule for Database Features
I suppose. But the weird aspect here is the prominence of the button. The point of filtering out spam (given the more pleasant name "Promotions" now) is to put it into a place where it won't bother me. Now, they're suggesting I have a big fancy "Promotions" button at the top of my inbox. Why would I want that button there?
In your first method, you call getSponge() and getTowel() d times each, but in your second method you only call each once. That would be significant for large values of d, if I'm not mistaken.

edit: using "d" to refer to the number of dishes here. that could have caused confusion, my bad.
I think I get all that. So is there room for the idea of a vernacular that is not a "real English", to use your term? Or not the "relative equal" of Standard English? Can there be, or are there in the wild, vernaculars that are something other than these things?
I was thinking of something like this when I wrote my comment. MIME does function as a container model, but it's not plain text and it could only be a standard with supplementation. But there's a UNIX-y sense in which this is all human-readable text representations.

I'm not really familiar with the internals of ODF, but OOXML, while it does capture quite a lot of UI state, is actually quite clean and represents the intuitive document structure rather well.
Even assuming the numbers here are correct (and I'm rather skeptical) it means that channels like ESPN are getting heavily subsidized by cable subscribers who aren't interested in that content. That's not a win to me. That's my money going to produce shows that I don't like and don't want to watch.

If ESPN is unable to sustain the level of content/quality they currently show without huge subsidies, they shouldn't be making it. The subsidy to ESPN implies that channels and shows that I DO WATCH are not receiving a fair amount of my bill for the time I spend watching them.

This is not a "better for all" type of socialism. It's a "better for the entrenched" type of taxation.

To reiterate a common theme in the comments:
"A la cart distribution is good for consumers and content creators, and is bad for networks and cable providers"
The company, Mint Digital, also prints Instagram to magnets - StickyGram http://mintdigital.com/portfolio
Right, everyone using LR was using it for 100% legit transactions, no money laundering of any sort. Mhmm.
Or by size, though I strongly suspect that is by design, to better make you use up your quota.
Disaster Recovery Starts with Backup and Recovery | The SQL Herald
I'm not certain, but they're probably stored in that facility in northern Norway, Svalbard: https://en.wikipedia.org/wiki/Svalbard_Global_Seed_Vault
That's the built-in keyboard, right? I thought those were USB for some reason, I guess not. I guess it would be more accurate to say that PS/2 connectors proper (6-pin mini-DIN) are likely extinct in laptops.
Does the DNA of one sperm contain 37.5 MB of information?
Out of curiosity, what do you do when you run into an OSS project which requires you to subscribe to a mailing list in order to ask a question? I find the friction of this high enough that I end up staying subscribed forever (and filtering the mail) rather than unsubscribing and possibly having to resubscribe later. I'm glad gmail doesn't have a quota for email bandwidth...
Designing Facebook's Best Cropping Position Algorithm
I can't speak for OP, but you insist on reading it as a criticism, when it seems to me more of a question in the spirit of scientific inquiry - at what times does a user of the "vocal fry" consider it appropriate? In the linked interview with Zooey Deschanel, she's not using it with every word she speaks. So I think it's natural for someone unfamiliar with this speech pattern to wonder why it's used in some places and not others. Is that a verboten question?
However subtle? It's entirely transparent to the user!

Even if the user is somehow checking the exact JS bytes received (which is so pointless a stretch), what if the server is already compromised the first time the user gets there? Or they're on another computer?

And then, how do you deliver updates? If I compromise SSL or your server, I'll use that channel to tell people "we updated the code, it's good".

How is the user supposed to determine to trust the JS in the first place?

This literally boils down to strength of SSL.

Create something in JS that doesn't rely on SSL, and then you'll have something to show off.
Side Project: Outfox Email
I have a separate email address for this purpose. Anybody I know personally or trust gets my regular email address. Anybody who might sign me up for a newsletter gets my spam email address. I don't get any newsletter spam at my regular address.
That would be more like Magdalenian Park.
Complete Guide to Android smartphone audiophile
No, its plain old lazyness. All these "compiled to JS" language makers would rather add more fancy syntactic sugar or extend the standard library than getting their goddamn bases covered.

I have no problem with that, but please don't go on about how you are much more productive in this language than in JS, and how much cheaper the code will be to maintain.
The line before that is even more interesting:

Stem cell scientist Hwang Woo-suk's private bioengineering laboratory confirmed he is poised to make a bid to return the extinct Siberian mammoth to the planet.

Hwang Woo-suk is an extremely famous scientific fraud.

http://www.time.com/time/covers/asia/0,16641,20060109,00.htm...

http://www.nytimes.com/2009/10/27/world/asia/27clone.html

http://news.sciencemag.org/sciencenow/2006/11/28-01.html

https://en.wikipedia.org/wiki/Hwang_Woo-suk

SEOUL, South Korea — Hwang Woo-suk, a disgraced cloning expert from South Korea who had claimed major breakthroughs in stem-cell research, was convicted Monday of falsifying his papers and embezzling government research funds. A judge sentenced him to a suspended two-year prison term, saying Dr. Hwang had shown remorse and had not taken research money for personal use.

Dr. Hwang was once hailed as a national hero in the South. His school, Seoul National University, disowned him in 2005, saying that he had fabricated the papers he had published to global acclaim.
I was a "coursework" MSCS student at a school which had both. I was earlier on the research track but then decided not to do a thesis after losing interest in research oriented CS (which btw, why all schools should offer both - I'd have had to either drop out or more likely spend a really unhappy year or two doing something I didn't want to do).

Here is where a MSCS ("Coursework") works really great for all parties involved -

1. (And the biggest reason) Provides actual, high skilled nonresidents an easy route to working in USA. MSCS ("Coursework") are doable in 15 months with some schools such as Cornell offering a 9 month program (MEngg not MSCS but same difference). This works great for the student (since CS grads are paid well, they don't have any issues repaying student loans), for the university (they're struggling for cash and this is a welcome inflow of cash) and BigCos such as Microsoft, Amazon, Google etc who recruit most of these and basically pay for these degrees (they're bleeding top talent to the Facebooks, Twitters and startups etc and are always hiring)

2. Students who don't have a BS in CS. Its a great route for them to add some formal education to their resumes and improve the core CS skills. Startups don't really care about your resumes, but it can be hard to get calls from the BigCos without a formal degree in CS or EE. Nothing wrong with that and I can't see why anyone would disparage them.

Finally, I'd disagree with the blog author's two observations. First, his recommendation to the undergrad. If you don't fit into either of the two scenarios mentioned above (nonresident, didn't do a BSCS) there is only one scenario where it makes sense for the undergrad to do a MSCS - if he/she is interested in research and doesn't have a good enough profile to get into a PhD program directly (it'll give you an additional year to try and get some more publications + give you an opportunity to convince a prof at the school you're at to do a PhD).

However, if you're going to reject all the schools which don't give you any financial aid or give only a TA, you'll left with schools which will give you a RA which basically means you are good enough for their PhD program and they accepted you to the MS program only because thats what you applied for.

The second scenario - of Udacity/Gatech's $7000 MSCS eating other schools lunches, unless this $7000 MSCS comes with an CPT, OPT and its own category of H1B visas, I find it really doubtful it'll make much headway with the first group, nonresidents. Although it is definitely quite attractive towards the second group, those who didn't do a BSCS.
Assuming Amazon's endgame is optional integration with their payment/delivery platforms, there's certainly the hypothetical possibility of accidentally purchasing from confusingly designed sites you'd never give your cc details to though.

Since chargebacks - unlike social spam - cost money, Amazon has every reason to be more cautious about their permissions and confirmation screens, but the wary user probably isn't unjustified in hesitating when asked to sign up for a free service using a login they normally use to buy stuff with.
Because normal users don't upgrade their applications every time they run them? I feel like people have to entertain this argument every time Javascript crypto comes up, and that it's a self-evidently silly argument. Would you feel as comfortable running SSH as a Java applet delivered from a website every time you needed it as you do running /usr/bin/ssh? Of course you would not.
Just a bunch of pompous platitudes. As the oft-cited matasano article on JS crypto. I didn't know crypto professionals needed to be so self-aggrandizing.
Then the fences will stop working and the Gulag prisoners will successfully escape.
As a current CS undergrad, is it worth it to pursue an MS after I finish my BS? I understand it that in many ways it is a highly personal choice yet, I don't want to end up wasting time I could be spending doing something more productive/beneficial/interesting. I've really enjoyed most of the courses I have had to take so far (OS,DS&A,Lang. Design,...) but I still wonder how much an MS would bring to the table.
I agree it only proves security up to a certain value. Would you be happier if I increased the reward?

Regardless, what do you think of someone who publicly calls something a terribly insecure idea, and then reacts with snark and doesn't actually attempt to crack the system when the opportunity is put before him by someone willing to bend over backwards to help him crack it?

Propose a plan to actually crack the system. Do you want the database? Do you want to control the network where I log in?
This analysis is flawed in that it assumes that the host with the closest geographical proximity should always provide the lowest network latency.

Very often it does, but especially for smaller countries that do not have the same number of peering points that exist in the US or Europe, latency will appear out of whack when compared to geographical proximity.

For this test to be valid, you would need to measure the latency to the remote host from all four servers to determine if indeed the ideal route was chosen. Even then the latency may vary depending on the time of day or other network conditions.

From a practical standpoint, a simpler and more accurate metric would be to compare page load times in different geographies before and after enabling Route 53.
So what is “binding.pry” exactly?
Deep brain stimulation operation shows moment patient's tremors stop
I was hoping that they would complete the analogy. I was unable to make these connections: (please fill in!)

1. What is the reason the women's escalator goes down?

2. What is the reason only men can ride the up escalator?

3. What is the elevator?

4. Why not just make everyone take the elevator? Why have a restricted running arrangement at all? Why not just have organized one-at-a-time races on a 100m track with a photo finish setup?
Have you considered asking Bruce Schneier? Because the rebuttal to "here's a contest, show that what I'm doing is insecure" is his, not mine.
Surely Humble Bundle demonstrates that it DOES work, otherwise they wouldn't still be running offers and would not be able to convince game developers to participate in the deals.

The average purchase may be $6, but how many of those purchases are from people who wouldn't have bought the individual games at all if not for the offer? If they weren't going to buy at all, that's $6 of revenue that you wouldn't have seen at all otherwise.
Political blogs/sites arguably have less legal exposure because they specifically deal with public figures and legally public figures have less protections (or at least a higher burden of proof) when it comes to things like libel.

That said, I can't really think of a plausible example of something The Magazine could hastily publish that could land them into legal trouble. I suppose a story full of falsehoods could tarnish its reputation, but I'm not sure it has a reputation to tarnish in the firs place.
M2M App Challenge June 7
I care and they make it worse. It's becoming more and more like Facebook, more chatty instead of with interesting content. Besides the obvious eternal September, which means more users and is a goal of theirs, they discourage long posts and comments by shortening how much you see of it, and making the expand link less visible. I now consciously make sure it breaks mid-sentence so that people know there's more.
The Facebook "bootcamp" process seems like the best way to get around the problems of "blind allocation" as well as the problems of "teams need warm bodies and thus lower standards, leading to eventual company-wide mediocrity".
It looks like the requisite debugger technology is just coming online in dev builds for Mozilla: https://hacks.mozilla.org/2013/05/compiling-to-javascript-an...

Chrome has some sort of support for it too, which Closure can apparently use. (That's Closure the JS library, not Clojure the JVM Lisp.)
Uhm, didn't know about that it never happened to me
Disclaimer: I'm at the launch event and helped put this project together.

They're not doing this for the Kickstarter money. Even though they're fundraising for the project, they're already putting in more than they could ever hope to raise on Kickstarter.

This project is adjacent to their core mission of Asteroid Mining, this is to prove interest that the public is interested in this sort of project, and to give the public access to the sort of thing that was, previously, impossibly expensive.

For $25 you can get a picture of yourself in space. That's pretty crazy.
You are in the pride of lions. You do not know it yet. What many coders don't realize is how much power they actually have.

You are the lion and the resources of the company are the gazelle. It's time to feast!

It's really a good time to:

1) ask for a raise for more "effort"

2) ask for more budget

3) that new computer they've been holding out on.

Ya, you can ditch that 17" laptop from 2006. ;) Just ask!

We know that throwing resources into the game this late doesn't work, but it's good to have that extra budget for later just in case you wildly do succeed.
HDP 1.3 Released: Community innovation in Hortonworks Hadoop Distro
I was recently in a similar situation, although not in SV; you are feeling a lot of unnecessary guilt(?), from a logical standpoint you probably realize it is not justified, but that does not mean you aren't experiencing the emotions. You just have to suck it up, and approach it like a chess game, plan your strategy, and ignore the emotional aspect, not to say you can actually flip a switch and not feel them, but do your best to just ignore them, and only let your brain do the work. To help with this, employers don't necessarily need you as much as you probably assume they do. They go through this a lot more than you, so it's not a big deal. If you are really afraid of burning bridges, give 4-6 weeks notice (that's what I did), and reaffirm, that you will help in any way you can (sitting in on interviews, helping the new hire train if they find one quickly enough, teaching current employees some stuff that will ease the transition irt what you were working on).
It's not limited to tablets. This applies to all Windows 8-certified client hardware.
I am not sure what you think I am missing. Google has offered this type of filtering before. I have continued to use it for the last year and really enjoy it.

The already existing feature is more intelligent than "a big table of senders". For example, some of the emails I receive from Amazon are sent directly to me as notifications and some are filtered away into Promotions to be viewed on my schedule. It is smart enough to know that I don't want my day interrupted by Amazon's next sale but do want to see my order confirmations from Amazon as soon as they are received.

I am not criticizing Google, I am just noting that this is not a new feature but a Gmail labs experiment graduating into the main Gmail feature set with a fresh new coat of UI polish.