skysight-inc/HackerNews huggingface dataset:
> A shift from Windows applications to the web has, contrary to popular belief, not hurt Microsoft's developer story.

What the?

In the 90's, if you wanted to "program", and if you wanted to show other people your skill, you made a windows executable and distributed it through one of the myriad of windows shareware/freeware websites. "I want to learn to program" meant firing up Visual Basic and having a go. And Microsoft was king, because they had the best tools, and they had the platform everyone was using and targeting.

Now, almost noone makes windows executables anymore, if they want to show off their skill. People wanting to learn to program would never use Visual Basic today, it's completely off the radar. They are much more likely to learn some web framework and put up a web app to show the world, or make a phone app and put on an app store. Windows executable? That doesn't run on your iPhone or MacBook or Android.

And Microsoft has no idea on how to get the new learners back. They have nothing to offer them.
What an amazing bit of work .. I hope to have one of these things when the time is right. The inclusion of the FPGA onboard makes a lot of sense, and would be a real selling point, in my opinion, for a lot of hackers. I can think of an endless vista of applications for that FPGA .. wow! An Amiga in your laptop! :) Hope I can qualify for one when the time is right!
Offshore Banking: A Guide for UK Remote Workers
Wow, Oracle has did again. Oracle has proven again it is now the single most evil software company out there, surpassing Microsoft. What they are doing is to incrementally convert open source free software into their proprietary cash cow.
Finally, A router without a backdoor. Nice!
Ultimately the answer is no, because your question is predicated on a nonexistent distinction.

A combination of algorithms is simply a new, more complex algorithm. It may be an obvious and safe algorithm that enhances security, like Truecrypt's option of an AES/Twofish/Serpent cascade, or it may be a totally worthless algorithm -- like if you created a new "hashing" algorithm that consisted of CRC32 followed by SHA256.

As that second example demonstrates, the naïve way of combining hashing algorithms is obviously not safe. If you simply layer them, any one of them could destroy entropy by producing biased/predictable results. Your new algorithm is crippled.

If you try to "mix" them in some other way, all you've done is create a new hashing algorithm and fed it the output of other hashing algorithms. It's perhaps less likely that any one of those sub-algorithms will seriously cripple your system, but it's much more likely that you've made a mistake, and your new algorithm itself produces poor results.

Somewhere along the way, you end up trusting something, even if it's your own algorithm. But since trusting yourself to get crypto right is a bad idea, the next best thing is to trust a well-vetted hashing algorithm, of which there are several that are likely "good enough", and aren't even NSA designed.

If you're super-paranoid about backdoors, RIPEMD-160 might be your best bet -- it's a product of European academia. It gets some use, but not as much cryptanalysis as the SHA family has.
A better foil to what Jay-Z is doing is Daft Punk: http://www.businessweek.com/articles/2013-06-27/daft-punks-g...

Jay-Z's marketing campaign is aggressive (pushing users to post things on social networks to unlock things) while Daft Punk is taking a more hands off approach, letting their fans spread the word.

It will be interesting to see which one sells more.
Exactly. It's been under a week for the last 6 months or so.

http://reviewtimes.shinydevelopment.com/ios-annual-trend-gra...
The last great IDE Microsoft put out was Visual Studio 6: the C++ compiler optimizations were amazing, the UI was zenful (you had to know your hotkeys for things, gasp!) The darn thing just did everything, and I enjoyed working with it.

Versions after 6 had more and more panels and property sheets started cluttering up the works and crowding out my editor, and there were lots more things begging for the mouse rather than the keyboard.

Seems like their tools philosophy changed after Y2K. It was writing on the wall for me to move on when Ctrl+Tab/Ctrl+Shift+Tab in VS stopped working like a stack of MRU editors because they started adding visual/clickable tabs at the top for all the open editors. "It would be confusing", said the marketdroid, "to have Ctrl+Tab jump all over the place between these tabs here - better to just cycle left and right through the editor tabs in the order they are displayed." Sigh.
Sparkfun has a good eagle tutorial - https://www.sparkfun.com/tutorials/108
There's a few reasons for that, one is due to steam pipes below ground, another is due to the AC units on the subway cars, I believe (its been a while since I read the math) that they put off as much heat as breaking from a full stop does, but they do it continuously. Finally breaking is a big factor but that only happens once per station and I believe the heat given off is comparable to only a fraction of what the AC units give off when stopped in the station. Finally, there's the poor ventilation that doesn't allow the air to circulate very well albit it is somewhat nice in the winter since then the station is warmer.
I agree with much of this, but mainly on their sales and marketing tactics.

However, what does your rationale for finding them reprehensible have to do with the article? The Affero GPL/GPLv3 is arguably the most open source license available.
Civil and structural engineers don't periodically reinvent mudbrick and then go about proclaiming it as a revolution that will sweep non-agile muck like concrete away.
Twilio.com
" Google uses cookies, like the PREF cookie, to help personalize ads on Google properties, like Google Search, particularly when you aren’t signed in to a Google account. We also use cookies for advertising we serve outside of Google. Our main advertising cookie is called ‘id’ and it is stored in browsers under the domain doubleclick.net. We use others with names such as _drt_, FLC, NID and exchange_uid." [1]

Wouldn't this mean that only doubleclick.net is used for advertisement tracking?

[1] http://www.google.com/intl/en-US/policies/technologies/types...
The old license only required providing source code if you redistributed it. The new license requires it even if you never distribute anything, e.g., you use it in the backend of a SaaS app.
> I offered up my time for free providing my expenses were covered

Those two things do not mean the same thing.

> Experience in Tool/Language X is a stupid thing to ask for

I'm pretty sure my experience with Perl won't allow me to write useful C within two days, no matter how experienced my coworkers.

It would've been much more interesting to read about how he actually found his "jobs".
1. It is limiting: no static linking or you have to distribute re-linkable object files (LGPL section 4.d.)

Static linking is fairly uncommon; it's more common to distribute the versions of DLLs you require on Windows, or use a package dependency on specific versions (or provide your own copies) of the system-provided libraries on Linux.

3. Section 6 says all these can be changed anytime, potentially making it more restrictive (see GPL v3).

Section 6 of LGPL3 does not say that; it says that you have the option of choosing a later version. Any code released under "GPLv2 or later" can still be used under GPL2.

https://www.gnu.org/licenses/lgpl.html
So fork it from the older version - that is still available under the old license.
your question is predicated on a nonexistent distinction. A combination of algorithms is simply a new, more complex algorithm.

That's true if you combine multiple algorithms conventionally, for example by feeding inputs from one to the other or by passing the original entropy to the two algorithms in parallel.

However, if you run one algorithm independently of another - with completely different entropy sources - then flip between supplying the output of each in rapid succession, then on the face of it for ~50% overheads you have probably mostly mitigated exploitable vulnerabilities in either of the two single PRNGs for most applications. (Optionally add another for more security, and take it a step further...)

You are right that this would need to be done carefully .. perhaps the flip in which PRNG is used for the output stream occurs at hard-to-predict points in time (the range of periods for which, potentially, might be carefully chosen from a range that takes in to account some other cryptographically relevant factors ... from a complete non-cryptographer like me, this might include things like entropy draw size by typical applications (optimizing for multiple PRNGs over a typical application draw), the length of any feedback register or calibration cycle of individual cryptographic client algorithms, etc. Generally this would mean 'pretty frequently but not so frequently that it's predictably useful' - something of a paradox, true.)

In short, I still think this approach may have some merit.
CppCMS also offers commercial licensing. Don't get me wrong, I love BSD and MIT software, and release some of my own code under permissive licenses, but it really bothers me when someone complains about the GPL or LGPL because they want to free-load off of others' hard work. The LGPL is a very commercial-friendly license!
It's a slight bummer but not really a big problem. If the community doesn't like the license it'll just fork and we'll end up with a similar situation to MySQL and MariaDB.

i.e. we're better off in the end. Open source lives because of it's contributors and can not be killed off by a corporation.

EDIT: Removed my 'opinion' because it's not important :-)
Oh, and Microsoft, if I have a process that opens a file, could you PLEASE stop locking the file in your weird and arbitrary ways?

How many times have I had to kludge my code for running on Windows because of file locking policies that were in place for, what, DOS 3 compatibility?

It's no wonder to me why deploying to Linux is so popular. Draconian file locking policies in Windows, huge PITA right out the chute.
IPhone app Prototyping with Phototapper
C++ is never going to be hip, but as an HTML5 game developer I can't tell you how many times I have wished for the ability to stack allocate objects, or to use RAII.

C++ gives you plenty of ways to go harm yourself, but unlike C they are pretty easy to work around. And the nice thing is that for the most part wrong code looks wrong.
From what i know the code was quite simple and even trivial, using existing java libraries as much as possible. The fact is that using corresponding cpp libraries let him get what he needed with much less fuss. I do not know why the java version was so inefficient and used all memory,it might be due to one ofnthe librariez, but this is illustrating an example where cpp was relevant , which was the point of my comment.
In Python 2.x there was a module for Berkley DB which is removed in Python 3 (bsddb module). I'm curious that since Berkley DB has always had a strong copyright license and it was not PSFL, how things worked legally. There is no mention in the docs[1] that if you use an import bsddb in your code you have to make it open-source. When they decided to remove it there was no mention of the license, just difficulty of maintenance[2].

So, was it possible to use Berkley DB without releasing your code as open-source before this change or was it because no one thought it was necessary to mention it in the docs?

[1] http://docs.python.org/2/library/bsddb.html
[2] http://jessenoller.com/2008/09/04/stirred-up-dem-bees-should...
Show HN: fs-utils - userland file system access through NetBSD kernel drivers
This is great! Can be handy for us. I was always looking for some feedback / dashboard options when presenting prototypes.

Thanks for posting
No. As the previous poster wrote, "The ability to store more power economically would be so very handy."
They were bought by Yahoo so it was only a matter of time. 90 days of notice (the notice was May 2nd) is not much.
With all this talk about metadata, it would be wonderful if these agencies published and standardized their ontologies.
Thanks Mike!! We just launched the app. We are planning to support Android and custom screensize.

Please give us some feedback if you happen to download it.
Original article here:

http://blog.docker.io/2013/06/create-light-weight-docker-con...

If I'm not mistaken this was already posted not so long ago on HN. Why use slideshare.net for something that's obviously not a slide deck?
Sounds like the motherboard I need to finally make that tricorder.
Gettin' my meta-gripe fix for the day!
Europe's digital chief: PRISM fallout could cost US cloud industry billions
I like running but regularity seems to be the biggest hurdle. Do you think one has to push oneself to improve running or that improvement part takes care of itself as one maintains regularity.]?
> To actually use a bomb is so reckless that you need a couple dozen bombs in your back pocket to deter the overwhelming payback.

Assuming that there is a clear return address on any use of the weapon. How much time do you have to determine where to send the answering salvo? This argument made some kind of sense during the cold war, but it's dangerously naive if nearly everyone has a bomb and a long-range launch capability.
That seems really strange. I mean I get why their database is written in that, but I would imagine that their matching algorithms, at least, were written in something more easily adapted to change. It is one of the cases where I would want to write it in Lisp.
The brains behind BitTorrent get on TV's good side (Q&A)
It's such an effed-up situation that the terms have specific, harmful, meanings. In the same sense that "african-american" refers to black people and not white, arabic, or other races, zionism has turned into a word that means "Israelis who abuse Palestinians."

It's tough enough explaining the current and historical pressures that it becomes a minefield of terminology. Zionist/anti-zionist/anti-semitic/etc. are all loaded terms that now encourage emotion over logic.

I'm not on your case, I'm feeling your pain in terms of having to use two posts and 50 words where one or two should suffice to keep people from going ballistic.
> That's true if you combine multiple algorithms conventionally

What I said is true no matter how you combine them, including in the manner you propose.

> flip between supplying the output of each in rapid succession

You've just exposed yourself to a possible related-key attack. Also, the effective entropy of your key could be halved simply by one of the PRNGs being compromised, so even absent a related-key attack, you'd better be using an encryption algorithm with a big key size.

(BTW, it's 100% overhead, not 50% overhead.)

(Oh, and if both algorithms happen to be compromised, the results are or might as well be 0-entropy. Yet again, somewhere along the way you end up trusting something.)

> perhaps the flip in which PRNG is used for the output stream occurs at hard-to-predict points in time

"Hard-to-predict" requires a secure random number generator. You've gone on to describe yet another ad-hoc random number generator that you would use in the construction of your random number generator.

Cryptography is hard.
I don't understand the sentiments in this thread. They own the thing. They do whatever they want with it. They have paid good money for it. Yet they have chosen to give it away as free software (with a license even Richard Stallman and the other FSF folks would approve). What is this sense of entitlement here on HN?
Yes, that's what I said, it's the definition of copyleft.

For most companies the open source version was not acceptable anyway. E.g. most customers with sensitive information (such as government organizations) require on-site firewalled installations of your software anyway. So, you either pony up the relatively high per-CPU cost, or use a less restrictively licensed alternative such as leveldb.

This change will mostly make a difference for web applications. But my point was that Berkeley DB was already licensed quite restrictively before, contrary to some people's beliefs.
Well, at least in the case of electrical and mechanical engineering, no company can survive burning through grads so fast. For one thing, the number of engineers available is more limited, because of the (relatively) reduced sexiness of those fields. Also, if your product has to work for 10, 20, maybe 30 years, you have quite an incentive to retain the people that know it in detail in order to cope with the inevitable non-trivial long term support issues.
Yahoo’s Recently Acquired Task Tracking Service Astrid Will Go Dark On August 5
1. Avoid any cloud, not just the "US cloud", whenever you can.

2. Use applications that let you store your data locally and that work peer-to-peer, in a decentralized manner, and without any central server.

That is where the Internet needs to go.
If terrorism were 1000 times worse than it is in the US it would not justify this activity

In light of the fact that the Patriot Act allows this, you are a naive person - it's no big deal but just acknowledge the reality. The comparison to tyranny is absurd. This has been going on for 15 years http://en.wikipedia.org/wiki/Carnivore_(software) The fact that you don't know that isn't my fault. Get with the times. The question is why are you so naive to act surprised to hear about this? You really think Auschwitz or the Gulag is the next step from where we are now?
OK, so how does he actually make his way to Venezuela when his passport is withdrawn? Will Venezuela swing a plane by the russian airport and pick him up? Anyone know?
eg. this change made to reduce the possiblity of a hostile HDMI device corrupting the firmware: http://www.kosagi.com/w/index.php?title=Novena_EVT_to_DVT_ch...
I know the founder of AdMuncher. Pretty sure they don't whitelist.
Yes, and it might be instructive to mod one of Sparkfun's boards - for which they often post the sources.
I'd say the best exercise to start with, is to buy some bare PCBs from an open source project or two, and then try to source all the components yourself. I think I learned a lot about component types/specs/sizing/packaging doing this, even though I had zero EE experience.

I tried modifying some open source designs, as well as designing a board from scratch, using Eagle and Kicad last year. I found the software so cumbersome and maddening, I gave up rather quickly.

I've stumbled upon some better tools since then. I hope one of these will get me from idea to gerber with less heartburn.

* http://www.layouteditor.net/

* http://razencad.com/

Those are both free. On the commercial side, there are a lot of options, but I'm tempted to just buy Diptrace, which seems to have a good array of features and reasonably-priced licenses.
Your comment demonstrates the difference between legal obligations and social obligations. Oracle has forced their way into and destroyed multiple communities. They have that legal right, but we also have the right to dislike them for it.
Well, in the article, the interviewee that talks about the technologies that each generation uses is "the lead economist at PayScale."
Gen Y knows Hadoop instead of SQL? Bwahahahaha. -wipes tear-
Useful program for memory card data recovery for Windows
Card Data Recovery is an excellent utility to recover lost data from various memory cards, USB drives, mobile phones, digital cameras, MP4 and more. It provides professional solutions to retrieve photos, videos, music and other files that lost due to formatting card or hard drive, card or drive corruption, deletion, virus attack etc.
Basically, cryptography requires a PRNG whose output is provably indistinguishable from a true RNG. Your algorithm cannot be proven to have this property, and might even be susceptible to some attacks.

Basically, it's a band-aid, but cryptography is rigorous and averse to band-aids, requiring everything to be mathematically proven before use.

It's not enough for an algorithm to "seem reasonable", it must be mathematically proven to have certain properties. It's really an extremely interesting subject to study, I'd give it a go. Join the coursera class on cryptography.
What's interesting is that the creator of Cryptocat, Nadim Kobeissi (who has no problem with the media introducing him as "cryptographer" or "security researcher") commented the following last year to journalists when asked about an issue with MEGA's (mega.co.nz) encryption:

“It’s a nice website, but when it comes to cryptography they seem to have no experience,” says Nadim Kobeissi, a 22-year old cryptographer and creator of the secure chat software Cryptocat, who began poring over the public portions Mega’s code as soon as it debuted over the weekend. “Quite frankly it felt like I had coded this in 2011 while drunk.” (see: http://www.forbes.com/sites/andygreenbe ... -promises/)

Perhaps he was on drugs when he coded Cryptocat...
Recovering a MySQL `root` password – Three solutions
Fun picture taken tonight downtown on Freemont East during First Friday: http://cl.ly/image/2U3m2I0p2O0v

I've come to realize Vegas is facing a problem with talent in tech. Plenty of companies are looking to hire, but there is not much selection. I guess that makes it a great place to move. Low cost of living and a sellers market.
As Steve Ballmer says "developers, developers, developers, developers!"

But are independent developers allowed to develop for Xbox One?

No - developers not welcome.
really, is anyone on HN surprised by this???
Surely you mean the late 90's, as I still remember distributing MS-DOS stuff via BBS around 1994.
What are the secrets of a great WikiTalk? Phil Waknell
The web we lost
They are welcome in the same way console market has worked since the early 80's.
Given the number of times everyday I'm asked to fill my iTunes account's password on iOS, I wouldn't call it invisible.
I would like to find out but i'm in a country that has no netflix :(
Respected sir,I am Abhijeet Kumar Shah , B.Tech (4th year) in computer Science And Engineering from SRM University.My biggest failure is that i was unable to score in IIT or WBJEE.Due to that i am studying in one of the most expensive engineering college.As an biggest achievement i am now studying in SRM university,no 1 private university,which having name all over the world.
I knew how wrote the article before I got to the end. Rory Sutherland has a real knack of seeing things from a different perspective.
Differences Between Science And Engineering
Respected sir,I am Abhijeet Kumar Shah , B.Tech (4th year) in computer Science And Engineering from SRM University.My biggest failure is that i was unable to score in IIT or WBJEE.Due to that i am studying in one of the most expensive engineering college.As an biggest achievement i am now studying in SRM university,no 1 private university,which having name all over the world.
email: abhijeetshah55@gmail.com
Just curious. Which company would be apt to provide "security solutions", then?
Yes but they are missing a huge opportunity by not opening the Xbox platform up to all developers equally.

That's an opportunity that Sony and Apple won't miss.
What are you talking about?

The safety you mentioned comes from only two things: type safety and runtime array boundary checks.

There is no problem in implementing runtime boundary check in C++.

What else in C++ is less safe than in Java? Is there some kind of magic?
The Y chromosome shall not die : Gene Expression
As TFA says, the problem is the anti-tivoization clause, which creates issues for web developers, issues which weren't there with the previous licenses and that should push more people to buy commercial licenses as insurance.
Will Bureaucrats Ground Private Space Before It Launches?
China Taps a Growing Phone Market
Oracle is the Wall Street of IT industry. Toxic business practices and disregard to customer interest. Profit is the only imperative.
Once the tools get built all you need are robots. As Seinfeld says walk into any parking lot these days and all the cars look alike.