skysight-inc/HackerNews huggingface dataset:
> For over a decade now the music industry is struggling.

And that's where I stopped reading (which is unfortunate, because this is also where I started reading).
"Quote of the day” by Facebook’s Jocelyn Goldfein
Retro Detroiter | Purveyors of all things vintage
I think the Chinese Loongson MIPS-based processor is 'open hardware', but I can't confirm that with a quick Google search.
There's also something fairly basic you can use to mitigate this: mix rdrand's output with some amount of entropy from other sources.

Even if it were done just a little to minimize performance impact, this would greatly increase the difficulty of using such a backdoor if it did exist.

And totally good point about cloud. Any cloud host can trivially observe everything you are doing, steal your keys, etc.
Reasons to Choose Opera over Chrome
Plugin functionality aside, the use case in the video demo is IMO better addressed by not worrying about line numbers at all.

Position the cursor at the start of the function, then d} (delete 1 paragraph forward). Alternatively if you don't have a clean paragraph boundary, use V to start a visual highlight, then move the cursor (up,down,},10down,whatever) to the end, then d to delete.

Then } (move 1 paragraph forward)

Then p to paste
I try to treat my students the same way. The fact that almost no one does so makes it tough. Average high school kids have a tough time adapting to it. But when they do, as Dijkstra says, they become much more effective.

Sometimes there is a group that gets it right away, and runs with it, but it usually takes some time.

There are usually a few who think they are smarter than average (they usually are), that their intelligence will compensate (it rarely does), and that they don't need to make any extra effort. They usually figure it out after a semester.

I also had a class mutiny once. I had a couple of intelligent, but spoiled and opinionated students who were vocally critical of my/this instructional style. There was also a larger than usual number of dullards in the class, who were easily led (by the dissenters). The self-nominated leaders managed to turn most of the class' attitude sour. That was the worst semester I've had yet. Everything became difficult. I had trouble maintaining my own discipline.

The real trick that I would like to learn, is how to turn more of the middle and bottom tier of students into better students.
Why the Bitcoin revolution will be bigger than the Internet
Really hate it? Gabriel responded quickly and thoroughly on his forum:
https://duck.co/topic/we-have-to-talk-about-ddgs-honesty
Yes but I'd argue that your original intuition was probably correct - we don't have this distinction in core.async because we have channels and they can be used for both one offs and stream processing. Of course the reason to eliminate the distinction would be to simplify sugar over asynchronous code a la F#, C#, Scala and now core.async. mraleph seemed to suggest this is being considered for Dart.
>The root problem is really the fact that we as a nation eat too much food,

It appears that people used to eat more food in the past. At least for Finland, modern Finns eat 40% less calories than they used to 100 years ago. The reason is that agriculture work demands a lot of calories.
> - "Cache-timing attacks on AES" http://cr.yp.to/antiforgery/cachetiming-20050414.pdf

Sixteen years later....

"....These pages will eventually be open to the public. Right now they are inaccessible pending resolution of my court case."

Re:

MCS 494, Cryptography, Spring 1997

This is an online introduction to cryptography. It is based on the web pages that I wrote for my MCS 494 course at UIC.

http://cr.yp.to/crypto.html

See:

The main repository of information on Bernstein v. United States used to be http://www.eff.org/bernstein, subsequently moved to https://www.eff.org/cases/bernstein-v-us-dept-justice. This page is now much more comprehensive; you should change your bookmark to point to http://export.cr.yp.to.

http://cr.yp.to/export.html
Data scientists tackle the analytic lifecycle
Microsoft innovated as well, but Microsoft also engaged in significant anti-competitive behavior. Memories of the details have proved to be pretty short.

However, if we were really honest we'd acknowledge that aquihires, and the process of killing products when they could have been spun off and sold for a nonzero sum involve rent-seeking considerations as part of the equation. It's a good strategy to stop developing something that erodes the net value of all of your products, but how you do that gets complicated when you try to define what is and is not anti-competitive behavior.
Pardoning him would create a pretty bad precedent for everyone else with a security clearance. How do you tell the next guy that dumps a stash of classified documents in some journalist's lap that, no, that wasn't juicy enough to get a pardon, so he's going to jail?

Despite the public interest in what Snowden revealed is, the position of the administration can only practically be that whatever you think about it, if it's classified, it's not up to you to decide that it should be public.
AfterShip Marks Its Public Launch With A New Track Button Plugin And Pricing
I just signed up for Comcast (I know...) and I'm getting assigned an IPv6 /64 block. It took a little tweaking in my Tomato router settings but now all my devices are getting native IPv6 addresses, so I'm basically running dual stack now.

It would be really interesting if my router was capable of tracking the percentage of traffic that's IPv6 vs. IPv4.
>However if you can convince farmers to always grow extra, then the difference between a good year and a bad one is closer to 10%, and you never have famines.

Storing food doesn't require subsidies. The government can buy non-subsidized food from the global market which may include local sources, and store it at their own expense.

During low-yield years, the private market (grocery stores) can buy food from the global market or from private food stores. If they cannot, the government can finally step in.
Huh? His papers are public. The only thing unpublished on that site is an old crypto class from the '90s.
I think almost every company making money spies on their users or sells their information. It's getting harder to avoid this reality while continuing to have a well-paying brand name job.
I've actually been watching the current LCS despite not playing LoL for a while (it was too addictive).

Games spectatorship pushes all the same buttons that real sports do, and Riot is very intelligently pushing it in the same direction, with the excitable commentators and highlighting the personalities of the top players.

The kids are making money by training to be the best at something that is fun to watch, and businesses are making money off marketing them. Seems analogous to sports in the important ways.
I don't think you can track your location history with G+.
This is very nice. Well done! I especially like the clean default styles.

One minor nit: the "fork me on Github" is superimposed over the scrolling pane, so it's not possible to grab the scroll tack. That is, I can only scroll via my mousewheel until the tack is past the fork overlay.
I find your numbered options fairly absurd.

The US has let Snowden linger in the Moscow airport, likely hoping that he'll do something stupid due to the stress.

By reminding everyone of the dead man switch, Snowden (via Greenwald) reminds the US that both have a shared interest in Snowden's asylum bid moving along smoothly.

Your conjecture above depends entirely on the idea that Snowden is unsafe at the Moscow airport.
PRISM for Pirates: AT&T Invents The Ultimate Anti-Piracy System
Isn't it silly to fire the officials when the blame lies with the presidents? In my opinion, it's about as useful as blaming Rumsfeld for Bush's war. Appointed officials are servants who fall on their swords when needed to protect the boss. Punishing the underlings just insulates the presidents from blame.
My point wasn't that Google should pay US tax on its foreign income. On the contrary Google's foreign income should be taxed in the countries where it's earned. Right now, though, it's by-and-large taxed nowhere: http://www.bloomberg.com/news/2010-10-21/google-2-4-rate-sho...

Now, I doubt that it's the government of Bermuda or the mighty army of Ireland or the important trade with Isle of Man that scares off the US government from closing those loopholes to American tech companies. Obviously, the US government uses its influence in such way that international tax law allows American tech companies to transfer their international income to tax havens. After all, the US government could quickly use its influence to close those gaps if it felt any real need for it. Ergo - another subsidy.
Because it's written in PHP ?
Travellers' mobile phone data seized by police at border
Well there is the simple difference that a marriage is not the Government.
I think the bigger concern is the nature of the patch Intel supplied. The kernel developers at Intel are smart people, even if they're not putting in malicious code they know there's a risk that there might be something wrong with their random number generation so the logical thing would be for them to add their random source to the pool to mitigate against that.

The fact that they chose not to do that puts red flags all over the patch. Sure it could have been purely accidental, but any patch that "accidentally" weakens the security of a system deserves thorough analysis regardless of who submitted it.

Assuming you were a malicious party who wanted to backdoor a system in such a way that you could gain access without creating a massive security vulnerability then the random number source would be ideal as we've got a pretty good idea of how you could do it. It'd be harder to do with other parts of the architecture (although presumably not impossible). It would also give you attacks against a much wider range of systems (i.e. ones with which you can't directly interact so can't do timing-based attacks on).
Please kill the orphans in the "features" section — http://i.imgur.com/mbJ5bX8.png
AMS-IX IPv6 Traffic Statistics: https://www.ams-ix.net/technical/statistics/sflow-stats/ipv6...
Alternatively, there's Whonix (https://whonix.org/wiki/Main_Page). More steps but potentially more secure. Major difference is that whonix runs in a VM (or two), is persisted (though you could use VM snapshots), and the tor proxy setup is safer (thanks to security-by-isolation and tor socks, no app can figure out the host's ip nor connect directly to the net).

Qubes OS is a new xen based OS that takes security by isolation to a new level. Still young but I'm keeping my eye on it.

The article just convinces me of the need for highly tested/developed security focused distros. There are so many ways to screw up.
It's about verifiability, you can verify if a CPU is multiplying incorrectly, there's no way of verifying if the random source is generating randomness correctly.
I just wrote to the mailing list about that patch... it slows vim down so much, it makes the feature entirely unusable :( I wish the old way was back.
تمرد البحرين 14 اغسطس | التيار
I have Glympse on my Windows Phone. It doesn't do any exporting that you know of though, right?
I can't find anything complete but you might want to check out this link from the Archive Team:

http://www.archiveteam.org/index.php?title=Twitter
Any company with over 1k employees probably is. I'm just saying if there are any systemic backdoors in Intel chips, AMD probably doesn't have them because they are 5 - 10% of the market and the gov't doesn't care to jump through hoops to get them implementing whatever backdoor they want.
And Google's:
http://www.google.com/ipv6/statistics.html

We seem to be doubling yearly, which means we'll hit 50% in about 2018.
"...So, in closing, not only do I believe that Bitcoin is the next major digital revolution, it is my understanding that this will be the biggest revolution of our lifetime."

Truth is power, Bitcoin is decentralized power. Any visible Bitcoin popular traction involving serious money must be crushed, and then possibly: "...the biggest revolution of our lifetime".
The difference is that planted weakness in RdRand enables mass surveillance by weakening cryptographic algorithms. Other possible backdoors just make subject that are specially targeted weaker.
Are you doing a hypothetical or just assumed wrongly that you can't legitimately buy from the app store?
We'll the worst thing will be 5 daily activity signatures of HN readers chaffing the carrot.
I was just about to click your call to action but the carousel switched.

http://shouldiuseacarousel.com/

Carousels are bad. Stop using them.
What does it matter where he is? The same numbered points would apply if he was holed up in the back of a Chili's in Des Moines.
Dijkstra describes when instruction at a university ought to look like. However, this requires an experienced lecturer and properly enculturated students, and where do you get them from if you haven't got them already?

If I go too fast, it is your duty to slow me down

Haven't we all met inexperienced TAs who mention the salient points but not what makes them salient, and when you call them out they hide behind their great self-confidence?

If I give homework, I give you tasks of which I believe that working on them is very instructive for you

I think everyone has had their share of ill-set or plain pointless homework at uni.

I will not use the overhead projector

A colleague had a student mutiny because he refused to put up his lecture slides for download. The students were complaining that they had to copy lecture notes from a friend if they didn't show up.
What frustrates me as a student and sometimes teacher is that the role of even the most engaged student cannot be expanded to do the opposite of mutiny: engage the less able students in the class. Why is it that the relationship between an engaged student and a teacher is an individual one? Can the student become engaged with the class of which the teacher is a part? I believe this is the key to solving the problem you pose in your last sentence.
I can buy raw milk in San Francisco by walking a half block to a small corner store, so, not even that much of a hassle.
Things about being a founder I wish I had known two years ago
So it's like comparative lit in biology?

Joking aside, the grand patent post is right, all the article does is get one consequence (not 50/50 sex split) and immediately assumes parent control.

in reptiles it's know that egg temperature determine offspring sex. But it's also believed that parents are ignorant of this fact.
How much of that 15% is driven by ISPs versus misbehaving clients? (eg. set to boxes)
Beware of Fake Android Antivirus and Mobile Ransomware
Here is an idea. One can timestamp a certificate in the Bitcoin blockchain and renew it using the same private key to prove the same ownership.

More than that. You can build a name protocol by timestamping names the same way, so you'll get uncensorable DNS and blockchain-as-certificate-authority in one protocol. Without worrying that some verisign gives keys to NSA or your domain name is taken away.

Namecoin tries to do that, but being an extra chain to mine slows it down. I'd support name system on top of Bitcoin to avoid extra mining.
Complete rewrite and update for www.whatportis.com , long overdue!
Ask HN:How did you monetized your website?
For me,I can develop,deploy and market website but when i think about monetization i sweat out,it is very hard . It will be great for me(and others too) if you please share your experience how did you monetize your website.
Thank you.
Ugh. In light of recent events you can't seriously be using the phrase "tinfoil hat" in good conscience.

As to whether you're right or not, I don't know. But please figure out a less lazy way of getting your point across. The whole "tinfoil hat" argument is a fallacy used to marginalize people and shut them up without actually providing any evidence. And if you have evidence, then you don't need it.
The vizualizations on pythontutor.com are really helpful in explaining those concepts.
This would also extend to being against a single parent too. Which isn't directly relevant to homophobia (yet that is what people jump to conclusions to)
The relevant bit of information you're looking for is this part of the standard:

"Sharing pin information:

It is possible for a client to maintain a pin store based entirely on its own TLS connections. However, such a client runs the risk of creating incorrect pins, failing to keep its pins active, or failing to receive min_generation updates. Clients are advised to make use of 3rd-party trust infrastructure so that pin data can be aggregated and shared. This will require additional protocols outside the scope of this document."

All that TACK does on its own without an external "trusted source" for pinned keys is provide a mechanism for a client to ask a site "Do you have a pinnable key?" and then compare / track that over time to determine if the TLS connection has changed vs. what was expected.

As a hypothetical, if your client starts with zero knowledge of a site, the best TACK can do is tell you, over time, "Yes, this is the same TLS key." It cannot, on its own, tell you "You should trust this key." It simply tells you "You can trust this connection has/hasn't changed" and "This site would like to you consider this key pinned".

The part where it removes the dependency on a CA is where the standard says that a client may validate the signature chain of a pinned key but that it is not required to do so.

Chrome pins certain keys from Google and a few other third parties in the client itself. The TACK proposal basically adds a mechanism for dynamic pinning with an optional (and recommended) additional mechanism for gathering trusted pinned certificate lists (without specifying how to do this part).
Out of curiosity, has Texas seen a large drop in healthcare procedure costs?
I am just curious, why can't there be an online service which does Random Number Generation, that should free up this dependency right? I understand there would be trust issues etc, but I am sure well defined contracts and code transparency coupled with open hardware can solve that?
In the Wrapping Up section, there are some very interesting points that weren't covered in the article.

- Why is "list += seq" not the same as "list = list + seq"?
- Why is "is" different than "==" and how come "2 + 2 is 4", but "1000 + 1 is not 1001"?
- What's the deal with mutable default arguments to functions?
- Why is it easy to make a list class attribute, but hard to make an int class attribute?

I'd love to read an article on these topics. Anyone have links?
(5) Greenwald is thinking two moves ahead. Now that US adversaries have a motive to kill his source, the US finally has a motive to protect his source.
Yii is cool, it's one of the most mature and opiniated PHP frameworks out there. I wish their Active Record implementation was available elsewhere as well.
Huawei Ascend P6 Overview And Features That Make It A Superb Gadget
I tried to figure out the difference between Convergence and Perspectives but I ended up getting frustrated and gave up. If anyone knows the differences please speak up.
Making the pool larger isn't sufficient for embedded systems that don't have a lot of sources of entropy in the first place. Especially since very often the most critical secrets (such as the RSA keys for the certificates used by network printers, for example) are generated when the embedded system is first installed, where even if you have a larger pool, there isn't any opportunity to fill with the extremely limited amount of entropy available to said device.
You can verify that your CPU is multiply correctly at one moment in time.
Knowing academics in a few countries, i can see how those notes are needed in the us.

Students here are really passives and have weird expectations about course work. And teachers usually don't even show up at their classes leaving all the teaching to TAs.
That "if you have evidence" cuts both ways. You can't deny that Recent shenangians have pulled the paranoid delusionals out of the woodwork...
7 Links on Sunday - Zimmerman, SummberBreak, Orbit App, In Defense of Techies
I never said that it does. I was responding to this line in the parent comment:

"I know you're referring to Snowden's inclusion of Russia on that list, but in this case, they (and maybe China) are the only ones who can stand up against America. Clearly Ecuador fell with a single phone call."
" Then-Senators John Ashcroft and John Kerry were opponents of the Clipper chip proposal, arguing in favor of the individual's right to encrypt messages and export encryption software."

Wow. What happened?
1 good reason not to: It's not open source.
I think two different objects that evaluate to the same thing pass the `==` test, but is checks for identity?

>>> a = list()
>>> b = list()
>>> a is b
False
>>> a==b
True
>>>
Exactly. LISP's selling point isn't that it's easier for the compiler: it's that it makes it easy to extend the compiler (through macros) as an ordinary developer.
Yes, but active attacks where a third-party can switch on-and-off features on your CPU are obviously vastly different from a passive attack such as a compromised random number source.

The RNG attack suggested can pass verifiability while at the exact same time introduce a backdoor and thus constantly be on.
From having tutored a LOT of students, I would say that one class at university usually wont make a difference to low and middle students as most of the skills they learn that allow them to become top students come from good parenting and several good teachers in primary/secondary school.
Wiara w siebie na prawicy
Or French, or German, or Australian, or... Pretty much everyone?
Such side channels can be avoided in a proper implementation by avoid things like table lookups and conditionals based on secret data.
There are many people who make a living off sports but don't do so professionally.

As an example, I knew many D1 tennis players who could charge upwards of 70$ an hour teaching private lessons (of which the club would take ~20$). I know one guy who is a pretty exceptional player but no where near good enough to make a living on the professional tour, and he brings in about 50,000$ every summer, then goes on tour with his band all winter.

I was merely a good high school player and even back then I was making 15/hr coaching and 25/hr for lessons. That's more than I make now sadly!
You're correct.

Further, there are some odd quirks because of the way Python caches small Integers for efficiency.

> 2 + 2 is 4
True
> 1000 + 1 is 1001
False
not a dumb company? Charging money & embedding ads into your browser when the market leaders didn't sounds pretty dumb to me.
How about Mario Galaxy 1 and Mario Galaxy 2?
I'm not convinced. I tried it, and it still sucks to this day.
Well, my question was why one browser was slower than the other - I didn't expect ClojureScript to be the cause of the problem. I was just curious about what might cause the difference.

> I suspect all the cost is from repainting large areas at the speed of mouse movement.

I'm not really a web dev, but isn't this a reflow, not a repaint? Could that be the reason for the difference in performance too? What happens if you use canvas instead of changing a div?

BTW, I forgot to mention this in the previous comment, but: this is pretty cool! I echo the "being spoilt by Go" sentiments of others, so I'm happy to see this library.
Well, it makes it easy for metaprogramming because there's very little parsing to be done, but yes I agree: it's the important case.

Things most people don't know: C#'s LINQ is extensible in a fashion quite similar to LISP macros (look up expression trees), but the job of processing all of the syntax means that nearly no-one has ever done it.
It's also not based in US, which could be seen as an advantage now.
That's not hard. Just get an ionizing smoke detector:

http://www.etoan.com/random-number-generation/