skysight-inc/HackerNews huggingface dataset:
Just as a thought experiment: what sort of attack could Intel make if you limited your instruction set to the bare instructions (i.e. no special crypto assembly code)? Wouldn't it be unfeasible to attempt to detect crypto operations using normal assembly functions without even knowing whether crypto is taking place or not?
Why not? Because I'm able to find all of the music I'm looking for on Soundcloud. Plus it's a great platform to discover new talent.
The back door would have to do some complicated pattern matching against the bitstream to identify potential "hook" or extraction points. Of course, built in crypto modules could not be trusted. I wouldn't trust much more than the LUTs! I could even see how a multiply block may be backdoored.
Sounds very similar to Convergence. In fact, it turns out that "Convergence is based on previous work from the Perspectives Project at Carnegie Mellon University".[0] I don't think this (or Convergence) will see widespread adoption though. For now, public key pinning (e.g. Tack.io) seems like the best way forward.

For what it's worth, many CA's are trying to raise the bar by way of the CA/Browser Forum.[1] The public mailing list is quite interesting at times.

[0] https://en.wikipedia.org/wiki/Convergence_(SSL)#Background

[1] https://www.cabforum.org
This doesn't preclude RdRand from being _worse_ however.

If your software— by design— eliminates side channels and isolates out timing. Then your hypothetical evil AES() would have a hard time screwing you over— it still might, somehow, but the window may be very narrow.

The only way to narrow the exposure from a bad rdrand is to never use it directly (e.g. without whitening via a CSPRNG with other truly random inputs).
Does anyone have any idea why the mouse-over examples are a more CPU intensive task for Firefox? On my laptop, moving the mouse a lot results in 15% CPU usage, and if I jitter it fast enough it maxes out at 22%. That won't lock up the browser if I'm not doing anything else but still feels like it will drain the laptop battery notably faster with intensive use, if you catch my drift.

With Chrome I can't get it above 4%. IE 10 is somewhere in the middle with 10% (and also has a bug when resizing the window, giving Y values like 2236.65990234375, with the fraction part being constant).

EDIT: Both Opera 12 and Opera 15: 6 to 8%

Also, the second/third examples seem a bit laggy with all browsers: if I shake the mouse quickly the numbers keep updating for a while after I stop. I guess that this is because instead of showing the most recent value it shows all the location values, but the screen updates are slower than the mouse updates?

Either way, when the mouse stops moving while the numbers still update, Firefox only takes 6% of the CPU. Not sure if that clarifies anything, but it might help identify the cause.
Hmm I will read up on this and correct it if true. Thanks for pointing that out!
Yes true. But for now, I would rather shut the fuck up that make women on the team uncomfortable. I'll reserve my profanities to gym's locker room.
Gamebook.js, an IF-style gamebook engine
How to Upgrade Your Linux PC Hardware
"As strong as styrofoam" doesn't really mean anything. Are you talking about tensile strength? Or about resistance to shear forces? Compressibility? I haven't found much data on the mechanical properties of aerographite, but the Young modulus given on Wikipedia seems way too low to withstand atmospheric pressure.
Yes, in french unfortunately: http://lexbrage.tumblr.com/post/13212628647/amazon-bragelonn...

"Nous avons rencontré [Amazon] recemment pour comprendre cet ajout de DRM sur nos titres et en quoi consitait cette DRM un peu spéciale. [...Elle] embarque également une couche software qui active les fonctionnalités de l’ecosystème Amazon. La liste est variée mais passe du “Text to Speech” au “Facebook Connect” et toutes les prochaines évolutions d’Amazon. Et croyez moi, elle vont être nombreuses dans les mois à venir."

Quick translation: we (the publisher bragelonne) have met with amazon to understand why they added DRM to our books without our consent and what purpose this DRM served. [...] It contains a software part that enables various amazon features such as Text-to-speech or facebook connect as well as the many future evolutions.
Ask HN: Feed readers preserving old and already read posts
As many HN users, I was using Google Reader. I won't say it was an
extensive use, as my feed reading activities declined in recent years,
but G's decision about taking down GR [0] was quite unexpected. Back
then I used Google Takeout [1] to retrieve my GR subscription data ("eg.
lists of people that you follow, items you have starred, notes you have
created, etc."). Next step was doing a quick research over available
alternatives.

I found The Old Reader [2] to be a promising one solution. (Apparently
there were lots of importers, so I was queued as ~1000th one, which
meant I have to wait a few days before all my feeds would be accessible
within TOR.) I didn't see any old posts in my feeds subscribed
previously in GR for many years, so I was unhappy about it (you know,
some sites ceased to exist already), but I assumed nothing can be done
here, because G obviously wouldn't allow downloading easily all the old
posts from feeds. And to be honest, most of them weren't worth of
archiving, but most doesn't mean all. Some time later I noticed that TOR
improved keyboard-driven UX, so I was finally able to use handy
shortcuts like Shift-A (mark all items as read in current feed/group)
[3]. Lately they finally added API [4]. I thought I'll stay with TOR for
now, but today after logging in I saw:

You have not used The Old Reader for a while,
so we kept only fresh posts for you

What? Is this some kind of twisted courtesy? Putting sarcasm aside,
it's my fault for not investigating TOR enough. I understand well that
storage isn't free and GR pampered us a bit with its (almost) never
ending history in feeds, but it's such important feature that I took it
for granted. TOR KB has a page about it [5].

continued in comments...

(1) https://news.ycombinator.com/item?id=6041145
(2) https://news.ycombinator.com/item?id=6041149

Sorry for such a long submission.

tl;dr question:

Is there any free on-line feed reader, similar to GR, committed to preserve old and already read posts, no matter how actively I read them? It would be great if it supports keyboard-driven navigation (with GR-like shortcuts, hopefully) and has mobile apps (Android at least). Bonus point would be possibility of exporting historical feed data.
TANIGER - Free & Open Source Real-Time Facebook Chat Encryption.
Nobel peace prize for Snowden
No you don't you can go to studios or rehearsal rooms where you can rent all the stuff you want and pretty cheap. Even if you spend 5-10k you will have spend A LOT LESS than any label. You get the money back directly, if you are break even you get to keep all the money. Its a much better bet than hoping to win the record label lottery. Its no guarantee to be successful but along the way you will get a good grasp what your chances are and if its worth recording a smurf death metal techno album. :)
(1)

TOR KB has a page about it [5], which I'll quote here just
in case:

How many posts per feed do you store?

You may only see several dozen posts when you subscribe to
a new feed because RSS feeds only contain the most recent posts.
However, new posts will be fetched as they get published, and
The Old Reader will store up to several hundred posts per feed
for any active user. If you don't access The Old Reader for
a while, your account will be marked as inactive, and we will
only keep the last 10 entries of each feed for you.

Shared, commented, or liked posts are currently stored forever.

"Up to several hundred posts" is quite vague term, and definitely not
enough for long-running sites that publish new stuff often. Second
problem is being "active user". There are weeks when I am so busy that
I check only LWN.net in tram on my way to or from the work, thus I may
be "inactve" (from feed reading viewpoint) even for a month. This makes
TOR unsuitable for me after all and this is unfortunate, because I
started to like TOR.

I noticed that in comparisons of feed readers (almost?) no one is
looking at how long the old posts are available, that's why I'm asking
the HN community:

Is there any free on-line feed reader, similar to GR, committed to
preserve old and already read posts, no matter how actively I read them?
It would be great if it supports keyboard-driven navigation (with
GR-like shortcuts, hopefully) and has mobile apps (Android at least).
Bonus point would be possibility of exporting historical feed data.
This is why I put the crucial space between "real" and "time". I cannot hold up to intensive buzzword scrutiny. :)

It's every 5 minutes because I don't want them to ban me. And in practice, this is an acceptable delay.
have you posted details of your project anywhere? its not something I'd be likely to do myself but given the popularity of the devices and likely ease of construction/coding it could be a very good intermediate project for a lot of budding hardware hackers
(2)

PS:

A few days ago I learned about unofficial GR API [6] (I'm pretty sure it
had to be already covered on HN, but I'm not always a daily HN reader,
so I could miss it) via LWN.net article [7] (sorry, it's not available
for free yet and there are too many HN users out there, so using the so
called "Free Link" wouldn't be acceptable IMHO). But it's no longer
available [8]. There is also "a collection of tools to help with the
Google Reader shutdown" called Reader Is Dead [9], with extremely useful
reader_archive [10], but well, it's not longer useful. If I only knew
about it before the shutdown...

Thankfully Archive Team [11] retrieved historical feed data from GR
using its API [12], so not everything is lost. Over 8TB of data
converted to WARC files (specification of ISO 28500:2009 [13], free
final draft [14], "Everything about the WARC format and the tools that
support it." [15]), in tarred+gzipped form can be downloaded [16].

My 0th rule of the internet: You have to constantly backup it!

[0] http://googleblog.blogspot.com.au/2013/03/a-second-spring-of-cleaning.html
[1] http://www.google.com/takeout/
[2] http://theoldreader.com/
[3] http://blog.theoldreader.com/post/49375135562/may-1-release-is-here
[4] http://blog.theoldreader.com/post/53860614326/weekly-update-june-24-30
[5] http://theoldreader.uservoice.com/knowledgebase/articles/146276

[6] http://undoc.in/
[7] http://lwn.net/Articles/558138/
[8] http://googlereader.blogspot.com/2013/07/a-final-farewell.html
[9] http://readerisdead.com/
[10] https://github.com/mihaip/readerisdead/wiki/reader_archive
[11] http://www.archiveteam.org/index.php?title=Who_We_Are
[12] http://www.archiveteam.org/index.php?title=Google_Reader
[13] http://www.iso.org/iso/catalogue_detail.htm?csnumber=44717
[14] http://bibnum.bnf.fr/WARC/WARC_ISO_28500_version1_latestdraft.pdf
[15] http://www.archiveteam.org/index.php?title=The_WARC_Ecosystem
[16] http://archive.org/details/archiveteam_greader
Styrofoam doesn't "withstand" air pressure, it has pockets of air inside.
Reminds me of https://code.google.com/p/appengine-pipeline/ for Python.
The art of naked sunbathing in German public parks
What about startpage?
I know they're still dependent on google, but in terms of privacy they seem to be at the same level as DDG.
At least they're smaller than DDG, so it's less likely that the NSA will bother with them
lol, wow. The arrogance of this guy is amazing!!

"I will allow you 2 hours of my time. If I like you, you get a good grade. My decision is final."

This was the exact reason I avoided English classes in the first place - I didn't want some arbitrary person assigning me grades arbitrarily. AND, I don't want to play "teacher's pet!"
Only the UP. I swim regularly. Note that you can't wear it while swimming, and while you can log exercise manually, it's less than perfect.

I'd recommend getting the UP. It's great. I wrote a bit about it at http://hboon.com/jawbone-up
Speaking of ARM, the 64 bit ARMv8 architecture is supposed to come with AES, SHA1 and SHA-256 hardware encryption.
If, like Snowden, your passport was revoked/cancelled, how could you travel?
I'm on the Dart team and spent time talking to the corelib team when Streams were first added. I had a proposal at the time to unify streams and futures. My contention was that a future was just a stream that only emits one value and then closes.

Florian convinced me that that was trying to hard to jam them together. Instead, there's methods to convert from one to the other when you want:

new Stream.fromFuture()
Future<List> Stream.toList()
Future.asStream()

Asynchrony is still quite hard to work with compared to a language with coroutines and blocking, but the Future/Stream distinction doesn't seem to cause many problems in practice.
Practically every hardware side channel paper considers exactly this scenario. Start with Osvik and Tromer.
>> "Some won’t even download it illegally, instead they will just listen to music through streaming services like Spotify which are free to a certain extend and which yield so little profit to the labels or the artists that it is almost like downloading it for free."

This is totally inaccurate. The music industry grew for the first time since 1999 due to digital streaming services:

http://ifpi.no/9-forsiden/43-ifpi-publishes-digital-music-re...
>The NSA can pay $50 to get a VM on the same AWS box as runs your VMs, and then use local side channels to siphon out your secrets.

Where can I go to read about these side channel attacks? I tried to find the articles about them but they were covered in a bunch of w3schools style spam.
Snowden made it very clear weeks ago that there was a dead man switch for the release of documents. Greenwald was just restating it with some sensationalism. Just trying to get more people to read the article.
Hi!
since there is no email jaddress on your profile, I'll ask here. please share some psytrance/Goa and the like artists if you don't mind: )
Don't do any of that nonsense, it's a complete waste of time. Go out and play gigs. Even if you do become a megastar, most of your revenue will come from live performance. We're in an age where most people won't pay $6.99 for an album, but they'll happily pay $69 to see a band from row Q of an arena. Why spend any time or effort on the least profitable part of the enterprise, when you can get straight to the meat?

Recording an album in your bedroom is almost always a cop-out. It's a way of being able to tell yourself that you tried to have a career in music, without taking any real emotional risk or doing any real work. It's a way of "getting your music out there" that doesn't require the courage to stand up in front of a bar full of strangers and play it. Unfortunately, it doesn't work. Musicians with internet-based careers are still absolutely the exception rather than the rule, they're still a rare aberration.

If you want to be in a rock and roll band, then be in a rock and roll band. Don't buy yourself a bunch of recording equipment, buy a rusted-up old Econoline. Don't overdub your guitar tracks onto a drum machine, put up a flyer in your local music shop and find a drummer. Take whatever crappy gigs you can get and hustle like a mofo. At the very least, you'll end up with far better anecdotes.
Can anyone think of a time when it's actually useful? I'm having a hard time thinking of any.
I used to use Relative Line Numbers, until I switched over to EasyMotion. (Original fork: https://github.com/Lokaltog/vim-easymotion. I use a different fork, but don't have the URL for it ATM).

If you haven't tried it, EasyMotion is far, far better and contains much more functionality (covers far more use cases).
I am currently in Code Fellows. I just started so I can't give you a graduate perspective. The advantage I would say Code Fellows has over other programs is that we work in the Techstars building alongside new startups.

I am already a developer but I am not quite there yet in terms of skill level. I'm good enough to churn out WordPress sites and do basic PHP work which is what I have been doing through out my career. But I want a more serious development role and that's the purpose of a lot of these schools they take someone that is probably 60% of the way and gives them the extra 30% to make them more employable.
I think 37signals would say they've grown like they've wanted to while retaining complete control and building a company they want to keep working at. I don't think they've been after the most rapid growth possible, but sustainable growth that lets them call the shots.

That said, you totally have a point. Maybe they're not the best for consulting with for rapid, head over heals growth.

There is a case to be made here that social print studio should take investment at this point. They have product fit, and now they want a sold or dominant market position. It's a good moment for them and they could probably get pretty favorable terms. Further, they might not be able to achieve a sustainable market position without investment. That's probably the real question.
Do you know anybody running indie labels? I do. You are only talking about major labels and "mainstream" music in your article. But, it's hurting EVERYBODY.

Some of the reactions here are silly. If you love an artist buy their record, tell your friends, go see them in concert. Blaming labels (big or small) as a justification for illegal downloading is [ insert descriptor of your choice ].

Supporting your favorite artists is cool and the right thing to do. Let them deal with their labels whether they wish to have one or not.
If we are not being naive, you can't trust China-based or Russia-based companies with your data...
>> "Its because all the money, be it advertisement or subscriptions is thrown in a huge bucket and divided by play count."

Source?

Also, that's still not a reason not to be on it. Lots of people use Spotify and if your music isn't available on it they either won't listen at all (you lose) or will download it illegally (you lose).
I do think there is a "negative" connotation to free music. Free does not mean bad, or less good, than expensive music, when it comes to art.

As a musician, it is significantly harder to produce an entire album by oneself. But, thats the great part of releasing something into the world, its all mine. No one else's imagination touched what I wanted to create.

Set Up::: I use a synthesizer, a midi keyboard, and an APC 40. A decent pair of studio monitors, M-Audio BX5 D2s. I sometimes borrow a microphone for a friend that works in a music studio. I record everything on Ableton 8 or 9.

I always share my music for free, and give the listener the option to pay if they want. I am about to release a three track EP, you can listen the first track here.
http://fantasmafigueroa.bandcamp.com/album/afuera

EDIT:
It might not be everyone's cup of tea. I grew up listening to Chicago house/acid house. Influences: Brian Eno, Max Richter, Boards of Canada, Efdemin, Stars of the Lid... lots of ambient stuff.
Isn't Greenwald now relying on all of the governments of Iran, North Korea, China, Syria, Russia, and who knows who else to also understand that he's just being a sensationalist?
Maybe I miss your point, but it seems those are arguments for having more sons? The finding is that the ratio is overall 50-50, so there are not more sons overall. But that the ratio changes over time and individuals, sometimes with more sons and sometimes with less, depending on which would be more effective for the particular time and individual (if the individual has genes that would benefit a female more than a male, then more female offspring, etc.).
The Advanced Encryption Standard (AES)

"...is a specification for the encryption of electronic data established by the U.S. National Institute of Standards and Technology (NIST) in 2001.[3] It is based on the Rijndael cipher[4] developed by two Belgian cryptographers, Joan Daemen and Vincent Rijmen, who submitted a proposal which was evaluated by the NIST during the AES selection process.[5]

AES has been adopted by the U.S. government and is now used worldwide. It supersedes the Data Encryption Standard (DES),[6] which was published in 1977. The algorithm described by AES is a symmetric-key algorithm, meaning the same key is used for both encrypting and decrypting the data.

AES is available in many different encryption packages, and is the first publicly accessible and open cipher approved by the National Security Agency (NSA) for top secret information when used in an NSA approved cryptographic module (see Security of AES, below)..."

http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

RdRand (also RDRAND)

"...is an instruction for returning random numbers from an on-chip random number generator.[1] RdRand is available in Ivy Bridge processors[note 1] and is part of the Intel 64 and IA-32 instruction set architectures.

Intel Secure Key, formerly known as Bull Mountain, is Intel's code name for both the RdRand instruction and the underlying random number generator (RNG) hardware implementation.[1] Intel calls their RNG a "digital random number generator". The generator uses an on-processor entropy source, which passes the randomly generated bits to an AES (in CBC-MAC mode) conditioner to distill the entropy into non-deterministic random numbers. A deterministic random-bit generator is seeded by the output from the conditioner, providing cryptographically secure random numbers to applications requesting them via the RdRand instruction..."

http://en.wikipedia.org/wiki/RDRAND
Very easy to say, "Work hard, don't take the easier path, it'll be more rewarding ultimately."

Much harder to actually do. The number of people picking up instruments and really learning how to play vs. cranking through a fruity loops tutorial so they can do minor alteration remixes isn't surprising.

Yes, this is good advice. Will anyone really follow it / see the wisdom in it? Debatable.
What the Microsoft Memo Actually Said
3. It would be almost trivial for the U.S. government to snoop on DuckDuckGo's traffic at the switch or cloud provider level even without informing DuckDuckGo of this. I believe they host at EC2 East, which is in DC and a major U.S. government linked hosting provider (see Amazon FedRamp).

The cloud is not private, period.
> In other news, Guinness also does not pay taxes to the US for beer sold in Ireland. It only pays taxes on profits made from beer sales in the US. Those green fiends!

Diageo, which owns Guinness, is a British corporation. Thus, it is hardly surprising that the US government does not tax it on sales in Ireland.

Google, on the other hand, is an American corporation.
Here are a few for a start:

- "Cross-VM Side Channels and Their Use to Extract Private Keys" http://www.cs.unc.edu/~reiter/papers/2012/CCS.pdf

- "Cache-timing attacks on AES" http://cr.yp.to/antiforgery/cachetiming-20050414.pdf

- "Hey, You, Get Off of My Cloud: Exploring Information Leakage in Third-Party Compute Clouds" http://www.cs.cornell.edu/courses/cs6460/2011sp/papers/cloud...

- "System-Level Protection Against Cache-Based Side Channel Attacks in the Cloud" http://pdos.csail.mit.edu/~taesoo/pubs/2012/stealthmem/steal...

In my mind, cache-timing attacks are fairly easily solved, but may be platform dependent. However, VM escapes in general are still a concern.
The major medical problems that you "don't have a choice" but to get are not 100% of all medical problems that can exist. There are only so many organs available for transplant every year (thousands yes, but no millions) but seeing the doctor for the sniffles is bounded only by the number of people in the US, 300 million. There's a difference between something that will kill you in short order (like a horrible car accident where you're bleeding out) where you take whatever medical care you can get at any price, and the more mundane, routine stuff like ACL surgery where you can afford the time to shop around or perhaps even forego it entirely.
Read Dijkstra, read Dijkstra. He is the master of us all.