skysight-inc/HackerNews huggingface dataset:
Actually, I did an email archiver as a side project, I still have the Lucene index of my emails (including searchable attachments, of course). It's 233MB. How long do you think it would take to decrypt it with AES256 everytime I search for something? How long it takes when you search in Gmail? Can you point me to any implementation that does it like that? Or any implementation that does it at all?

I wasn't saying it's impossible, just that it's pretty hard.
I'd say both Go and Ada are much nicer than C and C++ though :P
Sometimes I wonder if the intelligence community doesn't have people who's sole job is to write comments on websites/forums to help shape public opinion. It would be something fairly trivial for them to do and help further their interests...
If viewed on a "Purchase price/employees" ratio, this is an expensive move. The PR of a hire like this is also VERY valuable.
Funny thing is, when he suggested splitting the key, I assumed that this is what he had in mind.
1) the image of DNA in that picture has a huge artificial pyrene base pair in the middle (array of four green hexagons canted about 10 degrees from the horizontal plane). This would not be good for you if you had it in your DNA.

2) If you're thinking about edward snowden, I'm really not sure what you expect to be "keeping safe" from the government. unlike digital information, your DNA cannot be encrypted and you are sloughing it off everywhere you go. If the government really wants to know something about your DNA, it is TRIVIAL for them to do so. Perhaps being put into a database makes it one step easier, but it's not entirely clear to me what they would use that data for, except maybe, to try to poison you or something. Or, possible, pre-crime stuff. If the US is doing that sort of stuff on a large enough scale that you should be worried about them going through the effort of targetting you through your DNA, then you've got more to worry about because in your case the rule of law really means nothing, and there are easier, "more conventional" means for you to be subjected to the long arm of the law than those threatened by your DNA "secrets" being compromised.
I don't understand how people don't see this....
Yup, colleague says he designed and built several different sip & puff controls for various things.

>I wonder how much work it would be to put together something like an Arduino-based device that takes morse-like input and simulates a USB or Bluetooth keyboard?

IMO it has never been easier.
Are we looking at the same page? Mine says, in BOLD print, I also would like to offer my Humble apologies when we get it wrong, today I got it wrong. I'm not sure how you could construe this to not be an apology.
Yeah startups (and small companies) come with their share of headaches, but I'll take it any day over the soul-crushing, creativity-stifling cubicle hell that is a big company.

You'll take the startup experience you have had over the big company experience you have had. Crucial difference, there.

A lot of large organisations are quite aware of the world around them, and are entirely capable of taking the better parts of startup culture and absorbing them. I work for a big company, but on a small team (there is five of us) that is largely trusted to know what we are doing. There is no dress code, and I can work from anywhere if I so require.

On the flip side, I have many friends still in Startupland who are in working misery. Just because a company takes on the label "startup" doesn't magically make it a fantastic place to work- in some ways you could argue they're likely to be worse as there is considerably less oversight.
I am well aware of all that, and I have great respect for those people who made those sacrifices, but it doesn't make sense to require that. The idea you're promoting here is "If you won't volunteer to have your life completely ruined, don't do the right thing. I'd rather you just be complicit in something that harms me if you aren't willing to be punished for doing the right thing."

Do you not see how completely bonkers it is to look at somebody who has already given you valuable information at great personal cost and demand that he suffer more for your benefit? Why on earth would you feel he owes that to anybody?
Those of us that actually have Tourette's syndrome really get pissed when people confuse it with Coprolalia [1]. Seeing as we're having a nice "lets-all-be-PC" hug-fest in this thread, perhaps we can stop being insensitive to people in this case as well?

[1] https://en.wikipedia.org/wiki/Coprolalia
Duplicate[0]

[0] https://news.ycombinator.com/item?id=5968342
The point of Ubuntu is to bring Linux to the masses. People bring up Unity like it's hurting Ubuntu... and I don't think it is. It doesn't hurt the average non-techie's perception, and techies can install KDE or whatever. Maybe one day I'll install a different window manager and marvel at what a big difference it makes... but right now, it really doesn't matter to me. I can get to Chrome, the terminal, and my text editor of choice. Nothing else really matters to me.
The reason you should be surprised is this: regular expressions are implemented in C. In some implementation they are even jit'ed.

It's a testament to how good V8 is that char-by-char loop is faster in JavaScript than optimized C code but if you were to benchmark pre-V8 JavaScript interpreters or current implementations of Python or Ruby, regex matching would smoke char-by-char loop written in the language simply by virtue of being C code.
New SEC Rules Could Kill Angel Investing, Hurt Startups, and Hinder Job Growth
Stack Wars: CloudStack vs. OpenStack
Vector and raster versions of all browser logos
The main difference between working for a big company vs. a small company is that the roles tend to be explicitly defined and specialized at a big company. You don't need/get to wear as many hats as you will at a small company or a startup. Basically, instead of being a jack-of-all-trades / "full stack" developer, you might become an expert on one layer of a huge technology stack. This can be good, or bad, or mixed. There is more formal training and you can get deeper knowledge, but it's harder to get broad knowledge. It can be hard to change roles or try new things. Generally, I think learning "full stack" is preferable when you're young, and specializing might be better as you get a little older.
One of the primary traits of a good developer is a strong desire for excellence. If a developer is willing to settle for a mediocre and boring design, then that is some (perhaps small) evidence that the book may contain mediocre and boring content.

Anecdotally: At the TechWeek Chicago job fair, there was a very high correlation between booths with good logos and graphic design and interesting people behind the booth. All of my good conversations were with people at the well designed booths.

EDIT: This is especially true since we are expected to pay for the book before we get access to it. This means that we cannot judge its quality in any holistic way, but must do our best to pre-judge its quality through various social signals.
If you really think there is demand, then by all means, fork. Nothing should be stopping you if there is demand.
There's definitely believe there's room in the market to displace contingent recruiters, create efficiency, drive down costs, and create a much more pleasant experience for both sides of the transaction.

One key with job seekers: there's a narrow window of opportunity to make matches. If you have quality talent, but you lack intent to switch jobs, nothing happens.

Likewise, if you have a huge pool of talent - and only some of it is good - you create too much work for the employers to filter/sort, and they are better off just using LinkedIn/Entelo/TalentBin to play spray & pray game - also known as guess & check - at a lower cost.
| 2. Professionalism means different things to different people, and in Linus's case it means being uncompromising in his expectations of the people he allows to work on his code.

by yelling and cursing at them... anyone with enough self-respect and high enough self esteem wouldn't work a day for a guy like that. I don't care what the cause/product.

| 4. He has the right to run his project how he sees fit, and so far that's working pretty damn well.

yes, I use to work for a company that had primadona dev leads who'd yell and demean their junior and senior devs in public about checking in bugs against apps that were also working pretty damn well. we also had a revolving door (lowest employee retention of all the other departments) for developers in the company.
Maybe he did! I have no idea. But just in case he didn't, or someone else had the interpretation I had, I just wanted to clarify that a real secret-sharing scheme has some pretty nifty properties.
Tesla share price falls by 13% after Goldman Sachs releases bearish report
http://www.google.com/finance?q=NASDAQ%3ATSLA
Show HN: PixelBrite - Close Encounters of Third Kinds meets DIY LED panel
Many of these (all?) companies have CISO or CSO executives, who's job it is to handle these specific things.
Rubbish

Every CxO at every large company looks at startups as the model to emulate - lean, focused, full of feedback.

The benefits listed, every single one, are examples of overlooked, hidden or inefficient practises by the large company - practises they try hard to eliminate.

Do you think the CEO of Megacorp thinks that weeks "training" in Amsterdam was a good use of his money? Do you think he realises there are good passionate people trying to do good on no budget. If he found out he would either give them a budget or fire their arses for working in the wrong things.

As for your time for reflection ... screw that, reflect at home.

No - big companies are trying very hard to stop being a source of "informal" VC money, rest stops for the tired and weary or uncontrolled cash spenders.

One day they might succeed.
"You will feel like a Fool, and that will last about two weeks"
Well, they launched on Android right before being acquired too.
Even if that's so, there is still the issue of "expectation of privacy". If the customer buys AT&T's service and expects a certain degree of privacy (meaning no one can just try and locate where he is with that data, or with who he is talking to, etc), then I think he deserves that kind of privacy.

Ultimately, the citizens can demand laws that state that fact explicitly. There are countries where collection of metadata by authorities in this way is illegal - and not because they didn't try to collect it. They did. It's just that "the people" won the argument, and now they aren't allowed to use the metadata (or at least not in this sweeping way).
I agree that context matters, but Linus isn't a sparring partner. Maybe a better analogy would be your martial arts teacher suddenly hitting you for wasting his time because you were lazy the last time you put back your equipment. If another student kicked you for complaining about this treatment, it would be normal to feel upset.

It's normal to have expectations about human behavior, and it's normal to get upset when they aren't met. It's actually healthy to expect our superiors to treat us with civility when we screw up. We expect that from the cops, for example. If your underlings are continually screwing up, this generally indicates a problem with your process. It's similarly healthy to expect colleagues, friends, and partners to support us when an authority has misused their power.
For me, the most interesting part is the iPad remote. Looks like Apple is getting into distributed interfaces.
he either have control over the information or he doesn't. In the case of the former, it means by transitive closure that Putin would have the control as well.

It makes me wonder though who got the best deal - Chinese or Russians - i suppose each party was thinking that they are playing off the other.
Was the site down? It's hosted on S3 and served by CloudFront, so I'm not sure what might have been wrong. Thanks for the cache link, though!
Maybe you could use a usb device that is physically attached to the chair, then a thin usb ribbon cable that plugs into the computer, but pulls out quickly. that way if the computer is taken it would auto lock the machine when the ribbon is removed.

It would take work to get setup again, which may make the NFC setups better.

you should also follow the leap motion device. https://www.leapmotion.com it could enable some facial recognition apps, or new approaches for data entry that are not just voice control.

Also, something like this may make it less desirable to steal, and be another way to mount it to your chair.
https://www.stoptheft.com/products/stoplock
If it really was a consistent win for the employers, then perhaps it is a non-issue in the larger sense -- employees just need to negotiate hours vs. compensation. Whatever.

I think the deeper insight of TFA is that there may be short term gains for the employer, but the long term results are muddy or outright negative -- management becomes addicted to poor management habits that hurt the company health in myriad ways.
Next, follow the pope to get time off your loved ones purgatory. Indulgences for everyone!
Top 5 Things You Probably Hate About IT Consulting – #4
Replacement for email.
Slightly off topic, but something I've been curious about. Go decided on garbage collection to manage memory. Why do so few languages offer something like C++'s RAII?[1]

In C++, when you define a class, you define the constructor(s) and the destructor. Then the destructor is called whenever the object goes out of scope. Easy. This is the gist of RAII. Furthermore, in C++, a default destructor is automatically generated for you, which will ensure all the objects members are destructed with your object,[2] so you can avoid even worrying about the destructor.

Yeah, it's not as simple as GC, but it seems like a great compromise between manual memory management and garbage collection.

[1]: http://en.wikipedia.org/wiki/Resource_Acquisition_Is_Initial...

[2]: Provided no members are dynamically allocated. If you allocate an array in your constructor, for example, you need to free it in the destructor. You need to define a destructor to free dynamically-allocated memory, or to do other cleanup.
It's smart of them to include a variety of groups across the political spectrum, both left and right. It's interesting how this issue is positioned and who supports the fight.
It's not about extra verification, it's about reducing the attack surface.

If your browser trusts 100 different CAs, I can MITM you after compromising any one of those 100. If you only actually use 10 of them, then you can remove the other 90 from your trusted list and make my (the attackers') job 10x harder. More-or-less regardless of which individual CAs take security a bit more seriously than the others, since they're all held to a reasonable minimum standard.
Except that in what way is PRISM preventing you from being able to assemble ?

There is NO evidence that the NSA et al are using this information to target anything other than the most serious of terrorists. Until we evidence of the contrary I fail to see how these lawsuits will be able to stick.
> - Technical people make for bad managers

In my experience, it's "some technical people make good managers". Some of them are bad managers; most of them are somewhere in between.

Kind of like regular people. :)
I don't know of anything open source. Initialising the AES crypto provider takes a lot longer than decrypting ~250 Mb data, so keep it initialized for the duration of the session.

That said, I did it in a native client app, where state is easier to maintain.
>- Process is not the enemy, inefficient process is the enemy

corollary : efficient process doesn't exist
> The generic, functional map function cannot be written, and never will.

https://github.com/droundy/gotgo/blob/master/example/slice.g...
I know right? So cool.
> One day they might succeed.

Would you mind defining success for us?
"Drunkard," "homoerotic," and other words your iPhone won’t help you type
Read: deprecated. Stop acting like it's removed in 5.5.
I am honestly concerned that he'd be put away on some terrorism type charge and tortured.
i've recently spotted in the wild the latest mutation of the beast - "lean 6 sigma".

10 years ago we had "6 sigma" pandemic in the Valley, last 5 years - "lean" and now ... behold their monsterous progeny.
I think the comment you're replying to rests on the assumption that it's not possible to optimize your interface for all levels of competency, i.e., changes that make an interface more beginner-friendly will necessarily limit the scope of possibilities available to power users or just make those possibilities more difficult to achieve. Not everyone agrees, of course, but it's not an unreasonable position. That said, although the Drummer feature looks a little bit silly, I agree with you in that I'm not seeing anything in this overview that indicates that the core functionality is being re-oriented in favor of beginner-friendliness.

(On a side note, the dig against free jazz seems unnecessary. It rarely makes sense to dismiss an entire genre of music as meaningless. Occam's Razor is a heuristic, not a law, but consider which of these hypotheses seems like the more reasonable choice to explain the datum "I don't hear anything meaningful in free jazz":

1. I am not concerned with or attuned to the musical priorities and structures that inform free jazz.

2. Everyone who derives meaning from free jazz, a group that includes some very skilled musicians, is wrong about it being meaningful.

The choice seems evident.)
One way for them to stick is if "collect it all" surveillance is judged to violate the Fourth Amendment regardless of whom the agencies are currently targeting.
> Unsurprisingly, companies that have millions of lines of code have to take extra precautions.

Which is why they drive to work in a Model T and rely on an IBM 7090 for their backroom stuff, correct?

Being cautious is the opposite of using technology which is inimical to good practices.
A good point in a sea of trolling. Thanks.
I think that the main point or cleverness is to avoid an explicit eval ( base64decode ( blahblah ...) ) in the PHP source code, which might be detected. A preg_replace call is also easy to spot, but may occur naturally in the source.

Constructs using a sequence of eval with base64decode and often gzip compression are very common for obfuscating malicious PHP code. I would expect that people are much more likely to look for these in the source code to find out if a website has been compromized rather than looking at EXIF data. So I think, yes, this is something different.

In the article they call this a steganographic malware. But actually the information is not embedded in the picture content, but in the meta or EXIF data. It would be an application of steganography, if the malicious code would be extracted from information that is part of the actual picture and it is not obvious that this information is present in the first place. For example, there could be the drawing of a house in the picture with a cow and a horse and the grass blades in front of it represent 1s and 0s. Then some clever program executes the grass blades code.

It seems that the authors were among the first to detect this kind of attack using the EXIF data in the wild. And of course the want to advertise that their product detects this kind of compromize.
I have done this by hand by manually "untrusting" all CAs and then enabling them one by one as I go along. I never found a good way to move the lists of CAs across browsers. However for ssl-certificates in Debian propagating the list across different machines was a breeze with etckeeper. Being able to apt-get install cawatch would be a lot easier.

Do you really want to rely on China's CNIC to make the decision if you should trust a certificate?
Author says, haha this won't work, but tell me about it. Then he says, Oh it worked, but I don't think it will work anywhere else, I think leadership is always necessary "to organize and motivate the team" but offers no counter-examples of why this is generally the case, or where he has seen this approach to programming not work?

Oh yeah, and he threw in some Billy Bragg jokes and a Syndicalist flag.
As far as I can tell, all the mentioned scenarios address pretty niche markets.

Personally I don't see mass adoption of Google Glass in any kind of conceivable future, I see head-up displays in very specific settings as the winning solution, instead of an always on, general-purpose solution.
> also they are engaged in their own spying which is just as pervasive as the NSA

Also, they don't want their own Snowden copy cat to rise from their own intelligence programs. From that light, I'm a bit surprised Russia is housing him. If anyone wants to keep down descent more than USA, it's Russia...
I am surprised that Microsoft took as much flak for it as it did when pretty much every other online property including Google and Facebook has complied with these demand (as they are legally supposed to do).

Besides it is also interesting to note that providers such as Google and Facebook probably have a lot more interesting data that the government is likely interested in. It is more likely that data from the likes of Google and Facebook that can be used to track an individual or can be detrimental to them as compared to the data that Microsoft has.
Designing Facebook Home
> I'll take my catered breakfasts, lunches, impromptu beer runs, work-from-anywhere policy and unlimited vacation days, thank you.

I have all of those perks at my 200 person company now, but with a fraction of the start-up risk. (Which may be a plus or a negative, depending on who you are.)

What it comes down to is every company is different, regardless of size; there are pros and cons to work environments of all sizes.
This is so true. I remember ancient times Apple withheld Webkit development process, but people kept bitching about this for year or so, despire numerous smarty pants who argued Apple can do anything it wants and should raise no criticisms.

This became very loud, Apple was forced to release webkit development process to public, and then Chrome happened, phones got browsers that didn't suck, every desktop toolkit got HTML renderer that rocks, this was tremendous example of open source success.

So thank you, smarty pants, a bit more effort on your part and we'll have no Chrome, no phone browsers, no nothing.
Preferring RAII over garbage collection is the decision that Rust made.

Probably the reason that more languages don't use RAII for memory management is safety. C++, even with RAII, is not safe—you can violate memory safety with certain uses of references and iterators. Rust has to go to great lengths (lifetimes and the borrow check—things that have only been in the research landscape) to make this safe.
Ah, yes, that's what I get for not actually reading the article.
Fair enough. Of course, I am only drawing on my own anecdotal experience. However, the big companies you mentioned above, Facebook, Google, and Microsoft - I would propose that they are truly exceptional in "big company" culture. Like one-in-a-million exceptional.

Perhaps my experience in each world was exceptional, but I have a feeling they were rather typical.