skysight-inc/HackerNews huggingface dataset:
"This is a Bitcoin software implementation bug,"

where are you getting your info from?

as far as i can tell previous code was buggy, and android 4.2 "fixed" things by making it impossible (well...) to screw up the PRNG (setSeed in OpenSSL augments state, previously with BouncyCastle it replaced state, afaict).

but that doesn't explain why current software has problems (not the kind of problems that should make it insecure - they may have problems with being unable to recreate keys if they were using seeded PRNG output as keys(!), but 4.2's changes should just screw them completely, rather than make things insecure), or why the article link blames the platform libraries.

so why are you saying this is a problem now in bitcoin library code? is there another link somewhere i've missed? (i agree it's suspicious that everything is bitcoin-related, but i can't see any certain evidence...)
How I scraped my way to a Techcrunch Disrupt SF hackathon ticket
No.

It sounds like you are very angry and there is nothing you can do about it. So, you can either play the long game of finding a different outlet for your creative energy, or find a different job. If the employer is large enough, then transfer to a different team. If not, find a new employer. Don't waste your passion on being angry at the people around you.

Also, remember that you may not be wrong, but you may not be right either. So, don't do anything crazy. You ain't famous enough to burn bridges.
How are these cards powered?
I really like the service but PLEASE please do not strip all metadata out of photos uploaded by your users.

Stripping out the EXIF/IPTC copyright information creates an orphan work (no apparent creator), makes it harder to track down copyright infringements, and may be DMCA violation (http://www.flickr.com/groups/nomorefreephotos/discuss/721576...). Ideally, you should strip out all the non-copyright EXIF fields (aperture, camera make etc) but leave the copyright info.

EXIF stripping is one of the subtle crimes us web developers have committed against content creators and it's mostly out of laziness: a few hundred bytes of copyright info will not kill us, our users or our servers.
My somewhat frustrated response to this comment thread. http://duncancarroll.tumblr.com/post/57994245946/no-really-c...
i hope this project succeed
I think the right word is morbid.
No, really—consciousness is worth thinking about
that's certainly one of the more productive $50k projects I've seen crowdfunded.

http://www.indiegogo.com/projects/drug-rape-prevention-drink...
The demo chapter is fantastic, I'd definitely be on board to buy/fund this if it came up.

Is there a way I can subscribe for updates?
> Agreed. Hard to believe someone would do this.

If I had a cancer with kids, then I would want my business partner to pimp the start-up as much as possible to raise the value of my shares for my family.
https://news.ycombinator.com/item?id=6122049
Bloomberg acting like a mini little NSA. Finding rich people and violating their privacy.
Bitmessage is a bad idea, read the white paper. Every message is retained forever by every BM client.
Very valid point. Really hate spelling out things for the compiler these days. Unfortunately for some reason language designers think it's a good idea to go crazy about syntax when developing something functional, because it makes things "terse".
Now they're known to be there. But there were secret prisons in other countries where captives were held that were only revealed later: https://en.wikipedia.org/wiki/Secret_prison#Official_recogni...
I regularly have a discussion with friends on "consciousness". And a question that regularly comes under discussion is following:

Suppose we are living in a time when medicine has advanced tons. In this time, a friend of yours gets into an accident, and gradually starts to lose different body functions/parts. Each time a body part stops working, it is replaced with an artificial one. There comes a time when everything physical about your friend is replaced, even his brain. Though during brain change (say brain is replaced with a chip), all his memories are shifted from his old brain to the replacement. When this physically totally new friend of yours wakes up after the memory transfer, he claims he is your friend, and can answer any question you throw at him, that would have been answered by your original friend.

Is this physically new friend actually your old friend? Or is he faking it having access to all the memories of your friend? Did a "consciousness transfer" occur as well? Or not?

Any take?
Re: the example of centering a rectangle, and related problems, there is a CSS solution for this already, it's just not adopted widely enough yet: http://www.w3.org/TR/css3-flexbox/

You don't have to throw out the whole shebang to fix that class of issues :)
There is a difference between "Here's an example of a cryptosystem that got attacked" and "Here's an example of an attack against RSA."
"Fluent" has a rather vague definition, but the word root means "flowing" (like a river) - if you can speak a natural language in proper idioms without pauses in the wrong places to look for or translate words, you're fluent. "Conversant" is a rather lower standard meaning that you can have a conversation in the language and both understand and be understood.
> I love WebGL, but unfortunately it doesn't work everywhere.

What is meant by that? WebGL does seem to work here as in the appearance and frame rate are the same compared to SVG but with less CPU usage on my machine/browser (Chrome).
Indeed. There was also a study done in Canada, I believe in Manitoba, many years ago called MinCome. The data was locked away until recently though, so only recently has research been started into seeing the positives and negatives of it. I'm not sure if simply giving people $X is the best approach, though there will be an approach that will work.
I've been trying to use it after reading about it on reddit, but so far I've been unsucessful at getting mpv to do "real" fullscreen. I'm using XMonad with a xmobar at the top of the screen, and with all --fstype modes I've tried, it has always been laid over the actual video. Has anybody been able to get it to do fullscreen with xmonad?
None of those behaviors are inherently indicative of psychopathic behavior.

But I can see how someone spending more time trying to look good then actually doing the work they were hired for might bug you.

If his actions effect you directly, then take appropriate action, like speaking to him and expressing your concerns, and then, if he fails to respond, speaking to your manager. Make sure you talk to him first, because any good manager will ask if you tried to work things out with him directly.

If it doesn't effect you directly, don't waste time on worrying about it. Instead, worry about how you are going to demonstrate your hard work to the company.
> Still, such a practice can't be universal.

What do you mean by "not universal"?

(http://www.reuters.com/article/2008/03/25/us-security-finger...)

> The U.S. government has been collecting digital fingerprints and photographs of nearly all non-citizens aged 14 and up entering the country since 2004, officials said, in a Homeland Security program called US-VISIT, at a cost of $1.7 billion.
On a side note to my side, how many are psyched about Breaking Bad tonight?!

(seriously, downvoted for asking about stats on cryptopals? it is relevant -- #6 has two DSA questions!)
The welfare state doesn't give a livable wage, it gives a very bare minimum - that doesn't really allow you to function or grow as an individual. Many people who need assistance not only need assistance for food, shelter, but also for counselling and support. Some may never improve where they can be productive to society, though the goal would be to make everyone at least not counter-productive.
I don't have a good answer for you, but let me shoot a question back at you: "How do you determine whether the code you're looking at is good or bad?" Surely, there's an algorithm you run in your head that looks at specific features of the code and analyses them. All I'm saying is that there may be a way to automate that algorithm and use it to drive incentives. Even if the algorithm is as simple as "make sure X and Y unit tests pass."
this was posted to /r/netsec too, the conversation here has more details about the embedded system: http://www.reddit.com/r/netsec/comments/1k4zhz/i_rooted_my_t...
I wish they had picked a name that wouldn't be odd when mentioned at work.
A content site wants them to explore and traverse the rest of the site.

An article that gets read is a success for the article, not for the publisher.
I know people have been using it with XMonad. There is a fresh issue from today (https://github.com/mpv-player/mpv/issues/179), is this helpful in any way?
Agreed - I think that good programmers will become polyglots naturally (from picking up different tools for different jobs), which in turn will reinforce their programming skills.
I've been using http://mplayerx.org/ exclusively. It seems to handle files better than vlc for me, and has a nicer mac like player.
> In the U.S., if we have an education system where the inner-city kid and the suburban kid have equal opportunity, that would be a huge contribution.

I feel like this isn't the best metric and could have unintended consequences.
Attaching specific numbers to an expression like L(1/4) is meaningless, because L(1/4) is an asymptotic expression. Asymptotic expressions contain implied constants, whose values are not explicit. There's also no particular reason to expect the L(1/4) attack to apply to RSA. For one, I explained in another reply that we currently do not know any direct relationship between RSA and discrete log. In addition, Joux's latest result is not even L(1/4), it's L(epsilon) for any fixed epsilon > 0 (and in this context, the implied constant cannot be ignored, otherwise you get nonsense values).

Google does use ECC, on platforms that support it. See for example http://googleonlinesecurity.blogspot.com/2011/11/protecting-... which has a screenshot.
It seems odd that there's a donation page for a guy who had a $60M exit previously, assuming I understood the article.
I think the author means that it's not implemented in all the browsers that have a significant share of the browser market.
Abuse [1] uses Lisp for game logic. You'd have to dive in the source code to find out more, a quick online search didn't turn out much.

[1] http://en.wikipedia.org/wiki/Abuse_%28video_game%29
So your position is that Debian didn't go far enough?

They should have disabled OpenSSL's CSPRNG entirely and redirected its internal calls to perform IO operations on /dev/[u]random?
Language drift.

"physical revulsion" -> "physical revulsion at a morally bad act" -> "morally bad act"
Luckily with the internet we can quickly reach people, raise awareness and educate people - and show the positives of the changes that need to happen. I've been formulating a political strategy for many years now that will be self-sustainable, and self-perpetuating - because what you say is true, the people who run the government are in 'power' - and so you need to be able to compete with that, like any business who's going to disrupt the market. I wouldn't use the government in its current state as a good example as to how it could or would be structured in the future - they can be different beasts, old and new.
No, that probably isn't going to fix things at all.

And what you really want is a fix, not to call out the guy.

But there are techniques for dealing with this. For a basic look, try Carnegie's How to Win Friends and Influence People.
Sorry but I still feel like you are playing the man and not the ball.

Forget fame, film and money. Tell me how spending 20 years with the same woman and having two kids together and finding great joy and satisfaction in your family is lechery and not love.
Me too! It is tricky. I've been working on this problem, and evolving my understanding of the systems influencing it for 12 years now or so. I've been designing a growing plan that I feel has a good chance of getting there or starting the path that will lead there. :) This will incorporate business plans / projects, a charity I am starting, and political aspirations - as policy will eventually need to change, and noise will need to be made to at minimum start discussion and have people raise questions about the status quo.
U.S. increases fingerprints IDs at airports (2008)
I had a little start-up idea a while ago .. albeit only tangentially related to this one.

Make a deal with JC Decaux, or some similar out-of-home advertising company to place cameras (strategically) around the City of London.

Nominally to provide personally tailored advertising, the significant secondary purpose is to use face recognition to identify individuals-of-interest: specific traders, fund managers and so on.

This enables us to analyse facial expression, gait, maybe body temperature to determine mood, then look for correlations in the stocks and markets that these individuals trade.

I think that this will be legal, since all the information that you are using is (nominally, at least) legal, and gained in a public place.

After all, if it is OK for the authorities to place the whole population under close surveillance, they cannot possibly object if we turn around and do the same thing to their paymasters, can they?
Also to add, when you only take care of a few of a person's overall needs then the synergy that can take place on the holistic level gets lost - and so the amplification effect and benefits on all of society are lost. You can't go half-ass when it comes to this - people will of course argue what that means and fully encompasses, though there will have to be a methodical, logical, pragmatic, etc. way to determine it - and so far for me business has allowed me to learn the tools and terminology - basically I look for the leading metrics for a healthy society, healthy people, and allow that to guide me; You have to have a definition for what health and wellness are, and what it means too, of course.
My experience as someone who is active in research in this exact field (mathematical cryptanalysis) is that generic techniques for discrete logarithms, such as Pollard rho or the number field sieve, do transfer well to integer factorization, but more specific techniques such as Joux's latest function field sieve tend to be harder to transfer from one setting to the other.
Sneakers - movie about pen testing, crypto/nsa, espionage, and deception (1992)
Now, when we are old enough to get Facebook, we don’t want it. By the time we could have Facebooks, we were already obsessed with Instagram. Facebook was just this thing all our parents seemed to have.

There's a lot of unintentional irony in that statement.
Thanks for the reply. As someone being into photography I would like to have the functionality that kraken provides on my local machine; even saving 10% on my huge pile of digital pictures would help me a lot; given that my machines run exclusively on SSDs, where storage space still is quite expensive.

In saying that: if you would build a downloadable app which looks great and does what you are doing right now on your servers I would be willing to spend. On the other hand, I would not upload my pics to any service just to get them back smaller; it just takes too much time.

But I agree that your biz model probably does not target someone like me; good riddance to you!
But it's encrypted.
1.6% of what?
From the homepage:

Luna is built on the rock-solid foundation of Linux (the same software that powers the US Department of Defense, the Bank of China, and more). It has no known viruses, which means no pesky anti-virus software to slow down your system.

Linux has "no known viruses"?!

http://en.wikipedia.org/wiki/Linux_malware

https://www.linux.com/learn/tutorials/284124-myth-busting-is...

https://help.ubuntu.com/community/Linuxvirus

http://www.zdnet.com/linux-desktop-trojan-hand-of-thief-stea...
No-one's doing any pretending. Your morality may differ from other people's, but that doesn't mean theirs is insincere.
Just watched this movie and thought I would share it with HN. Talks about pen testing, computers, crypto/nsa, espionage, and hacking back in the day ;)
In Star Trek, does the transporter conserve the momentum of transported objects?
I can attest to the low quality of router firmware, go grab the source from Billion or Netgear and have a look.

Homework question: What's running on your blu-ray player?
My country had a top tax rate of 85% at one point (with a 10% premium for unearned income). Society didn't collapse; in fact many of us remember that as a golden age.
What you did was right, and you will be punished
"When Power Goes To Your Head, It May Shut Out Your Heart "

This is also called not being grounded - though it doesn't necessarily mean you don't use logic to dictate your behaviour, though heart is an easier guide at times.
Simulating a TI calculator with crazy 11-bit opcodes
Posting this to HN because of the following paragraphs, which show the amount of stuff collected, and the length of time it has been collected and stored.

I'm not sure if Americans know about this?

> The U.S. government has been collecting digital fingerprints and photographs of nearly all non-citizens aged 14 and up entering the country since 2004, officials said, in a Homeland Security program called US-VISIT, at a cost of $1.7 billion.

> [...] On an average day, almost 14,400 international visitors undergo the fingerprinting process at Kennedy, officials said.

> More than 2,000 criminal and visa fraud cases have been detected by the screening process, introduced in response to security concerns following the attacks of September 11, 2001, U.S. officials said.

Roughly they've scanned fingerprints for 36,792,000 visitors (who may be repeat visitors), and caught more than 2,000 people. (Between 2001/9/11 and 2008/9/11.)
Why not deal with fear in a different way?
I do not believe, support, or accept "democracy" or mob rule. I do not believe the "majority" has the moral right to lay claim to my labor or the product there of, nor tell me how to live my life. I believe in Non-Aggression Principle and the voluntary exchange of goods and services

You are correct in I do not exist in an island, however I do VOLUNTARILY exchange my labor for goods and services, this is society, not the immoral democratic structure you call "government". Government is a vile, evil entity that seeks to destroy society not build upon it.

>police protection,

Police are not today, and never have been a protectionarly unit, you can not cite any case law, or evidence to support that belief, if they were there would not be the need for self defense, private security, and entire industry producing goods and services for protecting one's self

Police are a Harassment and control mechanism for the state to force arbitrary laws and regulations passed by special interests, the majority or other such groups. They are nothing more than a gang of thugs.

>fire protection,

Historically Fire Protection was provided quite well and for a much lower cost privately, infact come counties are going back to that model.

Today I live in a Region with a 100% VOLUNTEER fire protection services that is supported by VOLUNTARY DONATIONS by the community, instead of violent forced collections. Our fire services is the best in the region with faster response times then the surrounding areas where they are paid to sit on their asses all day with money stolen from the community.

>military protection,

Most of the Military Budget today is used for Unjust and immoral wars, and immoral surveillance. I, just as our founders, do not believe in a Standing Army.

>paved roads,

A good % of roads are PRIVATE roads, further public roads can be funded exclusively with user fees which I have no problems with, as if your using the road you should pay for them, however they should not be funded with Income Taxation, Property Taxation, etc.

>functioning traffic signals and signs

See Above

>groomed parks,

Parks are not a proper role of government, I have never used a City Park, have no desire to use a City Park, and my money should not be stolen from me to pay for a city park

>trash collection (some places),

I have a private collection service that I pay monthly

>up to sixteen years of education,

Calling government schooling an "education" is laughable at best

>enforcement of workplace safety standards,

A System of Strict liability would be better for that

>financial protection if you become suddenly disabled,

I have private Long and Short term disability insurance, even if I did not that should be done via community charities not through the forced taking of other peoples money

http://www.youtube.com/watch?v=PGMQZEIXBMs

> a legal system in which to resolve disputes.

The legal system should be paid for by the people that make use of it.
Gmail doesn't, in fact, require javascript.
At the risk of sounding older than I am, I've noticed a lot of young developers these days give things cutesy or even risque names.

(Edit: Also, it seems that name was selected by the author of the original CLI program for APNGs, who does not appear to be involved in this kickstarter)
Yes, that worked fine. But I had to install the dconf-editor package first, then invoke dconf-editor from the terminal.

Booted my ancient workstation (quad Xeon, nvidia GT520 graphics card) and had the usual issue with 'composited' dekstops and nouveau - very slow screen refresh.

This is not a LunaOS specific problem, it happens with Gnome Shell based distributions. (Ubuntu 12.04 drops down to the Unity 2d shell which is much more responsive, XFCE is fine with built in compositor). My guess is that LunaOS UI is built on top of Gnome shell somehow?

I'd have to install the proprietary drivers for this particular card.
And encryption schemes never become outdated.
Right - that's very useful information. Now I really do want to get together with you to talk about these things. You clearly know more than I about the details, and I'd love to learn more.

Alas, I expect it won't happen, but thanks for the information.

A question. You say:

> ... more specific techniques such as Joux's latest
> function field sieve tend to be harder to transfer
> from one setting to the other.

Do you have any sense that perhaps, as we come to understand it in more detail, we may yet come to find that it becomes more widely applicable? Obviously you feel at the moment that it's too specific, but is that perhaps because we don't understand it properly yet? Or do you feel it's genuinely limited in that regard? I'm just thinking about how Wiles' insights and proofs about the (speaking loosely) limited form of the equivalence of specific Elliptic Curves and Modular Forms opened the field for the full proof of the T-S conjecture (now theorem).

Just looking for a deeper insight into your intuition. Feel free to speculate wildly. If you're right you can appear prescient. If wrong, it was just speculation. 8-)

Added in edit: Supersingular Primes for Rational Points on Modular Curves (?)

Just for fun, see also: http://www.solipsys.co.uk/images/JaoAndWright_c.png
It also happens to work for their business model to be able to take care of their employees well, much like successful internet companies - through economies of scale they are amassing profits that would otherwise be spread out more equally among society. Costco would be like Walmart of course, though it's nice we have to contrasting examples - yet we're still left with systemic problems that don't take care of the needs of society.