skysight-inc/HackerNews huggingface dataset:
Chill out a bit. Classes are for more people than the self-taught know-it-all's in the room. Most of those people attend the class because they want to learn the "basic curriculum" and they probably aren't interested in listening to some self-taught guy argue with the professor.

The author of the article is not condemning people for being self-taught; he's condemning them for being arrogant. I would self-identify as a self-taught know-it-all and understand the behavior he's talking about in the article: pointing out minor inaccuracies in things the professor says, answering every question (to the exclusion of others being able to answer), and asking irrelevant "questions" largely just to demonstrate how much better you are than the other students. It's really not that hard to realize that this behavior is disruptive and avoid it.
But they have what a body craves.
Huh, I never noticed that before. It's a useful notation which I might well adopt. Thanks!
They didn't use an Android exploit specifically, they simply scanned the blockchain for vulnerable private keys. They probably didn't even know that Android was the culprit - it could be hardware wallet, a buggy homebrew client or whatever.
This has confirmation bias written all over it.
that's a problem with the law, not the substance.
If you're citing tweets in an academic paper, you're doing it wrong.
It won't be more expensive for customers because they'll do their best to negotiate a fair rate on the project. This leaves the service provider to pay your fee, but since you hooked them up with the work (and by extension payment for it) it's more natural.
Agreeing here, and though I won't say much about cocaine and DUI (I just haven't had friends that were into that, but I probably wasn't the right kind of wealthy growing up to have those friends) -- I've witnessed more poor kids rebelling against the relative sources of control in their lives, which are often good (things like church, father figures, mother figures) and partaking in cultures that promote almost the opposite of most of the values that they maybe should learn (of course, pinning down what people "ought to" learn/believe is crazy-dangerous territory).

I'd make some examples, but I think anyone could think of some easily enough. I also want to note that I haven't technically done any research on this (nevermind the difficulty of properly researching a subject like this with so many factors), so I could be completely wrong.
I really like folyo.me, even though I ended up finding a designer off Behance, I certainly considered folyo.me for a while. However, I still disagree with your business model. At $100 a pop, you would need so much traffic from this niche to pay the salary of a full-time developer (or designer, in your case), unless you broadened the scope.

Elance/oDesk/99Designs and other sites just have more room to monetize than a one-time $100 upfront fee. If designers get a lot more inbound from this, you're essentially giving them leads, so it makes sense for the startups to find great designers and the designers take a percentage cut for having much of the heavy early lifting done for them.

I also don't think you're going to reach much scale with a domain like folyo.me -- it's just not good. I love your design work, but branding is key too, and while a domain like that might be good enough to validate your idea I don't think you can have a runaway hit with that.
I'm not who you originally asked, but I share his sentiment that javascript is a nice language. I've used python for years, have a few open source applications with Java, and written several scripts for my own purposes in C. I've also explored C++, haskell, scheme, ruby, and MIPS assembly. Not a whole lot of PHP. So I use javascript for everything? Not even close. But I still like it.
... or a healthy sense of humour. we didn't hear how much he drinks other months.
> Some SecureRandom Thoughts

I feel like the author of the post isn't giving this the severity that it deserves. The title makes it sound like a thought experiment, here is an example where the original title is (let's face it) shit and the editorial title here is relevant.
It sounds like you don't like Javascript as a language, you like it because it just happens to be successful and ubiquitous.
No you don't. The only time you need to worry about the NSA having a back door into your random number generator is if you are worried either about the NSA attacking you (in which case you probably don't have a chance anyway), or are worried that some learned of the NSA's back door and is exploiting that.
I don't mean this in a snarky way, but what about it?
Are you saying it will be a good bomber or close air support plane?
Host-based security is a whole dead horse discussion, but I still believe Def-in-Dpht means "use everything you can get your hands on; reveal the least as possible."

Correct me if I'm wrong: which OSes have desirable CSPRNG properties like Fortuna (entropy pools esp.). I've looked at OSX, Win8, Free/Net&Open BSD and still haven't found anything satisfying other than class of algo. (Ignore whether closed/open source and IP issues.) I would like to see all mainstream OSes do these well enough.
Thanks for the feedback!

We did suspect that we weren't making it obvious enough that we were Perth only for now, so it's good to get some confirmation.

We have gone back and forth on the money issue so many times, and can't quite work out the best way to incorporate it, which is mainly why we haven't as yet. The solutions to the online payment problem really aren't great in Australia when compared to the likes of Stripe as well..

The suggestion about incorporating music tutoring is a great one. We've added some music subjects, and will give some thought as to how to advertise to that market.

It would be good to catch up and talk education/technology, how should I contact you?

Cheers :)
Let me get this straight. Somebody spent time to hunt down the original issue with the RNG. Followed by the time required to exploit the issue. Then focused on attacking bitcoin environment in some way. Taking a total of 55 bitcoins.

That seem's like a lot of work for $5000.... Some Blackhat burning 0day for giggles?

It's also very impressive that the BT community caught them so quickly.
This is why I use Cyanogenmod. I get better support from a bunch of unpaid yahoos who like to dork around with phones than from the carriers and handset manufactures.

I am willing to bet Cyanogenmod will have a fix out in days, if not hours.

This goes for other ROMs like Paranoid too.

I refuse to buy hardware which isn't supported by the open-source community, such as Cyanogen.

If I don't 0wn it, I don't own it.
> The next 100 years in general will be very fun.

Unless they are not.

For example, we might get a total surveillance society, ruled by a tyranny that cannot be overthrown, because it controls everyone's use of information. We seem to be heading that way now.

Or a bad singularity that turns the solar system into paperclips.

Or one of those old favourites, nuclear war and ecological catastrophe.

It is not obvious to me that humans will still be around in 100 years. Which would be sad considering we may be the only sapient life in the universe.
From personal experience, they last well. Until at 10 years old, in pretty much perfect health according to the installer and maintainer, the house sitter runs them completely flat. Then continues to use them each time they charge 1%, flattening them again and again. Then they are no longer any good. That was a $10-20k NZ exercise
What's the carding world?
Why would you want to own a car if you could avoid it?
But there's your opportunity. If you ignore it just because its more complex, you'll be having Schlep Blindness. http://www.paulgraham.com/schlep.html
That reminds me of a question I've been pondering on-and-off for a while: is it possible even in theory to use Sufficiently Advanced Mathematics (e.g. homomorphic encryption) to build a trusted computation environment on top of an untrustworthy foundation?

For example, I want to run a VM on EC2, knowing the NSA's after something I have. Is there some way I could, even theoretically, build my VM, that would protect it from the NSA compelling Amazon's cooperation in ripping the data right from my VM's memory at the hypervisor level?
If you don't trust the hardware, then you've already lost, no matter what algorithmic construction you are using. How are you going to trust your random number generator if 1 + 1 = 2 except when it equals NSA?

(This is one of those times where I regret HN that has twin interests in software security as an engineering science and software security as a political statement.)
I'm a bootstrapped developer. My product http://followgen.com does 5 figures a month.

My blog: http://myles.io - I talk mainly about my experiences building followgen.

My book: 'The Hacker's Guide to Passive Income' is pretty much what it sounds like, though it's a work in progress on Leanpub https://leanpub.com/passiveincome
There's a lack of real estate for businesses in the city as well.

Getting an office for your tech startup isn't trivial nor cheap. A lot more of these companies in the south bay along the Caltrain could be in SF if there was more commercial real estate available.
video of hands (fingers) doesn't seem like the hard part here though (relatively speaking, I'm sure it's plenty hard). The hard part is recognizing the input the user wants. Tracking the finger is easy. Figuring out when that finger motion is a click is the hard part.

The video on your website is significantly more impressive than the linked youtube video. That being said, I still didn't see any "clicking". Perhaps I missed it.
I actually think that rebellion is never against someone in particular. It's usually against some sort of theme or ephemeral idea. If it was so specific, it would be easier to diagnose. While a teen might typically rebel against his/her parents, it's not their parents that they are actually railing against, deep down they generally need the structure, and want the structure that parents enforce (ever been free to do whatever you want as a kid? it either gets old/boring/pointless, or out of control very very fast until SOMEONE in authority steps in). Rather, it's the thought or feeling of "being controlled" or "not being independent".

Also, about your little case study -- 1000 people constitutes a large enough swath of 300+ million Americans, so I don't have a problem with 5 people that actually exist being a good enough case study.

A guess as to your observation: Do you know what kinds of jobs they've had as teens/young adults? Many of the starter jobs are related to sales, in some form or another (best buy, verizon, places teens know something tech related might work, even places like carwashes, etc), and (just spitballin here), I think the role of a silver tongued deal-maker is very popular in many upper to lower middle class and even lower class groups. Marketing seems like a natural extension of that. Also, I've always thought of marketing as the attractive, relatively business-minded person's liberal arts degree (but maybe that's just me).

Also, on self-esteem, it's sometimes something you can't tell from just looking. It's kind of their job as marketers to have very very high self esteem. If you get a pitch from a marketer, and they look like they have even the slightest doubt that their plan will fail and NOT bring in piles of cash, then you're dealing with a bad marketer.
This looks awesome. What kind of traction have you seen? Anything getting sold for decent amounts?
Martin Personal Jetpack approved for manned test-flights
Aviation regulators have issued a permit to fly with human pilots.
No need to wait for the carriers. Google published sample code for app developers to get good entropy.

http://android-developers.blogspot.com/2013/08/some-securera...
Here is a video posted in 2011 of them doing a test flight with a dummy going to about 5000ft[1].

[1] http://www.youtube.com/watch?v=SHPedpE70Es
I'll have to think about the business model thing. But what's wrong about the domain? Is it the .me you don't like? Or the name itself?
You say, "I don't feel comfortable sharing that information" instead of the more hostile, "I don't have to answer that"

One needs to consider it as offensive as, "Are you planning to have a child soon" or "How old are you" or, "You look real purty"

Also if a company is going to invite you all the way to their office and use up their current employees' time, it would be a very stupid thing to not want an applicant just because they don't want to discuss their current salary.
Not sure what to build.
I know that nuclear power is broadly seen as clean here, but the perception in Japan right now is quite different from the things I have read. A lot of diligence, commitment, money and long term storage is required to make it clean. Japan was found wanting.
Sinatra with Rails Components
Satoshi would never give an interview like this. He hated drawing unnecessary attention to Bitcoin.
None of this comment has anything to do with my comment. If you don't want to use RDRAND, compile a kernel that doesn't.
Markdown's syntax highlighted code blocks are a superior solution. Pure-text e-mail is a terrible medium to read code in.
Several folks have answered already, but here's another attempt: getting stuff into orbit takes so much fuel that any launch vehicle must devote something like 90%+ of its mass to fuel tanks. Once a fuel tank is empty, it's worthless, dead weight. If you tried to carry all that dead weight into orbit, you would never make it; it would pull you down. So you drop the empty tanks as you go, until the part that finally reaches orbit is only a small fraction of the original launch vehicle.

An SSTO--single stage to orbit--vehicle would be safer, more reliable, and above all cheaper to operate than a multi-stage vehicle, but every attempt to make something light enough that it can reach orbit with all its fuel tanks still aboard has failed. A two-stage rocket where the stages return to the pad under their own power is still a big improvement over the traditional model, with three or more stages that are simply dropped into the ocean to be recovered later.
> He also doesn't give interviews

Unless he's DPR.
I believe he speaks with a lisp.

(Please do not throw anything at me.)
Hey man, sorry to hear about your illness. I know someone with schizophrenia and man it is a seriously sad and misunderstood disease. I don't have much to offer, but I was hoping just reaching out to give you a big Internet hug might brighten your day.
needless to say, android passed its fips certification with flying colors.

just another secure mobile OS. nothing to see here, move along.

did i mention that you should never store anything of actual import on a phone?
To avoid hobgoblins wearing Faraday cages without denying the reality of the privacy debate, open source hw can make them quieter. I think it's going to happen because of PC market forces (IBM/Lenovo, Dell) and prior examples (OpenSparc). The startup costs (eda, test equipment) are doable because there are enough people with specialized expertise that could contribute.

If you don't trust the hw or vhost, you're stuffed. Political upwards and technical downwards are the ways to make sure this doesn't happen.
> If you don't trust the hardware, then you've already lost, no matter what algorithmic construction you are using. How are you going to trust your random number generator if 1 + 1 = 2 except when it equals NSA?

You can verify the random number generator. If you know the algorithm and the seed values you can run it on multiple different platforms, or with a pen and paper and verify that the output is as expected and repeatable. If you have large amounts of entropy you are feeding into it, you can log it for testing purposes.

There are also apparently some EC based algorithms that can be used to fix or at lease reduce the impact of a compromised random number generator.

That might not protect against a active attack on your specific system by the NSA (they could send/embedded a magic packet that gives them total control over the CPU for example), might even be possible for it to happen on the NIC controller rather than the CPU if it has access to the system bus. At the least they could flip it into some kind of backdoor random number mode by embedding some extra data in a TLS handshake or whatever. But it should protect against widespread passive surveillance.
It isn't as far as I am concerned, but it might upset some people.
In the game programming industry (PC games, not iOS/Android games), the two most popular languages are C++ and Lua. That's probably part of the reason why these two languages keep getting brought up in this thread to compare against Javascript.
You can always switch to Basic HTML view. It's dated, but it stays out of the way.
Agreed. The whole thing is a bit blase.

Also, anyone else find it concerning that they advocate presenting /dev/urandom as SHA1-PRNG when it isn't? I don't even see why they did this? They could have wrapped the default SecureRandom and forced it to seed bytes with /dev/urandom.

Also, why are they writing to /dev/urandom??
...and if you're looking for a couple good podcast interviews with Brennan, here's a few good ones ;)

http://productpeople.tv/2013/01/30/ep11-brennan-dunn-part1/
http://productpeople.tv/2013/02/06/ep12-brennan-dunn-part2/
http://code.blender.org/index.php/2013/08/fbx-binary-file-fo...

Blender’s next release (2.69) will support binary FBX file reading as well.
I agree. The first couple of times that I tried to find about App.net, I got lost in the Social values listed on their page and trying to figure out what each app does and how are third parties benefitting. I believe if Web Savvy users like us are having a hard time 'getting it', it's a lost cause for people who use 'Whatsapp' and are persuaded to use 'Whisper for App.net'
I don't understand. Isn't seeding very fundamental? How could they forget this?
Reducing the impact of a CSPRNG state compromise is a basic design goal for CSPRNGs, and you don't need ECC to do it; the "NSA backdoored" RNG you're referring to is one that no system anyone knows about actually uses, for that reason.

Again: you're making a point that has nothing to do with my comment. If you don't trust RDRAND, don't use it. But you should still be using the OS's CSPRNG. Just make sure your OS isn't using RDRAND. Done and done.
THIS GUY IS AMAZING | SKYE HI EDM ARTIST
Check out this guy, his music is UNBELIEVABLE! Just click on the link, you would not believe how talented he is, he only has 150 views!
20-25 here.

Sure as hell wouldn't want to have a car. I'm living out of town so I have to take the bus before I get to a subway. Still don't want a car.

Sure, it would be "a good thing" to have one. More practical I guess.

I still don't have one and wouldn't want one. The costs are simply too big. A cheap car ends up expensive. An expensive car... ends up expensive. Gas is expensive.

I also grew up being told "driving is bad, mmmkay? think about the birds and the trees!"

So in the end, yes. A car would get me to work 30-45 minutes faster. But am I really in THAT much of a hurry to get to work? Not really. I would rather read twice as much in the bus, or spend some time on my laptop or smartphone and get some work done.
If an intern does _any_ usable work, they are, by federal law, required to be paid.

True unpaid interns aren't employees, as they should be purely learning. hawkharris said he was writing articles; that's not just learning.
There's a few good podcast episodes with Patio11 here:

http://productpeople.tv/2012/12/19/patio11-part1/

http://productpeople.tv/2012/12/26/patio11-part2/
Speaking from a lot of experience, they're often treated as such.
It DEFINITELY can, but like with exercise, it's all about training and practice. Experienced meditators can usually get to where they're trying to get in a matter of minutes.
Possibly. For instance, look up some papers on White Box Cryptography; these are implementations of things like AES designed to run AES computations on untrusted platforms without revealing their key (the key gets "baked in" to the code that runs the algorithm in such a way that it's theorized to be cryptographically hard to extract the key from the algorithm).

You are getting into the flip side of the DRM coin here; put differently: if there's a way to do what you want, there's also a way for the MPAA to do what it wants on PCs.

Personally, I think there is, at least in the dollar-cost model of security.
Why is this surprising? Success in life is about breaking rules. Startups are one example.
The employer gets free labor. They're not going to report themselves. The unpaid intern gets resume padding. In order to stay competitive with other unpaid interns, they're not going to report the situation.

The people who are screwed the most are the ones that lose their competitive advantage because they can't afford unpaid internships.
In this case, it's not a huge deal, but if someone wrote on their resume that they had some experience with machine learning, and it turned out that they had only done linear regression modeling, they might be poorly received.
It is impressive, but far less impressive than going from a suborbital lob to a moon landing in 9 years.
JavaScript has a uniquely privileged position, though. It is the only language you can use to script the browser. As long as that is the case (and browsers are a relevant programming environment), you will always have web developers who know it, either as their primary language or as a secondary one.

Imagine if the only way you could script Linux servers was in Perl -- it's hard to imagine it falling off in popularity the way it did in our universe. Other languages supplanted it because other languages could supplant it.
She should capitalize on the media attention by turning it into one of the highest paid internships.
Final amount is between the seller & the buyer. I'll try to write up as a separate post, instead of doing it here. :)
Eyejusters - A new way to help the world see
Linux's /dev/urandom does not trust hardware RNGs any more than other entropy sources. All entropy sources are stirred into the same entropy pool.
Bullcrap, booze is delicious and fantastic on its own. It's just like any other vice though, when it begins to interfere with your life you have to dial it back or stop or else the consequences can be severe and profound.

If you're the personality type where that's hard, then please stop drinking immediately. You'll just have to accept that. I've had too many friends in their 30s having to rebuild their lives after alcohol problems.
Yeah. "Releasing" a file format as a restrictive binary SDK rather than actually documenting the format is a really weird and aggressive thing to do, and is very much Autodesk's fault rather than Blender's, even if you ignore the issues with platforms for which the binary might not be available.

On the other hand, the format does not appear to actually be that complicated, so integrating the SDK probably wouldn't save that much programming time compared to just reimplementing it.
"I have nothing to bring to the table, not even dumb money, but let me try to fool an engineer."
Thanks :) even if it didn't make on the frontpage I already received two mails from "just starting out developers" who found it useful, so I'm satisfied :)
11 Things I Wish I Knew Before Starting My Business
"If your launch didn't work, launch again. We launched 3 times" - Something similar to a quote from the Airbnb guys I think. I'm too lazy to look it up, but this is the Internet! Keep launching! Coffitivity.com launched 3 times before literally anyone used it, and a million people have used it the last 4 months. Re-launch, reload, recycle - then give up!
Employees are not the only people that companies write checks to.
The US, of all places, has the laws on the books.

They're ignored.
If they get a W-2 they are employees; maybe not full-time.
What Do You Do With A Failed Product?
-You could Open Source it. That's what I did.
Comparison of JavaScript charting frameworks