skysight-inc/HackerNews huggingface dataset:
I think this is fundamentally wrong, in the way 'secure programs should do their own crypto' is wrong. Secure programs should be able to rely on the platform provider's API to provide a CSPRNG. If the platform doesn't, it's the platform's fault and let's all go yell at them. It seems odd to put this at the doorstep of app developers. Android app developers should reasonably expect that SecureRandom does what it says on the tin as should consumers of similar apis in iOS, .net, OS X, Windows, you name it.
"I'm a Java app, but really, in fact, I happen to know underneath it all it's Linux thus I will read some random file descriptor". It's a Chewbacca defense, it makes no sense!
Free OpenXava Java Web App Framework Modernized
As far as I understand not having an Android or iOS device will severely cripple the user? Is this the case, are there any plans for Windows Phone?
How to stop procrastinating?
i am a B.Sc comp.sc, working as COBOL programmer in india. i have Presbyopia [cant see near things].

I found concept of 'adjustable glasses' so seductive, it was instant 'i want it'

i bought an eyejuster 3 mths ago. paid US$40. whooping amount for me.

the glasses are UTTERLY completely useless. absolute utter crap.

here's why - if i turn the wheel and focus them for reading a book nr the kbd, and then if i turn my head to see the monitor - bam! complete utter white-out. cant see anything. out of focus.

and then if i lift my head to find my coffee mug - Bam ! utter white-out. cant see a damm thing. total out of focus

dont buy the damm things. its VERY seductive in theory. but totally utterly broken in practice. an unmitigated $40 disaster. [somewhat like the Nice thermostats PG commented on recently]
I've never been more confused than when I recently downloaded the Passport app for iOS. I was expecting some kind of basic twitter-like client with some app integration hooks. You know, kind of like what you see when you login to app.net! Instead, I see this really confusing app store, with no explanation. Clicking on an app downloads it, and from there I have no idea why I'd want another app store - maybe these are ADN compatible apps? Maybe they all work together because they're ADN aware? Anyone?
Which makes me think - if we could develop a culture that is largely accommodates use of such powerful and nasty stuff, and despite its harmful consequences there are an overwhelming majority of people who can and do enjoy it responsibly without harming themselves, and our society is nowhere near being destroyed by it despite all the problems that exist - we certainly could deal with less nasty stuff too, without putting everybody who touches it in prison for 20 years. I mean, if we wanted to...
In the same vein, I highly recommend people try cutting out grains for 40 days. If you're like me, you may very quickly feel so drastically better that going back to grain-eating would be out of the question.

Don't get me wrong: many people do just fine on grains. But some non-negligible percent of people live with a low-level general malaise without even knowing that it's not normal. I know I did for years.
Ah yes, I love Ultima 8: Pagan. That was an awesome game.
I am not sure if I understand this right - what I understand is, that they try to attract Blender users (which is a good thing (tm) ). But are they referring to developers that integrate towards a certain game? What kind of integration? You fire up Blender and have an exporter? Or artists contributing to mods? Or are they looking for ideas in general? And where would I post them?
Judge Orders NYPD to Add Cameras to Officers' Gear
Using this, I found myself back in CSE 341 at UW using Smalltalk VisualWorks. Nothing has changed a bit, and the world has moved on.

Also, directness isn't liveness. But then they don't define live at all, so it could mean anything.
Tension, apprehension, and dissension have begun
It's not only iPhone
The idea that there is "one F-35" is also part of the problem, there are 3 very different planes that just happen to be named F-35A, F-35B, and F-35C, in actuality they share only 30% of their hardware with each other.
Hm, looks like the Logo example doesn't quite work anymore - but the prolog one does.
It was a 14 mile journey that usually took between 50 and 55 mins, but only 55 when I was in bad traffic, after stopping weekday beers I got down to 45 on a far more regular basis, sometimes breaking that barrier. I have my data from the old Nokia Sports Tracker site somewhere I'm sure i could dig through. As I left at a set time and had to be at work at a set time I had to push myself to make the time up, it just became easier (or harder) based on my drinking the night before. Even single pint was and is noticeable.

These days I have a 10 mile commute that take 30 on a perfect cycle in, 35 on a slow day and 40 when I've not been eating enough carbs at the right times. But I'm much better at planning my meals now.

For me cycling is an amazing way to start and end the day, just thinking about the road and making my Strava segments as quickly and safely as I can. Find me as liamjford on Strava if you use that.
You have to select "ProfStef next." text on the page, in a manner browser's document.getSelection would find those (not sure whenever this is possible on iPhone).

I think, given this is a newbie-oriented tutorial, the alert should be more helpful, like "empty program, select some text first!" instead of unexpected null character.
Ask PG: Why are submission titles manipulated without notification?
Dear Paul Graham,

Some hours ago I added a Hacker News entry for a Microsoft bug, which was shown back then as:

| Ping of Death Reloaded (microsoft.com) 1 point by vog 9 minutes ago | discuss | edit | delete

Some hours later I revisited HN and my entry was shown with a different title: [1] [2]

| Vulnerability in ICMPv6 could allow Denial of Service (microsoft.com) 15 points by vog 7 hours ago | 11 comments

Also, the comments were filled with complaints about that new, crappy title:

https://news.ycombinator.com/item?id=6215368

taspeotis:
I read the linked page and all I could see was a vulnerability
in Windows. [...]

X-Istence:
Could it be added that this is just in Windows, in the title? [...]

scottlinux:
Vulnerability in how Windows does ICMPv6 [...]

wbl:
No, vulnerability in Windows allows Denial of Service.
This isn't a protocol flaw in ICMPv6.

I have no idea who manipulated this title, and why. HN provides no way for me to figure this out. There is not even any visible mark showing that this title was changed at all.

To summarize:

1) Some HN admin is able to edit other peole's submission titles. (maybe okay)

2) There is no transparency about this kind of manipulation. (WTF?)

3) The new title still appears next to my nick name. (WTF?)

Result: I have never entered that crappy title, but receive the complaints!

Is this how HN is meant to work?

Sincerely,

Volker Grabsch

[1] Note that I'm aware that this is just the original title of the article. But that title was crap, which is why I chose a different one in the first place! As far as I can tell, my title was shorter and still more accurate than the article's title.

[2] To prevent more title manipulation, I'd like to notice that I submitted this entry unter the title "Ask PG: Why are submission titles manipulated without notification?"
The short answer is yes:

The first call to ssleay_rand_bytes() (which is what RAND_bytes() calls eventually become with the default RAND_METH) will call RAND_poll(), which on Unix-but-not-OpenBSD-or-VOS will try reading ENTROPY_NEEDED (32) bytes from /dev/urandom, /dev/random, and /dev/srandom (in that order). Then, for grins, it throws getpid(), getuid(), and time() into the pool.

The longer answer is maybe:

• RAND_poll() relies on a #define named DEVRANDOM to figure out where to go looking for random devices. If DEVRANDOM is undefined, e_os.h will define it to "/dev/urandom","/dev/random","/dev/srandom". If DEVRANDOM is defined but empty, then the code in rand_unix.c's RAND_poll() ends up skipping seeding from random devices entirely and only tosses getpid(), getuid(), and time() into the pool.

• If something changes OpenSSL's default RAND_METH so it's not RAND_SSLeay(), all bets are off.

Despite staring at all of the code between Android's SecureRandom.java and their OpenSSL tree's crypto/rand directory for three hours, I can't figure out how they screwed this up.
For some people it is "difficult to use it responsibly in moderation". They are the people with problems. People who "broadly demonize" alcohol? They have problems too.
In its most extreme form it's also known as "Wirth's law" https://en.wikipedia.org/wiki/Wirth%27s_law
It was not a reasonable guess even at the time because it should have taken you all of 2 minutes to verify it is, in fact, not a reasonable guess. I don't think there is some great tragedy or mistake in being wrong about this but if you're going to gracefully admit wrongness, admit to the right kind.

You were wrong then and you could have easily known you were wrong then. This new disclosure doesn't make you righter or wronger in retrospect.
The fuse one is not terribly fast, as expected.
I think this is what you're really looking for: http://zfsonlinux.org/

Basically the standard ZFS driver with a shim for the kernel.
Welcome Captain Obvious. Please tell us how to achieve world peace. Oh! Don't have wars. We were hoping for some evidence of, you know, intelligence or insight.
I'm out of my depth here, but since this conversation seems precise, and is discussing theoretical and practical implementations, does this paper[1] factor in? If so, is it fair to say that at some level, without auditing every aspect of hardware, and every aspect of all software used at build time and runtime, you can't know?

[1] http://cm.bell-labs.com/who/ken/trust.html
How checking email is not computer usage?
Maybe we can sue God or something for misconception? I am waiting his HN post where he will say, we have learnt something with 0-day and improved the security of your brain. Maybe a sheep as the reward for the scientist! :)
1) It's incredibly profitable for some of the participants

2) Until maybe 2007, there were not a whole lot of comparably-profitable licit opportunities for Eastern Europeans. The contract marketplaces have helped. We really need to fix our immigration system in the US (and, worldwide, really) to help more.

3) A lot of the more dangerous parts are essentially blue collar crime; this is FAR safer than drugs/prostitution/human trafficking/terrorism/armed robbery/etc., so it's a clear decision for those guys.
You also forgot to mention multiple cards and pins people have / used to have. I'd expect a false trigger in the system in that case.
Also take a look at:

http://http://lively-kernel.org/

One noteable feature is save-via-webdav.
Wait a second. The document you link to is a working draft for the next ISO C++ standard, which is by no means yet finalized (planned for 2014 or 2017?). The 2011 standard does not contain any wording to the same effect. Again I would be surprised if this specific paragraph makes it to the final version.

Then the initial discussion above was about C, and the ISO C standard does not contains words to that effect at all.
How do you recover from being struck by lightning?
Um. I'm sorry, I disagree with this. I write for various publications online and get pitched like this ALL THE TIME. They're so obviously sent to lots of people to just get coverage that I skim and delete them. We're talking about hundreds of emails a month.

Their "example" email is literally the worst way to turn me off. Don't write the story for me. Don't tell me that you think it might be interesting for our readers. Why? You're probably wrong! Of course you think it is, it's your product!

Write something to me that's personal. Write something that doesn't make me feel like I'm reading just another pitch. Don't just give the the stock line. Tell me why it's interesting to me and my readers, without just giving me some generic startup reason.
On The Peltzman Effect In Team Work
That seems a highly questionable assumption to me.
Just Posh Masks Blog
Complexity kills.

Thank you for staring at the code for three hours BTW. :-)
Ah, a person of taste.
That's your distro's default aliases talking

~$ whoami
root
~$ touch test
~$ rm test
~$
What stock exchange is powered by node.js?
UFlysoft Photo Recovery Tool Help You to Recover Lost Photo Files
Accidently deleted the important data from Mac and seems no ways to get them back? Don’t panic. Just have a try on uFlysoft data recovery software-uFlysoft Data Recovery Mac. Follow this guide to do lost Mac data recovery only by a few clicks.
I haven't seen it yet, but will today. One other thing, which is that I associate the whole blogpost with the movie "Revolver". It is like Jason Statham, speeking the words; I guess it is the "former and latter" phrases. IMHO also a good movie, when it comes to be better. "You only get to be better, by playing a better opponnent."
> Majority of people that get CS now is due to money (how else to justify the expense of a diploma?)

Not sure where you are, but universities in Europe are not like in USA.

In many countries public universities are more renowned than private ones and in some, it is even quite symbolic what you pay per semester.
variou , let us brand you (coming soon)
Sign up NOW .. a new concept focused around social personal branding
Braintree Launches Mobile Marketplace Solution to Fuel Innovation
"... and vector('king') - vector('man') + vector('woman') is close to vector('queen') [3, 1]. You can try out a simple demo by running demo-analogy.sh..."

I downloaded the code but I dont understand how to get queen as a result. I tried submitting king - man + woman, but the bin dont understand it.
Install openQRM 5.1 On Debian Wheezy
missing the point. This is huge. Maybe not in the way presented in the article, but nonetheless...
> our approach does give you assurance that someone with physical access can't easily snapshot your VM memory.

But how do you know the VM (or rather the hypervisor for the vm) is running on physical hardware, and not in a hypervisor?

I can't think of a way you could be certain of this remotely? Perhaps you could be on-site for the boot-up, and then rely on the fact that snapshotting is very hard -- but it sounds rather fragile...

Still very interesting project! I've been thinking a bit on "running inside the L/1/2/3 chache"-lately - but I hadn't thought about the particular idea that you could treat RAM as "external" -- assuming you could guarantee that you're always in cache.
> Could it be added that this is just in Windows, in the title

I never entered that crappy title. I chose a completely different one, which was then changed by some admin. I added a new HN entry about this incident:

https://news.ycombinator.com/item?id=6216685
I envision a future where people would be able to buy organs off the shelf in hospitals.

Not just people who need transplants, but athletes for example could go an upgrade to a bigger heart for more endurance.

I don't know if thats scary or exciting, but we'll see.
> Vulnerability in how Windows does ICMPv6

I never entered that crappy title. I chose a completely different one, which was then changed by some admin. I added a new HN entry about this incident:

https://news.ycombinator.com/item?id=6216685
> Can you clarify how much entropy a device would need to become cryptographically secure

200 bits.
I never entered that crappy title. I chose a completely different one, which was then changed by some admin. I added a new HN entry about this incident:

https://news.ycombinator.com/item?id=6216685
I will just quote what I said a few days ago:

It's worse than that. Since you can't editorialize titles and some authors like to give their articles poetic, meaningless names like "A butterfly in the sky," when the actual article talks about a security exploit in Bitcoin, coded in Go and released by Wikileaks.

I often find myself ignoring interesting articles on HN only to go read them later on reddit with a much more descriptive, editorialized headline.

Right now there's a good example of this problem on the front page. The article about the Android/PRNG security flaw is aptly editorialized as "Google confirms Java and OpenSSL crypto PRNG on Android are broken," but the original article is titled "Some SecureRandom Thoughts," which is meaningless and I would never have clicked it under any circumstances. Thankfully the mods left this one alone.
Read the article. It covers this. Yes is the answer.
Surface Pro Running Four Screens – A Personal Workstation
Reasons to like js:

1) There are very fast implementations in production, as well as an arms race between some of the world's most powerful titans of software development to outdo each other at js vm performance.

2) It is a thin abstraction over the Reactor Pattern, which is very useful for certain kinds of event-based applications.

3) Very lively and robust package ecosystems in npm (node) and jQuery (web). Virtually all packages are async by default.
It's always hard to tell what's really happening behind the GDP growth figures when comparing countries. The population of US and UK are currently increasing around 0.7% a year, while Germany is around 0%. That's a lot of additional GDP growth for both UK and US, even when excluding the fact that immigrants are at their prime working age and usually more beneficial for the GDP than an average citizen. This has a fairly big impact on what's seen on the news. Since depression is defined as two consecutive quarters of negative growth, it's much easier for countries like US and UK to avoid "official" depression, and much easier for news outlets to talk about the "stagnating old Europe" or such; and of course, at the same time the living standard of an average German might be increasing and that of a UK/US citizen decreasing.
This service has become such a joke.

People paid for a Twitter clone and just got a confused mess of hand wavy nonsense about being a general purpose pipe for applications.
One odd thing I found in one of their job postings. They actually say the candidate must be located in San Francisco. I hope they mean Bay Area and that they will not provide relocation and not that they only will talk to someone if they live in the city. I cannot be sure after reading the other silly generic requirements listed before this.

http://jobs.app.net/apply/iX7lc8/Software-Engineer.html
I post this because I strongly disagree with his premise. To me his favoured environment sounds like working in a team without social skills, where ego and pride drive team members.

Here's some choice quotes:

> In my opionin personal attacks are unproductive, but attacking ideas should be completely necessary in producing an effective team, which would be most capable of producing the highest quality products.

Disagreeing with ideas and developing them further yes, but going "Oh Tom's had a good idea, let's shoot it down because it's not mine" -- yeah that's not what the author is saying, but nothing holds it one side of that line or the other.

> If a member of a team feels no risk in submitting bad ideas to their team, then they will do so, because good ideas take more time to think through. However if a member of a team feels higher risk associated to submitting bad ideas, like having the idea publicly denounced, then they will think about it more, and produce a higher quality idea.

Or keep quiet, because nothing's good enough for the team to do anything but criticize and shoot down, and there's enough aggro in life without generating more on purpose.

> In a team of people that are willing to say “No” pride is at risk, and in a team where people are concerned more about their pride than the productivity of the team someone that is willing to say “No” stands out, and risks being called a bad team-mate.

(italics mine). I disagree, I do not see the non-italicised section/conclusion following on from the italicised text. I would call someone who is driven by pride and up themselves a bad team-mate, who is not concerned about the overall goal. Saying no from that motivation, which the article is arguing for, is bad.
I didn't check it from iPhone.
From my desktop (iMac) I only place the cursor on the "ProfStef next." line and press Ctrl-d or press the DoIt or PrintI - I didn't need to select the text and everything worked.
Ixi Play - Cool robot for kids
SIGCOMM paper on B4, Google's global software-defined WAN
I meant quite the opposite, that if what the GP said is true, than the specific theorem being proved does not share the properties implied by the common sense idea of "secure," and is therefore insufficient.
GDP is anyway an extremely biased thing to look at. There are many ways you can influence it to make it look like you are growing.
Second that...
I'm assuming Bobby Tables can't get a nick on HN, then?

(That is, nicks like 'nick, and "' or '1'='1' -- '" aren't allowed?).
> but I think you would at least agree with me that node's popularity and growth has been unmatched.

Of course I agree. But node is an unique case, since javascript is not exactly new, and had a trillion people using it when node appeared. You can not expect that to happen again any time soon, unless all main browsers start supporting client-side PHP or something crazy like that.

Go is not 'there' yet, sure, and maybe it'll never be. But its growth can not be judged by node's standards, no really new language could compete then.

For a new language is growing quite good:
http://www.google.com/trends/explore?q=golang#q=golang&cmpt=...

Of course this doesn't mean you have to use it, but IMHO it can not be regarded as a failure in anyway.
QC/QA is all about testing for repeatability. Testing for entropy means proving a negative: that the initial parameters will never repeat across all devices that will ever be booted. Entropy gathering is really really difficult to test within a normal engineering process.
Seriously, the US government is a larger thread to US citizens than China is.
What? If you want to expose new rich functionality to web apps, you need to do it separately on each platform anyway, whether it's in a plugin or in the core browser. Plugin developers seem to be okay with paying that price. The iPhone doesn't have Flash because Apple doesn't want web developers to make rich apps and divert users from the app store, not because of implementation difficulties.
I am 19 years old and first want to finish my bachelor business degree in Europe, because no one would take me seriously, yet.

On my exchange, hopefully to a tier 1 US university, I hope to find people who inspire me and my future cofounder.

I am a business guy and have started two social business projects already, but I want to open an Internet start-up after my studies.

If someone here (Developers) is looking for an idea and a cofounder, write me.
Ok, this comment is repeated a few times. Never use an app that doesn't have responsive UI feedback :-(
"the assembly language for the web" just got renamed to... "the assembly language".
Very cool.
Generator A returns 32 bytes from /dev/urandom. Generator B returns 32 bytes from /dev/urandom. The application XORs them.

What's the problem?
My understanding is that it is ning.com but with a different business model. (Interestingly, Marc Andreessen of a16z was a cofounder of ning.)
I quit Commonwealth for other reasons years back. Australian banks are in general pretty terrible, with high fees. They also refuse to adopt the IBAN as they don't want the ultra sophisticated service of cross-border financial transfers to become commodified (thus, impossible to leverage unrealistic fees and delays against). They also refuse to answer queries along this line (source: high value payments clearing committee, 1+ years of email queries with some responses, but no answer)
Lian Li PC-A79: enormous chassis with removable motherboard tray
lol

You are the one who was all "GPL hurtz dem users!!"

You're probably right with your assumption that FBX is awesome, but this wasn't part of the debate.