skysight-inc/HackerNews huggingface dataset:
The appropriate response is to as much as possible help them contact the authorities and/or to keep a lookout for the laptop and the thief. But, you also have a hackathon to run, so you cannot inconvenience others just because someone was thoughless enough not to take their laptop with them when they went to the bathroom without someone they trust watching it for them.
Could you tell more about what version of paleo are you doing? Do you buy prepared on cook yourself?
I also think the student is an insufferable person according to his blog posts [1].

Yes, many teenagers are. And we should be glad - it means they are growing, thinking for themselves, transforming.
Played this game and it really sucked. :(
It seems sincere to me. And also blithely unaware that the student has a point.
Don't trust everything you see on Wikipedia.

I went to school in one of the countries you mentioned. There is a firm cultural policy there that the teachers' authority ends at the doors of the school. Barring some extreme cases (e.g. underage teenagers starring in porn movies), a teacher doing something like what's mentioned in the article would result in significant public outcry, on all levels, exactly on the grounds of free speech.

The merits, policies, methods and value of schools, colleges and even individual professors are matters of public debate with no restriction. Attempts of imposing sanctions on pupils for expressing views of discontent with institutions do occur, but are isolated and rarely carried out, due to -- you've guessed it -- public outcry.

Perhaps most symbolic for this: after the fall of the Communist regime, school uniforms quickly fell out of favour and are quite rare after 4th grade or so even today. And where they are in place, the rules against not wearing them are rarely enforced for precisely the same reasons. It's all nice on paper, but as soon as someone decides a kid should be expelled for not wearing those particular clothes, things usually get ugly.

Press freedom, corruption and the like are not good general indicatives for the population's values. There's a large gap between general indices and individual behaviour. [Edit:] Communities tend to find ways around things, especially youngsters. Press freedom is the simplest example there: precisely because everyone knows press is basically a propaganda agency, there's general distrust of it, and people are suspicious of what they read in the newspaper. Same goes for teachers: after a long (political-driven) culture of authoritarianism in schools, people are very suspicious of school staff extending their authority past the realm of schools.

It also works this way with the generation gap. Precisely because younger people (particularly in urban areas) perceive their parents as closed-minded, they obstinately try to exercise open-mindedness, or to at least adopt a more indifferent stance, with e.g most teenagers there either supporting gay marriage, or simply not "getting what the big deal is", if people want to marry, they marry. (This is itself a symptom of something else, but I digress).

tl;dr There's at least one place on the fringe of Eastern Europe where a school principal behaving like this would generally end up with a lot of angry parents on his doorstep the following morning.
I agree, Storage isn't that much of an issue these days and six web cams around the place feeding into portable USB drives is pretty simple to set up with a RasPi these days. Then you have the chance of adding a face to the police report as well.
For one of my daughter's parties (age 4 or 5) I blew up an insane number of balloons, threw the balloons in a room with the kids, and let them play while the adults talked in the next room. We poked our heads in every once in awhile or when we heard screaming. Everybody had a great time.

For our last party we had unexpectedly good weather so we ditched all our games and opened the door and let them play in the backyard while the adults talked on the deck. A good time was had by all.
The key schedule weakness in AES256 that I know of only applies to related-keys, which don't affect TLS as far as I know. If there's anything else I'm missing, I would like to know.

I don't have a specific concern with AES128 (compared to the concern I have about the usage of (EXP-)DES and RC4). It merely surprised me that some clients prefer AES128 over AES256 and I think it's important for server operators to know that there are clients that will stop working when disabling all <256 bit ciphers.

Personally I don't find speed a concern when using IM, it's not full-disk encryption or a large download where speed is noticable.
> 2013 says it's pretty hard to _further_ curtail one's future

FTFY
How to Correctly Remind Users to Use Your Product
I never 'got' the 6502 and religiously went Z80 all over until someone described it in the following way:

Think of it as a RISC CPU with 256 registers (zero page).

It just clicked then. Wonderful processor.
> So when the time comes to change the business logic you have stored in the database, do you have to ensure that every possible client that may use that business logic is updated at the same time? You could version your business logic in the database, but then it seems like you've implemented a version controlled business logic library inside the database.

I don't see this as an issue at all. Consider the DB like any other software component and treat its data model as its API. Adding columns to existing structures or new stored procs should not effect any existing clients. Anyone who intends to use the new fields would explicitly use them.

Modifying and existing structure is a no-no (removing fields or dropping an existing view or proc "breaks" the DB module). Changing internals is fine though. If I change how a formula is calculated in a view or function but the API is stable then there should be no issue for existing clients. Sure you must test things in more places but that has nothing to do with the code being centralized. That's just because you have more code! The alternative would be independently building and testing multiple implementations of the same logic and deploying them simultaneously.

> Other than Rails migrations, South, etc, are there usable tools out there for sanely writing software that runs inside the database?

I've never considered this a major problem. If you design software starting with the data model then you rarely have to change it. Sure it does happen but no where need as often as the rest of the app. For basic changes Rails migrations, Hiberate scheme updates, etc are fine. For anything more major doing it manually isn't that much of a pain as you don't do it very often and when you do, it can usually be done in advance of your deployment (per my previous paragraph about non breaking DB changes).

If you're doing destructive changes to your data model regularly then you really need to stop and re think what the heck your building!
Sorry, I'm not following, why is that BS? It sounds like you're saying it's BS since other stores are not Trader Joe's.
Creating a context where learning to program replaces our school system: http://www.gebloom.com/blog/Softworlds
Isn't mentioning that someone mentioned something also mentioning it?
You'd need an MMU with more transistors than the CPU to make it useful though...
7 iPhone Apps you Can't Miss
I'm pretty sure it was securitymetrics that I recall was failing a site for PCI compliance last year due to lack of server-side BEAST mitigation (using ciphersuite order to prefer RC4).

I don't think it's only Qualys. I think it's most of the industry.
There is an alternative approach that inadvertently worked for me that may work well for you, particularly if your goal is to learn things beyond a conventional computer science curriculum. I have been working in high-end theoretical computer science for many years, with significant advances to my credit, but I went to school for chemical engineering. People are often curious as to how I acquired so much esoteric domain expertise in theoretical computer science without spending any time in a computer science class.

Pick an interesting "hard" problem in computer science and attempt to solve it. This works best if either there are no published solutions (e.g. massively parallelizing ad hoc graph search) or the solution space varies widely under the possible parameters (e.g. the design of a unique high-performance database kernel). Iterate, be creative, search the literature for interesting ideas that you can borrow from, and evaluate new designs you come up with. If something does not work, understand how and why and try to fix it. Wash, rinse, repeat.

This sounds like a lot of work, and it is, but there are three unique upsides. First, the challenge of it can be quite a bit of fun in its own right and there is a clear goal of what you are trying to achieve which helps keep you motivated and measures progress. Second, you will cover more of the phase space and explore some tangential theoretical areas while hunting for solutions to narrow sub-problems that you would never be exposed to in a more structured setting. Third, you will invariably explore some unusual or unorthodox ideas that you simply would not be exposed to in a directed, formal program. From the standpoint of being an effective theoretical computer scientist, it will help you develop a unique perspective of the problem space that is different than the perspective that arises from more structured programs.

Also, you might actually solve one of the unsolved theoretical computer science problems you have as your challenge in addition to developing a deep understanding of the surrounding problem space. That happened to me (and then replicated later once I realized it was possible) and it would never happen if I was simply taking courses on the subject matter.

This was an effective way for me to gain in-depth understanding of a diverse range of theoretical computer science areas on an informal basis. One of the downsides is that your rote knowledge will not perfectly overlap what is taught in CS curricula even though what you do know will likely be more valuable (e.g. in spatial indexing some CS courses teach priority trees even though they have no memorable theoretical value).
First of all, I think it's perfectly reasonable to not get an A if your security is not perfect. Thus, BEAST does not carry "so much weight". For a lot of weight, look at SSL 2 or insecure renegotiation -- if you have those enabled you get an F.

I know that everyone assumes the BEAST had been addressed, but that's not actually the case. Safari continues to be vulnerable. BEAST is actually still exploitable (against Safari), because the Java Same-Origin Policy bypass that was used originally still remains (in a slightly different form; they appear to have failed to fix it).

But you won't hear about this, because people have moved on to the next exciting thing and no one bothers to check.

There is one positive change and that is that the Java plug-in does not appear to have access to httpOnly cookies, making BEAST less interesting. Still, other cookies, HTTP Basic Authentication, and URL-based sessions remain vulnerable.

Some might say that supporting TLS 1.1+ deals with the problem. It might, but it might not, because most browsers are susceptible to protocol downgrade attacks. An active MITM might be able to force TLS 1.0 and then exploit BEAST. I have so far determined that all browsers downgrade connections in case of failure. I am soon to test if they have some sort of rollback defense.

I am well aware that RC4 is not a good cipher, and it pains me to continue to indirectly encourage people to use it. I am sorry I cannot move at a faster pace, but researching these things takes considerable effort, and thus time.

It's actually pretty likely that next week, after I finish with some further tests, SSL Labs will stop penalizing for the BEAST vulnerability.

[Note: I am the guy behind SSL Labs.]
Acme is based on how the whole Native Oberon OS works, which provides a much better UI experience using the same principles, specially the last version (System 3).
And my point is it's easier to piss all over their party now.
The top answer on the page says as much but the answer to pretty much any "Which is a faster way to do this, ABC or XYZ?" is "try it both ways, measure the results (adjust for load if necessary), and see". Doesn't matter if you're talking different pure code algorithms to achieve the same result, stored procs vs app code, network caching or not, etc. If doing it the absolute fastest way matters to you, try multiple approaches and measure the results. Even in situations where there are accepted "best practices" there may be variables specific to your own project/tech stack that cause your results to be surprising!
The current String implementation is just a temporary one. UTF-8 will be there.
I've already read it. Definitely one of my all time favorites.
Just opening the 1PasswordAnywhere html file in Firefox doesn't work. Something about Firefox's local file access policy. I serve the HTML file with `python -m SimpleHTTPServer` and visit localhost:8000 to use it.
pixels are already there; they physically make up the screen, silly ;)
Google working on advanced data encryption to thwart NSA, but it won't be enough
Toward a general theory of pathological science
I just ran those with Python 2.7 (ASCII and Unicode) and Python 3.2 (Unicode). "-".join(map(str, range(100))) was always the fastest, with ASCII (2.7) < Unicode (3.2) < Unicode (2.7). Makes sense, but worth keeping in mind when porting code from Python 2 to 3.

Full results: https://gist.github.com/dbarlett/6479378
The most important question in life: is it beer?
Most TOR servers are vulnerable (NSA crackable)
Looks like we'll be moving to MapBox.
One important thing is, my data directory is on my computer. It's not transmitted over any wire. Unless NSA comes knocking... Of course if you want to sync then it goes through dropbox then you have a problem. But they stated that the new version will be able to sync within a wireless LAN.

And If you don't really trust 1Password's encryption, it would be trivial to relocate data files within a trucrypt container or something. (I know this is somewhat ridiculous)
I'm a 155 lb male who does weight training 3 times a week with a personal trainer and if I eat more than about 1500 calories a day, I gain weight (mostly as fat).

When I was completely sedentary, anything more than about 1200 calories per day would cause me to gain weight (entirely fat). And this is with an extremely controlled diet of mostly fresh fruits and vegetables over the course of a year.

I wish I could eat 2100 calories per day. That sounds like such a luxury.

The thermic effect of various foods is so wide that you can have a 30% effective calorie swing based on what you eat. Protein for instance requires about 30% of the calories just to digest it. Fat? 3%
And to cache the results of those calculations for the next query. How do a farm of app servers do that?
I can't understand some of the comments here saying this is too expensive. Seriously folks, William has put together a great into to Bootstrap for a less than the price of a billable hour and it's too expensive? Sure all the information is out there - if you want to spend a few more billable hours finding it - plus a someone who is just now getting up to speed on Bootstrap - most of the tuts out there are for Bootstrap 2. I think the timing is right. The sample chapter is great. Williams product will hopefully save me many multiples of the purchase price by not wasting time seeking the right information and that is a point lots of people seem to be missing.
I was going to say, I would rather just spend the money.
I think you've internalized a too-specific rule. Translate "bands won't give me their music if I don't have a big following" to "bands won't give me their music unless they trust me to do right by them and their music." Having a large following among people the musicians want to reach is one way to earn that trust. There are others.
... or you could focus your effort on productive things instead of dedicating an ever-growing amount of resources coming up with copy to appease feel-good busybodies. The map is not the territory, and overemphasizing the map's importance is a great way to kill any organization's spirit. As organizations scale, it's inevitable that they will eventually fall victim to red-tape-promoting leeches, but that doesn't mean you should seek to actively court them.
Good point but I doubt such a thing will happen. S3 is a common short-term in bussiness and product names.
I don't care what the business rules are. I just want them to explain why my card isn't being accepted.
So we recently spoke with a bunch of Hack Reactor graduates and were very impressed with several of them.

What I took away from the experience is that the Hack Reactor approach is excellent for retraining within the industry. Several of the graduates were not new programmers, but had instead been programming largely in an entirely different part of the industry and had attended Hack Reactor to get up to speed in the JavaScript and web technologies community.

I personally think it would be awesome to be able to leave not only a job but an entire section of the industry and go explore some completely different part of the industry via a highly specialized bootcamp. I would love to take full stack web programming skills and spend 3-6 months in an accelerated program to get in depth in a specific area that is interesting today and likely to be very in demand for the foreseeable future like machine learning, cryptography or distributed systems.
'AWSAccessKeyId' is part of XML Schema and can not be changed.
You are right regarding AWS text in error messages, I removed it, thank you for noticing this.

This was the first thought - to take an open source S3 REST API clone, install it on Hetzner servers and work this way, but it is not the case. Any of the available solutions fit to us for different reasons. All core software is build by our team. We use Open Source software a lot, but the core of S3For.Me was developed from the first to the last line by our team.

I've checked Salesforce site and do not see anything similar to our logo. It will be replaced in the nearest future anyway.
Fall-Through Functions
WTF? There are systems for doing that task specifically, why would you want to build one from scratch?
Non-profit, meaning "non-stock" corporations need capital and initial support to get started as much as any other entity.

Clearly YC considers the investment in non-stock entities a charitable contribution towards a (potential) good cause, and is not participating to see a profit on their investment, but is just as interested in helping the founders figure out their mission, and funding market.

Non-stock organizations raise money just as competitively and actively as stock organizations, and have a community of users and donors, as well as user-recipients.

http://Water.org is an example of an entity that is actively and successfully raising millions of dollars toward a their mission and purpose, with a successful community of supporters and recipients.
Not sure if this is the position you're asking about, but my position is that surveillance of foreigners is far less of a problem than of citizens in any state. Surveillance of local citizens can be abused to destroy democracy, whereas that of foreigners cannot be. Citizens need to be protected from their own government which holds tremendous power over them, but less so w.r.t foreign government.
The decorum each judge sets is their own, and it's not necessarily overly formal, especially if it isn't required by the rules of court.
Trader Joe's only works in a world where everyone is already using these tactics. Imagine a world where everyone was like Trader Joe's. The first grocer with a loyalty program that offered discounts, etc. would suddenly seem new and interesting. That grocer could easily position themselves as caring more about their customer than the others who have no such program.

Branding and market positioning isn't an absolute thing. It's done relative to other folks already in the market.
Yes, I agree. To get an A these days, a site should at the very least support TLS 1.2, and use a key stronger than 1024 bits. That's where we're heading.

P.S. If you have SSL 2 enabled, you'll get an F.
Firefox and Chrome both rendered text funny for me. The font size would suddenly change halfway down the front page of reddit. I didn't see a strong reason not to go back to the stock browser.
hateful speech is not protected in Canada

How do they prove that a speech is hateful instead of merely being ordinarily contemptuous?
And this: "The truth is there are some very easy ways to control the ads you see on your screen if you take the time to understand how it works."

Is the entire problem. One of Searl's points is that cognitive overload results in abuse. Let me create a straw man and see if it works as illustration.

I've got a restaurant and on a white board I write a word, then when the waitstaff says that word, customers merely have to lay their heads on the table, because those that don't will be slapped. Periodically, and without sound, I will erase the word on the board and replace it with a new one.

Now eating at this restaurant is a lot harder because while I'm eating I have to keep an eye on the white board and duck when I hear the word that is written on it, and still eat.

You've increased the "cognitive load" of eating artificially. So something that I would give my whole attention too now only gets 80% or less because this other distraction. The alternative is to eat while being slapped. Which ruins the entire experience.

As more and more of our activities involve tools or products that can be remotely controlled, people exploiting that control to inject advertising impute a tax on our usage which is not appreciated.
Old Soviet joke:

"The Soviet Union is just like the United States. In the US, you can criticize the American President. In the USSR, you can also criticize the American President!"
I disagree with the claim that learning x86 assembly is not useful. I occasionally use inline assembly in my day job. It's very rare, but it does happen. If you're doing C or C++, it helps to know a little bit of x86 assembly when debugging. There are also certain optimizations that you often need inline assembly for, such as using the built-in Intel instruction for CRC32 calculations.

I learned Z80 assembly when writing software for the TI-85. But if I were giving advice to someone interested in learning assembly now, I would suggest learning x86... it's more useful, and just as fun.
It seems that we have constructed a world of jobs where consistency is the primary value, even though the end goal is just to get some work done.

On the Internet we have constructed systems that accept contributions from people that can be as little or as much as they want to contribute - like Wikipedia, or newsy sites like Hacker News, or Github. These websites succeed where those that require too much up-front commitment fail. Like Nupedia (or even SourceForge, in the old days, when it was the "go-to" place for open-source development).

Out in the real world we still demand (mostly), mandatory minimum levels of commitment. Or, where work can be casual, it gets paid much less than the "regular" jobs.

There are opportunities for any company that can work out how to make use of those who want to work, at least some of the time, but who are unable or unwilling to commit to 8 hours a day, 5 days a week, 50 weeks a year.

We could blame the contributors of Nupedia for the failure of that website. And we could blame all those open-source programmers who were too lazy to jump through the minimal set of hoops that SourceForge required for contributors, for the demise of that website. But we know that better alternatives exist, which are more tolerant of slackness and lack of commitment from their contributors. So we can see that those older websites were not the best possible way to organise how to get people to contribute their efforts.