skysight-inc/HackerNews huggingface dataset:
This varies from project to project based on needs. The checkout stuff uses sprockets-commonjs, browserify and require.js are used in other projects though. The decision is often made based on the backend (is it already ruby/sprockets?), and the needs of the project (would rebuilding the full file on each change be prohibitive). For the most part though, the build system remains transparent to all but one person (me, these days).
Ah shoot, you're right. I'm an armchair crypto geek at best.

In any case, you can choose a public key exponent large enough to still make it a hard problem to crack in a reasonable amount of time. Barring some huge vulnerability in RSA that hasn't been discovered in 30 years of public scrutiny, of course.
Yet they let one random contractor steal a ton of their secrets. What are the odds that one person out of those 35,000 that knows these secrets, if they exist, and has a conscience won't come forth and spill the magic beans.
I think this could be quite off-putting for some Labor voters and that the very loose alliance is best kept as an unspoken or informal one for that reason.

There is a very strong anti-Greens sentiment in places and Labor could not risk being entirely tarred with that brush.
Indeed. Many early cross country motorists had to buy small bottles of gasoline at pharmacies (where it was sold as some sort of topical treatment, I think.)
Rap or watch rap battles online
That's why my projects use RIPEMD rather than SHA. I prefer my encryption algorithms to not be developed by an organization that has a vested interested in them being broken.
Shi Tao
not to confuse with heli "drones" which have small props and spin slowly ( you can often put your hand in them without a scratch).
the helis as pictured arent toys at all, imo. every pilot of these know they can also cut an arm through the bone.
Isn't the biology that makes a person gay or not set at birth or in the early years? If so, treatments that provide a one-time change to gay or straight would probably come first.

The social implications of that would be interesting. How will people react when gay parents choose to make their in-vitro or adopted children gay? Conversely, how would the gay community react if no more gay people were being born?
With the store, you are asked for email and CC info first.

With the demo, you are asked for email and address info first.

It would be interesting to see which info entered gets the user to commit to the transaction better... That is, which one makes he/she less likely to back out; or more likely to start it.
Yes, I figured that was kind of the point of syntax highlighting in code.
Of course there's plenty of conformity in Burning Man fashion. It is still fashion.
The Importance of Building Company Culture in a Remote Team
Yes, and that part of his comment would also imply P != NP:

> Fortunately, there are problems which are NOT in BQP

We don't know yet if NP \ BQP is non-empty (and neither do we know if BQP \ NP is non-empty).
Anyone building a card processing business is going to have trouble finding long-term cash flow because the margins are razor thin. For example, Visa processed $6.7 trillion in transactions and made $10.4bn in revenue.

I'd rather do business with someone like Balanced, who has a larger product vision than "well paypal sucks".
My first thought, 100s of pages all in black.
FOOTBALL FOOD French Bread Pizza
Wow! thats so cool!
Right... shoes?

I haven't driven a stick regularly since high school, don't people rev match with their ears ?
We aren't: https://en.wikipedia.org/wiki/BQP

However a quantum machine that would be capable of post-selection is described by the more powerful class PostBQP = PP, and we know that PP includes NP, so this justifies your analogy.

I don't know much about quantum physics or quantum computing, so I may be mistaken, but it seems to me that post-selection is more of a philosophical construct than something that is physically possible, though.
Also keep an eye on http://cryptome.org. It looks like they're keeping track of redactions as well.
> Basically, the NSA asks companies to subtly change their products in undetectable ways: making the random number generator less random, leaking the key somehow, adding a common exponent to a public-key exchange protocol, and so on. If the back door is discovered, it's explained away as a mistake.

You have to wonder about the Android SecureRandom weakness just discussed in recent weeks:

http://android-developers.blogspot.com/2013/08/some-securera...

Exactly the situation described by Schneier. Normally I would dismiss this out of hand as pure tin hattery. Scarily, I'm actually wondering.
Could Google have predicted the recession?
This is one of the reasons I've been playing with go instead of scala for future projects. Both are great, but go compiles so much faster it's like night and day.
Or, if movies have taught me anything, after you've done your work and it's fully documented & reproducible... you'll be killed
The latter of which is exactly what a quantom computer does. The problem is that when we make a measurement, we randomly select one of the execution paths and see its result. The problem is that once we make a measurement, we would have to repeat the experiment in order to make another measurement.
There are some (if not many) mathematicians for which recognition is not a plus (and in some cases may even be a negative).
I don't think they're claiming this as a "speed reading" product in the traditional sense. They're saying it increases reading speed when reading the way most people do, which is line by line. It's certainly not likely to be useful for the kind of reading where you need to scan. But for fiction and other writing that is meant to be read linearly, the claims they're making seem plausible.

What it doesn't help with is transposing from adjacent lines when reading the middle of a column, which happens to me all the time. The middle of the column is always black, so there's not much of a cue to keep you on the same line.

In making my workaround to get a similar effect in calibre, I made a variation I much prefer which cycles red->green->blue, so that column centers are always easy to separate.
Not true. Carbon fiber props on even a 'toy' drone will cut deep like a knife. The solution to this madness is to attach effective prop guards, at least on multicopters.
Boyfriend Tracker – A New App That Made Waves In Brazil
Sigh. Having never lived on the West Coast or been swept up in Valley culture, I'm having trouble even parsing this blog post for value beyond the, fairly obvious conclusion, of BMOrg's actual mission statement (which is partly in the title of the post).

Please don't mistake me for being a jerk. Burning Man seems like it would be an awesome experience. But this article seems overly critical and self-conscious about an event that by design should eschew both.

Also, I hope you have BRC's permission to use those photos ;-)
You would be recognized inside the NSA, a large technical population.

In addition, as with the CIA and other clandestine US government organizations, they appeal to patriotism and helping the national interest. That appeal seems to be fraying somewhat lately for the NSA.
How far did you get? :-)
Is it possible to take payments using Stripe without having to ask for or provide the billing address with the transaction?

I'm looking at the docs right now and it says the "address" field is optional... But how could that o.k. the transaction without the validation process (fraud check) comparing the CC's billing address (from the card network) against what the buyer supplied?

The reason I'm asking is I sell software and the billing/shipping address is useless to me.
"Basically, the NSA asks companies to subtly change their products in undetectable ways: making the random number generator less random, leaking the key somehow, adding a common exponent to a public-key exchange protocol, and so on. If the back door is discovered, it's explained away as a mistake."

I have to wonder if, maybe in some instances, this is why it takes so long for some vendors to patch the vulnerabilities in their software. Maybe some of the problems we report were really there intentionally?
the margins are razor thin. For example, Visa processed $6.7 trillion in transactions and made $3bn in revenue.

I don't care how thin the margins are, I'd love to have $3B of revenue.
Most companies lose their independence once they take outside funding. Those investors need to see a return on their investment somehow.
Feds Beg NY Times, Pro Publica Not To Reveal That They've Inserted Backdoors
I think you proved a point here, just probably not the one you expected.
Musk: Designing rockets with hand gestures, then printing with metal superalloy
Shredding paper documents takes time. Deleting electronic records is almost instantaneous. I would say that we don't have much chance in terms of preventing it from happening.
Hmm, yes, I think I conflated the asymmetric vs symmetric cases.

Shor's algorithm is very tasty, but when the real world demonstrations at top research facilities are saying, "yes, we factored 21 into 7x3, but WITH ENTANGLEMENT"[1] it makes me think that scaling to RSA-size prime factors is still a good way off.

Listen, the US government is powerful, but building a full scale quantum crypto decoder ring in complete secrecy _decades_ ahead of everyone else? I just don't think so. Maybe I'm a sheep for not wanting to believe the government so powerful and corrupt, but the whole thing sounds like a tin foil fantasy.

I don't doubt they would if they could, though. And they've done as much as they can with present day tech: supercomputers, mass data collection, penetration of target systems, exploiting SSL's many weaknesses, tapping undersea lines, and legally strong-arming perceived threats into giving up their encryption keys. I just don't think we need to get science fiction involved.

[1] http://www.nature.com/nphoton/journal/vaop/ncurrent/full/nph...

See http://en.m.wikipedia.org/wiki/Shor's_algorithm
If we stipulate the possibility of a person of conscience in that pool, can we then infer the possibility of people of "evil intent"? By that, I mean people who will attempt (carefully of course) to use NSA knowledge for their own enrichment, apart from the "accepted" goals of the NSA.
Not everyone works for public recognition. There are enough people who are willing to work on neat problems in exchange for plenty of money who are also willing to forgo public recognition.
I wonder if they have a library of shortcut gestures built in. Advanced CAD users are often keyboard wizards.
I think rather that he offered to do the data entry, and then later on once listing agents started to get hits through his service, started to charge them a fee. I may have misunderstood.
A friend of mine has been doing similar things with the Swagger documentation spec (https://developers.helloreverb.com/swagger/)

While browsing the docs in a web browser you can fill out some fields for input and see what the output for that input is.

My friend forked it and extracts and lists any example data so you can click to load that example into those fields (my idea!). I tried it out and it's a very nice way to learn/explore a new API, especially testing edge cases where the docs are ambiguous.

It really hits a sweet spot when you have documentation browsing, live execution and example data. I think creating a similar interface combining docstrings, the repl and example data from test fixtures would be a nice tool to have (I find doctests to be one of those things that are better in theory than in practice as they get too long and maintenance is annoying, although perhaps a more literate style in your source code would change that).
It took me less than five seconds to make the SSH changes and less than five minutes to set up the intermediate server. Now I also have a cache for when GitHub goes down (all the time.)
we use braintree and it works fine. wouldn't mind staying, or 'switching' to square.

if paypal acquires them, we'd probably switch to square.
I believe the point is that with the magic numbers provided by the NIST you are trusting that those numbers have no side effects that decrease the content that you're encrypting to the party that decided on producing those numbers in the specification.

(tin foil speculation) It isn't known if the NSA already has methods that, with this specified set, is more easily broken or is already broken.
What can be done to prevent the "Connection to github.com closed by remote host" error that comes a few minutes after a push/pull with the Control settings enabled? Since I'm normally in vim by then, it ruins the layout.
Could We See A Finnish Smartphone From Nokia In 2016?
Deleting electronic records is particularly instantaneous if they were stored with that eventuality in mind. I hope they weren't. I hope they have extensive unencrypted cold backups.

I am probably being very naive to think that we stand a chance though.
Apologies, I think you know the answer, but I couldn't understand what it was from this post. Could you reword that?
>>As rayiner pointed out, President Obama could end any of these programs with a phone call

At least the ones he's aware of. The US government is an extremely massive and complex entity with multiple layers of compartmentalization and secrecy. I bet there are programs that even the POTUS doesn't know about.
Discussion from earlier today for WSJ version of the story (which has more information than the Post): https://news.ycombinator.com/item?id=6336803
How to crack my software and add a back door
I want to take a step away from the personal privacy violations here, and approach from an angle that (unfortunately) would motive those with money to lobby against this: your business secrets are out there being collected and reviewed by an organization composed of the smartest and most secretive people in our country.

There really should be no doubt at all that there is corporate espionage and insider trading going on. On one hand, if the NSA approached this with giving helpful 'heads up' when a US-based multinational's overseas factory might be planning to strike, or provide their foreign competitors' private dealings etc etc, they could win brownie points.

But you know it won't stop with screwing around with overseas business. If they are not already, you can bet that internal insider information is going to be traded and sold. You can't trust a rogue, so as long as it is not dismantled they are indirectly if not directly a hostile threat to your ability to conduct business.
Maybe Dalvik will compile down to run on top of ChromeOS.
I think there is no solution that combines
1) decentralization
2) governance

Without 1 internet will die -fast-, so giving that up is not possible, aside from being a horribly bad idea in itself.

So there is no "governance" solution to this. There is a software solution though.
Ask HN: What security mechanisms have been compromised?
In the wave of recent disclosures of the NSA's intrusions, I'd like to know more about security/cryptography practices. Most articles are geared towards one of two audiences: the consumer (make it simple), or the expert (discuss extreme details). The technical details are hard to come by in a way that I can understand.

Many articles say, "If you are not an expert in cryptography, don't try." Well, I'm not an expert, and I don't want to fake it. I want to understand to the best of my ability, and make informed decisions.

I am a general developer, and I'm one of many who needs help understanding how to apply recent news to my development practices and production environments.

Can someone summarize what general developers should be thinking about moving forward, that we haven't been considering before (i.e. not password management).
It's bad design for mobile on top of poor prose. I can barely scroll to read it.
I get into these situations and find myself fighting the situation alone...

Do you care to elaborate on this? Have you had problems specifically with PayPal, or with other unaccountable corporate bureaucracies?
An upvote might mean "This is important", or "This has good lessons", though, and specifically saying that you enjoyed reading it, or that it was written well, is a slightly different compliment.
The most impenetrable book I remember reading was A Tour of the Calculus by David Berlinski. Here's a representative sentence:

Unlike Euclidean geometry, arithmetic rises directly from the wayward
human heart, the lub-dub under the physician's stethoscope or the lover's
ear (sounding very much like the words "so soon, it ends"), impossible to
hear without a mournful mental echo: 1, 2, 3, 4, ..., the doubled sounds,
that beating heart, those numerical echoes, cohering perfectly for as long
as any of us can count.
Ha, wouldn't we all :) My point is only that it's damn hard to get to that number, and if you're a startup who's raised many rounds of capital, after a few years of grinding an acquisition by a company like paypal (read: ebay) starts to look like a nice option.

To put that Visa number into perspective, according to various reports Square did $15bn in transaction volume last year. So, if you use the same ratio of transaction volume to revenue (0.16%) that would put Square's revenue at $23.2mln. For what it's worth, that's probably a generous ratio, as companies like Square and Braintree are all use Chase payments tech as their processor, which itself has to pay out to Visa and other processors. So these firms' margins are likely much lower than Visa's.

As either a customer or a partner of one of these companies, I'd prefer doing business with a company that's building a base that doesn't essentially require acquisition if they can't grow to Visa's size.
Dropbox Y Combinator Funding Application
I see two much more plausible scenarios:

1) Publish. Get famous. Guaranteed employment for the rest of your life.

2) Use it to break into systems. Become rich or get caught and jailed, likely for life.
How did the difference come about? Did the Times and Guardian redact the documents themselves?
Hit up a thrift store. It's kind of a fun read, well, depending on your tolerance for technobabble I guess!
Visceral description has its place, but it needs to be used sparingly. This guy's prose runs so purple it verges on eggplant (or, as he'd probably say, aubergine). And the various slips in and out of Aussie vernacular are jarring. I understand the intended effect, but it's like salt on your scrambled eggs: a little bit goes a long way. Too much, and the salt's all you can taste.

He can turn a clever phrase, but he tends to indulge himself. When he does, he gets way too cute. He's got the descriptive power to be a great writer, but he needs to be a better self editor.

Reading this story reminded me of my endurance-slog through the first few chapters of A Game of Thrones. George R. R. Martin is a fantastic storyteller, but he's also a serial adjective abuser. Same thing here. The story almost gets lost in the words. What we gain in postcard moments, we lose in pacing and flow.
Attention deficit disorder at Google
Friend of mine said recently "What about Netflix for books? Why doesn't it exist?"

I first pointed out libraries and then made exactly your point about consumption. People burn through TV show episodes or movies more than they do books. And on top of that, I'd say a broader set of the population watch TV/movies than read books, which makes for a smaller market.

I am currently part-way through 6-8 books. I haven't managed to finish one in about 12 months!
Growth Hacking is B.S. - Here's the Marketers you should follow instead
Growth potential, total potential market size, other possible revenue sources (e.g. Square Marketplace).
> -Memory footprint matter to you (and you don't want to pick C)

Is there any clear evidence of better memory management in Go comparing to JVM?
Yes. According to Reuters:

"The New York Times and ProPublica said they were asked not to publish their findings by intelligence officials who argued that their foreign targets might switch to newer forms of encryption or communications if the NSA tactics were revealed. 'Some specific facts' were removed, the New York Times said. The articles do not say which mainstream encryption systems have been effectively broken."

http://www.reuters.com/article/2013/09/05/net-us-usa-securit...
We had downtime for this, so I am 100% sure. We isolated it to the key, and reverting the cert/key back to 1024 fixed it. It was just an option on GoDaddy one of the engineers picked to generate a 2048 cert. They only offer 1024 and 2048. One key worked, the other didn't.
I agree that any information left over from a totalitarian regime should be preserved and available to the interested parties. There's a great deal of value in preserving the shameful events of the past.

That being said, if I had to choose between stopping "shredding" (or whatever form the digital equivalent takes) and life / freedom / order / etc, I think I'd let them shred. We want those records, but they're among the least of many goals.
ARP spoofing explained
The cooling of the earth and why the core is hot is actually a very interesting topic. Lord Kelvin (who has the temperature unit named after him) came up with an argument that the earth had to be 20 to 40 million years old if you assumed it started as a molten lump of rock and solved the equations for how long it would take to cool. (This age for the earth made both the evolutionists and creationists unhappy, by the way.)

He had a very clever argument, but the factor he was missing was radioactive decay, which provides an additional heat source. He also carefully figured that the Sun couldn't be more than 20 million years old, but here he was missing the existence of fusion as a power source.
We can and we must.

I'm glad that Bruce Schneier has now had a chance to view some of the primary source documents from the Snowden leaks, because I trust him to speak frankly and I trust his technical ability.

(I'm referring to http://www.schneier.com/blog/archives/2013/09/the_nsa_is_bre..., not the above link).

Both he and Snowden have essentially said that we can still trust the math. Modern symmetric crypto has enough safety margin that even extremely surprising breakthroughs wouldn't give the NSA practical decryption capabilities. (Asymmetric crypto is less certain, but even there Schneier still says discrete-log-based methods with sufficiently large keys are likely ok, and I would bet he's right.)

So the bottom line is this:

- using crypto correctly really matters, because they really are out to get you. Most software gets it wrong, not because there are no good cryptosystems, but because people are ignorant of how to do it right.

- build attack-resistant organizations, not just protocols. The more transparent, flat, and distributed an organization, the harder it is to secretly coerce into cooperating with the NSA. It's a lot harder to force a backdoor into Firefox than into Chrome.

- it turns out open source really matters. The tinfoil hat brigade is vindicated. Closed source vendors really are actively working against their customer's security.
We do however need "governance" solutions to ensure that the software solutions remain legal. Decentralization and cryptography are only worth so much if useful solutions using them become illegal.
The problem is that Nokia has brand power. Microsoft is incapable of producing this in their new products because every product they've created in the past 15 years has been painfully short-lived. They create the Zune brand, tie it to the Windows Phone brand, then destroy it. Their various home apps like gallery in Vista get dropped for Windows Live in 7, which in turn is dropped in 8. Their near-constant ADD prevents them from creating solid brands outside of their trusty '90s-era products like Office and Visual Studio and Windows, and even then nobody loves these brands.

I don't trust Microsoft to be able to create a phone brand that has the kind of resonating name as Nokia.
Have you heard of Khan Academy? You don't need a super-smart parent to teach you anything at all.
Proper Unit Test Structure in Apex