skysight-inc/HackerNews huggingface dataset:
I think he is trolling, with just enough information to sound correct. The Keccak authors have proposed a "duplex construction"[1][2], using the arbitrary length inputs/outputs and the lack of a output transformation in the sponge construction, that could be used for authenticated encryption. The NIST has yet to included that use case in the SHA-3 standard. So, until there is enough solid understanding for its correct use and tested implementations with that use, it is just a hash function.

[1] http://sponge.noekeon.org/ (end of the page)

[2] http://sponge.noekeon.org/SpongeDuplex.pdf
It's not Apache's fault PHP sucks. Use a better language and Apache works fine with a modern worker module. The issue here is not Apache, it's PHP.
I think it is. I remember the name of the company was hidden reflex. One of my classmates was working for it.
How does it detect me being on (or moving to while still open) a mobile or otherwise metered connection so that it can disable itself? If I keep the site open in a tab for an extended time but not currently browsing the site, will I become a dedicated server?

I don't think you can do the first reliably and if you can't, you shouldn't do this at all. It's evil and need to be stopped at the browser level.
>Pioneer doesn’t identify the phones supported by NavGate, but it’s connected via USB so order an extra long cable now. ... sales have only been announced for Europe for £599

What? That's crazy. Mini projectors can be bought for about $200, and this could easily run a slow display over bluetooth or literally anything over wifi (then it's just a video stream to a mini projector with a special lens and a piece of glass).

Good idea, bad idea, I wouldn't even consider this with that kind of price tag.
Chemical weapons and the scientists who make them
I've been waiting for a game similar to Age of Empires to come but this just completely destroys Age of Empires, Thanks for this awesome game I will support.
Folks who bought in April will be early adopters and will see incredible profits too if they don't panic sell. It's a matter of logic. Like I said, it can go to 0 or +inf.
That button is enabled by the email sender using Schemas: https://developers.google.com/gmail/schemas/
> You don't need to treat me like the bad guy when I'm clearly not exploiting you.

I'm not seeing where Google treated him like a "bad guy"? It sounds like he was expecting Google to sing his high praises, which of course didn't happen. The bug bounty payout also has qualifications that the author didn't come remotely close to meeting ( http://www.google.com/about/appsecurity/reward-program/ ), so I have no idea why he expected he should get paid.

By his own admission he doesn't know how the attacker got access to his account, nor where the $20k came from. So what vulnerability did he find? I guess Google's failure here was to protect the author from his own lax security.
> dear people who make marketing email systems, please stop requiring me to log in when I follow your unsubscribe link.

Isn't this illegal according to the CAN SPAM act, at least for the types of emails it covers?
http://www.business.ftc.gov/documents/bus61-can-spam-act-com...
This is like Zappos or a ton of other companies that offer free return shipping.. very little correlation to Warby Parker as mentioned.
The 1 in a million math of finding a co-founder.
NSA / GCHQ Surveillance: What we have learnt
Kaspersky identifies modified versions of popular applications. I suspect they don't know Epic is a "legitimate" modification of Chromium yet.
That's your government's failing, not the market's....

Real capitalism would have been letting them fail, but I don't know if Americans would have the stomach for what would have happened afterward...
Protect your company from cyber attacks with a responsible disclosure policy
I failed to follow how author introduced "attacker" to this story, when there are no visible suggestions, only his own old credit cards on file, to which he didn't incur any charges and all that must have happened due to routing mistake crediting someone's funds to his account. Something which must have been rectified very quickly even without author noticing.
The best tech startup spoof video ever: Vooza on Radimparency
It's very common but became really expensive recently. More on this: http://qz.com/121726/groupons-brilliant-marketing-campaign-i...
> why such skepticism?

Because of all the parts you leave out. What's your incentive to give away money? Presumably to improve your book. If true, that means purchasers are getting an alpha release, an unfinished work that they're going to help you write.

Young people won't be likely to understand this, but if they accept the discount, they're test subjects, not students. If they buy a Python book in a bookstore, they can first read years' worth of reviews to know what they're getting into.

> i am trying to give people an incentive to learn and to actually stick with something.

No, you're field-testing an unfinished book with the aim of rewriting it. Want my advice? Tell it like it is. People are more likely to cooperate if you're not hiding anything.
> Insulting me is a pretty poor way of being persuasive.

I didn't insult you, it was an honest question as I can't assume everyone here is a native English speaker and your confusion could have easily been a language thing.

> And English is my first language, thank you.

OK, great, then I don't know what was at all confusing about what I said.

> Apache as much as showing that, out of the box, Nginx still is a better option than Apache.

Such blanket statements are simply unsupportable. It depends entirely on the workload, needs, language, and configuration. Out of the box, Apache isn't configured for the process model that everyone complains makes it a pig.
A third-party proxy that I don't select is still sketchy.

I've never heard of Spotflux before, and don't know that they aren't owned and operated by one of your advertising partners.
I installed Apache recently along with ownCloud on my Raspberry Pi. I had to strip it back out when I realized that Apache worker processes were keeping the CPU and RAM at 100% the entire time, when nothing was even connected to it.

I used to use Apache all the time way back when. The memories that stick with me are of a massive tangle of configuration rules, mod_*, and htaccess files. I've never looked back since going the way of Nginx. It's just so lightweight in comparison, both performance- and maintenance-wise.
Excellent observation, thanks.
If you need a template to work from, you might find this handy:

https://github.com/neykov/armboot/blob/master/Makefile

It's a Makefile and basic framework for creating bare metal projects on the STM32 using Rust. Rust emits LLVM, which is then compiled to the Thumb instruction set for use on the Arm device. If py2llvm emits proper llvm, it should work if you switch the Rust compiler out for py2llvm.

Note that you'll need clone and build the LLVM repo directly, since the latest stable release of LLVM (3.3) doesn't yet include the brand-new Thumb mode that you need for the Cortex m4.
I admit I had some edge due to being a math prodigy long, long ago, but HR did teach us data structures and algorithms. We re-implimented underscore from scratch, we built our own hash tables, did recursive descent, etc...

While I won't claim to have been taught everything about data structures, I made it through 5 hour in person "implement a prefix tree on a whiteboard"-style SV tech company interviews. I have also been able to jump into grad-level CS courses afterwards.

I feel that it was a way better investment for me than spending three months or even three years working on a CS degree would have been. In many ways it reminds me of the difference between studying Japanese at a university vs learning Chinese at an intense language school in Taiwan. Intensity brings outsized returns.
The quality of the shirt doesn't determine the quality of the business, or the quality of the comparison in the headline.
Good point. As someone who lived in Nanning (not Nanjing, Nanning is the province across is the one above the Vietnamese border, across from Guandong/Hong Kong), it is intriguing to me how few people know they border on almost completely separate languages.

I took time to learn Mandarin, and could string sentences together. I could not even say thank you in Cantonese, once, without others laughing at me. The Cantonese-speaking kids I knew just say just give up.

Then I moved onto Arabic, that is another fun story.
The biggest argument people seem to have is that "users who are not tech savvy won't remember to log out". Quick wake up call: users who aren't tech savvy don't know what "remember me" really does, and chances are they see it as a "don't make me log in again" option which they will always prefer, even if it's not as secure.

Typical users don't have a concept of security, they only want convenience.
An excellent summary. Trying to get everyone in China to speak Mandarin would be like getting everyone in Europe to speak English. It will never be 100% unless you obliterate other languages.
I think a heavy theory focus is very less likely to be useful.
In my CS degree, we learned some cool theory. Eg I learned what big O was, which these guys probably won't.
But I think for most people it's much more important to learn to make things than to learn advanced theory that only a very select group of programmers use (eg compiler writers).
And I know how to learn any theory I need to learn or any language I need to learn. my CS degree never taught me to teach myself, though, I had to do that.
That's ironic since counterterrorism[1] is the supposed primary mission of the NSA surveillance enabled by FISC / PATRIOT Act.

[1] Provided that you think a simple Googling of "backpack" and "pressure cooker" in the days following the Boston Marathon Attack implies a probable link to terrorism.
Because if you do that you should be indifferent to whether you win or not. Dutch auctions aim to solve that problem.
Ok, then the linguists I read tend to be splitters rather than lumpers. =) This is particularly drama-prone in re: the Chinese languages/dialects due to the tendency for Beijing to attempt to cast all speakers of Chinese languages as in fact speakers of a single language, as part of their attempts to create a single unified Han identity.

But in the end, I really believe that if it weren't for the common written language, no one would ever think of Cantonese as being just a dialect of the same language as Mandarin - the differences between the two spoken languages are so massive.
While it was dealing with C strings, some years back I was curious about Firefox's poor Sunspider showing, so I dove into both the benchmark and the code, determining that-

a) SunSpider was overwhelmingly a benchmark measuring string concatenation performance.
b) Firefox had slow string concatenation.

The solution to b) was trivial -- whenever Firefox saw that you were doing str = str + something, it would realloc str to the new length of len(str)+len(something)+1 and then strcpy something to the tail of str. By changing the code slightly to trade a relatively small amount of memory (in most situations), making every realloc size to the next power-of-two greater than the new combined length, this improved SunSpider performance 20x+ because the vast majority of concatenations could be done in place.
It's just as easy in Apache.
Went to nginx on OpenBSD myself, mostly because at some point the latest lighttpd was not playing well with the latest OpenSSL. Never looked back since.
Samsung Galaxy Gear - Smart watch by Samsung
http://home.web.cern.ch/about/updates/2013/02/cern-and-oracl...

http://ais.web.cern.ch/ais/presentations/eoug99/Implementing...

google:// Oracle CERN Technical training: available places in forthcoming courses
What is being done here to combat browser fingerprinting? This seems like the most challenging threat to anonymity.
Can you recommend any further reading on these innovations in teaching math? I'm interested, as I'm in a similar boat with my children.
Britain and US question purpose of United Nations security council
Big fan of AOE also this looks much better been waiting for something like this for years.
Sr Software Engineer-Fulltime 
Full time.. no remote work. We are happy to relocate you from anywhere across the coast. Ishi cannot sponsor any visas at this time.
Ishi is looking to hire extremely talented people with creative and out of box thinking to build, develop & deliver complex project solutions in security, compliance and mobile platform areas. Some of the cutting edge technologies we work with are Hadoop, Hive, Mapreduce, Cassandra MongoDB, NoSQL, Scala, Node.js, HTML5, Grails etc. Ishi offers competitive salary with great benefits and really cool office space to work.. check it out!! https://twitter.com/workatishi . Email me your resumes @ jobs-jc@ishisystems.com.

Java Engineers & Technical Architect :
Tech Stack: Java EE stack, Spring, Hibernate, Big data, NoSQL Databases, Scala, Cloud Computing, Messaging services, Grails, experience in architecting and developing large, complex enterprise application systems.

About Us: (www.ishisystems.com)
Ishi is a software product development company located in NY Metro area, providing secure IT services to telecom, mobile, information security and compliance areas. We build game-changing software products and solve complex computing problems for both businesses and government. Our specialties include building and delivering customized projects solutions in High performance computing, Big data, Social media, Security, Compliance and Cloud services.
blutack, I apologize for the trouble you got with EPD. If you can spare a few minutes to explain me the pb, I will try to understand what went wrong (see my HN page for contact)
> The user session is kept in a browser cookie, and you have to live with it. This means that the session space is limited in size and type: you can only store strings. If you need to store objects, you’ll have to use the caching mechanism we discussed before.

This isn't quite right, or at least is presented weirdly. Caching is not done on a per-user basis whereas sessions are tied to a user. Scala chooses to use client-side sessions so that applications are automatically non-sticky which allows for effortless failover and horizontal scalability.

The caching mechanism will cache the output of a template but it's going to be cached for all users. Again, it makes for easy horizontal scalability, but you'd never say that the caching is an alternative to session data. They're for two totally different use cases.
As somebody who has written a lot of Java code before (read imperative) and now have had the opportunity to write more JS (which makes it a bit easier to write Functional) and also Scala, I think the process to "think" functionally takes time.

Sure, its easier to apply it to the mathematics domain and harder to something that many of us might think in OO. I guess it comes with taking small steps (as someone already said in a comment). Also, making conscious effort to keep questioning how functional our code is helps.

I saw this talk on functionatalks.org by Paul Chiusano (author of Functional programming in Scala)
http://functionaltalks.org/2013/06/20/paul-chiusano-how-to-w...

If you see he repeatedly asks how can we make it more functional. I think that is kind of thinking we need to practice. Its hard after too much of imperative thinking I guess. One more thing I have heard is read SICP and forget OO for a bit :).
You’re Not Finished Selling Until You Change Your Customers Habits
I think you've really got something here. I've shared it with a few people, who said they'd love to see a recurring revenue version (that incorporates growth over time, and churn).
> So, until there is enough solid understanding for its correct use and tested implementations with that use, it is just a hash function.

I don't understand the logic here. Isn't the use of Keccak as a hash function currently largely-untested too? I would think you'd avoid using it at all in a production system right now, but if you're willing to use the algorithm why not use all of its capabilities?

And I'm not trolling.
>Sounds like your OS was the real culprit for not keeping up with newer releases.

Newer releases are quite bad from both a security and a stability standpoint. They did not make configuration simpler, so the idea that using the last reasonable release of apache was the problem doesn't make any sense.
Sorry for the late reply. Thanks for the offer. It was an internal Wiki for my department at a small college. I used it to distribute lecture notes and things to students, and share other resources with other faculty. I also created a space for students to use it for their projects. It is defunct now. I got too busy last year to keep up with it, and haven't replaced it.
> Isn't this illegal according to the CAN SPAM act ...

Yes, it is. The Can-Spam Act requires a simple opt-out procedure. Therefore requiring people to sign up in order to opt out is a violation of the law. Also, if you sign up, you become a customer, and as a customer, the company acquires the right to spam you till the sun goes down (the Can-Spam Act doesn't apply to customers).
That's not quite what I support - I support identity that I control. Centralized with me (for every 'me' who participates). Not with any third party.

Filtering this stuff as spam is a workaround, though, not a solution.
Applications open Winter 2014 Funding
The only correlation I see is that the polos are the same price as Warby Parker's eyeglasses. In my mind, Warby Parker saves me a bunch of money over the alternatives. This is not the same buisness model.
So now any standards in the 2006 NIST requirements are suspect ...
YC Will Now Fund Nonprofits Too
But I like the Scottish accent! Understanding someone from Arberdeen is tough though.
NSA Codebreaking: I Am The Other
Thanks, I hadn't heard about that - it's very close to what I'm looking for. I'll be taking a closer look - though without uptake across major service providers, it'll likely remain niche.

(I say this after having only skimmed it - could be wrong.)
I don't see the connection either. Warby Parker provides an experience that differs from their competition (luxottica) and happens to be significantly cheaper. How is Vastrm any different than a company like BlankLabel?
that makes better sense for where you are coming from. however, you are assuming it's an unfinished book when in reality, the book/course have been out for nearly a year. they are complete. we've had thousands of downloads.

your point is valid. but it's a fallacy based on a hasty conclusion. still interesting feedback though. curious how many others will come to that conclusion.

any ideas on how to reframe the wording of the website to reassure people my motivations for doing this?
I know all this, but I still don't think it's any harder than other languages. I have been following Meteor since the beginning, but I'm not impressed anymore to be honest. Seeing the video for the first time was quite shocking, but in the end they didn't really deliver. Using it is still a pain.

> try doing that in PHP

Meh, PHP is still the king, and it will stay there for a long time. Languages and platforms with crazy features pop up every day, but that's not enough for actually getting things done. You need a community, mature libraries, and a healthy ecosystem in general.

If you want something challenging try Clojure. It is by far The Best Language (tm) IMO, but you still can't even build a website with it. The only web framework available died and got separated into libraries, and everyone ends up wiring everything the way they can. Some people use Java libraries, some others reimplement everything. It's pretty messy.
Conspiracy Theories and the NSA
btw. I wonder if this would also work as smooth as it does now in webkit, when you would add all the -moz- to it and then test it on a Firefox OS phone.
CPUs of this era were normally multi-cycle for every instruction, but I never expected in the Z-80 at least one cycle was because the ALU was only 4 bit. Love the detailed analysis - and this is just the tip of the iceberg of that site.

One thing I'm missing from this article is an approximate gate count. Obviously going 4 bit was motivated by gate and area saving, but halving the ALU size isn't going to halve the gate count or area, because it still needs the same width bus and extra latches for the partial answer. Or was it critical path? What kind of saving was it from an 8 bit ALU?
Preview: building and storing Docker containers to S3
Guy had no idea what the attack -- if any -- was. All he noticed was odd activity on his account, which as easily could have been human error at Google.

However as to his point that this is a massive imperilment of Google : Not really. Google ads run on a bid system, so introducing fake money doesn't actually reduce the amount of money Google actually makes, and may actually increase it. I get $100+ AdWord credit offers from Google literally monthly, because the effect of my credit is only that I push up the cost for everyone else. Obviously there are limits to this (when advertisers simply bow up) but unless the fraud was really widespread it wouldn't damage Google.
You guys are using something like git right? You have a tag for the build you created right? Why not just release a read only github account or tarball of the source released with epic to give people audit peace of mind now. Add a bunch of disclaimers saying 'we are not ready yet, please only use this to audit for now, we'll have a proper open sourcing setup soon'.
Diary of how my game got to #2 in the iOS App Store
If it's not open-source, I won't use it in a production environment, period. I would never willingly tie myself to something that I have absolutely no control over, and could up and die or change models at any moment.
I actually meant all the sides. Because Sweden ended up doing socialism best.
The Waif Startup - When Lean is not Enough
Yahoo publishes first government transparency report
Your startup will die, if... 
What are some of the most common mistakes founders make when building a company?

What are some insights you can share with other entrepreneurs about your experiences?

What's the biggest mistake you've made so far in building your startup? Have you fixed it or improved?

Some things to think about are:

Am I solving a problem people actually have?
Hiring the right people
Did I choose too small of a market?
In building my business infrastructure, did I choose a solution that solves my problem NOW or one I could use for years, as my company scales?

Looking forward to your thoughts and insight!
"Weren’t the parents who volunteered in the school community showing their children how much they valued education?"

Because phoning other parents for money or collecting tickets at the fall fair moon bounce just screams "I value education!"

I volunteered because they asked. Once at least I did not volunteer, my wife volunteered me.
"Free people" in this case includes the government-funded Michigan University.
CUDA Performance: Maximizing Instruction-Level Parallelism
Yes, that's why in the strictly regulated European telecom market consumers are systematically better off than Americans when it comes to cable, mobile, internet etcetera.

And not just on lower prices and better service, but actually more freedom and choice.

Cross-border roaming was the last thing that was still unregulated. Other than that, Europe is a telecommunications paradise for businesses and consumers compared to the US.
Interesting. On an somewhat related note, I would be interested in hearing his opinion on math textbooks.
In support of pedantry, when I first read the post I thought this was going to be an RTS about managing an open source project, which sounds like a slightly more masochistic version of desert bus.[0]

[0]: (http://desertbus-game.org/)