skysight-inc/HackerNews huggingface dataset:
I agree. I think the products are similar in composition. Ensure is a bit expensive - $10-$20/day, and I think he is targeting closer to $5/day. The "convenience" marketing strategy is also a differentiator. If he is successful and creates a new market, I am sure other food companies will offer similar products.

Ensure has more sugar than I would personally want. It is designed to be palatable so old people in nursing homes will actually drink it. Soylent seem to lean toward better nutrition instead of palatability.
What, when, how, why HowToCode.io - a new FAQ
English is not my native language. I actually appreciate corrections.
I was thinking the same thing; in such a case a // coded this way for cache coherence goes a long way.
That's really too much praise, and I'm definitely not the first person to come up with this. See: Verbal Expressions and TextualRegex before that.
Try it on your phone—many people find it to be most useful there.
One thing I have noticed is that every iPhone commercial I've seen, regardless of carrier, looks like its been approved by Apple in name as well as appearance

Those are ads that Apple is almost completely paying for it, but via a partner agreement rather than directly (which is how there can be many times more Apple ads in media, yet people talk about how little they spend compared to Samsung). Most carriers also have carrier-specific, and sponsored, iPhones ads, and they do all of the same things that every "Android" ad does.

As for Droid...yeah it's on Verizon, as that whole line exists only for Verizon. Not sure what the relevance of that is. If the name includes "Droid", you don't need to see red hues to know it's Verizon.

This is a selectivity bias writ large. It reminds me of conversations shortly after Apple releases a product listening to people declaring how wonderful it is that Apple focuses on experience and not specs...after a release that is a sea of specs.
Steroids.js for PhoneGap
I tend to write such code without comments (using some pseudo-language):

Protocol = 'https?://'
Subdomain = '\w+'
Domain = '[-\w]+'
TLD = 'com|org'

Re = WholeTextMatches(
Protocol + Optional( Subdomain + '.')
+ Capture(Domain) + TLD)

Typically, I wouldn't go that far, but storing separate parts into well-named strings before assembling the entire regex, IMO, makes things much more readable.
Bug report: try using the bookmarklet on this: http://docs.oracle.com/cd/E17236_01/epm.1112/readme/hss_1112...

It shows only the first paragraph.

(I know, I'm a sad person, but that's the sort of text-heavy doc I have to read all day).
In that example I wanted to show off a the matching and multiple syntax.
I wouldn't expect Windows support anytime soon, especially Windows containers running in a Linux host using LXC as the "hypervisor".

Windows containers running in a Windows host is much more likely. Commercial solutions like Virtuozzo Containers offer Windows on Windows support today [1]. Someone could implement a Virtuozzo-for-Windows provider for Docker, but that seems like a long shot.

[1]: http://www.parallels.com/products/pvc/what-s-new-for-windows...
> If past freezes are any indication, the best way forward is almost certainly to abandon attempts at redress through customer service and simply make as much noise as possible in the press to get PayPal's upper management to take notice.

As just proven by PayPal releasing the funds after Ars ran a story.
Wouldn't it be relatively easy for the NSA to run ubiquitous MITM attacks using some certificates in the certificate chain that they have compromised? That way all they need to do is compromise certificates and get in the middle on a large scale (which could be done automatically perhaps) instead of breaking encryption.
It's not meant for simple regex like that. It's meant for complex composed regular expressions.
> Dead on, absolutely. Number-theoretic public-key crypto is terrifying.

Why is that?
OK then. But look at state of the art solutions I mentioned ;-)

Perl5's R::Grammars is doing it the same way you do — it generates one-big-scary regex. But this lib is nowhere close to what it can do.

For idea: it will provide fully parsed struct like {proto: 'http', domain: { all: 'www.exampe.com', subdomains: ['www','example'], tld: 'ord', ... }
Agreed, when I heard the news before, I was under the assumption that actual design was being done with this, and not viewing the product per say. Still, looked like it was a pretty natural system to use. I'm sure it'll be useful, just not as groundbreaking a change as we hoped.
Thanks for the thoughtful feedback—we are talking with Evernote about Clearly integration. They have a great platform and we hope to integrate with them soon!
> A noisy client will be able to crash our server, as c.write is non-blocking and will buffer an infinite amount of data in memory (this can be partially solved with a node.js Stream API, more on that later).

This doesn't make any sense at all.

First, c.write would not buffer what the other server sends. It only takes what you give it. Maybe that was a typo.

Second, non-blocking and buffering are practically in perfect opposition to each other. For a system call to buffer an indefinite amount, it would have to block. That's exactly what node was designed to never do. node never buffers anything -- not when I tried it, at least. If the client sent a long stream of data, node would call the read callback every time the kernel received a packet or a kernel buffer filled up. c.write() would return immediately every time, and a return packet would get sent out. Nothing bad would happen.
You probably know what I was getting at. Public-key crypto is very important in today's world. If we can't use the current system, we need something to replace it. Pre-shared keys is for a different scenario.
Doing things that don't scale: Adventures in customer discovery.
Good point, and more importantly I should be making use of the special Ruby matchers.
What players think about narrative incoherence in anachronic games
The US? Im British, what about the damn UK government? We don't have a constitution to fall back on, and the human rights stuff we do have this government in particular sees as some sort of clear and present danger. Worse still, it turns our that we the British are a spy hub for the US to spy on US allies, Europe. Not to mention all the other countries like Australia and New Zealand who cant wait to get in to bed with the US jihad on freedom.

The West has lost the plot and any sense of reason or proportion.
Exploration Of The Universe Sped Up With New Computational Approaches
Don't forget the Surface Starter version that only lets you run 3 apps at once... wait, that would be a step up.
That's the brand association though. Surface by itself is a well engineered product.
I would really like Schneier to promote the idea that all countries need to pool their financial resources together to create a large, well funded organizations that hires more mathematicians of a greater caliber than the NSA.

The NSA was originally tasked with protecting the communications of the United States Government, its People and its Institutions. A large portion of that is encryption research. Now it's doing the opposite, clearly attacking many of those protections for its own means. Organizationally it can no longer be trusted, and we now need a second organization to restore order. Every country in the world that is not the US or the UK has a very real interest in the existence of such an organization. It's both an issue of economics and sovereignty.

It is simply not possible to maintain the sovereignty of your country under the status quo. What's worse is that a country may be losing sovereignty in ways that they are not even aware of.
The OP took the elements of the original announcement—the pretentiousness, the naïve pomposity, the buddy-buddy informality—and turned them up to eleven. The result is an effective send-up of a post that richly deserved to be mocked.
I wish they had an iPad app or a way to send books to my kindle. Reading on my phone sucks. :(
We actually match (and beat) the VerbalExpressions standard if you `require "hexpress/verbal_expression"`
> factoring sufficiently large prime numbers

You probably didn't mean it that way but I feel like fixing that. Prime numbers have no factors except for 1 and themselves. That's the definition of a prime number. What you're thinking about are composites which are a product of two large prime numbers.
It isn't a secure product, but it's a crypto product something that has decent UX that isn't from a huge compromised company such as apple or google. In this space it makes it rare. It all depends on your adversary. For family members, stalkers and most employers, it's probably great.
When you eliminate the falsifiable, whatever remains, however improbable, must be a conspiracy theory
Trying a different life path in Ecuador
Considering the composability I've designed here I'm not sure how you think it wont "enable users to create more complex patterns"?
To be blunt F*ck PayPal. I dropped them and started using Amazon payments. Amazon in my opinion is a much better company than Paypal.
The secret to scaling unscalable social networks: Network Clusters
JFK passage was definitely harder to read. Even so, I got:

"It looks like BeeLine didn't improve your reading speed this time through."
(Or imagine if they called it the "DirectX Box"!)
The newsonomics of big sports money — and news » Nieman Journalism Lab
The problem with that is it isn't very scalable. The NSA being able to spy on the world is very much a very recent economic reality.
I'd love to have that kind of screen on the x230, touch screen is not something I really need nor want, while a good screen is still something that seems hard to find on a high-end mobile laptop.
You are missing both Schneier's point and mine. The point is that if you can contrive of a way to (perhaps inconveniently) pre-share static keys, you should consider doing that instead of relying on number theory to protect your secrets.
We absolutely plan to make configurable versions available—this is just the first iteration. As for your concern about extended use: the only thing we've heard so far is the precise opposite. People have contacted us to say that they experience a "training effect", so to speak. Apparently reading with the color gradient helps them read in black for some period after. Would love to know how it works for you—feel free to contact through the email address on the website!
BuzzFeed Aims for $100 Million In Sales 2014
Lots of failure modes.
I've been working on a similar idea for replacing types. If you can specify how to take apart a type, name the parts and put them back together you can then get validators, pattern matching, recursive-descent parsing with backtracking, generic traversals, lenses and generators more or less for free. By using simple data-structures to describe the types and compiling them to clojure at the call site you can have first-class types without being penalised in performance.

It's still work in progress but there are working examples as of https://github.com/jamii/strucjure/commit/e0e56a25c1b880c382...

(using strucjure.sugar
;; define a pattern
(def peano-pattern
(graph num ~(or ~succ ~zero)
succ (succ ~num)
zero zero))
(comment ;; desugars to
{'num (->Or (->Node 'succ) (->Node 'zero))
'succ (list 'succ (->Node 'num))
'zero 'zero})

;; define a view over that pattern
(def peano->int
(view peano-graph {'succ (fnk [num] (inc num))
'zero (fnk [] 0)}))

(peano->int 'zero) ;; => 0
(peano->int '(succ (succ zero))) ;; => 2
(peano->int '(succ (succ succ))) ;; => throws MatchFailure
)

It's similar to the old ideas at http://scattered-thoughts.net/blog/2012/12/04/strucjure-moti... but significantly simpler. I'm hoping to be able to release at least the core functionality in a few weeks.
Besides, symmetric schemes tend to perform better. Hence the idea of using a public-key scheme like DH for key exchange and then switch to symmetric crypto like AES.

Always avoiding public-key isn't really possible unless you have some sort of secure channel to agree on a key for some communication. But then again, if you have that channel, you might just as well communicate through that.

When encrypting files locally though, there is absolutely no reason I can think of to use public-key cryptography.
I just got my Stripe shirt last week :). Thanks for open sourcing this. I needed something simple like this for selling tickets.
No, because the anti-surveillance features of browsers like Chrome would flag those MITM attacks, which would compromise sources & methods, which is anathema to NSA.
There's a difference between assuming something because it's prudent to do so and actually knowing it's true. And even if Schneier was extremely confident about it, he was still, in the minds of most people, just a paranoid guy on the corner screaming conspiracy theories about what the NSA may have and what they may be doing with it. Now he has some ammo, and he'd be foolish not to use it.
Do they really want Mayer anyways? It seems like that while she has given them more publicity she hasn't seemed to do very much that actually matters. Sure they made a new logo and bought Tumblr, neither were very good ideas.
The 2.4GHz spectrum is far more crowded, and in a dense urban environment it can be the difference between a solid connection and one that constantly drops.

https://en.wikipedia.org/wiki/Electromagnetic_interference_a...
Library owner here, I've added some replies to points made but I just want to note that the readme on Github's website was a bit out of date and provides a little more details now.
The Duo 13 is an excellent machine, but the stylus uses N-trig technology, not WACOM. It's sufficient, but a WACOM stylus has 2 advantages: It's more responsive and accurate than N-Trig, and it doesn't require a battery.

Basically, the Lenovo Thinkpad Yoga will have a better keyboard and a better pen, but the Sony has almost double the battery life. If you aren't an artist or a designer, an N-Trig stylus isn't the end of the world. If I were in the market for either, I'd wait for some reviews to come out for the Lenovo machines before making a decision.
This works if physical contact is available and parties are trusted (even the weakest literal reading of fourth amendment says "right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures," -- exchanging a key token counts as such).

Yet what of basic online communications where key-exchange is necessary and where we have very little say about the protocols involved?
Enterprise Cloud “Tipping Point” Boosts Open Source Cloud Expectations
Except most 4K displays can't do 60Hz which for most is the bare minimum for computer usage.

I would avoid that Seiki monitor, it can only do 4K at 30Hz max and there are wide reports that it can't even do 1080p at 120 Hz properly (even though its in the spec sheet).

The first 4K 60p input displays are just coming to the market this year. You can see a list:
http://www.noteloop.com/kit/4k/

Right now it is just a trickle but expect a flood of both cheap and expensive 4K 60p displays next year.
You are definitely right. About the motivation, I think that when people can actively participate to the decisions and are responsible of a subject, they are more motivated. Because agile and specially Light Agile empower every member of the team, they act as good motivators.
WxPython 2.9 and the Newer Pubsub API: A Simple Tutorial
I would advise against relying on Cryptocat. You asked, that's my answer.
You can do this with regex captures.
Rackspace: Government Surveillance And Your Data
Basically, you can't avoid being surveilled without radically altering your lifestyle. If you did, then it'd be something like:

0. Don't use a cell phone.

1. Don't use Google.

2. Don't use Skype or any other VOIP or telephone service.

3. Don't use social networks.

4. Don't use electronic money, including the bank account you are presently being paid in to.

5. Don't use individually booked international flights or ships.

6. Don't use email.

7. Don't communicate regularly with the same set of people. If you must communicate, do it either using steganography or in brief and without revealing any identifying information (spelling, voice, writing style, etc.)
Curve25519
I think that you're missing that this embodies the Big Dogs brand perfectly. They don't care about the intricacies of logo design, or anything else related.

It's a dog. It's big. There shouldn't be lines to read between.
Lets not anoint Mayer until she does something more than just faffing about and weakening user experience.
I wouldn't call a MITM with a fake cert an effective global attack in 2013.
Churchill would have agreed:

"Operations in which large numbers of men may lose their lives ought not to be decided by code-words [...] of a frivolous character, such as 'Bunnyhug' and 'Ballyhoo.'"
I take it you break out of docker-docker when you here the theme from inception starting to play.
Microsoft does have a big PR problem. The brand has lost its association with innovation, coolness, etc. That does not mean though the company itself is lacking in those attributes. From that perspective yes they do need a Mayer. Although it will be interesting to see if it results into empty hopes like what has resulted in Mayer's tenure so far.
phew, now I feel better. Being a non native English speaker, I was wondering if the problem was my understanding of the language or the writing style.
“Imagination is more important than knowledge. For knowledge is limited to all we now know and understand, while imagination embraces the entire world, and all there ever will be to know and understand.” - Einstein
Taking a step back and looking at all of this in its totality, its hard to not think that Bin Laden won.
Easier to read line by line, perhaps. But certainly much harder to skim. If you wanted to skim a paragraph at a time as I often do, the artificial emphasis created by the coloring throws you off.
The ending is good, imo.
Yeah, but what does that mean, for someone who has a reasonable grasp of crypto, math, software engineering?

For example: "Unlocking encryption." We've heard that they haven't actually broken (some?) crypto primitives (caveat: with large enough key sizes). What attack have they actually succeeded in?

The backdooring of proprietary products is interesting, if not surprising. It's good to see it come to light. You may not be able to trust OSS without auditing it, but at least you can audit it.

"Undermine the fabric of the internet" is pretty vague.

It sounds like there isn't actually a lot of detail out there yet -- I look forward to learning more.
Elon Musk is building the 'Iron Man' lab
All this functionality sounds like an increased attack surface, and it is. But when the comparison is Firefox, it's far outweighed by the fact that Chrome has a very good process sandbox, while Firefox has none. It will be years before Firefox can match Chrome's level of security.
Well then we're safe, because campaign contributions to candidates in Federal elections in excess of $200 must be disclosed to the FEC:

http://www.fec.gov/pages/brochures/fecfeca.shtml#Disclosure

Corporations, labor unions and foreign nationals are also forbidden from donating to candidates' campaigns.

If you're thinking of Citizens United, it doesn't apply to elected officials "receiving money".
Understanding the building process of MIDlet in Java
In this article we will describe the building process of MIDlet. MIDlet is a Java application framework for MIDP.
Sudden spike of Tor users likely caused by one “massive” botnet
I'd take 3 hours for the screen. It's all relative. I for one will thank whoever (probably Apple) for driving the adoption of high res displays in notebooks. I own the Pixel now, but it's just not quite perfect in a lot of ways. Very happy to see new Haswell choices springing up.
"I bought a new computer that has never been connected to the internet. If I want to transfer a file, I encrypt the file on the secure computer and walk it over to my internet computer, using a USB stick."

Wasn't this one transfer mechanism for stuxnet? Once a computer is infected, you have to at least suspect that anything that touches it directly or indirectly is infected. It's like an STD.
> As for Droid...yeah it's on Verizon, as that whole line exists only for Verizon. Not sure what the relevance of that is. If the name includes "Droid", you don't need to see red hues to know it's Verizon.

And how else would you, as a consumer who doesn't spend their time on HN, know that Droid is from Verizon? Its like saying to someone who doesn't know much about cars "Hey you should buy an Elantra!" where the immediate followup from those who don't know as much say "well who makes that?". For a Mustang, Corvette, or something of similar ilk, the make is less important since its already icon. Apple has succeeded in making the iPhone an icon where others haven't.

> This is a selectivity bias writ large. It reminds me of conversations shortly after Apple releases a product listening to people declaring how wonderful it is that Apple focuses on experience and not specs...after a release that is a sea of specs.

How, exactly? Apple has maintained a strong enough brand control over its products that people are easily able to identify them. This has simply not been the case with the vast majority of Android OEM's.
Wrong thread. There are two others that discuss this on the frontpage right now.
I imagine that technological solutions to the plutocracy would be more effective if aimed at creating mechanisms that prevent the plutocrats from acting against the will of the citizens they are tasked with representing, instead of making it possible for non-plutocrats to become politicians.

Tools that force transparency or promote it by changing the social norms in political offices are valuable, and are most likely to be effective at the city and state level, where it is much much harder to hide behind policies of national security. We're never going to get Congress, POTUS and SCOTUS to be transparent first, especially when any transparency solution will be disparaged as disadvantaging us against other countries. At the national level, people will claim that attempts at transparency are unpatriotic. At the city and state level, it's much harder to make claims against transparency.
Heh. Honestly, I'm not sure. IANAL, but I think it would be okay considering MPL version 2 is a GPL compatible license

https://en.wikipedia.org/wiki/GPL#Compatibility_and_multi-li...

That said, I tend to just pick MPL by default for my projects, but am not opposed to changing to make it compatible (not to mention there's hardly any code in the repo anyways)
The reason that this library is useful is because I don't have to maintain an AST in my own feeble mind about what each special character in the regex means. I can look at the code, at first glance, and immediately know what the hell is going on.

Also, this.

https://xkcd.com/208/
I doubt a LaTeX version is available of the old volumes. You can get vector (draft) PDFs of parts of the newly released 4th volumes though, since Knuth released the drafts himself.

What's interesting is that a draft version of Concrete Mathematics is available (by doing a simple Google search), and it looks very similar to the final edition. I'm not sure why the publisher wouldn't just release the finalized PDF as the draft looks pretty good on my iPad.
Top Four Ways Technology can Legitimize your business
I had been hearing some rumors that this was going to be the new version of checkout.js, but this is actually better. I like it, thanks for open sourcing!
I thought that the browser flags a MITM attack when the information that was sent from the supposed server doesn't agree with the server information received through a different channel (e.g., with the operating system).

If the NSA had compromised certificates on the operating system, how would Chrome detect that a MITM attack was being attempted?
We are absolutely working on more native implementations. This is just the first iteration!