skysight-inc/HackerNews huggingface dataset:
So many comments and nobody actually sacks Schneier for working on Windows completely? How much security can you have when you work on top of Windows?
> How can you be sure ANY code is correct, aside from testing it?

Apparently, we can't. So, you really want to improve your odds of writing correct code at the first attempt by making the language work with you rather than against.

Replacing a bunch punctuation with code that reads like prose is one way.
What if they can't make it much faster?

Like Go, they make the tradeoff not to have C++ generics for faster and smaller compiles.
Building a strong Product Culture by Nicholas Muldoon (Agile at Twitter)
Ask HN: How do I apply to a job with a dismissed case on my record?
I don't want to lie about my involvement with a very minor offense, for which the case was completely thrown out and I was not convicted. A background check will reveal this detail.

Where in the application process should I mention this? Should I do it on the application itself even though it asks me if I was ever convicted? Should I bring it up in the interview? Should I wait until the background check comes up, then inform someone?
"Don’t confuse what the customer asks for with what their problem is."
I've heard that the amount of lighting and fire in the night sky at Burning Man works as a leading indicator of the economy, and if this year at Burning Man was an indicator, the economy is back.

I think much of the tension between haves and have-nots at Burning Man is contrived. I see modern Burning Man as a colloboration between wealthy techies from the Bay Area and builders and makers living closer to the event. There might be a higher proportion of spectators to participants at Burning Man in recent years, but in terms of absolute quantity there are more participants than ever.

Burning Man is not a communist utopia. It's just Burning Man.
Why would you have Go on a mobile OS as a mobile application development framework?
Compression is fixed by the engine design. The only thing the ECU can do as a result of knock sensor input is retard ignition and close the throttle (and, on a turbocharged engine, lower charge pressure).

Retarded ignition does result in lowered gas mileage, but throttling down does not. It just decreases your maximum available power.

Plus, if you notice the decrease in power, your driving is not suitable for comparing gas mileage... ;-)
I tried it on HN as well and the same issue. Otherwise looks as a great idea!
It would even be ironic if people's aversion to things like SELinux caused them to use software which is even less secure, and correspondingly easier for NSA to break. They know the long game too...
This completely illustrates what I hate most about ruby: the conflation of 'understandable code' with some sort of insane directive to turn everything into an English sentence without any regard for what the code actually does. At its worst it's almost an obsession with enforcing technical ignorance.

That said, regexes can be tricky to parse and making them clearer to the average person is a worthy goal.
All of your examples start from the comic. The rest of the discussion starts with PA's response to their critics.

True, because I don't think it's logical to divorce the content of the comic from PA's reaction to criticisms of the comic. The content of the comic matters when evaluating the veracity of the criticism. If the criticisms are evaluated as invalid it reframes questionable actions like poking fun at critics and printing dickwolf t-shirts.

I agree that the comic isn't particularly sexist.

It is not sexist in any way. If you disagree, please elaborate.

When he says, on the one hand, "We have worked very hard to make PAX a safe place," and then, on the other hand, says he regrets not selling rape joke t-shirts that specifically were released to antagonize his critics (the ones he was making the safe place for). What's up with that?

PAX is an event that takes place in the real world in an environment (tech event) that has often seen women objectified and harassed; working to minimize objectification and harassment has no relationship to printing dickwolf t-shirts. Dickwolf t-shirts do not objectify women. Dickwolf t-shirts do not harass or encourage harassment of women. Women are not made unsafe by the comic or the selling of t-shirts based on the comic. Not all women agree that dickwolf shirts merit feeling threatened. If one feels threatened by a dickwolf t-shirt that's one's own prerogative. Yes, the t-shirts were designed to make fun of the critics but nothing is wrong with that if you disagree with the critic's assessment of the work.

I also think there's a clear difference between PA selling the shirt and Wired writing a reaction piece. Wired didn't post a big picture of a dickwolf and put ads on it. They're not profiting from a rape joke directly

Ok, I agree that selling shirts about the comic is not the same as linkbaiting for page-views, but my point is still the same; PA was "profiting from a rape joke" the moment the comic was posted, so if there is no problem profiting from the original comic, I fail to see why it's wrong to profit from the sale of t-shirts based on the comic. Either the comic is wrong and the merch is also wrong by extension or the comic is not wrong and the shirt is just a stupid shirt.
"They need to look at Stripe or Balanced or Braintree or something else."

That changes nothing. Indigogo has that policy to protect themselves from fraud. Any money they can't recover from a fraudulent project (or fraudulent charges because someone funded it using a stolen credit card, for example), comes straight out of Indiegogo's pocket. That's true whether they use a bank, Stripe, Braintree or anyone else.

This is exactly what PayPal was trying to control, and they got criticized for it.

At the end of the day, no payment processor wants to be on the hook for 100k+ that they get less than 1% of in profits, that goes to fund a project with no clear timetable, no guarantee of delivery to the customer, no budget, etc, etc, etc.
> We could all start swapping 1TB drives full of random noise.

This is "sort-of" what I've come to think Miranda was facilitating for Greenwald - it makes little sense that the purpose was for him to mainly carry documents, as while the documents would be more secure if he was not stopped vs. transferring them via the internet, they would have had to consider the possibility that he might be.

But if you pass along a lot of random data, then if it never leaves your possesion, you can be reasonably sure that that data can be safely used as a source for one time pads or keys. If it gets intercepted, then so what? You just ignore that batch of data even if it is handed back to you.
Google (Motorola) a convicted patent troll?
Man, so Stripe just makes payments so easy.

Link this up with https://www.shirts.io and you get an instant t-shirt shop with no hassles.
Sharing is a competitive advantage
Paying some 22 year old deskjockey a couple mil to code a backdoor into an encryption app isn't a scientific breakthrough, it's just traditional spycraft. Using the weight of the US government to force Microsoft to code a backdoor into Bitlocker isn't a scientific breakthrough, it's the sort of things governments do.
Seems that most languages with built-in regexes lack any operation on them (like `/foo/ + /bar/` or `/foo/ | /bar/`). I'd blame the standard library, not praise a third-party one.
I've tested this and it's a unique Longview API key for the initiation of that installation. This key is not your Linode API key and is disposable.
Am I missing something? What motive would the US have for raiding his house?

It's not like the US is desperate to know what's in the documents. They already know what's in them. They're the US's own documents. They just want to stop them being published. Raiding Schneier wouldn't do anything to help with that, it'd just mean he has to go over to the Guardian's offices to do the analyzing - it's not like the copies he has are the only ones.

The Guardian's already confirmed that they have copies at at least their New York and Brazil offices, and you can bet they have plans in case those are raided. (Last resort, they're almost certainly part of the august 2013 Wikileaks insurance release, which someone just needs to tweet the password for if somehow all the guardians' copies are simultaneously destroyed).
Backblaze. $5/month/computer unlimited backup including all external HDs.
How much do you want it? https://asana.com/jobs :)
Thanks! I definitely have personally run into the issue a lot and our Clojure teams at Prismatic struggled with commenting discipline. We find schemas are easier to maintain and apply, plus they save a lot of time during dev and testing.
Why did The Washington Post just give this company free PR by posting the details and company name in the letter? I feel as though the company name should have been redacted... They just effectively got a paid article in The Washington Post for free, nice.
Welcome to the app party, Chrome
As a non-American, I find your lack of support for people who weren't born in your little patch of land quite uninspiring.
Yes, though just because it's not scalable doesn't mean it's not an injustice.
Silver Needle in the Skype: An analysis of Skype's internals (2006) [pdf]
There is a difference between incompetence / mistakes, which we know to expect from cryptosystems, and deliberate sabotage.
He is giving suggestions for improving your security, not for perfect security. And one additional way you can improve your security is to not led a potential adversary know all the steps you take - Schneier is high profile, and with an admission he's worked on Snowden document, even more so; there's every reason for him to assume that if he wasn't a direct NSA target before, he is now. It's a trade off.
Eventually we might have the ability to choose gay, straight or whatever. Perhaps as easily and (non)permanently as coloring ones hair today. I think that would be an awesome future.
SpaceX demos gesture controlled design for direct 3D printing
Crypto noob here: Is it feasible to subvert "unknown unknown" vulneraties by applying multiple layers of different forms of encryption? While a chain is only as strong as its weakest link, it intuitively seems like encrypted data is as strong as its strongest link.
But speaking as a non-American here, what do you expect? The NSA is in the spying business, and ultimately its performance is measured by results, not methodologies. All this hand-wringing is a bit like people expressing horror over the discovery that the CIA sometimes stoops to burglary or deception.

I mean, in an ideal world the only way to compromise my password would be to for a beautiful lady spy to seduce me and trick me into revealing it in a moment of passion, but in the meantime it's a safer bet that they'll just try and fish it out of my modem/router/ISP/etc.

Note to NSA: I'm actually happily married, so please don't send over any beautiful lady spies, which would be totally awkward.
Help HN: Tools for Remote Teamwork including Video, Chat, Screen Sharing?
Please, we have 10 totally remote developers and we are strongly looking for tools (if possible, just 1) that allow us to have Video and Screen Sharing (and Remote Control) + Persistent Chat... Doesn't matter if it's expensive, I'm sure the productive gain pays off.
Well, that's what happens when they lose the "good faith".
Your comment is a wonderful example of how to suck the fun out of possibly anything.
Correct. What I meant with "exploiting common human behavior", is that the dictionaries the attacker used is built from list of old passwords found in previous attacks. Those dictionary will be order of magnitude smaller than a dictionary of the English language, but attackers know that people tend to pick passwords (or in this case, compilation of passwords) that someone else has already thought of before. Its a simple observed behavior that people in general tend to think alike, and simply do not think randomly even if individually, it "feels" random.
Also, they have a demo that supplies you with a sentence that you can check and correct in order to teach the model [1]. It was actually easy and nice enough to keep me there for quite some time giving me a few nods/laughs and forcing me to think about the sentiment structure of the sentences. The only request I would have for a feature is a "skip" button, since at times I am not entirely sure in regards to the sentiment of a sentence (you can still reload the page though and it will have the same effect).

[1]: http://nlp.stanford.edu:8080/sentiment/labeling.html
Privacy for anyone anywhere
It's almost trite at this point to quote John Gilmore with "The Net interprets censorship as damage and routes around it" but people are implementing work-arounds and caution procedures as we speak. There's no need to put out a call to "take it back." It's already happening.
The Global Rise of Female Entrepreneurs
Yeah, I have to agree. The wide distribution of Windows makes it an important thing to have access to. In fact, I would go so far as to say that every commercial WDE is suspect.
> There isn't a brand in the whole world with such negative aura than microsoft.

Which of course might be right for you, but for the rest of the world is provably flat out wrong:)

http://www.forbes.com/powerful-brands/

http://brandirectory.com/league_tables/table/global-500-2012
No worries. It's good feedback.

Sometimes I find myself writing quickly and sloppily on HN -- especially when I want to post comment before running off to a meeting (or what have you).

When stuff like this happens, though, it reminds me to tighten up my writing. Speed is no excuse for sloppiness!
Google Announces 1B Total Android Activations, Names Next Version ‘KitKat’
That's what this whole 'disruption' meme i

I'm pretty sure thats part of it but I'm also pretty sure you'll find most "disruptive" teams have some domain experience in there somewhere.
Second response: I'm not sure I really answered your concern head-on, so I'll respond again. There's a widespread belief that American schools are fundamentally broken in some way, which has led them to provide inadequate educations. So, that would be basically all kids, with allowances that some kids will probably learn on their own and succeed anyway, and some schools are probably way above average. But the perception is that schools aren't doing a good enough job of preparing kids to succeed as adults. (I wonder if they have considered that ignorance = bliss.)
There are a number of experiments that suggest that overall, the best predictor of shit (mostly, cost and bugs) is size. Once you account for size, almost every other predictor tend to be more noise than signal.

So, while there are ways to make code so short that it becomes incomprehensible (code golf?), most of the time, less code is almost always a good thing. A case in point would be the factorial in Haskell:

fac i = product [1..i]
As an academic who has to give a lot of conference papers I bet this would be great for reading off an iPad or laptop without losing my spot.
Can Google Dart Solve JavaScript's Speed and Scale Problems?
It said I had a 15% increase. not too sure about that, but one thing i definitely did notice was that was I kept reading the beeline sentence my brain was 'remembering' what I had just read.

I 'constantly' have to re-read entire paragraphs because I realised I've looked at them without really taking anything in. It was really strange to feel like i was processing the text as I was reading it.
This is clearly exaggerated. There's no way the NSA would ever do such a thing. Surely it would weaken US communications as well, and one of their mandates is to protect US communications - not to spy on americans, which it's forbidden to do.

NIST and the NSA are obviously above reproach in this case.

[/sarcasm]
Doesnt' seem to work with my cloud image of saucy: Unable to locate package linode-longview.
Manual IT Hardware Lift Made Easy
Manually Lifting IT Hardware Has Never Been this Easy. The SL-350X Manual ServerLIFT offers an intuitive and easy-to-use solution for handling lighter IT hardware
Open-Source LibreOffice Gets Commercial Support
> If I understand correctly you're saying that JavaScript is a neutral language. It's only a coincidence that in Browsers and in Node.js it heavily relies on the callback style. As a language itself, it could be synchronous.

I remember that I once wrote a JS library that loaded another page in an iframe and simply polled it to see if it had the data I wanted soon. These days, I probably would have written the server to respond with 202 Accept and then just timeout and poll again in X milliseconds. Block until it was ready, if need be.

It's not hard, and it's not even particularly frowned upon.
How about VirtualBox in seamless mode instead of Cygwin?
How could anyone demand a refund from a project they funded with no clear timetable, no guarantee of delivery, and no budget? Projects don't have to be successful, so I see no way that Indiegogo could be held responsible.
My Son Wears Dresses; Get Over It
Why Microsoft WILL Buy Nokia [2011]
Being a former assistant pastor I say this is correct in about .1% of pastors. 90% of churches are below 100 person and only a VERY small percent are above 500 person churches. I worked in one church over a 1,000 attenders and I can totally say that I had zero experience with incentives with money. Most people that work in a church do so for the love of the work and the people regardless of the pay. Though some pastor easily clear more than $100,000 from a very large congregation. Which in my city any one of the 62 principles of my city's schools make every year.
I tried it but it didn't work very well for me. It tries to do some readability-esque stuff and doesn't do a very good job. I'd rather just have the coloring with the rest of the page as -is, which is what my extension does.
Too many people do - and even if they just got off with points on their license, quickly enough they'd be banned and then out of work.

In the absence of usable public transit and a populace capable of bicycling, I guess we'll just have to wait for the self-driving cars...
I smell a conspiracy!!!!!!!!!
Linux and Desktop Environments: Change is uncomfortable
> Very few people compile the Windows binaries from source; it is exceedingly difficult to generate binaries from source that match the binaries provided by Truecrypt (due to compiler options, etc.)

I don't know if Tor considers itself hard to compile, but they recently announced the intent to avoid this issue through deterministic builds[1], so it was interesting to see this mentioned here for TrueCrypt.

[1]: https://blog.torproject.org/blog/deterministic-builds-part-o...
stuxnet used Autorun. Disbaling Autorun on the clean computer would be smart.
Ah, okay. The math is secure AFAIKnew, so I was curious what you meant.
well played...
Do you think you can write one yourself? How many people are actually qualified to do that?

Where do you think one would get proper crypto?
Simple.tv to launch the next version of its cord cutters DVR
Sorry, but what do you mean we "finally have proof"? We have insinuations that they are ahead of the field in cracking encryption standards and that they work with companies to easy surveillance, but that alone is not enough to show that they we all have been "spied on, all the time"...and certainly, not "there's little or nothing that can be done about it."

Have you already forgotten about Edward Snowden? The NSA contractor (i.e outside employee, and by most accounts, not a high-level one in terms of ranking) copied tens of thousands of documents and secret files? Maybe you read that he, too, was a regular Internet user. In fact, he was a frequent anonymous poster to Ars Technica, where, according to reports:

http://articles.latimes.com/2013/jun/21/nation/la-na-nsa-sno...

> But in hundreds of online postings dating back a decade, Snowden also denounced "pervasive government secrecy" and criticized America's "unquestioning obedience towards spooky types."

If the NSA has a continuous surveillance program going on, it sure sucks if it couldn't unmask its rebellious contractor before he went and took a bunch of files with him to Hong Kong. And it doesn't seem that he did much to hide his identity, if Ars Technica could de-anonymize him.

Don't get me wrong. I don't mean to downplay this situation. But your defeatism is just as naive as what you probably think of Americans who don't seem to mind the NSA. If you're really upset about this whole thing, how is your unfounded attitude of "there's little or nothing that can be done about it" going to contribute much? I would argue that that kind of easy cynicism is what helps us get into these scenarios in the first place.
Is that why it only took two years for a critical crypto bug to be discovered?
On the subject of scraping data from OCR'd tables:

I heard from a colleague who moved into finance, that there's a mini arms race going on between some funds(?) who are subject to regulatory requirements to release financial performance metrics but for a variety of reasons would rather not (and certainly would rather not make the data machine readable), and other hedge funds who want to run automated trading strategies off said released figures.

They keep obfuscating the tables to make them harder and harder to parse algorithmically while still remaining theoretically human-readable.

Great fun no doubt for everyone involved.
Is it good or bad for BrainTree that this news is now public?
Thanks for the positive feedback—glad to hear that it works for you! Follow us on twitter to keep apprised of new content/product integrations. There are a couple deals in the works now.
Lanica Unveils JavaScript Game Engine
I said nothing about incompetence. Rather, I assume that any commercial product of that kind is compromised, because spies have such an obvious interest in compromising it. I mean, if I were a spy I wouldn't just ask companies to put backdoors in (although I would do that too), I would actively spy on the software companies. I have always assumed powerful intelligence agencies adopted a zero-sum approach to things, because ultimately they are judged on results, not a purity score.
What are you using to stitch the modules together? Stitch, browserify, grunt/grunt-contrib and friends, something home grown?
I don't agree that mouse input is inherently superior. The main advantage is boundless motion, e.g. aiming a gun or controlling a camera. If that is not a major part of the control scheme in a game, controllers are often better.
I read it and thought of it as 'several hits' ie. 'taking a beating', but now I'm not so sure.
While taking for granted the NSA's M.O. (also having read Applied Cryptography some years ago) this leak somehow hits harder than the rest.

Yes, we had to assume it was happening and we'd have been foolish not to. But to have it laid out in no uncertain terms, is somehow quite devastating.
See! And I'm fantastc!
NoFlo - Flow-Based Programming for JavaScript
Article says they're ditching the Nokia name for smartphones - more specifically, the Lumia line of smartphones running Windows Phone.

Says nothing about ditching the Nokia name for the (much, much larger) Symbian-running feature phones lines, which have never used the Lumia branding.

Nokia has a huge presence in the LEDC markets you mentioned, but the phones they're pushing there were never Lumia Windows phones.
I think it's the same as SEO. There are legitimate SEO practices and then there are scammy trendy sounding ones. The legitimate techniques typically involve a lot of systematic testing and hard work. The scammy ones throw buzz words around and have little to back them up.
Playing the devil's advocate here - isn't this a good thing for the Tor network? Almost anything that adds traffic to the Tor network will help the "legit" users further blend into the crowd.