skysight-inc/HackerNews huggingface dataset:
Ask HN: best ways to learn about cryptography
As an engineer, with all the recent stories about NSA breaking cryptography, I can't help but feeling guilty.

My main field is web development. But I don't stop there : I play with mobile app development, with system toolkits like gtk or qt, I've built server accepting connections in C, even read about the basics of creating OS and programming languages. I'm currently learning 3d modeling, in the hope to buy a 3d printer, and look with interest toward project like arduino and raspberry PI.

I've never read anything about cryptography.

My first thought about cryptography is : "well, that's something especially difficult and that carries a lot of responsibilities". So what ? So is playing with memory in C (both difficult and may easily create vulnerabilities). That's a good reason not to release anything while unprepared, but not a good reason to know nothing in this field.

I suspect I'm far from being the only one is that case : we do not care that much about cryptography, and that's a problem. That's a problem because if we swarmed the world with cryptography discussions and toy projects - just like we do with other fields - we could expect new ideas to appear a lot more quickly, and have a lot of alternative where we're all just use ssl nowadays in most of our applications.

There are reference resources about almost anything on the web. I just can find any clear reference about cryptography. Does anyone have good advice on how to start ?
Untethered Soul. Just finished it but I can already say it has influenced me more than anything spirituality related I have read in the last 10 years.

The power of this book is it's clearity and simplicity. It's not a new age book and not a how-to book. I feel I made a huge leap to a new level of inner tranquility. Maybe it's just the right book at the right time and something I needed to hear but it amazes me how direct the words speak to me.

There's also a short article of the same author on huffington post if you want to get an idea of what is it about.

As the OP asked for two books and we're on HN I'd say SICP
This is a way better explanation of what the NBN is.
Just. Start. | Outside The Lines
Reminds me to play zookeeper! Haven't launched that app in like 6-7 mo... Just turn off that music; line cannot compose for crap.
I use tarsnap[1] for my backups and I'm sure a lot of HNers also use it. It's not directly communication but the flow between my computer and the server is encrypted (and data on the server also are, of course).

[1] http://www.tarsnap.com/
Monitoring the Future of Cloud Computing
I deleted my profile after figuring most of my profile was just ego-tripping.

It's a one-sided perspective of achievement as it does not show the failures of a person.

There's a charm in not bragging so much about your achievements and instead admitting we're all imperfect. The people I met that have achieved the most in life hardly bragged about it nor did they have "all-star" LinkedIn profiles.
I think it's a great idea. Every technical book should start using it immediately. There's nothing more depressing than cracking opening a computer book that 500 pages of block typing. I've never known how you guys get through some of those phone books?

It might be great for some fiction?
Disruptive Innovation vs. Harvard: Who Will Win?
His point doesn't make sense...
> their compensation is based mainly on the fact that they take on risk by allocating money...

I can't believe anybody can say that with a straight face, not after the bailouts.
Monster Thunderstorm Erupts, Churns Atmosphere for Years
Your use of seniority seems like a straw man to distract from the fact that unions have faced an unprecedented corporate and political offensive in the last 40 years that has no desire to compromise and is only intent on destroying any fragment of organised labour. To blame senior union officials for the decline of the unions is to miss the point entirely. Yes they were a contributing factor, but certainly not the main cause.
Rise and Shine. Welcome to the Grind
Why don't you patch away that check?
Why is he root on his own machine when he uses unzip?

I hope this is satire. "The unzip tool uses a sophisticated algorithm based on LZ77 and Huffman coding". Oh wow. Who would have thought. " These files do not represent the socio-economic status of the code." Oh.

Lame humor.
> People could have said the same thing about Go, and yet it's catching up quite nicely.

Yes, in a few places that get lots of up-votes in HN.

In the real Fortune 500 world, it is all about JVM and .NET languages.
Taming Brownfield Codebases with AOP
The main issue I have with LinkedIn is that it adds skills to your profile that you haven't mentioned. And then it goes and ask your network to "endorse" you on those skills. Then you end up with a couple dozen skills you never actually have and things get complicated without reason.

And it goes the other way too. Whenever I'm confronted with a list of skills for people in my network I don't know whether they put them there or it's the site's idea. So you don't know what to endorse and what not, you may end up looking a completely ass or just someone who endorses everything just to be on the good side.

It's like the whole damn site was build to fool people around and to promote lying.
It seems you cannot install Line without divulging your whole iPhone contact list.

Skipping this.
Sun did promote Java as much as they could, Google is not doing anything like that.
Nice product. Idea seems to be great.
I tried it and found it pretty useful.
Keep it up.
Just to confirm that we're planning to remove the dependency on aufs for the 0.7 release (late September). As a result docker will run on vanilla linux kernels.

aufs will probably come back as a plugin in a future version.

aufs is great and I wish we could keep it as the default. But the kernel politics are what they are.
UV radiation found in sunlight can produce Pyrimidine dimers, which can lead to genetic mutations. Essentially, the UV radiation causes two DNA bases (Thymine or Cytosine) to fuse together and make that portion of DNA unreadable. Fortunately, our cells have mechanisms to repair such DNA damage, but if damage is acquired faster than the cell is able to repair itself, then permanent mutation is likely. If a cell acquires too many mutations, the mechanisms that prevent it from continuously replicating may fail, and the cell will replicate uncontrollably and spread throughout the body. This situation is known as cancer, and can occur in many different ways, making it fairly difficult to treat.

There's a nice summary of the process listed here:
http://theoncologist.alphamedpress.org/content/6/3/298.full
Can Urban Planning Turn Brooklyn Into the Next Silicon Valley?
That's a good idea. I have the same problem with fiction, for
some reason--except for Nabokov. His books are written so well, each line just flows on to the next.
Right. This is the exact type of language I found everywhere else. Just because it "can" mutate which "can" become cancerous does not mean there is a direct correlation between UV radiation and skin cancer. I'd like to see some actual studies with controlled variables.
I'm not sure why the private messaging apps in the US died off (MSN messenger, AIM, ICQ, etc).

Was it because something like Facebook and Twitter appeared? I know in China, without facebook, they continue to use private messaging apps like QQ and WeChat. But it seems the trend might be in all of Asia, even in places where facebook exists.
http://en.m.wikipedia.org/wiki/Risks_and_benefits_of_sun_exp... has lots of references.
Would it be possible to require things requesting access to the tor network to host their own temporary relay (even if it's really small handling one or two connections only?)

This would also allow for plausible deniability. If the Tor network was compromised and half the nodes were owned by the feds or a botnet or something like that, it would still be impossible to tell if the traffic coming from your ip was from you or someone else.
I can only speak for my observations in the gaming community and there are more or less two camps, which can be summarized as:

No back-dialing, ever. Basically they do not want the company to have a remote-switch to disable the software after they've buyed it, do not want the risk to not be able to play a game anymore just because a company decided to put down the servers and want to be able to play everywhere without an internet connection (e.g. I sit at my laptop and cannot play your singleplayer game because you decided to need dial-back? No chance.)

The other camp doesn't care about it, more or less. Sure, they would like it if there was no dial-back for the games, but it doesn't hinder them from still buying and playing at platforms/games that require this as long as their playing experience isn't dimished by it. Steam is more or less the platform of choice for the second camp and seems to be growing all the time, so most users probably would acccept an dial-back connection once, every 30 days or even at every start. Quick note: Always-On is still something which is considered off-limits. Ubisoft tried it various times with their games and fell flat on the face. They've backpaddled to activate once by now.
> - Provides a familiar language with clean semantics and low ceremony

Smaltalk had it.

> - Provides the fastest dev iteration times (there's no compile step, just edit + run in Dart VM/Dartium)

Smaltalk had it.

> - Provides ~10x faster start-up times than JS with snapshots (Dart VM)

Smaltalk VMs, actually Self, were where the first usuable JIT compilers were developed.

> - Provides faster run-time performance, that's predictable and can take advantage of real integers and SIMD instructions (VM Only)

Self and StrongTalk were quite performant. SIMD was not available back then.

> - Provides a unified object model so all classes from all libraries are interoperable

Smaltalk had it.

> - Providing a rich, well-defined, consistent API, real collections, removing JS WATs, smoothing over browser quirks

Smaltalk had real collections.

> - Provides a unified and composable IO model: Futures and Streams (repeating events)

Smalltalk has streams.

> - Provides a new powerful way to develop client apps with Web UI (Polymer/WebComponents) offering unprecedented levels of encapsulation and reusability

Fare enough regarding WebUI, as the web did not exist back then. However Smaltalk is responsible for the MVC concept.

> - Provides optimal dev and deployment options, you never have to worry about choosing the smallest libs as tree-shaking ensures only code used is compiled and minified

VM pruning in Smaltalk environments for deployment.

> - Providing "full-stack" dev environment, e.g. same language on client and server

This is only true when using Dartium. Transpiling to JavaScript does not count.
I trained a bit speed reading when I was in higschool from some book that was translated from Russian (sorry, no idea what was the book)
the main idea there was to:
1) not saying words with inner voice
2) not reading letter by letter (seeing whole word at once)
3) reading by connected words not only word by word
4) there was eye training exercise, the idea was that you had to train vision a bit to be able to read more text with less eye movement, i.e. to read word by word you have to be able to see whole word at once (so your brain recognizes word with 1 lookup, not letter-by-letter lookup)
whether this helped - I don’t now but that spreeder says that I can read more than 1500 wpm on casual texts (when there is a lot of material I want to realy comprehend, ofcourse it is slower even by factor of 3)
The Guide to Flawless Web Typography
New Jersey Wedding DJ
The experienced party DJs NJ has to offer allow you to enjoy your wedding or party without a care in the world for problems with the entertainment. The experienced DJs will also work with caterers, photographers, and banquet staff to ensure everything runs smoothly. And they will convey the utmost in professionalism from their dress to the way they carry themselves. A professional New Jersey DJ is truly an asset for your reception.
That kind of DRM technique was broken a half decade ago. If your software calls home, a cracker can record/simulate that behavior if needed.

The result in the end then becomes that pirates will still use the software, but people without a stable Internet connection can't use your software.

It also ads a problem for businesses. Suddenly, they need to poke holes into VPN's, and risk that the software will also become unusable if their Internet connection ever become a problem (lets hope they don't plan to draw fiber). The millions of military personal will also be unlikely customers, as their Internet connectivity in the field is not know for it up-time.
Pie - SINGAPORE. FULL-TIME.

We're hiring smart, senior and passionate full-stack software engineers to join our small and kick-ass team of 4 in sunny.... Singapore! We can't sponsor relocation costs, but we offer highly competitive salaries including a generous equity stake.

Pie is a SaaS startup building a super fast, real-time, responsive and scalable platform with global reach. We are agile and use different technologies, among others Node, Javascript, Redis, and Rails. We don't write code without testing it and we use continuous integration to do so.

As an early Pie team member you'll be part of the core dev team and there will be lots of interesting strategic choices and challenges to deal with.

Still here? Drop us a note, we'd love to hear from you!
team@piethis.com

More About Pie

Pie is a knowledge management tool that people will actually use.

Our goal is to make Pie the best tool for professionals to securely share, collect and curate knowledge. We're doing this by making Pie as visual and intuitive as possible. We're data-driven and we believe a strong developer culture is vital for building the most valuable product for our users.

The founding team of Pie is not new to building, scaling and exiting startups. Thijs has previously built and sold a contextual search venture to Mozilla. Pieter has lead the product management department for Playfish in Beijing which was later sold to EA.

Pie has some incredibly smart investors and shareholders that believe in the team and share their vision. Among others we have the co-founder of Match.com, a boardmember of SingTel, a large U.S. based VC, and several other highly experienced investors backing us. We've also got NEO.com as one of our shareholders (which is highly unusual for them).

We've been overwhelmed with the positive feedback we got from the 350+ pilot companies that signed-up for our early Beta. We're currently growing the team with senior software developers to further increase the value that our growing user base derives from Pie.

Drop us a note on team@piethis.com or see www.piethis.com for more information
I think he quoted it because that was the word used to denote the class of people in the post he was replying to.
Ouch.

I was at a model meet as a kid when a 1/10th scale plane careened into the crowd and sent a couple of people to the hospital but this is the first time I've read of an R/C model killing someone.
Why do you seem to think that acknowledging obstacles that may be gender-related is spreading fear? It is not inappropriate to know that Mr X never listens to the ladies, so go talk to Mr Y. That's not fear, but knowledge. Ignoring problems will not make them go away. Pretending that the problem is something other than it is is just lying to yourself.

It feels more empowering to pretend gender doesn't matter, but eventually there will be a situation where it does and the truth will matter in how you deal with it.
Obviously he's just joking, and most of the people in this thread got it. He's not incompetent, he wrote both Armitage and Cobalt Strike, and the latter has some really incredible features that are hard to find elsewhere. I'd say he knows his way around a computer.

Snarking about why he's root when he runs unzip does not advance the discussion and despite your efforts, it does not make you look smarter than him.
How Big Is Too Big for a Phone?
It seems like most technical books are filled with a lot
of extraneous material. Could you imagine an author who
used a certain color, like green to highlight the important
sentences?
SEEKING WORK - Remote or Madrid or Berlin

I'm an experienced (10+ years) software engineer looking for additional project work. What motivates me is to deliver software that works! Finding simple solutions to complex problems, honing my craft as a software developer every day.

On client projects I have mostly done Java development work on SQL and NoSQL dbs. For prototyping and my side projects I'm using Python with Flask and Django. Recently I'm into Clojure and would love some work in that area. But I see myself language/tool agnostic and believe there is a best tool for every task. I love learning new things and believe I can get up to speed quickly in any tech environment.

I'm based in Madrid, Spain and looking for remote work or based in Madrid. I'd be also available to work in Berlin as I'm there quite often and might be interested to stay for at least a short term gig or remote with regular travel.

More information can be found here: http://www.bernhardwenzel.com/work (started this blog recently so not a lot there yet). I speak German, English and Spanish.
I am working on it!

https://github.com/OpenParliamentAu/law-beta

All bills are in Microsoft Word.

1. Convert all bills to perfect Markdown for nice looking diffs.

2. Parse amendments (e.g. "Section 1: Omit paragraph 1, replace X with Y".) for bills currently before parliament and create consolidated versions of the bills to view changes in context.

3. Fork GitLab.org and create a pretty interface for law makers to use.
Unfortunately not - maybe ask the HN community?
For you it may be ego-tripping, but for others it's just marketing.

There's nothing wrong in outlining your achievements and it is quite necessary if you're looking for a job, or if you're a consultant looking for clients, or if your startup died and you're looking for a new adventure and so on.

LinkedIn is first and foremost a repository of online resumes. Resumes are by definition marketing pamphlets.

> The people I met that have achieved the most in life hardly bragged about it

If you pay attention, you'll realize there's a selection bias going on. The successful people you've met, are probably those whose achievements are known by everybody in their field. This is probably why you've met them in the first place.

Like, when I go to a conference and I see somebody I know to be a really good developer based on my interactions with him on mailing lists or his open-source projects or the startups he worked on (or other such criteria), I do want to shake his hand and say hi. I have less such inclinations for people I know nothing about and I suspect my behaviour is not atypical.

However, many people don't have achievements that are known. Many people may have done wonderful stuff and yet nobody will ever know about it, unless they tell their tale. And yet this is precisely what they need to do for growing in their careers, for getting to work on interesting stuff, for getting higher incomes and so on.

I appreciate modesty, but sometimes it's not a virtue. Knowing how to market yourself is a necessity and yet engineers are really, really bad at doing it.
> Wish someone would write an article summarising the overseas experience of FTTP.

Works well in Singapore. Just the cable that goes out form Singapore to, say, the US is not fat enough.
Having worked in crowdfunding domain in previous company, it iss extremely difficult to solve marketplace payments. It is now good that payment services like SudoPay start emerging to address these issues.
I like how he divided boostrapped and Post-Product Market Fit. The difference in marketing strategies is huge. Post-Product Market Fit may well focus on killing it on adwords alone (ecommerce mostly), whereas content marketing is working wonders for boostrapping companies, and is hard to replicate for bigger ones (maybe it just doesn't work at scale?).

The skillset are so different that "what took you here won't take you there":

Post-Product Market Fit: modeling, optimization, hiring and firing. Letting data decide.

Boostrapped: writing well, being active online, jumping on early trends fast, listening to customers, growing a list. Often there's no data to justify decisions.
It's probably just me, but I cringe a little bit whenever I read the word "disruption".
All of the curb side "nodes" that are full of gear to connect to DSL copper wires running down each street.
Tru, I've seen lots of fury against gaming companies & Adobe too about connected licenses.
Perhaps it "was easy" because we took it for granted that it "couldn't happen here".

Maybe that was because too many of the principals in the Manhattan Project were dead. Or, maybe, we don't learn from history, and never will.
Not positive proof -- merely suggestive. Which is true of a lot of things in the secret world of the intelligence services.

The more you use a secret cipher, the easier it is to break. It is simply good operational practice to use a different cipher for a small fraction of communications -- namely, the most secret ones. Just like certain antibiotics are reserved for drug-resistant organisms. You don't want it to lose its effectiveness through overuse.

First, security-by-obscurity does indeed buy you some additional time. Because the cipher is secret, your opponent has to figure out the algorithm as well as the attack.

Second, this reduces the amount of traffic that the opponent can analyze. For example, suppose that only 1% of messages use Suite A, and 99% of messages use Suite B. With fewer messages to analyze, the job of breaking the cipher becomes much harder.

Third, the reduced volume also makes known-plaintext attacks more difficult. Especially if you avoid committing the cardinal sin of repeating the same message using two different ciphers.
Just only move to apartments that have the fibre. People are already doing that with windows and bathrooms.
Yeah, that's not a toy.
Virgin Galactic's SpaceShipTwo completes its second test flight
I still think LinkedIn is quite useful. Sure, there are some bad aspects, like clue-less recruiters, and charging job applicants to be "at the top of the list" when applying for a job.

However, the good parts still dominate for me: updated contact-list of my professional contacts, on-line resume, highly relevant job ads, and the occasional "good" recruiter. I just recently wrote a blog post about this: http://henrikwarne.com/2013/08/21/linkedin-good-or-bad/
Sony releases Camera Remote API, opening the door to third-party camera apps
In the mix at IFA 2013 Sony announced that it's releasing the Camera Remote API for Sony cameras to developers, meaning more apps could offer remote control over Sony cameras in the future.
The survey should have asked people if they would be willing to accept a slightly hire risk of death due to terrorism in exchange for a more private and anonymous Internet. I think in America the answer would be a resounding NO.

I think the answer should be YES, but most people in this country will gladly trade liberty for security, at least as long as Obama is in power. You would not believe how many people have told me: ah, as long as democrats are in charge, who needs the 4th amendment. On the other hand I do live in South California, so should I expect any different.
I was no criticising NoFlo but the post.
In the US, I'd have to guess it started with the T-Mobile Sidekick then continued with smartphones. Texting eventually became replaceable with messenger apps.