skysight-inc/HackerNews huggingface dataset:
They were just curious...

It's probably good to insist on sources. I should've provided one originally anyway: http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet...
what about bandwidth price?
still, at $25K??? I guess people reserve to price their own stuff, but it seems delusional to me.
A Paradigm Shift
New iPhone will recognize your fingerprints
The guy is a first year resident and should be working 70 hrs a week perfecting his skills. If he is cheating the system now by not being fully committed, I can only imagine what he will be doing 7 years from now.
Squatting is squatting is squatting. You may have registered with the intent to use it but now that you are not using it you think you deserve money for the ability to rent it?
This doesn't make sense. He says he is a first year resident and is starting a new program next year?
> They did one particular hardware implementation of it.

Citation?
I liked it.

Or if the domain is N years old, the max price should be (N + 1) * registration price.

Also a simple DNS that I could point the domain to and it would serve a simple page stating the price and linking to namebox.io.
Stop moving goalposts.
Are you sure the people on the other side of the world, living in famine, also consider your ignorance bliss? What is more irrational: Choosing to ignore grave suffering that we have the resources to end, many times over, for the sake of avoiding bad feelings, or at least acknowledging the suffering of others? I think the latter is an essential step in bringing modern society to a state that can truly be called civilised.
Prefer faster over slower.

Would any security expert give a critique of this section of the article? That line seems counterintuitive: faster sometimes means easier to break. Shouldn't the goal to be as slow as possible (but no slower than a user will tolerate)?

Also, who is Brian Smith? His personal page doesn't give any info, just an email address. Searching for "brian smith cryptographer" yields a stackoverflow user page, some comments by Brian Smith on various security-related newsgroups, and a linkedin profile[1] with very strange job history -- overlapping timelines, and no entries after 2004 ... I'm assuming that's the same Brian Smith because of his interest in "Cryptography and Information Security."

If that is him, I wonder who he's worked for since 2004? (Should we even be asking these kinds of intrusive questions about people who are proposing new security standards?)

While I'm at it, I may as well ask: who is the submitter, fejr? His account is 5 days old with just one comment but 11 submissions, all related to the NSA or security. I'm curious how they came across this Brian Smith proposal in the first place, because that would give us some information about his background at least. This proposal seems new, because Wayback Machine has no record of that Brian Smith proposal URL[2] so fejr seems to be the first one to post this to any news website.

[1] http://www.linkedin.com/pub/brian-smith/6/6b3/9a7

[2] http://web.archive.org/liveweb/https://briansmith.org/browse...

EDIT: This article deserves a better top comment than mine. When I wrote this, the submission had zero comments and raised a whole lot of questions: Who is this person? Can we trust them? Why haven't we heard about this proposal till now? The answers came swiftly: Brian Smith works for Mozilla. Yes, we can trust that this proposal has no hidden agenda. We hadn't heard about it because it was originally posted to the Mozilla Crypto list two days ago.

Now that those questions are settled, I find myself in the top comment spot and entirely undeserving of the honor. It may have been necessary to at least consider the questions I raised (trust and identity of the author), but my comment addressed none of the substance of the article. I wrote it in order to get some discussion started until tptacek comes in and writes a thorough critique of the proposal's strengths and any possible weaknesses.

So please, someone, write up a good topcomment analysis of the proposal so we can upvote you. :)
On Lisp: Happy 20th Birthday
According to Amazon: On Lisp was published September 9, 1993.
Does Go have generator functions? Yield?

I'm curious because that's what makes python the best language for me in a lot of cases.

Iterators that don't load 100,000,000 rows at a time for a result set are... useful. And that's what you get with the simple (iterator/generator func)/db cursor pattern in python.

Something similar in Go would go a long way in helping me get over the fixed braces position go enforces. :)
You are really believing that a man who supports GMOs and the increase of the consumption of wheat cereals saved a billion?

We are in an era where people are trying to avoid GMO products and also trying a "gluten-free" diet because of the health damage of those 2 things.
Or pay VPN with cash. (Mullvad.net does it.)
$200 for "urrl.us" ? I wonder how much sh2.us would fetch ( currently hosting my ramblings http://www.sh2.us )

While I like the idea of a simpler domain sales option (since GoDaddy is a spammy nightmare) at present, I think what would really help would be a domain valuation service. It's pretty hard to put an amount on something when you're not sure how much it would really fetch on the market.
A Year of Linux Desktop At Westcliff High School - Slashdot
I find your comparison with engineers interesting. There is rigorous work on 'which agile methodology delivers most benefit' or 'what is the best way to architect a system', but largely that stays in academia. I don't think many programmers refer to high quality studies when choosing to do extreme programming over scrum.

The reason for that is the complexity and uniqueness of projects (Does that study at IBM really apply to my small company? If this is a good way for NASA to make hardware, is it a good way to design android aps?). But also because engineers are focused on doing a job using a body of knowledge they draw from school, experience, and a bit of reading. They are not academic engineers. This is probably a good thing.

Similarly, I think doctors are not academic researchers. They apply treatment algorithms, bending them to the patients specific situation is so far as won't get them sued.

If the algorithm doesn't say EEG, then why would they believe they know better than the professors that signed off on it?

If the insurer requires a diagnosis, they will look in the DSM and find something they could justify at an inquest. Then they will treat the diagnosis, according to the algorithm, fitted to the patient.

I think doctoring has more defined procedures than engineering. These are not academics, and I think expecting them to be is based on an assumption that 'dr means phd'. It doesn't for medical people.
Well, many of us suspect a big percentage of Tor nodes are run by the NSA and it has been like that for many years. This isn't news...
Cocos2D game engine creator left Zynga for Chukong Technologies
That's a really a good point about the letters of recommendation. I think this is the route I will be going down. I had no idea how I was going to get the letters otherwise.

Do you have to apply to take the prerequisites or do you just pay them and go?
I've done some work in clinical research and I can tell you that you might need a legal cofounder more than a technical one! I had ways to automate dozens of employees jobs away just by integrating data systems, but in the eyes of the hospital it was too risky. They didn't want to violate HIPPA. I wrote a little thing about it for The Scientist: http://www.the-scientist.com/?articles.view/articleNo/35249/...

I'd love to talk to you more about this because these are problems I'd love to see solved. I think its a real up hill battle though.
Don't get me wrong, I'm not criticising what it _can_ do. It's just that the really exciting idea is the SSC idea: where you can just write clean code and have the compiler work out the best execution strategy.

At the moment, SF seems to support natural looking code, but not always truly natural code. It's tantalisingly close, but it doesn't seem to be getting any closer.
sunglasses will do. Just like that...
Since when has the technology community at large considered automating menial data entry to be "cheating?"
Frighteningly Ambitious Idea: Displace the app store model on mobile
>Citizens need to be protected from their own government which holds tremendous power over them, but less so w.r.t foreign government.

The US certainly holds less power over foreigners, but the CIA's job is to blur the distinction between citizens and foreigners, and the CIA operates with essentially no oversight or restrictions aside from its budget.
I was thinking the same – is 'fix/improve' a new meaning of 'disrupt'?
> have them log a ticket to the EMR provider

Good advice. Although sometimes, the best way to get a fire lit is just to set something up and wait for IT to complain...
..yes?

For people dying from famine, the hipster nutrition trends are not on the radar.
BEAST does not require encrypting of Javascript. It uses Javascript, which can just as well be delivered unencrypted, to induce the browser to make separate requests to the HTTPS site, which include the chosen plaintext.

In the context of network stacks rather than browsers, inducing the target to encrypt chosen plaintext is often possible - ICMP ECHO, for example. Of course it seems rather difficult to arrange for your chosen plaintext to be right at the start of an IPSEC packet, since there will usually be a TCP or UDP header - but perhaps it is possible (and even if it isn't, that looks like rather flimsy protection).
Hmm. In your perfect world, the code to solve that problem would look like this one-liner:

strings.map(toTextNode).map(wrapIn("li")).each(appendTo(ul));

I'm not sure that's the most readable way to solve that problem. In my perfect world, the solution would be a template in a separate file:

<template name="mytemplate"
args="strings: array[string]"
<ul>
<li foreach="string in strings"
content="string">
</li>
</ul>
</template>

and in the code you'd do this:

mytemplate.fill(strings);

Generating HTML is one of those tasks that really deserve a DSL ;-)

Also note that my solution doesn't really follow your pattern of composing several operations. The template loops over the array only once instead of three times. Maybe that's because it feels more natural to some people to nest several operations inside one loop, rather than pull out each operation as its own loop. I share that point of view as well, it feels weird to write a chunk of code differently depending on whether it's inside a loop or outside a loop. YMMV.

Of course the functional approach also supports putting all operations inside one loop. You could build up the composite operation by using a lambda (which would look similar to your initial imperative example), or using some function composition operators (which I wouldn't enjoy reading afterward).
It's a bit complicated though.

Like you say, there are egregious examples out there which clearly fall under squatting, but I think there's also the sentiment that domains are a tool and identity. The idea that someone thought up a really clever name and then do nothing with it but sit on it for sale tends to stir up the same emotions people have toward patent trolls.

"Yeah, they own the patent, but it's obvious! And they're not even using it to make stuff!" ... or the like.
Whenever I click on anything it layers the new elements behind the other ones and the whole interface becomes unresponsive. It works for others though, and it's pretty and iOSey, so props on that.
You can download it for free[1], as it went out of print some years ago.

[1] http://www.paulgraham.com/onlisptext.html
The toxic jellyfish are interesting because they are so toxic, but we don't know much about the toxin.

Here's a YouTube clip of some volunteers who gave themselves jellyfish stings. (http://www.youtube.com/watch?v=GK_Cl_54Qh8) It looks intensely painful!

> It had presumably arrived in ballast water.

I'm kind of surprised that ballast water isn't somehow sterilised - boil it for 30 minutes or have strong UV lamps in the tank with water filtering over it?
Actually, there are...

1. VPNs using PPTP

2. VPNs using OpenVPN

1) should not be used anymore, it is more vulnerable by design (intercept the initial handshake and you're set; the NSA slides referred to a feature "Show VPN startups", which is probably what they meant by that).

So my guess is that when the say "we've cracked VPNs", it's probably PPTP VPNs, but then again, nobody knows for sure.
I observe the same in people around me.

And I've come to the conclusion that that's what politics are for. Or, should I say "should be for"?

I think there are two ways to get a critical mass of people to move a certain way: through a massive ad campaign, or through laws.

Unfortunately, both ways are not guaranteed to work. For instance, women's rights were greatly improved in the 20th century through a massive campaign, the feminist movement. It lead to women's right becoming a focal topic, in the media and then in society, and by raising awareness and being persistent, slowly things started improving. Today, however, my impression is that by and large women's rights are on the decline again. Intuitively, it seems to me that if there's someone with an agenda pushing against certain topics, such as for instance some global corporations against environmental actions, it becomes and arms race between those who benefit from the status quo and campaign members. If the latter fail to create a new status quo in a certain window of time, the campaign will eventually lose steam. Not that the topic will disappear completely, but it will be harder and harder to motivate others for the cause because the novelty has worn off.

Therefore if people cannot be convinced - and of course it's always more comfortable for people not to have to change - an alternative could be to force changes by law. Again, if we look at environmental issues, a lot of improvements have been made that way, but how many more have been missed?

The goal of a politician is not to change, it is to be re-elected. So s/he has to be convinced that doing a certain thing will get her/him closer to that goal. Again, we're looking at an arms race, this time it's the lobbying race. The campaigning discussed above plays into that as well because if the public opinion can be influenced that will definitely be heard by politicians as well. It doesn't automatically mean that the public's will is going to be put into law, but the more pressure from outside the better.

I've given up trying to get people to even read up on environmental issues let alone change their behavior. And believe me, I've tried. I've given up because it's too frustrating. I think people have to be forced (through laws), they won't change by themselves.
It seems liability would be another reason to have a firm legal foundation. You wouldn't want to miss an edge case that results in a patient's death. If an investigation showed that your translation software made a mistake that led a doctor to make a bad decision, you'd be in a pretty ugly spot.

This is part legal, and part QA, I believe.
So, Mr Smith wants to add a bunch of elliptic curve options (using the NIST curves, weakest P-256 first), while removing the widely used TLS_RSA_WITH_AES_256_CBC_SHA256 due to "concerns" about "performance" and an unsubstantiated argument that ephemeral key exchange is somehow always better. Hmm.
A dearth of investment in young workers
Ab, OK, my bad. Thanks for the pointer and sorry for the mistake.
If you gain 10 minutes/week for every surgeon in USA, then you've done more healing than you could by simply being a great surgeon for your whole life.
Apologies: Why they sometimes make things worse (Podcast 006)
Isn't technology meant to make our lives easier? If this can increase the productivity of doctors, I reckon it's a good thing. That way they can spend those full 70 hours a week perfecting their skills, instead of wasting 20 hours to enter and retrieve data every week.
At least since the 1980's, see AIM-953.
I think "as slow as possible" is good for the initial key exchange, or for storing keys at rest. The point is to make offline key recovery (by guessing) more difficult. But once you have a good key, the ciphertext is already completely scrambled. Slowing down won't make that part any harder.
Why don't doctors have clerical staff to do the data entry?
Since that doesn't work, you should try something different -

Seth Roberts' Shangri-La "diet" seems to work extremely well for about 80% of the people (and not at all for the remaining 20%). I quote "diet" because it involves ADDING 200-400 calories a day to your intake (albeit with some weird specific constraints).

It worked for me for a while, and then stopped. Other things worth trying are atkins style diets, Dave Asprey's BP diet (4500kcal/day, but with extreme attention to details) or even the Tim Ferriss advocated "slow carb" system.

It seems that no diet works for 100% of the people, and those that are not crackpot work for 80% but not more. I guess variance (biome or otherwise) is much larger than assumed - or there's a missing ingredient in diet that is being overlooked.
As a physician of 15 years in internal medicine all I have to say is residency must have become ridiculously easy if you have time to start a company.. For me, 100 hours a week made that impossible so I waited until I was done. Your idea is an old one. It's been deliberated and contemplated. You forget that you're writing code that is essentially a medical tool that potentially affects peoples lives. You will need massive insurance, and lots of regulations to contend with. You will take on all liability with regard to patient outcomes. In the end, it will cost you 10x more than 500 a week. I don't even consider healthcare with my coding projects.
Cost + absense of regulation.
Here's some discussion on mozilla's crypto list:

http://www.mail-archive.com/dev-tech-crypto@lists.mozilla.or...
The FTC vs. the DC Taxi Cab Commission [Uber's Regulators]
This book helped me fall in love with Lisp.
Yes, of course, but now for Obama that
possibility of blame for not stopping
another terrorist attack can seem less
important than the actual blame, now,
for the NSA spying on US citizens, that is,
will so seem to Obama if enough people
raise heck over the NSA spying.

If I were the POTUS, then I'd have
my staff draft a short statement
and use it to address the nation.
The main point would be that the US
actually is vulnerable to an attack
by terrorists, and even if we totally
lock down our country, turn the US
into a 'surveillance' state and a
police state, trash most of the Bill
of Rights, damage our domestic
economy, shoot our international
trade in the gut, etc., we will still
be vulnerable. We can't be 100%
safe.

I'd mention that often there are
several courses of action, with
some safer than others but none
100% safe. E.g., from B. Schneier,
after 9/11 so many people were so
afraid of commercial air travel
and drove cars instead that
the fact that cars are much less
safe than air travel resulted in
more deaths of US citizens than
9/11 caused.

Might also mention that a goal of
UBL was not to defeat the US
via force but just to trick the
US into a response so absurd and
wasteful that the US would
bankrupt itself, and here UBL
has had a lot of success.

Then I'd ask the US citizens
to go to a special, nationwide
referendum on what to do, (1)
return to the US as it was before
9/11 with some prudent and legal
improvements to stop terrorists
or (2) trash much of what is great
about the US and still be vulnerable
to terrorists. In this choice, we have to
notice that the terrorists are
not totally stupid and will avoid
confronting the defenses we do put
up and, instead, exploit ways in
which we are still vulnerable.

A review of the track record of
just what good all our anti-terrorism
hysteria -- NSA, 'militarization'
of local police, trashing the Bill
of Rights, the wars in Iraq,
Afghanistan, and Libya, the TSA
trashing our domestic transportation
industry, excesses by our Customs
units,
the money,
etc. -- actually accomplished.

E.g., we should note the Boston
bomber -- the NSA, etc. didn't
stop him.

Then let the US citizens decide.

Good way for Obama to play CYA
and also get the US back to
a sane country away from some
national neurotic hysteria from
a few wackos with airline tickets
and box cutters.
Most of us also commit a crime every time we drive a car by driving over the speed limit.

Selective enforcement is pretty wide spread. It would be wonderful if at some point in the future the law was changed, however it is too powerful a tool for the police to give that power up without a fight.
Free download: Flat / Skeuomorphic UI kit 
UI kits are a great way to kick-start a user interface design. The best ones feature the most common elements required by developers. Most importantly, UI kits avoid the dreaded ‘blank screen’, giving you a jumping off point for your own innovations.
That's not what I want a citation for (but, yes - even that is not a trivial assertion, given that there is a nontrivial part of the population, perhaps even 10% who do not get fat regardless of the amount they eat)

I want a citation that "exercise and diet" are enough to convert a fat person to a thin person. Trivially, that's true - just stop feeding person until they starve and almost die, and then feed a little.

But the non-trivial question is: Given person X who is now fat (possibly a result of binge eating, but possibly a result of disease, some kind of pharmaceutical treatment, etc.) - can exercising and reducing intake alone make them thin, without damaging their psyche, without limiting their intellectual potential and mental well being?

There is NO reason to believe that the answer is a simple "yes". People who claim that the answer is definitely yes should be able to back their claims easily, if this is so trivial.
Big Data and the Soviet Ghosts
Beware of random cryptographers bearing suggestions? #HUMINT
Forget coding for health care. MD and coder for 15 years. You will make 10x the profit if you avoid the regulations and liability of health care software.. In addition, I'm not sure you have any idea how little few time you're about to have.
Driving over the speed limit isn't a felony.
Impeachment won't go anywhere, he can hide behind sycophants who would twist the whole endeavor as being racially oriented. Even now that one issue is what keeps many mouths silent, on the NSA, Syria, and other events. Go read some of the stories of some of Hollywood's best known anti-war activist are stymied by this prospect.

No, the way to get the message across is to keep it alive and use in the 2014 elections to ensure his party is trounced. Yes that will mean giving the Republican's the upper hand in Congress but fortunately or unfortunately depending on your political stance they are pretty inept at using it well. There are some Republicans that need to go as well and they should not be given free pass.

It comes down to getting the American people to stay interested enough, to adopt the philosophy of "throw the bums out". If that means we swing back and forth each two years or four then so be it, for when one party has dominance too long we get into situations like we are today.
Selective enforcement is the real power government and police wield over the common person. If the laws were fairly enforced, against everyone, equally, citizens and law enforcement would be on more common ground.

Instead, the breadth of laws on the books is far too wide for the average person to understand, with many of them vague enough to cast any person a criminal at any time. So those who have the power to cast down these punishments make deals. And the power to make those deals is where they derive this power. Do this, they say, and we won't throw the book at you. But defy us, and we have all manner of perfectly legal tools we can use against you.