skysight-inc/HackerNews huggingface dataset:
Here's a quick explanation:

> []
[]
> +[]
0
> !+[]
true
> +!+[]
1

Lesson: + as a prepend coerces things into numbers

> 123
123
> 123+[]
"123"
> ![]
false
> ![]+[]
"false"

Lesson: + as an infix operator between incompatible types coerces everything into strings

> Function("alert(123)")
function anonymous() {
alert(123)
}
> Function("alert(123)")()
[alerts 123]

Lesson: the Function object can be called with a string to make a function that evaluates that string

> [].constructor
function Array() { [native code] }
> ({}).constructor
function Object() { [native code] }
> (function(){}).constructor
function Function() { [native code] }
> (function(){}).constructor("alert(123)")()
[alerts 123]

Lesson: the constructor property returns the type of an object, and this gives you access to the Function object

> [].filter.constructor
function Function() { [native code] }
> []["filter"]["constructor"]
function Function() { [native code] }

Lesson: an array's "filter" method is a function and has Function as its constructor. Well, duh.

> [][[]]
undefined
> [][[]]+[]
"undefined"
> !![]+[]
"true"
> ![]+[]
"false"
> (!![]+[])[1]
"r"
> (!![]+[])[+!+[]]
"r"

Lesson: we now have the letters adefilnrstu, so we can construct []["filter"].

> [].filter+[]
"function filter() { [native code] }"
> ({})+[]
"[object Object]"

Lesson: we now have acdefijlnrstuv, so we can write []["filter"]["constructor"] and thus call our pseudo-eval on anything we can make as well.

> Function("return console")()+[]
"[object Console]"
> Function("")+[]
"function anonymous() {

}"
> 0["constructor"]+[]
"function Number() { [native code] }"
> '0'["constructor"]+[]
"function String() { [native code] }"
> Function("return assert")()+[]
"function assert(condition, opt_message) {
'use strict';
if (!condition) {
var msg = 'Assertion failed';
if (opt_message)
msg = msg + ': ' + opt_message;
throw new Error(msg);
}
}"

Lesson: we now have all the letters we need to make ""["constructor"]["fromCharCode"].

> String.fromCharCode(74)
'J'

Lesson: Enjoy the rest of the alphabet. We can now construct arbitrary programs and eval them.
Lua-resty-websocket
as an idea : you can create like odesk but for beginner freelancers with prices that are less than 200$ or 100$.Freelancer will use it to start their career and clients will use it to get cheap fees.If you ever did it : you can give 5% or 10% equity as a donation :p
I'd guess because this man is his friend, and he doesn't feel any particular desire to cause trouble for him.
Show HN: iPhone dock that sits on iMac stand + new responsive & interactive site
Perhaps the technical challenges for Phonebloks will be too great. However, a modular design is more than achievable if you don't mind reducing the number of blocks.

Imagine you have 4 blocks: screen, battery, file storage, logic. Each of these could easily be connected in a modular way, and in the case of batteries, already are in a good number of phones. Whilst you might lose out on some of the customisation flexibility that the Phonebloks concept showed, you do get a number of decent benefits...

1. Replacing screen if damaged or wish to have an upgrade.
2. Can upgrade storage space without upgrading the whole phone (SD cards are a decent way to augment storage, but the proposed method offers the chance to expand beyond the limits of SD cards).
3. Replacing the logic block only allows you to have an upgraded phone customised quicker than buying a new phone (no need to migrate contacts, settings and media).
4. Battery upgrades should be the norm anyway, it's wasteful to throw away a phone just because the battery no longer holds a decent level of charge, plus it allows for extended battery capacity upgrades.
Depends on how well you calculate length. Miniscule edits can produce enormous diffs.
https://news.ycombinator.com/item?id=6379272
Introduction to JavaScript and HTML5 Canvas
Gawker did this a while back. And reverted after their Google rankings took a hefty plunge. That is one very large caveat, that Ajax crawler spec is no magic bullet.

Nick Denton: "Dip in uniques largely because of drop in Google refers. Pageviews (which are driven more by core audience) less affected." -- http://twitter.com/nicknotned/status/61152134929981440

Nick Denton: "Google does not fully support "hashbang" URLs. So we're eliminating them rather than waiting for Mountain View." -- http://twitter.com/nicknotned/status/61465859079671808

Nick Denton: "Yeah, I'd advise against hashbang urls. Will kill search traffic -- even if you abide by Google protocol." -- http://twitter.com/nicknotned/status/62595141927583745
So far I've not heard "this can't be done." All I've heard is "I don't know how this might be done." Huge difference there. I also hear a fair bit of "this shouldn't be done", which I find incredibly disappointing.

Here's a hypothetical: we already know how to do noisy, shared-media device interconnects. It's called 802.11. Look at the size of wifi adapters: you can get a usable signal that works over meters from something the size of a USB plug. Now, imagine that doesn't have to include an aerial, or much of an amplifier, because even if you get a dodgy connection you're transmitting fractions of a millimetre into a chunk of metal, and you're looking at something that can be shrunk down to well within the scale Phonebloks needs, for pennies a block.

With something analogous to a router running a zeroconf system on the baseboard, it's not even particularly difficult to see how you might handle service discovery from the blocks you plug in.

Again, this is just a hypothetical, but it's just one way Phonebloks could technically be coerced into existence. I don't claim to know about any economic reasons, but there's a saying: those saying something can't be done should stay out of the way of those doing it.

So, less knee-jerk negativity please, it's far more entertaining to try to figure out how this could be done than to wallow in a brief moment of superiority by writing it off.
From my point of view there appears to be a huge campaign to discredit Tor or short FUD going on.

Okay, lately there appears the be a huge campaign to discredit Tor going on. The botnet, the Freedom Hosting thing.

We should fight back on that. Tor is still the best took we have and maybe these attacks are the best sign of it.

If you consider switching to a VPN like many do..

That's a bad idea. VPNs are no technology for anonymity. There are various reasons. They don't defend against various attacks, but more importantly they are owned by private entities. Did you hear of this PRISM thing? [rhetoric question] Well, guess what a private company.. even outside of the US would do if any government would ask for a backdoor, maybe even offering money.

A reason why there are these great releases about attacks on Tor is the fact that it is the best tool we have. There are attacks on it, but way less than on any comparable technology. Numerous institutions, universities, etc. work on both finding attacks and improving Tor. The Tor community is attracting the smartest people in the world, just like the NSA is. There is no other anonymity software with so many scientific papers written about it. There are attacks, none of them reaching beyond what can be done to VPNs, etc. and there are tons of improvements that are outlined, that only need a tiny bit more research or only the actual implementation. If you want to work on a real quality product for the greater good there probably is no better place than the Tor Project.

If you wanna help right now (meaning in seconds to minutes) here are some places to go.

If you want to host a Tor Bridge on the cloud for free or really cheaply:
https://cloud.torproject.org/

If you are using Firefox:
https://addons.mozilla.org/en-US/firefox/

If you are using Chrome/Chromium:
https://chrome.google.com/webstore/detail/cupcake/dajjbehmbn...

If you have a website/blog:
http://crypto.stanford.edu/flashproxy/

If you have more than just a few minutes:
https://www.torproject.org/getinvolved/volunteer.html.en
Social Security Numbers are applied for voluntarily by the parents of the baby. Usually the hospital puts together the application from what I understand, but the parents can request that the hospital not do that. If a parent makes such a request, they usually have to educate the nurses that Social Security Numbers are not required by law, and are voluntary. If required for taxing purposes, a person without a Social Security Number will have to apply for an Individual Taxpayer Identification Number (ITIN). There is even a process to remove yourself from the Social Security program once you are 18, or convert to a religion that does not approve of it.

I would also venture to guess that not having a SSN or even an ITIN to use in place of the SNN is an automatic disqualification for attending school, getting a driver license, buying a house, or getting a job.
Nail on the head.

I've never been able to explain my childhood satisfactorily (to me, to see the listener get it) to anyone. Less still why I made myself homeless and slept rough.

But those three articles... at a certain point, throwing in your hand is the best thing you can do. At least you've broken the cycle and now have the freedom to figure out your way out.
I think you missed the "free" part of the definition. The trade between the North Korean death camp guard and a prisoner is between individuals but that doesn't make it capitalistic (because of that "free" part being absent).
I'm Indonesian. According to the linked Indonesian website, the car hit a pedestrian and tried to escape (before hitting other vehicles). If you run over someone with a car, people around the accident can get very temperamental and can damage your car and harm you. That explains the driver being panicked.
It's also an appearence issue. Most women I know tend to choose their phone by its looks. Phonebloks would not appeal to most of them ("I see the screws!") and thus it is not a very marketable phone.
I think 10 min/day/year is too quick of a timeline. Perhaps 20 minutes a week per year would do. In 12 years we're down 4 hours. In 60, we're down to half what we are now, which is about where we should be, IMO, and is a long enough time to get excessive automation in place.
This idea seems like it would be a much better fit for tablets rather than phones.

You have much more room to play around with on a tablet and perhaps the typical usage patterns of the tablet actually encourages you to swap out your bloks for different purposes.

For example, I could switch to a better but more power consuming Wi-Fi module when I'm at school which usually has crappy coverage but could then swap that out for longer duration battery so that I can watch shows on the train ride back home without compromising on screen brightness or risk the tablet dying before I get home
Agree with everyone else on the semantic issue, nonetheless I'm loving the theme and built-in features and would 100% use this for some prototype builds.
Now That's How You Do Advertising: Nivea Reinvents the Print Ad
What makes you think the future will be better than the present? If history is the judge then it is more likely that we will end up in a situation where 10-20% of the people have everything and everyone else lives in super poverty relative to them. Most of history and even the present reflect that situation. Also it will require far fewer people to have absolute systems of control than it ever has before.

Or AI could take over singularity style.

I don't know why you assume the future will be better than the past. So far it honestly seems more like computers and robots have created a situation where most of the middle class is now useless to society. We seem to be reverting back to a system where there is only an upper class and a massive pool of peasants. For us to really replace the higher end of the workforce will require a singularity type of event.

Of all the possible futures it really takes a lot of optimism to not see some kind of dystopia.

Just look at the current privacy situation. Look at what the NSA is doing. Look at how google and facebook have been allowed to build a massive database of every action that we engage in with technology, and they are then allowed to sell it to 3rd parties without most people even knowing they do this and sharing none of the profits with us for selling our information. That is the reality of the future. Add largely automated robot armies and much more powerful systems of control plus finite resources.
When I set up my first server I was thoroughly surprised at the amount of login attempts. By now I've got most of Asia on a blacklist for port 22 (which doesn't matter, since I'm not going to connect to my server from an Asian IP in the foreseeable future). That throttled it down to about 30 attempts/week, which is manageable in terms of log reading.
The health benefits of walking, especially for people over age 50
Maybe there will be too much data-protocol and energy overhead if communications goes through this. Smartphones could be very modular if they weren't so thin, even a USB2 pseudo backplane for everything but the screen and cpu would be enough. Maybe in a few year optic based chip interconnects (ala thunderbolt) will be cheap enough to have pluggable very high bandwidth components in a handheld device.
This is a great idea. Own your phone. Right now, the phones we have feel like they are the corporation's phone and not ours.

I love this idea, and hope that they get enough interest to make a splash.
I've always wondered what exactly is the purpose of a jumphost? Wouldn't it be equally susceptible to attacks as the actual servers are?
I never figured it would be done in the way it's presented. I like it because there's a lot of potential. And if a lot of smart hardware engineers start working on it, we can develop something way cooler. I want to see companies recognize that people like this idea and start moving in that direction. I would love for this to spark pressure that moves us away from monolithic solutions and towards something more modular.
This is one of those ideas that look good on paper (or youtube) but just isn't practical. There's absolutely no spare space in a modern phone. If you make it modular, each 'module' has to have enough space for its component, PLUS space to bring it up to the next module size. This will make the phone HUGE.

The concept of an upgradable device is, however, great. Just not in the manufacturer's interest. Apple lose out if they offer a storage upgrade. Motorola don't sell another phone if they make the screen swappable to the next technology.
I'm curious if you could implement a GSM/3G phone using software defined radio, using a device such as BladeRF/USRP.

Amittedly they're not small enough to use as a normal phone though. Maybe you'd be able to scale down that tech though one day?
Teach kids programming – A collection of resources
http://en.wikipedia.org/wiki/Side_channel_attack does a really good job Of describing it, but, in short, a side channel attack isn't a weakness in the algorithm - both a OTP and AES are strong. Rather, the side channel attack describes information leaked in a particular implementation. If your OTP implementation left some registers or cache lines in a state from which key information could be gleaned, then the attacker would be able to decrypt your message. Side channel attacks are about weaknesses in implementations, not algorithms.
The Albert Einstein Guide to Influence
How Twitter Was Born (2009)
Minor niggle, the slide to unlock is a little off. It's neat and all, but the font and size of the slider look strange.
Can anyone tell me what the correlation is between being proclaimed a child 'Genius' and you're impact on society when you reach maturity? There must have been studies looking to see if these kids actually go on the significantly progress their field. My concern is that we might do these kids a disservice by accelerating their education in such a narrow way.
I don't buy the speed argument. In a modern PC, many things are pluggable. PCI express can transmit up to 30 GB/s, IIRC. Even CPUs and RAM are modular. If there was such a benefit from soldering them together, I'm sure we would be seeing more integrated systems.

Furthermore, the modem part of many smartphones is already a black box that is heavily isolated from every other component. It's basically just hooked into a bus, and connected to microphone, speakers, and antennas, and doesn't necessarily interface that much with the CPU.

I'm not sure the PhoneBloks concept would work. (Crazy ideas follow.) But what I can definitely see working is separating the computer from the shell (case, screen, speakers, camera, ...). We are reaching a point where the speed difference between smartphone generations becomes meaningless. In the future, you might be able to buy standardized "computing bricks". For one phone, you might need a 2017 model A brick, for a tablet at least a model C, and if you want to build a server, you just pick up a few (kilos of?) CPU bricks. These bricks would be so cheap and featureless, that they would allow really ubiquitous computing. Building a house? Build in a few, like power sockets. You'll get the equivalent of today's top PCs thrown after you as advertizement gifts.

This is not necessarily what must happen, but the reason I think it could happen is the following: Once the raw computing sector stops growing, and there is no longer much profit to make, the industry will want to move on. As we are already seeing today, specs will not be the main selling point. Instead, people will pay for features (a great camera, physical buttons :-), wireless charging, ...), a better integrated experience, a certain design, or a brand name (e.g. all Apple). Development will focus even more on that, and there will be a drive to reduce the cost of raw computing to it's minimum.
Exactly right re: doing it downstream (or in the case of virtual machines, outside of the guest).

I didn't mean 'intend' in the context of unauthorised use, i was trying to differentiate between a 'single user' ( can't think of a better term, but i'm sure you know what i mean) application server and systems where you purposefully give shell access to other users but want to restrict egress.
I know how you feel! I started reading it on a plane, and I remember feeling cheated when the plane landed and I had to put the book away. Didn't the airline understand that reading Surely You're Joking is more important than their petty schedule?
The problem with that is the delayed gratification - most productive endeavours these days require months on end of hard work before any reward can be expected - especially if you start out as a non-expert.

Reminds me of the famous toddler marshmallow experiment - how kids able to endure delayed gratification tend to be more successful later in life.
As much as it sounds fun, I very much doubt that industry will adapt it. Look at Android which is open-sourcish, updated frequently and the whole os should be easy to transfer between devices. In reality no one wants to allow people to do that. Older devices are not updated and crappy additional software is installed just for this reason - to make sure people have to buy complete new phone often and to make sure it's the right one.
I don't think it's the right approach to shout into the void instead of, let's say, build a startup and go on kickstarter.
Not to be pedantic but "PRISM" is a code name for a specific program, and it's not the one that does in-transit interception. That would be XKeyscore.
MeteorMaker - A place to store Meteor snippets
> PRISM is reputed to be a classified US government that involves [...] This document describe the security concerns [...]

/facepalm
It will never work because there is no apple logo on the phone.
Another good guide:
http://devo.ps/blog/2013/03/06/troubleshooting-5minutes-on-a...

Discussed here: https://news.ycombinator.com/item?id=5361335
i meant some site are banned or there are blocked and hence affect internet freedom.
"Before Netscape, Barksdale had worked as CEO of McCaw Cellular/AT&T Wireless and, before that, as Vice President and COO of FedEx.
[...]
President George W. Bush appointed him to the President's Foreign Intelligence Advisory Board."

https://en.wikipedia.org/wiki/Jim_Barksdale

http://www.nytimes.com/2013/07/04/us/monitoring-of-snail-mai...

http://www.mozilla.org/security/announce/2013/mfsa2013-53.ht...

http://www.wired.com/threatlevel/2013/09/freedom-hosting-fbi...

https://www.schneier.com/essay-448.html

https://www.schneier.com/blog/archives/2013/06/blowback_from...

"I generally do not connect to web sites from my own machine, aside from a few sites I have some special relationship with. I fetch web pages from other sites by sending mail to a program (see git://git.gnu.org/womb/hacks.git) that fetches them, much like wget, and then mails them back to me. Then I look at them using a web browser, unless it is easy to see the text in the HTML page directly. I usually try lynx first, then a graphical browser if the page needs it.

I also browse from other people's computers, with their permission. Since I don't identify myself to the sites I visit, this browsing can't be connected with me.

One consequence of this method is that most of the surveillance methods used on the Internet can't see me.

Another consequence is that I never pay for anything on the Web. Anything on the net that requires payment, I don't do.

I would not mind paying for a copy of an e-book or music recording on the Internet if I could do so anonymously, and it were ethical in other ways (no DRM or EULA). But that option almost never exists. I keep looking for ways to make it happen."

http://stallman.org/stallman-computing.html
You can clearly see the cost of modularity if you compare my current laptop to my previous one.

My current laptop is a 15" retina MacBook Pro. It isn't upgradable in any real sense of the word.

My previous laptop was a 15" MacBook Pro. I could upgrade the RAM and HDD, and with little difficulty replace the battery.

The upgradable one is 5mm-ish thicker and about 400 grams heavier.

Not a true apples-to-apples comparison, but it does show the bulk added by having end user interchangeable connections on the hardware.
why would one expect the Comodo Group(!) to be more aware of the subtleties and technical details?
Flashproxy seems pretty dark unless I've misunderstood it - automatically opting website visitors in to becoming a transient TOR node is deeply unethical.
> Not a true apples-to-apples comparison

HA
While upgradeable is one aspect - another big aspect of the problem is it being fixeable. Due to a variety of reasons, it's not affordable to fix your old phone, you might as well buy a new one. FairPhone is another phone project, which aims to actually make your phone repairable too. I think it'll make a bigger dent in the short to medium term.
Desktop PCs are huge. Laptops are still large compared to phones, and losing modularity fast as they're getting smaller. Your comparison is apples to oranges.
SSH is TCP based, you need two-way handshake to construct the connection. Source address spoofing gets you only half-way there.
People are complaining about fragmentation on Android, heck people are even complaining about it on iPhones. How would you develop a good mobile OS with apps on hardware you can't test against? Even if the hardware problems was solved now, I do not think people would be happy to dev against the "platform".
I'm _really_ glad that you're out there working on this problem.

Is this any different than certpatrol? And also, what ended up happening to your convergence initiative?

Finally, what do you recommend for individual folks to do in order to protect their SSL traffic?

Thanks again for all the amazing work you do!
"To a man with a hammer every problem looks like a nail"