skysight-inc/HackerNews huggingface dataset:
Hi Jesse,

So, let's talk about this point by point:

1. CTR mode and CBC mode both fulfil the same security definition: IND-CPA. IND part of the security definition refers to the fact that: there exists no polynomially bounded attacker that can with probability better than a half distingiush which of two plaintexts (that the attacker choses) have been encrypted under the scheme. The CPA part refers to the fact that this is a chosen plaintext attack, and the polynomially bounded attacker may submit plaintexts for encryption.

CTR mode does not satisfy a stronger security definition than CBC mode, but is parallelizable for encryption and decryption. Whilst this may sound like it makes CTR mode preferable, it also means that each block of ciphertext is independent. With CBC mode, errors propogate throughout the ciphertext meaning that it is harder for an attacker which does have access to a encryption oracle to modify the message through modification of the ciphertext. They would have to be able to modify every block of the ciphertext in CBC mode, whilst having to only modify one in CTR Mode.

2. To clarify: all PID is encrypted under the strong AES encryption I have outlined above. In practical terms there is only one security definition that is stronger than the one we are using, which IND-CCA in which the attacker also has access to a decryption oracle. The attacker in this case is arbitrarily restricted to be unable to decrypt certain plaintexts. This does not make a large deal of sense in a real world attack, if the attacker does have access to a decryption oracle, it is likely they will be able to decrypt any ciphertext and blow the encryption wide open.

Regarding the necessity of encrypting PID, for various compliance reasons it is necessary for us to ensure that if someone pulls our servers out of the rack they can't get access to our users' data. This scheme satisfies our compliance requirements and, we believe, keeps our permission control model cryptographically enforced.

Thanks
--
Sam Phippen

How are you? Engineer.
Heh, that was completely unneeded, really.
Having an always-visible "current section" header while scrolling a large document seems quite useful to me...
>The author of the article is just another "tech blogger"

So ridiculing him instead attacking his arguments is A-OK but he has to keep silent because Thorwalds is a great coder?
> Nice ad hominem.

How is calling you young, saying you have your entire life in front of you, an ad hominem? Except possibly to suggest that you have a quota of mistakes you need to go through before you become more efficient at avoiding them?
Can someone explain what 'Position: sticky' is please?

As I'm having difficulty accessing the video:

(I still seem to have lots of issues trying to watch videos in the browser. Even embedded Vimeo never works for me (Chrome/Debian/Linux), seems flash video is the only thing that consistantly works).
I think it's simpler to tribute Sinatra in Java by annotating methods:

@get('/hi')
String myMethod() {
return "Hello World!";
}

I made a prototype of this (including extracting arguments Sinatra-style, which I think is its coolest bit), and didn't encounter any serious problems with this approach.
Linus Torvalds didn’t create Linux
- (BOOL)yoMamaWearsCombatBootsAutomaticallyWhenAvailable;

priceless!
I agree with the sentiment of the text, regardless of the author's history. I don't like Obama either, but had he written this I would still have agreed with the content.

Is attacking Putin's character useful in this context?
People need to understand Putin's motives here.

First and foremost is Putin needs to keep Syria in place to prevent Europe from having access to another natural gas pipeline that he or his allies do not have influence over. Qatar wants to sell natural gas to Europe, they want to build a pile line to do it. Well they need/want to go through Syria to get there.

Second, Syria is home to a Russian naval base, their only one in the region.

Third, Syria buys a lot of weapons from Russia, they buy quite a bit of other materials as well.

Fourth, outside of Syria Russia's only real ally in the area is Iran but they are a bit more off the leash than Syria is.

Top it off with one of the weakest in international affairs US administrations and you give Putin the means to control the worlds opinion. Lets be honest, the amount of dithering on how to act by this Administration is really depressing. It almost seems they were convinced the Middle East would love them and do want they //the Administration // wanted just because they weren't GW Bush. Yet, we have Benghazi, we have the indecision regarding Egypt, Iran is off and running catching drones or faking it all the while mocking the US, and now Syria has shown this Administration is clueless. Its almost as if there are a dozen cooks all trying to do stuff and they either don't make a decision or one does something forcing the others.

TL;DR

Putin's concerns are economic (natural gas), military (base/arms sales), and prestige. With a weak US Presidency he saw an opportunity and took it. Sadly he is/might pull it off
vi has always been a full-screen visual editor, as in display screen visual, not teletype visual. The paper-oriented predecessors to vim/vi were ed and ex. Like you I used teletype-oriented editors until vi came along, about the same time I got my own ADM-3A, the same dumb terminal Bill Joy used to develop vi on.

I think most of us who learned vi back when it was simple have the keystrokes burned into our brains, and we know that vi is quite efficient once learned. I still use vim but not any plugins or extensions and I don't write scripts for it, because I just forget about them anyway and they aren't going to be installed on the GUI-less servers I ssh into. I use a more modern editor (TextMate) most of the time.

I don't think vi or vim are terrible, but they can feel clunky on modern GUI-based operating systems. A serious driver should know how to shift a manual transmission. A serious programmer or sys admin should know how to manipulate files and text with standard UNIX tools and editors. vi may not be the best text editor depending on how you measure "best," but it is ubiquitous and does the job it was intended for.

My advice for vim users is to start with the vanilla install, no plugins. Learn to configure things you really need in the .vimrc file. If you find yourself creating a complex and over-personalized editing environment to save the occasional keystroke or make vim work like an IDE, you are shooting yourself in the foot in the long run. You may as well just use Eclipse.
Well thanks to McKinsey is hard to say, since they're not very public about at which companies they consult. But for example Hireart is founded by an ex-McKinsey consultant and they're doing quite well it seems.
So move to Russia. You first.
Microsoft has a culture of being first of the market, though not always with the best product. Products like Windows 98 and IE4 were buggy, but so far ahead of their time that they had a crushing impact and it took the rest of the world years to catch up. Nowadays competitors with better solutions are usually not far behind. Google and Apple are rarely first to the market, but usually the best. It's a more effective strategy nowadays.

Amazon is one of the few companies that still manages to be first to the market and be successful (Kindle, AWS). Perhaps because many of the old Microsofties went there.
It's called a BETA for a reason :-) The 3GS was released in 2009 which is quite a long time ago in technology terms so to expect it to be able to handle a more CPU-intensive update easily is a bit silly.
JS library for adding voice commands to your site, using speech recognition
I was just talking about BETAs in general. The one I have at the moment is a bit better but I tend to charge my phone at work so I don't usually notice
Why should the CPU not have an internal counter that is backed up in flash memory between reboots? 128bit would be enough, with the highest bits set to the processor serial number. Using this counter in AES-CTR mode – i.e. encrypt the counter with the secret key to generate the pseudo random data – the NSA could reconstruct the internal CPU state from a single block (16 bytes) of random data. As many random data is published verbatim, for example as nonces, getting such a block should not be a problem.
Hi Andrew,

to cut a long story short, we've done some work to decrease the resolution of the encrypted data in the aggregates. For example: we store age to nearest year instead of date of birth, location is severely reduced in resolution from address to state and so on. By this way we're confident these attacks aren't directly applicable, whilst the aggregates are still useful.

Your own doctor always has access to the full resolution data via access to your data key. These attacks are something we're concerned about too and we're looking to bring in third parties to ensure that our system is secure.

Thanks
--
Sam Phippen

How are you? Engineer
The boss is right though. This (and a lot of other things) is much easier in almost every other GUI lib I worked with. Some things like documents (flowing text with images etc) are easier in HTML, but that is what it was made for.
Apart from their Adobe suites... (In my experience).

Note that I don't have any pirated software on my machine. Running Debian here.
These don't seem like the most sound criticisms honestly.

It's still a command-line editor. Just like vi.

Not sure what the issue is there?

It cannot take advantage of the modern computing environment

gvim/macvim exists. They also give you regular clipboard support. Though I honestly don't get much out of all that, and am happy enough with vim in a terminal, but I understand the motivation.

To perform multiple operations ... requires you to switch modes

Vim is modal, yes, but what is the specific disadvantage of that? That it has a learning curve? Mode switches are generally single key presses, so it's not exactly onerous once you know what keys to press. Equivalents in "modern" text editors require use of the mouse, which while being much easier to figure out, is also much less efficient. Using the mouse, though just taking a bit longer each time, is enough for my brain do a switch and focus on that action instead of the code - unlike the vim mode switches I do all the time without thinking.

No, actually, in the vi days, to save paper one had to enter more keystrokes, not fewer

That sounds plausible, but not all that relevant to how one uses vim now.

former users of vi were astonished by how few keystrokes were required to accomplish things

Also irrelevant. Vim's text objects, which basically offers you a vocabulary for text manipulation, has no match and will generally allow vim to win in practically any keystroke comparison. It's not clear how well you know how to use vim, if it all, though you've clearly used and hated vi in a past life :).
The Banality of Genius
Pair programming via browser
> I'll point out that any modern version of vim uses mice just fine. It also uses the system clipboard just fine.

What you see as vim appearing to exploit a mouse and system clipboard is actually Bash and (sometimes) a command-line app (example Konsole) doing so, or equivalent utilities outside vim in a non-GUI level. Those features work with any editor in exactly the same way.

As to using the system clipboard just fine, you can copy text from vim or any other displayed source of text, but you cannot paste it, because it's not vim that's acting, or is in any way aware that text has been copied.

> ... because using a short key combination to select and manipulate text is measurably faster than moving your hand off the keyboard, manipulating a mouse or touchscreen, and then moving it back to continue typing.

Right -- the mouse was foisted on a gullible public willing to suffer a reduction in efficiency in order to have an electronic pet, all against their better interests. And the industry's usually diligent efficiency experts were all bribed to overlook the reduction in efficiency you've just brought to our attention.
I thought it was Mactard.
I think it is worth looking at this in another way.

Why would Assad use chemical weapons when he knows that the US is looking for a reason to invade?

He isn't an idiot.
I've had a similar experience due to coming down with a condition called occipital neuralgia (essentially compressed and/or damaged nerves in the scalp). I was in a car wreck several years ago, and it has been a nightmare ever since.

The main symptom for me is the continual feeling of pressure in the back of the head, and a bit of tenderness over the greater occipital nerves. I can still program somewhat effectively, but my short term memory is horrible, and quick-thinking is down the tubes. It's fairly similar to a mild/moderate hangover.

I would not say that I am dumb or truly have the same experience as someone of low IQ, but the whole experience has instilled a bit of resentment towards the Silicon Valley mindset that every dev must be a quick-thinking, 10x wiz kid. I am not an A-player at this point, but by putting in a few extra hours a week I can keep up with the devs on my team, and I try to make sure my output is somewhat on par.

Fortunately, botox has made a tremendous impact (takes pressure off the nerves), and I'm getting surgery soon so fingers crossed I can make a solid recovery.
If "any sufficiently advanced technology is indistinguishable from magic" [Arthur C. Clarke] then incantation is really just programming through voice interface done smart.
Are you using Firefox? https://support.mozilla.org/en-US/questions/961627
Nokia reinvented - interim CEO explains Nokia’s future
What are protected binaries? This is something I've not heard of OSX having.

As far as I know, as long as all the hardware is stuff OSX has drivers for (and you generate a DSDT to describe that hardware) then you don't need any special "authorization." You just put in the OSX installer USB/DVD and it works.
If you would like to watch the video, right click download this link: https://vid.ly/9u6k6d?content=video&format=webm

That should download the file directly, and you can watch it in a native player.
You are wrong, he states "you are not allowed do this if we don't consent, and we don't consent" which is according to international law.
Thank you for saying this publicly. If more did the bubble around his persona would quickly pop.

I'd have no problem if all he did was negotiate good terms. He certainly owes his LPs that. The problem I have is presents the persona as being founder friendly. Sadly, he's at the far other side of that spectrum.
The author makes an argument that is somehow both adhom and slippery slope. By pointing out something that everyone knows (Torvalds is rude, which not necessarily a bad thing depending on who you ask) he adds weight to his second argument about /dev/random being insecure (which is complete bollocks). I christen this logical fallacy the "Ducklinism".

And I have to agree with you about his obvious lack of expertise in the department. Where he fails to make a compelling article is not his lack of expertise, rather the lack of interviewing many people who do have that expertise.
I don't think it's reasonable to question that assumption

It's reasonable to question ALL assumptions.

Your analysis focuses only on Facebook.

No it doesn't. I pointed at FB as the largest of the present SNs, but referenced other SNs as well. FB is a leading exemplar of the field. My use of it isn't intended as exlusionary of other SNs.

My original goalpost was "the academic research like this,"

Which largely moots the rest of the argument. Though as I pointed out, "research such as this" actually does pose some reasonably interesting and useful applications. We can argue over those magnitudes, but I'll stick with my initial assessment that the net benefits of such research are likely to be high.

Also, but narrowly identifying what you feel is and isn't valuable research, you're sharply skewing the results to your favor. It's as if I said "but I meant by 'social media' 4Chan and HotOrNot".

it's what I feel is an extremely obvious claim.

And it's what I feel requires citation.

Which you've failed to provide, being rather more inclined to engage in rhetoric.

HAND.
Oh, you're right. Thanks. (Can't edit the original comment anymore)
Table-based layout was useful and frequently easier too and we still abandoned it. I still believe this is behavioral markup and should be done in JS.
I hate the Java style as much as this nonsense-operator-like-function-name style of Scala.

Why do they have to name them ~ % %%, if they can name them ANYTHING. Just to make the writing shorter?

It's like using variable names like a, b, c, data, value etc.

I want readable code, not short code by hook or by crook...
Yeah, or if the onboard flash memory is too difficult to implement, they could even just initialise the lower bits of the counter from the real hardware RNG every boot. Either of these options would be statistically indistinguishable from true randomness unless you knew the key.
The answer is simple: vim = vi with decorations. If vim had done away with modes that date back forty years, I would acknowledge that.
Great job guys, it only took 11 years (plus however long it takes to get this into IE/Chrome/Opera…) to finally solve the problem of table headers in CSS: http://lists.w3.org/Archives/Public/www-style/2002May/0153.h...
All it has to do is detect the code sequence in question and XOR the output of RDRAND with the randomness from the other entropy sources before returning it.

How is that going to work? i.e. how is RDRAND going to 'detect the code sequence'?
Hi Sean! We met in Neu Odessa bar in Berlin earlier this year. I was the "nearly-YC" guy from Scotland. Glad to see you are getting this out there now. Good luck with it!
I agree. The CSS standard seems like a giant hack job. Which I suppose is generally the case for non turing languages that have to stay relevant in a changing world.
*I'm not a part of the organisation
Proof that hype alone doesn't cut it. HackFwd was one of the coolest kids in the block with enough press and attention.

I'd suggest 2 more why's:

1) Consumer Web is very difficult in Europe. It requires scale and scale isn't as easily achievable than in the US

2) Because of 1) Dev-centric teams only don't make the cut. In Europe more than in the US. Devs can make good CEO's but teams need more on the biz dev level
+ the fact that HDMI, DVI and DisplayPort, besides being technically far superior to VGA, are backwards compatible with VGA through a cheap adaptor.
Formal school lessons should start 'above age of five'
I love this! I think there's some real mileage in something like this realised a little better. For example:

- Let users upload their own portraits

- Sort out the skill dependencies to be more logical. Why do the 3 levels of jQuery effects not depend on JS mastery for example?

- Less emphasis on specific tools and more on types of skill, as pointed out by some other commenters

- Let us pick classes, perhaps with two components to the class, e.g. "Frontend ranger", "Devops Paladin", "Database barbarian", "Data Scientist High Elf" etc.

- Sort out the ugly looking pushState url to something cleaner that people would be proud to link to
I hate vim too, but some of your points are simply not true:

> * To perform multiple operations, like moving the cursor around, entering text, deleting text, searching the document, saving and loading files, requires you to switch modes. Just like vi.

Open a file. Insert some text. Use arrow keys to scroll. Hit Alt-/ to search forward. Hit Alt-Shift-/ to search backwards. Sure, some commands need you to switch modes, but not all.

> * It cannot take advantage of the modern computing environment -- mouse navigation, different fonts, text styling, page layout, or anything else. Just like vi.

One can do text styling (but only with colours, I think) with vim. With gvim, one can use a mouse, and change fonts.
You think 500MB/s [1] is slow? Or are you concerned with the latency of each call?

Also I don't understand why you rant against PRNGs. Do you know that this stretching of actual random data makes RDRAND considerable faster than using actual randomness?

[1]Source: http://stackoverflow.com/questions/10484164/what-is-the-late...
ASVAB practice test
It's good seeing the major roads so clearly defined outside cities.

There are a fair bunch of oddities going on in it though.
Actually, having numerical prefixes to commands is not a feature constrained to modal editors. In something like Notepad, to replace three next words, you need to press shift+ctrl and hit right arrow three times, then just start typing. The only inefficient thing here is a repetition of left arrow, and it's solved in Emacs, where to do the same, you'd press Ctrl+3 Ctrl+<right> and then started typing (if you have delete-selection-mode enabled). So it's very similar to <esc>c3w in terms of complexity, really. On the other hand - I don't quite understand what lutusp means by "modes" - by what he writes here, I'd say that Emacs enters "command mode" after pressing (for example) C-u in exactly the same way Vim does after <esc>. Actually any editor with commands bound to key sequences can be said to be modal in the light of what he writes. And Shift+Right and then writing something is a command bound to a sequence of keystrokes, which means I'm using a modal editor right now, writing in a textarea in Chrome. I don't think that's what lutusp wanted to say, though.
I won't buy because of the horrible experience I had with the ASUS support who refused to repair 2 laptops which clearly had manufacturing deficits within warranty. never again.
You have to say "is not carrying the" rather than "has no", to get it to compile.
{position: sticky}

It looks like it pins an element in a fixed position when it normal position has scrolled off the screen as long as it's parent container is visible on screen. It displaying it inline as normal when its position is visible onscreen.

It can be used to make sticky-headers like iOS lists have: e.g. showing the letter of the alphabet at the top of the screen when scrolling through an address book .

It will be really useful for keeping the row titles visible in a long scrolling table.
I was thinking more about the fact that you had switched to C/C++.

I agree that re-writting an app of that size is a giant PITA.

You could always use GWT though, and compile Java to Javascript. Altough you would probably have to re-write code as you're not targeting an applet anymore.
"most ethnic Russians consider themselves higher race and everyone else is intellectually inferior"
Do you have any proof for that except for what your father thinks? Like sociologic studies or something?
Yahoo CEO Marissa Mayer on NSA data requests: ‘You don’t comply, it’s treason’
> We allow the wild web to have access to our closed source GPU driver blobs but we elaborate tinfoil hat theories about rdrand. This is insane.

This isn't cryptography, it's politics. The 'taint' is ideological.
No you didn't get my analogy.

The parent comment was stating the point that Putin was making it illegal himself by vetoing and retracting the veto would have made it legal. The same thing happens in sex, if you consent to it, it's ok; if you don't, it's rape. That's the mechanism of consent and of veto.

In your analogy there is no way the white bus passenger could instantly change the law by consenting to the black man sitting in the wrong section. It is illegal regardless of his opinion.

In sex as in international diplomacy you need unanimity (at least of the security council).
Oh yeah? So you're saying Putin is like Kim Jong Il: he doesn't give speeches very often, but when he does, it's always to a standing ovation.