skysight-inc/HackerNews huggingface dataset:
How about neither? The designers of the SSL3-era ciphersuites knew that MD5 was shady but had few better alternatives because those ciphersuites predate even the SSL3 standard itself and thus readily available SHA1, so they used constructions that remain secure 20 years later even with broken hash cores. And subsequent designers and implementors have swapped RC4 in and out of TLS as needed to mitigate performance problems that would have ruled out TLS entirely, and then later to mitigate attacks on TLS ciphersuites that are in fact worse (currently) than the RC4 vulnerability.

I know where you're coming from (YOU JUST HATE AMERICA) but this just isn't a politically volatile issue.
WHEN Your BUSINESS GETS LIED TO
Most likely they just don't have any easy way to do it without reactivating the droplet. If so, there probably is some higher-level admin who could do it, but $5 a month doesn't buy you that support plan.
I'm not much of a wordpress user, so alas can't provide good wordpress examples, but this is really a software in general thing. Run a Linux box? How many times have you upgraded OpenSSL in the last five years?

Hopefully a lot.
That's not the third option he was thinking of.
Ya that's messed up. An excellent example of unnecessary govt meddling.
And you probably shouldn't ascribe to stupidity what can more easily be explained by "not at all stupid or malicious".
Writing the title with all-caps will really give a bad impression about your post.
The source is a nice example of pretty clean looking elisp.
This data is per year?

It does show that Iceland is an outlier, but only because they publish so few books that every additional one really changes the numbers.

Also, can you add a graph (just of the frequency column)?
I think there are a couple of general reasons bednets or deworming (and vaccines) are still good things to deliver via aid program rather than sell, without taking away from the awesomeness of GiveDirectly. (And I know you're saying you know such reasons might exist, but I think it's worthwhile to go into them:)

One is logistics: a program to reach everybody unlocks some economies of scale. Much of the cost of these programs is just getting supplies and people to all of these remote villages with impassable roads, the occasional corrupt official or militia, etc.[1] Some of that is effectively fixed cost, and doesn't vary much whether you have two boxes of deworming pills in the back of your truck or 20. The cost per person is lower if you can amortize those fixed costs across everyone.

The other is that sometimes active encouragement is worth it. Even rich countries have policies to try and get folks to vaccinate and for other health goals like getting people off cigarettes or fighting obesity. In poor countries there are two further reasons a push could help: there's not enough accurate, trusted medical info (not even high school bio for everyone; that's part of how "traditional healers" survive), and the cost of a vaccine feels a lot higher.[2]

All that said, I get the frustration that there are so many big problems aid like this _doesn't_ directly help with. There's partly just a problem of scale--you need a lot more resources (whether investment or aid or what) to deal with the lack of infrastructure, etc. But I do think in the meantime, the science and to some extent plain old arithmetic indicate that basic health programs are still doing a ton of good.

[1] Digression, but if you want to read about what it's like to take the long way to a remote old tin mining town in the DRC, http://www.amazon.com/dp/1851689656/ is amazing

[2] Same thing was said, perhaps better, by http://www.quora.com/Development-Practice/Are-bednets-really...
"Your most unhappy customers are your greatest source of learning" - Bill Gates
A Jail Visit with the Alleged Dread Pirate Roberts
I am working on a similar tool in Node, called bon[1]. I'm glad to see so much interest in Docker lately, it's a very exciting technology.

[1] https://github.com/strapper/bon
I would expect this to be to allow market segmentation and price discrimination. A business might be willing and able to pay more for internet service than an individual, but less likely so if they could get the same thing for the individual's price.
Q - Treating Text as a Database
There is an attitude, a bohemian attitude, a beatnik attitude... that it is more free to live with the junkies and the prostitutes and the gang bangers than to be hiding away behind some gate.

This is what is ultimately being destroyed in San Francisco. A real understanding of what it means to be free.
I tried to delete my YouTube account today as a test. I failed because it seems the only way now is to delete all your accounts on Google, including Gmail and Google Docs. Google basically wants to take over my identity and manage it. "You can check out but you can never leave at Hotel Google" is what I fear. What if I did delete everything? Would that even work? Don't know.
Wrong link, the video mapping the impossible is this one: http://youtu.be/NuZUSe87miY
I believe Dave McClure also encourages you to have customers that either love you or hate you, since those are the source of real feedback. Indifferent customers are just that.
I know it goes to another website, but is the database connecting to the new website, or is the new website connecting to the old website that connects to the DB? I feel like this matters for SSL reasons.
You forgot to say "I don't get why anyone is surprised by..", to get the full HN bingo card.
No, only clients that want it. Accountants and bookkeepers can have clients on Xero as well as other platforms. There are incentives to have them all on Xero, but there are no requirements to be 100% Xero.
A hundred years earlier: "Genius is one percent inspiration, ninety-nine percent perspiration."
Surely this just speaks to the productivity of spammers.
Who are these people who have whack email addresses trying to sign up anyway? They must find the web a pretty difficult place to navigate. Has anyone actually come across a real world scenario where a user has an email address on the cutting edge of RFC specification? Does anyone capture these email addresses? I've never come across one before in the wild. Is this a problem that actually exists?
This is sketchy. The new server no longer attempts to provide any forward security.

For the old (now revoked) site, Chrome would use: TLS_DHE_RSA_WITH_AES_256_CBC_SHA. For the new liberty.lavabit.com site, Chrome will pick TLS_RSA_WITH_AES_256_CBC_SHA with the new server. This means that instead of having to factor a 1024 bit dh parameter for each session, the FBI/NSA/etc will be able to be able to decrypt traffic to this server when they get the private key.

https://www.ssllabs.com/ssltest/analyze.html?d=liberty.lavab...
https://www.ssllabs.com/ssltest/analyze.html?d=lavabit.com
So... instead of using a tool that will search virtually every source of information on the internet for you to bring you the most relevant results, you are blogging about how you limit your search breadth to single places that you happen to participate in...

...yawn
Perhaps I do operate it. Can be very useful on say a dev box.
Veusz is nicely designed and quite original. There are a few Qt-based programs more similar Origin: QtiPlot, LabPlot, SciDAVis. In 2009 there was a big announcement, featured on LWN and other Linux websites, that LabPlot and SciDAVis (QtiPlot fork) will merge, but soon after both projects died.

At that time QtiPlot was very actively developed by one guy who was living off license fees on his GPL'ed program. I was trying similar thing then (with program called fityk) and emailed him to ask how is he doing. In my case, it was interesting experience but after a few months and depleted savings I had to find a day job. He survived much longer with more popular program, but I suppose he also has a day job now.
Outsiders are agents of change
I would expect government regulation to be a common strategy for people who want to keep certain things from being built near them.
Because higher education is over subsidised and under performing. It's nice to get so much loan and grant money for a few years of dossing.
Understand the problem
There's a difference between end of support and end of backwards compatibility.
>"No, your sequence IS distinguishable from a uniform sequence."
No, it is not distinguishable. The definition according to wikipedia: The discrete uniform distribution is a symmetric probability distribution whereby a finite number of values are equally likely to be observed; every one of n values has equal probability 1/n.

So the distribution is indeed uniform but it fails in being random.
I take your point, I should have phrased my thoughts differently. I did start with "I think", but I could have made it clearer that I didn't mean to criticize the paper, but rather to invite explanations from people who know the subject better than I do.
Which one? There are 296 distinct neighborhoods in Baltimore. It's very possible your brother's good neighborhood was near a bad neighborhood.

http://en.wikipedia.org/wiki/List_of_Baltimore_neighborhoods

Baltimore has a 10.8% unemployment rate, is the heroin capital of America, and is both one of the most dangerous cities in the nation and the world (based on murder rates, but that's mostly gang violence). Getting your car broken into is an expectation here, not a surprise. Some of us leave our car doors unlocked so we don't have to replace the windows.
How I Learned to Use Body Language to Attract Women
Gates's maternal grandfather, a multimillionaire bank president, left him a million dollar trust fund; his mother was on the a United Way board with an IBM exec which is how he got the contract for DOS.

The GI Bill had little or nothing to do with Gates's success.
I'm afraid you've exhausted the limits of my precomputed benchmarks. :)

I don't know the answer offhand, but I would suspect that hardware-accelerated AES-GCM would win. It certainly does in single-threaded, "one-session"-esque tests, and the margin of its victory makes me think that hardware-accelerated GCM would be hard to beat by anything.

On my machine, a single thread/core running nothing but AES-GCM can encrypt/decrypt 8192 byte blocks of data at 1.32 GiB/s (this is using OpenSSL's benchmarking feature). Yes, that's gigabytes, not gigabits. It's literally faster than IO for my SSD. (Salsa20, without a MAC, can do the same at about 0.64 GiB/s.)

When I told OpenSSL to use four threads in parallel, it ranked at 5.01 GiB/s, which is absolutely crazy.

That said, beyond a general leaning towards AES-GCM (simply because it is so fast with hardware acceleration), I don't have any hard data on which would be the victor. But I may just construct some benchmarks to test that out, because it's an interesting question.
Ghost is super cool and I love the UI, but I also find that having a persistent database limits some of the portability. And, depending on what's in the database, it might mean that developers can't use their favorite tools (like Sublime Text, etc.) to author content, develop and design templates, etc.

This is a bit of a shameless plug, but I figure it's relevant to this topic. I just put up blog post introducing my new project, Grow (http://about.grow.io/blog/all-i-want-to-do-is-build-a-web-si...). Grow overlaps with Ghost in some ways, but attempts to be a full-fledged, modern file-based CMS and is not designed just for blogs alone. I've been following all the replies in this thread to get a better idea on what people are looking for, and I think I've nailed it.

Basically, the way I've architected Grow is the whole system is file-based: content is stored in Markdown or YAML files, templates are stored as Jinja2 templates, separate from the content.

When you start up a Grow server for development, essentially what amounts to a super lightweight in-memory index is created from the file structure, and that allows your site to be generated (including pages that leverage complicated queries or access content through taxonomies).

This design keeps everything incredibly portable (zero-configuration development AND zero-configuration deployment) – which is one of the values that I hold to be very important. Anyway, the project is still super young (and my blog post is light on technical details, but I'm working on it), so I'm interested in getting any early feedback.
Wait! Didn't he erase the servers? Wasn't that the point?

<Akbar> It's a Trap! </Akbar>
We realise we can't build it all. So the API enables Xero to stay flexible, if you really need additional features there will be suitable add-ons. We have Payroll in Australia.
It says that to cover the fact he's still giving advise.
The rich have been giving out advise to the poor forever.
The one little act they alwys leave out is the amount of
support they received along the way. It's always conviently
left out.
Datasheet Archive: 350 Million Datasheets From 8,500 Manufacturers
As we think about success as habits vs. goals, a good app to consider in practice is Lift [1], available for the web and iOS.

1: http://lift.do
FOAAS! (F*ck Off As A Service) https://www.mashape.com/community/foaas
This is basically an idea that you shouldn't set goals on outcomes but on behaviors. The idea isn't new and is kind of mantra in some fields. One very specific one: professional gambling. This is good example because professionals gamblers have very long and imprecise feedback loop and setting goals on outcomes is recipe for constant frustration and confusion (sometimes you make great decision for 2 weeks and lose and sometimes you make awful decisions for 2 weeks and win big). Also for them it's easy to understand that outcomes are very poor indicator of good behavior. At least in "short term" but in many games the short term is sometimes several months or more. That is way more than our brain comprehends and you really have to fight its tendency to link value of behaviors with instant outcomes they produce (how intuition but also superstition is formed).

People without gambling background often have different view on reality - it's not so easy for them to appreciate luck because they are not trained to recognize it and not trained to deal with it in methodological way. I love the take on those issues by the author. As someone who did professional gambling for many years I see the concepts popular in my field worded in "real life"/business terms. Great !
Zenefits (YC W13) Rolls Its HR Automation Services Out To All 50 States
I'm just going to add that I think it's silly to get paid your last salary for vacation time you earned when you were 25. While I don't care for caps on the accrued time, I see nothing unfair about scaling the time by your salary - such that if you have 100 vacation days and you get a 10% raise you now have 90 vacation days.
It's just that some people's unique opportunity is to be sold into child slavery.
Exactly. He should have appended "...to me" to the end of his title.
Qualcomm invents a chip that learns
Unicode-math 0.2.0 Released
Unpaid interns not protected from sexual harassment
Here is the announcement https://liberty.lavabit.com/
They specifically left email off of that list. The question is: can I host servers that may compete with the commercial offerings of Google? Can I host my personal blog? Can I host my personal email server?
[sexist remark]
I agree with "you get what you pay for" sentiment. With their margins, I can't see them having the support for any more than what they did. I think the takeaway here should be:

1. Backup your data offsite.

2. Monitor your servers or at the very least, your sites. If a site is important enough to pay for hosting, I would think it would be important enough to monitor for uptime. Bonus points for monitoring server resources as well.

3. Trust noone. Who's to save Linode, Amazon, or Google would act any differently if they detected a compromised server on their network.

These things should be done regardless of how much you are paying for your hosting.
Because not all internet is equal.

Most ISP's give home users a significant discount on their service, in exchange for agreeing to certain assumptions about their use.

This is done because most home users could never afford internet, if they had to pay for full price.

For example, in this area, a dedicated 20x20mb connection to the internet costs about $500USD per month (Metro Ethernet). You can do almost anything you want with this connection, since your paying for the full cost. Run servers, re-sell it to others at markup, host hundreds of websites on it, anything that's legal to do in the US, you can do with this connection.

However, most people can't afford $500/month at their house, and most people would like to have faster download speeds than 20mb. These folks might instead buy a Comcast residential plan that offers 50mb down, 10mb up, for roughly $80 (which is what that plan costs here).

$80/month is a lot cheaper than $500/month. The reason it's cheaper is because you agree to use it very lightly (no servers, no commercial use, no re-selling, keep total bandwidth use under 250-500GB, ect).

What some people try to do, is 'cheat' that system. They try to buy a 'home' connection, and run their business-level services on it. ISP's crack down on that, because it's not fair to the others whose service that person is disrupting.

However, some home users have legitimate home uses that appear to be cheats in the system. Running a Minecraft server for your friends is a 'valid' home use, but it sometimes conflicts with an ISP's rule (which might make an assumption that all servers are 'business class only' uses).

- - -

Sometimes it gets trickier -- where there's competition, anyone can buy high speed internet. (Urbanized Cities are usually ok here, lots of people sell Fiber lines / Metro Ethernet / Microwave / ect).

But at your house, there's usually zero competition by law. A provider like Comcast might be the only option you have for high speed internet (perhaps they bought exclusive franchise rights to your city, or perhaps your state or local level government has created a law preventing new providers from competing in your area (this isn't just theoretical, both of those things commonly happen in the USA)

At this point, your usually stuck. The provider was given monopoly status, but isn't being controlled by the regulations needed to ensure it doesn't abuse it's monopoly status. What can you do, besides raise a lot of complaints about that monopoly provider's rules.

- - -

TL/DR : Home users never pay for most of the speeds they get. Therefore, those speeds have to be shared among lots of people. ISP's use rules to make sure everyone shares nicely. By default, those rules are overly harsh. Good ISP's properly loosen the restrictions to allow obviously-good home uses.
sub-addressing with +, = or any other valid character is a desirable feature and it is entirely unreasonable to block it.
To charge more money. However I also think a business expects a different level of tech support and response times to problems. Kings of ant hills (aka a lot of small business owners) truly think they're the next steve jobs and demand gold level support for free.

Also if you're running a small to medium business do you really want to be put in the same queue as little Tommy's grand mother down the street?
Ah, so your actual complaint was that they used the term "uniform sequence" as shorthand for the more accurate "uniformly random sequence".
Cool, fixed the issues!
In other news, you could purchase a $200k Banksy for $60:
http://www.banksy.co.uk/2013/10/13/central-park

And you could have gone up to the end of the buying process...
Matz: Ruby's Lisp features (2006)
That's really stretching the meaning. It's more like "guessing" than it is "confirmation bias."
Measuring the Internet: TCP Time Machine
Clearly, a PRNG is a subtle concept and it's common for abstracts to not be completely precise. In context, it's clear to me that by "uniform" they mean "a random process which generates numbers independently from a uniform distribution." Your process is generating numbers uniformly, but successive outputs are definitely not independent.

One reason why I feel your interpretation is strained is that the phrasing makes "uniform" sound like a single process. You seem to be reading it as "numbers which are distributed uniformly," but the word indistinguishable really suggests that it's more than just the distribution that matters.
> six hours after sunset there isn't enough heat to keep the turbines going

Note that's when running at "maximum power". You don't have to extract the heat that fast. Given a hypothetical and utterly irresponsible grid supplied solely by this design, you'd overbuild to the point that you'd have enough stored heat to last all night.
You should at least adjust by cost of living.

But now you know exactly why people save up vacation like this: To get a larger payout at the end of the career.

Personally I think unused vacation days should be savable for 2 years, and then are automatically paid at the current salary rate.
I would love to see this article applied to the .0000001% who control 35% of Russia's wealth got their money. ;-)
Hello World What Every CS Student Should Know About the First Job
The Top Three Benefits of Hybrid Cloud Deployment
The fact that the author was able to manipulate values 2 pages after the form he modified pretty strongly implies that those values were used on the backend, however.
Perhaps users are aware of relative domain names and addressing. You even see this on a service like gmail's login. A user with the address example@gmail.com doesn't have to enter '@gmail.com' when logging in - just 'example'. But actually either will do. Further it's not totally clear for a user what to enter here. Is a username/id is the same thing as an email address or not.

My aunt swears blind that an email address without the name in double quotes and the domainy bit is not a correct email address. She types the lot out.
I agree. I think the real issue is a UI "anti-pattern" that is implemented throughout the iOS UI. It's a throwback to the Windows Start button, but instead of a start button... No really, it's just like Windows 8 menu. But it falls short because there is no "control panel" list of icons, instead a deep menu.

This is a UI concept that has had a lot of usability testing on the Desktop. Personally, I feel tapping through hierarchical menus on a mobile device is just the wrong way to go about organizing/using the system.
hershel is not claiming Gates mother was involved. He is playing devils advocate and pointing out that there are reasons why neither IBM's CEO at the time or Gates mother might want it known if she pulled strings: IBM ended up getting the short end of the stick; it would not look good for either one of them (or Bill Gates for that matter).

That does not mean she interfered. It's just a reminder that we should be careful about blindly accepting published accounts of events where the full details are only known by a small number of people all with their own agendas. This of course applies to everything.
The Hybrid Cloud is an Integrated Cloud
The point is that, in the context of the paper, you are supposed to group consecutive sequence elements and find their distribution.

Consider the sequence 1,2,1,2,1,2,1.... When you take elements one at a time, you have a uniform distribution, but the sequence is clearly not random. However, when you take elements two at a time, you have; 12,12,12,12... In this case, the distribution is not uniform, which indicates non-randomness.

The paper's definition implies that you're grouping the sequence elements like this and, for all groupings, you find uniform distributions. This is of course common knowledge to experts, and is made clear in the body of the paper.
> I hit the emergency help button and complain about the stench, the state of the service.

Please stop wasting everyone's time with your abuse of the emergency help button. Your problem is not an emergency.

Additionally, you do not "have to pay" for the experience, you choose to do so.