skysight-inc/HackerNews huggingface dataset:
It was released in the news months ago that the government pays Google/Microsoft/etc. for the trouble they go to in order to provide the data they do.

http://www.theguardian.com/world/2013/aug/23/nsa-prism-costs...
i still haven't seen the main site, but i found these:

http://sqlfiddle.com/about.html

https://github.com/jakefeasel/sqlfiddle
Was there a reason for not doing MVP?
You could have made it easy to publish and scrap everything else.
I wasn't aware XMPP wasn't secure? It supports TLS, SSL, OTR and more. Are there known issues?
The question I would have about this (and i wouldn't be at all qualified to answer) is, how difficult would it be to detect the presence of steganography in images, disregarding being able to decrypt it? In other words, couldn't a state actor just find out what the most common steganography techniques were, derive some kind of fingerprints from that, scan sites like imgur and profile users posting those images?
Is that an actual screenshot? Like, the guy collecting passwords ran a simple script as root, worked as root?

How believable is that?
The AVX / SIMD part of x86 instruction set is probably the most understandable subset to focus on learning! And i'm very excited about AVX-512

I'll actually going to be spending some of my time over the next year adding proper SIMD support (including all the shuffles) to the main Haskell compiler, GHC!

Theres some really interesting constraints on the SIMD shuffle primops that need some type system cleverness to compile correctly!

Namely, you need to know "statically, at code gen time", the shuffle constants that are given as "immediates" to the instructions! Normal values don't quite have the right semantics, and accordingly the simd intrinsics in C compilers kinda lie about the types they expect (ie if you give them a variable of the right type, they'll give you an error saying they need an actual constant literal).

tl;dr I'm going to make sure the GHC (and haskell) can support AVX 512 by the time thusly equipped CPUs are made available
Going Beyond Vulnerability Rewards
If you wrote and posted it from inside Lebanon, then Hezbollah would know. Nationstate adversaries are very powerful beasts.
If you like scare quotes, your use of "consideration" seems to be in line with the popular internet definition meaning "agreement with me". :)

Maybe rayiner considered it, and considers it unlikely. Does he need to keep considering it until he changes his mind?
Yeah, that's a position the Oxford dictionary took but it's not common. Although I guess the singular 'die' is only really popular with dice nerds.

http://grammarist.com/usage/dice-die/

http://www.websource.it/search/%22a%20die%22/%22a%20dice%22
No, before that:

"""
> Considering the probability that people reported to law enforcement agencies will be killed as a result

I'd love to see a citation for this "probability."
"""

Those quotes are not about the meaning of the word. They were the reason I assumed he was misunderstanding the (likely, in my opinion) use of the word "probability". (These quotes are about the meaning of the word... :) )
I think he was trying to slow them down. He asked that amount for only one person, while FBI wanted free access for everything. He might've known they either wouldn't accept it, or if they did, only for that guy (which could be somewhat reasonable with a proper warrant), but they'd definitely wouldn't pay $3,000 each of his hundreds of thousands of his clients.
http://stackoverflow.com/questions/3224878/what-is-the-purpo...
If the goal is to start your own company, then start your own company.
The original order[0]( see Appedix A of Exhibit one on Page 4) wasn't even for everyone's data, just data(mainly envelope information and IP addresses) on one account(likely Snowden's). So yes, thats incredibly bad reporting on the Guardian's part.

[0] http://cryptome.org/2013/10/lavabit-orders.pdf
Stuck at work right now so google+ is out of reach. Will update this message later at night with the relevant links.
You're forgetting that plenty of intelligent people don't work to maintain their intelligence, which means their intelligence will flatline or even decline.

To take the gym metaphor you used, some people are naturally athletic and some are not. A non-athletic person can work out to improve their fitness level, and a naturally athletic person can eat pizza and smoke a pack of cigarettes every day. In not too much time at all they will have traded places as far as their athletic ability goes.
It's conceivable, but it's not going to be easy or simple. Think of how many billions of humans existed simultaneously with John von Neumann without being anywhere near his level. If we figure that Neumann was mostly due to a stellar combination of alleles, then that implies he got lucky on a very large number of alleles (imagine a bunch of alleles which can be on or off, and Neumann got all of them 'on'; then because he was 1 out of 5 billion or whatever, he got log_2 5,000,000,000 = 32. This is not 1 variation, which is easy to select on, or 2, but 32. The current state of the art, using n=100,000 is around 3 SNPs. (I apologize in advance to the geneticists for my reasoning here.))

And I would note that Neumann, despite being happily married, a gifted negotiator, lady's man, and party-goer, never had children.

So Neumann might violate either the simple or reproductive fitness requirements: to the extent we can hope to manufacture Neumanns through genetic engineering, it's not going to be easy; and to the extent we can judge from n=1, the reproductive fitness penalties may be large.
The nut: if you can come up with ways to make any of the following open source projects more secure --- better allocator, constant time crypto routine, safer parser, privilege separation scheme, whatever --- and get a patch accepted that accomplishes that, Google will pay you in fashion similar to that of a bug bounty.

* OpenSSH

* BIND

* ISC DHCP

* libjpeg

* libjpeg-turbo

* libpng

* giflib

* Chromium

* Blink

* OpenSSL

* zlib

* "Security-critical, commonly used components of the Linux kernel (including KVM)"

This is so smart. Every part of it, but especially the targets they picked.
all my clients unfortunately.
I get that completely. It's just...I don't believe using 4k bit keys would expose the system anytime in my lifetime. I, obviously, could be wrong. But, I think I would take that chance. I was just hoping someone could convince me that I should't (now that I think about it).
It is not difficult to be anonymous online:

http://pastie.org/private/fkbu4qpsvwcwiocrdeang

That could have been a coded message using a one-time pad. The encryption doesn't have to be super complex. If I didn't link to it, how would you know who posted it?

You'd have to track down pastie.org, or its ISP and see who posted this message around the time it was posted. Then you'd have to track down the IP that originated the message, and then talk to my ISP about who owns that IP. Even assuming everyone cooperated with you, I could have went to a library and sent it from there. If they took some form of ID I could have faked the ID. Then you'd have to obtain video footage from the library of who used the computer.

But you'd get stuck at the first stage - it's unlikely pastie.org keeps track of who's posting. It's a case of #2.

Tor is much less resilient than Freenet because it's A) susceptible to traffic pattern analysis, and B) because each resource has a single point of failure - its host.
Will Cursive be providing a strict paredit mode?
"Morals" do exist, in the sense that they are observable states of mind in individual people. You can set up an experiment where you leave a $20 bill on the table, and observe that people don't take it, and call the chemical process in peoples' brains that causes them to act that way "morals."

Sometimes, people with similar moral opinions come together and agree to enforce entitlements consistent with that opinion. These are called "rights." While morals can be demonstrated in the state of nature, "rights" cannot be. There are no "rights" without agreements between people, either explicit or tacit.
I'm in the same boat. Two children both under four and two cats. I used to be a real night owl. Now I'm in bed at 9:30 pm almost every night.

Cats are better now. We have confined them away from our bedroom At night and we used a water spray (fine mist) which put them off scratching at the door. After a week or so of getting wet they stopped scratching.

Tried the old water spary trick on our oldest child when she kept waking me up at 5 am. Didn't work. Made her cry.

Just kidding! :-)
Yes, and almost every situation where somebody that has documents is served a subpoena for those documents can demand a fee to provide them, but thy do still have to provide the documents.
That's funny, I see what you are talking about, but I had a moment like that with make, but instead likened it to prolog instead in my head one evening!
The FBI asked for everything, but did not have a warrant for it, though the judge was evidently too much of a bird brain to tell the difference.
Nice study. I think it's quite intuitive. When you are forced to spell you are force to say something. So by saying "I don't know" it is natural to continue with "I don't know but I think" and then it continues with more words.

Whereas to tell someone in advance "don't you dare to tell me I don't know" the person will just hold on to the thoughts until he or she has to spell that thought out (because he or she has to say something to get out of the misery).
I don't know if your reference was intentional or not, but check out our old logo:

https://www.google.com/search?tbm=isch&q=rjmetrics%20swoosh&...
That's different from what I've said.

I meant that placebo effect was highly possible, nothing more and nothing less. You knowing it's a placebo doesn't cause placebo effect.
What fad diets are you referring to?
Revenue at point of sale does not directly translate into revenue at the studio. There are many other companies involved in the distribution to the end-user, all of which get their cut.
> I suppose maybe this shoddy little syllogism would be forgivable if you haven't had your coffee yet this morning.

Caffeine may not be improving his intelligence, but removing damage ie. withdrawal. (And so about as surprising as 'lack of sleep deprivation increases intelligence!' or 'lack of iodine deficiency increases intelligence!') This is one of the challenges of studying addictive stimulants: how do you know whether, for experienced tolerant users, the apparent benefits are genuine benefits or just treating withdrawal?
Really? I never knew that! Can you point me to some sources?
That's not a bad idea at all. Thanks!
Postmortems at Airbnb
Poll: How many people here use Reddit?
I'm very curious about the cross connections between two very early adopting communities.

Please only vote if you are really active on both.
Use reddit
Don't use reddit
Use other
Well, sort of.

For the actual 32 KB instruction cache they just tag the instructions in the cache at the instruction boundaries. The Pentium IV tried holding decoded instructions (or traces, rather) in the instruction cache, but it didn't work out very well. The complications induced by lining up the different instruction sizes with the previously specified jump targets and the fact that decoded instructions are much bigger made that approach less successful.

Intel Sandy Bridge and later processors do keep a sort of L0 instruction cache full of decoded instructions with all the annotations needed to sort out branching. It can hold 1.5 K uOps, which is certainly something but not so big that you won't be missing it regularly.
At minimum it would be reasonable for them to cover both flat development, storage, transmission, and system costs, as well as opportunity costs for all involved. If you make me stop what I'm working on to build your pet project of the day, it's costing more than just my time to build your pet project, but also the time and delay that are being imposed on my other priorities.
It's almost better to make it even more barebone.
You can use Google Maps / Waze / Apple, etc., for your navigation on your smartphone and it can also play music. You can even stream music.

I think it's much superior system than trying to make car work like smartphone. Adding connectibility in the car implicates that there's extra mobile contracts for cars, too...

I guess these days, those systems are also used for integrated components, like backing camera, etc., I feel it's more productive for automakers finding the way to make that work with phones...
Yeah, this seems like a shell and not an operating system. I don't want to hate on someone's efforts, but I am failing to see how this will be of benefit for anyone? I could just be missing something, like the mission or vision, also, FWIW-- I hate NPM. I think it is one of the worst I've used... I stopped using Node on persoanl projects because of it (though it has gotten marginally better since I stopped).

If this was to be a shell, I could see it being useful... There are a few similar projects out there. Though I'd suggest a language like Ruby, as I believe it makes for nicer DSLs than Javascript.

As well, I'd be afraid of Google and betting on V8 for long term support, or non-breaking API changes that cause the "OS" to shit the bed.
How do you keep knowledge fresh?

First question the assumption that it must be fresh. Optimizing documentation to make rediscovering knowledge easier may be more beneficial.

If knowledge must be fresh, then either apply the knowledge or share it with someone else. Knowledge can be applied by trying to improve a process instead of merely repeating a process (research and development). Knowledge can be shared in many contexts that give business value (marketing, selling, supporting, documenting, training).
Success hides inefficiencies. Even at startups.
An advertisement...
I think there is a "long tail" tendency in all forms of art.

I.e., with YouTube/the internet you can now follow long-tail musicians that you love.

And it will be the same for creation and not just consumption - you should be able to find people to make music with that are truly compatible with your interests/style/taste. Today you are kind of forced to make music with people you meet in high school or whatever.
I've been using a developer Peek as a primary phone for the last few weeks (running a 1.1 preview).

I've had problems with the UI not responding to touches (never on the keyboard, so I'm pretty sure it's a software issue), and with data cutting out, and not coming back until I toggle data several times.

Admittedly, I'm not sure whether these issues are hardware, the particular beta software I have, or FFOS (I should have been filing bug reports).
I don't know who downvoted you, but I don't quite get what you are saying (why is that a red flag and what exactly do you mean that's a red flag?) Red flag as in it is theoretical (like "of course that would be nice.....but that's usually not true)? or red flag as in interviewer is tricking the interviewee to do bad job? (making bad impression to interviewer)?
"Does he need to keep considering it until he changes his mind?"

I don't understand where you think I said anything of the sort; I meant only that by using those quotes, rayiner seemed to have taken the original commenter to which he replied to mean it was more probable than not. Apparently other people also believe that it was meant that way, so perhaps I'm completely wrong about how it was meant.

Except that rayiner then suggested he took the word the same way I did, and just wanted the original commenter's citation of a probability figure that wasn't offered in the first place, which means I have no idea what he was suggesting by putting it in quotes.

Clearly I'm failing badly at communicating what I mean and understanding others. :/
Totally understand the confusion - this is the first time we've put this out into the world, and it's great to get feedback about which parts are or aren't clear. Here's a bit more on what we're building:

http://awesomebox.co/vision

If that sounds interesting, we'd love to talk to you about the pain points you have building front-ends and UIs. Feel free to send us an email at contact@awesomebox.es
BTW, what is wrong with just hiding real activity with an artificial traffic made of random bits sent to random addresses? The only thing I can think of is that bulk senders may get uncovered, but this is actually good for fighting spam.
Sunset is more popular moment to capture photos than sunrise.
Sunset is more popular moment to capture photos. According to our analytics people take pictures of sunset three times more than of sunrises.

here is comparison map: http://vertabox.com/projects/sunset-vs-sunrise/compare?date=2013-10-07
Should DPR have considered nonviolent means to prevent the release of this information? Maybe he could have offered money in exchange for silence and everybody walks away healthy?
> This claim requires evidence, but the citation is to a blog post about nutrition, not medicine.

I didn't realize nutrition had nothing to do with medicine. And actually, the citation is to a list of 24 posts by Hanson covering various aspects of the negative case for medicine, including but not limited to nutrition.
There's no evidence Einstein had done an IQ test:

http://www.einstein-website.de/z_information/variousthings.h...
Avocado Seed as a Source of Bioactive Phytochemicals
There's a great case study and documentation at eLinux.org.

This guy stripped a Renesas SH7724 boot-to-UI from 19.44 seconds down to 0.77.

http://elinux.org/images/f/f7/RightApproachMinimalBootTimes....

The tl;dr is that there's a lot in the kernel you can disable or strip away if your target system doesn't need it. The section on optimizing your application for block-oriented storage (like NOR flash) is a great one too.
I'd be terrified if this guy had done work for me previously. How exactly is it that someone like this guy ends up being a "Professional Software Engineer"? Has the bar been dropped that low?
I don't necessarily disagree with you. I think it is true that having too many I don't know means the person is probably not familiar with the area he's facing.
The I don't care part is probably a bit rare. You probably have to look at body language (i.e. facial expression, for example).
I too was distinctly under the impression that piracetam's mechanism was cholinergic and other mechanisms were bit players; Wikipedia likewise gives that impression: https://en.wikipedia.org/wiki/Piracetam#Mechanisms_of_action
As it states in the opening paragraph, the post prompted as a response to this blog post: http://blog.cryptographyengineering.com/2013/03/here-come-en...

> It seems like these days I can't eat breakfast without reading about some new encryption app that will (supposedly) revolutionize our communications -- while making tyrannical regimes fall like cheap confetti.

The point that my post was driving at is that simply having a great usable and secure encrypted chat application is meaningless in the face of a nation state adversary. The resources that they have available, and the approach that they take to unmasking people is not dependant on being able to read the content of their messages.

Using "Super Crypto Chat 5000" to protect your message content doesn't buy you anything if you're the only person using it, and you have access to information that would place you in a pool of suspects.

As we're now seeing with the Snowden documents, this is exactly how the national security forces see encrypted messages. They pay more attention to them, and they look at who is sending them to whom.

Finally, while a more accurate title might be "Clandestine Operative Tradecraft is Complex and Error Prone in the Face of Nation State Level Adversaries" that isn't really pithy.

of course they want to read the messages and it helps them tremendously, that isn't necessary for them to be effective as a security force.
Sorry, but choice of language means more than nothing. ColdFusion is pretty dead-end and not a particularly good choice these days for a variety of reasons.
> If n real packets aren't available, send fake packets in their place.

That's what I had in mind, but with a smarter gateway, that analyses your traffic and uses a Markov chain to time bogus packets when you're AFK, statistically similar to what you produce. Better still drown your real traffic in a larger stream of bogus packets.

Sending packets like clockwork is a good way to raise flags at the ISP level (beside using Tor).

The remote proxy should probably be a Tor service, like Silk road was.
This will happen with any system that needs that kind of scale right out of the gate. It's just that games are one of the few systems like that. We really just don't have good ways of knowing what will happen.

Can you think of other online systems that need to scale to massive numbers of users on day one of it's release? If you can, how many of those systems survived?

With my own game project, I used around 50,000 bots on AWS and attempted to model them as closely as possible to real players (using real player data taken from our Closed Beta). Looking at resource utilisation on the servers, it looked like we should be able to scale even further than those tests. By that I mean, the most overloaded systems were still only using about 35% of the system resources.

Come open beta day, we got concurrency of around 75,000 at peak, higher than the optimistic estimate we had made of 50,000. New problems developed. In fact, new problems developed at around 45,000 that somehow the bots didn't manage to find. The worst problem was a deadlock condition that could take out one of the database servers randomly kicking off ten's of thousands of users at a time. It's hard to describe the feeling of knowing that you are frustrating so many people around the world.

More servers would have done nothing to prevent these problems.

Anyway, I guess what I'm saying is that scaling all at once is really hard. Even if you take lots of precautions, random problems will still develop.
AFAIK, yes. I guess it also depends on what it is, photocopying a single page is different from spending a week coding a solution to what the feds want.

Can you imagine the feds forcing you to do things that take a year to program, even if you don't have the resources?
" If folding time isn't a good measure of forcefield accuracy then I don't know what is."

Folding kinetics are surprisingly insensitive to detail. For example, it's been understood for a while that even ridiculously simple models can predict transition state energies for simple proteins:

http://www.ncbi.nlm.nih.gov/pubmed/10322214?dopt=Abstract

http://www.ncbi.nlm.nih.gov/pubmed/10500172?dopt=Abstract

But to answer your question, I'd say that "predicting the correct structure of a protein" is the gold-standard benchmark of forcefield accuracy, and MD forcefields are really bad at it.

(You could reasonably add other great measures, like: "does the simulation tend to fly apart without hacked-up pseudo-physical constraints?", but that feels like piling on.)
I like this advice. I worked with someone who built an aerospace company around an ultra-reliable actuator design he developed with a friend. They had put hardware on dozens of missions, including some inter-planetary missions, before they were acquired a few years later.

A lot of the advice he gave me centered around understanding how supplier contracts are granted / won, and the importance of building relationships and a reputation in the industry. The biggest thing that stuck with me, though, was that it was even possible for a startup company to put hardware in space, let alone mission-critical stuff.

So, I second the "just start" suggestion. Maybe I'll take the same advice myself some day.
How are you promoting the post? When I think of ways to promote blog posts I can only think of ideas which are quick (post to HN, tweet about it etc.).

What are you doing differently?