skysight-inc/HackerNews huggingface dataset:
Remember that story a few months ago about how some government agency had replaced all its keyboards and mice in response to a malware infestation? A lot of folks (including some here) took this as Yet Another Show of Government Cluelessness. I found myself wondering instead if there was a world in which folks advised by government security experts (i.e., you-know-who) would have a good reason to do something like this and not say why.

There is. It's a world in which their opponents had a zero-day against the Windows USB driver, and a way into the government's supply chain. And in which you-know-who wants to play the same game themselves against opponents elsewhere.
Dan. Would it be possible for you explain the gesture control more? I am confused as to where the sensor is located and what is the range and resolution of the gesture control.
http://www.kipling.org.uk/poems_arith.htm

To a point, sure, but the prior to drones an unwilling population could make it costly indeed--politically--for an occupation force to hold ground.

With drones, though, there's no longer a blood cost associated with oppression.
Re: the security plug, I'll believe you that it might work for your line of devices, but in the schematics for the relatively few phones I've looked at there was always active selection on the phone pins.

Think about it: you put normal headphones in the jack (no microphones, only tip, ring, sleeve): it will already short the mic input
Extending that metaphor, a profession could evolve around zoning for permissible uses of code based on types of software and intended audience, much like urban planners do with zoning codes and city master plans.
Breaking out of YouTube’s Box
Oh crap, I have an account with them…
Pear OS 8 - The linux OS from a whole new perspective
Being constantly 3 days away from a revolt if we somehow had all our stored food stocks vanish isn't what I'd call a dire situation, considering most countries have been living under this state for a very long time. The only way to eliminate this highly unlikely possibility is for everyone to grow their own food, not exactly a recipe for a high standard of living. Personally, I'll gladly accept the risk associated with our present food supply mechanism and mitigate risks accordingly (my family could easily live for well over a month on the food stored in my pantry.)
LinkedIn is selling underwear now?
Jobs said he believed he could make a greater impact on the world by working at Apple than by using his time to organize charities. Given the title of his essay, Gates seems to agree.

Several parties have said Jobs donated to causes, but would often do so anonymously. Known is that he donated to the Democratic Party and to cancer research.

As for Gates: he is once again the richest person in the world. He could give away half of his wealth and he would still be in the top 6. Let’s not think too long about how he amassed his fortune, but I’ll give one example: under his leadership at Microsoft, he ’gave away’ tens of millions of Windows licenses to schools, so that kids would grow up being used to using Windows. It was presented as charity and Microsoft received tax benefits from doing so.
How would you feel about a team of only eminently likable people, none of whom could produce anything of value but all are very well liked, because this is the end game to rating likability.
Drones aren't technically robots… Loophole?! ;)
great, just fucking great, first adobe, then macrumor, how many times do I need to change password in a single month
I think it is a consequence of the fast improvements in functionality made. People would rather be on a feature rich beta branch, than a safe stable branch. I also expect this to change as the industry matures.
Don't forget Ubuntu Forums.
See original discussion here: https://news.ycombinator.com/item?id=6684318
Those are fair questions. Just want to point out that not all of them might be hiding (closed source).
Rainbow tables are antiquated. A GPU can blast through many more hashes in a second than you get with pregenerated database. MacRumors passwords will fall incredibly quickly. The salt just means that the effort is proportional to the number of target hashes.
> computes diffs by forking a git process on the server

sounds expensive. are the diffs cached?
Stop using one password for everything then. A manager like 1Password is almost an essential tool for the security conscious.
I agree. Why not open-source the other software parts under some fairly protective license like AGPL for the server and Artistic License v2 for the client interface to the AGPL-ed server. These licenses adequately protect you from a commercial entity coming and stealing the mass market business opportunity or the community, while still making it possible to support individual hackers like Amadou that can contribute a lot, but won't unless it is open source end to end.
I'm Looking for Valid Podcast Feeds
thanks for sharing, we all go through similar things when starting up and learning from others help a lot.
There's no excuse about priority. Even the random services I've occasionally scrapped together on a weekend use proper password storage. If I was storing so much user information, I'd sure as hell be doing it right.
Salts are (mostly) irrelevant to cracking passwords. Rainbow tables have been eclipsed by processing power.

See: http://www.zdnet.com/25-gpus-devour-password-hashes-at-up-to...
Pentagon ponders “Plan B” for a world without BlackBerry
Well I would assume going bankrupt would ruin your credit rating far more than just purchasing your debt at pennies to the dollar. The paperwork is an extra hassle that wouldn't apply in the case where you buy a contract from your lender.

Even if you could buy your debt from your lender via the first right of refusal that might bring up fraud charges against you, since you fraudulently deprived the lender of money rightfully owing.
Just a nitpick: flout, not flaunt.
I can't tell if you're pointing out the problems with regulating software, or seriously suggesting this idea. That's scary.
I only got a down vote and no references to show why my reference is wrong? Despite that all the left idealists reading this very much wants to? :-)

But it is wasted of course, no idealist changes his/her mind just because they learn that their empress is naked.
md5/sha without hash is not really any better than md5/sha with hash. Rainbow Tables stopped being relevant around 2009-2010 with the advent of massively parallel GPU clusters.
I have no idea how it is actually implemented, but it seems like it could be implemented in a perfectly acceptable way.

The first step is to define what acceptable is. As I do not understand why nudity is unacceptable in the first place, I will not attempt to do so, and will instead employ the time honored tradition of hand waving.

In the new system, a reasonable implementation would be to discard the original image imidietly. Quality control can be done by putting the machine into debug mode and using consenting individuals as test subjects (or seeing if the cartoon image detects when the target things are present). There is also no guaranteed that the old pictures were ever stored. Although in both cases, I suspect they would store the data, in some form, for at least the short term to assist in a post-hoc analysis if their is a security failure.

Also, I think it was a software update only, the machines are still the same.
If your smart power socket blocks access to the neighbouring socket on a two-socket wall plate I hope the gods of product design SMITE YOUR DESIGN TEAM WITH GREAT VENGEANCE.

Please. Slim the design down if necessary.
I have nothing against taking a person's debt into account when deciding on matters of welfare. Bankruptcy is one option, but maybe the government should sometimes help people who would otherwise face bankruptcy.

My problem is with equating debt, as opposed to poverty in general, with being owed support by others. Hence the "misplaced sympathy". We do need to encourage responsibility while at the same time looking after people no matter what situation they find themselves in.

On your final point, there is no "we". On bailouts, there was no other option (from the point of view of the people making the decision). I already pointed to tax and welfare as another option for helping poor people. On corporate welfare and CEO pay these are not really anything to do with moral hazard so I don't know what your point was.
I did not say or imply that there was any deceit or indirection, it was an honest question.
We seem to be the only mammals that are particularly attracted to nudity. As far as I can tell, no other mammal even notices when one of their species is naked.
T1Brit
Web dev art
Protective distribution system (AKA "Approved Circuits")
He could get Bitcoin address and ask for donations. I would be surprised if he didn't think about this already. He might not want to give the Government a excuse to ban Bitcoin.
I don't think the problem with asm.js is the on-the-wire format, it's the semantics. Someone writing native C code wants threads and low level currency primitives. Javascript is fundamentally unable to model that, and Javascript as designed for the browser does not model synchronous blocking either (XHR sync and dispatchEvent notwithstanding)

I feel like both PNaCL and asm.js are a kludge in search of a problem. I just don't see either of these winning over say, DICE to implement Battlefield 4 in a browser, or Valve for the next Half-Life franchise. Triple-A developers don't want to leave performance on the table, and running your code inside of a browser virtual machine, even a C-based sandboxed one virtually guarantees that.

Asm.js might be vitally important for a platform like Firefox OS, but I doubt either PNaCl or Asm.js will ever be something the drive by web bothers with, because the kinds of applications that need native levels of performance are also the ones native developers are most likely to do native platform specific ports for. That is, having to recompile and port from Win32 to OSX to Linux is worthy tradeoff vs losing 20-50% performance off the bat, not to mention the different purchasing behaviors of Web users vs console or native mobile users.
By killing stack ranking, MSFT has taken low hanging PR fruit from the next CEO
It was just as much news when Gox got owned, even though they covered the losses. Also, Insured vs uninsured is irrelevant in this category because you simply can't have an uninsured traditional bank in the fashion you're talking about.
The road to technical debt is paved with good intentions
Or you could play with this over I2C with one GPIO for interrupt handling.

https://www.sparkfun.com/products/9695
Event Store - Open-source, functional database
Standard Completion Available in Linux Bash Command Line
Can we drop the manipulation of language? Strong is obviously equivalent to strict, the meaning is clear-cut. It's not difficult to use these words and disagree with the principle they describe.
In fact I would recommend GPS calibrated hardware clocks with PTP.
Scientists create light bullets for high-intensity optical applications
I applied for a system administration job with a company that had offices world-wide, but I started in the U.S. An opportunity came up within my company to provide sysadmin support in an AsiaPac timezone, and I took it! Trying to obtain a professional job in a foreign country can be difficult otherwise because most companies aren't willing to hire somebody who doesn't already have a work visa for that country.
Japanese web design tends to be broadly reflective of Japanese product packaging: cram as much textual info as will fit into limited space.

They have a U.S.-sized population and nearly U.S.-sized industrial base running inside a California-sized archipelago. They've gotten good at making the most of space.
as someone who closely works on qualcomm baseband processors, i can say that security is one of the top priorities of qualcomm. There are whole bunches of teams dedicated to sec/vuln analysis. Not saying that the issues mentioned in the article did not occur...but I believe that those probably occured in older chips (a few generations older)

standard disclaimer
Views above are personal and do not reflect views of Qualcomm
This is really positive. It's nice to see a real-world example of women in tech without having Sheryl Sandberg leaning all over it.
Question: why half of the salt isn't hardcoded in the application code? That would make a database access completely useless without a deeper penetration, and it's really easy to implement.
Cassandra suffers from the same problem and can drop updates. The Paxos transactions were and maybe still are an absolute joke as exposed by Aphyr.
When Flat Design Falls Flat
Art of Quitting: The most important Skills 
"Quitter never Wins, Winner Never Quits" this is an age old saying, most true for entrepreneurs with ego bigger than the success and who take pride in this never quitting endeavor. But for practical entrepreneur knowing when to quit gracefully, are the most successful entrepreneur who provides the thriving example and shades of Art of Quitting, while the most unsuccessful entrepreneur are forced to quits, because they failed to learn the Art of Quitting or not putting down their practical foot firmly on the reality ground.

Now, Let us see how and When to quit at various stage of Startup life:
I don't wish to give the impression that hacking on the hardware is my goal. I could, but I'd rather not. The reason external dependencies are a problem for me is that they take away my ability to control my system. If I have to hack together something to use it without the servers, then that's a marginal improvement over having to reverse engineer the protocol on the wire, but it's still really customer unfriendly.

Anyone who buys this system and makes it central to their home's operation (as intended) becomes exceptionally vulnerable to the decisions of the people who control the servers. Even if the developers' interests always align with my interests, I'm still vulnerable if their system gets hacked, if they go bankrupt (and shut down) or if they are acquired by a company with a different management perspective.

It would be like buying a car that has to check in with Lexus every time I want to start the engine.
Why do you need to handle 5k requests simultaneously? Maybe you mean per second? Maybe you can add a server and do round-robin DNS? Then you will he able to do double unless there is a database bottleneck or something. But you said concurrent which 4k really concurrent is asking a lot.
Alternatively lenders could just be more responsible by not lending to those who can't afford to pay it back.
i thought he got a job??
You actually did a pretty good job with the copy right below the video, "Next generation control of your [home or office] with accurate in-home location data and a gesture control interface.". You should have focused on what it can do now and the vision of what it could become and then spent the second half on the open source aspects of it.

You could have also added a steady cam scene following someone around their home and watching their environment change with them. e.g.

Someone is sitting on the bed reading a book and the nightstand light is on. They get up and move to the door and lighting comes on in the hallway as they walk towards the kitcken lights turn on behind them until they get to the kitchen and get a snack. Then reserve the process until they get back to the bedroom.

This kind of stuff looks like the perfect application for Prolog. There are a lot of predicates to satisfy when determining when a nightlight should be turned on or the overhead light or whether to turn on music in the living room or not.
I imagine a basic income would change the social paradigm of full-time employment quite significantly. Without being so dependent on a job, more bargaining power would be on the side of the employee, so I presume there'd be a huge rise in part-time employment, and workers' liberties. So most of the restrictions you're associating with employment would potentially be much less repressive than they are today.
Doing compression on the ZFS level is significantly worse than InnoDB compression.

InnoDB has a lot of really smart optimizations which make it much better than just zipping things up. Included are the modification log (so you only have to re-compress occasionally) and a dynamic scaling ability to keep compressed pages in memory rather than always decompressing. These optimizations are really only possible with an understanding of the data.

I would only consider ZFS for something like an append-only data warehouse type system.
We usually call the immediate effect (in this case on interest rates) partial equilibrium, and the "full" effect including all flow on effects, "general equilibrium". And there are models which include dynamic and random effects (dynamic stochastic general equilibrium - DSGE - models). Can't tell you much about them apart from the name :-)

Anyway it seems like messing with debt contracts is a bad way to change the interest rate, if that's all you want to do, since that is precisely the lever that the Federal Reserve controls anyway.
Naw, the pinnacle of democracy is the entitled whining after the longstanding obvious truth has been laid bare. Who needs objective forethought?
>Who said you need to consume your Soylent all by yourself?

Well, no one. But, you know, if you're kind of in a "I want the convenience of eating my food from a pre-mixed sack" mode, it's not illogical that you may be less social with your mealtimes. "Hey, bring your sack over to my place and we'll gulp them down in 5 minutes together!"

>It's kind of like aging: because it kinda just happens, we have accepted it as a normal thing. But that doesn't mean it is normal

I am trying to think of something that "kinda just happens" 100% of the time with no effort, but that's not normal. Isn't that the definition of normal?
Maybe because you thought CS and the algorithm thought some other field, say math.
What a laugh I got when I read their description of what their business is compared to what their brand name is.

http://translate.google.com/#fi/en/ansa
If you have any kind of JS minification in your pipeline, then just applying git diff is likely to produce large patches for small changes as renaming and compiler optimizations on Javascript can vary wildly.

Google has had diff tools like this for awhile, as such, the Closure Compiler contains a feature called stable name maps to prevent a small change from causing all of the symbols globally to be minified differently. It's outputs two files of variable and property names, and subsequent compilers can attempt to minimize diff-cheese. They also help SDCH.

https://groups.google.com/forum/#!topic/closure-compiler-dis...
AFAICT, the neo900 has a plain old closed baseband processor.

So you can "root" it and control the OS all you want, your carrier still owns you and your phone, what with (potentially) DMA level access to your CPU.

neo900 is interesting, but it is not any more open in this regard than any other handset.
it would be cheaper to feed someone for life (ie it would require less energy) than it would be to send that person outside of Earth's gravitational field.

Please show your work.
As gasull above mentioned, if he supplied a bitcoin address, we could send him some?
This already exists, its called debt negotiation and they advertise the crap out of it.

Basically they take someone with a ton of debt who already has destroyed credit, and have them pay into a trust every month instead of paying their credit card bills. Every so often the company calls up a card issuer and tries to negotiate along the lines of "I have these N people with $10,000 in debt each, will you take $1,000 cash from each of them today?"

The super sneaky part is that after they have settled all your debt, your credit is totally hosed. However you've made good on 36 or so monthly payments to them, so they know you can continue to pay them and you are now free of other debts, and will issue you credit based on this insider knowledge (which you accept because they are the only ones willing to extend you credit at this point).
Please name one country with severe chronic food security where you'd choose to live.

Food won't vanish, like poof. It's about the disruption. That's when "normal" channels drys up and food is only available thru the black market. During a famine, there's always plenty of food. But the speculators withhold supply and the consumers don't have enough cash. (Note that I said cash, vs credit or savings.)

That's when people starve. That's when civil society (law and order) breaks down.
Ha. But it does mean "loop" or handle in Latin, and a bridge in chemistry. Now I know a new word in Finnish. :)

http://translate.google.com/#la/en/ansa
Surely there must be news organisations willing to pay for interviews?
Agreed. The really interesting point of the "How NOT to build a Terminator" talk was not just that we had to avoid building evil machines, but that we have the potential to build machines with better ethics than human soldiers. Avoid atrocities committed to angry soldiers, avoid accidental wars started by twitchy trigger fingers, avoid intentional wars started by people who weren't authorized to start those wars, that kind of thing. The devil is always in the details, but a ban can only ensure that the people building these weapons are the ones that won't put in the proper effort to make them good.
“WTF does a Developer Evangelist do?”
The flipside of this argument is that wars happen anyway. We might as well use the machines to save lives. (I don't necessarily believe this; I don't know what I believe, but this is the other side of the debate).

The prolonged wars in Iraq and Afghanistan happened despite the repercussions for lost sons and daughters. We're losing people right now, and hundreds of thousands of Iraqis lost their lives because we didn't have enough manpower (or weren't willing to take the risk) to enforce order. If we could spin up machines the way we spin up dynos, these problems would go away. No American soldiers would die. We'd spin up production and deployment to enforce near total order. We could reduce Iraqi deaths by orders of magnitude. The machines don't necessarily have to act like terminators. They could act like military police too.

This might be a scary future, no doubt. But it might be a bright one too. If we trust our values and trust that our elected representatives won't go on mindless killing sprees, the machines might be a blessing in disguise. (Also note that by the time we get machines with this capability, our government, social structure, our entire economic model, and our appreciation for civil liberties will evolve quite far from where it is now too).
MacRumors didn't design their own password storage scheme, they just used the popular VBulletin forum software. I don't think it makes sense to ask people to switch forum softwares when they reach a certain number of members.

It may or many not be VBulletin's fault that the site was hacked in the first place, but it's definitely VBulletin's fault that it uses md5 by default. Absolutely no excuses there, since supporting PHP 4.4 is not a valid excuse. The only fault of MacRumors operators that I can think of is that they used a vulnerable piece of software.

Unfortunately, forums aren't cool anymore, so few people write them anymore and it's difficult to find forum software that meets modern standards.
Show HN: Rails AngularUI Bootstrap 3
I made a simple gem to wrap angularui templates. I'm sure this effort is already underway somewhere else,but i didn't find anything that met my preferences (haml/coffee), so I wrote this. POC/WIP.
A hardcoded second salt is called a pepper, and some programs use it. Unfortunately, with a popular and outdated PHP app like VBulletin, it won't be too difficult for an attacker to obtain both the DB dump and whatever configuration file that contains the pepper. All those PHP files just sit inside the document root, and everyone knows exactly where they are.
He got NSAxed.