skysight-inc/HackerNews huggingface dataset:
I fully expect something to go very wrong with this, so I'm just preparing to not care when it does. :)
You should match people that have submitted domains from the same registrar so fees are avoided in most cases.
Their page says you can get a US keyboard layout but I can't figure out how to order one like that. I could live with the UK layout if it weren't for that key in between the Z and left-shift.
Latest on the abc conjecture
Good naming conventions are pretty key here. My guess is the original writer of that code had used those in something else entirely, then reused those methods in a new method so he wouldn't have to rewrite.

I always feel like it's better to positively name Boolean values, personally, but I know everyone is different.
https://gist.github.com/jonathanmorley/8058871

3121 points
> If your position is that all convincing self-accounts by psychopath

He made no such generalization. He simply talked about this one self account.
Completely not sneaky at all, but does reasonably well at 71 points:

^(x|xx|xxxx|x{8}|x{16}|x{32}|(x{64})+)$
I wish people would stop submitting "TL;DR" comments here. What's the point? Enabling people who didn't read TFA to post anyway?

If the article was particularly dull or uninformative I'd understand but in this case it's very well researched and full of interesting bits of lore.

If you can't stand to read more than two sentences in a row I suggest you stick to twitter.
Interesting contrast between Square (Dorsey giving back shares to the option pool) and Zynga in 2011:

http://news.cnet.com/8301-13506_3-57322150-17/zynga-to-emplo...

Asking for 'underperforming' employees to give their shares back to the option pool.
josephlord's solution is much nicer:

^(?!(..+)(\1)+$)
I see a recurring pattern in here! We all started seeing mixing markup, style and logic before 2000. Pre 2000 was ruled by functional programming and the decade before was ruled by procedual programming.

Then we rapidly started to "encapsulate", when OOP boomed. Now "packaging" is the main problem every programming language and OS has to solve. Today we end up implementing lightweight packages, so called components and we think it's a new idea to use statemachines to keep the interdependent component's state coherent. This idea was influenced by the boom of Interpred programming languages. Although 40 years ago, there were programs that only focused on allowing "components", which were "pluggable" modules back then, to be controlled by the DataFlow Pattern [1].

To formalize the main problem of the HTML,CSS and Javascript abstractions, blended into the DOM, we have to recognize that Data (Input) and UI (Output) are bound to States (Data Flows [2]). A solution to these problem is to use the FBP paradigm [3] in the browser engine and to implement the UI as an array of graphs. Usage of vectors allow the use of highly advanced mathematical solutions to be used to apply a optimization much easier than it is possible today, without rewriting the browser engine. For instance creating a UI now just means dragging and dropping items into a pane, which creates a matrix of number sequences that have relations to each other, yes basically a graph.

Because the UI and State is deterministic (except for Networks protocols!?), we can use the Knaster–Tarski theorem [4] to solve such DataFlow problems. Using Topological Data Analysis (TDA), we can even get deep level insight into UI & usage patterns that evolve and recur.

"Control of the language we use can be used to restrict our thinking. I find that this pattern is proving George Orwell's Newspeak [6] is similar to programming languages today.

What do I know, so please correct me when you think that there is no such pattern, or when you think something is wrong in what I said. So that others will profit from it.

--

[1] http://en.wikipedia.org/wiki/Dataflow_programming

[2] http://en.wikipedia.org/wiki/Dataflow

[3] http://en.wikipedia.org/wiki/Flow-based_programming

[4] http://en.wikipedia.org/wiki/Knaster%E2%80%93Tarski_theorem

[5] http://en.wikipedia.org/wiki/List_of_programming_languages_b...

[6] http://en.wikipedia.org/wiki/Newspeak
To be fair, the Boeing Factory Tour is pretty cool, even if it is a giant propaganda movie.
Order for 196:

^[a-i]*[l-z]*$
Announcing dropbox python sdk 2.0
Meri Jaan-Harsh Vardhan Jaiswal
Its a nice romantic song sung by me.
Cool to see De Morgan's Laws used at a high level. But the real takeaway: rewrite your conditional until it makes sense.
To be fair, he is specifically pointing out bits of information that are designed to lead you a certain way, he is not just saying don't believe him.

Thus you can't debunk him just by saying "Don't believe him because he is a psychopath is insufficient".

If you want to pin all of his logic on that baseline theory (which would be stretching it), then your replacement no longer works, as crack dealers aren't known for being persuasive and manipulative in words in that way. Similar for most other distrusted groups.
Overpriced? Sure, but having been on that tour, I would regret having not taken it. Really interesting history, and where else do you get to see an honest-to-goodness sunken city? I'd pay similar money (or more) to go on a (legal) tour of, say, disused NYC subway tunnels, a deactivated nuclear plant, an abandoned mine, a shipwreck, or Kowloon Walled City (when it existed).

EDIT: Indeed, the Wieliczka salt mine (which, for me, was a similar experience to the Seattle underground) costs about $25 USD: http://www.wieliczka-saltmine.com/visiting/tourist-route/vis...
I agree, but I immediately avoid the one's that exhibit negative traits. The problematic ones for me are those that are charming and intelligent. I forgot about the rapidly changing tactics within seconds. That's really astonishing when you see it. I've never met a psychopathic woman. The couple crazy girlfriends I've had were borderline personalities, which I found even more difficult to deal with.
Neat. So tempted...
This whole thread strikes me as having a very strong 'us vs. them' mentality. The guy in his letter makes a plea that 'Psychopaths are just people.' and the general feeling of these comments is to completely throw this away and view psychopaths as a dangerous and scary group of people.

Psychopaths look at the world differently than we do, they are highly rational and self motivated, but that doesn't need we need to fear them, hide from them, avoid them, or try to lock them up. There are more ways to deal a person like this.
i am in fact working on a system trying to simplify gpg ui.
> 1. The biggest problem is that the SHA1 digest of a message is not an authenticator of that message, because an attacker can generate the same digest given only the contents of the message.

Please note that a message to be encrypted would not only contain the actual text sent, but also at least the server salt, session id, message sequence number, message length and precise time.

This complete data set could be theoretically obtainable only from either server or client memory, therefore the fact that an attacker has this kind of data implies that a successful attack had already taken place. Hence the question — why didn't that attacker take the auth_key right away?

On top of that, the present setup doesn't present any identifiable threats, because even if you could get a message with a given SHA1, you would still not know which message was really transmitted out of the possible matching set (or rather out of the 2^(L-160) messages for a message with the length of L bits).

Regardless of this fact, we do agree that strengthening this point would be logical in view of possible future developments in code-breaking. Thank you.

> 2. The last time your cryptosystem was discussed on HN, I provided a link to a thread in which Jutla laid out a simple, devastating attack on the mode in ASCII text in a mailing list post. You didn't respond.

I'm afraid, this is not true. You must mean this comment [0], and we did respond, days ago.

Today I can only repeat that we do not use IGE as MAC. The attack described there [1] is irrelevant for our setup. A question for you, by the way: is your position that using CBC instead of IGE in our case would make the protocol more secure or less secure?

[0] https://news.ycombinator.com/item?id=6918015

[1] https://groups.google.com/forum/#!topic/sci.crypt/4bkzm_n7UG...

> 3. Technical attributes of your RSA usage appear incompetent. RSA padding is not optional; 80% of the RSA implementations on the Internet are insecure because they use the default padding (PCKS1v1.5) which was carefully designed (in the 90s) to resist attacks, but missed some. You use ad-hoc padding.

We thanked you for feedback on padding two days ago [2] and noted that we were in the process of strengthening this point by moving to OAEP.

Still, the random padding already in use in MTProto is rather robust. The reason for this is that the RSA in DH is only used one way and ONLY with the public key. An attack on the private key would not be possible in this case, since it is not being used for transmission. So the sole possible attack would be MITM, which would imply deciphering RSA in real-time. If you are aware of other attacks that could harm this design, please tell us.

For the moment getting the RSA key with a microphone in traditional setups that store private RSA keys on client devices looks like a more real threat than what is described above. In our case private RSA keys are neither stored, nor used on the client.

[2] https://news.ycombinator.com/item?id=6918634
I had an interesting thing happen a few months ago. I kept having my credit card used for fraudulent charges, but they weren't buying TVs or electronics, just small purchases at Dollar General and gas stations in Texas. I was really confused. So I had the card cancelled and another issued, and there again it was being used in another state. This happened three times within a couple months. I have no idea how or why as I'm very careful purchasing things online and in person. I finally changed my PIN and it stopped. I don't know why or how they were using my card with my pin, but either by coincidence or luck that fixed it.
Email address now in my profile. Here it is:

hn.rocks@yahoo.com

I'd appreciate contact with identifying information such a LinkedIn profile. I'll reply in kind, of course.
Well. I'd never taken a close look at Vimscript before. Ye gods.

But didn't I hear something about Python being usable as a Vim extension language? I'm not terribly fond of Python for aesthetic reasons, but it's at least as powerful as any of the modern scripting languages, and it has features (like docstrings and list comprehensions) which I'd really like to see more widely adopted. Have I misunderstood the state of things? Can a Vim user not actually say "F this Vimscript nonsense, I'm switchin' to Python!" and get as much power over the editor as Vimscript would've offered?
Well, I had something like $240 free on the credit card, which wasn't enough for their xbox.

They called in to issue a $1,000 payment from my bank account (on file for recurring monthly payments) to the card. The phone rep allowed it apparently. (They later said the person who called in knew my family info and passed all "security questions." I wish I could have gotten a recording of that call to see if I knew who it was.)

Now, with $1,240 available on the card, they bought their xbox and other crap.

As a mater of principle, I had them refund me the $1,000 I didn't authorize. They sent me a check a week later and re-adjusted all balances appropriately.
I'm heartened by the response to this, both on Hacker News and elsewhere.

Being a trans woman in IT is a bit weird -- because I can do incredible things with my mind, I'm off the hook my sisters are on, that makes them have to hook.

Several roommates ago, I literally came home and found that my (also trans) roommate, who in addition to being trans was also dealing with immigration and had recently lost her job and had begun turning tricks at home. Had I not come home early from the university, I wouldn't have known.

And I've always hated the Canadian legal system for making me kick her out. Because just being her roommate, under the previous legislation, would have classified as 'living off the avails' and would have made me legally indistinguishable from her pimp. Just for being her roommate.

That's the sort of pauperizing, soul-crushing bullshit that you never, ever forget.

Also, I'm a big fan of Katrina Pacey, the lawyer mentioned in the article. I've worked with her a few times on activist stuff (I got into sex worker advocacy after my up-close-and-personal. They can't do it themselves, they go to prison when they try. Well, before today. Go Katrina Pacey! Go Canadian legal system!)
No, as a scientist one should give others chance to interpret data he has collected. One could interpret his own data, but it should be separate step and separate publication.

Plus how we can be sure there is no some basic mistake in interpretation? And how study can even pass peer review if most of its sources are hidden?

Technical difficulty is not really an excuse. Many studies are based on a few megabytes or even kilobytes of data. Astronomy and physics has no problem to distribute terabytes of data.

To give an example: Tycho de Brahe made lot of measures of planet Mars positions. However he was not very skilled mathematician, so his interpretation would only make orbital parameters more precise. Luckily Kepler who was briliant mathematician had access to his data and could derive Kepler's laws of planetary motion.
What do you make of the list given in this other comment that includes copy machines and game consoles?

https://news.ycombinator.com/item?id=6940993
Orin's blog post linked to the full text of the opinion (http://www.volokh.com/2013/12/16/judge-leon-enjoins-nsa-tele...) and quoted from it. He wasn't merely summarizing news articles.

Orin is a smart fellow, and it's common to make mistakes when quickly summarizing court opinions that have just been published. But he never corrected his post.
I hope it is an ancient alien space ship.
As my last name is Rapp, I can sympathize...
I took the liberty to correct the phone typos in your post, sorry if I missed any:

---------------

In fact, why this young man's treatment likely exacerbated his psychopathic acumen, is because it gave him an entirely new language to dissimulate with. Why the psychopath is untreatable, is because it is a "lying" disorder. The essence of psychopathy is profound dishonesty. It is an inversion of meaning, an inversion of the order, where good becomes bad and bad becomes good. Where kindness is reformulated through the process of the ultimate lie, which is a perversion in the thinking processes. Evil triumphs. It is strong and good. The psychopath has only the machinery of perverse reasoning to use to cogitate reality. Thus he lies not only to others but necessarily lies to himself about himself.

Because of this endogenous dishonesty, he is intrinsically incapable of telling the truth. Thus he cannot accurately self-assess. He can never formulate a truthful thought due to this profound mental perversion that is the hallmark of this disorder. He has only acquired more slick, refined and better labguage to dissimulate others as a "treatment success." Thats why so many of you were duped into feeling empathy for him. He is simply pulling for it in you, but he has no empathy for you. It is all just a game for him. There is nothing genuine about his letter. Feeling empathy for a psychopath is a fools game. That is like having the profound mental perversion that is the hallmark of this pernicious disorder. He only coopts new slicker, more refined language as a "successfully therapized".
The Best in Personalization of 2013
additionally crack dealers and pedophiles are probably more likely to be sociopaths. i'd guess most groups gain 'distrusted' status because of the influence of sociopaths within them.
Well I was playing around a bit more, and I was able to disable the(or a, not sure how many are in 2010 MBPs) internal mic by taking an old audio input jack (cutting the wires), plugging it in (so it looks like a nub sticking out), going to the audio settings and setting the audio port from "Sound Output" to "Sound Input" and the internal mic picked up no readings. Still trying to figure out how to do that from the command line.
> If your method of auditing code is skipping all the strlcpy's because you assume it's being used correctly

That is not at all what I have said, how did you come up with that? I've been arguing that the idiomatic use of strlcpy is easier to audit than any use of strcpy.

> I haven't needed to audit code professionally, but when I do it personally, I don't look for common pitfalls in function use - I look for general scenarios that are dangerous, like working with potentially tainted data. So when I talk about design security, I don't mean what function you use, I mean how it fits into the broader scheme of what the application is trying to do.

What you're doing isn't wrong, but looking for common pitfalls is a very easy way to get a baseline assesment of code quality. You'd be surprised at the amount of problems you can find just by looking for arithmetic overflows near memory allocation, misuse of realloc, and the string handling functions. And if the search turns out lots of such problems, trying to understand the design and "broader scheme" is not very useful (at least for me, because at this point I would've decided the software in its current state is simply not good enough for me).

There's another reason to look for common pitfalls: you have something very concrete to focus on. You can work mechanically. You can work with grep. It really does make a huge difference. And let's not forget: these common pitfalls are common. And commonly, they are exploitable. And they are the things many attackers would also initially look for.

If you "just look" trying to find potential security issues in design or otherwise, but are not looking for anything very specific, you can't be anywhere near as focused, and it will take more time to usefully process the code. If it takes a lot of time, focus is going to get worse with the degrading attention span.. it'll be harder (at least for me) to be certain that the review has actually been thorough and has managed to flag things that need attention.

Oh I do look at the broader design of software, but only after getting the low hanging fruit out of the way.
Ugh. There are a lot of reasons not to participate in this contest, but that's not one of them. The FAQ explicitly says that they'll just give you USD if you'd like, so it doesn't really matter when they pin the USD/Bitcoin exchange rate.
Balance (212)

[<>]{28}
Never mind the two international off-site trips they take everyone on each year.

Look, not saying they can't do it.. just saying as an investor, I'd wouldn't support it. Money is after-all fungible. It doesn't matter if sales are paying for 100% of the salaries or not... if there's money being left on the table that can be reinvested into the company by either bringing in new/better talent or retaining your top talent, I would be angry. The founders already have high incentive to stay as long as they can satisfy basic needs on their salary. Employees with little equity do not unless they are paid competitively.
Europe reaches deal on common mobile phone battery charge
More widespread knowledge of all the other classical deductive logical equivalences can make program syntax clearer, too. :-)
Alternative title: Why a CS degree is worthwhile even if you're a web developer.
Innocent until proven guilty applies, of course, but there's an irony in the dismissal of a notion as crazy when juxtaposed with all the other Snowden revelations.
Origins of common UI symbols
So what? Even if it doesn't matter to them, it can still matter to you. Making yourself a better person isn't less worthwhile because someone else tells you you're being taken advantage of in the process.
Scalia Calls 'Duck Dynasty' Decision Unconstitutional
There isn't much you can't do with a modern RDBMS. If you want to denormalize relationships, you can do that. If the queries are too repetitive or hard to write, you can use views or stored procedures. One thing that I find peculiar about RDBMSs is that foreign key relationships are tracked for integrity, but they are not used to make joins easier by automatically inferring the kind of join implied by a foreign key field. But that isn't a limitation on power.
No, you don't get a raise, because you didn't ask for it. The difference you should be focusing on, in your scenario, is not that I had a kid. It's that, for whatever reason, I renegotiated my salary. If you can do the same, then you get the same results.

See, whereas you never quite understood the "what if you have a kid" argument, I never quite understood the "don't I deserve the same as that other guy" argument. The way I see it, the magical answer is always the same: maybe you do. Do something about it and you might be surprised.
Budge has placed the source code to PCS for Apple ][ and Atari 800 on GitHub:

https://github.com/billbudge
I signed up. Will you share the list of domains after they've been exchanged? Thanks for doing this, it should be fun!
> The main place it becomes faster is deep joins - if you want the friend of the friend of the friend. If using joins that looks like LEFT OUTER JOIN bla a1 LEFT OUTER JOIN bla a2 LEFT OUTER JOIN bla a3 etc.

If you want all friends out to some specified distance n where n > 1, recursive CTEs are a much more sane solution that anything involving n levels of OUTER JOINs.

And if you just want specifically friends-of-friends-of-friends by joins, you want three levels of INNER JOINS.

> With a graph DB, you still only have 1 copy of each person - you are just storing the 'joins' or ids/addresses of the 'rows' you want to join with ahead of time.

More accurately, graph DBs store addresses (not ids/addresses) while RDBMS store ids (Foreign Keys) of the records you want to join with ahead of time. This means that to get from one record to a related record takes an additional level of indirection in an RDBMS compared to a graph database, but that doing so from many similar structured records to their equivalent linked records is more efficient in an RDBMS.

> Another nice part of a graph db is if you have a large collection of different objects in your programming language that all interact with each other. Those interactions can be stored directly in-line and allow for an ORM layer to be more efficient when retrieving the whole collection.

With a Graph DB instead of an RDBMS, you obviously wouldn't haven a ORM (Object-Relational Mapping) layer in any case.

At more than one level out
"Author, please stop taking words so literally" is a wonderful sentence
Actually, that's a pretty common, normal line of thinking, often summarized as "those things happen to the other people". Even the declared love of psychology is quite usual, as is the dismissal of "normal".

Sweet/loving/sensitive type dismissal shows a huge disconnect. People hurt that way include soldiers, astronauts, public performers, politicians, enterpreneurs and many others. You're not really looking into people, you're romanticizing the diseases they have, and that really comes off as patronizing in most cases, and in this case as reckless and patronizing.
They're both hiring, but the... types of jobs they're hiring for vary widely.

There's maybe a half dozen places in the world I can do what I do. Orlando is not one of them.
There is a middle ground. It's not "either I work using my brain, or I whore myself out." Many women are waitresses, shopping mall sweepers, store attendants, cashiers, you name it.