skysight-inc/HackerNews huggingface dataset:
Reading the paper, it sounds like the attacker can make the trojan arbitrarily hard to detect, in exchange for making the resulting encryption harder to crack.

In the attack they describe, Intel's hardware RNG is supposed to return the results of encrypting 128 random bits using a 128-bit random key with the AES cipher. So an attacker trying to guess the random number returned would have to try 2^256 options. Instead, the attacker modifies the chip so it returns the results of a known key used to encrypt n random bits and 128-n known bits. They therefore only have to try 2^n options -- they can make guessing the random number as easy or hard as they want for themselves.

Now the AES part makes the results of the hacked chip appear random -- the results of AES(0), AES(1), AES(2) ... will have a random distribution in the 2^256 range. (The whole point of a cipher is that it should be impossible to draw any conclusions about the inputs by examining a bunch of outputs, even if the inputs are predictable.) To detect it in software, we'll have to generate enough numbers to start to see a suspicious number of repeated results. So if the attacker sets n==2, they'll have a really easy time cracking the resulting encryption, but we'll easily detect it -- we'll quickly notice that the RNG always returns one of four numbers. On the other hand if they set n==32, they'll have to try n^32 options to crack the resulting encryption, but there will be few enough repeats that we'll give up testing before we notice anything is wrong. (Of course if they're more paranoid and have better resources, they could go with n==64 or whatever -- it's like a dial they can use to set the difficulty where they want it.)

The neat thing here, of course, is that this backdoor is only valuable if you know the bits that have been hardcoded into the chip. So it remains secure against everyone in the world, except the one three-letter agency that managed to modify the chip.

Or their private contractors and consultants, I suppose.
Access the face and bust up the obstruction so that it can be ingested or sink a shaft and remove the obstruction vertically.
Oh wow, think I might have to install this on the GF's Windows laptop.
Good timing. I was waiting until a big player bought into OrientDB. SilverStripe may not be as big as Drupal, Joomla or WP but they have a large user base.
at what point, I think, right?
Excluding doubled consonants that have the same vowel on both sides of the pair:

^((?!([aeiou])([^aeiou])\3\2).)*$

The following also works for the testcases and is shorter:

^((?!(.)(.)\3\2).)*$
The thing that really stop you is to find good documentation about your hardware. Displaying a character on screen or sending a packet over the network without using system or BIOS calls will require you to pages after pages of very technical and not always well written documentation.

That said you can pick a very old PC with a functional floppy drive, and write a Forth interpreter under DOS in assembler. Then, you "just" have to replace the system call to DOS to read/write blocks to/from your blockfile with BIOS calls to read/write floppy disk sectors. You can even do that under DOS, provided you don't have anything valuable on your hard disk. This DOS-based Boostrap Forth should feature at least an editor, a mini-assembler and a self-compiler. Once you have that, you can make a bootable disk that boots on your standalone Forth interpreter (which has therefore been promoted to the rank of 'OS' ;-). With a very old 5MHz 8086 "laptop" featuring an half-broken single density floppy disk drive, one can boot, make a change in the kernel, recompile, then reboot and test the change within a minute. Those machines were power monsters. It's a pity that CGA cards didn't have shaders ;-).
Their strategy seems to be "throw a lot of stuff against the wall and see what sticks."
This is a very good article. Thanks for this.

This explains - What makes a difference, if someone diverts their energy doing something Positive. As they say - It's not who you are, but what you do that defines you.

>Serial Killers & Ruthless CEOs exist - Voldemort does not.

Excellent ending to a great article.
> What's inherently a bad thing is that when human remorse and guilt has been genetically disabled, those people will do things to you which are fucked up.

Honestly, did you read the entire letter? Because he clearly address that point:

Its true that I do not 'feel' guilt or remorse, except to the extent
that it affects me directly, but I do feel other emotions, which do not
have adequate words of description, but nevertheless cause me to derive
satisfacton in developing interpersonal relationships, contributing to
society, and being gentle as well as assertive.
What would it take? Maybe a kickstarter campaign is in order :)
Pornography is not created in a vacuum. There is a large industry surrounding it and, at least according to some, some of the practices of parts that industry is troublesome.

There are also reasons to believe that watching porn might in some scenarios affect the viewer in negative ways that abstract sexual fantasy does not.

Reasonable people can of course disagree to the scope and accuracy of the above objections, but I'd consider neither fundamentally unreasonable.

Masturbation on the other hand is almost universally considered a normal and healthy part of adult sexuality.

Basically just because someone might find porn degrading to women or morally objectionable, doesn't mean they in any way oppose sex and their own sexuality.
Bootstrap-Sass is the official Twitter Bootstrap Sass port
We have evolved to be born with lots of things balanced in slightly different way, one stronger, one smarter, one sweeter, one more decisive.

Every now and then someone is born with one of their balances in an extreme position. The genes that express the balance either missing or just heavily surpressed.

It is not necessary for every kind of gene expression to be beneficial to mankind in general, as long as the average range of gene expressions are beneficial to our survival.

tl;dr: A certain amount of variation in genes is beneficial to survival of our species, extreme variation (like psychopathy) is less relevant (unless a psychopath wipes out all of us, which is a commonly known weakness of evolution in general)
Why publish them?

You only need 1 range.
Sure, but it's meant to prototype a machine that will be produced in millions - it adds up in volume, and it's not really a drop-in replacement, you have to engineer the whole subsystem with the cheaper parts in mind.
This is ot so obvious because strings are of varying length. I mean not as efficient asfr sorting integer numbers.
With uniode things get even more complicate.
Purely as a matter of opinion, the way to think about this is not as an advantage for an individual, but for as a gene pool.

Mostly a human gene pool's survival and prosperity is best served by community co-operation, mutual support and self sacrifice for the good of loved ones and other community members. Sometimes though, the group as a whole has had it and the route to the survival of any of the gene pool is for one or a few to sacrifice the rest and make an all-out bid for personal survival. E.g. a terrible winter in which there is insufficient food and everyone is starving to death.

Another situation where psychopathy could be useful is warfare. Sometimes having a cold blooded killer with no remorse on your side isn't such a bad thing.

Ultimately, it's a matter of variety. You never know what challenges your community is going to face, and what range of behaviors are going to be optimal. Having a full range of behavior types available in your community gives it flexibility in it's response, especially to to existential challenges.
Here is a summary of some research saying salary isn't that important for motivation: http://blogs.hbr.org/2013/04/does-money-really-affect-motiv/

However, here's a good summary that argues that pay is actually a very strong motivator, and the discrepancy comes from the fact that saying you aren't motivated by money is considered the socially acceptable response: http://www.utm.edu/staff/mikem/documents/Payasamotivator.pdf

The research about job-seeking behavior is fairly similar, although I can't find the specific sources right now. When surveyed, people say that money isn't the most important thing when they're evaluating job offers, but when asked to compare job offers as bundles of attributes, money ends up being pretty important. Part of the reason is that people under-state how important money is to them, another part is that during the job-evaluation phase, money is concrete, measurable, and knowable, while the other characteristics are very hard to determine.

It's going to sound obvious, but the real answer is that compensation is a piece, but not the only piece, of what people look for in jobs (probably about half).
For how long? In United States every radiostation output it plugged to Government blackbox before its aired. Supposedly ut was for safety and emergency transmissions but of course they can cut you off transmitting at any point.
Human nature isn't the same for everyone, think about fight or flight reaction.
So some people demonstrate violently, and others peacefully.

I think the people who have a long-term pessimistic opinion are only that way because they perceive what humanity is based on their own predispositions. Same is true for long-term optimistic perspective (even though that was omitted as a choice in original post).

Being short-sighted or having a long term perspective aren't coupled with optimism/pessimism. And politically both parties participate in both - most people only care about unemployment within next couple of years, not unemployment for next 70 years, so politicians have to cater to us, and they are conflicting solutions.
Dotfiles with solarized light/dark for vim emacs mutt cal orgmode and irssi
The public at large? The country only has 5 million citizens and a GDP of 250 billion dollars. Scale it by 60 and I would be interested how it works out, because that would be the size of the U.S.
7 High Performance principles for sport and business
Based on this account, I imagine that being a psychopath confers some advantage for just about our entire history as creatures that can form and execute plans.

Being a sincere participant in social groups has probably provided an advantage for just as long, if not longer.
Oh true? The one that a friend worked for used CE here in Australia, though that was more than 10 years ago now. Fair enough!
HFT extracts the value from transactions. It won't extract the value from a company becoming twice as valuable.

Invest because you think the company is going to be successful and thus more valuable. The actual amount of stock that is HFT traded is tiny relative for each company, long term price is driven by what institutional investors are willing to pay for actual percentages of a company.
agreed they need to be reported but its only after, you won't be able to see them via the normal bid/ask volume from your broker for example.
Pathological lying and manipulativeness are hallmarks of a psychopath [1]. It would be like befriending a spider - when you're the fly.

[1] https://en.wikipedia.org/wiki/Hare_Psychopathy_Checklist
It's the other way round - if a company is committed to a path of fairness but has inherited an unfair legacy of salary disparity (this can happen in many ways and is not always because of overt unfairness) then transparency can make it harder for the company to fix the problem.
Want to work on JMS? Oracle is hiring
can't see the pricing on the page yet
This is because I don't know anything about reading the tea leaves in a market graph like this... but does the (somewhat) significant dip near the top (where it bounced twice to $1200+) make this different from what the author is trying to fit?
RAP 2.2 is available
NOAH'S ARK FOUND,GOD=REAL
I got ranges at 202 with

[a-f]{4}

198 on plain strings with

.\*foo[lt]?.*

Then I stopped trying.
Shouldn't the objective be to get the lowest score if it's called "golf?"
Income, tax, and net worth are all public in Norway, so that issue doesn't exist.
I have not read either of them but I suspect we may have different definitions of pornographic. Are we talking photos of actual sexual activity here, or just girls in their underwear? Do you consider Page 3 to be porn?
WhatsApp already does everything that messenger should do - send text, images, video, files, location, group chats. The only thing that's not yet there is super-fast speed and security - and those are Telegram's priorities. They will get feedback from crypto community and update their protocols, they definitely have a potential to do it.
Okay, though if that is his point, then he is truly underestimating how large the real drug market is? I don't know I just feel like buying drugs online with cryptocurrency is an inherently limited market. The people involved in the real world drug trade (in large volumes, not your corner dealer here) steer well clear of technology, for good reason.

Source: once upon a time I was a heroin addict involved in some nasty stuff.
European Union Stripped of AAA Credit Rating
Isn't it possible the person who is genetically predisposed to being manipulative is manipulating your feelings here?

Yes, what he wrote is interesting, and I read all of it. No, I don't believe he feels "satisfaction in contributing to society." I believe he feels satisfaction in contributing to himself and his own self-image, even unblinkingly at the expense of others.

I'm of course biased in this, having been the target of one of these manipulators, so maybe it's better to ignore me. But man, be grateful you weren't the target, because it had pretty dramatic effects on my life, and took a long time to get over.
It's more than just the current president. last I checked the patriot act wasn't a presidential decree. It would be nice if it were only a matter of getting new president and all are governmental woes went away. Problem is until the middle class stops believing sound bites and starts making all parties accountable to the middle class corporate interests will provail.
One issue is that transparency makes discovering someone's salary easy, but discovering their value is still hard (at least for the non-employer). I haven't done all the math, but my intuition based on similar markets is that it would actually cause salaries to converge: high-quality employees are likely to get paid less, low quality employees end up getting paid more.
Wine works, colleague just tested it on Debian.
Indent your regexes by two spaces and precede them with a blank line, that will preserve asterisks ;)
Except that the tool itself is so painful to use, and has such a shallow integration with things like email clients, that using it requires a considerable degree of self-discipline.

I think I installed it once, and then when my machine required rebuilding, I just couldn't bring myself to install it again.

I wish it weren't so, but a new website is not something that is going to speed the adoption of GnuPG.
Darpa Robotics Challenge (DRC) has begun
The number of professional asset managers who actually invest for periods exceeding a year is surprisingly tiny. The number of firms (especially American) that wouldn't fire someone who didn't consistently meet/beat expectations each quarter is low.

I work for a proper long term investing asset manager and we are very happy with the lack of competition in our space.

Short term "investors" are really speculating, which is fine, but call it what it is. There's also nothing wrong with using professional managers to look after your money as well, picking individual stocks takes time and paying someone else to do that is perfectly sensible. Just pick someone who genuinely invests for the time period you want to invest with them for.
Robots: "You need to let them learn what you’re bad at"
The contest, as proposed by Pavel, while limited for the moment, does cover an important issue as far as our users are concerned. And the scope will naturally expand with time, should Telegram be invulnerable under the current conditions (see contest FAQ: http://core.telegram.org/contestfaq).

Quoting a post by Pavel here on HN: "Telegram will always be interested in creating incentives for the crypto-community to check its security and provide feedback. So if you are waiting for tools to try, e.g., a MITM on Telegram and get your $200К, please stay tuned. It's @telegram on Twitter."
(https://news.ycombinator.com/item?id=6938987)

As for general critique of the protocol, please allow us to add a few vital corrections regarding the article (unfortunately, the author chose a platform that would not permit a direct comment).

> They use the broken SHA1 hash function.

SHA-1 isn't exactly broken. There is a theoretical paper from 2005 that describes a way to narrow down collision search from 2^80 to approx. 2^69 operations (http://people.csail.mit.edu/yiqun/SHA1AttackProceedingVersio...) with subsquent improvement to 2^63, but collisions won't help in the case at hand. In order to break the implementation in MTProto you would require generating a text with chosen SHA-1 (to our knowledge, this problem was not yet solved) — and even that wouldn't get one far, because of the server salt, session id and time.

More on our SHA-1 implementation here:
http://core.telegram.org/techfaq#q-are-you-doing-encrypt-the...

and here:
http://core.telegram.org/techfaq#q-why-do-you-use-sha-1-in-t...

> they are trying to do “Mac and Encrypt” which is not secure.

We are not doing this. We are doing this:
http://core.telegram.org/techfaq#q-are-you-doing-encrypt-the...

> They rely on an obscure cipher mode called “Infinite Garble Extension.”

Yes, we do. The setup goes like this:
http://core.telegram.org/techfaq#q-do-you-use-ige-ige-is-bro...

> Some really weird stuff about factoring 64-bit integers as part of the protocol.

This weird stuff can be pretty effective as part of our DoS-protection scheme.

Meanwhile, we've expanded our Tech FAQ with responses to most common questions concerning MTProto's robustness against certain types of active attacks:

http://core.telegram.org/techfaq#protection-against-known-at...

Thank you for your comments,

Telegram Team
The more i read about phychopaths is that they are normal guys/girls and it is the society's problem to 'treat' them (because they are too strong competitors and shall be neutralized) rater than their own.
Top 5 Good Android Tablets That Your Money Can Buy Right Now
R-R-R-R-Repost! https://www.hnsearch.com/search#request/submissions&q=bellar...
Um, again?

Fabrice Bellard: Portrait of a Super-Productive Programmer (blog.smartbear.com)

8 points by Baustin 1 hour ago | 0 comments | cached

Fabrice Bellard: Portrait of a super-productive programmer (2011) (blog.smartbear.com)

453 points by Baustin 10 months ago | 160 comments | cached
Don't necessarily think in term of advantage, but rather in term of probability it will stay in the gene pool.

If psychopathy is genetically linked to say, a better resistance to cold or hunger, then it might stay even with the disadvantage of psychopathy, just because people with it will survive better.
For "6. A man, a plan", I thought it was impossible to match palindromes with regex, am I wrong?
> Designing a protocol so that is does not leak is very hard.

In some of the security classes in school some of my teachers said it was better to use an open and trusted protocol than reinvent the wheel.

They cautioned against using a closed source or proprietary protocol because there was not way to "vet" the code. I trust industry vetted solutions over "hip" new solutions that arent open. I am not sure if Telegram is open or not.
These are justifications for not attempting to understand and thereby humanize him. These same sort of broad brush strokes have been used against any group of people that are deemed unworthy of being truly seen.
At least some laptop BIOSes have a whitelist (or was it a blacklist?) of approved wireless chips. So to choose your own, you'd have to get around that.
Everybody should turn on showdead in the settings and check out losethos' comments here. Psychopathy is really interesting and fascinating, but so is schizophrenia.

It boggles my mind how anyone can write such nonsensical rambling comments while at the same time coding a 64 bit operating system from scratch.
Partition a List in Java
Anchors (208):

k$

Ranges (202):

^[a-f]+$

Backrefs (199):

(\w{3}).*\1
BitTorrent serverless chat replaces usernames with crypto keys
This will earn you some more points:
Anchors: k$
Ranges: [a-f]{4}
Honest question, why does EBay not offer a simple we open the package weigh it and take some pictures and then email them, to the buyer option? Even adding a week and charging 20$ + shipping would be worth it for a fair number of purchases and add quite a bit to there bottom line.
It’s a negative on negative absolute temperatures
Ironically, that title is more likely to turn away the very people the article is aimed at, i.e. if I was preparing such a trip I would not waste my time with people who are going to tell me not to.
You can't. There was some guy on here yesterday arguing "your right to privacy is less important than protecting my children". Hello, parental responsibility? But something funny happens in the minds of (some, but not all) new parents and they want to see the world remade into a giant daycare centre. It doesn't occur to them that their kids will grow up and they'll find themselves in a world they don't want to live in.
Keep in mind, a lot of jobs have transparent (or at least published) salaries which hasn't seemed to render negotiation tactics ineffective or, for that matter, raised the maturity level of people holding said jobs.

For example, professional athletes and political office holders.

I think a more difficult, and more desirable, target for transparency is not one's salary, but one's contribution to the top and/or bottom lines.
Generally speaking there seems to be a lack of engagment by experts in a varity of subjects. This is no different.

The problem is the ease of access to pornography for anyone, mainly children. It is hard to deny this is a problem. A solution is an opt in web filter.

I don't like web filters but in this case I see little alternative. The only other option is to try to prosecute websites that do not do some form of age checking for the UK. I don't think this is viable at all.
One issue I have with transparent salaries is that employment is an agreement between the employee and the company: it's a two-way street. Yet when you implement transparent salaries, the company is unilaterally deciding to share critical information in that agreement.

I am a huge fan of a company transparently sharing its own information with employees. Revenue, profitability, sales, etc... People like to feel like they know what's going on. But it's another to share an employee's information with other employees. There are many people (and I recognize this is a cultural norm, so it differs around the world) who like to keep their salary private, and it should be their prerogative.
Love is the kindest and most valuable thing we can spread in this world and your reply offered none to this individual. He is no less deserving than any other. We all have the same life sentence.

We're all trying to do our thing, he, you and I included.

More love, less hate. Please.
"Haters" is a very emotive term. There is no real hate I can detect form the TextSecure team. They have just pointed out flaws and why they feel that the solution is flawed.

You wouldn't be associated with Telegram, by any chance?
It gives you hints below the score, for 6 it's:

You're allowed to cheat a little, since this one is technically impossible.

No idea how you cheat...

EDIT, SPOILERS:
I get 170 with ^(.?)(.)(.).?\3\2\1$
I don't see any discernible difference.
Ability to easily identify weaknesses is huge advantage at all times. Inability to feel guilt and remorse is huge advantage in hostile environment. This came into disadvantage just recently, when world started to live mostly in peace.