skysight-inc/HackerNews huggingface dataset:
> But of course you don't mean the mistake of mistaking a genuine attempt to be friendly for something to be indignated about

Projecting much? I never said anything about being indignant; it annoys me, or maybe saddens is a more appropriate term, but that doesn't mean I respond in anger. Pretending you think someone's right when they've just said something wrong may be the easy way out, but being truly friendly requires being more honest (and sure, sometimes it turns out it was you who was wrong all along).

> Who here would care if they're hellbanned?

I think HN's hellbanning is a terrible practice, I've said so repeatedly, and if you have any suggestions for how I could prevent it then I'd genuinely welcome them. But I don't think "don't downvote anyone" is a good response.

> Yet from what I can tell, not believing in a particular fairy tale doesn't mean that every single thing you otherwise hold true isn't a fairy tale as well. It doesn't take a lot of science or introspection to realize that, does it? When people say "Planet Earth" instead if exactly describing the configuration of all matter and energy in the universe, does that make you angry, too?

I'm not perfect, and I never will be. That doesn't mean I shouldn't try to become better.
Now this might be just gossip-mongering, but care to enlighten us on why djb on the IETF crypto review board would be potent irony?
The nature of the laws would have to change significantly as the court found the entire foundation behind the laws (largely moralizing/restricting the actions of others based upon personal values) unconstitutional. The government can't simply move a couple of punctuation marks and become compliant.
nice to see a thread I started months ago on the HN homepage
> One thing that I find peculiar about RDBMSs is that foreign key relationships are tracked for integrity, but they are not used to make joins easier by automatically inferring the kind of join implied by a foreign key field.

Huh? Could you expand on this?
Or conversely that it is better to write affirmative conditionals rather than negative conditionals. I always find reading the affirmative ones much easier, as I have always found working in positive logic easier than work with negative logic circuits.
It is actually happening.

https://en.wikipedia.org/wiki/Boneshaker_%28novel%29
You don't have to lie to manipulate. That's the scary beauty in that piece: it's almost certainly sincere, but it doesn't stop it from being manipulative and misleading.
Instead of trying to come up with a way to measure demand, you could just have each block contain a vote for what the mining reward should be. When the difficulty is adjusted, the block reward could be updated to the median of the votes.

The same could be done for other parameters (like the targeted time between blocks) or maybe even for more complicated things, like what kind of digital signature algorithms are acceptable.

I'd call it "votecoin".
You'd need to have followed Bernstein's other adventures with IETF standards groups, particularly the DNS standards debacle.
With the possible downside of making it very difficult to use the data in another application. So there's that.
Many times this is completely impossible. I still have an email from the sysadmin of (at the time) a top 500 supercomputer asking of me and the people I was working with could please delete some of the 210TB we generated for a specific project that eventually resulted in 4 or 5 papers.
Why OR doesn't short circuit?
And all of those jobs require your brain too, its just that the byproducts of that use are not considered valuable. Lots of innovation in waitressing if you ask them how they do it rather than what it results in.
Can you elaborate on the difference between "misreport" (def: a false or incorrect report) and an "under report" (def: a report that reports a number below the truth)?
Huh? OR will short-circuit if the first element is true in every language I have ever seen (barring ones that don't short circuit at all).
A good reason to NEVER link your bank account for payments on any other credit account.

Also points out a security hole; normally credit card companies are a lot less concerned about verifying identity when someone wants to make a payment on an account. Here's an example of why they should.
That's the plan! Going to post a list of all domains and who sent/received them at webdomainwhiteelephantexchange.com
The distributivity law is also really helpful for simplifying conditionals. http://en.wikipedia.org/wiki/Boolean_algebra#Monotone_laws
Food industry continues to see startups attacking all angles
Wow thanks... I'm going to download and take a peek. I have great memories playing with that game.
Writing this felt really good. This is been the first time writing CLJS in which dom manipulation wasn't a primary concern (to the point of distraction from application logic).

This is awesome work. Really looking forward to seeing where you take it.
UPDATE 3: Still missing bitcoins purchased on December 11. No acknowledgment of missing bitcoins yet from customer support or Brian.
That the system has power is without doubt. The extent to which the power detracts from the currency aspect of the system is what I question.

When I say that a transaction is not a first-class citizen, I mean things like the fact that the question "I have this address, how many bitcoins do I have" is not really answerable; redeeming existing incoming transactions may rely on information outside of your key pair.

You're correct that as it stands, 1:1 transactions are pretty much all we have to deal with, so long as IsStandard doesn't change. The fact that the script language exists is worrisome, as is the fact that IsStandard only applies to relying of transactions by clients, not transactions in blocks.
Not only that, think about what a security contractor with no positive incentives was able to collect and publish without NSA knowledge. We honestly have no idea what state secrets might have been sold to the highest bidder.
I call BS I bet they didn't ask any security questions. I find that if you're calling to make a payment, they generally don't care who you are.
It matters to me for various small reasons, and I'm willing to pay a premium for that.
Fun experiment for you. Go out and get a facial tattoo. Now try to get work. That's still easier than finding honest work when you're transsexual. Don't believe me? I can think of an even more decisive experiment...
I believe the point is that due to ridiculous amounts of prejudice, customer-facing jobs are difficult for a trans person to find.
Contrary to popular belief, (most of) the US, (most of) Africa, (most of) Asia and Russia are among the only places where prostitution is in fact illegal.

https://en.wikipedia.org/wiki/Prostitution_by_country
> In most programming languages, AND will short circuit. OR requires both operands to be evaluated.

Can you name any widely-used programming language(s) that has a short-circuit AND that returns on the first non-true result but not a short-circuit OR that returns on the first non-false result?
Yes, well done. My one-acre homestead is indeed exactly the same as a sovereign state, it in fact changes nothing when the scale is millions of times that large. Also access to private property and state immigration are in fact the exact same concept as well.
You, take a break
Sure, there are arguments. But there are arguments for a lot of things in the Bible, and very smart, very knowledgeable people still disagree about what it prescribes. My experience is that if you base your decision-making on reading the bible and doing what you think it says, sooner or later you'll do something bad. (If you follow the advice of a major church you're less likely to do obviously bad things, but IMO the social/political policies religions tend to advocate are also bad, though in more subtle ways)
That is quite tragic that the law had to force you to make difficult decision, especially considering the fact that trans folks are very much marginalized in society because of the ignorance that still floats around unfortunately about gender.
I appreciate the TL;DR in this case, as I could have done without the rather odd egoistic intro. in the article. One would think the author had just solved P=NP.

"I have performed a real world hack...Through the use of my knowledge of computer magazines...my sharp eyes...I have overcome the limited amount of information available...and with complete certainty...I finally achieved my goal on 2013-02-24 at 5:30pm."

I mean, it is cool and of novel interest, for sure. The intro a little over-the-top, perhaps?
Who would be good choices that aren't already participating?
Researchers in Canada have discovered a way to send text messages using alcohol
You can't simply use CBC without a MAC either. The generic composition of CBC with HMAC and randomized explicit IVs is strong assuming you've dealt with side channels.

But a modern cryptosystem wouldn't use CBC either; it would use a AEAD mode, like AES-GCM or AES-OCB. A very, very modern system would use a native stream cipher like Salsa20 and a polynomial MAC like UMAC or GMAC or Poly1305. No cryptosystem in the world would use IGE mode plus SHA1.

There is no way around the fact that SHA1 with a bunch of semisecrets is not a real MAC. I have absolutely no idea why you would argue this point, but the fact that you do argue it is extraordinarily damning. I have never seen a project anywhere make so many mistakes and then confront such simple, straightforward, observations as "SHA1 is by itself not a MAC" with fierce arguments. The normal way of wiggling out of this problem is to fix your protocol. But your team clings tenaciously to a broken design. Why? Why? Why would you do that? How would anybody ever trust a cryptosystem designed by a team that would do that?
Unless you've worked a lot with 6502s or their brethren, it's going to look like a dense mass of gibberish. Not a lot of comments but excellent use of variable and label names.

Budge's assembly is some of the most clever and compact code I've ever seen for these kinds of processors.
380:

^.[^bds].*[^e-kjotz] .* [^eiz].+[^lx]..$
Even after this you still don't think they're actively subverting encryption standards?

http://www.mail-archive.com/cryptography@metzdowd.com/msg123...
We can't ignore the (sad and backwards) social stigma that trans-women face, where a waitressing job, or any public-facing job, is difficult to apply and be accepted for.
They already have a 'virtual currency' they can sell on an organized exchange. It's called stock. You're going to have to work on your value prop. I fail to see any advantage vs. internal accounting systems, national currencies, existing stock exchanges and financial markets.
My take on PAKE: it's a way to establish a shared key (KE), authenticating each other with a password (PA). The shared key could then be used to build a secure channel.

Believe it or not, I've seen many people thinking that KE alone is enough to build a secure channel. This misconception is probably as widespread as encryption provides message integrity. One needs to know he's talking to the right person, otherwise he's vulnerable to some man in the middle.

There are many ways to solve this authentication problem. A large number of TLS ciphersuites uses PKI, but there are also ciphersuites using pre-shared key or password such as TLS-PSK or TLS-SRP. PAKE protocols use a password to authenticate each other, e.g., if only Bob could know the password he's the only one could finish the protocol with Alice.

Recently I've worked on some authenticated key exchange problems not using a password, which could be fun to think about:

1) How to build a secure inter-app channel on iOS.

2) How to bootstrap keyboard-less devices to password-protected WIFI network.
No chance. The hype will recurse forever. Even on stackoverflow.
How to break free from the tyranny of luxury journals
This will help suck the profits of org crime should legislation ever happen (won't with the current hawkish regime). Currently it is illegal to run a bawdy house unless it's a false front massage parlour so gangs run micro brothels which are condos stacked full of foreign girls. They tend to jack each other's brothels since it's a cash biz and police aren't called due to the condo operation being illegal. When sex workers can run their own and not worry about getting robbed these guys will have to get a job
NASA re-creates iconic Apollo 8 'Earthrise' 45 years later
Have you considered this post in light of the inverted exchanges BYX, EDGA, and BX? You can effectively make your liquidity cheaper by posting to an exchange with an inverted fee schedule (pay to add, rebate when you take), but we still see the "latency arms race" at the traditional exchanges.
Around the World in 80 Hours
The clinical term for this is "anosognosia", which describes a specific physical, neurological inability to be aware of their illness. They literally have damage in their brain which prevents self-awareness. Something like 50% of cases of schizophrenia have some degree of anosognosia as well.

This is a big part of why schizophrenia is so hard to treat. With other disorders like OCD, patients generally do know they are unwell and are willing to accept treatment to improve it. With schizophrenia, patients are often rigidly convinced they are already healthy and refuse to be treated. They are incapable of understanding that they have an illness.
A College Kid Couldn't Afford a 3D Printer, So He Built One Himself
Sorry for the late reply but you either mis-understood what I wrote or what Adams wrote. He's saying that people often sit in a job waiting to be inspired or suddenly become passionate about it. You seem to be implying that idealism is a mistake and a poor reason for staying at job.
Some of my relatives are nurses so I know well. There is big difference, just try to say: "I work in brothel!". Plus once employed one must follow work rules such as uniform...

Not sure what is situation in US. But in contimental Europe one pays a lot of money on social tax (about 10% of salary). And government will jump through hoops to pay as little as possible.
Recursive CTEs are not what one would traditionally call 'relational' and many relational databases certainly don't have them.

Some distributed graph databases do store ids and not addresses - there is no actual requirement that they be addresses, only that they be efficient to retrieve. So not actually more accurate.

People still call object-db mappers 'ORMs' even when dealing with document databases such as Google's bigtable or MongoDB. It's just an acronym at this point. [1][2]

[1] - http://mongomapper.com/

[2] - https://code.google.com/p/mongo-java-orm/

EDIT: By 'id' I'm referring to some unique hash or key that can be used to locate a document. By 'address' I'm referring to an actual on-disk location that can be directly loaded. Maybe my definitions clash with yours, I don't think this stuff is formally defined.
Bootstrap package for easier creating compilers to JavaScript
>Are we seriously so pathetic as an industry that learning 3 new technical terms is a problem?

For most people, yeah, I think monads are a big hurdle. They look intimidating to outsiders.

I still have to admit that I like the approach Haskell has taken. Sure, it's harder to grasp the concepts if you don't have a background in math, but it's not like monads, monoids, arrows, and functors were thrown in there just to be pretentious. There's a whole lot of useful theory surrounding those concepts that can be used to the programmer's advantage.
Yes, "spin-off" is not a good description. But I guess the article wanted to make things less technical in the title.
Phil Rogaway.

Matt Green.

Daniel Bernstein.

Kenny Paterson.

Paulo Barreto.

Scott Fluhrer.

Tanja Lange.

Of that list, looking at it now that I've written it, I think Kenny Paterson might be my favorite choice; he's done very important recent work on (breaking) TLS and is an eloquent and convincing writer and translator of the cryptographic literature.
> [...] We lose all information when the program crashes [...]

Ah, what you wrote earlier makes sense in light of this :)

> In C, you sacrifice safety (undefined behaviour etc.) for speed.[...]

You can write slow code in any language, a program isn't necessarily fast because it's been written in C. It's fast because it's been written with runtime efficiency in mind. Undefined behaviour comes from not making unnecessary assumptions on the underlying platform, which aids portability.

> But has a minimum of three times the memory overhead.[...]C sacrifices safety for speed and memory efficiency

Memory efficiency, yes. I, for one, prefer not to rely on a garbage collector and verify correctness with valgrind. You do have to diligently manage memory, or any language that assumes GC may win in the long run. Speed, however, was never a goal of C. You could argue the same thing with assembly, if you do all of the hard work yourself the result can be faster and more efficient than the same application in C. Neither was meant to be fast or efficient on its own, but may be considered as such when compared to higher level languages.

> There is a JVM for mips isn't there?

It exists, but it's proprietary.

> Or don't you have enough memory?

Not by a long shot, usually.

> JVM languages uses alot more memory than a native program, that doesn't necessarily make JVM-based languages any less portable.

Not on principle, but in practise it does.

> The same .jar file can be executed on Windows, Linux, Mac and more operating systems without a recompile. [...] I'd argue that they are more portable than C.

You simply moved the problem from the program itself to the underlying platform. By that logic, I can prove a PPC binary is portable by running it in qemu on x86. As long as there's a PPC or Java bytecode implementation, the hypothetical programs will work. Fact remains that given Java or C source code, the C code will end up being more portable.

> Last but not least, it's important to use the right tool for the right job. I would never write a VM in a JVM-based language [...] never write a GUI application in C.

I absolutely agree with using the right tool for the job, so never say never. Both examples can be perfectly reasonable ways to get a certain job done, we just don't see them very often.
Fourth choice: do without sex.
4chan/g/ User Buys A $200,000 Lamborghini Using Bitcoin
This article is about Canada.
Visualizing the Prevalance of Illegal Drug Labs in the U.S.
>in the case of a user with multiple shipping addresses...join user on address => you get the same user record for every instance of address, which then has to be consolidated in code

One solution is to use two queries: one to get the user with the user's key, then a second to get the addresses that match that user key.

If you want to get all the user fields and all the addresses in one query, you can do a join with a group by on user and aggregate the addresses. In Postgres, you can aggregate into an array with array_agg(). More recent versions have json_agg() to aggregate into json.

Under no circumstances should you have to deduplicate data in code. That's what the database is for.

These queries can get tricky to write, but I view them as enjoyable puzzles, like writing regular expressions. The payoff for writing the right query is that it's faster than fetching too many records and deduplicating in client code, and the SQL is short and declarative.
I think that's rather the point. Bernstein has had the constitution to call out the nonsense of the NSA-influenced IETF working groups before it was fashionable to do so. I don't think it'd be ironic to consider him as a replacement for an NSA employee on the way out due to that concern.
Usually the defining characteristic of a psychopath is an inability to feel shame, remorse, or empathy. If you catch someone with narcissistic personality disorder in a lie or situation where they've hurt someone and call them out on it, the response is usually bluster, a frantic attempt to shore up ego. If you catch someone with borderline personality disorder or just plain deep insecurity, they'll often deflate and get downcast. Catch a secure person and they'll apologize and try to make things right. Catch a psychopath and they'll react rationally to further their own interests - they completely lack an emotional response to hurting people.
Very beta-like (or even pre-beta), bad looking version. In my 15minutes test by just removing file from the local folder during sync I caused a full stop for any sync operations. Restart didn't help, the only way to "fix" it was to remove data store on SFTP side and re-connect clients. Sync speed is low (seems to be limited to something around 3MB/s, on LAN). All operations seem to be sequential. Integration with Finder just a joke, most time it doesn't refresh green/orange badge automatically. From time to time client shows odd messages like "over limit, upgrade plan" (what limit?, what plan?). In my opinion - doesn't worth any money yet. I'll stay with btsync for sync and seafile for dropbox-like.
The funny thing is someone didn't know the above was sarcasm based on your previous response. I like the idea and I think it'll turn out fine.
Hmm, I'm kinda conflicted about this.

On the one hand, it is a hop, skip and a jump away to "watch relevant ads for 'real' money" type of campaigns - and it won't be long before a click-fraud equivalent for video ads crops up and kills off this particular concept too - just like many others before its time.

On the other hand, the advertising/marketing industry is in desperate need of a new idea. Or two. Or three. Text ads, link ads, banner ads, flash ads, video ads, audio ads - heck, all possible permutations and combinations of the senses have been explored and exhausted.

I am not saying this is a new idea (or a good one even) but if this gains traction and goes the way I described two paragraphs ago, then maybe, just maybe, the advertising and marketing industry can finally understand that advertising is becoming more detrimental than useful to product sales.

Don't ask me if I have a better idea - I'm still trying to work out what I, as a consumer, wouldn't mind watching/clicking/exploring. All I know is that for me to remember/buy/consume your product, you better have a strong use case for me and me ONLY. That's the best I have to offer.

Sorry, I realize that wasn't particularly helpful but I've been thinking off and on about advertising and marketing and just wanted to (sort of) vent, I guess. :(
Bug Bounties and the Price of Security
Turning Caches into Distributed Systems with mcrouter
Good point, thanks Mark. :)

See, I positioned myself for not getting it quite right -- I can say, "this means I'm probably less psychopathic than you."

Monster! :D
No. I believe I know the specific people to whom Gilmore is referring, and I believe his observations to be a straightforward result of incompetence. You have to have read the IPSEC working group list posts of the time and see how the group treated real cryptographers to understand how unnecessary it would have been for NSA to have corrupted that standard.

No, I don't think NSA tried to subvert IPSEC, and especially not in the way Gilmore describes.
There are lots of people working on this problem. The NSF Office of Cyberinfrastructure has funded quite a few projects working on long-term data storage and discoverability. The largest of those are probably DataOne (http://www.dataone.org/) and Data Conservancy (http://dataconservancy.org/). The hard part is convincing scientists to use the tools that are available. The NSF already requires that all new proposals include a data management plan. I imagine it won't be long before they start requiring projects to deposit their data in a public or eventually-public repository.
AFAIK, most sex workers in Germany are self-employed, so they neither get unemployment benefits nor a national pension (since they also don't contribute to these insurance systems).

Do you have any source for your statement on many people loosing unemployment benefits for refusing to work in brothels ? That sounds quite fishy.