skysight-inc/HackerNews huggingface dataset:
The article doesn't really seem to mention what IDU/MSM mean:

MSM: Men who have Sex with Men
IDU: Injection Drug Users

The reasons why these people are at extra risk should be obvious :)
To my knowledge this is usually because the server responds to the browser's user-agent and serves content appropriate for the mobile device. If you override the user-agent and mimic a desktop browser, how would the traffic pattern be different then?

EDIT: I meant to state if you were to override the desktop's user-agent to mimic a mobile device while tethered.
HN guidelines for submissions are to post the original source for a story, which is linked in the article. http://www.cs.tau.ac.il/~tromer/acoustic/ This has been posted efore with lots of discussion. http://news.ycombinator.com/item?id=6927905
Substantial discussion:

https://news.ycombinator.com/item?id=6927905 (tau.ac.il) (94 comments)

More discussion:

https://news.ycombinator.com/item?id=6948526 (schneier.com) (34 comments)

Other submissions:

https://news.ycombinator.com/item?id=6940827 (theregister.co.uk)

https://news.ycombinator.com/item?id=6938536 (dailymail.co.uk)

https://news.ycombinator.com/item?id=6935289 (tau.ac.il)

https://news.ycombinator.com/item?id=6933255 (slashdot.org)

https://news.ycombinator.com/item?id=6932445 (slideshare.net)
Re: the last link

>In the Kademlia adaption for Bittorrent a peer's address (NodeID) is to be generated randomly, or more appropriate: arbitrarily. Because randomness isn't verifiable, an implementation can advertise itself with popular NodeIDs or even change them on a per-packet basis.

At the end of the slides they suggest sha1(ip+port) as a possible fix. This would increase the barrier-to-entry of a Sybil attack to the point where an attacker needs to be able to spoof IP addresses or connections. However, I believe that a sufficiently motivated and financially equipped attacker may already exist who would still be able to attack this scheme. Perhaps an alternative to sha1(ip+port) could be some form of cryptographic signature scheme, where the NodeID is a public key or hash of a public key, and a node is only considered "real" if it is at least able to sign responses with the private key that corresponds with the NodeID.

Maybe operators of nodes should be allowed to tweak some kind of setting that controls how paranoid the node should be of Sybil attacks.

Maybe it would be possible to include some kind of hashcash or Bitcoin scheme to make Sybil attacks more costly. There has to be some way of requiring an attacker to expend considerable computation power.
Even people that otherwise like the iOS 7 look will admit that a lot of the stock app icons look like shit. Safari and mail and settings in particular are a bad joke.
Fake it till you make it is why you'd use a quick and dirty mongodb with json dumped straight from your clients, though. Maybe we have different ideas on the speed of development on mysql vs mongodb though.
Or maybe people don't know about the look until after they've upgraded? The Software Update page on the device doesn't show any screenshots, it doesn't even say anything about the new look.

Additionally, there are lots of apps which only work on iOS 7, so often enough you don't have a choice.
I don't use my phone in bed. But usually in the hour before bed I'll have to schedule something on the calendar, or set my alarm, etc.

Now, I could do one of the following:

1. Reorder my life so that I never look at my phone after sundown.
2. Jailbreak

I tried not using my phone for 1 hours before bed, still had insomnia. There's no trivial lifestyle fix that would address the issue f.lux solves.
> Unless it turned out they'd set the whole thing up

That's an important question, really curious to know if the user x7mz steps up to take the reward and if telegram would release any proof of payment (minus any obvious info that would give away the identity of x7mz).

This vulnerability seems to be connected to Diffie-Hellman, right? Even a rudimentary search shows that a MITM is easy on it. I wonder if its even possible that they did not know this one?
You should not alter your lifestyle to fit the limitations of your possessions. Rather, your possessions should help you to live the way you want to. If you enjoy staring at screens at night (e.g. for reading), you should buy gadgets that enable you to do so.
This is mostly an issue of the limitations of law, or to put it more precisely, having to deal with the letter of the law versus the spirit of the law.

If the intention is only to prevent large-scale data center, forbidding all commercial form of servers is clearly overkill by a large margin. However, if they limit the scope, they might miss use cases which are by everyone's definition abusive, but not technically a "large-scale data center".

I find the same problem in license texts. The GPL should really only have to be a single line saying "Do what ever you want with the program, so long you do not restrict anyone else in doing the same". Following the spirit, it would cover any form of restrictions now and in the future, regardless if people tried to use hardware restrictions, legal restriction, or obfuscation (like machine language) to restrict users of the program. Applying a different license with a lower requirement, would simply be a matter of intentionally trying to circumvent the wishes of the author.

Alas, licenses are not written like if they were enforced by the spirit of the text, but rather as if they were enforced by the letter of the text. As such, they try to include all forms of license circumventing into a now rather long license text, and when new license-circumventing techniques gets invented, the license text gets an update.

Wouldn't it be nice if licenses and terms of services would just write down what they want, rather than trying to cover every aspect imaginable just in case?
I understand that you care about Telegram and want to defend it when it is attacked, but comments like this are inappropriate and will damage Telegram's reputation.

It is unfair to imply incompetence on tptacek's part given only that he spent some finite amount of time looking at your protocol and did not find the nonce vulnerability. It is also unfair to say that he didn't find any vulnerabilities despite the potential for a 100k reward as the potential for such a reward (outside of your specific contest) had not been stated clearly.

If you do in fact have evidence that tptacek was involved in RSA's deal with the NSA, you should state your accusations explicitly and provide that evidence. If you do not, I think the accusation is inappropriate and certainly counterproductive.

That said, I very much appreciate the resources you are donating to open source crypto software. It is undeniable that the potential for a 100k reward will send a lot of eyes to your source code. I would encourage you to also consider hiring a security firm (US based or otherwise) and to consider how your comments will affect public perception of Telegram.
It's so cool that we can stream software updates across 34 million miles.
7 Traits That Distinguish Super Successful People From Ordinary Ones
>>Try right-clicking here to see this working

I right clicked on your "intercepting element," inspected with firebug, and deleted the input node. Then I could copy and paste as I desired. Firefox. 10 seconds?

My point is, we have many better things to spend our time on as developers than trying to control our user's access to the same information we're providing them. This not a reproach to taye, but to the bosses that ask us to build these worthless systems.
What about transparent equal salaries? Or at least equals base salaries and some kind of performance bonus.
I actually have a theory that this is all a scam... the person who found the bug is actually the authors (or a friend) of the Telegram protocol. They published the security issue and reward themselves so that 1) they don't have to pay anyone else; 2) they get good publicity by doing this; 3) shut others up up front as this is really a very easy bug to figure out (a few others hinted the possibility as the key exchange is unautenticated DH, which is bound to flaws like this)
Be warned though. At least in Germany they come to your home long after they seized the server. They might even come to your home after they know the seized server was a Tor node.
Tablets facilitate impulse shopping for many
So, to make it clear, do you imply that "professionals" are just bragging that they know what's better, but they're not much when it comes to the real deal?
> Show me another non-profit Open Source (mostly) IM service that invests this heavily in seamless encryption and I'll change my opinion.

You can't measure how secure something is by looking at how much money has been invested in it.
I get nervous sometimes when flashing ROMs on my phone...And those were downloaded over a (comparatively) 0-latency connection with high throughput. Fact that sending a firmware to Mars is apparently a normal thing now notwithstanding, I find this incredible.
You know what's worse than CUDA or OpenCL? General purpose algorithms implemented in a graphics API.

I read a lot of GPGPU papers at the university, and I could never understand the older ones, that described algorithms by mapping everything to graphics elements, and computed the solutions as a side-effect of rendering something.

Next to that, undestanding an algorithm implemented in CUDA is a breeze.
I can not live without FolderCloser, SwipeSelectionand the patch which removes the 8 tabs limit in Safari.
Yes. Larry, and Google have gotten a lot of (well-merited) bad PR recently.

Sadly PR-stunts like these were, so far , only restricted to Reddit [1]. But it seems that HN has a growing user-base and can no longer escape the commercial shills and PR submissions like these.

[1] http://www.reddit.com/r/shill
[1] http://factions.in/article/General/How_I_Turned_My_Back_On_R...
Well, we can train for something we know there is excess demand for, but that involves picking winners, and the people who are great at that don't usually work in government bureaucracy (and only occasionally work in charity).

Another approach is to ask people in less need of paid work to make room - a low Basic Income has that effect: as some people leave the workforce to focus on unpaid activities (child rearing, volunteering, art, educating themselves), this leaves more jobs available for those who need them.
It sure did make me feel better about myself. Did telling that person he was using his phone wrong make you feel better about yourself?

There wasn't even a problem. "I like f.lux." "Or you could not stare at your phone." What were that poster or third party readers supposed to have gleaned from your comment, pray tell?
The time is already here. Anyone can now buy panels at ~$0.50 per watt, from Alibaba. To power a 10,000 watt home costs ~$5,000 in panels. Add $1,000 for an inverter and misc, add another $4,000 for installation labor (I'd pay ~$1,000), so for $6,000 to~$10,000 in total costs one eliminate their electric bill. That's a payback of ~3 to ~4 years. A 3x to ~4x revenue multiple seems like a cheap price to pay for an income producing/saving asset.

http://www.alibaba.com/showroom/price-per-watt-monocrystalli...
Complete Steam Machine Teardown and Price Calculation
What role did tptacek have in "RSA gate"? I think you've misunderstood what he was saying
That's not really an accurate picture of net metering.

The terms of almost every net metering plan are in the power company's favor, even if the net meterers somehow never bought power.

Net metering, as currently implemented, only allows you to earn credits on your bill up to the point where your maintenance fee kicks in. You're earning credits by producing power for the company during the day, when power is expensive. You're burning those credits to keep the lights on at night, when the company's cost of power is nonexistent. No one is paying net meterers market rate for time of day, so the power companies are coming out way ahead on cost of power. Even if that weren't the case, they still baseline your bill to a maintenance fee.[1]

Moreover, Hawaii has never had any clue how to balance a grid, so if HECO is now blaming customers for problems with the terrible system they built, my default position is skepticism.

[1] HECO's net metering bill guide, including the minimum monthly fee even for no power use:
http://www.heco.com/vcmcontent/EnergyServices/NetEnergyMeter...
Pavel Durov - https://en.wikipedia.org/wiki/Pavel_Durov
well, if someone causes you significant lose, will you turn down a norch? That's why we are bashing on them as they are making BS claims about how secure their protocol is.
The story of Telegram or “Why you shouldn’t listen to Hacker News”
Why Snapchat Needs A Product Manager
> "Not seeing a major conflict of interest is worrying in itself"

The rationalization from some posters in the thread of why he shouldn't be removed is scary.
>Unfortunately, you have leftist statists that want market economies to fail so they can impose their statist, opressive regimes on people under the guise of "helping the people"

You really believe this is the case with people like Emanuel and the Obama admin in general? Because, I wonder: what do you think their endgame is? What is their true motivation for wanting to establish a statist, oppresive regime?

It seems to me that we currently have a corporatist regime. If I am to choose between rule by corporations (where the motive is profit) and rule by the state (where I presumably have a voice), I'd choose the latter.

Problem is, however, we currently have the worst of both worlds: rule by a corporatist state.
Yes and no. As I understand it -- most of the network improvements are to do with Peak Load. (ie -- the days where it's 45 degrees C and every household is cranking A/C). Solar PV definately helps reduce those few days a year Peaks.

In the Australian context -- as I understand it -- the Privatization of the Electricity Generators was such that they are legislated to only charge a fixed % of their costs. So the only way for them to make more money is to increase their cost-base (aka "Gold Plating") and then charge their customers the additional fees.
SwipeSelection for me too, kept swiping 2 months after upgraded to ios7, it's just fucking makes sense!
A lot of work has gone into making that software especially robust, including some custom tooling for facilitating peer review. Dr. Holzmann (formerly of Bell Labs, birthplace of Unix) heads JPL's Laboratory for Reliable Software to lead this work.

If you'd like to learn more, I written about the LARS methodology after hearing Dr. Holzmann at USENIX Hot Topics in Dependable Software:
http://www.verticalsysadmin.com/making_robust_software/
Ummm, it's a DRM, not technical issue. The DRM is imposed upon them by content creators. In theory, FreeBSD could get a moonlight port, then try to license the keys used for the DRM, but unfortunately, this is likely a deal breaker for Netflix. Also the FreeBSD project has to do the work, Netflix can't, since they can negotiate a contract on behalf of FreeBSD.
ok - that does indeed make some sense.
Except that's just a fantasy scenario and not how Netflix actually works or would work on FreeBSD.

The problem is there is no port of Silverlight with the necessary DRM. The latter is unethical in the context of free software.

However, from what I've read, Netflix intend on switching fully to HTML5 in the near future. This will make their platform OS-agnostic, while still benefiting from things like Encrypted Media Extensions (EME).
REST API Alternatives
It's not about being creepy, it's about having enough time on hands and why. I would be interested to find someone, who values taking 1000s picture of mine than his time spent making money for himself. In the case of celebrities for instance, they have almost their entire life public, and i don't think it had harmed them any way, unless, they committed something illegal and it was made known.

People over the internet, are little too much over-sensitive. I am not implying 'Privacy' has no value, but we have taken this issue bit too far over the 'internet'.

A prime example of so-called 'anonymity' over the internet is 4chan, you pretty much know what sort site that is.

I am not implying it's an illegal website, but frankly, anonymity mostly leads to creepy, drugs (silkroad), and everything else considered wrong and bad, than something good which is pretty rare. Snowden is an exception, but again, he committed a crime for a good cause. Most people however commit a crime for every possible wrong reasons.
I'm really pulling for a neighborhood microgrid movement in areas with abundant solar, terrible power monopolies, where a bank of vanadium batteries is overkill for one house.

Don't get me wrong. Only some power companies are awful monopolies that barely do their job, most work fine. Still, those awful monopolies should face some threat of revolt.
It would have been much more useful for a neutral party to do a comparative analysis and stated the pros and cons of each side.

Like, say, tptacek, who is not in the "instant messenger" business, who is in the security audit business, and whose comments here on the technical details of the Telegram protocol have been absolutely damning? See https://news.ycombinator.com/item?id=6941934 for example.
I don't know, annotations are what you make of them and can be abused like anything else. I miss being able to do things like this when I'm not working on Java code

@GET
@Path("/users/{userId}")
public Page userPage(@PathParam("userId") UUID userId, @QueryParam("blub-filter") String filter) {
...
}
it's all about writing code in a responsible manner.Every feature could be abused , like creating methods with a single line and methods with 2000 lines of code. It's upto the dev to use it properly.
> Is it desirable?

No.

> Is something like this possible?

Maybe.

> where people have to show "proof of work" in order to have their comments count or rank higher?

This would be counter-productive. You're asking whether its a good idea to remove a persons choice to choose what opinion they should believe in.

It's true that it's easier to criticize an idea when you are not personally involved, but to reduce any thoughts you don't agree with to "trolls and armchair opinionators" is incorrect.

There is simply no way to determine if the person giving advise is an expert in that domain, its one of the advantages of anonymity.

Furthermore, anonymity allows one to step out of the situation and see the bigger picture. For example if a founder was doing something that in an extreme situation could expose users to unforeseeable risks (unforeseeable for the founder), which often happens in the hopes of huge monetary gains.

Also, we already have an option to up/down vote, and if someone says something that is too extreme, not-credible or troll-like we the HN users can vote it down into oblivion.

No reason to deliberately promote cognitive dissonance.
Yeah Hubbard & Hubbard that I recommended is a more approachable take on Calculus on Manifolds (which it is based on or inspired by). It's still not simple, but it's probably a bit easier-going for the modern student than Spivak.
Wat is het verschil tussen het beste dieet ooit voor mannen vsvrouwen
Local woman files $5 million suit against Target
I don't think that style of code is wide-spread in the real world; this feels like a total straw-man. Annotations are normally much better than any alternative we've come up with (e.g. XML), but the extreme case where you use every annotation is less appealing.

To me, this feels like a serious code-smell. Do you want to link your API data representation (XML/JSON) with your DB representation? Why does your JSON have a different structure to your XML?

If I'm wrong (it happens) and this is wide-spread, IDEs could implement folding for annotations to make this more manageable. The XML annotations would fold together, the JSON together, the ORM together. Or we could have different views, like LightTable. There just aren't that many sets of annotations.
>they're literally paying people to like their product

I don't think this statement is reasonable. Are you suggesting that they gave the 100k reward out because they wanted the recipient to like their product?

>Now they're throwing money at him. How is that in any way a good thing?

I think bug bounty programs have a track record of efficacy. Do you disagree?
Optimizing LevelDB for Performance and Scale
This one is particularly shocking:
"KATHRYN CLANCY: An eye on harassment"

basically, she discovered hos prevalent sexual harassment is in science. It looks like programmers and such aren't so bad, but more like the society as a whole. Depressing.
The grid is profitable enough for the power comanies to invest in storage tech like this - http://www.gravitypower.net/ - or this - http://www.lightsail.com/ - which provide the grid response of hydro, but with the flexibility of being able to put it in at the local level. Now as to the question of centalised being more efficient, it is not at all clear, given transmission losses, if that is true with solar systems that have local storage.
Also interesting is the amount of damage being done to the wheels as it drives around up there. Some good pictures of that here[1]. Apparently the wheels are designed to leave a mark so they can keep track of the rovers location by looking at the tracks[2]. The tracks spell out JPL in morse code.

[1] http://news.discovery.com/space/martian-wear-and-tear-curios...

[2] http://www.planetary.org/blogs/emily-lakdawalla/2013/1002210...
Can someone give me an idiots guide to how namecoin works, and why we as consumers should care? I get that its some sort of de-centralized name server protocol, that uses coins to fund/drive use, but who gets paid in this value vs who doesn't eludes me. Also if I want to register a domain on top of namecoin, how do I do that? Who can even see the domain later if the dns zones haven't been accepted by all the ISPs?
Thankfully, there are easily installable Wine ports so it isn't really a problem.

Netflix does not seem interested in enforcing their "Linux (/*BSD) ban"[1], I can even use a desktop recorder to rip straight from Netflix if I wanted which essentially makes it a "take what you want" service.

[1] http://www.omgubuntu.co.uk/2012/02/netflix-no-plans-to-suppo...
"Apple has purportedly already fixed exploits used for iOS 7 jailbreak"

http://www.ifans.com/blog/95118/
Slightly off-topic, but here it goes:

I always get a bit annoyed when apps use the phone number as the primary identifier.

As somebody that just moved to another country, I now end up with a situation where I can either decide to lose my German whatsapp friends or not being discovered by my American whatsapp friends.

I would love to see the ability to get some sort of ID number and then being able to register more than 1 phone number with it.
My top:

Specify my own dns server when using the cellular net.

Random ssh stuff when i don't want to use one of my vps's
due to latency.

Full access to MY Files.

Open VPN(which i guess is possible without jailbreaking now days)
Apple nailed everything I really jailbroke for in iOS 7 other than F.lux.

But F.lux is so truly fantastic that the day there's a proper, 100% supported jailbreak (i.e. one that actually works well with official versions of MobileSubstrate/Cydia), I'll be jailbreaking just for F.lux.
Perhaps because it ultimately means a smaller install base, which can make Ubuntu less attractive for developers and enterprises, as fewer users are already familiar with it.
That's not a 2D array, it's a jagged array. You're paying for an extra pointer dereference.
Interesting. And frightning. So your landlord always has access to your home? That is certainly different in Germany.

Are you allowed to install an alarm system and not give him the code?

He is not allowed to enter any time, I guess? Or is he?
Operators and Meta-operators in Perl 6