skysight-inc/HackerNews huggingface dataset:
Wow, I don't want to steer this discussion into the "ye olde golden HN days" territory, but this is the lowest of the low I have read on HN recently.

Really? You dismiss a scientific claim because you, YOU cannot understand it? There's a scientific paper written by a security researcher (who by the way co-invented RSA) that goes into great detail explaining what's going on. There's data to analyse. People can try to replicate the results. Do you have anything to say about the paper?

There have been a few threads about this already. What I have learned from those, and from other threads where a paper is discussed, is that practically nobody who comments has read the paper.
It's impossible to tell whether any messages were revealed due to this bug - that's what makes it so nasty. Users would have had the same level of security if Telegram had no end to end encryption whatsoever and simply promised they wouldn't log or read the messages they had access to; it's seriously that broken. (Worse, there's a good chance this is an intentional backdoor since the way they combine the nonce and Diffie-Hellman result is incredibly fishy.)
Maybe all those easy to answer questions are made in the same way as this one?
For my part, I use ubuntu at home and OS X at work, have done for the last 8 years. And not a day go by that I'm not swearing at OS X for being unresponsive or otherwise annoying me, something that happens far more rarely with my lower powered home laptop running Ubuntu.

I used to have OS X at home for 3+ years too, but that's not likely to happen again, and each OS X and Ubuntu upgrade makes it seem less and less likely to me that I'd consider giving OS X another chance at home.

I have a hard time even imagining why anyone would prefer OS X unless there are very specific OS X applications you need, rather than OS features.
The "protect the children" card. It's already in full use in the UK, with mandatory opt-out porn filtering.
Except that:

(1) you're not the customer until you pay money and since I assume you haven't paid them for support, which is available btw, you can't be the customer.

(2) trim on Linux was known to cause problems with certain SSDs, not to mention for encrypted volumes (with dm-crypt, which is now offered as a painless option in Ubuntu's GUI installer) it's a security risk. For this reason, I really hope Canonical does know what they are doing, because such features are always problematic if you don't really know the hardware it will run on top of.

(3) no, the customer is not always right and as proof of that fact, pick any 2 customers and marvel at their different opinions on the same topic. Obviously, trying to please everybody cannot work, ergo there is no such thing as "the customer" if by that you refer to yourself and your own opinions and that phrase is just bullshit used in marketing campaigns, as there is no company on this earth that actually believes it.
Yeah you're right, the 'crypto guys' would've probably just said "Don't even try it because you'll kill people and even we wouldn't want to try and do it".

Crypto is hard to get right, that doesn't mean anyone shouldn't even bother trying.
You have to realize that in order for the maintainers to effectively manage all of the contributions, they have to insist that, at a minimum, that the form of the code conforms to some basic guidelines. Otherwise, the code base quickly gets messy and confusing for people. You should view your goal as making the ability for them to merge in your stuff as painless/frictionless as possible.
I didn't mean to present his whole post. It was the first statement that I had issue with. I amended my comment to make it clear.
Bookmarked. This is comedy gold.
Who cares?

The design still sucks, that's what matters.
Question for the HN crowd: how does one can use DHT/trackerless to not only distribute files, but updates to them too?

Sort of like an ever continuing magnet link if you will?
> Why wasn't this bug caught in the FIPS 140-2 validation testing?
>
> [snip explanation...]

Try to read the articles sometimes.
Are Google "hijacking DNS to sabotage projects like Namecoin?" - No. I doubt the people working on this give any thought to Namecoin, the user-base overlap is approximately 0%. They're doing this because they think it will improve performance.
Today JC's direct report more or less == Cisco Board.

He really only has three: COO and Co-President Gary Moore, Co-President Sales & Development Rob Lloyd, and CFO Frank Calderoni. Pretty much all other C-level and EVPs report to Gary and Rob.

John talked about cutting, primarily, middle management during the recent 4000 job cuts announcement. You can guess how well that has worked. There is still plenty of scope to broaden the span of control in Cisco.
No, that was not the claim. My understanding of your parent's post is that he claimed that the research was real scientific research (which may be wrong), not a hoax, without expressing any opinion about the validity of the claims.

If $RANDOMDUDE says something is bullshit without having looked at the research and $PROVENEXPERT after a lot of research says it is not, it doesn't mean the expert is right. The facts should stand on their own, regardless of who made them. However, it means $RANDOMDUDE's opinion is completely uninformed and the research is worth looking into.
Ripple doesn't actually use a blockchain, as I understand it. They use another consensus mechanism based on asking peers you trust for data.

I like Ripple's general idea but I'm not convinced they've actually come up with another solution to distributed consensus. So far they're sticking with a master list of trustworthy peers, which suggests they're not convinced either.

Bitcoin's colored coins might accomplish similar objectives though.
>Implement a simple linked list in C (not C++).
It can be compiled on a C++ compiler, but do not use any feature of C++.

Er, which standard of C?
Map-reduce style scalability. SQL databases are not good for that but can be used for that as well. However then your DB will be not normalized most probably.

But again different NoSQL DBs have different purpose.
That article is useless for dm-crypt encrypted volumes.
This seems like a great idea for businesses. It's not clear from your video why you are using a mobile app. I mean, it's great to offer a mobile app, but I feel like the first piece would be getting this to work on desktop, like with a chrome plugin or something, no?
Intelligence agencies have a history of attempting to circumvent the limitations imposed by funding. There's a lot of evidence that the CIA has been involved in drug trafficking. In the case of the NSA, it could for example sell some of its intel to the private sector (technical and business information concerning rival companies).
> I didn't say TextSecure is completely safe.

Yes you do. "TextSecure completely safe app" was copied from your message before you or someone else edited it. I've not typed it but copied exact phrase from your message.
First million users. Come on. 99% of your audience is never going to have that problem.

Especially if they spend their early days fucking with a Cassandra cluster instead of talking to customers.

And it should be noted, you made it anyway.

When you make it by the skin of your teeth, that means you probably timed it right.

Preempting a problem far-ahead of time in startups means time and effort was wasted, especially if it was done before the existence of the problem was established.

It is unreal to me that people still can't figure out how to apply Maslow's hierarchy to startups.
Two ministers' sons arrested in Turkey’s corruption probe
JSON has non-string values and nesting. [1]

I read somewhere that nesting in hstore is coming in the next version (Q3 2014?) and non-string types are on deck.

Compared to the nightmarish development workflows and processes I've had to deal with resulting from using CouchDB as a main datastore, having to get the entire JSON value in order to update one key seems like not that big of a deal. What NoSQL databases even let you do incremental operations in that sense?

Shitty index? It seems like you should be able to make an index on a value inside the JSON just as easily as any other index.

Then maybe some advanced features of Postgres can really shine:
http://www.postgresql.org/docs/8.3/static/indexes-bitmap-sca...
https://wiki.postgresql.org/wiki/Index-only_scans

I'm also exploring a solution for abstracting that as a normal, non-JSON table for semi-structured data using views.

Basically, it seems like for semi-structured data where you know what the schema is, but maybe it just changes over time or isn't 100% certain, so it's not possible to store it using a typical schema, JSON + indexes + views offers the best of both worlds.

[1] http://clarkdave.net/2013/06/what-can-you-do-with-postgresql...
Celebration planned for 30th anniversary of the Macintosh
I wonder if you couldn't just find some kind of white noise emitter that randomly generates noise for the frequencies in the same band?
600W + 400W != 2kW
Looks nice, but it only complements OSM if the pictures and db are released to all under an open licence. I can't find one on the Mapillary site (though I may have missed it).
This is just a very bad excuse for doing ridiculously shitty systems that stay shitty way after the startup phase. If you at all bother to understand your problem domain, and are not just a monkey at the typewriter, writing down a good domain model and adding the constraints is not going to decrease development speed, quite to the contrary, it's going to increase it, web developers often spend whole workdays just tracking down in the logs the "story" of some now angry customer that happened to violate some unformalized assumption of the system and got mishandled later in the process, especially if this customer happened to pay already. Not to mention that with a good domain model, the code for the individual functionality flows out naturally, while with a shitty one, you might end up with three times as much code for the same thing.

Also, those mistakes in modelling the domain and in enforcing the constraints are often there to stay and slowly become impossible to fix, once you have 10000 records that do not fall into a few well specified states, it's hard to go through all of them, find some common denominators, and migrate the database. Not to mention that with the mess people can do in the code, and with the messy stack in use today, it's easy to introduce bugs that might be hard for anyone to notice but seriously harm your business.

The amount of fashionable nonsense in software engineering seems to be higher than ever, unfortunately.
Happiness subreddit
The Christmas Experiments - Dark Sunrise
>Telegram seems to be interested in money and power because they've turned down offers from Moxie (the creator of TextSecure and a well-known cryptographer) to join forces.

Is there a cause-effect relationship I'm missing here?
I think you are overlooking some serious changes to the way the Fed regulates the money supply in the last five years. They are printing over 85 billion dollars every month. The stock market is soaring... why? because the government is artificially controlling interest rates which makes the value of your dollars go down fast- so people are forced not to save their money in a bank account but instead put their money "into" the economy- wealthy people are putting it into hard assets, and people that don't have as much are dumping money into the stock market as a hedge that their savings is loosing value every day. The result is a market that looks like it is doing great but is quiet volatile itself.

I agree that we should be very careful to just suddenly start running around yelling "the sky is falling" but I have heard an economist at the Fed (during a banking townhall) say "We are in totally uncharted territory" referring to how they will pull back all of the liquidity they have pumped into the market.

As for your comment about the US government saying "Use US Dollars or else..." that may not be the way that it looks on the surface but the US Government is very heavy handed in how other countries are allowed to control their own currencies, how multilateral trade deals are written in terms that force other countries to give up control over their own monetary policy.

You are correct that individuals around the world views the US dollar as stable and prefer to keep at least some portion of their wealth in US backed treasuries- but I would caution anyone from thinking that this is a foregone conclusion.

The fed uses a few people to try and hit multiple targets all at the same time... they have to deal with a bureaucracy that favors age and longevity, they have political pressures (see the Greenspan article above), and they have to make certain that their decisions keep their institution (coincidentally not a gov't institution but a private company)alive. The Fed is first and foremost a US-centric org. Whereas cryptocurrencies use the global market to find their level- whatever people agree is the price is the price... set number of bitcoins, completely liquid, and can cross borders without blinking... making trade easier than has ever been imagined before.
I don't get what the problem is here. Each of those annotations modifies the field somehow - if you take one out, then you get less functionality. Is the problem really "my code does too much"? He says:

> I can't even see the damn property under this bloat.

To me, all those annotations are the property, so you're seeing exactly what you need to see. You could put it all in an XML file if you really want to, but they're still going to be there, and you'll still have to read around them.
If you want to build new crypto, people would be absolutely happy for you to design and present a new cryptographic scheme - hopefully with some advantages over existing ones. People will analyze it, tell you where the weaknesses are, and if they're not critical flaws you can fix them and come out stronger - and if they are critical flaws, you know your scheme is broken before it's been used for anything important.

Likewise, building a hot new secure messaging app with existing well-analyzed, battle-tested cryptographic schemes is generally going to be welcomed.

If you try to do both at once, you're building your application on shaky, untested cryptographical foundations. Cryptographers would similarly probably warn you not to base your application on a new cipher someone else announced at a cryptography conference last week - give it a bit of time for others to analyze it and spot any flaws it might have before you entrust anything sensitive to it.
> As for me and most normal users, the security we need is not from NSA type of snooping but from mid level risks.

Most users, disregarding the government for the moment, don't need encryption full stop. They don't send anything commercially sensitive that an attacker's going to be interested enough in to try to intercept their messages.

The use of encryption presupposes a motivated threat, and it's not clear to me that the NSA is significantly more powerful than other adversaries in that area. They've more computing power, more political power, they can buy zero day exploits. They probably even have some very smart people, who can find flaws faster than the attackers in civ-space. But speed isn't required, only persistence; motivation, interest. Which is, after all, what we're supposing in the first place if someone's going to go to the trouble of intercepting your messages.

It's not clear to me that unless your goal is 'make something that the NSA can't break into', you're going to make something that a well motivated attacker can't break into either. And this stuff only has to be broken once, then they'll just sell or share the attack. The conflict is asymmetrical.

Your argument seems to be posited on the idea that there will be no attacker; no-one anywhere, ever; sufficiently motivated to breach the protocol. And I find that highly questionable, given that a flaw has already been found - and with far lower levels of incentive than will be present if the system is widely deployed and used to protect valuable information.
You copied it from your own message, not mine. http://i.imgur.com/pxMVDwA.png
New jailbreak available for iOS7 by the evad3rs
Technically you're right. I thought that “decided” wasn't the right word to use before you give him a chance to decide. In other words, I read your post as conveying the idea that Pavel actively dismissed the bug report as unworthy of rewarding, when in fact the opposite was true. Perhaps I misread your post being a non-native English speaker. Apologies for that.
Crowdsourcing a More Secure Future
Oh do get on with it. Put up or shut up.

Otherwise, all I'm seeing is childish usenet style attention seeking.
No, most projects are welcoming to outsiders especially if they bring in good improvements. From what I can see, an experienced emacs user could fix the formatting of your patch in about a minute so the "rules lawyering" seem completely unnecessary. It makes sense to expect well-formatted patches from veteran committers but most projects give the newbies a break.
Doesn't much help when people squat pepsi.com. It's already got a unique website, which just doesn't happen to belong to the squatter.
My point being they that the conditioning/feedback-loop may exist even in the case where the people involved are not aware of it. It is possible to have agents working independently, on their own compartmentalized pieces of the larger mission, each being influenced in a (apx) similar manner.Given the history of the NSA (and FBI) I would wager there probably is a significant amount of conspiracy in the department.

Money is a powerful conditioning force, and humans miss the "obvious" things that are influencing them all the time.
Write a beautiful thesis using LaTeX
Actually, I'm pretty sure they weren't gambling at all.

Pavel previously set up contests with monetary rewards about half the same value for developing a mobile VK app for iOS, Android and WP.

It's not a gamble—it is really an expensive way to find holes. What I don't understand is why they don't hire a crypto consultant instead.
Oh maybe France sold them the material, but we all know America is consulted all the way on these things. If America had have said no it wouldn't have happened.
Mars rover Curiosity’s software upgraded
They did give him a reward. Telegram has just posted the translation on twitter.
Moved to separate discussion: https://news.ycombinator.com/item?id=6950129
Arrays by row? Why?
Evad3rs team did it again: The iOS 7 jailbreak is out
> Currencies aren't like some weird subset of commodities.

I have a chart that is just begging to disagree with you:

https://www.google.com/search?q=usd+vs.+euro

To wit, "Currencies! So stability! Wowe!" A mere 25% fluctuation over the past 5 years! And at the scale of the Euro and the USD, no less!

Also, if currencies were as magically stable as you presume, then "currency trader" wouldn't be a thing. This also wouldn't be a thing:

http://en.wikipedia.org/wiki/Foreign_exchange_controls

Also,

> dogecoin denominated debt

Cryptocurrencies don't allow credit/debt systems. Just like I can't carry a "negative cash value". You either have cryptocurrency or you don't. And before you respond with "well then how would people buy houses and pay for college?", note that college costs have gone up BECAUSE of student loan availability, not IN SPITE OF it. And you know what? It's about time this happened, because fuck debt slavery.
And then, this article is hooking me with title…
Really?

The protocol is bad, this competition protects only the most basic attacks and still was broken in about 5 days.

It's not "unnecessary pride". You have to be really cautios with cryptography. Not use the first thing that has "Secure!" sticker on it.
Which is wrong.
I really wonder if this sort of rote learning has anything to do with being a decent programmer, and if sensible companies that I want to work for are really asking these sorts of questions.

Personally, I could probably tell you the uses for heaps, trees, tries, and hashes before I wanted to check something in a book or look something up on the net.

I would think that I am better placed to write sensible code because I have an understanding of complexity and I'm prepared to go and think about the problem, find or invent an algorithm, and then prove the complexity of that algorithm. Rather than rote learning 12 different types of trees.
You mean https://news.ycombinator.com/submit ?
Finally! I've been waiting for an iOS jailbreak to finally be able to use bitcoin related stuff on my iPhone and iPad. It's been a pain so far.

This is the first time that the iOS walled garden approach REALLY started to bother me. The other was to do with emulation but that was filed under 'minor nit-pick'.
There's no harm in brushing up on CS 101 questions, but I wish more candidates spent time preparing for questions about code quality.
Any public repository to track?
A million registered users is nothing for an MMORPG. You can get it pretty quickly even in a national-level game, without going global. A completely different story is keeping those users active and earning on them. The problem here is - you need to sustain a pretty massive load, yet only a few % of that load brings you revenue. And things like being out of service for even 10 minutes during peak hours (and peak load can be 100x higher than average load if you do special events in the game) can put you out of business or at least seriously worry potential investors.

The sad thing is they actually didn't make it. I don't think the revenue ever crossed the cost of f*ing with all the scalability and availability problems. AFAIK currently they use Membase.
Well, it seemed to me as if you were hoping for people to come to damascus for the event. But since everyone is already there, it seems like a great way to forget the war for a few hours and think about something positiv. Great idea, i wish you and your friends all the best.
Is specialization good?
I am thinking about specializing in front end development.Would anyone of you with experience advise this? Thanks
> If you at all bother to understand your problem domain

This is a startup. There is no problem domain.
There is no spec. There's none for a startup.
You may not even have code.

If you're doing a "startup" but have this ironed out, great, everything you said then applies, but it's not a startup, since you found your business model, it's a small company.

And I would love to enforce constraints on the DB but unfortunately, I already had "primary keys" that repeat, unbeknownst to the project customers.
What the Church doesn't want you to know
Because normal C is also row-major?
Actually the internet runs on Tcl:

http://en.wikipedia.org/wiki/Cisco_IOS
Terrorism is almost orthogonal to this. This is statism, which has been on the rise off and on through from the 20th century onward and has taken a significant uptick in the last few decades. Even in the freest countries there has still been a rampant diminution of personal responsibility and individualism in preference to state control, regulation, legal expansionism, and so on.

The war on drugs is a big part of that. But other things are too, things that people still have a hard time grappling with intellectually. Labor laws and the welfare state, for example, tend not to actually benefit those at the bottom, they tend to benefit those at the top, no matter the intentions. But in the meantime, a lot more of our money is taken under government control, and a lot more of our daily activities as well. Our country may one day rediscover the value of liberty, but for now it's still a huge messy muddle.
here's hoping Activation lock can somehow survive this
It would look like this: http://1.bp.blogspot.com/-3tm-HcBGarA/UcrM64NIFtI/AAAAAAAADb...