skysight-inc/HackerNews huggingface dataset:
I don't have flesh in this game one way or another, but when I read the article, it seemed to be a pretty damning indictment on Telegram, probably not what the author was trying to communicate.

I think the gap in understanding here, is that when it comes to security, cryptography in particular, it's not the case that the critic has to demonstrate where something is broken , the responsibility is on the part of the developer to prove that, in every possible manner, the system is secure.

The telegram people, on the surface, don't appear to be familiar with the crypto-community best practices, and, as a result, are unlikely to have made a product that would survive any real scrutiny, and highly unlikely to survive any actual attack on their protocol, should any adversary desire to do so.
This was written in 2010. Any plans for updating this list? (e.g., the link for "tclock2" is dead).
"Not invented here" syndrome is not unique to the IT world
The bottom line (a big one) is that corporations don't have guns and can take you away.
Anyone know why argentina, paraguay, and bolivia have no coverage? Have the governments blocked it? super rural/remote stretches of brazilian highway in the amazon are covered. I mean I doubt there is much demand, but argentina should have higher demand (40 million people)
"I truly thought" you would not raise a question to which V8/Dart people already know the answer. Range prop is not the only solution.

Use JIT techniques to speculate profitably that most ints fit in JS doubles. This can be done in JS-hosted VMs, just as in machine-code-generating native VMs.

Again, this is extremely old hat to the Dart/V8 folks. See, e.g.

http://mraleph.tumblr.com/post/24351748336/explaining-js-vm-...

In SpiderMonkey, we augment JIT techniques with online type inference that distinguishes int from double. The same type inference could add bignum to the speculative tower. See

http://rfrn.org/~shu/drafts/ti.pdf‎

This avoids most of those checks that you assume are too expensive (and by assuming, so casually fork Dart semantics).

Here is a JS version of [Hackett&Shu, PLDI 2012], from @pcwalton:

https://github.com/pcwalton/doctorjsmm/

Can the full JIT+TI approach to bignum/double/int perform well enough for dart2js? Better find out, because forking semantics is just the wrong thing.

Another road not taken: we hear "can't wait for JS to get better", but Dart started at least by 2010, possibly earlier.

http://wiki.ecmascript.org/doku.php?id=strawman:bignums

could have been proposed and actually worked into ES6 by now, but the Dart team was in stealth mode (Dash) for too long. Still, better late than never. There's time for ES7. Who from Google will actually do the work in V8 and with Ecma TC39?

/be
I think that many comments are negative because most new things fail--especially in software and the Internet, where only the best survive. Is it doing anyone a service to pretend otherwise?
This reminds me of threads on MacRumors and Apple Discussions. Someone asks how to do X with [gadget]. Someone replies that you can't do X with [gadget]. Then someone asks why you would want to X with [gadget], you're obviously using [gadget] wrong and you should buy Y to do X instead.

The rest of the thread is an argument over whether people should want to do X with [gadget]. Maybe a post explaining how to more or less do X with some hacks thrown in the middle.
I meant they're giving out $100k because they want more people to like their product. If they cared about security more than getting users, then they wouldn't intentionally ignore advice from every crypto expert.
Has James Clapper Been Indicted Yet?
You can actually do the first bullet point with software like iExplorer - the app sandboxes are only protected on the device, but when connected to your computer it's all available to you.
You're wrong. Operationally, it is equivalent to:

int x_1d[8300];

Where x[a][b] is x_1d[a + 83*b];

An array of arrays is contiguous in memory. There are no pointers involved until you take the (r)value of the array or one of the inner arrays, at which point it is degraded to be a pointer to the array's first element, as always.
I've been keeping my phone on ios6. I don't want to give up f.lux, or adblock. Or password pilot, or folderenhancer for that matter.
> Apple should just implement f.lux-like behaviour in OS X and iOS

No. Apple should let people run the programs they want on the devices they purchased. There should be a seriously insane number of hoops to jump through to get to the switch, but the switch should be there.
There is simply no way to determine if the person giving advise is an expert in that domain, its one of the advantages of anonymity.

Anonymity does not preclude reputations over time.
I agree, "irrelevant" would be a better choice.
There is no tab limit for safari in iOS7.
> They have also pointed out multiple places where Telegram is committing obvious cryptographic blunders in their protocol.

They have pointed out multiple places where Telegram MAY BE committing blunders, namely their internal server - server communication MIGHT be susceptible to MITM attacks. It's not the same thing.
If he's making the claim that "there are a number of initiatives, technologies and discussions that are starting to nibble at the crust of the de-facto standard that REST has become.", then surely he would have evidence of this claim?

To start with:

1. Label your axis, that graph doesn't say anything.

2. Maybe we should be looking at percentage change in the graph rather than whatever is being graphed here.
RESTful services still work in those situations where they are correctly applied. Maybe what has happened is some of the less mature and more shrill developers have stepped back from their war on any Web service that doesn't fit their dogmatic rest-tard view of the world. There are plenty of valid XML-RPC based services that continue to run well despite the whining that someone somewhere did not yet have a ruby gem to connect their ruby on fails site to it and that it was simply unacceptable - and so complain on twatter they must!

So in short - no, REST works, use it in the right places, and remember kids - not every Web service or endpoint has to expose a REST based interface.
Wall Street Unlocks Profits from Distress with Rental Revolution
there's no rules about what looks good or not, obviously. the rule of third is also applied very liberally, you don't have to put focal points dead on thirds. It just is a nice rule that gives you quick results. Ultimatively, it is all up to you to decide what makes a good picture or not.

I personally find the rule of thirds very effective in leading to interesting and forceful compositions.
How is software freedom a people-hating ideology? The FSF doesn't say that software must be under the GPL or another copyleft license to be considered free. Permissive licenses such as the BSD, X11, ISC, zlib, and Apache licenses are also free-software licenses. Many software freedom advocates choose to use copyleft licenses, and encourage others to do so, because they believe that's the best way to reach their goals. But they don't demand that all software be copyleft.
Linux Mint 16 “Petra” KDE released
It's not some third party adversary to be worried about, but an internal adversary who might harbor ill intent (or even if they mean well, might be forced to become evil under secret court orders.)

Telegram are advertising a system which they claim is encrypted end-to-end, which means that even with physical access to the servers which are routing messages, one would not be able to perform MITM attacks. However, the contest is an obvious farce because they're asking only to demonstrate flaws which can be done externally without the same access to servers that Telegram have.

It's obviously simpler for someone knowledgeable in cryptography to be critical in a few sentences than to demonstrate vulnerabilities with actual proof of concepts which require lots of work for no apparent gain other than to make a point. If Telegram were offering $100k for every flaw found in their system though, you can bet that there would be less mouthing on HN, because people would direct their effort at demonstrating the flaws.
Global Issues has an interesting article with some good linked resources on how much money is spent and by whom.

http://www.globalissues.org/article/74/the-arms-trade-is-big...
Think of it this way: You really ought to have a failove/disaster recovery copy of your database, and an easy way of making offsite backups.

Set up a slave of your MySQL or Postgres database (no the slave is not a backup, but dumping it regularly is an easy first step to a very basic backup setup), hosted in a different data centre, and if you're a two person company you now also have somewhere to run analytics whenever you feel ready.

It can be <1 hour effort and a few tens of dollars a month in extra costs for a small system, yet makes a tremendous difference in resilience and gives you that db to run analytics against "for free" whenever you do need it.
I would have liked to see some traits that are common to billionaire's. for every billionaire theres thousands or millions following the same stratagy that didn't get it to work. I think the best advice I've heard is from the lotto which says you can't win if you don't play.
This is just normal aerial photography. Nice pics, but I don't see what's the relevance to HN.
Interestingly ( perhaps ), in a house fitted entirely with 5600k 96%-daylight spectrum bulbs, I have no problems falling asleep nearly instantly after using a smartphone or laptop.

Perhaps you could try changing the lamp bulbs in you bedroom to daylight-spectrum so there isn't such a sharp distinction between a screen and the ambient light colour?
I've seen sites do it, but I find it fair. Most of the examples I've run into attach something like "Read more at: <url>" which isn't obnoxious. It's also easy to remove from the text that is copied.
Possibly cool idea: build a Curiosity emulator/simulator. Build the o.s. for it and/or user-space (does any of those concepts apply? probably not) software for it.

Does this already exist? This looks like it. http://sourceforge.net/projects/marsroversim/
> Anonymity does not preclude reputations over time.

That's ture. I wasn't discounting that. Simply stating that that even if a person is not an active participant, just because they have strong opinions on a topic is not sufficient reason to call these contributors "trolls and armchair opinionators" as the OP stated.
I have to agree to this because I feel that there is a serious disdain for protesters in this country. Many people I know seem to feel that hurting or arresting peaceful protesters is okay.

The amount of apathy in this country is staggering.
iOS 7 has a blacklist for calls & texts, not a whitelist though (unless you can do this with Do Not Disturb, not sure)
> Whether 'Secret Chats' are truly client side encrypted is another question

I don't think anybody has suggested that they aren't client side encrypted, only that the way in which the encryption is used renders it ineffective.
Internet Marketing Center
A open destination travel map with more accurate pricing
Anti-aging: Rejuvenation of mitochondria cellular communication
Having studied drawing and painting in the last few years, composition is one of these things that I just didn't get. Then it suddenly clicked, mostly by switching to photography to experiment quickly with framing (crop it in photoshop), interesting leading lines and such.

It now feels totally natural, but the road to it was totally obscure for me until I just started taking tons of pictures. Interestingly, I now usually focus on composition / shape / focal points "consciously", planning it out, doing designs, while the more "technical" side of painting (mixing colors, brushstrokes, dark/light) is totally muscle memory.

I have made a lot of music, until it felt "part of myself", then tried out painting/drawing, which is now an integral part of my life and way of seeing the world. But my primary background and ultimately my "self-identity" is software. It is funny how art is pretty much the opposite in terms of process: I will consciously and "technically" work on the part that will affect the viewer/listener the most (composition, buildups/breakdowns in music, tension/relaxation, color/shape/form), and once a good "solution" is found the technical part of it kind of solves itself.

In software, I prefer working on system level things, threading designs, database / scaling, embedded systems. The architectural part of the system is very intuitive, I usually have an idea pop up in my head or while showering. They are often wrong, but I take care of that by doing a lot of miniature systems in their own branches and discard them when not good. However, the technical side of implementing that idea of a design is extremely demanding, and needs iterations and thinking and just plain focused work.
Yeah, does anybody think this will actually stop, even if the courts demand it?
I second this, if not this specific solution then at least the goal of being proactive about the problem. There are so many talented people that want to make cool stuff and improve the world around them in their own way, but the overall negativity here has become so overwhelming it's crazy. Especially in Show HN threads (the myth.io thread the other day was embarassing). It teaches creators and innovators that they're not welcome here. That we reject them and their hard work. Sooner or later there won't be any of them left. It'll just be a bunch of idiots clamoring over each other to determine who's the smartest.

It's like the old expression, Those who can, do. Those who can't just sit around and bitch about those who can

Edit: Great, flagged off the front page. Way to go guys!
My ConEd bill is broken up into delivery and generation charges. I think it is fair for you to be able to sell power back to the grid, but either at the whole sale generation cost; or alternatively the generation cost less the delivery cost. Allowing you to sell it wholesale like any other power producer seems like it could be a reasonable compromise. That amount might fluctuate too much to be something understandable or usable. If the distribution cost is deducted from the amount you net meter, that would also compensate the utility for having to build the infrastructure to handle the reverse power flow. This second alternative, of course, has the disadvantage that the power is "delivered" twice (and thus charged twice).
money is cheap, show me the code.

even if people are being unfair with these criticisms, what telegram should focus on is to make their designs more secure, and ignore all this publicity. if they truly believe in the "importance of keeping the [system] open", then they should understand that all this publicity (good or bad) is insignificant - especially as they say they have rich guys backing them, so they're not relying on public opinion influencing investors.

it's very easy to make statements like "Together we can make Telegram unbreakable"; harder to turn this into a reality. the current round of attention is a red herring, both for Telegram and for us commenters. let's give them a year and see what it's like after that.
I have a web dev (and other stuff) blog. Focused on open source technologies.

www.lauradhamilton.com
Of all groups you'd hope to be able to detect and protect their staff against radiation, wouldn't the US Navy be fairly near the top of the list?

Much as TEPCO may be at fault over the actual reactor the sailors being exposed unnecessarily sounds more like Naval negligence.
I suppose if you brushed and flossed everyday like you should, you would still have to had the filling done originally? No? I suppose then that you knew you should brush and decided not to (lazy), or you were to young to know better (uneducated). Is this a false dichotomy?

Now that's out of the way.

There are many free dental clinics that would examine the tooth and pull or fill if needed. Sure, you may have to wait in line a few hours. There are also usually public health clinics that charge very little.

What city, state are you in? I'm in NC and know more about stuff in the state, but could certainly find clinics, public health, etc in other states.
You shouldn't listen to Hacker News because I might write a 1000 word comment about message authentication codes and RSA padding? Ok.
And I'll also add that this is not an optimization, it's guaranteed by the standard.
I would not pay for it. Can learn more by doing research myself.

Also, it costs a bunch of money to acquire business customers. Tough to recoup that on $40/month if you spend $30/month doing the research work.
In what world is it "fair" for you to alter the behavior of what I expect to happen just because some people find it "easy" to fix the way you broke it?
In context, the graph is intended to show the dominance of REST over time and not how it's losing out to any of the other items.
People too often forget about graph databases when talking about NoSQL solutions. Graph databases offer an interesting and elegant alternative to relational databases and I could definitely see a startup decide to use this kind of technology.

As far as I know, most graph databases support transactions and offer great scalability. Such databases are also schema-less and can be queried with Gremlin, a powerful graph traversal language (see www.tinkerpop.com).

With respect to scalability and transactions, Titan (http://thinkaurelius.com/) looks very promising: it supports various backends for storage (Cassandra, HBase, etc.) and indexing (currently Elastic Search and Lucene). Graph analytics can be done via Faunus (http://thinkaurelius.github.io/faunus/), backed by Hadoop.

There are other vendors out there (Neo4J, OrientDB, etc.) which offer interesting solutions worth looking at - I'm just a bit less familiar with them.

The major downside I see with graph databases is that most of them are fairly recent and their ecosystem is tiny (though growing). Should a startup venture on such young technologies, or stick to mature and battle-tested solutions (ie. relational databases)?

Could startups use this kind of graph "NoSQL" databases? I don't see why not. If your startup is some kind of social network, graph databases are certainly an option worth considering. If I were to create a startup, I'd hardly use a document database like MongoDB but I will really consider using a graph database. In the end, it's all about having the right tool in hand, and knowing how to assert what is "right" for you.
Relevant xkcd: http://xkcd.com/833/
You're joking right? Also, telling TextSecure to go make their protocol better... Have you even seen their new ratchet? It's awesome. I think you have no idea what you're talking about... I'm sick of attempting to show people like the OP why they're wrong, why Telegram is currently dangerous to rely on for anything secure, and why TextSecure isn't. Also, the smug crap at the end, real classy. Sigh.
"Go make your own stuff and don’t listen to HN or any other skeptical community."

This is fine in art, but it runs into problems when you start doing engineering and it makes absolutely no sense whatsoever in cryptography.
Out of related curiosity, weren't there efforts to ban Geiger counters in the US post-9/11? Were any laws enacted?
Could you expand on what prompted you to install those? I had thought the blue light itself was the issue. I don't know what daylight spectrum bulbs are like, but I'm assuming they emit more blue light.

So that's an interesting result.
This entire article is such a gigantic and painful straw man that I'm not sure if the people behind Telegram had any influence behind it.
Where's your math PhD???? Posting about why there are huge inherent issues in someone's brand new protocol and having a wealth of experience in the crypto world means nothing... Apparently?
Negligence triumphed over excellence this time...
The NCAA Is Even More Evil Than You Think
Today, there's another thread on the front page [1] related to the Google Fiber "no servers" clause.

So, be it information or energy I can't help but notice the similarities there. Our networks were essentially designed, decades ago, for mass production and consumption, I have no doubt we'll end with more distributed energy production and storage means similar to what happens with the rise of fast, symmetric Internet connections but in the meantime we'll see a lot of these stories while the evolution finds its way.

Regarding the electricity consumption, we have access to the French realtime data online [2], I don't know if there's the equivalent in the U.S., I'll be curious to see the data for Hawaii. It's interesting to note how the daily consumption patterns differs between summer and winter (we have a lot of electric heating in the winter and little, albeit increasing, AC in the summer). Obviously there's a limit to how much PV you can plug on the grid without proper storage but it doesn't seem that's already a problem.

[1] https://news.ycombinator.com/item?id=6949326
[2] http://www.rte-france.com/fr/developpement-durable/eco2mix/c...
If that's the case, then his paragraph after the graph is not backed up with any data.

Instead, to me, it seems like he's trying to justify that statement with a poor microsoft office graph.
Ageing reversed as scientists discover how to turn clock back in mammals
It's available - Do Not Disturb + Favorites

For me, I'd use it for recording calls. I'm also interested in what the mod community comes up with - there's usually a lot of innovation in the JB space that Apple cribs into big iOS updates.
Don't do anything just because it makes you look more legit.

But after 4-5 employees it becomes cheaper to rent an office than use coworking space.

I also think that once you start hiring non founders it's tough to ask them to work out of an apartment, especially if they have an in demand skillset like software engineering.
As the reactors have now dumped thousands of tons of nuclear runoff water into the ocean which then drifts to the North American West Coast, is this not something we should be much more aware of and acting to protect against?

Is the US West Coast at danger of increased incidence rates of radiation related illness?
So this thread disappeared from the top and all pages besides Newest.

But I see post on page 3 from 3 hours ago with 3 upvotes so this should be somewhere on 1-2nd page.

HN mods don't like criticism?
>Is the US West Coast at danger of increased incidence rates of radiation related illness?

No.
The majority of times, if not the total, that I encounter this poor design is when I'm in the process of pasting a quote into a tweet while sharing the link with others. Too clever by half.
Good points, but I'm sorry to point out that buying the iPhone itself supports the war on general purpose computing. Jailbreaking might get you out of this set of digital handcuffs, but what about the next one, or the one after that?
So in sum:

- Telegram said they were super-secure

- A bunch of skeptics on HN posted long comments saying why Telegram wasn't actually secure

- A few days later, someone broke Telegram

- Therefore, don't listen to HN?
Go Advent Day 22 - A Journey Into NSQ
The answer is no, it is not even close to something we should be worried about.
Yeah. It does say that

> By the time the Reagan realized it was contaminated and tried to shift location, the radioactive plume had spread too far to be quickly outrun.
>
> “We have a multimillion-dollar radiation-detection system, but . . . it takes time to be set up and activated,” Cooper said.

But... if you're on the coast helping deal with the tsunami damage like them and then a nuclear disaster starts, setting it up & activating it seems like a priority task.
Is that because it's going to be diluted to unnoticeable levels even near the origin?