skysight-inc/HackerNews huggingface dataset:
I don't think a book could ever compare to 20 hours of classroom video when you've got the chance to have such a great professor. The pace, repititions, emphasis, hands gesture, hesitations, pauses, are also helping you understand and digest the course ( as with every human communication). Frankly what Mr susskind has done with this stanford program is truely the work of a great man.
What?! Nonono, that's not how checks and balances work.

Checks and balances prevent abuses by other branches, but it's not like a courtroom, it's still possible for everyone to get along and be nice and open with each other. Indeed, that's expected to be the typical behavior except in unusual circumstances.
How to control what is copy-pasted to and from the clipboard in the browser
What the one about trust fund hippies labeling nerds with the name of the group that bullied them at school .

Or the snarky remark about the IWW comrade :-)
The app was far from being a "secure" app. And going by how far they've to promote it as a "secure" app, of course there should be an equal amount of response for why it's not secure (since it isn't!). This is not just about some "guys making an app and being taken down for it". This is serious stuff. They're claiming their security is one of the best in the world, when it couldn't be farther from the truth. Why would you want such an app to be popular and make people think it's actually secure, when it's not?
If you've got an ipad, i recommend using itunes univeristy to download all the courses. I've spent a whole summer watching those under a tree. Most memorable online course experience you can dream of.
For multiple files: TABS2Spaces (http://bluefive.pair.com/tabs2spaces.htm), which is a GUI application, and tabspace (http://stefanstools.sourceforge.net/tabspace.html), which is a CLI one. The latter also removes trailing whitespace (though it can be told not to via the /leaveeol parameter).
Reaching noether's theorem really was the climax of this course. Such a great memory.
I agree with the author that the Single Responsibility Principle is being violated with all these annotations, but I disagree that the resolution is to move the annotations into hbm.xml files (or similar).

I would, in the limited example given, prefer to have a 'storage' POJO (annotated with the hibernate annotations), and an 'API' POJO (annotated with the JSON and XML perhaps).
Then it seems to make sense that if you're changing the underlying storage you would update the storage POJO.

I very rarely want to return the exact object as stored in my database to the API layer - there's business logic and the like that needs to be applied, and transforming the object into something the next layer requires means you can generally implement tighter interfaces.
I need some help understanding this.

So, at my job the way I install iOS apps onto phones that are not at the AppStore is that the developers give me the .ipa file and I do:

ideviceinstaller -i /path/to/ipafile

(You can get this prog by doing "brew install ideviceinstaller", takes awhile)

Is there some reason the bitcoin devs can't upload the ipa somewhere and have everyone do that?

EDIT: Ah yes, joshstrange & jreed91 are correct. the iOS devices I use are all registered to apple's dev portal and the apps are signed.
Completely disagree. It was just a week or two before Snowden came out that New York Times was praising Skype for how "secure" it is, even against government snooping. The poor souls thought Skype was still P2P, when that stopped being true many years before. The NYT journalists were also probably using Skype to talk to their sources, thinking they are secure. That's why it's so important to have such reviews of these apps - especially if they're a more "mainstream app", and there's a potential for hundreds of millions of people to use it. If we can get hundreds of millions of people to use end-to-end encrypted communication, why not do it properly, and give them half-baked secure apps to use instead?

Also all "secure apps" that aren't fully open source should be considered insecure by default. No compromises. Whatsapp, Snapchat, Hangouts, Skype, they're all insecure and you can't rely on them for keeping your communications private.
Yes, it's restored: http://www.freebsd.org/news/2012-compromise.html
I like option 3. Why is it a bad outcome for the average electricity user? As the demand on the grid reduces the prices should fall down for those using the grid. In the very least, they shouldn't be affected.
I can't think of a compelling reason to jailbreak my iPhone in 2013, and I suspect that's true for a lot more people than it was in the past.
I read the post. It's a bad post, and it could be a precursor to a toxic account. It's got the tone of a bad attempt at trolling. (It's at least clear the poster is either a bad troll or can't apply a modicum of critical thinking of their own.) HN has other information it can take into account when hell-banning somebody, like IP addresses, too. Go ahead and try making new accounts and see if you get hell-banned. Set them up from cafes and the like if you're worried about it being correlated with your IP address (and thereby treated as less likely to be a bad account). I've done this quite a few times recently and those accounts making one or two comments have never gotten hell-banned.
Hopefully F.lux works still. That was the worst thing about using a new, unjailbroken iPhone and iPad. Especially now that iOS 7 has a lot of white UI.
Seems a little.... arbitrary....?

Don't people who run bug bounties publish their reward structure beforehand?
Why most likely? It's just as possible that the social problems will impede our ability to develop or introduce technology that makes society better.
Many people talk about the "T" employee - the person who acquires deep knowledge in one area but then acquires skills and experience very broadly but at a much more shallow level. And if it is a serif font - you have a couple other areas where you also develop some depth.

A second approach might be more like an "H". You develop two strong specialties, either of which on their own are valuable. But then you figure out the cross-disciplinary bridge that ties them together and makes you more productive and valuable than either would by themselves.
Yes, they did. This was not the goal of the bounty, but was still a serious issue. They couldn't give away the prize for the contest and instead decided on a still quite generous $100,000.

http://telegram.org/crypto_contest
Jailbreaking now, we'll see. Flux is the one thing I want to work more than anything too.
Other people claimed that the Telegram team might find that bug to be outside of the scope of their bounty contest, so $100k is better than nothing (and to be frank I'm quite surprised they were _that_ generous).

But you're right - they should have a clear reward structure.
You're welcome "try" crypto, like everybody else is. Just don't go market your product as "the most secure" encryption ever when you don't even bother to put it to the test beforehand and get it reviewed by actual experts.

I could go and try to play around with real time systems for flying planes, it still wouldn't make sense for me to sell you the "safest" plane in the world without going through the proper steps to get such system certified beforehand.
I have been waiting for this, thank you.
Sure - don't assign immorality to individuals. However you have to assign it to something - so what do you assign it to?
I thought a lot of people pointed out ways to attack the security protocol if they had physical server access.
I'm guessing it has to be signed to run on the device. But that's my uneducated guess.
This was not the goal of the bounty, but was still a serious issue.

To be clear, this bug was enough to compromise the security of every Telegram secret chat session. I can't think of a more serious issue.
I am just a student but do interview questions come without any concrete problem to solve? Or are they really like "Which data structure would you use for repetitive look-ups?", "Implement FizzBuzz" and so on instead of something like "You need to look up a words in a English dictionary for a spelling program, how would you solve it?".
The Centos part is the control layer that runs on AWS that people talk about mostly. The BSD part is the actual video streaming.
I have several to do it.

The one that pisses me off the most is not having "Lockinfo".

Another one is to be able to share your internet with a PC without begging to your provider.

And the list goes on. (facetime on 3G...)
Well, I don't know the dev perspective on this but most things do not readily have .ipas available. For example f.lux is an application I use all the time on my Mac. But I haven't been able to get it into my phone for a while. Couldn't find a .ipa.

Maybe developers want to be able to charge for their apps at some point in the future through the Cydia store ? Just 'cause you can't get your app into the app store doesn't mean you shouldn't make money off it if people love it :) (just speculating, maybe that's not the reason..)
There is no possible argument to make. There are a million - probably more - highly available RDBMS systems all over the world handling real money and real goods and services, 24/7. You can argue if you wish that tables are not a good way to store particular data structures, fine. But the claim that RDBMSs are unreliable is just ludicrous and had been for 30 years.
IIRC you have to have the phone in question registered as a developer phone to do that. There are sites that will add your phone to their dev account for ~$10 (vs the $100/yr dev program) but it's just a barrier to entry that's a little too high for the average person. Whereas 5 minutes with a one click jailbreak tool + Cydia can make the process much easier and you get app updates (it's been a while since I did iOS work and as I was leaving the scene things like test flight were making it even easier to distribute dev/test/beta copies of an app and even offer a way to update them so my last comment might be out of date).
Why Good Programming Projects Go Bad
With this bug people who run server have access to your entire chat.

(Of course they won't formulate it that way in the post)
Good for Telegram. I haven't downloaded and installed their App yet, but I applaud their effort at putting out a secure chat app that everyone can use.

I've been using TextSecure for a while (as everyone on HN ruthlessly suggests) but guess how many encrypted texts I've sent? 0. That's because they have no iOS app and very few Android users.

There are two problems when it comes to creating a good, secure messaging app: strong, proven security and popularity! Hopefully Telegram either solves both or forces TextSecure to solve the latter.
can you help me to hack uberstrike on facebook but i give you the webside (viphackscraked.org)
This is actually really generous considering it didn't meet the terms of the contest.

They have a long way to go before anyone here trusts them but perhaps we could be more positive and constructive?
Are custom software keyboards officially
available yet? This would be the first thing I would miss.
If you visit it in Chinese locale, It shows evasi0n7 includes an app "Taichi Assistant" for install APP, tweak. A replacement for cydia?
A custom keyboard is not something I find compelling.
Those things are already possible without jailbreaking.
lockscreen info is great, I can't remember the name of the lockscreen but it was cheap and provided great info.

tweaks for 3g were also great.
How to Untethered Jailbreak iOS 7.0.4
Let's say someone hacks a DNS server and adds the namecoin sig entry. They don't get it into root servers, but there's a population of namecoin users who see it. Hacker then issues a matching namecoin transaction registering that domain.

So now one population of namecoin nodes sees the hacked entry, accepts the transaction, and puts it in a block. Another population doesn't see it and rejects the transaction. The blockchain forks.

You might get by if the hacked DNS is seen by a minority of users. Then the chain without the disputed transaction will win anyway and all is well.

But suppose most DNS nodes have the hacked entry? Then the minority will refuse to accept the majority chain, since they can't validate it, and the fork persists. If that seems implausible, imagine a hacker watching for a new DNS namecoin entry, and making his hacked DNS server immediately remove it.

A few things would help a bit:

- Only accept namecoin registrations when the matching DNS entry is old enough to have propagated everywhere

- If the longest blockchain has old blocks that don't validate against DNS, keep checking. Hopefully the errant DNS servers will get fixed soon and that'll resolve the fork.

- If the disputed block gets old enough, just go ahead and accept it if it's in the longest chain. You're just trying to minimize squatting, and letting some skilled squatters through isn't the worst disaster.

But it's still kind of a mess because namecoin isn't just a naming system, it's also a currency. For as long as the fork persists, people can doublespend their coins. It'll be resolved but in the meantime maybe a merchant has shipped goods. You're essentially creating money that depends on the integrity of DNS for security.
I question whether Telegram is actually delighted with how this unfolded. I also think it's disingenuous to call the discovered issue a potential vulnerability. Either it is a vulnerability or it is not.
I just installed it and it doesn't work properly. Here's to hoping it gets updated quickly.

It may be an issue with MobileSubstrate, as Saurik just pointed out that the evasi0n team gave him no lead on the jailbreak.
The Future of Society: Why a Lot of Big Organisations Will Cease to Exist
Actually, the property is just a value of a type having a name. The property has the responsibility to hold and provide access to its value. It's definitely not the properties responsibility to know how it is being stored in a database, this is a so called 'mapping'. If you'd change the table name, you should not have to change the property, but the mapping. Another important aspect is readability.
interesting! so are you a T employee or H?
Examples of mobile native ad formats
Do you live or work in a building that has windows on the ground floor?

Who made your doors? What specification were your doors built to? Who made your door locks? What specification were they built to? Who has authority to cut keys to those locks? How do you know?

If you truly are as worried by governments as you claim why are you not fortifying your home?
Bravo Son! you have earned respect for your this deed. Appreciated.

On a side note, I am still not sure, if i will ever use this app. This is primarily because, I act on the internet in the same fashion as i do in real life. I won't do anything online, what I can't do in real life. Hence I don't and perhaps would never need an app like this.

As for sending someone 'secret' message, I always whisper that in the ears. It's an old fashioned trick but has proven to be most secured.
Sorry if I have not been clear, I am non-native speaker too.
IOS 7 jailbreak is Out
The best part was when he copied it from your quoting of his message, but removed the "not" that came before it
Mark Cavendish primed to regain sprint supremacy in 2014
Everything's blue for you too?

Removing F.lux didn't do anything so I thought it was Mobile Substrate, but removing that didn't do anything until I rebooted the device so I can't be sure.

Other apps depending on Mobile Substrate work OK so far, so don't let it turn you off trying things out.
"Blog titles should stop using should."
According to the map here, they do have some Indian cities in blue.
I applaud their effort at putting out a secure chat app that everyone can use.

They aren't making a reasonable effort to put out a secure chat app. If they were, then they would use some of that $200k to hire a company like Matasano to fly out and audit their architecture for flaws. Matasano probably would've caught this bug, because it was a pretty basic mistake.
FIPS 140-2 isn't the only testing done on OpenSSL. You'd think some unit tests would be in place at least.
The hotspot function is carrier-dependent.
perhaps we could be more positive and constructive?

You find DanBC's comment interesting. It explains why there's been a general tone of negativity towards Telegram's security product. https://news.ycombinator.com/item?id=6949842
Given its geography why is Hawaii not able to use geothermal like Iceland does?
These latest news have convinced me that Telegram currently has the highest potential to be the right IM tool at my current workplace. I have one question that doesn't seem to be covered anywhere (FAQ, Google): What about Offline messages? I'd like to be able to send encrypted messages even when people are offline - on smartphones it could make use of push notifications, on the Desktop it would just wait until the client goes online again. Skype doesn't work reliably for this scenario, as in both clients (for the sender even the same client on the same device) need to be online for the message to be sent. The last implementation that worked reliably seemed to be MSN, which is dead now. How does Telegram behave?
These latest news have convinced me that Telegram currently has the highest potential to be the right IM tool at my current workplace.

Why is that? This latest revelation should give less faith in Telegram, not more.
This is what happens when people try to add too much "magic." It's a side effect of many things, the most obvious being the lack of the language support for expressing these types of things. It is the same sort of issue that plagued C++ with the ability to override operators while limiting which operators could be overridden. This kind of annotation hell is indicative of the inflexible and unextensible nature of Java.

By the way, I'm not hating on JVM languages. Both Scala and Clojure have a means to handle this issue with grace and without sacrificing the readability of the code.
While it is very generous, I doubt they would give a sum like that if it wasn't for the publicity. I'm sure news like this can help their image quite a lot in their target audience (security-aware computer people).
A day or two before he posted the list, he had to go through a run-around with some dude who apparently had copied a whole bunch of his (10 years+) blog content to their own, no attribution, nothing. I believe he deals with this type of thing frequently. I also think this tools list is a popular item for such "re-blogging,"

In this particular case, it appeared the offender simply didn't understand proper "nettiquette" and once pointed out, promptly removed the content (although he appears to still have a whole bunch of OTHER people's stuff copied up there, so who knows?).
It depends. In many cases it's impossible to give sufficient context to provide a real-world problem that will let the candidate show their understanding of algorithms and data structures. Sometimes it's necessary to ask these sorts of questions in isolation, without a concrete problem. Not least, sometimes a real world problem is better solved in a different way anyway, which subverts the intent.

Understand, most real world programming jobs don't need in-depth knowledge of algorithms and data structures. Most real world programming jobs are implementing the algorithms devised by someone else, using data structures that are "obviously" the right structure for the job. When companies are asking these sorts of questions they usually have a somewhat inflated view of their own importance. Either that, or those interviewing have no real idea about the work done by their programmers.

The very best interviewers, when using these questions, don't worry too much about the detail of the solution, but in the discussion of the pros, cons, benefits, drawbacks, and possible development of the code in context. Even with FizzBuzz there is much to be explored once a coder has written it.
I didn't write the algorithm, and neither did they, that would have been another bad move on their part. They used public, known algorithms and did it wrong.

They also didn't put 200k on the table for anyone that could break it. They put 200k on the table for anyone that could break it in a very specific way that proves nothing.

They used a combo of known bad and unproven stuff in weird ways and then claimed it was the best thing ever, which is just crazy.
I don't mean to sound snide, but judging from your comment history on Telegram related posts, are you really the right person to determine what "reasonable effort" means in this context? Every single post you make is biased negatively towards Telegram.

What I applaud is their effort here and I hope it continues and moves in the right direction. This announcement makes it seem like they are in fact moving in the right direction.
For that matter, Ada used parentheses for array offset and for function calls, on the grounds that both map between values. Others, of course, say that this was really because DOD owned so many old keyboards without square braces.
Vulnerability to passive attacks is worse than vulnerability to active attacks. I'm not downplaying the severity of a MITM vulnerability, but certainly there could exist more serious issues.
This announcement makes it seem like they are in fact moving in the right direction.

Why? Because they're literally paying people to like their product? This developer who found the bug wasn't even trying to get any money. He was, by his own admission, a cryptography newbie who happened to be looking over their protocol and found a serious bug. Now they're throwing money at him. How is that in any way a good thing?
Captivating. https://www.google.co.uk/maps/preview#!data=!1m8!1m3!1d3!2d-...

https://www.google.co.uk/maps/preview#!data=!1m8!1m3!1d3!2d-...
There is little use in being able to integrate functions, or to solve trigonometric equations, or to rearrange equations. However, being able to do these sorts of things without thinking too hard then releases the mind to think about other things with freedom.

Similarly, effortless recall of the pros and cons of different algorithms and data-structures means that you don't have to think twice about many of the things that should be purely mechanical. It then lets you recognize things when they show up in disguise, and to concentrate on the higher level work, where the real work begins.
Yeah. In essence, it made their nominally end-to-end encrypted secret chat feature no more secure than simply giving the Telegram server operators a plaintext copy of every message you sent and trusting them not to log, read or tamper with it.

Worse, it's the kind of flaw you'd expect someone subtly sabotaging the protocol to create. It's a small, superficially plausible modification that turns an apparently secure scheme into something completely broken. Yet if they'd made that modification in the obvious way - by combining the nonce and Diffie-Hellman result with a secure hash function - it wouldn't have caused the problem; for the vulnerability to exist the nonce has to be handled in a very particular way.
What I don't understand is: where do they get the money from if their intention is to be "free forever"? Are they funded by a non-profit incubator? Why is it that a "new" app spends relatively much money on white-hat hacking bonuses? What do they get out of this other than a deemed secure application?
In regards to sharing, I believe your provider can detect this and charge you more.
The developer who found the potential weakness has earned a reward of $100,000. We have contacted him to find out how he would like to collect his prize.

This is great news. Contrast this with other security contests were finding out-of-scope security flaws weren't rewarded.

People in this thread: Good for Telegram, seems arbitrary, disingenuous, just for publicity.

Short of them being in a conspiracy with the researchers, I can't imagine how this is not good news for everyone. Cool it with the hate, people.