skysight-inc/HackerNews huggingface dataset:
I use it across group and individual messages on multiple devices (iPhone, iPad, Mac), it seems to work fine.

Occasionally there is a hiccup where a conversation thread is not immediately synced with the other devices, but that seems to be happening less and less.
> There's nothing like it.

Smalltalk. I once crashed my Squeak environment by making "true := false".
Why do you say that? Is it because 100-qubits roughly corresponds to attacking 100-bit keys? I am not sure if that intuition is correct. AFAIK, quantum computing is supposed to help with mathematical cryptanalysis like breaking Discrete Log and Factoring. I do not think it will have any effect on attacking symmetric primitives such as AES and SHA.
7 advices to launch a successful app
This is the sort of code-breaking the NSA should be doing. If breaking encryption algorithms is possible with quantum computers, we should figure out how to do it before any other nation-state or hacker does. This discovery would hopefully push forward encryption standards toward less breakable encryption.

What we should not do is use those discoveries to illegally spy, but rather to improve our security. Unfortunately, the NSA has lost credibility in contributing to encryption standards, so how that would happen is unclear.

Breaking encryption with new technology is entirely different than subverting encryption technologies intentionally or using their asymmetrical powers to tap into communication systems. Any attacks that can be discovered will hopefully first be discovered by relatively good actors (US intelligence) rather than relatively bad ones (Chinese intelligence.)
Finally got some time to secure this and voting is accurate now!
That was sort of my point
Leaked NSA docs show hardware implants can blast radiation at humans
I think the big takeaway here is a lot of companies don't care, these are the rules and you accept them or not. Most people accept them - they feel like they have to. I've done it quite a few times.

But what we really need is more self-realization like this at the top. This is where the change for these sorts of policies can happen. On one hand, it's really sad that we're so work obsessed here - money is more important than people so much of the time. But, on the other hand, there is still room and freedom to make your own way and write your own rules.

I think about this topic a lot, especially because I am fighting burnout myself. I didn't do any work for most of xmas break and when I went back this week I kept thinking "I need another few months off". I even had to push for the two days after xmas off - there was a little push back from the ceo since we're a small 4 person company. But, I'm a little older than everyone and I was thinking "fuck it, I need to chill".

Ideally, my dream job is to just work for myself (I'm sure that's everyone else's too). Sure, there are tradeoffs with that, but there's something about working when you want, where you want. I think there can definitely be a balance between being on vacation a lot and outsourcing all the non-important work to other people who will do it. Time Ferris is a great read for this type of living and it exemplifies the work to live not live to work thing (or work as little as possible and really live).

I did a vacation a few years ago where my wife and mother in-law went to Spain. It was awesome, my first time there, but I was 'pressured' by work to keep crankin on our app. It was such bullshit and I was really pissed about that pressure - vacation was not vacation. I told myself: 1) I'd never work for someone else on vaca again - ever, and 2) I'd never make anyone else do that. Needless to say after a few days I was like, 'fuck this, this is the stupidest thing in the world. I'm in one of the best food and historical places in the world and the guys at home want me to keep coding. Bullshit.'

I think there's a point where you either keep going with everyone else's rules or you make your own. Get busy livin or get busy dyin. I'm at the point in my life where I'm getting to the last of dyin for someone else's deal and starting to live for my own. It's not impossible, just take discipline and focus. Otherwise, me, and everyone else is working under someone else's thumb, by their rules, working on vacation. Dumb.
So you're saying that ESR will do for Emacs what he did for...fetchmail.
This is my #1 feature request for Shopify. I'm still a VERY VERY VERY happy customer, but fully realized multi-language support would be a life changing feature.
I think hashing is key here. There are 10^10 possible phone numbers (without country code), so approx 34 bits of information to encode the entire phone number space.

If your API accepts a 128-bit hash (pick your favorite) of a phone number and returns the user's username, and is rate-limited, it would be infeasible to brute force the hashed phone number space to produce the data dump. Then, rate limit by account (rather than IP address) and flag accounts accessing this API too frequently or in different patterns than your client uses.
Which company was it? They sound like they deserve the bad publicity. You might save someone else from ending up there too...
I only had time to skim it, so you might be right. Either way, I think it is only safe to operate with the assumption that 1024bit keys are well within the grasp of projects with modest funding.
The closest we have to that is our Starter plan. If you factor in the two-week trial, you get 6 weeks to find market validation for your idea at a cost of only $14. It's a pretty reasonable expense.
check out batman begins and The Chronicles of Riddick you'll see that Bruce's father is a Furyan
>callous attitude to security and pitiful response

How would you have designed this functionality in a way that isn't vulnerable to the same attack?

Rate-limiting can slow you down, but you could run the script for months if you wanted. Fundamentally Snapchat is using user-supplied data, and users can lie.

Maybe we can check if they are lying by querying a database of people who have verified that they know each other? Oh wait, that's Facebook. HN would be boycotting on principle and screaming about violation of privacy.
wouldn't take an offer from a place where sysadmins wouldn't read a man page to verify a candidate's answer
Tangential, but: we only have "find friends" by email, not phone, but we use a one-way hash of the email for the request so that our servers don't get sent emails that we don't already have, which helps a little though not with the SnapChat issue.
Feeling very humbled and honored by this...
You ask that as if it wasn't what I said.
How to become a great kisser
It's something we intend to do, but no firm ETA as of yet.
"which simply does not exist in the law"

Rather sure it does, some crimes like credit card fraud are separate from unauthorized access of the computer systems the information came from. Exploiting the data is not the same as exploiting to access the data.

Lawyers are deployed to push their client's POV, wins or losses may "shift the line" regarding how written laws are upheld in court. Which in my opinion is used by some as a chance to defray from responsibility to properly administer public facing systems.
Neat, but I don't see a way to specify the cluster layout of services. For instance, setting up a cluster of two "web" and two "redis" on two different servers. It would be even nicer if it was a service that watched the servers, and actively deployed / restarted containers specified in the yml files.
Nobody in the real world cares about open source projects from my personal experience. I realize I won't get a degree, just wondering if people have ever been hired after spending time on something like this.
You're assuming that the hashing algo used in the app is indecipherable by an attacker - if the hashing algo used is known, then the attacker does the same as done in this SnapChat attack, except just hashing the number first.
I tried to send a snap ( via http://kittenbot.gustav.tv/ ) to all the leaked users. Turns out the app crashes a lot after around 10k friends. :D
It has to dry eventually, glitter falls off.
I am taking you seriously.

You can hold yourself to some absolute standard as a programmer or you can choose a sliding scale, and nobody can fault you for it, yet. But in the end, what really matters is what really matters, and I don't see any reason to recommend waiting.
Use WebSockets and Python for web-based system monitoring
The US has a ridiculously low minimum for PTO and sick days.

Israel has 12pto + 18 sick days iirc and I wouldn't work for an employer that gives so few days off.
For the curious, I did some digging and found the following:

Blacktie.co was created by Carlos Alvares (http://www.alvarez.is/). He's a designer who has a number of paid themes on https://wrapbootstrap.com/user/Basicoh. Blacktie appears to be his own site where he gives away some free themes in exchange for your email address.
This is grossly misleading - it outsold the iPhone on the one operator that carries it. Not in the entire Finnish market.
I wonder if NSA would find that data useful. You know, to profile netflix users.
Any chance you could be more specific as to what you feel is missing in the book?

Granted, "distributed systems" is a enormous topic that no book can cover fully, but I have tried to cover things like:

- key papers (Lamport; Fischer, Lynch and Patterson; Chandra and Toueg etc.)

- topics relevant to highly successful commercial systems (e.g. 2PC => *SQL systems, Paxos => GFS/Chubby, ZAB => Zookeeper, Dynamo => Riak/Voldemort/Cassandra)

- and recent topics such as CRDTs and the CALM theorem.

Having a sense of how time, consistency and fault tolerance have been explained and handled is (I think) a prerequisite to more advanced topics, but I'd be interested in hearing what parts you'd feel need improvement because some day (~ some years from now) - I will revise the book and it would be nice to have a solid list of issues to revise.
Not true; they prompt and clearly describe what they will do with your address book during onboarding. Can't find a screenshot of it now, and maybe it has changed since they first launched.
iCloud is usable on Windows: http://support.apple.com/kb/PH2605?viewlocale=en_US&locale=e...
Yep, the syncing devices is where the beach balling usually happens for me as well. Sometimes 5-10 seconds.

Also when updating the metadata on songs.
BOY CAN STRETCH OUT HIS SKIN OUT OF THE ORDINARY
That's a weird claim for people to make. $100K for an individual is pretty high compared to the rest of the country! Other commenters are suggesting that it is actually the upper bound for middle class.

I wonder if people are actually answering a different question: whether they personally feel middle class. Where you live will greatly affect this; there's a HUGE difference between $100K in SF vs Pittsburgh.
Now here is the problem: since Australia is "protecting" local producers and does not allow foreign grown bananas on the market Australians have to pay ridiculous prices for them, or wait until they rot and pay half the price, or just not have them at all.
You could probably approximate the sound by taking an ultrasound recording from a room that exists like this right now and slowing it down.
>The union pay scale that pays lousy old teachers much more than young good ones is politically untouchable.

I think that is greatly simplifying a complicated problem. There are many reasons a teacher cannot get paid more in a low income school. They may be limited by the local government entity (state or municipality) or the environment may be very difficult. It can become equally politically problematic to adjust the payscale for low income schools as it can to incentivize working there.

>For one thing, it doesn't incentivize universities to offer more affordable educations, since people like your friend become price-insensitive.

Everyone who gets a college education is price insensitive and it has everything to do with loans, but likely little to do with the public service incentive. As long as loans are available and assistance is not, universities (most of which are public) will not have incentive to offer affordable educations. It's a serious problem, but one that has more to do with a culture of "Get an education and get a great job, even if you major in philosophy" than with "Be a teacher and we'll give you a break for serving the public good."
Why a huge userbase built around profitable msg app Tencent poised 4 a big year
The Dymaxion car had three wheels, two at the front, with rear-wheel steering and the engine mounted at the back.

Imagine a car with the dynamic qualities of a Reliant Robin. Driven backwards.

Unsurprisingly, the car rolled over at the 1933 Chicago World's Fair, killing the driver and severely injuring two passengers.
Measuring snowfall with an android tablet and PHP
Just an FYI if you didn't know this, but Pandora will show you the same kind of information if you hover over the song (web) and pick "Why was this track selected?".

"Based on what you've told us so far, we're playing this track because it features electronica roots, house influences, danceable beats and vocal samples."
It's hard for me to get too worked up over this.

I mean, do phonebooks still exist? They used to list everyone's numbers and their names and addresses and then leave them on everyone's doorstep. This is just a (partial) phone number and username.

About the worst abuse I can think of is that you have someone's username from another service, and you can maybe find their phone number.

This seems mild compared to, say, Facebook allowing you to search by email and find a user's facebook profile.
In a car max lateral acceleration is typically 0.3g for safety and 0.2g for comfort I think (and usually road design are even more conservatory).
I think 0.5g lateral is way to high, especially if you can't look at the outside. People are gonna puke or going crazy from the discomfort. Probably < 0.1 might be a good target, maybe even < 0.05g
Maybe the capsule should rotate during turns so that most lateral translation is translated to vertical (like in most trains at nominal speed).
Set snooze times for notifications in OS X Mavericks
In fact, I consider the difference between IE 8 and 9 bigger than the difference between IE 6 and 8.
Not to be a jerk, but Occupy was ineffective. Let it RIP. It spent so much time being leaderless they couldn't decide what the hell they wanted.

We have to be more targeted about the changes we want. "We're pissed off about lots of stuff and you better fix it all or else!" isn't going to work.

At this point though, it's almost like the house is completely engulfed in flames. Which section do we put out first?

- The corrupt banking and money system? Our capitalist system is an immense ponzi scheme. Economists act like you can have infinite growth. Forever. They're delusional. At some point, you run out of people's back to crawl on top of and your system collapses.

- On top of that, we have a one-party system: the capitalist-imperialist party. It is impossible to get a non-capitalist-imperialist elected in the United States! We need a voting system overhaul, but good luck getting that when everyone is bickering about abortion and gay marriage. The system has successfully turned us against ourselves on issues that do not affect the overall outcome of the nation, leaving the people in charge to do whatever they feel like.

- We have a government agency with a bottomless pit of money spying on everybody, effectively cutting off our freedom of speech (who is going to speak out against the government when a giant eyeball hovering over them at all times?) At this point, there's no ring to cast into the volcano either. Even if the NSA's activities are ruled unconstitutional, who's going to stop them?

- Our country's leaders are spending millions to create more terrorists by bombing countries in the middle east with drones. You take out some kid's house and family with a drone, what do you expect is going to happen? They'll thank you for keeping the streets safe? No, they grow up to be a "terrorist."

I hate to be one of those "the sky is falling" nerds, but if it takes as much work and pressure as it has to get the people around you to barely even raise an eyebrow at what's going on, you know you're not headed for something good.
Do you have any recommendations of good places to look?

I tried to look up plans on my former insurer, but they just referred me to eHealthInsurance; after entering my zip code, eHealthInsurance came up with a handful of plans from a single insurer that were all on the exchange.
> zero reactions

Brave new world. The kids don't care about security, and they don't read their FB.
You should move to India then, with 30k salary you will be able to afford a couple of servants and a part-time cook. That will definitely feel like an upper-class living. Unfortunately, your 30k salary won't move with you to India.
> Also missing from the list... "Give us another cool new thing." Everything they did this year was just a minor upgrade.

But they produced two very big new things:

- Mac Pro, a completely re-imagined workstation with some extremely clever engineering and a push for future GPU computing using OpenCL

- iOS 7, a very big change to their most popular OS

You ask for a "cool new thing" but then you complain about a lot of minor, iterative issues ("Office on Mac still sucks", "Pages doesn't let you...", "Basic basic functionality...").
Adomic - Santa Monica (Los Angeles), CA

Adomic collects unique advertising intelligence for some of the biggest publishers and brands in the advertising world. We're a developer founded and run organization (both CEO and CTO are developers) with a stack that goes all the way from web crawlers to a big data processing architecture (Hive, EMR, S3) to middleware/API to frontend (HTML/CSS/Javascript.)

We're an active member of the Santa Monica startup scene and are 5 blocks from the beach. We don't skimp on hardware or tools and are strong advocates of giant monitors and comfy chairs. When we're not at work, we play sports, surf, go to trivia nights, and generally try to make the most of the sun and beach.

We're looking for an experienced fullstack developer that will work on projects up and down the stack. Everything that we do affects our customers, and we've got some awesome features planned. You'll get to help drive the architecture and implementation of these.

We work using the latest .Net technologies, however, if you’re a strong developer without a .Net background, we’d love the opportunity to show you what we do and why we think it’s great.

If you're interested in this full time position, please e-mail jobs at adomic.com. Cheers!
I think it's pretty amazing the way that certain technologies that might be considered bleeding edge by some, are being adopted more in the developing world out of practical needs. Even more so as the costs of maintaining aging copper/fibops grows, the less perceived incentive to move towards more modular and decentralized systems ("we invested all this money already") for the increasing burden of maintaining that would be placed upon on others in developed countries.

Though this makes me wonder, the routers are running some kind of openwrts firmware[0], it would be interesting if someone had the chance to unsquash/decompile it for backdoors because from a sigint perspective (especially in the horn of africa) being able to tap into these networks (like via uav recon ops) will probably be on the table.

Edit: Looks like they are funded by the New American Foundation[1] with Eric Schmidt as chairman, interesting…

[0] https://commotionwireless.net/download/routers

[1] https://en.wikipedia.org/wiki/New_America_Foundation#Funding
> Rate-limiting can slow you down, but you could run the script for months if you wanted. Fundamentally Snapchat is using user-supplied data, and users can lie.

You can make the same argument about employing exponential backoff on a login screen. It's still very effective deterrence.
EDIT: hey' where's the response I was responding to?

Obviously (obviously!) I don't use it for sex pix. Never trusted the "no screenshot possible" aspect, nor does my wife...

Anyhow, I dismissed it as useless for that exact same reason, but I have a bunch of friends that I send silly messages to and like I said, it works quite well if you use your own face as an emoticon.

We also like the paint-over the picture feature. It's easy to add odd picture annotations (stick figure skiers in the snow, cowboys and indians) and then send cartoons back and forth.

It also has practical uses, because you can save the picture before sending. The other day I was in the market for window shades -- I know, so very Burbistan -- so I took a shot of each window in my home, marked up every picture with the dimensions and saved it to my phone (my friends have no interest in 18 sets of window dimensions)

Best of all, all this nonsense doesn't take up any space on my phone.
I like to treat Dilbert and Office Space as slightly-fictionalized-for-the-sake-of-humor documentaries.
Bob Iger of Disney on Jack Doresy's appointment to board of directors and more
I was assuming they would port iokit as part of it...
Real Ghost Footage
That is one of the worst 'apologies' from I startup I've ever read.

There is none " We fucked up, sorry, we're fixing it". They speak of the leak as simple 'hack' like someone who was capable of finding all your friends using facebook and random luck.

I hope they fix this right, and be more apologetic the next time.
Bitcoin Is Good
Ahhhh.. Jolt Cola.. them were the days (until I was eating museli and 1/4 of a tooth came off :) heh. Good times. I've not seen Jolt in years - used to drink it in Ireland but haven't seen it in NZ.
Not a kid, nor are most of my friends (many are 29.99999999)
Post-quantum Cryptography
I take management blaming here to mean that this is a systemic problem that can can only be solved at an organisational level (rather than blaming a caste within that org).
Lessons learned tuning TCP and Nginx in EC2
Yes, that's what a friend told me. I forgot when writing that comment that updating windows is not like updating a GNU/Linux distribution, it is a time-consuming process and it is not free. This alone explains it pretty well.
Business Ideas for 2014
breaking up the input into multiple executions is feature #1 for xargs and has been present since PWB UNIX in 1977
> it still has that 30% market share

Yes, that is what I implied.
Coinpunk H4XX0RZ Bounty
In symmetric primitives, Grover is the useful quantum algorithm. It reduces unordered (read: brute-force) searches from 2^n to 2^(n/2) operations, and requires n qubits. This is a big deal one the 64-128 bit range: it makes very costly or impossible searches possible. This is one of the reasons it is sensible to want 256-bit symmetric ciphers today.

But when it comes to public-key crypto, you need more. Shor's algorithm (applicable to integer factorization, but also to discrete logarithms and some other schemes) originally needed 2n qubits to factor an n-bit number. Later improvements put this somewhere over n qubits for an n-bit number. So RSA-1024 would need at least a 1024-qubit machine. Elliptic curves need a small multiple (6, last I checked) of the bitsize of the prime modulus, so the same 1024-qubit machine might be able to break a 160-bit elliptic curve.
That's more than generous for someone who's launching a store as a full-time job. My use case is more "we produce some hobby stuff and would like to start selling a few products online as a side-side-project and see if it can grow". My market validation will take months or years, not weeks. This isn't a startup... :) I can see where that market isn't really attractive though.
Not exactly, you have to stretch pen register authority pretty far to extend it to the NSA's bulk programmatic uses.

http://www.lawfareblog.com/2013/11/problems-with-the-fiscs-n...
Bill Nye to Debate Creation Museum Founder
Sure, but that means you lose the revenue from being able to charge them more (obviously) and it also means the customer still knows that you weren't giving them your best price all along.