skysight-inc/HackerNews huggingface dataset:
True, but what if it's stolen while the laptop is turned on and the disk keys are in memory? I rarely shut my laptop off, and while I may be a little overly paranoid, it is certainly possible for a local attacker to gain memory bus access and read out disk encryption keys.

Multiple layers of security are always good!
And the last one would be...
8. Have no regrets in life, so you don't end up making a list of things you wish you did differently.
Nice! I can use this site in my Programming Languages class.

BTW, is the author around? Something's a bit amiss in the CSS (?). The right side of the "Feedback" tab doesn't line up with the right side of the box. Problem occurs in both Chrome & FF.
Or when Facebook trademarked the words face and book.
One word: shut the hell up.

Sorry. That's the end of my appreciation to your bullshit.

(and who the hell are you anyway...)
While we sometimes get laughed at for not running the latest and greatest, I am (once again) quite glad that I'm running RHEL 5 and 6 and their 2.6.18 and 2.6.32 kernels.
Primarily developers who are building mobile and client side applications. My thought is to eliminate the need for those to build a backend server for image processing (e.g. ImageMagick) and make it available via an API. The latency is completely removed from the equation if developers pass images directly to 6px for processing.
glad that some of it made sense, I really liked the site and obviously believe in the idea, interested to see where you guys will go with it!
What have you provided to corroborate your sentiment. (...) Do you have anything more than personal distaste to rebut the reasoning I've offered?

Nope, nothing else; just my irrational, silly reaction to being dismissed for living in Cambridge MA, of all places. Call me immature, but I think it's only human to want to express my distaste and not want to engage with the merits of your argument, sorry[1].

[1] If you want a thoughtful argument for why there might be regions other than SV brimming with talent, please see: http://paulgraham.com/cities.html
In the early Android versions (pre 1.0), the Android API actually included XMPP methods. I also remember reading debug messages containing "XMPP" in the function names related to GCM. These are just hints, and the protocol might have been changed since then, but the GCM uplink feature also indicates that it still at least relates to XMPP.
I didn't claim that it was or wasn't.
Thanks dude! Totally fair question & assumption BTW :-)
You're right in principle, but Zepto is a horrible recommendation because it gives the middle finger to anyone on IE < 10. I was originally designed explicitly for mobile browsers, so it makes sense, but it means it's rather unfit for the majority of businesses.
https://news.ycombinator.com/item?id=7127742 inspired me to bring this up as there the criticism was that he has no actual app yet. I do. thousands do, so here are just a few random thoughts:

I developed FluxCards for Android more than 2 years ago and also am at zero with my web version but will put money on it right now. If you are interested in SRS apps, ask me anything! (If you want to program one for money, read below.)

* Do you know how many flashcards learning apps there are out there? It's not hundreds but thousands. http://www.flashcardapps.info/ lists just some of those available for iPhone. So if you want to program one, do your research. Reading the right blogs you will get almost daily some new such app.

* Witch SRS? Well there you get the number down considerably (100?) although new apps increasingly come with SRS.

* If only the customers knew how good SRS is! Many apps (Duolingo anybody?) are vastly more successful (or hyped) than any other ugly but good SRS app. Yet in my opinion everybody should at least have learned with SRS once in his life for 2 weeks. If I had known about SRS apps when I was at school, I would have been so much more successful, yet when I had to learn Spanish fast, I literally worked through 30 different apps on Android that were all without SRS. After learning with "the best" of these for 2 weeks I realized that being asked the easy words over and over again was utterly pointless and decided to program FluxCards in 48h. Version 1 was in the play store 46h later and now stands at 11k active and happy users.

* Over these 2 years I soaked up all there is about flashcards apps and it is a lot. Of course I came across Anki, Supermemo, Mnemosyne and many others but with that knowledge I'm about to build the next generation of a cross platform (web + android) flashcards app.

* Users want a nice interface more than anything else but to get growth, they must be able to easily share their cards which is a big issue in the current FluxCards. A web-based solution as the FluxCards web naturally will solve that easily.

* For relevance in classes it has to be cross platform.

* To be efficient, it has to work on mobile.

* Students are impatient with a new platform and need to get access to good content fast.

* Good content is scarce. Another field FluxCards currently lacks at but the new version will have a powerful crowd-sourcing feature that will hopefully .

If you are good at front end development, maybe you wanna be hired? By Monday I want to kick off the development.
> …do you see a problem bootstrapping that on an obscure code base?

No, I don't. It just requires that you can read C and understand it. Any large codebase (in whatever language) is going to require you to understand certain semantics and idioms, and it doesn't make any sense to document those idioms every single place you use them. Big codebases require context and a comment in some random function isn't going to give you enough context unless it was a tome.

Also, did you see the 2 patches linked in the bug report? They significantly changed the code. C is just like that. It's an environment ripe for comment bitrot. And the only thing worse than no comments is incorrect comments.

In the end, the code is what matters. If you can read it, you can understand it.
What bugs me most is the false dichotomy I get when I talk about this with friends; their choice is presented as either use AWS or "hire a full-time sysadmin, buy multiple server-grade boxes and manage all this in a rented data center". I've been told Amazon is saving people "easily" $100k/year by not having to hire staff and buy expensive hardware.

This absolutely hits the nail on the head.

The dumb part is that the next option down, renting dedicated hardware, seems to be effectively identical with regard to server administration overhead. The only difference is that the time to provision is longer (4 hours with our host), and billing monthly instead of hourly.

In either case, you need to know how you are setting up new machines, monitoring them and deploying your application to them.

The part that really kills me is this though. Using AWS is supposed to be good for start-ups because it allows you to get started quickly and think about building your product rather than focusing on technology that someone else could handle. The problem is, how you are going to scale your technology on AWS is a problem you need to think about very early.

Even the lowest end dedicated hardware is so fast that you can have millions of daily active users before you even need to move beyond a single box. It's amazing how many things you don't need to think about when you only have a single box.
But so is all of the actual CSS in your app.
> ... such as running the damn thing on a known-vulnerable box/VM, ...

But in the case of Flame, wasn't that (one of) the big problem(s)? That the researchers didn't know what, exactly, comprised a known-vulnerable host?
Very true and this likely accounts for the economic disparity I'm talking about.
This is EXACTLY how most people in India think. This is pretty much conventional wisdom here.
But 'Saga' is an old, generic word that can apply to any epic story, so giving them the trademark for x-saga wouldn't be right...
Yeah, absolutely. We need reactor designs that don't melt down when they fail and lose power. LFTR and perhaps pebble-bed reactors would be far safer than what we have now, and safer than coal in many ways.

Unfortunately, it's complicated to explain that to people. People don't really want anything to do with nuclear after all the issues of the past, and it's hard to blame them. Nuclear really needs a rebranding and safer designs.

Some common sense would help too. We should shut down nuclear power plants that are on earthquake faultlines.
The point of the derived decryption key is that the only system that can produce the key is very likely not in the hands of security researchers.
except "many of the frameworks that exist for it hide or transform enough of the "native" implementation details as to be different languages. Or supersets of it"
is wrong. It's all still javascript. Just.. plain.. javascript. with a different api/library.
In Australia, often times you pay first. I understand that some people find this offensive, as the implication they feel is being made is that they'll walk out without paying. But it makes way more sense to do it this way, and an intelligent person can deduce why a company might want to structure the process this way. It's nothing personal, and it's not a sign of a cheaper restaurant.

You walk in, sit down with a menu, then order and pay at the counter and sit back down. Not terribly difficult, and it solves all the problems in the article.

The only time I'm waiting is when in line to order (if there is a line), and when waiting for food. At no point is the status of my time there in question either. Are they finished? Are they waiting? Have they paid? Where's their bill? All questions never needing an answer, as if you have food, you've payed for it. If you're done, you can leave.

You also don't have to hand your card to somebody you've never met and hope for the best.

Smoother, safer, more concise and more efficient.
That's not what this uses.
x32 uses 64 bit registers to address memory in a theoretically 64 bit space. It simply decides to map all memory within the bottom 32 bits so that when it stores the pointers to memory they are 32 bits wide.
I think it's a pretty neat idea! Might have to get a few friends tomorrow and try it out.

One minor suggestion - when I went to the homepage using Firefox, I was a little confused how to get to the actual functionality. From a cognitive standpoint in the age of the internet, it's 'a lot' of work to scan through the list of supported platforms, realize your current platform isn't in that list, and guess that there's only a way to get to the real functionality if you switch to one of the platforms on the list.
Thought this might be worth stating:
1. It is possible to engage in group-think no matter how brilliant you are, because humans

2. We don't KNOW absolutely that Australia guy doesn't like Zynga because of group-think, or because of unreasonable bias -- He may very well not think Zynga had the money to do this because he is a remote accountant that they have hired and just saw the books (however unlikely that is -- but with all this SaaS going about, why not)
Maybe this can help in turning around those connotations.
This probably isn't the right place to discuss the article, but I don't think your summary is either accurate or applicable. For example, the article does include code, it does provide constructive alternatives, it goes well beyond my experience by outlining a general proof for why the problem I was working on is theoretically intractable, it was hacked on by multiple people (hence "we"), and so on.

Even if that list of criticisms were accurate, the correct response to an article that has "no code, no benchmarks, no constructive alternatives" is to respond with code, benchmarks, and constructive alternatives. What you do here is essentially say "Because this does not meet some threshold of evidence I can ignore it" instead of what rational people say, "I should collect better evidence but in the meantime let's rely on the evidence that is available".

Finally, you don't really state an articulable position on the actual issue, so the discussion does not really advance. My position is pretty clear: promises work on the platform if and only if there are particular guarantees, and the README of this project explicitly says you don't get those guarantees, ergo this library is trouble. Clearly you object to this position but you do not say, let alone defend, any alternative theory that would have predictive power over whether or not promises will work for a project and for that reason, the comment does not add anything to the discussion.
Marscoin – Help bootstrap Mars exploration and colonization
I don't believe I stated a position, and I didn't want to elaborate more without knowing the context of the previous comment. I would be pretty appalled if s/he seriously thinks Benioff is an asshole (over the one bus comment perhaps?) despite this being 95% about some totally reasonable views on philanthropy (especially relative to the stuff Perkins said)
Most people bank from computers they own/control, so it makes login easier for them.

Most computers in public places are starting to be start about clearing cache/cookies between uses, so there's no harm done there.
Isn't this effectively the Aviary SDK?

http://developers.aviary.com/
Thank you!

Hmmm so do you think we should use images of the supported platforms/browsers instead of all that heavy text?
So they mentioned approving stock as a dividend for shareholders... does that imply a split? Did anyone see where they specified a split ratio?
Is this really surprising?

It's to really hard for me to take this article seriously without the release of said PowerPoint documents. All we have to go on, is that CSEC had access to device IDs and was capable of tracking their locations across airports. And while it's true that metadata can be used to create a graph and hence a wealth of information, ISPs generally are suppose to collect that info. The question is whether the contents of the messages were intercepted.

Even then, this article seems to provide a lot of reactions from professors and commissioners without really getting into the details. It's really not that difficult for anyone, yet alone the government, to track MAC addresses on Wifi networks and then start geolocating them.

Take for instance this GitHub project: https://github.com/DanMcInerney/wifijammer

You could easily jam Wi-Fi signals or even collect MAC addresses. Collect enough of them from different places, and you can locate people's travelling habits.
So... Anyone that uses the term 'Saga' in the name of a game is trying to ride off of the coat-tails of Candy Crush Saga?
Or maybe it will signal that Microsoft is serious about being an enterprise software company and might stop wasting money and mindshare on chasing trends it can't ever catch.
Lots of middle aged men dump their wives for younger women.
Crystallography: So Metal
Yeah, that's a pretty cool idea. I'll definitely play around with it a bit more tomorrow.
Just saw the demo while watching the Devshop. Very cool!
I'd love to use a jQuery 'lite' version, just for the convenience and brevity of expressions. Some of it should be baked into javascript.
Most games tell a story of some kind, and sagas are a type of story. The idea that one company gets a lock on that word is ludicrous. "A first-person fantasy-based RPG called 'Dragon Saga'? Sorry, you can't have it because a tile-matching game has trademarked the word 'saga'".

It's a bit like being able to trademark the term 'movie' - should the makers of 'Scary Movie' be able to stop other films from having 'movie' in the title?
It makes total sense for a small team (whether a startup or in a large organization) to be on AWS rather than going the DIY route by renting VPS out of some datacenter and managing everything from patching to migration to troubleshooting. What most fail to realize is the fact that a complete AWS package comes at a much cheaper cost than all of the above tasks combined. It just requires one to use some smart infrastructure planning in order to keep the bills low by tuning most of the configurable services which AWS provides.
This works only if you are doing the same tasks every time, or if they are easy. And you should already know how you can do it. But, in case you have a big problem to solve, and some details are unknown, dividing project in daily to-do's can be tricky.
Great post about Jelly and Path. Lol'ed a lot on the pathological part :)
I disagree with your post.

1. As stephen_g said, Min is nowhere near feature parity with Bootstrap.

2. IIRC, Bootstrap doesn't need jQuery, or its own js if all you want is a css framework.

3. You can make a custom build of Bootstrap to cut out the cruft that you don't need.

I like minimal frameworks (YUI's Pure is one of my favs), but 12-column layouts are generally superior than 10-column layouts, unless you desperately need 5 equal columns for your site.

I see that you wrote Min - I'd strongly consider changing your grids to 12 col. More divisors, and it's somewhat of an industry standard. Also, no normalize.css?

Lastly, you'll probably have a better adoption rate for your framework if you tone down the attitude and false claims. There's just no need for it.
jQuery might use querySelectorAll for its selector, but also looks for basic patterns and optimizes them by using things like getElementBy* eg. $("#test") will use getElementById behind the scenes, not querySelectorAll.
what's going to happen in your second example if somebody gives you a defaultdict instead of a regular dict for d.
Autopilot? Those letters look to be about 200 miles tall.
Apple Hires From Pulse Oximetry Company Masimo, Possibly for iWatch Team
Ask HN: Data points on the Bitcoin blockchain?
If/When Bitcoin goes mainstream, what data can be learned from transactions on the blockchain? Any predictions on what insights can be gained?
IMO even Candy Crush is pushing it, especially given there's a game called Candy Cruncher... which came out in 2002... and is a match-3 game....
Yes, to all of that. Apparently you weren't around 15 years ago when startups pretty much had to do that if they wanted servers and an internet presence. I lived through a startup during that era and that exactly what we did.
We had our fancy ISDN line and could server our web site to the world at a blistering 128K baud.

We bought a $300 air conditioner from Home Depot, cut a whole in the server room door with a sawzall and installed the air conditioner. Ok technically we only used the air conditioner in that configuration on the weekends when there was a human in the room and the main building air was off (we couldn't override it) but I like that story.

You're not going to get 5 nines this way, but you would be surprised at how much you can do, even when there exactly zero dedicated sysadmins.
forget it, i rather just use the jQuery

i have better things to do than merely writing my own dependency
If he's using Google Analytics it should be fairly straightforward to tie conversions back to the referral source.
When I first wrote "Introduction to open heart surgery: your housecat" people asked me "why housecats?". Because they are easy to find, and can get you real experience. No need to work up to open heart surgery, it should be available to anyone that has a sharp implement, a housecat, and a thirst for knowledge. Bloody, messy, knowledge.
Hah at least you're honest that you're doing exactly what I'm talking about. Bonus for you because at least you know of some places on the internet where someone said a thing that might support you. But, who knows, since you haven't actually engaged the argument. (I notice that you have not mentioned that YC requires successful applicants to come here however. So when it comes to Paul Graham's money, not all cities are equal.)

I mean, by this method nobody can rationally discuss if some places are better than others for finding developers, since that might entail a conclusion about exactly how scarce programming quality is in other parts of the country. It might happen that people from those places could stumble upon such a discussion! And then they would feel bad!

Well kudos to you, human. Now hug yourself and eat some chocolate -- may your blood always run high with oxytocin.
The post doesn't say that. The effects of getting a trademark on 'Saga' are both to prevent others from riding on their tail (while diluting the effect of their marketing) _and_ to prevent other products that want to use the word Saga for reasons unrelated to Candy Crush Saga. I imagine they only really care about the former, but the latter would happen anyway.
Does "grep CONFIG_X86_X32 /boot/config-`uname -r`" give you any results which aren't commented out? If it does, you're at risk; if not, nothing to worry about (at least, with regards to this vulnerability).
Not only is it generic, but it is a word that has a long history of being used in the name of games well before "King" existed as a company:

http://www.mobygames.com/search/quick?q=saga&x=0&y=0

If Nintendo were to release a Mario and Luigi Superstar Saga sequel, would King be so "gracious" as to allow them use of the Saga term?

This whole situation highlights how ludicrous IP law has gotten in the past decade.
I'm reading Clean Code (again). I dont see that code as being particularly bad. But it definitely wouldnt follow the axioms in that highly regarded book. I realize it isnt java but can someone familiar with the text comment on the number of parameters in that function and the naming of some of those variables?

Relevant quote:
"The ideal number of arguments for a function is zero (niladic). Next comes one (monadic), followed closely by two (dyadic). Three arguments (triadic) should be avoided where possible. More than three (polyadic) requires very special justiﬁcation—and then shouldn’t be used anyway."
I think I'm fine with this. I'm more concerned with the use of this tech by malls/trashcans.

edit: I guess it all boils down to the extent of the use-cases, which tends to be anybody's guess.
...which is strange since sliders are among the most popular premium plugins for WordPress. In fact, many of then earn six-figures on ThemeForest alone.
Potentially, depends how it would look visually I guess. You could just display a little message saying the platform isn't supported yet and linking to the FAQ perhaps.
Aside from any security implications for EC, there's also a lot of practical benefits around the reduced sizes necessary.

We made a Suite B implementation for TPM's (where smaller key sizes are very very important).
Google Stock GOOG Hits All Time High of $1182 After 2013 Q4 Earnings
Correct. Texas A&M alumni here. Our 12th Man has a 90 year tradition. It was a bit of a shock moving to Seattle and seeing that they had a 12th Man too. It wasn't widely known at the school until the Seahawks went to the Super Bowl in 2005. Shortly afterwards the two teams reached an agreement that worked well for both of them.
Two things:

1) The minified jquery script is ~100kb, for a script that is loaded once per website that's pretty tiny. Especially when you consider the fact that the latency involved with opening the network connection to fetch the file will likely exceed the time required to pull the file down. Once you've initiated the download the difference between pulling down 20kb and 100kb isn't all that much.

2) You can use the google jquery file reference. That means a big % of your site visitors will already have the cached script in memory, and for those that don't the download will be pretty speedy given that it can be fetched from the google domain in the background (while the rest of your site assets are being fetched by the browser).