skysight-inc/HackerNews huggingface dataset:
Well, not really. You could build your own HSM, that would store your keys and sign things for you. Obviously, only with your physical permission (a button press or even a PIN entry).

An AVR (like Arduino) would suffice without much need to trust hardware vendor. It has no communication channels except for the one you define (and you can and should define quite a restricted one) and not much die space (and too low cost) to have a backdoor to begin with. (And really paranoid ones could always go with TTL.)

The only serious problems are cryptographer-vetted RSA implementation that would fit in an AVR and writing a PKCS#11 driver for such HSM.

Yeah, this is totally on tinfoil-hat-grade paranoid side of things, but a CPU-level backdoors are not far from that.
Thanks for this actually. I'm trying to talk people out of using this, but it's a touchy subject rife with politics. Hard statistics is useful.
The law disagrees. So does society. So in what imaginary world does that statement hold true?
WordPress password forgotten? Part 2 (using FTP)
The Five Basic Portrait-Lighting Setups
... To be concrete, you have to remember to use "defer" in Go to clean up resources and locks, ...

You should probably be using defer() all the time anyway, unless you have a good reason not to. It also helps with code evolution, in the cases where some yahoo adds a new return statement in the middle of a function.
I can't imagine how anyone would pick up bits of js just from everyday computer use. How many people even now the the "view source" button in their browser even exists? Excel and batch files / shell scripts I could see though.
the top examples use the native browser API, and there are links to related libraries below.
[CTTE #727708] Default init system for Debian: Systemd
* very first program simply does not work
* lack of strict
* lack of warnings
* lack of my
* bareword filehandles
* mentions &-calling of subs
* thinks it's the same as normal calling
* snowflake formatting style
* mentions EXTREMELY outdated books as further reading
* confuses capitalization of builtins in code examples
* fails to explain compile phase semantics properly, instead introduces "use" as magical
* quotes hash keys
* explains prototypes as something that could be used in general
* explains post-fix dereference syntax, but describes cumbersome circumfix syntaxes as default
* 2-arg open instead of 3-arg open

I'm halfway down, i can't be arsed anymore. I feel like i'm reading the Leeds Perl 4 tutorial all over again.
Epidemiology. Though it applies for public health generally as a field, or honestly anything under the umbrella of "Biomedical".
The Embarrassing Fact MtGox Left Out Of Their Press Release
SSLError and Rubyist, sitting in a tree
The important bits are signed with an ownership signature, and the whole transaction is hashed to be added to the block chain. As long as you don't trust the transaction hash (which isn't designed to be secure) you won't have an issue.
It is much easier to find more work if you already have work.

Stay there. Ask for feedback on your performance and use your time to address weaknesses that they saw.
Almost exact same here, except I failed college calculus - twice. It's always been a sore point for me that people who are obviously not as 'smart' as I am somehow all managed to pass it - I couldn't even understand it. Can I lay a little blame on bad professors? perhaps. others complained about the profs too, but ... they still managed to grok enough to pass.

I only managed to satisfy degree requirements by taking 'logic' (a philosophy class) instead of calculus. I was warned off trying this route by a few people though, as it was "hard". I'd been hobby programming for... 10 years at that point - there's little about 'logic' that could possibly be 'hard' in a logic 101 class, so I passed by doing something I was naturally good at. I simply couldn't afford (financially) taking calculus another 2-3 times to keep trying to pass.

It's still a sore point even now... 20+ years later, and a source of secret (perhaps not so secret now that I post this!) shame. :(

I'd never even had to try at anything (except music, perhaps) until well in to high school, at which point I'd mostly just given up. I scored in the top 2% of the ACT test (back when it was scored differently, in the 80s), and I'm not actually 100% sure I finished all the questions - I know I didn't study for it, nor was I particularly well rested. Yeah, as someone else wrote, schools are simply not oriented towards helping 'gifted' students, assuming that they're already 'ahead' of others, and seem to be left on their own - I know I was.
That's great, Now, if only Heroku were 40% less expensive...that would be progress.
I hate to break it to you, but by 1000 the Roman Empire was well and truly gone. As much as I am fond of the medieval period, I wouldn't hold up 1000 as a bright and shining year for "The West".

Hell, at that point, even the Eastern Roman Empire was struggling.
So the claim is they'd be doing something like these attacks? I just struggle to believe that's the most effective way for them to deal with the problem, when the US Government coming out with "Bitcoin is illegal due to {plausible sounding terrorism story}, possession is a felony" would utterly tank it overnight.
>Straight As can mask a lot of problems.

I've got a room mate who was put ahead a grade in middle?late-elementary school and missed the whole foundation of algebra. They did so because he got straight A's so obviously he's smart enough; he could just skip that. (They promised to give him a text book so he could learn on his own that summer, but never got around to giving it to him.)

Of course, he started struggling in school the next year. Now math is one of his worst subjects. They completely screwed him over because they were distracted by his grades.
He's describing a harassment problem with his boss, an Apple employee, pretty sure Apple HR is the point of contact for this scenario.

Let's suppose he was being sexually harassed by his boss--do you think he'd go to the agency to resolve this?
I wish they would add IPV6 support.
> No, it is not normal for an organization to haze new hires ...

It's a common phenomenon, and "normal" is a problematic criterion in any case. If by consensus people deem it useful as part of a spectrum of acceptable behaviors, then an appeal to "normal" loses all meaning.

I agree with you that people who find it upsetting or demeaning should leave, but by doing so they may pass up an opportunity to change the world. Not all human breakthroughs are accompanied by everyone behaving according to the strictest standards of decorum. Just ask an astronaut -- I'm sure she'll agree.
Top security tools in Kali Linux 1.0.6 – Network World
The 100 Rules For Being an Entrepreneur
Mycelium (Android wallet) lets you import and export private keys. I wouldn't know if it's grandma compatible (mine doesn't even use computers), but seems fairly simple to me if you understand the basic concepts.

To build something easier, you'd probably need to "hide" Bitcoin and just present a balance and a simple way of associating "contacts" (with enclosed addresses).
No, a botnet can't ever achieve 51%. One modern ASIC rig is equivalent to a few thousand average CPU+GPU computers that make up a botnet.
That's not what I downvoted you for sparky, nor has anyone particularly made that argument.
Track Your Code School Goals with Beeminder
I wish I didn't buy at $900 and at least would've sold soon after, otherwise I'd buy some now. These events where some pretty major bug is found in Bitcoin are great opportunities to buy Bitcoin at a "low price" (as low as you can get in that moment in Bitcoin's history). I'm not worried about the bugs themselves because I know they will be fixed.
Should the government pay you to be alive?
Machine Learning Using Pylearn2
FBI redacting published facts from drone documents
People are excited to interpret any random observation in terms of their own prejudices.

>There are racial differences in gene expression (though much smaller), too, but I doubt anyone would upvote it or start a similar conversation about race if an article about it were posted here.

You've been here long enough to know that isn't true. Plenty of people on this site have a passionate belief in the simultaneous superiority of and tyranny of the inferior masses over white males within the civilization that they built with their own hands.
I mean ready in the sense that pointing code that worked flawlessly against MongoDB to TokuMX then just works flawlessly too.

I uninstalled Toku and went back to MongoDB so I can't provide any further testing. (The mongorestore takes days.)

I can tell you want code was running at the time. It reads events sorted by user id and timestamp, and then discovers session boundaries in that. A new session object (in a different collection) is written out with all the events as a subdocument list. (In rarer cases an existing session object is updated.) This was happening in 8 separate processes all in Python/pymongo. There are no statements running that affect more than one document, nor any need for transactions.
This is exactly how the transaction balance is encoded, as integer multiples of satoshi's (the basic unit of bitcoin, 0.00000001 BTC. All known cryptocurrencies do this to prevent float/double rounding errors.
> If you honestly think the guy with the $20k ad spend is going to "try again just to make sure", then I think I'll go short some FB stock before it takes it's final dive.

That person has already replied with more info on his case, but you should also note that for some people $20k is big enough to never risk that mistake again, while for others it really isn't. I spend around that much each month on Facebook and that's a "well we'll put a little into FB" amount in the scheme of things. Sure, I've had other clients for whom a badly spent $1k was a problem, too. My point is to not jump to assumptions that an adspend is big because it sounds big to you.

(He'll, just this morning I sent a mail to a video website saying that a $15k spend delivered shit results and that we should try again.)
I wish that was easy on Windows too (not the logging, but LD_PRELOAD) - and yes, there are many hooking libraries (vld, google-perflibs, various anti-viruses etc.) - but I can always find failure cases for them.

e.g. I wish there was less magic (or whole mini-industry) behind hooking functions this way.
Beeminder cofounder here. We're super excited about this integration. Here's our own blog post announcing it as well: http://blog.beeminder.com/codeschool
I bet you're left-handed like me.
Moving to MapReduce 2 with YARN
So... someone enlighten me here; why does a project like npm need funding at all? If projects like GCC, which are far more complex, can subsist via contributions and donations alone, so what makes npm, a package manager, different?
ESR is known for this.
BTC exchange is providing incentives for customers leaving halted Gox and Bitstamp
Yeah, I saw that comment and started to read the thread. It's interesting that Linus's talk is very concrete while ESR is rather abstract.
We shouldn't give a shit about current drug dealers. The idea is to allow other people to provide a safe and consistent product out in the open, out-competing traditional drug dealers. These drug dealers will no longer have the opportunity to exploit children as street-level pushers, those children will get thrown into the legal system realistically erasing all job prospects. Legalized possession of drugs will keep even more innocents out of the legal system, and furthermore will remove many of the tools that police have traditionally used to justify violating people's right. "I smelled weed" will no longer be an excuse that police can use to frisk any minority they please.

> "Also the more complexity that goes into "appropriate" regulation, the more likely that specific (ie used by the upper classes) drugs will be the only ones that get deillegalized. Which will fail to address the actual problem at all."

The entire class of "we're only legalizing 'upper class' drugs" arguments are complete nonsense. The fact is that disadvantaged minorities are massively over-represented in marijuana arrests, despite using marijuana at similar rates as white americans.

> "But promoting it as an integral part of the solution helps perpetuate the same tired government-should-be-involved thinking that caused the problem in the first place."

We've got bigger fish to fry. Drug laws are modern Jim Crow laws, concerns about the merits of taxing vices and luxuries have a lower priority.
There are plenty of repositories with code for micro-controllers and non-web related projects, but again, that's not the point. The single quote that "pretty much everyone knows javascript" was the focus of my comment.

Sure, maybe the author meant "pretty much everyone [who we think will be interested in our site] knows javascipt", but that's not what they said, and I don't understand that attitude at all. It's unnecessarily exclusionary, especially when their plan is to host content in a similar way to HN.
If you fear that now just imagine if no changes are made and the NSA & US Gov't are allowed to continue stomping on your rights. At some point you must stand up for yourself and others for you may not have the chance in the future.

If it gets to the point of the NSA adding people to no-fly and/or worse actions being taken, the situation would become hostile and more dangerous than the current peaceful political debate.
I definitely remember the first time I could no longer slack off, take 0's on homeworks, and ace tests to get a C+/B and it was in high-school :(

I jumped to AP Calculus without taking the pre-requisite AP class everyone else had taken, and I thought I was so cool and smart. By the weeks end I no longer felt so cool and smart - I was completely lost.
But that goes hand In hand with allowing crooks to run banks, if regulation works so well there should not be any bad banks so no need for deposit insurance.
I've been using Abacus for the last ~2 months, and it's been amazing. Thank you guys so much for making it! I'm so happy to not have to deal with expensify (or worse) anymore. I'll be bringing it to wherever I work with in the future.
They've made a determination that supporting their sociological viewpoints is more important than the high potential of social integration issues that will likely come from having raised their child that way. When you prioritize your opinions on social issues ahead of the welfare of your child, to that child's enduring detriment, that's definitely bad parenting. And, depending on who you ask, could be considered abusive.
I guess they have to make money somehow.

Glad I use Chrome, though.
I posted this article. I believe that the author, Matt Might is a professor specializing in programming language theory at the University of Utah.

My understanding of this article was that it was less of a tutorial and more of an analysis of the actual semantics of Perl. Thus it is less about how one should write "Modern Perl" than it is about how Perl actually behaves in various circumstances.
ESR is a dick. I really don't know why others don't see it here. He's always been a bit of a long-winded blowhard, even when he's right.

People worked without source control because CVS was not real version control. It was a bad joke, and Linus was right. Without integrity guarantees, a source control system is just a pain in the ass you'd rather not have to deal with. Tarballs, patches, and email worked fine back when the community was small and tight-knit.
First thing I said when I came in - glad to see others say the same!

I just figured out I can run IPV6 hosts at home on Comcast and ping them from an IPV6 ping gateway page. I'm still scratching my head on how that works and whether or not my router allows all IPV6 packets inbound to all hosts. Tried to test on AWS, but that's not working. Went to my DO account, and still no support.

Rackspace supports IPV6, but I think something wonky happened to my account when I was testing the developer credits for them. I need to get it fixed.

Anyone have IPV6 at home and want to help me test it?
I am writing a server which will maintain thousands of SSL-encrypted simultaneous connections for a real-time application. If ONE panic makes its way to the top of the relevant goroutine, the whole process comes down, trashing all my connections in the process. It is non-trivial to reestablish them. Yes, my system is built to handle this case, but it's still not something I can afford to have happen every 15 seconds due to some error that is only affecting one out of my thousands of connections. (Also, I do understand why this is the only choice the Go runtime can make; this is not a complaint.)

At least in my world, every time I type "go", I must ensure that I am starting a goroutine that has some sensible top-level recover mechanism, and, honestly, for any Go program that actually plans on using concurrency, I think there's no alternative. You MUST handle panics. Why? Because an important aspect of Go's concurrency is maintaining composition of independent processes, and there are few things more uncompositional as a completely unrelated computation in a completely unrelated thread that trashes your entire OS process.

Panics may be for programming mistakes, but for any non-trivial code, you have some. Hopefully you can work out a better way of handling them than completely bringing the entire program down.

I am willing to assert that my code maintains enough isolation that continuing on is a reasonable thing to do. (It's a port of Erlang code anyhow. This is not a very freaky claim about such code.)
Upvoted because you realized that we're not all American and don't all have any idea what "AP Calculus" was.
Right, that is complete fantasy. Everybody involved held a better hand than this guy, and he made the right decision - choose a different game.
Have you seen jcampbell1's post above?
See http://twister.net.co/
Google Is Still The Traffic King, Despite BuzzFeed's Claims
I really don't feel sorry for Apple. They seem to be liking the current system where everyone sues each other for bogus "patent infringements" just fine. If they didn't, they'd actually support movements for real reform of the patent system. But they are not doing that. If anything, they are probably fighting against such movements.

This is really what we need to get companies like Apple, Microsoft and even IBM to change their mind about how useful these mass-filed patents really are - them getting sued by patent trolls and losing tens of billions of dollars from it. Then, they should get the message, and then we'll finally have real patent reform rather than patches and fixes of minor issues, like we see now, at best, while new bogus patents are still passed by the thousands every day at the Patent Office.
Great to hear. I was always confusing them with the state of IIIinois.
gcc isnt a service?
That seems to me like an awful example. But speaking of generics, exceptions and other things that Go lacks, like pattern matching, lazy values, currying and so on, in my opinion Go sucks because you can't abstract well over common patterns. To take your example as a use-case:

object NonFatalError {
def unapply(err: Throwable) = err match {
case _: TimeoutException => Some(err)
case _: IOException => Some(err)
case _ => None
}
}

def executeWithRetries[T](maxTries: Int)(callback: => T): T =
try {
callback
}
catch {
case NonFatalError(error) if maxTries > 0 =>
logger.warn(error)
executeWithRetries(maxTries - 1)(callback)
case other: Throwable =>
throw other
}

And usage:

def funcMayErr(): Int = throw new TimeoutException

val value = executeWithRetries(5) {
funcMayErr()
}

But there's more. Because with generics and exceptions you can actually wrap the whole result in an algebraic data-type that also has handy methods for dealing with failure (e.g. a monad), as in:

Try(executeWithRetries(5)(funcMayErr)).map(x => x + 1).getOrElse(default)

Cheers,
Obsoleted is pretty strong - do you have data to support that?
There isn't really any development team comparable to that of Bitcoin in a different coin. Things that get fixed in Bitcoin are not fixed in other coins. But if another coin happens to fix something, it will be fixed in Bitcoin too.

Typically a copycoin will only have the same fixes as Bitcoin depending on when they decided to copy it. But then they will invariably lag behind.
Check the date on this one folks, before you formulate your response.
Should someone periodically refresh the content with current music?

That would presumably give Sony the ability to remotely wipe content from the device, which I can't help but imagine them abusing with maniacal glee.
Did anyone else notice how his leaving without notice was unprofessional, but none of what led up to that decision is being labeled unprofessional?

Yeah, it's funny how that works.
It's rarely "only crash" as that eventually bubbles up to being equivalent to a reboot. It's simply that you can have subsystems that do that in effective isolation if the effects of a reboot are minimal.

On the code state upgrade side there are usually a few different issues that can arise and I'd be very curious to hear if there are ways Haskell would handle some of these.

The first one is type changes. I might have a record that has a new field added. Now it's not necessarily pretty to upgrade on call with a pattern match or using a code upgrade protocol but it's easily expressed dynamically.

Another is in the interface, like adding new arguments or changing from a synchronous call to an asynchronous one. These are a bit easier to handle via indirection though they show that you'll need to plan your entry/exit points for upgrades carefully (again, OTP has things like gen_server which make this much easier).

If Haskell can manage to get past they type boundary issue then it's really a matter of supporting at least 2 simultaneous versions of code so each process can be scheduled and upgraded in natural course. Handling more than 2 could be of use depending on how aggressively you want to purge, for example, a local rather than fully qualified call can be caught in a closure and passed around as in some value to be called later. These long lived references will need to be handled carefully or you might get some delayed surprises.
Obligatory reference to Carol Dweck's research:

http://www.scientificamerican.com/article/the-secret-to-rais...
>My mother raised me as a "feminist" and part of being a "feminist" was not discriminating against anyone because of their gender.

That's an idealization that's not congruent with the historical culture and behavior of many feminists.

Up until the 80's feminism was heteronormative and transphobic. In fact, transphobia is still a huge problem in the community.[1] These are just the more concrete examples. For most of its history feminism has been a straight white upper middle class movement. The perspective of those not fitting this demographic have been marginalized within feminism at some point.

>I hate that the label itself is gendered and I wish it would be changed, but the principles of "feminism" include "Men's Rights". Breaking "Men's Rights" out as a separate topic only muddies the waters, dilutes the efforts for the same goals, and introduces a divide that shouldn't be there in the first place!

Masculism was started by a group of feminists who were kicked out of National Organization for Women(N.O.W) for advocating equal custody in divorce. Gender Studies is inclusive in theory but not in practice.

1. https://www.google.com/search?q=feminism+transphobia
The irony is that Go is not a functional programming language.
Never, ever take "prestige" instead of pay. Because prestige is only worth anything if you can cash it in. So what does this mean, it means the sort of people attracted to "prestigious" companies are only there to get their tickets punched so they can get a more lucrative job elsewhere in a year or two. That creates a weird dynamic.
Yeah, check this out from 1998 (two years before OP) https://lkml.org/lkml/1998/9/30/122