skysight-inc/HackerNews huggingface dataset:
Yes it would be possible because MD5 has been broken: https://en.wikipedia.org/wiki/MD5#Collision_vulnerabilities

Any file can be modified to result in a hash collision with a specific MD5. This makes is unsuitable for its stated purpose as a cryptographic hash.

The solution would be to use a newer and stronger hash like Keccak.

A solution similar to what you are thinking of is already used by Bittorrent's Distributed Hash Table to identify files.
Hating somebody for writing free software is not anywhere near reasonable. He never forced you to use it.
Can you elaborate on those AT&T plans?
Procurement and Civic Innovation
That's one way to look at it. The reason there even is such a thing as a cut-rate service like Cogent is that ISPs like Comcast have a captive audience and can increase their transit fees with impunity. The CDNs that go along with that extortion are the ones that don't get labeled "cut-rate."
HTTP/2 does not change the meaning of http://. That's the opportunistic encryption proposal: http://tools.ietf.org/html/draft-nottingham-httpbis-alt-svc-.... For more information, you can see https://insouciant.org/tech/http-slash-2-considerations-and-....
We in the West have no idea what problems they have and what technologies would be applicable.

I would rather see an exchange program. trade groups of founders for 6 months at a time.

A successful African developer might have some ideas on a product for rural Americans with poor broadband, or populations that do lots of shopping at small markets rather than grocery stores, or organizing ride shares, or getting low-availability clients to get vaccinated.

Lots of things in America are diminishing in quality. We aren't anywhere near third-world status, but we can learn a lot from the people who have made things work in those badly managed systems.
A significant problem is that there are a lot of developers today who revere Spolsky as some sort of a god, and absolutely refuse to question or reconsider anything that he has written.

This trend is particularly bad with those who've gotten involved with software development since 2005 or so.

I chalk it up to a lack of experience with massive, multi-decade software projects. If all a developer has worked with are small, recently-written Ruby on Rails apps, for example, then I don't think they can appreciate situations where rewrites of some degree are the only viable option.

Hopefully this attitude regarding Spolsky's writing will change with time, as these people encounter the real-world situations where significant or total rewrites are basically the only possible option.
I'm not under that impression. But yes legalising all drugs would destroy the cartels. Hopefully one day when society comes to its senses...
No problem, I missed the edit window on my reply when I realized it might be a little bit terse sounding in tone. I meant it as being helpful.

I'll add that the Latin vale can be used to mean "farewell", which is usually how it's translated, but if you dig down the etymology rabbit hole, they come from two different language families and not surprisingly don't mean the same thing.

"farewell" is from somewhere between 1200 and the 14th century middle English, a composite of faren "fare" and wel "well". The phrase used to be "fare thee well" but was contracted later. All have Germanic roots.

"fare" is old-English fær means "to go forth on a journey" and still hangs around in some words like "sea-faring", "wayfarer" and "farewell" ("fare" eventually turned into the more modern meaning "payment for passage or conveyance", but that's a digression).

"well" in the sense of "farewell" these days connotes good health (as in "are you well?") but originates also in Germanic tongues to mean "satisfactory".

"thee" is also proto-Germanic in origin and I won't belabor it.

Swedish speakers may recognize this in the modern form as "farväl" and Dutch as "vaarwel"

A "valedictory" is usually translated as "a farewell address" and the act of the speech the valedictorian gives is called a "valediction" (a farewell). But this isn't strictly correct. "valedictory" means something more like "words for good health".

So it's more like we commonly translate "hope you feel well!" to "have a safe trip!" which isn't really quite right.

It's interesting then that:

a) "well" has come to adopt the Latin meaning "health" in the sense that "valere" means "well" i.e. "health" (similar to "valetudo" or "valetudinis"). "valere" more strictly translates to "health" (which all the other meanings connote e.g. "strength" "well" etc.). Also found in words like "convalescence" with the "strength" connotation ending up in words like "valiant" and "validity". When we "validate" something, we are proving it to be strong, which is a connotation of "healthy". So it really means "to prove to be healthy".

b) We define Latin words in terms of Germanic explanations, but not the other way around. e.g. if you look up "farewell" in the dictionary it's not defined as a "valediction". Which would come as no surprise to those that know that English is a Germanic language.
Sigh. No they use both. Instagram has kept growing.
Well, to be fair, you can't entirely rule that out...
Cynically, "we can't". Or "they already have better options".

Alternatively, outcry and blacklisting ISP proxies - just as we do with root cert abuse.
Perhaps you should look at the Hacker News comments on that thread: https://news.ycombinator.com/item?id=7249193. Notably, my comments: https://news.ycombinator.com/item?id=7249560 and https://news.ycombinator.com/item?id=7249869. Basically, the author is wrong.
For binomial scenarios like a stock A/B test, most statistical environments will have some sort of built-in power functions. For example, R does; an example: http://www.gwern.net/AB%20testing#power-analysis
Are you implying this is a bad thing? What other operating system can claim even just an order of magnitude more holes? 2, in what, over a decade? That's incredibly good.
I'm pretty sure people who are super pro-wind farms haven't even contemplated this problem:

https://www.youtube.com/watch?v=MbIe0iUtelQ

Live in that home for 2 weeks, see if you still remain sane.
What is Lean Startup?
Somewhat ironic this webpage contains dozens of trackers.
...just like professional tax return preparers once the tax code/law got too crazy.

<grin>I love unintended consequences.</grin> What you mention is an important knock-on effect. There will be entrepreneurial jobs created that are new because of this. There was a NY Times story on HN recently [can't find it now] about medical scribes: assistants who follow around physicians all day and update the electronic health care record-keeping systems. They free doctors from data entry so the doctors can doctor patients. My PhD thesis was originally about classified information in the intelligence community---but you know what? It's not about that at all; it's about health care records privacy, and insurance companies acting just like competing national intelligence agencies---and the same security controls work in both situations.

You think NSA has a file on you? Wait until you see what kind of privacy violations that Aetna, Kaiser Permanente, and Protective can get up to. There are new companies to be started in this area.

Edit: explain what medical scribes do
> As outsiders we can't see commits

Exactly. I was going to refute your point but you did it for me.
8 Indications that You Need to Guillotine Your CTO
This "Go is a rewrite of C" misinformation that's been floating around lately is getting almost as bad as the "JavaScript is Scheme-like" nonsense that has gotten uncomfortably common.

Although incorrect and annoying, they are at least becoming a way to identify people who likely don't know what they're talking about.
This is stupid, Cogent is providing Comcast customers with what they are requesting. Now Comcast says no way, I don't give a shit what my customers are asking for, you have to pay us as well. How is Cogent abusing Comcast by providing Comcast's customers with data they have requested.

No, I don't think Comcast is being abused at all and its much more likely they just don't give a shit what their customers want because they know there is nothing the customer can do about it and so they let service degrade in order to extort more money.
What if, say, ISP1 and ISP2 both have shitty performance of netflix and then netflix pay for ISP1 to make it better. They do not pay ISP2. So, essentially netflix is available only for ISP1 and not ISP2. That sounds like that the parent comment is saying and what could happen here.
There are plenty of intelligent people who believe that bitcoin is the myspace of digital money.

And plenty of other intelligent people who believe that it can be made just fine by adding dozens of layers of technical complications, and then somehow creating an easily comprehensible interface across those layers.

And plenty of other intelligent people who get hellbanned because they said something snarky but true about a yc moneymaker.
As Patrick McManus says in http://lists.w3.org/Archives/Public/ietf-http-wg/2013OctDec/...:

If someone can install a root cert onto your computer then you are already owned - there is no end to the other things they can do too. Call it a virus, call it an enterprise, but call it a day - you're owned and there is no in-charter policy this working group can enact to change the security level of that user for good or for bad..

The good news is not everyone is already owned and SSL helps those people today.
Just because something is popular doesn't make it inherently valuable, because popularity is often fleeting.

Over the past fifteen years nearly all messaging platforms have had bell-curves of popularity. MSN, ICQ, AIM, BBM. What stops users of WhatsApp from moving onto another platform? Nothing.

Personally I think the deal is bad for Facebook because they've spent $16+ billion acquiring users that are ephemeral. They are not buying technology. They are not buying talent. It is purely a user buy.
Facebook paid roughly $42 a user for WhatsApp. Which is about what Microsoft paid for HotMail.

Yahoo paid Mark Cuban and his partner $11,000 a user for broadcast.com - that is a bubble price.
"The problem is that money is fungible - if you give people money instead of free housing, they'd just by some crap on it and then will come back to you and complain they have nowhere to live, and you're back to square one."

That's the fear that leads to all the specific help, but the experiments with unconditional cash show that is not what happens.
People will cry bubble when any software company is purchased by another for large sums of money. It seems to just be a reaction to the "But, they don't make anything real," I mean heck, other large companies with far fewer users get purchased for far more and people don't bat an eyelid...

/shrugs

Who knows. Continually predict a bubble, and everyone forgets that you were wrong for over a decade when it finally happens...
What sucks about to-do lists?
There are some kinda legitimate uses for this in certain environments -- enterprise DLP, various kinds of filtering, etc. Potentially even caching and stuff on the distant end of really weird network connections (when I go to Mars in ~30y, I'd like to have as much cached as possible, and converted to message-based vs. connection-oriented protocols).

We have good enough workarounds for this right now (putting wildcard CA certs on devices and proxying that way), but they're not awesome. So, if there were a way to keep this from being used for evil, it could make some existing non-evil activities easier.

But, on balance, the risk of evil might be too high.
U.S. now bugging German ministers in place of Merkel – report
> it flies in a face of how actual statistics works.

The terms you're looking for are 'sequential testing', 'optimal stopping', and 'adaptive trials'.
1) You were born there. Your spouse lives there. Etc

2)!london is not monolithic; it has several local councils all with differing rules. They'd all need to agree and coordinate. I don't know why it isn't done better.

3) people living in slums ether don't know their rights; or how to enforce those rights. Sometimes their own legal status is dubious and they risk deportation. Even if they do know their rights, and how to enforce their right, and they can get the regulator to take action, and they're totally legal and above board, they may just end up without a home.

Housing in the UK is weird and broken and at the low end there are some strong weirdnesses built into the system.
> And these resources are not infinite, they are scarce.

This is the crux right here.

The government no longer providers you money as BI. It provides you with the right to housing (build up), the right to energy (one person can only use so many KwHs/day), the right to worldwide communications (I think we can all agree the price of moving bits is going to continue to fall), the right to food, and the right to transportation (electric self-driving vehicles).

With enough wind, solar, nuclear power, with self driving cars, with automated manufacturing and farming, you don't need money. You simply provide for your citizens their basic essentials. The people who want to work, will. The people who don't aren't a burden, because robots don't resent.
So for £230 per month in London, you get an unpleasant, unsafe, tiny, and marginal place to live.

Given that it's one of the most expensive cities in the world to live ("typical" 2BR apartments in nice areas are more like £400-600 per WEEK), I can't say I'm surprised.

The ways people are willing to trade off comfort to live in the center of things sometimes surprises me, but not that much.
Long time lurker, first time poster here. There are tons of factors to this deal, but here's a simplistic take.

If:

(Google acquires WhatsApp and builds from its existing social network of 450m active users to form a mobile version of Google+ on steroids)

And:

($19Bn FB investment) minus (Actualized FB profit from WhatsApp over 10 years) is greater than (Potential lost profit to Google+WhatsApp in the social networking space)

Then: Buy WhatsApp

I also think its been largely undiscussed that WhatsApp was a company desperately wanted by both Google (for a, finally, serious attempt at competing in social networking) and FB (for a bunch of reasons, as well as defending against a potential Google acquisition) really helped to significantly propel this deal valuation.
The Value of Background Fetch
dash away from the camp in the morning before I was spotted

Just to clarify: you mean they wouldn't have liked it if they had known that you were a banker?
"They will cling to the fantasy that rents will magically drop,"

Oh really? Less demand equals smaller prices. It may take some time, but, yes, it will happen.

About the issue: the USA is huge and it's sincerely stupid to keep cramming people into an ever tight space.

There's nothing about it fundamentally that makes it absolutely necessary. The big companies like Twitter, Google are big enough so they can stand by themselves and do not need the SF/SV influence.

Companies could go to Stockton, they need the money, and it's not so far away.
Assuming that any of the advertisements are genuinely informative rather than manipulative.
Thanks for this correction; I was under the impression that opportunistic encryption had already been chosen based on HTTP/2 descending from SPDY, but I clearly am not following the WG all that closely.

Is a fair reading of your blog post that it has a high likelihood of succeeding?
Let's not forget about the cases where the "unsubscribe" link is really just confirming that a person is receiving the emails so that more can be sent!
It would be a net benefit for everyone if people stopped believing San Francisco was some kind of "technology/business mecca" or something.

We need budding tech sectors all over the world, and we don't need everyone trying to move to California (and a lot of us frankly don't want to move to California, to begin with).

California doesn't offer anything which can't be found elsewhere.
The day I fully understand this entire blog post is the day I will consider myself in the leet category.
No, that's the point. This ridiculously overpowered phone was cripppled by PayPal's website. The phone slowed to a crawl. The website was loading odd stuff and doing weird things.
I was really hoping "Open in app" would take me to a special hipster Dev stack app.
Those un-wrapped lines of text are really annoying to read.
Ok - here is a suggestion: The Right to root.

Just as a citizens letters, papers and home are inviolable, should our new papers our new homes be also inviolable - if I own a device, No-one should legally be allowed control over it?
> California doesn't offer anything which [sic] can't be found elsewhere.

Except a self-referential belief that California is where it's happening.

Also: s/which/that/
Or maybe, since this is used as a "hire a programmer" question often, and has been for years, perhaps I just like discussing the very real difference between toy algorithm problems and the fact that algorithms don't exist in toy environments ever. In fact, I literally acknowledged the constraints and toy environment you're talking about in my post. Perhaps you should take a try at actually reading it, rather than insulting me because you think you're a clever person.

Oh almost forgot the smiley to indicate something or another sarcastic... :)
The available page sizes are set by the hardware. On x86-64, your current options are 4kB (4-level page tables), 2MB (3-level page tables) and 1GB (2-level page tables).
Ask HN: Please share your YC applications
I'm not applying, but I enjoy reading applications from the few who published them and I don't seem to be the only one. Whether of this year or past, please share or link YC applications here!
As a guy who is moving to SF for geographically-relevant reasons (wife is a medical resident) and who works tech remotely, I'd be all in favor of this.
This, sir, is a mystery we have not yet solved. It has to do with a critical mass of talent and companies, social dynamics and financials.

Silicon Valley is not easily replicated.

As for me, a person who visits the place on vacations, I love it. I wish I could do more to solve its many problems.
What makes you think this is a rewrite? If this is a rewrite from scratch, they are insanely fast coders, considering that they have a full-blown editor in less than a month (first commit is from January, 31)

That first commit also shows it is not a rewrite, though, since it has a comment starting with "Import vim from changeset v5628:c9cad40b4181"
It's part of GigaPower (their 300Mbps, soon-to-be 1Gbps FTTH service they rolled out quickly after the Google Fiber announcement). AT&T does a good job of obscuring it on their website[0], but if you click "See offer details", you'll find that the $70/month price is a "special" that requires you opting in to "AT&T Internet Preferences", which is their euphemism for DPI. It's not explained there, but if you opt out, you lose the "special" and your price goes to $99/month.

From just a random googling, here's the first news article I found detailing the plan.[1] (See the last three paragraphs.)

[0]: http://att.com/gigapower

[1]: http://news.cnet.com/8301-1035_3-57615246-94/at-t-delivers-g...
> ... and can add huge delays in your sign-on

Source? The typical benchmark is 8ms for a generation of a bcrypt hash on a modern machine.

> My "Goofy" scheme is based on the practices which Microsoft, LinkedIn, and FaceBook all use. You know which of those use Bcrypt? Zero.

Again, source? PBKDF2 and scrypt would be acceptable alternatives and both can take just as much time to compute as bcrypt (or more!) depending on how many rounds are set.

The rest of your advice in these comments (esp. your salt 'mechanism') is wildly off-base and in many cases, actively promotes worse security without any evidence to back up your claims.
In theory it also has a lot of regulation and enforcement, so it's a bit surprising that these kinds of slums still exist.

Except it's not that surprising because we see people renting out garden sheds and lock-up garages as housing.
The way "techies" are being talked about and treated right now is straight up Xenophobia and it's fucked up.

We can't just be "nerds" that are easy targets to be scapegoated and picked on. If someone tries to blame you for the low supply of housing (instead of restrictive building codes) or for "changing the culture" of the city in a way that they don't like (who died and made them the arbiter of good taste). Call them out on it, its bullshit.

Technology has improved a lot of peoples lives and supplied this state a ton of money in tax revenue and for every one technology job 4-5 other jobs are created [1]. The companies in the bay area are the envy of the world, don't let peoples jealousy bring you down.

1. http://www.sfgate.com/news/article/Tech-hiring-creates-other...
No, it's better than that. An advertiser that remails to someone who clicks "unsubscribe" risks prosecution, but he can share his unsubscribe list with a third party in the advertising business, and he can do it legally. This is a loophole in Can-Spam that no one noticed (and not the only one).
Is anyone else getting a completely broken SSL/TLS certificate from this site?
Not necessarily.

Only two has been discovered, but how many there really is?

Actually, Theo is a mole working for the NSA and he's throughout the code that looks clean, he has hidden loads of backdoors and weak crypto…

And because the coders and security consultants reading OpenBSD's source code spend so much time laughing at the jokes in the comments, that they just don't notice the hidden evil!

But Ssh! don't tell anyone the door is opened! :-D
> They've seen how quickly a social network can dry up and are wisely using their capital to avoid ending up like myspace.

...they're using their capital to buy more users. There is no evidence that those users will remain with WhatsApp. They're not "avoiding ending like myspace", they are simply delaying ending up like MySpace. No messaging product has managed to maintain a dominant position over the past fifteen years - they come, and they go.

I don't see how buying WhatsApp diversifies Facebook's portfolio, because WhatsApp competes with Facebook for messaging users. Google buying Nest is a diversifying acquisition, because it brings in talent and expertise that Google doesn't have (hardware design and engineering). The only thing that WhatsApp brings to the table is users, users who use WhatsApp instead of Facebook Messenger.
Yes it does. It tells you that a randomly selected prisoner will be taken to the switch room and allowed to turn one of the switches on or off...and will then be led back to his cell.

There's no option for the prisoners to go to the switch room at the outset; they've just arrived at the prison and don't know where it is. So it would not be possible to meet up there, they have to wait for the prison guards to take them there individually.
I've become increasingly more disgusted with IETF since I found out they have at least a few NSA agents working with them on protocols, and more importantly refusing to kick them out - even after all the Snowden revelations with NSA trying to subvert and undermine encryption protocols:

http://mirrors.dotsrc.org/fosdem/2014/Janson/Sunday/NSA_oper...

Then I find out that they've been working with Cisco on another similar thing to this one for "legal intercepts", a.k.a "trusted backdoors", like we're seeing above.

https://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/Bl...

With NIST being already corrupted by the NSA, and now W3C becoming corrupted by MPAA, too, I think we're seeing the decay and fall of the "standard bodies", because I don't believe the Internet will tolerate these moves. The Internet will ignore them, do its own thing, and make it popular. I think future standards will be built from the bottom-up, and if I'm not mistaken most of the Internet so far has been built that way anyway.
Great, thanks for the links.