skysight-inc/HackerNews huggingface dataset:
I believe the weakest link in OTR is its Diffie-Helman key exchange. If you break that you get the symmetric key and can decrypt everything passively. OTR has been using a 1536 bit modulus for its Diffie-Helman exchange since 2004 [1] (The weakest one from RFC 3526 [2]). Seems they are still using the same one today.

In 2004 this was probably a fine choice, especially considering the tradeoff between CPU processing (usability) and security. But considering the NSA scandal, specifically them recording all encrypted communications forever, and Bruce Schneier increasing his key lengths [3], and the ability for CPUs to process higher keylengths without any noticeable slowdown, I don't feel confident it is strong enough today.

Other than this gripe OTR is amazing and everyone should be using it.

Edit: xnyhps's post [4] concludes that only a single "cracking" of the 1536 bit group would need to occur to then decrypt any past or future OTR conversation "instantly".

[1] https://web.archive.org/web/20041215062523/http://www.cypher...
[2] http://www.ietf.org/rfc/rfc3526.txt
[3] https://news.ycombinator.com/item?id=6376954
[4] https://blog.thijsalkema.de/blog/2014/01/17/misconceptions-a...
Seems to be very similar to Scalatest. What's not a bad sign.
Two explanations came to my mind:
1. East - the direction where the Sun appears - was located on the right because the right hand had a special meaning for people.
2. South was located down (behind the back of someone reading the map) to provide the maximum amount of light to the reader.
I'm clueless, so I'll just ask: is this made for software-defined networking?
Two observations:

1. How's simple (one could say crude) these looked back in the day - yet that didn't prevent people from signing up.

2. How quickly things age online - it only takes a few years for your UI to look ancient.
Somehow I don't think a 1 and a half metre long gun is that appropriate for self-defence, if you're worried about people creeping up on you. Maybe I'm wrong, but I can't see much in the way of a quick draw being possible. I guess when you hear the front door being broken down you can be prepared with a robust response.

Or perhaps he has a tiny train for making his getaway, wallace and gromit style?
Thanks for letting us know your stance on this but you have got the reading wrong. Let us clarify.

When we say hobby projects, we don't mean open source projects at large. We mean those charting libraries that an enthusiastic developer decides to build over a weekend, as a learning project, and release to the world. Developers in other organizations looking for a charting library come across it, pick it up and start implementing it in their applications. The initial results feel good, but as soon as the developer moves onto implementing advanced capabilities, they start running into product limitations, cross-browser compatibility issues etc. And when they go back to the creator trying to get a fix for it, the developer has abandoned the project because it was a hobby project for him and his day job is keeping him busy. At this point, if you want to stick with the same product, you've 2 options; either extend the project yourself, or find someone who can do it for you - both of which could be distraction for your main development, and delay execution for you.

We have been in business for over 11 years now and have seen a lot of players like this that come up, and hence our stance. As an enterprise, when you are building an application, charting might not be your core strength. And hence, when you are looking for someone to take care of that, you need to find yourselves an enterprise-grade charting component. Not only does that cover you on the product part of things and meaningful implementations that can inspire you, it also gives you extensive documentation, assurance that it will continue development and that when you have a tech query, you can go to a support team that will be there when you are running on a tight deadline and need a fix.

That being said, we are not against open source at all. A good chunk of our own development tools and infrastructure are open-source. There are some good open source charting libraries as well, which we have listed in a competitor comparison table on our website at www.fusioncharts.com/javascript-charting-comparison/.

Here's a good read on when choosing a commercial library, instead of open source library, for a niche purpose makes sense - http://www.codeproject.com/Articles/581146/8-reasons-to-choo...

But, at the end of the day, the decision is in your hand - for, developers are the king-makers!
Once upon a time it was a giant star that rotated once every dozen or two hours. Eventually it ran out of fusible material, and gravity pulled it all in until it became solid neutronium.

Most of the angular momentum stayed with the core, and there you are.
The meaning of this statement is that bubbling is basically covering up more of the body then the bikini. So, technically a bikini reveals more than a bubbled bikini.
Funny that overrated movies is dominated by Twilight. I suspect boy-friends who were forced to watch them together with their girl-friends are responsible.
I just find I end up spending quite a bit more time fighting with git than I do svn. It may be anecdotal, but I find my workflows are far more error prone in git, and consequently they take a lot more overhead to ensure they are right.

What you say might be true by at least accepted theory, and it is true that command-line git (and git has a reputation of a bad command line) is the only dcvs I have worked with but I don't see a way around the fact that since you allow more complexity in interactions between repos, this is going to have more overhead. Even you seem to acknowledge twice as many commands for version control management for the simplest cases.

I am not really anti-git even. As I say I use it for some things. But I am not at all convinced dvcs is always the right tool for the job.
Bit Price – A RubyGems Primer for Beginners
reddit won't load for me now, but it's where it began in /r/pics I believe, I remember the guy who mentioned it he's a Mormon and would do this to Sears catalogue models, it was his only source of porn.
I'd be less annoyed if his version was indeed better but he just replaced the graphics and bumped the physics values. So I can't accept that his version was "more fun".

But I agree that there are things I didn't consider. And I learned a lot because of this event.
Only if you make git that complicated. Steps 2-6 can be replaced with:

git commit -m "commit message" file1 file2 ...

When you use a tool inefficiently, don't blame the tool.
As a hobbyist and freelancer I don't use any of these 'bigger issues' (saner function support, optional strong typing, named params maybe, operator overloading.) for my casual projects.

So no, I'd benefit the most with a cleaner syntax than with cooking unicorns in fairy sauce. And I believe 80% of casual programmers agree with me.

Pareto wins.
Less Commonly Used Unix Commands
A well-reasoned argument about pain points you've experienced with php! I have also been bitten by this non-feature and wish I had the time to learn C well enough to be able to contribute towards these sorts of things.
That could have been an issue with the PARC machine that OP claims started the trend, but with any OS after that (including the original Mac), you can specify the cursor hotspot when designing the cursor (look at your I-beam cursor for instance)
This is true for most default cursors, but custom cursor file formats let you change the coordinates of the active pixel (see: 'left-handed' mirrored arrow cursors, or crosshair-type ones.). The link 'finger' cursor on most OSes is a default example where the active pixel isn't the top-left one.
In the windows 3.1 tool I mentioned above, you could actually choose a custom click point to be any point on the cursor.

One good prank was to set someone's click point to outside the cursor.
Symbian was a shared platform. Maemo was too. As was Windows Mobile.

It's not clear if Android was offered to Samsung as a base for a shared platform (it's often mentioned that this is the fundamental reason for Android existing, but people seem to assume Samsung wanted their own OS, and the Android folk may have been desperate enough for cash to go that way) but if so it wouldn't have been a particularly crazy idea.

And even Samsung's Bada shared elements of Linux and HTML5 platforms, so it's not a total silo.
That's still a lot more verbose than svn and even if you do that, you still have only managed to reduce the number of commands required from 3x to 2x what svn requires.

Also wouldn't you agree that git has a much steeper learning curve than svn? What is this due to if not the added complexity?
It’s hard to know whether or not this is interesting, since the article is very vague and the paper is behind a paywall: http://www.pnas.org/content/early/2014/02/04/1310939111

The claim that Goldberg polyhedra are not really polyhedra is especially puzzling. Presumably the paper explains this better!
True, Perl 6 is an amazing fiasco! Every bad thing in software has happened, so it's the world's most sensational counter-example! Stay away! Hide your kids!

P.S. But from close-up, it's the think-tank and test-bed of potential Perl 5 upgrades. Even if Perl 6 never ships, it's contributed tons of shipping code for Perl 5. Yes, it's hard to understand that from a distance, and it's not a PR dream, but oh well.
ConceptCodify free for limited time – online cardsort for UX
1. The original article: http://theconversation.com/after-400-years-mathematicians-fi...

2. It actually looks more like a redefinition than a new discovery: "It may be confusing because Goldberg called them polyhedra, a perfectly sensible name to a graph theorist, but to a geometer, polyhedra require planar faces "
I created a tool called PuPHPet that makes Xdebug installation as simple as clicking a checkbox. Maybe it can help you?

[0] https://puphpet.com
Show HN: Async JavaScript in less than 3kb
We're not attacking RaphaelJS or any of these libraries. In fact, we use a modified version of RaphaelJS as the core, which we've open-sourced at
https://github.com/fusioncharts/redraphael

These libraries are great to start with, and works well for many use-cases. Just that when your needs expand (think of additional chart types for specific use-cases, cross-browser compatibility including IE6/7/8, direct support from developers, assurance of continued development and fixes, meaningful implementations for different business scenarios etc.), our customers believe in us!
Ask HN: Working Remotely
Hey HN,

Recently, I've been dealing with a lot of personal issues (break-up and discovery of a mental illness) that are pretty rapidly wearing me down. Living in the same apartment my girlfriend and I shared is not an option anymore as it is driving me nuts, I need to get away from Eastern Canada. Luckily, I work for an incredible start-up that has been offering awesome support and have always been here for me so I've been looking at the possibility to work remotely from somewhere else in the world in order rejuvenate myself and clear my head.

Now this is where the community at HN will come handy, what would be an ideal destination that would be relatively cheap, offer an okay internet connection, that does not block VPN and if possible has a certain start-up community that would allow me to meet people? To those that have tried it, has "exile" brought you a certain sense of rejuvenation? Any other tips to share?

Thanks.
Building tooling like this seems a no-brainer as far as language uptake is concerned.

Testing libraries offer a low friction, low risk way to introduce new JVM based languages to an existing project.

Scalatest was certainly Scala's "foot in the door" for the last project where we managed to sell the switch from Java to Scala.

On a related note: I would really like to see an in depth comparison between Scala and Kotlin. The two seem idealogically and syntactically similar.
> Understanding the technology in a deeper way is a lot more useful in the long run.

I don't know about your situation specifically, but in general....it may be more useful to you personally in the long run, but the person that signs your paycheck might be more interested in only what's most economically useful for the company while you are employed there.
Fair enough, although I suppose there are other costs besides the GP's salary - machines, rooms, medication, assistants, bureaucracy...
OP here - came across the site while looking for good cardsort software. Really like ConceptCodify, and it's free at the moment.

If anyone wants a demo (and to help with our cardsort!) try here:

http://conceptcodify.com/studies/e7xoz2be/via/6zebmkmt/
So they want geeky employees. They ask geeky hiring questions. Not a lot of women are geeky. Conclusion: hiring practices are biased against women.

I guess that's technically a correct conclusion, if many women can be placed outside the 'geeky' box. If you have an axe to grind (and face it most essays begin with that) then you can pound out 1000 words.

But what's actionable about that? Dropbox should succeed in some other way? Because they are succeeding, spectacularly. And changing their fundamental practices could arguably endanger that.

No I'm not all about the bro culture; I'm about not twisting culture to fit your favorite PC issue. 'Geeky' is working for them.

I'd suggest doing what Stanford does (did? in my day anyway). They work hard to find minorities that fit their culture. Instead of bashing the culture as the problem. Because bashing is just not helpful; and because they're starting with demonstrable value that could be destroyed by misdirected reforms.
d3.js is a great library and we love the capabilities. However, there are clear use cases for both, which have been highlighted @ http://www.quora.com/What-are-some-capabilities-of-D3-js-whi...
I remember one called Microangelo.
He is The One.
Better to win than to lose
I think the sync is based on firefly physiology.
Logo simulation: http://education.mit.edu/starlogo/samples/firefly.htm
"About 10 letters per minute."

This is a OpenLibreNet telegram. Full stop.
The second answer is pretty good.

Benefits:

-Works offline

-Branches/Merging

-Fork another's work

-Collaboration

-Light weight and fast

-Flexible

-Tooling (github)

Drawbacks of Git:

-Hard to learn if you know a centralized SCM.
Well, "years" might be a little bit of exaggeration. I mean, there always is something more to learn even after 10 years of experience, but it shouldn't sound as terrifying as you make it sound. To be somewhat good you need only few basic skills (which that book doesn't teach you, as I already said in another post, but there are other books and courses anyway), not very long period of pretty intense practice and yes, here your life-long journey begins, but you already can be quite confident about your drawings.

It's like, you know, that sushi-making stuff in Japan (as well as many other things): it's considered very difficult and you need many years to learn how to make sushi and there are some 86 years old master that'll tell you how he even now dreams about sushi and improves his skills and whatever. Yet you can take 3-hours long lesson somewhere in Europe or USA and start making pretty decent sushi for yourself.

Or programming, or everything else. Anyway, making some real work of art is more about your personal qualities like imagination than about "life-long learning". But there's always something more to learn nevertheless.
We'll WIN!!!!
10 Top Relationship Strategies For Startup Leaders
Firefox has an odd RSS reader, called Live Bookmarks, which leverages the browser's bookmarks feature. I use it to access my tab categories in pinboard; each tab has an RSS feed, and each combination of tabs has an RSS feed.

When you click on a feed to subscribe, it places the feed in the bookmark system and when you see it in your bookmarks it shows an RSS icon.

To see what happens with this XKCD, I cleared my cache and history and everything, then subscribed to the feed, then clicked on the latest entry in that feed, Frequency.

It was interesting to watch it develop. It starts as a grid of elements, each displaying the word FREQUENCY. (You can see the same effect by forcing a reload of the page, but I wanted to see how Live Bookmarks would display the page, hence the tedious trip report to this point).

Each element's gif gets turned on row by row and (I think) column by colum. The first row is turned on immediately, the second soon after, and the rest of the FREQUENCY elements are transformed into animated gifs little by little, row by row.

If I close the tab and come back to it, they're all animating right away.

So that's how Firefox Live Bookmarks RSS reader handles this page.

Side note: some of you will have seen the effect of transforming from a grid of FREQUENCY elements to animated GIFS right away when you viewed the page. Others, like me, might never have seen it. I'm one of those people who queues up a handful of tabs to read, and then goes through the tabs one by one. By the time I got to my Frequency tab it had already gone through its transformation.
Brought to you by the same country whose people have chosen last week to limit the right of free movement of European citizens. This is not a good time to start a technology business in Switzerland.
Laravel: PHP Framework for Web Artisans
OTR uses DH in a ratcheting protocol that requires attackers to continuously break new DH exchanges; it's not like TLS, where one exchange at the beginning of the session gives you the whole session.

Also, while a 1536 bit modulus isn't the best you can do in 2014 (we should all be using curves now instead of doing DLP crypto), it's probably not within reach of attackers right now. Effort doesn't scale linearly from those 1024 bit factoring problems.
... or, more likely, the MITM is capable of spoofing selected google searches as well.
I disagree. Going to Google was good for Android, but not good for Samsung.

While it is not clear that Android under Samsung would have become big (likely not), it would have been an effective blocking move for Samsung, delaying and possibly thwarting Google's dominance in the smartphone market. Samsung had an opportunity to control Android (and possibly kill it). Instead, Android went to Google who built it into a major powerhouse... and now (a) Samsung is heavily dependent on that powerhouse and (b) has very little control over that powerhouse.
Google Here and Now
Makes sense to me. For example if you play warcraft 3, and you visit Shadow French all the time. You are most likely a hacker. Obviously that doesn't seem to be the only check they do. But it's a very easy one. And they would only need to keep a list of common "game hacking" sites and check it.

So far there seems to be zero evidence that this is used to send data to valve.
How to create secure passwords and safely store them offline
A First Look At Echobox, An Analytics Tool For News Sites
And to think that I was turned down as a candidate for a programming job because I wasn't visible enough on the internet (contribute to trending github projects or write a blog). This is the exact style of blog you see all the time and I couldn't bring myself to even parody it.
"I agree that you’re probably reading into this too much. But that’s okay—by posting it up to HN, you were able to get a larger sampling of devs to run it past!"

That's certainly true :)
They look particularly good expanded out to fill the page:

http://hoog.li/g?g=http%3A%2F%2Fwww.viralnova.com%2F3d-images%2F&cimw=480

http://hoog.li/g?g=http://www.mymodernmet.com/profiles/blogs/3d-gifs&cimw=320
The Legal Status of Bitcoin Globally
It is still a million times easier to establish a business and get residency in Switzerland than in the US for Europeans. So by that standard, it would be an even worse time to start a technology business in the US. And the limits that were voted last week are minimal and temporary.
Crowd-funded HIV vaccine project sparks debate among scientists
its really an awesome gif collection. You may also like: http://www.thephotomag.com/2012/12/collection-of-30-still-ph...
Ask HN: Which git commands do you use most? (counting command included)
Here is command that counts them:

// Updated. HN filters changed the line, so see the code via Gist:
https://gist.github.com/anonymous/9053693

Here are my results:

49 git status -s
15 git commit -am
12 git push
11 git checkout
10 git add
7 git branch
5 git rm
5 git mv
5 git diff
3 git rm --cached
3 git rebase
3 git commit -m
3 git checkout -b
2 git rm -r --cached
2 git clone
2 git branch -v
1 git status -ss
1 git status
1 git satus -s
1 git rm --chached
1 git reset --soft
1 git reset --hard
1 git reflog
1 git rebase --skip
1 git rebase --continue
1 git push --set
1 git log
1 git diff --cached
1 git branch --remote
1 git branch -d
1 git barnch
1 git add -u
1 git add --all

What are yours?
That's a good point actually, if the check is done locally I'd be curious to know which domains they're looking for. If someone could get the list of hashes I'm sure it wouldn't take long before someone manages to bruteforce them with a rainbow table.
I refer you to the classic "
Erlang Style Actors Are All About Locking "

http://james-iry.blogspot.de/2009/04/erlang-style-actors-are...
Name and functionality inspired by Spec# [0] ... just a bit? Sample Spec# code:

int ISqrt(int x)
requires 0 <= x;
ensures result*result <= x && x < (result+1)*(result+1);
{
int r = 0;
while ((r+1)*(r+1) <= x)
invariant r*r <= x;
{
r++;
}
return r;
}

[0] http://research.microsoft.com/en-us/projects/specsharp/
Fuckers, saying sign up in the homepage and after you "sign-up", we'll be in touch.

Good luck trustin them with your data.
Can somebody weigh in on the feasiblity of cracking Diffie Helman? In Cryptography Engineering, Schneir et al say "there is no known formula" for computing x & y -- but this is a different kind of problem than ciphers, and a suitably advanced mathematical formula could potentially be discovered. It seems to me that the NSA are probably pretty advanced when it comes to prime number mathematics, and it's highly likely that they have teams of cryptographers chasing exactly such a formula.
No. Honestly, software defined networking is the idea of replacing all of your networking staff with a very clever distributed Java program. Half the world thinks this is genius and the other half thinks it's a facepalm.

Network Functions Virtualization is the idea of replacing networking boxes (Cisco, Juniper, Ericsson, F5, ...) with virtual machines running on your own PCs. This is basically a "private cloud" but with emphasis on doing networking in a way that doesn't annoy ISPs.

Rest assured that Software Defined Networking will be redefined to mean whatever the next good technology turns out to be :-)
It's unauthorised access to the computer.

As I understand that's unlawful in USA and UK at least.
Android would have become a Samsung proprietary technology either merged with Bada or replacing it. It would be completely irrelevant today.
See my response to gkya's complaint about his feed reader. Firefox includes an odd feed reader called Live Bookmarks. It almost certainly works differently from your feed reader, and implies a different "workflow."

One thing it does nicely is display things properly, because it (the "reader") doesn't display anything at all, it just points to an updated feed. When you follow the link, it just goes to the page and displays it like any other page.
Wouldn't it be possible to MitM the SSL traffic by using a self signed certificate? Does Steam use its own CA list or does it use the one from Windows?
We owe so much to xerox, did they ever make money off all that R&D ?
Artisurn.com was launched one month ago and I've had 3 sales so far averaging $150.