skysight-inc/HackerNews huggingface dataset:
"Having a big-tech company on my resume has done nothing but send an endless stream of recruiters knocking on my door"

I know plenty of people who didn't work at a Google/Apple/Facebook with an endless stream of recruiters chasing them. Maybe you have the type of background they're being paid to chase after.

"I always hear 'Well if Google/Apple/FB are willing to hire you...'"

If I hired the wrong person, 'well they worked at google' is a poor explanation for the hiring mistake. I'm sure working at Google can play to your advantage for higher level career goals and some people have done amazing things at Google. I just think people are over-estimating it.
I'm no expert, but I wouldn't say I've seen many YC startups that I would call frivolous. If a product fills a need, it isn't frivolous.
The story of Moto 360 from the man who designed it
I don't know much about US then. Is Europe as far as I know it's not possible to revert a bank transfer once it's processed. So there's no place for fraud.

But if that's the case for the US, what's stopping a thief to send money to an exchange like Bitstamp, buy BTC, withdraw it and then reverse the fiat payment in a similar matter?

And while it's true that on Bitalo you have to handle the fiat payments yourself, but it will be often faster to get BTC that way than to send it to an exchange, wait for them to process the deposit, and only then buy BTC.
Is this just a key to encrypt chat logs local to the phone? I'm assuming they're not using this to encrypt messages in transit...

If it's just local storage, then obviously it'd be easy for anyone to figure out how the app reads the logs. 95% or more of chatting programs and apps do not even encrypt chat logs in the first place.
Just goes to show, you can never stop fighting for Freedom, because they sure as hell will never stop trying to lock you in a [figurative/literal] cage.

It's at least some comfort how far ARM has come the last few years, first Microsoft and soon enough Intel will be, still around and making money certainly, but decidedly behind the curve.

Next time I read about Richard Stallman's laptop I'll probably be scoffing a bit less.
Well then it wouldn't be "royalty free" :) - agreed the sentence is poorly written though. But yeah, it's per dev
So, you didn't address the problem of "There's no obvious raytracing algorithm." All of the above algorithms have tradeoffs that make them ill advised in some sense. None of the above algorithms can handle displacement mapping or dynamic scenery with any speed. Get back to me when you solve those ridiculously combinatorial problem—any object can interact with any other object. And when you can animate objects in constant time between frames (as opposed to, at best, O(log(n)), and at worst, O(n)), maybe it'll be useful for realtime.
Not really. No matter what or how many keys they used, someone who stole your device could root your phone and determine the key.

Unless they did something like require the user to enter a master passphrase every time they started the app, then there is no real way around this.
openssl s_client -connect <hostname>:<port>

Also for conversion of certificates to different formats and removing passphrases from existing certificates.
Assuming that raw talent is equally spread among races, and that education is equally effective for all races, then a meritocracy should have a racial diversity that is the same as the larger population's.

I consider the first assumption (equal raw talent) to be quite probable. I consider the second assumption to be implausible.
Hey, I'll be out there next week; I'm in SFBA all of next week.

So: see you there. :)
I really wish we could be more pragmatic about the lack of diversity in tech. Do we really care about "diversity" or do we care that we are losing out on potential talent? And why is it always that those wringing their hands over the situation (so often non-programmer outsiders) seem to have their own axe to grind? Could it be because the valley is filled to the brim with money?

I'm in it to win it. I'm not here to help somebody else get ahead. Not that I want to kick anybody on my way to the top but this industry is very competitive. The lack of women, racial and sexual minorities is terrible and unfair and it should change, but I'm more concerned that we are shutting out smart, creative workers. In the end, isn't that the point of our (supposed) meritocracy? Diversity must come from within our community and for the right reasons, not out of the terror of being shamed by a self-appointed guardian of righteousness.
> But Tesla is a good example of starting reasonably.

The Tesla Roadster was first shown to the public in July of 2006. By that time, Tesla had already raised (and spent) nearly $60M. Before they sold the first Roadster, they had raised $145M including $40M of Elon's own money.

Plowing $150M into a car company before making a sale isn't remotely reasonable.
Video depicting last 1000 years of border changes in Europe
This is really cool. I initially thought from the name that this only supported one type of chart (variance) but it actually has line, bar, scatterplot, dotplot, boxplot and range. I couldn't see it explicitly stated but I think you could build your own charts as well. https://variancecharts.com/examples/

Also, the pricing and licensing model seems right on. As a consultant, this is the cost of a couple of billable hours. I wouldn't hesitate to use it for a client project where they needed these kinds of graphs. https://variancecharts.com/examples/
Fake Tor browser for iOS laced with adware, spyware, members warn
The sheer number of varieties of this game astounds me daily.

This one is pretty fun to watch though. ;)
Haha, I got a nice overflow when the score reached 68719476736.
This. I don't think companies that are fighting for qualified employees are turning down candidates because of color. I'm in a CS program at a university and I can only think of a few CS students who aren't white/Asian/Indian. The issue isn't with hiring, but with early exposure and education to all races/genders/whatevers.
Can someone compile a list of all the versions of 2048 that have come out in the past several days? I have an addiction.
I think you just started one.
Alright, I can agree with that.

Once again though, meritocracy would only mean equal opportunity and not necessarily facilitate any particular effort for equal representation. A system can still be meritocratic (although I'm not saying ours is) while social influences still skew the demographics.
I'll addressing two things from your post 1) is there a better way and 2) show me the defect that you fixed.

1) There definitely is a better way. It involves engaging with your potential long-term officemate for longer than a 45 minute face-to-face session. Have them write actual, working code (or whatever... depending on their intended role) -- maybe even pay them for the time they spend on this process with you, so they don't feel like you wasted their time if you decide not to hire them. Basically, approach this function with the same level seriousness and goodwill that you'd bring to any business dealing with people outside your company.

What is that you say? You don't have time for that style of hiring process? Well you can either have a better process or a fast/simple process for judging people for long term compatibility. People generally don't get into long term relationships with other people after a 45 minute (mostly one-way) quiz.

2) Do you really expect a working professional to remember the details of each bug that they fixed in their career? Won't it have been better to simply concoct another piece of code with the bug they fixed and see if they can spot it with the familiarity of someone who's seen something like it before.
Re: "shipping a csv" -- this market is exactly what the Bloomberg App Store caters to. Bloomberg takes care of all the distribution, billing, discoverability headaches for your niche play and you just focus on the product. The nice thing about the store is that all apps are monthly recurring fees. There are no 0.99 downloads and some are quite expensive.
In terms of huge blows to WhatsApp, nothing beats the original[1] leak which showed that WhatsApp was using IMEIs as a password.

That didn't stop WhatsApp from growing into the behemoth (that its acquisition price states) it is.

[1] http://samgranger.com/whatsapp-is-using-imei-numbers-as-pass...
Wrong. If a phone can only retrieve the key for it's own number (e.g. via SMS request), that's orders of magnitude better than the current case where one key can decrypt logs for any arbitrary number. Each SMS request could generate a new key, so even if another app on the same phone does it, it won't be able to get the key to read the logs.
Thanks, gus. We're working on some fixes for IE as we speak.
I used to lead the BB MSG product lead, I can safely say from the inside the communication aspects were absolutely viewed as the killer feature. Simply all US Bond trading is done over the BB MSG system - this is a trillion dollar per day plus market and you must have the BB terminal to interact - the $20,000 a month is cheap to be able to make daily trades of multi tens of millions of dollars. Whenever we made a change to the code, we were told: if you break MSG, when the Wall Street Journal writes its front page story on why the bond market came to a screeching halt, you name will be mentioned.

To give another example, in an annual product planning session, the metric was asked of product managers: how many of our user base would go if we removed your product area. The Derivative team got up and said 50,000. The MSG/Comms team got up and said All of them. The Derivative team replied, we were taking a guess on our number, the MSG guys are absolutely right, we lose the entire business without Comms.
From my perspective, getting rich from sex, gambling or drugs is almost like cheating.
Which is military grade! :)
A VC's job is to take in money and return even more money. Not to be ambitious. Pension funds don't care about creating innovation.
Of Being Numerous
Yes. That is, for example, how Firefox stores passwords (if you enable the master password option).

I imagine they haven't bothered to do this for usability reasons, since people would have to type in the password every time they start up the app. Adding it as an option certainly couldn't hurt, but even then I'm not sure there's a point. Most people leave their phones on most of the time, and WhatsApp is probably going to be running in memory that whole time, in which case someone who steals your phone will still probably be able to read all your chat logs anyway.
First time I hit the page, I got a https connection error, ssl_error_no_cypher_overlap

Tried it again and it's fine.
> The problem for exchanges especially (maybe to a lesser extent for "brokers" like Coinbase) is that they _need_ exclusive access to your bitcoins, to ensure there's no way for you to take them before they can give them to the other party in a trade.

The decentralized order books in Ripple show this is solved. We don't need a central authority to match trades, no more than we need a central authority to prevent double-spends. When you post an offer to trade XRP for snapswapUSD on ripple, the XRP remains 100% in your control (until someone takes your offer and a trade is matched). Ripple shows how trade matching can be implemented as a decentralized cryptographic "contract".

Of course, this won't work with bitcoin as the native currency until somebody implements trade matching as a bitcoin contract (and exchanges like bitstamp issue bitstampUSD as colored bitcoins). And even then, there's still the fact that bitstampUSD is centrally issued and could all turn worthless the moment Bitstamp stopped redeeming it. And that has another solution (coins which track fiat-price in a decentralized prediction market).
The problems with getting software onto traders computers are simpler than this article leads you to believe.

Insurance. Getting insurance to install a .exe as part of a banks trading process is insanely difficult. The banks aren't interested in going down that route.
Where can I find the any-key?
I still don't get Discourse. I went to the comments, saw a comment, read a couple of replies, scrolled down, and then I found the replies again. It just doesn't make sense to me. Is it ordered by recency, or is it threaded? It sort of seems like the worst of both worlds. HN comments make sense - parent comments ordered by score, with sane threaded discussions underneath.
There's some noise, but I think http://www.reddit.com/r/2048/ is the go-to place.
The security flaw here is that there aren't any access controls, not that they use the same symmetric key everywhere for local storage. Even if they store the logs in plaintext, other apps should not be able to read those logs.
You should consider the advantage you have of being aware of the industry at all. Not everyone has that opportunity. Some portion of responsibility devolves on you to share the (not entirely meritocratic) good fortune you've received. As the song goes, check your privilege.
mission accomplished, probably.
Yiren Lu on the Angst, Perks and Failures of the Tech Industry
Half the price per month of UE4 and zero royalty? That can't be right. What's the catch?
Awaiting Doge and Dr. Who versions.
But it's plausible as a fast, minimal entry point to electric vehicles in general, potentially attracting more capital to expand a proven product line, instead of trying to start with a car. I hope they're planning something like that.
This was posted earlier and it seems to be fud.

https://news.ycombinator.com/item?id=7416110
So it this a newer version of the old key from this study?

http://blog.digital-forensics.it/2012/05/whatsapp-forensics....

Or is this the key they use to transmit the data with?
Randomness is not any physical entity and thus "entropy" here is just a word for data that cannot be derived from a system state. When it is not available, the attacker still has to know the seed of kernel's PRNG to be able to re-create the keys you generated in this state. To this end, she/he has to either sniff some impractically large amount of the PRNG output (and if this is possible your machine is likely already compromised), be able to set it to a given value (see above), or to know it from some prior knowledge, for instance has an image of the VM you use or knows the default value set on boot when no entropy is available whatsoever.

In other words, if the seed hasn't leaked it is easier to brute-force the key than to fit the CPRNG output that generated it.
Forks of a single block ("orphans") are expected due to block propagation taking a nonzero amount of time.

That's very different than the case where say 50% of the network is running bitcoind, and the other 50% is running btcd, and some transaction triggers an edge case in either implementation that causes one implementation to accept the transaction and another to reject it.

I think multiple compatible implementations would be great to have, but we don't have them at the moment, and in the meantime companies handling huge numbers of bitcoin transactions need a solution that works today. So I applaud the bitcoin-core team for catering to the increasingly common use case of using bitcoind only for consensus.
I'm half white and half Korean. This sums it up.
In general, discussion about encryption is usually bad because most people don't understand all the underlying principles of encryption. Encryption is something everyone uses so everyone has an opinion on it, but very very few people understand its implementation. When you have a blog post about encryption, 99% of the people commenting on it probably won't be making the right kind of comment.
http://maratis3d.org
Somewhat ironically, Diaspora itself has had a staggering number of critical vulnerabilities found since its inception. Numerous persistent XSS flaws were found in the first release.
> religious

I was even giving you the benefit of the doubt that your position wasn't based on religion. But now you've explicitly admitted that you want to inject your religion into law. Your evil knows no bounds.
This is solved with a variety of methods. I prefer KeePassX stored in Dropbox and available on my phone.
Some links are here https://news.ycombinator.com/item?id=7325545
I really wish I had had a chance to read that before my interview. Knowing what the interviewer is going for when you are coding helps tremendously.
Black and hispanics make a combined 30% of the U.S. population but 7.14% of tech workers, if we were a true meritocracy you wouldn't expect those numbers.

Of course, this isn't the fault of the tech industry. People in lower socio-economic classes are not exposed to technology at early ages and often don't have the ability to go college.

So if tech is a meritocracy it's a meritocracy for people in certain classes.
agreed. but coinbase isn't a bank/authority. it's like letting some random company holding your money. meh.
Cryptographically speaking you are completely wrong :) You need both: good algorithm and enough entropy. Ad absurdum if you read 1 one byte and feed it into your CSPRNG, you may get up to 256 random streams of 4096 bits, which is easily enumerable and hardly secure.
I'll do that once there are 2048 versions of them.
I have a number of search terms related to a startup I'm working on listed with Google Alerts. I haven't been impressed with the quality of the links. They seem taken almost randomly from blog posts; very few relevant links showing any kind of trend.

This looks much more useful for identifying upward bumps in news cycles.

Thanks for the link!
>are Google's autocomplete choices based on what people are searching for

Yes. Much more useful that way. They want to auto-suggest what is the most likely search, not what is the most likely content.
Looks great on screen, but not great (if at all) when printed. Is this being addressed at all?
I have (actually, twice. Once when it was posted sometimes ago on HN, and once now before writing the comment).

What threw me off was that part: "Still, if you insist on never handing out random numbers that are not “backed” by sufficient entropy, you might be nervous here. I'm sleeping sound because I don't care about the entropy estimate."

I was missing the fact that the CSPRNG only needs to be seeded once to be safe, and reseeding is only a "nice thing" that's not really needed. To be fair, the article cover this, I guess I just didn't understand that part really well.

I've got it now, and it actually make sense. Thanks to you, and everyone else that used some time to educate me.
Safer than gasoline. It just burns with a pretty blue flame.
You don't have to be an expert in a field to criticize it's culture.
Are there conventional charging stations? A 20 minute stop on a 4 hour trip doesn't sound horrible.
> What is troubling and reflects the sad status and detachment from reality of the project

A random comment by one Debian developer do not constitute the position of the Debian project. On top of that, consider the subsequent comment that the information in question came from an OpenSSL developer.
Am I the only one who initially assumed "comments" referred to code comments? I was surprised to hear of code comments that are misogynistic, homophobic, etc, although I have read a few that were pretty insulting.
Maybe I should have quoted the site. They list the benefits as 2 weeks of vacation AND 12 days of PTO "to be used however you want" AND 8 paid holidays.

So what's the difference here between PTO and vacation? Can you get an effective 4 week vacation out of it?
The internet is comments. There's nothing else to it.
Genuinely one of the best books I've ever read. It was interesting to realize that the Stoic philosophy was something I had relatively independently come to on my own, so reading this book taught me more about it while also confirming some previous ideas I had floating around.

I recommend this to everyone no matter what their ideologies consist of.
Daz Studio is all about this:
http://www.daz3d.com/

Their (free) app is 90% geared toward using content purchased from their store (not free).
tl;dr it's an ad for his open-core forum software, Discourse.
I have 10K+ and don't have either feature, so probably trolling.

The only milestone I remember hitting was downvoting, around 500.

(Then again, I also have never had flagging power either - I know people get this removed sometimes, but I don't remember ever having had it. Weird).
> "He who foresees calamities, suffers them twice over"
--Beilby Porteus, Bishop of Chester and London, 1731-1809.

Not heard the quote before; thank you.
Are you acquainted with the field and underlying science? If so, could please elucidate your criticisms and make them concrete instead of just throwing about vague accusations of corruption? ("always looking for money", etc.)
Snark begets snark. When someone just types 'srsly?', it's just an appeal to ridicule.
apparently, you find yourself a vet.
"true", but maybe the key was obfuscated... Anyways, it seems that WhatsApp didn't encrypt messages until 2012, then they started using symmetric crypto http://pastebin.com/g9UPuviz
Discovering Two Screens Aren’t Better Than One
Unreal redefined "gross revenue" in the EULA for Unreal 4 Engine, so they are not using the standard meaning that's used everywhere else in the world. Their definition of "gross revenue" is actually something similar to "total retail sales."

It's a dick move on their part. They could, and should, have used a different term to avoid the confusion.
The market might exist, but I predict it won't be nearly as large as you're suggesting unless there is a departure from Unity's model. In Unity's asset store, the real money-makers are editor plugins. Given the effort put into some of the visual assets on the site, I can't imagine pure one-time sales are anywhere near profitable enough to sustain a business. A small indie shop that churns out a diverse array of content, maybe.

Perhaps Unreal will introduce some new ideas there such as a first-come, first-licensing or bidding model. Another idea might be a royalty system.
This still relies on the legitimate app not storing the key they fetched in a public directory so the attacker can read it. You can keep adding layers upon this, but it doesn't change that.
No, that's not how the code works.

The "256 bits" (in this case) are used as a seed for the OpenSSL CSPRNG.

OpenSSL's RSA generation asks for two prime numbers each (bitlen/2) long. OpenSSL's primegen works by iterating over random numbers, here each (bitlen/2) long (of which (bitlen/2-2) are random), looking for primes.
This is a really good book. I think it was promoted on one of the big financial independence blogs a year or two ago and I enjoyed reading it a lot. Makes you think a lot.
I fully expect ARM to take a huge chunk of Intel's sales over the next ten years. And not just in the mobile department, where they already dominate. I mean server rooms and even desktop PCs.
That doesn't invalidate his argument, though. If anything, you could argue that he's more qualified to describe these things, because he's played the game a few times. He's been on the inside. He knows the moves and the motivations.

One can be a hypocrite and still be correct. FWIW, I don't see anything along the lines of "money isn't everything" in his post.
I have flagging, but nowadays to get it on a comment you need to click the permalink button on a post to get it.

And I'm glad of that, because up until now I've sent in 1 legitimate, intentional report and 10 or so cases of fat fingering the button on a mobile device (not catastrophic because of the unflag option, but still...)
Been there, done that, sent the "specialist" on her way as soon as she started rambling about my aura. My issues went away with a switch to Dvorak years ago anyway.

But all of this is quite irrelevant when one is talking about the inherently non-ergonomic use of a laptop that only happens in meetings and hotel rooms.
The same could be said for Paypal I guess.