skysight-inc/HackerNews huggingface dataset:
Fair enough, it was the secpxk1 curves that were broken in OpenSSL --- although that was a DSA vulnerability! It relied on a partial nonce leak! You're right, but I declare my wrongness to be defensible in this case.
Easy setup and integration so far!
nope, unfortunately it's just your DNS cache.
This presupposes that engineering companies don't (can't?) do bleeding edge research.
It doesn't have to exist outside of the state:

https://en.wikipedia.org/wiki/Night-watchman_state

Whereas currently 86% of people in federal jail are there for victimless crimes:

http://www.policymic.com/articles/8558/why-we-need-prison-re...
Sure, but this is something you don't get wrong if you use a GCM library. It's like my take on ECC and forward-secrecy: you're right, it's not an intrinsic property of GCM that it avoids side channels (the opposite, even), but in practice it guides developers towards implementations that are less likely to have them.
This is as simplistic a representation as the one you're contradicting. Government is necessary for capitalism to work, the question is how much it should do beyond the minimum (law enforcement, etc.).
Because there is no shortage of anti-copyright activists right now. It's an old issue, and this video offers nothing new. It doesn't even present the info in a nice, quick, easily-digestible way (which is pretty important for something to go viral). His jokes just make it look like a video made for people who already agree with him.
Do you mean when will this project launch?
So, uh, does this mean that NSA has an internal LiveJournal instance?
Craftsman multimeters are red. Hahaha.
So individuals actually lose free speech rights when they unite with other individuals to form a corporation?

If that is the case, it restricts the rights of the poor relative to the rich. A rich individual can afford a TV advertisement campaign on his own. A poor individual needs to pool his money with the money of other like-minded people to be able to afford that same TV ad campaign. The common way for many people to pool their resources to act for a unified purpose is to incorporate.
I remember this being here as a SHOWHN a few months ago.

Now it's YC14? Congratulations.
That's cause apple is selling a lifestyle, like Starbucks. Others a fine with just selling you a computer and don't need glass box retail locations to do that.
2048craze
A random game among many forks of the 2048 tile game.
The code is on github (https://github.com/Keirua/2048craze), where you can find the complete list of games if you don't feel like refreshing over and over again.
Xbox Apis have never been as low level as other consoles.
Another Google Black Project...
Sorry about that, the website isn't quite finished yet. In our next iteration, we'll sort all that out. Thanks for your feedback!!
you do realize the games still the same as 2048 right? just look at the colors of the tiles.

the only thing randomized is the numbers on the tiles
This is incredibly cool. I'm definitely going to have some fun playing with this.
I assume that "local inference" means, in practice, "no let-polymorphism". That's what causes most of the headaches with extensions to Hindley-Milner (including the undecidability of subtyping).
It's not, actually. The Mars Exploration Rover won't work underwater. That doesn't mean it's unreliable.

When your compiled C program sometimes runs on x86 and sometimes doesn't, that is the definition of reliable.
> There is a lot of truth in the idea that doing something like colonizing mars could do more good for humanity than giving people enough money to eat for a day or a week.

How about doing neither and instead use the money to solve some of the problems the earth suffers from today? Colonizing Mars, seriously, wtf ...
Swagger spec for rest apis
Maintaining your own VM is no big deal. Compared to Facebook, HHVM is a tiny codebase. A team made of relatively small number of people (high quality, but low quantity) can and do maintain VMs like HotSpot and V8. LuaJIT is maintained by a single person.
Please read my follow up response (https://news.ycombinator.com/item?id=7439468). The legal environment is one specific context. I don't go around saying 'syntax error!' to anyone who misspeaks.
Moved from the swagger core project which had language specific details.
I believe that's correct, though as I don't drive I don't keep up with current practices.
From the context of this, it sounds like this QUANTUM system has impacted way more than the reported 100,000 computers around the world.
Do they really have a trademark for yellow multimeters in e.g. Tanzania?
I'm really interested to know what his process was, since he didn't seem to actually know the product he was subtracting 50 from.
I mean if I want to buy one, how soon can I get it?

And yes, I know the kickstarter campaign hasn't started yet.

And I almost forgot ... this looks awesome.
Twilio is sure complicated. It's not at all for the end users who are just looking for a ready to use service or app. It's a lot costlier.
What if you could build a castle on top of a highway?
My advice is IMO much simpler. Feel free to write your own crypto code that uses a SSL connection. It might not be secure on it's own, but in the small windows where SSL happens to be broken you have a little extra security and even if you just do XOR your still basically safe in the first place.
Microsoft adopts Mantle but calls it DX12
You can actually end up less secure by layering additional crypto inside of SSL, particularly if (as is likely, given what most people are afraid of in SSL) your crypto involves endpoint authentication.

What Colin wants to say in this document but couldn't at the time (because it didn't exist yet) and won't now (because of false modesty) is that he thinks you should use spiped instead of TLS. If he'd say that, I'd agree that was a reasonable choice.
Sorry, yes. I was mixing up a few things in my head.
Can anyone point me to a good desktop tool for creating Animated GIFs. I've used LICEcap but the "quality" isn't as good as other methods I've tried that involve more work.
That 60% figure pertains to average humans. Those skinny hipsters are mostly calcium :)
The GHTorrent project (GitHub's data from a firehose)
OpenGL is not actually open source.
https://www.opengl.org/wiki/FAQ#Is_OpenGL_Open_Source.3F
"Admirable" in a very narrow sense, perhaps: they've snowed both Sparkfun and the general public, and have strengthened a dubious trademark to boot.
Ron Dennis is only a minority owner in McLaren.

The dealership is fully owned by the company as far as I know.
first, good luck to the guardian on this endeavor! :+)

second, i can't help observing that efforts to use
contenteditable seem to start with a rush of success
-- as the early results are always very impressive --
but then seem to quickly bog down in the particulars.

bug-reports come in which are difficult to reproduce,
typically originating from idiosyncrasies in an o.s.,
or a browser, or (in one thorny case) a _combination_.

and although people have much enthusiasm for solving
these glitches at first, the slog is generally endless,
and, eventually, it wears down even the most determined.

at least, that's what i have observed, enough so that
-- once i started experiencing the bramblebushes too --
i pushed the contenteditable strategy off to the side.

which was easy, since i've been a long-time supporter
for light-markup. no, not markdown, since that thing
is too primitive, and forked, and fragmented nowadays,
and will give you a big dose of misery down the line.

i built my own light-markup -- "zen markup language",
extension .zml, based on the project gutenberg corpus.

i have also built a phalanx of e-book authoring-tools
over the last 20 years, and it's all come together now.

the trick is making an editor that will be acceptable to
both the light-markup adherents _and_ the wysiwyg folks,
and i think i cracked that nut. i'd like your feedback
on pre-release versions of some new stuff i'll have soon.
e-mail me at bowerbird@aol.com if you'd like to play...

and again, best of luck to the guardian people on this!

-bowerbird
Twitter blocked in Turkey
I think I went to google.stanford.edu for years after google.com existed.

Those were the very end of the days where I could spend hours following links to the corners of the (much smaller) WWW. Now, if I let myself go down those holes, it happens on Wikipedia or Youtube.
"But when we ask [ISPs] if we too would qualify for no-fee interconnect if we changed our service to upload as much data as we download there is an uncomfortable silence."
> But if you blunder for words, punctuate incorrectly, spell incorrectly, and express yourself clumsily, I'm sure to believe you mind is cluttered and ill-disciplined.

I write and speak pretty well, but am still ill-disciplined as anything.

> You conceive a big idea, get the whole organization on tiptoes to carry it out, and then you lose interest and go off on a new tangent.

Now that's me.

> You are always living, in imagination, about six jumps ahead.

Now that's definitely me.

> Their active minds can always see two sides to every question; and they stand still while the debate goes on inside.

Now that's definitely me.

> Does he finish what he starts? Geniuses almost never do.

Good news, I am a genius.

Moral: In an ideal world I will never get hired or get success in business. Hell I am doomed for sure.
If you somehow knows what version of the Windows EULA applies to your installation (that's not easy), you should go read it.
If you're on mobile it integrates with your accelerometer. Just rotate your device 360 degrees.
Might be useful in figuring out what the radar signature of such a boat looks like?
The definitive version of 2048.
If you reuse a nonce, even once, then any message can be forged with GCM. HMAC doesn't have this issue, but also doesn't handle nonces natively, which the confidentiality loss for both is the same. On devices which never reuse secret keys across power cycles this is probably not a problem, but it can be in some environments.
Reaching for a stretch goal has a way of solving a lot of problems on the side. The space race didn't cure polio, but it did give us smoke detectors, memory foam, improved water filtration, and many others that I can't list off the top of my head.

Here's a wikipedia article dedicated to them: http://en.wikipedia.org/wiki/NASA_spin-off_technologies

And here's the mandatory relevant XKCD: https://xkcd.com/1232/
https://firstlook.org/theintercept/article/2014/03/20/inside...

https://s3.amazonaws.com/s3.documentcloud.org/documents/1094...
The blog author is not associated with Y Combinator.

But I think you have a point about the choice of image.
Try zooming in and tapping the zoom slider.
1) Its long.

2) Its technical/legal.

3) I'm 19 minutes in and i'm still not sure when we're going to get to an actual argument/thesis/point that he wants to emphasize in this presentation...

4) He's talking to a bunch of yes men/preaching to the choir (by which i mean, he's not persuading, he's putting out an opinion to a bunch of people who already hold said opinion and who lap it up and laugh on cue like congress claps on cue during official speeches...

5) It has the word Linux associated with it.
A pretty good idea but having an element for each frame can make loading gifs pretty memory intense (DOM-wise) compared to just using a single gif element, no?

For example loading a 3mb gif would be something like 330+ frame elements that are being looped.

But I like the idea though :)
Anyone have the full text of the paper?
I would upvote this if I didn't have to log-in :/
Oh thanks :)
Colin recommends CTR+HMAC, which has exactly the same problem. I don't think that's what he's referring to.
Auto dealers blocking Tesla are exempt from consumer protection oversight
Gmail has defaulted to an encrypted connection for over four years years now, including redirecting if you attempt to access over http (yes, even in Firefox). Really the only way that setting could have been made is if you made it at some point. Everyone else was opted in to https access.

"We are currently rolling out default https for everyone. If you've previously set your own https preference from Gmail Settings, nothing will change for your account. If you trust the security of your network and don't want default https turned on for performance reasons, you can turn it off at any time by choosing "Don't always use https" from the Settings menu."

And seriously, you accessed your email for years over an http connection and never even searched to find out why that was happening?

http://gmailblog.blogspot.com/2010/01/default-https-access-f...
Would really like to see the unredacted cookbook for hacking routers. :)
Hell for a sales position merely the relationships they have from their old jobs would be more valuable than any work-test they could ever complete.
Wold Domination with Hexapods and Clojure
Yes, someone has indeed tried this. It's called "Hack".
The NSA responds to Edward Snowden’s TED Talk
BTW, I sent you an email about meeting Larry/Sergey a while ago. I just added rachelbythebay to the list too.
No brainer: join to move the needle in a sensible direction.
Fair enough. I didn't know they were private.
Do you have an example where SSL would have been secure if they had not added some other encryption scheme that broke something?
Here's a link [1] which tests LMDB on a Rackspace server with 16 vCPUs. To make the test fairer to ShardHashFile then the LMDB data file is stored in /dev/shm so that the disk does not get in the way of the test. The test first inserts 70 million keys (tried but failed to insert 100 million keys; how to do that?) using 16 processes (one for each CPU), then it reads the 70 million keys again using the 16 processes, then it updates 2% of the keys while reading the other 98% of the keys again, again using the 16 processes.

Read performance without any writing does seem excellent at 6.x million reads per second across the 16 processes. However, insert speed is very slow at only 0.1 million inserts per second. But then LMBD does not claim to be fast at writing. Unfortunately the mix 2% update, 98% read brings the read performance down from 6.x million ops per second to only 0.7 million ops per second. So LMDB seems like an excellent solution if one hardly ever wants to insert.

I would also be very happy if anybody can find ways to optimize the test since I could not find a tutorial on programming with the LMDB API. For example, is it necessary to always use a txn when putting and getting? I also couldn't figure out how to insert 100 million keys because in order to make the map size big enough then mdb_env_set_mapsize() always complained when giving it super large values. Is this a limitation of LMDB or how else to increase the map size so that 100 million keys (or more) can be mapped? And as a side question: Inserting the keys is so slow: Is there a faster way to initially insert all the keys in order to speed up the performance test?

I was also surprised at how big the LMDB data.mdb file gets with 70 million keys & values. The keys & values are 4 byte + 4 byte, so 8 bytes each. However, the data.mdb file ended up as 1.8GB which works out to about 27.6 bytes per key,value pair... which does not seem that good compared to a hash table, or?

[1] https://gist.github.com/simonhf/9677776
TL;DR Never use anything for anything.

These guys make the "professional" hacker gangs look like a bunch of clueless amateurs.
Netflix CEO calls for free interconnection, criticizes Comcast
Sure: more than one product has used SSL with SRP inside of it to replace the certificate auth, and ended up with auth bypass bugs because they didn't check parameters properly.
No. It would be no better than what could be calculated by hand. The only way to get a detailed profile is to collect data on the actual ships.

Regardless, I don't know of an Iranian radar system that is good enough for detailed signature data to be of any use.
The first link is the course he taught with Larry Page http://infolab.stanford.edu/~sergey/349/
Elon Musk's work is based on our best guesses about how the world works. "Crazy" stuff in the past was based on our ancestor's best guesses about how stuff works.

The only difference is hindsight. Bullshit artists distort things as much today as they did in the past.
> One of the traditional business strategies built on the GPL, which RMS does not greatly like, but is quite possible to do, is the dual-licensed GPL/proprietary approach. People who are willing to GPL their own software may incorporate your code under the GPL's terms. Other people who prefer more traditional commercial terms can, alternately, purchase a commercial license.

You can't effectively dual license software unless the public license has restrictions that don't serve your target market. The more restrictive the license, the more it favors dual licensing. This is actually my biggest concern with the GPL.

> And in practice, it seems the most common alternative to the AGPL in this setting is to just keep your code fully proprietary, so competitors can't build on it.

Efficito (of which I am a co-founder) offers hosting for a web-app based on open source software. We have few specific enhancements that don't make it upstream but those are really specific to our hosting offers (i.e. they don't provide customer-facing functionality, but provide functionality to us as hosting provider). Almost all of our work gets contributed back. The software is licensed under the GPL v2+, and the community is (I think rightly) hostile towards upgrading to the GPL v3.

I don't like the AGPL. I think that once you start encumbering services, then you have added a series of restrictions which really are even unheard of in the proprietary software world. Yes, it is pragmatic, but this is the way real freedom is lost, by insisting that practice serve some notion of freedom rather than the other way around.
I definitely see Linux becoming a big platform for gaming, but I think they'll probably coexist.
Disassemble binary code from your own Twitter
It would still probably be cheaper to simulate that using something like COMSOL.
Surprisingly, I'm finding this far easier and more absorbing than the square version. That means something, but I'm not sure what apart from my preference for all things hexagonal...
Can't they just make a (maybe 3d printed) stencil, and then spray paint the devices a different color? Sure, it could rightfully add 3-4 dollars of cost to each device, but it makes more sense than just destroying them.
That isn't how bureaucracies work. The parent can't join the NSA and hope to advance if they (openly) hold views fundamentally contrary to those of their superiors.

I believe there is a notable and recent case of how this actually plays out. What was it? Towden? Mowden?
For the Youngest Startups, No Billions
http://web.archive.org/web/20000823135932/http://www.geociti...

AND

http://web.archive.org/web/19990129053912/http://www.geociti...
Yup. Netbeans was the IDE that finally dragged be away from Emacs. Well, at least for Java programming, I still use Emacs for pretty much everything else :o)

I never quite get why there are so many people so keen on Eclipse. Always seems slow, hard to configure and (to me) less intuitive than Netbeans. Ah well, each to their own =)
Show HN: World's chatter box
I'm on Windows 7, just stuck with IE 8 here at work.
Probably needs a bigger board / diff rules to do antiparticles and the like.
Added now. Thanks for the suggestion.
One way to find out...
Fact that they casually speak of logging significant amount of connections is alarming. SSH targeting methodology would only work if you have ability to monitor significant portion of electronic communications.

Since majority of traffic logging capabilities of no such agency is coming from US itself and few close allies we collaborate on intelligence with* you can estimate that Sys Admin SSH technique is most useful in US itself and aforementioned close allies. Thus I would expect this to disproportionally affect Google as opposed to let's say Baidu.

* I am making an assumption here, please let me know if it is unwarranted.
First, I don't like the MIT license because it allows license changes without additional code contributions. The BSD license doesn't grant sublicensing rights and therefore only allows restrictions to be placed on new code contributions.

Also IMO the only way to read the BSD license and GPL v3 as compatible are to read section 7(b) in the GPL v3 as allowing additional copyright license/permission grants beyond the additional permissions section elsewhere. I.e. one must read 7(b) as allowing a legal notice that the author grants rights in a non-removable fashion from his or her contributions (narrowly scoped). Otherwise, the BSD license is GPLv3-incompatible.

If freedom is economically valuable, then folks who proprietize BSD-licensed software can never outrun the community over the long-run, and it also follows that, equally in the long run, more restrictive licenses will have to fall in favor of less restrictive ones.
Well it seems that he was always going for 4 from the top row, which reliably gives him 25, 50, 75 and 100 (I think). He then uses the ability to divide by 25 to treat these as an additional 2, 3 and 4. So once he has 318, he does (318 * 3) - 2 to get his 952, except via the 25s; ((318 * 75) - 50)/25. It's a hack; increasing the set of available numbers by guaranteeing the presence of a common divisor.
What I told are possible explanations and scenarios. I took the side of the 1st option which is what you defend as well. We are not in a position to be the judge ourselves. When we say something it needs to explain something. That's what I tried yet you downvoted, which unfair and mean. I stand by what I think of you.
Yeah, maybe just use the symbols and have that as "alt" / accessibly text.
It's a tech demo only, I'd be very very surprised if we ever see it on PC.
> That's because it is awkward.

It's more than a bit awkward really.

Still, the OP is right: it's funny.
Toward a network commons: Building an Internet for and by the people
NSA killed our internet. Now we are building a GNU one.
Not really. Here's how I look at it:

GPL: This work must remain in the commons. Any improvements you make must be put back to the commons if you distribute it.

BSD: I own my work. You own your work. You can use my work to create your work. We recommend you put your contributions back into the commons.

In the end, the BSD license does heavily incentivize commons, but it doesn't require them. That's the difference.
Microsoft Will Now Deploy Two Legal Teams To Approve User-Data Searches
This assumes that no other events would have changed history.
Have you guys looked at the new Truffle/Graal back end in Java 8? It has seen some impressive numbers in other languages, did you explore this as a possibility?
Unix admins have been using a far better technology for decades: Store in /dev/null, extract from dev/random. The write speeds are just as fast, but you will eventually get your results back. It is said that it'd be quicker to extract the next Game of Thrones novel from this system than to wait for George R R Martin to finish writing it.
Skill of kings.
There've been plenty of Nimitz-class carriers in radar range of Iranian ships and installations for them to know what they look like.
Good point! I find that the look of the IDE is the most important feature when I'm coding.
Interesting title, too bad I've to click "next" fifteen times; lost interest; skip.
Musl, a lightweight alternative to the GNU Clibrary
Paywall alert!!!
It's not, Manhattan is.
Does Sparkfun's product actually fail in 590V environments? That seems like a more serious concern tha branding.
FireChat lets you text friends, even without a signal
Facebook unveils Hack
Flying to antartica as a religious delusion?
Oh god, Geocities e-federations with black background and neon fonts in tables. Nostalgia pangs are coming on heavy, I need to go lie down.