skysight-inc/HackerNews huggingface dataset:
I'm confused. It sounds like users are able to sync their private keys with the CLI, or with the web interface. It also sounds like if they do it with the web interface, they are at risk, whereas with the CLI they are not at risk.

If my understanding is correct, my question is: What is the reason for this difference in security for the two use cases, and isn't there some way to provide web access without reducing security? What about browser add-ons? Client certificates?
Square cofounder gets Harvard prof to teach free coding in STL
Would be nice to combine this with [skeuocard](http://kenkeiter.com/skeuocard/)
> Lots of modern 'performant' games are written in Java or C# and in those cases too...

I keep wondering whether it is possible to write a game like BattleField4 or Crysis in Java/C#/etc. Do you have any insights on this issue?
MLB.TV hidef not supported on Mavericks (OS X 10.9)
According to the MLB.tv site, OS X 10.9 isn't a supported device - and this is still true today, opening day of the season. Seems amazing they haven't figured this out as the OS has been out quite awhile now. (The NextDef plugin required has issues)

And here I was all set to give them my money, but as my macs are both at 10.9, I can't watch hi-def. Seems like quite a boondoggle!

(I know, first world problems, etc) (alos, I'm not the poster of the article above)
With only $500, These Entrepreneurs Created Multimillion-dollar Businesses
Do you really think Bill Gates created equivalent value to 100,000 Americans? Bear in mind that if he hadn't created Windows, something similar would have taken its place - just as likely something better.

I've never seen a discussion of Microsoft that said its achievements are due to engineering genius. Definitely they must have had a great production line for software, but the reason Microsoft is Microsoft is that it secured itself a monopoly. That isn't adding any value.

But even if Bill Gates did add 100,000 times more value than the average American, it doesn't logically follow that he must be paid 100,000 times more. You might easily argue (I would) that the last million you pay to him doesn't make any difference at all to his happiness or motivation, and it could be much better spent else where.
You don't need to pay for leisure, there are tonnes of free concerts, free activities(like playing frisbee with strangers in the park), plenty of fountains etc.

You /certainly/ don't need to drink booze to live a rich life, I'd be miserable if that were the case.

While it is nice to be able to pick your vices and have funds left over, that's just not a realistic way for most people to live their lives.

Nobody starts at zero by the way, you start much of the way to the junction point of life enjoyment, I'm not sure how reliable these studies are, but some suggest that enjoyment in relation to wealth follows a law of diminishing returns, with a juncture around $80-100k(I don't remember the exact figures); so ostensibly the goal is not to become the richest man on earth from a homeless orphan, but to gravitate toward that juncture.
You are right, I see. Do you know if urlmon always launches mshtml or is it something specific for this case?
Then again, Poker is a zero-sum game. Life isn't.
The History Behind Apple's Command Key by Susan Kare
Why must ‘self’ be used explicitly in method definitions and calls?
Useful Markdown Editors and Tools
Actually, I meant is there an open project where I can put something on my own server, to provide the same API that glacier uses? That way I can development / test my code against it instead of testing against Amazon directly.
Features? Performance? Battery Life? Camera?
Also, which book would you recommend?

Seconded; while I am very skeptical of the "invest to get (a little) rich(er)" approach[1], I'm open to and curious of what books the GP considers good.

[1] - Every single way of investing that I've looked at is either (1) not worth it (doesn't even beat inflation) and/or (2) more work than it's worth (I've already got hobbies I like; why should I waste my unpaid time playing even more into the rat race by tracking markets and probably never making a profit?)
Except that it doesn't; NSA has a conflict of interest, but they're already split internally.

Even if you split them into separate agencies they're still going to both be part of the USG so while that might reduce the risk of a conflict of interest somewhat, it wouldn't eliminate it.

After all, think of the existing reaction we get when actually independent agencies of the USG throw out comments in support of NSA's signals intelligence. If the NSC, Congress's intelligence subcommittees, Executive Office of the President, Department of Justice, various Inspectors-General, Dept. of Defense, FBI, and, oh yeah, the courts can all be looped into what hacktivists claim is a vast conspiracy to violate the Constitution, then what defense would splitting IAD out really be?
5. Start the Y axis at zero, not some arbitrary number to enhance the deltas. A 2% increase looks huge if your Y only covers 99% to 103%.
Where I have failed voxel.js
According to the MLB.tv site, OS X 10.9 isn't a supported device - and this is still true today, opening day of the season. Seems amazing they haven't figured this out as the OS has been out quite awhile now. (The NextDef plugin required has issues)

And here I was all set to give them my money, but as my macs are both at 10.9, I can't watch hi-def. Seems like quite a boondoggle!

(I know, first world problems, etc) (also, I'm not the poster of the linked-to article above)
Understanding a new C++ feature. How the cycle eventually is.
Pretty cute creature designs. Nice work!
They certainly won't be dependent upon Tesla.

In fact, Nissan's Tennessee plant can already manufacture 200,000 battery packs per year. They have been in the game of producing new battery chemistry technologies since 2009, when they started work on a technology partnership to bring Lithium NMC batteries to production vehicles.
Maybe we're talking past each other. I'm saying, there are different kinds of complexities in implementing attacks on TLS.

The first, most obvious kind is what this paper is talking about: the amount of raw compute it takes to break whatever part of the protocol you're targeting. When this paper says it takes minutes (or seconds) to reverse model Dual_EC, they're referring to the amount of time it takes to work out the current state of the RNG from the partial state disclosed in the TLS handshake.

Another complexity is the kind we saw in the RC4 attacks, where you're exploiting a statistical bias recurring over many connections. It doesn't matter how fast your computer is, because the attack requires your victim to make large numbers of related requests to the target system. That's the "many many" I'm referring to. A TLS handshake change that took NSA from needing 2 million connections down to 1 connection would be extremely bad.

For full context, another complexity is the nature of the TLS connections we're talking about. The RC4 attacks we've seen depended on the BEAST attack model, where attackers could predetermine which connections the victim made (owing to the control HTML/JS gave them); that attack is much more difficult to carry out over other application protocols. So, similarly to the point I just made above, it would also be very bad if a protocol extension took an attack that only worked in the BEAST model and made it work in (say) the SMTP STARTTLS model.

Just to be clear: with Dual_EC, we're already in the worst-case scenario with or without TLS extensions. If a group of researchers with a straightforward hardware setup can reverse the RNG state in an hour, it's reasonable to assume that NSA (if it cares about this attack, and I think it does) can do it in real time.
Exactly - I read:

"Why do people choose JavaScript/node.js to write command line apps over traditional languages for that task like python or ruby?"

and was agreeing with the first part of the sentence and then laughed out loud at the end ...

Are we really in a world where ruby is the old school traditionalist way to write unix utilities ?
> I don’t understand the seeming lack of fear I see in the men we target.

"They hate us for our Freedom"
Want to be profitable? Change direction.
Good stuff, there.

Feature request: optionally emit canonicalized (key-sorted) JSON.
Why you don't need instruments to make music
This talks much more to me, tho:
http://gpg.mozilla.org/pks/lookup?search=0x4E8EA664&op=vinde...

And of course, I like that it's distributed and not a business. I don't want people to do business on my identity.
Self acceptance is the key to happiness.
Surrender to being what you are.
If you do not want to give up, do not feel blocked
You are losing a round, not the whole game.
And remember you are not the only depressed guy out there.
We are even more than you imagine! :)
Feel free to whine.
It will make you more productive in the long run!
Life is a journey in which no one wins, and that no one really loses!
No data, but as a user I do expect to see a card type selector or indicator, even though I rationally know its superfluous.
RusEfi: open source, DIY automotive engine management
MS Access is often a great tool for this. It works well for datasets that are too big for Excel, but too simple (1 table, only 5mm rows) for a true database app.

Plus, if your comfort level is closer to Excel than MySQL, or you have experience writing Excel macros/userforms, you can do well in Access.

Just promise you will get a proper database if your needs continue to grow; I have seen too many frankensteinian monstrosities grow from once-orderly Access databases!
Maybe so that the user has something visual to show them they haven't miss typed that start of the number?
Big Data: let's cut through the buzz
HTC confesses to ‘spoofing’ HTC One (M8) benchmarks via ‘High Performance Mode”
One scenario where immediate detection is helpful is for unsupported card types. The server detection would require users first fill all their card data only to discover they need to start over.
Did you consider other methods of scoring besides money?

Granted money is easy to count but it is a debatable measure of which game is better or who was most successful at the task of learning to make games.
You can get more done in a constant amount of time in C or C++ vs all the other languages, so yes. More compute time == more sophisticated AIs.
I don't see low-end users (think entry-level MacBook Air) running virtualization or Boot Camp. The well-known Mac developers will recompile their apps as soon as Xcode is updated, and huge apps like Office will probably get a pre-release version beforehand. So a cheaper ARM MBA should be usable for most of it customers.
Why Garamond Won't Save The Government $467 Million A Year
At one point the programmer was expected to regularly override the compiler, replacing sections with hand-tuned assembly for maximum throughput, based on their knowledge of the CPU architecture, hand-profiling, & expecting the calling pattern.

Then the programmer was expected mostly to trust the compiler, which either applies massive, unwieldy (for a human) optimizations at compile time, or develops new optimizations on the fly based on JIT profiling data, or both.

There has been not nearly enough research on cooperating with the compiler, and providing information that's useful for developing specific optimizations, doesn't force potentially unproductive optimizations if that information is wrong, and still represents the information at a high-enough level that it's human-comprehensible.
But you just made one..
Ask YC: Taxing Founder Income
Hey YC, I assume that in many cases the initial 20k goes towards rent and ramen. Are you able to classify those as business expenses? Or how do you avoid paying income tax on what might be considered a salary?
http://kernelnewbies.org/Linux_3.14#head-72b295b09fea85de2e8...

zram swap has really sped up my workstation laptop, so I'm pleased to see it in 3.14. I've been running zram in place of a swap partition for about three weeks now. I notice Vim opens faster, as do Chromium bookmarks.

Right now I'm having to use an unofficially supported shell script to get zramswap [1]. Hoping official support is on the way.

1: https://aur.archlinux.org/packages/zramswap
> This approach would simplify compile-time code generation, but it doesn't help interpreted languages that have no compile step at all.

Well, it does if they have macro systems like Scheme :) Of course, mainstream interpreted languages don't.

> I don't know what this means, but it sounds really interesting, do you have a reference with more info?

There isn't an official writeup that I'm aware of, but I can briefly explain what it is. In precise GCs, you have to have a way for the GC to traverse all the GC'd objects that a particular object points to. This is a problem in languages like C++ that have no or insufficient reflection. Traditionally the solution has been for everyone to manually implement "trace hooks" or "visitor hooks" for all objects that participate in garbage collection, which are C++ methods that enumerate all of the objects that a given object points to; this is what Gecko (with the cycle collector) and Blink (with Oilpan) do. But this is tedious and error-prone, and is especially scary when you consider that errors can lead to hard-to-diagnose use-after-free vulnerabilities.

We observed that this is a very similar problem to serialization; in serialization you want to call a method on every object that a given object points to (to serialize it), while in tracing you also want to call a method on every object that a given object points to (to trace it). So we decided to reuse the same compiler infrastructure. This has worked pretty well, despite the weirdness of saying `#[deriving(Encodable)]` for GC stuff. (We'll probably want to rename it.)
Samsung's Paper-thin, Bendable Screen
It helps to display the card type while you type because then I know that I am typing something reasonable and I know that I am not entering incorrectly. Of course, the entire card number could still be wrong which can only be validated by the server/backend processor but overall, displaying the type gives a level of "instant" comfort. It also gives users peace of mind that they system knows what they are doing. Think non technical users who don't understand the diff b/w client side vs server side validation. For them, it will be comfortable to see that the system interprets their card type which might give them more comfort. No data to back this up but just something I might think as a user.
I've only used Nexus devices over the past 3+ years, and the only thing that has given me pause to consider something else is the HTC One -- with the M8, I might pick it up if they release a 'Google Play' edition (i.e., nexus in all but name).

I just can't get behind carrier/manufacturer cruft. I also feel that Android itself iterates and innovates faster than Samsung/Moto/LG/anyone else can on their own, so those 'extras' are not at all extras.
Anyone using gpgme will trigger the pinentry program, which you can make recognisable if you need a trusted UI.

Or, if paranoid enough, you can store the key on a stick (like a cryptostick) - in this case, it doesn't matter what you type in since the key never escapes.

Note that this is all while assuming that you do not trust what runs on your computer.
22 Year Old Receives Complete 3D Printed Cranium Replacement
It's not a power law. The problem here is that the top fraction are the only ones increasing their wealth. Everyone else is stuck.
U.S. requires new cars to have backup cameras
I'm assuming I could run the sales more efficiently, less employees, under the stated model. $100 might not be the right number, just a point that it would be negligible. Also I'm also assuming tesla would give me a large market/city/region. I don't see the need of having so many locations like ford, gm, others currently have.
I think the whole market is in a bubble... :-/

The global economy is doomed and there will be a hard reset.

http://www.usdebtclock.org/
http://www.zerohedge.com/
I have to agree with the small changes point, lottery winners tend to screw up very badly when they get their deposit, the same is true for those born into large unconditional trust funds(lots of rich kids go bankrupt).

Book recommendations are a tough thing for me to make, I studied more gradually since I started in my early youth, and was already interested in mathematics.
I suspect most of the "top ten personal finance books" articles favoured by PageRank™ are pretty reasonable, and a good start for most people.

My personal method was perusing Wikipedia for accounting and economics information, and looking at people close to me. Sorry I can't fob the right book title though.
Office for iPad: Word's a home run, Excel is good, PowerPoint meh.
Yes and no. That can still exist, but many of those guys have been let go. Many of the chip manufacturers have been/were struggling to keep a float and FAE's were easy pickins. But the nice thing about having the community sort of decide which is the best 3.3V regulator is that then you can all buy that chip in bulk and know that the supply will be there and the price will be reasonable.
My point is that Poker and other zero-sum-games are within the set of "stuff in life". Life is not simply composed of "conflict resolution".
Congrats Apple for all your achievements. It is amazing what can be accomplished when you employ Chinese Engineers and manufacturers who's tech espionage (they steal trade secrets) is one of their best known traits/assets.
Senior Software Engineer Client with UI Focus
This is amazing. You should arrange these by trustworthiness http://themetapicture.com/the-trustworthiness-of-beards/
Apple bought PA Semi so they could be in charge of chip design and not have to share with anyone else. It's a competitive advantage, and Tim Cook isn't stupid. He won't license away a crown jewel for a few short-term dollars.
Leading the PaaS Market with Customers, Community and Innovation
What justified it for me was a stylus on something that would fit in my pocket. No one but Samsung does it. In fact, the Surface Pro (noooo, thank you) is the only other device I know of regardless of size.

If you just want a phone that can boot a mobile operating system, then perhaps a Nexus device will do it for you. But there are other phones that have features not included on the Nexus line that make them appealing to folks.
Apple OS X Server v3.1.1 Multilingual MacOS X
So when you say "if k is 256 random bytes" it's a flat out lie?

e: if k really was 256 random bytes, or bits even, it would mostly be an unnecessary complication. But that's a completely opposite situation from a key derived from a user chosen password.
I just went through this cycle. I updated a 2005-era codebase to use auto to declare most iterators:

for (auto it = foo.begin(); ...

That was pleasant and easy. Then I got all excited about std::atomic and tried using that in place of my own portable implementation, but it didn't work on OSX so I had to roll back.
So, all new cars will be potential surveillance points. Gotcha.

Thanks, soccer moms.
LandoCalrissian, this is Chris from Worthington Assembly. So many Star Wars quotes to reference. So little time.

We hope so. Have you signed up yet? All you need is a Dropbox account. No CC or anything like that.
The 6 Companies That Will Buy Square
Correct, Fox News Are Hilarious for this: http://d.pr/i/n1dS

Rarely a problem in apps though, is it?
There are no modern Nexus phones for Verizon Wireless users. Your only legal option for a phone with an unlocked bootloader is the Moto X Developer Edition ($450).
Facebook's brand extortion perception problem
No eyes on SF BART
Really? Well, the underlying population is growing, college is getting more expensive, inflation is making money worth less.. are you sure that they're not actually cuts per unit benefit?
SF company provides rental cars for Uber, Lyft drivers
That's an important distinction to make, I don't necessarily mean financial institution investments, I would include personal capital investment as well(like buying a personal computer as a writer, or buying some raw materials to make some handcrafted good, or buying source chemicals to make useful compounds. etc.)

Financial investment is a difficult bar to hit just because there are usually people more capable of it, and with better judgement for it than you. Investing in capital goods on the other hand can be best understood by the people capable of using the goods.

For example, you may commute to a job every day, and take public transit to get there. If you're within bicycle range perhaps you could get a used bicycle(good commuter bikes can be had for a hundred bucks here, and we don't even have the usual number of surplus bikes.)
I'm using jquery-payment from Stripe. Should I switch?
Any plans to do the same for RPM packages? Most enterprises are running a RHEL variant, not Debian/Ubuntu.
it has taken me almost 1 year to make mine. 2 weeks shy, actually.
مباراة الاهلى وانبى بالدورى الاربعاء 2/4/2014 الموعد والقنوات الناقلة مباشرة
Then again, why not use namecoin ? They (we ?) have a spec with what format your records should look like:

https://wiki.namecoin.info/index.php?title=Identity

Basically, there's a whole id/ namespace where you register your personal information, and there's a d/ namespace where you register domain names (akin to DNS). Onename is the same except they use i/ (they haven't even tried to discuss it and basically did it all from scratch to start clean)

The major problem is that you basically need a namecoin client to interact with the data... unless you use dnschain [0], which act as a HTTP-to-Namecoin and DNS-to-Namecoin bridge. Try this:

$ dig @dns.dnschain.net otokar.bit

$ curl http://dns.dnschain.net/d/otokar

both are my personal domain, delivered to you through plain old protocols. The last one even works in your browser !

Come and join us, this is actually the future. Oh and by the way I'm id/rakoo.

[0] https://github.com/okTurtles/dnschain
> If you're going to make phones out of plastic, own it. Make the best genuine Corinthian polycarbonate phone you know how without trying to make it look like something else.

I think great examples of this are the Nexus 5/7 and the Moto X. They're completely plastic construction, but they look and feel much nicer than the Galaxy line.
First Equation Ever: 14x+15=71
Seconded - I'm dipping my toe into this now, and it's baffling. I wish I'd started earlier...
You make good point on longevity of the relationship. I figured tesla could solve this with the right contracts when they did setup a dealer. That might not be the case.

I not skeptical and believe dealers do add costs. Significant probably. I don't have the data to know to what degree. I'm just suggesting tesla scrap the current dealers and build their own network with its own set of rules and economics. There may be valid reasons that is a bad idea, but i would be glad to be a part of it
I would start with a lightweight database like sqlite.
I don't agree, but I'm going to let it drop. I just wanted to reply to say "thanks" for engaging in a thoughtful conversation.

Somebody's been downvoting thoughtful posts like yours (because they disagree with them, I guess). I wish they'd stop and I wanted to let you know it wasn't me. :-)
Link: http://en.wikipedia.org/wiki/Whitehouse.com
I'm pretty sure there is no censorship in Croatia. Not because of the general philosophy, but simply because I am convinced everyone who works in the government's tech department still thinks FORTRAN is the latest shit in computer science.

The amount of expertise in this country is shamefully low[1].

[1]: Citation needed, but my experience with "technical high ups" would indicate so.
SecondSync Joins Twitter