skysight-inc/HackerNews huggingface dataset:
Indeed, it would be wrong to suppose that if capitalism is flawed, that therefore Socialism or Communism, or in fact any other system proposed so far, must be superior. As the article points out capitalism isn't monolithic, as various parts of the world calibrate it differently. I am becoming convinced though that western capitalism dies need some recalibration.
The original url [1] was blogspam. I changed it to point to the original source. When you submit an article, please make sure it isn't lifting from some other source; if it is, please follow the HN guidelines and submit the original instead.

[1] http://bits.blogs.nytimes.com/2014/04/11/one-day-only-google...
OpenBSD takes a knife to OpenSSL's old/unused cruft
We know so little of how the brain actually operates, it not surprising that simple changes in brain anatomy or chemistry can produce enormous variations in behavior. I wonder if we will ever be able to be able to correct or at least change the brain without making things worse.
I upvoted you to counter downvotes. I think the downvotes are for the offensive part of "get off the internet." How dare you suggest such a heresy?

I agree that complex system discussions must be driven by people educated in the ways of complex systems, possibly from perspective of economists, justice system, etc.

Of course digging through the hieroglyphics around the issues becomes difficult for laymen, even those educated in the relevant topics. And it does become more work than fun. But many online discussions are at the level of work already. People start them for "fun" then get frustrated for being wrong, downvoted, misunderstood etc. There is an addicting effect and it turns from "fun" to work of salvaging reputation, revenge, etc.

Also content farms release misleading, throwaway information that gets attention. For them it is work and often very not fun.

Their efforts could be channeled to better ends by new software.
I've been emailing one of your colleagues about working at cognitect - any chance you could help me get inducted into that software illuminati?
Decompiling Clojure I
At the scale the IRS is running, a copy of Windows is a few tens of dollars, which is about the cost of the necessary replacement keyboards over the lifespan of the computer. Ongoing patch support, however, is where MS actually shines here. Windows XP had support available for 13 years, with subsequent OSes being supported for 10+ years. In comparison, for OSes with support lengths as long as windows, like RHEL, the per-year support seat costs start at $49, which would lead to support costs of near $500 per seat over that same lifespan. So even with the IRS botching the rollout and needing to pay MS an extra year, they're still cheaper than the few Unix offerings that provide the duration of support MS does.
Did you actually test this? Because apparently someone looked at the code and found your assumptions are wrong and you're not protecting the private keys as well as you thought you were: http://lekkertech.net/akamai.txt (Also, your blog post appears to be based on the same assumptions.)
Can someone tell me more about the law and scrapping websites?
> If you read the article, they have already upgraded some of their computers, so the upgrading user applications has already been done, as the machines that have been upgraded would have needed this.

But they've upgraded to another Windows version, not a * nix. Windows has taken backwards compatibility support to plaid (11 if you're a fan of a different movie). I worked in an office with a data analysis tool written using Visual Fortran in the 1990s for Windows 95. Without retargeting it it runs just fine with a single launch flag set for Windows to use the appropriate compatibility mode. The cost of upgrading user applications is really the cost of testing user applications. Moving to * nix wouldn't be upgrading, it'd be rewriting/porting or significant testing with Wine or some other compatibility layer. [1]

[1] As others pointed out, as more applications run on the CLR porting to * nix will become easier as CLR support improves on those platforms. But that also requires a rewrite, you can't take an existing Fortran or VB or C++ project and retarget it without effort.
Check out the group_by module, as this can make those totally go away.
Actually it is. An anecdote is an observation. And data is just a larger set of observations.

There's no requirement that data must be exhaustive. And in most social science research, it never is (actually that is frequently the case in hard sciences, too).
http://blend.io/
I like your anlysis. I think Google is actually quite welcome new buyers. If you sign up today, you can, most likely receive an invitation code within three months. I got mine in just two months. When I tweeted about it and said I wish I had the budget to get one, the next day Google Glass reached out to me on Twitter and said they could extend my invitation code to June. One could simply be my background (being involved in technology) and two possibly because this is an expensive product and they just want more customers.
is better performance at work is the goal or is it a mean that would supposedly [magically] lead to some better things?
> So in your opinion the one who actually buys and gets the certificate from the StartSSL web site must not share it with the system administrator? Or some second-in-command?

This key is now public and must be revoked. Bottom line. StartSSL can even conceivably invoice him for the work, but they have to revoke it if they want to be a CA in a secure public-key infrastructure.
1. First, that's only a default install: you can easily package up a custom 7/8 install disc that gets down to 10-15 GBs. And if you compare that with a distro that installs a Windows-like window manager but default (say, stock Ubuntu, which takes up 5 GBs of space[1]), that gap narrows by a lot. Furthermore, it's just an irrelevant point. What's 10-20 GBs on modern desktops? Sure, the initial install will take a bit longer, but I sincerely doubt that a limiting variable for anyone right now is having a 40GB HDD instead of an 80GB HDD.

2. You are severely overestimating the ability of the government to hire a "small dev team" competent enough to build a custom Linux fork. The bulk of cost, no matter if they go Windows or Linux, is support. That's because it's really, really hard to manage software entirely through internal means, even if the product is completely open-source.

Furthermore, who's to say that the feds don't already have access to Windows source? At this point, it's impossible to know, but the idea that MS could be "bought off" by China is absurd. They're an American company whose operations and finances are largely based in the United States. You would have to have a high-ranking executive (or collection of executives) commit blatant treason, high the bribery money in some other country, AND convince a large number of MS developers to be completely quiet about an exploit placed in Windows source code on purpose. And not an exploit placed there under the threat of criminal punishment by the "legitimate" American government but an exploit that would send hundreds of employees to federal prison. I'm paranoid enough to admit that it is theoretically possible, but waaaaaay less likely than waaaaaaay more things that we should be legitimately worried about.

3. You say there's "no package management" and then you go on to explain how there is package management but that it's not setup correctly. The IRS is not a small business. Microsoft provides high-end support to them so that they can properly setup Active Directory and WSUS. And if they went Debian or Ubuntu, they'd pay the same money to properly setup those package managers.

Not to mention all the sheer costs of deploying and transitioning to a completely new infrastructure, as well as training thousands of relatively low-skill workers to use a completely foreign system. Oh, and rebuilding tons of custom software that wouldn't be in any public package repository anyway.

Anyway, OP's original point was that Windows 7 and 8 are garbage compared to XP, which is blatantly wrong. They're both very stable operating systems, and while it's fine to debate WHEN MS should cut off support for XP, it's an inevitable fact that they eventually MUST. The IRS has to upgrade eventually, and they've had a heads up for a while. It should've been done already.

[1] https://help.ubuntu.com/community/Installation/SystemRequire...
I use custom node.js scripts with these libraries:

* request - https://github.com/mikeal/request

* async - https://github.com/caolan/async

* cheerio - https://github.com/cheeriojs/cheerio

* nedb - https://github.com/louischatriot/nedb
I'LL KILL YOU AND YOUR WHOLE FAMILY
>Most lobbying does not including campaign contributions. Where campaign contributions are made, they must be reported and there are strict rules against the contributions personally benefiting the person running for office or his friends and family.

Yes, because formally registered lobbyists have not also done under the table deals since time immemorial...
Well, at least away from that rather corrupt state, e.g. see my comment https://news.ycombinator.com/edit?id=7583226

By no means is all of America that corrupt. I'm reminder of Chris Christie, governor of corrupt New Jersey, saying that every day he gives thanks for the existence of Illinois and Louisiana, both substantially more corrupt than New Jersey.

My mother's from Louisiana, and corruption is one of her hottest political buttons; I sometimes think she takes it too far, but then again, I don't really know....
Tesla Model S – Cost of Ownership vs. Honda Odyssey
Sorry i didn't make this clearer. I was suggesting that the class name could be used in the method name. As long as nobody names their classes the same as Apple, their method names will also be different.
I have had ADHD since I was a child, so I can and do take these drugs(Vyvanse) when I go to work/school. Even though I have ADHD I feel like they give me an edge over those that do not take them, from my perspective I seem to have better concentration than my peers.
Some questions of predicting a very distant future can't have an accurate answer today. But if we can simulate our world with a computer, try different things and see where they lead in the near future, we can answer most of our complex system/politic/economic questions.

But such a computer would obsolete humanity.
I've been there (legally). You have to be motivated by your goal. And be prepared for a few bad days when the pills end. And you will miss this extra power you've tasted.

Its a slippery slope. Please plan very well.
I'm guessing he means the GPL sense of free as in freedom, not free as in beer?
> Meanwhile some people have been writing and testing small, auditable and usable open source crypto, more or less for "free".

With all due respect that is complete bullshit. I do not care that you put quotes around free. Writing "free" will never be considered to include sums in the hundreds of thousands of dollars. More importantly blatant lies like this muddy the debate and set outrageous expectations. The Nacl project gives the following description of funding:

NaCl was initiated by the CACE (Computer Aided Cryptography Engineering)
project funded by the European Commission\'s Seventh Framework Programme
(FP7), contract number ICT- 2008-216499. CACE activities were organized
into several Work Packages (WPs). NaCl was the main task of CACE WP2,
\"Accelerating Secure Networking,\" led by Tanja Lange (at Technische
Universiteit Eindhoven) and Daniel J. Bernstein (at the University of
Illinois at Chicago, currently visiting Eindhoven). CACE nished at the
end of 2010 but NaCl is a continuing project.

...Many of the algorithms used in NaCl were developed as part of
Daniel J. Bernstein\'s High-Speed Cryptography project funded by
the U.S. National Science Foundation, grant number ITR-0716498.

I found the funding information for ITR-0716498. djb is listed as the PI for the project.[^1] I could only find the high level funding of ICT-2008-216499.[^2] (wtf EU?) CACE WP2 is only one component of the project. I would love it if someone with better knowledge of EU funding can find the funding for the WP2 line item. The figures are:

NSF ITR-0716498 funding: (USD) 400,000.00
EU 2008-216499 funding: (EUR) 4,733,078.00 ***NEED WP2 line item***

The tweetnacl implementation lists two more funding sources. As above it was easy to locate the NSF funding but I totally struck out for the nwo funding:

NSF 1018836 funding: (USD) $436,203.00[^3]
NWO grant 639.073.005 funding: ???????????

Don't get me wrong, I have a lot of respect for djb and I think he and his coworkers deserve every fractional euro/dollar of funding that they received but they did not work for free. Most importantly they should not be expected to work for free.

[^1]: http://www.nsf.gov/awardsearch/showAward?AWD_ID=0716498

[^2]: http://cordis.europa.eu/projects/rcn/85344_en.html

[^3]: http://www.nsf.gov/awardsearch/showAward?AWD_ID=1018836

NB: This is the nwo funding site: http://www.nwo.nl/en/funding I think the english version may have a reduced set of features. I can not find the this grant information on the site.
"We're sorry but this site is not accessible from the UK as it is part of our international service and is not funded by the licence fee. It is run commercially by BBC Worldwide, a wholly-owned subsidiary of the BBC, the profits made from it go back to BBC programme-makers to help fund great new BBC programmes. You can find out more about BBC Worldwide and its digital activities at www.bbcworldwide.com."

That is all great and all, but it's not answering the most important question - how can I, as a UK user, access this content? If I can't, then you just got an answer to why piracy is still a thing.
I'd like to hear more about this, any links you can recommend?
See my blog post about this on the ScraperWiki blog https://blog.scraperwiki.com/2012/04/is-scraping-legal/
hey jarnix, I really like your suggestion. Thanks :)
I'm guessing he means the GPL sense of free as in freedom not free as in beer...
As a PoC, I would be willing to "turn the web into data", i.e., produce one of the formats offered by these "services": CSV.

I will use only standard UNIX utilities, no Python, etc. As such, you "own" the code. No SaaS. The result will be portable and run on any UNIX.

I believe I can deliver in fewer words of code and that the result will be easier to modify when sites change.

You pay nothing. Post your scraping "challenges" to HN.

I enjoy turning web into data.

Some people enjoy working with HTML, CSS, Javascript, etc. I prefer working with raw data.

It is interesting to hear that some people are willing to pay to have the HTML, CSS, Javascript, etc. stripped out.
Very cool - thank you. The method of thought I agree is definitely more than buzzwords. Problem is movements that use it and have no idea what improvement actually looks like. These lean movements happening now are ridic.
Unfortunately, this doesn't seem to work too well on my mac. And, why do you want to know who my friends on Facebook are?
The tone of his post is rather unfortunate. Still, he raises good points, even if they are put in an unnecessarily aggressive manner.
So where do expert cryptographers come from if they aren't allowed to start and write their own stuff at some point?

They start as complete masters of the field in their teenage years?
LA Times Travel: Dealscoopr.com tracks deals at your favorite destinations
3 dead after shooting in Kansas
I played basketball at the Jewish Community Center daily as a kid and my parents live a minute away from the Shalom Center. Crime is almost unheard of in Leawood. I am in shock. The shooters were yelling "Heil Hitler"
We've got quite an old mailing list full of geeks hand-coding web scrapers, if you want somewhere to ask questions:

https://groups.google.com/forum/#!forum/scraperwiki
No, because I don't trust that they wouldn't just make things worse later, increase the chance of burnout etc.

Also I'm already amazing, thanks.
> The randomness requirement for DSA is such a huge problem for DSA that it forms the centerpiece of Daniel Bernstein's critique of the NIST standards process. This is the bug that broke the PS3.

I've been reading about this recently, but I'm confused. Wasn't the PS3 issue that the key was static? That's not the opposite of randomized, because there could be a deterministic, yet message-specific scheme for generating the secret key. Or is that known to be unacceptable?

> there is concern that the NIST curves are backdoored and should be disfavored and replaced with Curve25519 and curves of similar construction.

I've heard the opposite, that the curves are not the problem but the choice of basepoint. E.g. [1] states: "...the vulnerabilities in Dual-EC have precisely nothing to do with the specifics of the NIST standard elliptic curves themselves. The 'back door' in Dual-EC comes exclusively from the relationship between P and Q -- the latter of which is published only in the Dual-EC specification."

Is it still a matter of dispute whether the curves themselves are suspect? Or is the referenced blog post outdated?

[1]: http://blog.cryptographyengineering.com/2013/09/the-many-fla...
OpenSSL has pretty good support for HSMs in the form of their ENGINE API. It seems like it would be possible to use this layer to move all key handling and crypto operations out of the process that was dealing with TLS. Process isolation seems like a much better way of getting this kind of security than weird allocator tricks.
This is usually done in InDesign if it's a batch job, Photoshop - definitely not unless it's a tiny web shop. InDesign allows you to create a print-ready PDF and the printer will know how to "step it up" (basically lay multiple on a page to save $). Your software sounds goods for people who don't do this sort of work constantly - such as schools, medium-sized businesses, etc.

Try pitching to those audiences.
Based solely on your comment I would guess not. The device wasn't used "to track cards that were dealt or project the outcome of the game". Rather, it simply didn't prevent Ivey from doing so (allegedly).
I think better performance at work can be converted to better performance in your side project.
I would. I already take one, caffeine.

As long as there are no harmful effects and no-one is forced to use anything I have nothing against it.
But then his data source is gone and what he was doing is pointless. Losing your processor of said data source while said data source is still available is frustrating.
Its funny that this was just posted, because I was just at my local grocery store. This store hires handicapped people to act as baggers - so I always make sure to spend an extra moment after checkout thanking them and just generally trying to expand the goodness in the world.

Funny enough, the bagger today had such a "handicap" as depicted here. He was super outgoing, with a real infectious sense of interaction. He said to me completely sincerely, "have you been keeping your energy up and yourself positive?!?" and I stammered a bit and said I was sure trying.

Then he said, "you know, each day I try to appreciate how beautiful the sun is, it really can help you keep your energy up! So keep yours up up up! That way you can Rock On!"

There's not much you can say to that but to give him a high-five.

Having said that, I was thinking on the walk to the car how often his parents must worry about him. Precisely because you could tell he was so outgoing he would've been open to any suggestion "want to take a ride? want to go see the lake? etc etc"

Nonetheless, it feels strange calling it a "handicap", he still bringing a smile to face just thinking about how generally excited he was.
I'd like to see Akamai create a CloudFlare style challenge using their patch and a compromised version of OpenSSL and see if anyone can get the private keys from it.
This annoys the hell out of me but apparently it's due to a ruling that the BBC cannot compete with the private sector in the UK market, due to its tax funding, non-profit nature.

I kind of understand it, but it does lead to ludicrous outcomes like this.
The people with ADHD have the so called "hyperfocus". It's like the flow, but you cannot stay in it if there are distractions. Pills help to ignore those distractions. You are more resourceful by training (from your condition), pills just enable you to show it.
http://web.archive.org/web/20140123002343/http://www.bbc.com...
Why should LibreOffice have a mail client, when there's Thunderbird or any number of other excellent mail clients?
I took modafinil for around 3 months last year when I started on a huge porject at work.

I work as a software engineer and my output was pretty staggering in comparison. The code was cleaner & probably better than anything I'd done before.

It was fantastic at keeping me focused for hours...
Pls elaborate
Well, as I understand it sort of the whole point of a market maker is that you don't "take your ball and go home". Traditional market makers are obligated not to do that.

If HFTs want to be hailed as more efficient market makers, they should operate under the same obligation.
Considering their promo video basically puts it up against a GoPro mounted to your head, I'd say they've kind of given up hoping to achieve anything greater than 'life recorder'.
Yes, the submitter broke the HN guidelines by editorializing the title. On the other hand, the article's official title is uninformative. So I replaced it with the sentence from the article that most seems to describe its content (shortened to fit 80 chars). If anyone can suggest a better title, I'll change it again.
I think there are traces of a connection between dogs and williams syndrome: http://www.nytimes.com/2010/03/18/science/18dogs.html?pagewa...
Tristan O'Tierney – Co-founder of Square Talking about Programmer Burnout
Wow. I guess "more or less" was not strong enough wording for you?

The point is that using something like NaCl costs you, the developer/user, nothing more than if you are using OpenSSL.

Do you agree?
Having looked at PKCS#11, I'm not sure what bits you could get away with not implementing. It does have functions for things like "get random bytes", which I guess you might not want, but that's just barely any code: (int get_random_bytes() { return CKR_NOT_SUPPORTED; }).

All the complexity in this proposal is the serialisation/deserialisation which is about the same amount of work if it's pkcs#11 or some custom thing.

Custom API:
Pro: Marginally simpler to implement.
Pro: If the webserver fork()'s it by default, then more users get the benefit for the case that you can read the webserver memory.
Con: Doesn't protect against attacks that can read files readably by the webserver.
Con: Becomes complicated when you want to move to a real HSM.
Con: Isn't reusable between webservers, let alone for your mail server, xmpp server, webbrowsers, ssh clients and so on.

Using PKCS#11:
Pro: Can start with a PKCS#11 softhsm running as a seperate user today, migrate to hardware HSM with little change tomorrow.
Pro: Reusable across multiple webservers, already usable by browsers and ssh clients.
Pro: A well defined, maintained, open standard with a wide variety of implementations that already exist.
Con: Slightly more complex than a custom protocol, but I'd argue that the custom protocol would grow to cover at least what PKCS#11 supports. I'm currently investigating using dbus for the protocol, so serialisation/deserialisation is mostly taken care of.

Am I missing some Pro for a custom protocol?
This is exactly what I thought.

The question isn't really "are smart drugs ethical to use" (nobody objects to worldwide mass consumption of caffeine), it's "are the side effects ones that won't negatively impact society too much".
Capitalism is working.

Statism isn't.