skysight-inc/HackerNews huggingface dataset:
tl; dr

"1.3 Findings Summary

During this engagement, the iSEC team identified eleven (11) issues in the assessed areas. Most
issues were of severity Medium (four (4) found) or Low (four (4) found), with an additional
three (3) issues having severity Informational (pertaining to Defense in Depth).

Overall, the source code for both the bootloader and the Windows kernel driver did not meet
expected standards for secure code. This includes issues such as lack of comments, use of insecure or deprecated functions, inconsistent variable types, and so forth. A more in-depth discussion on the quality issues identified can be found in Appendix B....

The team also found a potential weakness in the Volume Header integrity checks. Currently,
integrity is provided using a string (“TRUE”) and two (2) CRC32s. The current version of TrueCrypt utilizes XTS
2 as the block cipher mode of operation, which lacks protection against modification; however, it is insufficiently malleable to be reliably attacked. The integrity protection can be bypassed, but XTS prevents a reliable attack, so it does not currently appear to be an issue. Nonetheless, it is not clear why a cryptographic hash or HMAC was not used instead.

Finally, iSEC found no evidence of backdoors or otherwise intentionally malicious code in the
assessed areas. The vulnerabilities described later in this document all appear to be uninte ntional, introduced as the result of bugs rather than malice."
The appeal of Truecrypt is the deniable encryption and the alternatives for that are sparse and bad on any operating system
> Bruce S is not a fan of their implementation, however[3].

Its worth pointing out that his concerns seem to apply only to using Truecrypt to encrypt a portion of a drive, as opposed to whole-disk encryption.
Hacking hydrological data with the RTLSDR dongle
I wasn't disputing the Odyssey's insurance vs. a Tesla, but the claim that "The Honda Odyssey has some of the cheapest insurance of any car."

I pay more for insurance than some people I know who drive newer, more expensive cars.
Apple isn't part of a competitive market (or at least they don't think they are), so there's your answer.
Thanks for sharing -- happy to offer some "instant feedback":

* Alert windows are jarring. My first instinct when I saw it was "ok, thanks for telling me who to take, but why are you telling me this in a vacuum?" -- and THEN I saw that you give a comparison. I'd skip the alert window entirely -- just show the list and at the top (or highlight, etc.) show the winner.

* It would be SUPER cool if you could calculate whether Surge Pricing / Happy Hour is in effect so the user doesn't have to manually make the choice in the drop-down. No idea if that's possible but the less work you have to make the user do, the better.

I'll keep playing around and edit with more thoughts...
Dealership on the 105k maintenance. Tires/brakes have been a one of the tire chain stores. But yeah, four new Michelins, rotors, pads, brake fluid flush, alignment, taxes, it's $800-$1k.
French Police Deploy DNA Dragnet To Solve Rape Of Teen
If you just bought the last version, you are entitled to a free upgrade.

http://bohemiancoding.com/sketch/support/faq/01-purchasing-s...
I was quoting Tesla.
Google Buys Drone Maker Courted by Facebook
Google Acquires Titan Aerospace, The Drone Company Pursued By Facebook
Ask HN: Cheapest iOS development option?
I'm looking to do some iOS apps and I was wondering what my cheapest options are. I'm not interested in using a MacOS machine outside of app dev once in a while, so it doesn't make sense for me to spend 2k on a macbook pro. Any suggestions?
Not sure it won't get deleted along with the original repos that I forked it from, but at least here is the repos reverted to the last useful commit:

https://github.com/lucb1e/avow-ci/

And if it gets deleted, I have the code locally.
Finding a quiet safe place at PAX East, Take This helps with depression, anxiety
I was specifically thinking of anosmia and ageusia. There are many invisible disabilities that most people aren't aware of; anosmia is one of the ones where most people who don't have the issue don't even see why it might be a problem until they've really thought about it.

Couple of articles about or by people who have experienced the loss:

http://www.slate.com/articles/health_and_science/medical_exa...

http://www.smh.com.au/lifestyle/diet-and-fitness/life-withou...
"The oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick." -- Bruce.

https://www.schneier.com/blog/archives/2014/03/choosing_secu...
> Ideally, I can use patterns in multiple languages, so my experience can seamlessly transfer.

In many cases you are not guaranteed via the type system that one individual's implementation of the Observer pattern (for example) is not full of bugs, contains side effects, or closely adheres to the pattern's spec.

I believe Gabriel is hinting at the theoretical underpinnings of what it means to be composable, as opposed to just talking about how things can be mashed together (via pattern or interfaces or contracts or testing or whatever).
To get beyond the paywall search for this:

"Google Buys Drone Maker Courted by Facebook"
Maybe they're doing it behind the scenes for Android 5.0, and aren't telling us about it? Google isn't exactly doing community development of Android. One can hope.
How does autocomplete work in vim? I use vim all the time but have shied away from plugins. I feel they will confuse me and make it difficult to separate native functionality from plugin. With that being said, I also think it's time for me to bite the bullet.
Planet Money has an excellent episode where they discuss this topic in more detail: http://www.npr.org/blogs/money/2013/02/12/171814201/episode-...
Sounds reasonable but a bit outdated. Then again who would've guessed that historical ubiquity of JS scripting language would eventually put it on server side?
Eh, most apps are not doing computations like this in their main thread. Android does have some touch responsiveness issues, but this article has nothing to do with that.
Storm doesn't naturally support dynamic topologies and is rather resource hungry, which needs a bit advanced planning. I was looking @ Storm for my own pipelining product (bip.io) very early on and shied away as too high an opportunity cost for self-hosting users/devs to be bothered with. On a Rasberry Pi for example, forget about it. Without being able to create dynamic graphs it otherwise just ends up being a simple message bus (anti-pattern).
It's a PCA boosted hidden markov model using sparse regression trees to map into infinite gradient boosted dimensional kernel space, pruned with C5 LOESS zero one loss function and L2 regularization parameter implemented in SVM.

...someone should make a bullshit generator for ML models
or shell alias:

cat /usr/share/dict/words | awk 'BEGIN{srand();}{print rand()"\t"tolower($0)}' | sort -k1 -n | cut -f2 | head -n 4 | tr "\\n" " "

suggestion would be to find a better word list than the default aspell since that is the entire Oxford dictionary, which isn't as memorable (although it is an interesting way to learn about new words).
So your logic tells you that Tesla has "invented" an electric motor, so rugged that it can withstand that riggers of being inside a consumer vehicle on the open road with a novice operator, in various environmental conditions, that is a fraction of the cost of similarly powered electric motors that operate in static environments, such as a factory floor, with experienced operators and fixed maintenance schedules? Wow.. I have a bridge to sell you... you're not the guy to be discussing "common wisdom"...
YC Starups StackLead and Orankl: 90% Off 3 Months Premium
even more general:

let a = 1; _ == _ = True in a == 1 && a == 2
Thanks for posting these links. They do help framing the debate on carcinogenic effects of Graphene better than hearsay.
It's done in Javascript, but would still be nice to throw this on Github. :P
I spent 2 years living in rural Central and South America, and of all the things that shocked me on my return to North America, the sheer amount of stuff people have was by far the biggest.

People have multiple cars, boats, quads, kayaks, tvs, couches, RVs, snowboards, skis... the list is endless.

I was dumbfounded that people have so much stuff, they pay money to put that stuff someplace.
Thanks for the feedback, and glad to hear you'd like to use it!

Looks like the server crashed tho :( - may need to find better hosting option.
Reminds me of my writing before I discovered The Elements of Style by Strunk and White.
Awesome, thanks. I've already downloaded 134 Van Gogh's to start from a different site, but it looks like these might be great resources.
Great post. I also wonder about the ops thoughts on free versus paid from a consumer perspective. I wonder what the cost of a free customer is when you have a consumer product with a freemium business model.
Gun – Distributed, embedded graph engine
I support the conclusion of this XKCD comic, but the math always seemed off to me.

Lets say your dictionary has 100,000 words[0], and your attacker has access to the same list. If the attacker knows that you have chosen four words off of that list, he still only has a 1/4,166,416,671,249,975,000 chance of guessing the right permutation (not combination!). That's less than 2^61, which is certainly very secure.

However, the entropy calculation in the XKCD comic assumes that the characters are uncorrelated with each other, the way they would be if you used a random sequence of characters as your password.

(Of course, this assumes that you choose the words truly (pseudo-)randomly, and not "cherry-picking" permutations that are easy to remember.)

[0] Not unreasonable - /usr/share/dict/words on Ubuntu has over twice as many.
[1] The Android code for that test is messed up, and suffers from a race condition and isn't tied to vsync like a normal Android app is. There's a pull request on their github page to fix it, but they haven't accepted it. Regardless, this is a hardware thing not a software one. Apple uses very, very good touch screens. The Nexus 5 also has a really good touch screen, with total touch-to-display latency in the 60ms range.

[4] is total horseshit. He doesn't know squat about any of the platforms. iOS devs also called him out for getting just about everything wrong about how iOS works.

[5] is something iOS devs totally also have to do as well. That is so not an Android-specific thing.
Apple's objective-c and associated framework were designed to be coded against (and even though it supports message passing, it still heavily uses parameterized sub-routines).

A lot of 3d modeling software provides frameworks where you hook things up instead of coding out solutions (Foundry Modo, Eyeon Fusion, Dynamo are a few). These are very domain specific and not designed to work as general purpose languages/frameworks.

We are working on some ideas for a general purpose compose-able framework and language that uses messages with behavior as the abstraction for communication between sub-systems (http://blog.interfacevision.com/design/design-composition-ba...).
Oh come on two MBPs is not an unreasonable travel burden(though for a while I was doing it with an MBP(personal) and a W520 and that made people mad at me at airport security)
It would be difficult to find a less sympathetic cast of characters than car salesmen from New Jersey, but I think the issue at stake is that the legislation in question was initially intended to protect new businesses in an established field and encourage innovation, but now is protecting existing business and hindering innovation.

It reminds me a lot of patent laws with respect to the software world.
That's what I've used in the past, but its more complicated to set up ("You either need to flip a setting on the server to allow listening on an interface besides localhost, or configure Nginx/etc as a reverse proxy." is not trivial for most). It also requires a server with a static IP to ssh to.
You could say that German is one of the languages where you can combine words to form new words pretty freely.

A lot of language features seem pretty weird from other reference points. But I don't think it's constructive to point it out like this.
Like many of the others that have been posted here, it's not self hosted
Thanks for the feedback, and glad to hear you'd like to use it!

I like the idea of turning into an app. That has its own learning curve, so I did web app to test idea first.
> Imagine what happens to your code when someone tries to write a function for its side effects...

The language used can hardly be blamed for that.
It would take a lot more fuel to reach Florida from Texas than it would take to boost back to the launch site. The first stage is only a couple hundred kilometers downrange at stage separation. Florida is >1,000 kilometers away from Texas.

The other advantage to boosting back to the launch site is that any failures result in the first stage crashing into the ocean. If you put it on a ballistic trajectory towards Miami... the worst case scenarios get a lot worse...
Quantenna promises to make Wi-Fi almost six times faster with new wireless chips
I really like idea D and this is really something I could use myself, but I would be wary providing SSH credentials to a 3rd party app. I'd rather have it as a software running from my personal computer and get the state of my server, and possibly make a cron job to have every hour the state of my server.
Possibly. On the other hand, the comments on this post seem to mainly show interest in the medical technology. (Just imagine the top-voted comments on a similar post on Reddit...)
A bit flipped, but I expect younger generations to be intolerant of the way animals are treated in our society; e.g. mousetraps, factory farming, animal experimentation. I'm not sure how to factor that into your game; "can I get behind future intolerance of behaviours that I consider ordinary" I guess.
> I wonder if Google made a mistake by not choosing native code for Android apps.

Seeing as Android runs on a lot more than just ARMv7, no, they didn't appear to make a mistake here at all.

Apple can tell developers to compile their app twice for ARMv7 w/ NEON & ARMv8-A64, but is Google going to go tell everyone to compile for ARMv6 (Android devices running this are still shipping), ARMv7 w/o NEON, ARMv7 w/ NEON, ARMv8 (not here yet on Android, but obviously coming), MIPS, X86, etc...?

> We have heard forever about Java (and other run-times) getting close to C in performance, but outside of specific test cases native code still runs circles around everything else out there.

The vast majority of the Java code in an Android app isn't performance-critical either. The code that actually renders an app is all in native anyway. The code to handle touch events and such isn't, but the difference between .1ms and .2ms isn't going to break the 16ms bank either.
Show HN: Sliding Pi, a 2048 game showing how ancient mathematician calculated Pi
You need to factor a set of good winter tires in the Tesla sizes into your cost model, then.

The stock tires on the Tesla and even most all-season options are woefully insufficient to make the Tesla safe in the snow, although its favorable weight distribution vs. other RWD cars does help some.
I don't know, the documentation is excellent. That is certainly one of the best READMEs I have ever seen. The organization of the setup sction of the README is superb. The author of the README clearly thought about the needs of new users as well as seasoned veterans. More projects need to adopt this general format:

# Getting Started

## Quick Start

If you are unsure of our project and just want to play around, you can
get things set up quickly by:

1. Clone this repository and…
2. Do something
3. Do the other thing

If you need more detailed instructions, have no fear. We are not going
to look down on you if you are not an expert. We took the time to write
a setup guide for newcomers: [Novice setup guide][novice-setup-guide].
Everybody has to start somewhere.

## Real Start

Follow these instructions if you wish to deploy your own version or
contribute back to the project. There is nothing we hate more than
README’s that ignore all of the practical concerns related to setting up
a long term installation. Follow these steps and it will be easy for you
to keep up with updates to the project and still retain the all tweaks
you made to suit your idiosyncrasies.

## Odds and Ends

### Optional features

Not everybody needs a XYZ plugin or wants to share their every action
with PQR. You can enable these features by…

### Rare Corner cases

In certain rare circumstances you made need to prevent X or implement Y.

Prevent X by…

If you need to implement Y…
I'm motivated to work on all of them! But since there is an experienced audience here I could get some pointers/feedback that I might've overlooked.
Typical efficiency of a vertical axis Savonius rotor which this looks like is very roughly 10% The theoretical power available in the wind is
0.5 x rotor swept area (m2) x density (kg/m3) x velocity3 (m/s). So guessing 12 inch by 4 inch (0.3 x 0.3 m2), swept area and 20m/s we have
0.5 x (0.3 x 0.1) x 1.225 * 20^3 = 147W so at 10% efficiency that gets the 15W mentioned on Kickstarter. But 20m/s is rather a lot of wind, Beaufort 8, fresh gale (http://en.wikipedia.org/wiki/Beaufort_scale#Modern_scale). The generator would certainly need to be lashed down. In a more moderate wind, say 10m/s, Baufort 5, fresh breeze you would only get one eighth part of that output, say 2W.

Unfortunately, as with many Kickstarter projects, the promoters make no mention of the actual specifications and operating conditions of the device. Looks like either a con, or perhaps just wishful thinking. Or someone can correct my calculations.

Of course such machines work, they have been used on boats for many years, but this particular one looks like a very expensive way of getting a trickle charger.

For comparison here is the spec. of an existing 3 blade Savonius with comparable output (12W at 8m/s): http://www.leturbines.com/products/le-v50-wind-turbine/.
Note that it weighs 9kg and has a rotor 450mm x 270mm, that is four times the area! Even if we assume that the Kickstarter device is for less harsh conditions it still seems a stretch to get the weight and size down so far.
> In many cases you are not guaranteed via the type system that one individual's implementation of the Observer pattern (for example) is not full of bugs, contains side effects, or closely adheres to the pattern's spec.

Nor are you in Haskell, of course. Nothing about that language prevents code being full of bugs, nor failing to adhere to a specification, nor, given the existence of unsafePerformIO, having side effects.

Certainly, a competent Haskell programmer will not write bugs, will adhere to the specification, and will not introduce hidden side-effects. But then, nor will a competent programmer in any other language.
Google Buys Drone Company Titan Aerospace
Misinterpretation, not bullshit. Per another reply, the original document was about 40 characters of English text.
Two weeks ago, when I was playing 2048 (I am a big fan for both 2048 and Threes!), I suddenly came up this idea -- instead of merging numbers, merging polygons; and then use the polygon with most edges on the board to calculate the approximate value of Pi, just like what ancient mathematicians did. I thought it would be a cool idea to explore.

I quickly finished the programming of the algorithm and basic game play. Since each tile is a polygon, the numbers start from 3 (triangle) and 6 (Hexagon). So the number series is more like Threes', but game play is more like 2048.

However, I had a hard time to convey the message of how the value of Pi was calculated, which I think really cool (check it out: http://en.wikipedia.org/wiki/Pi#Polygon_approximation_era). I tried different ways but they all look too cluttered on the small iPhone screen. Eventually I settled with the current solution: animate the polygon with most edges and value of Pi together to hint the connection between them, and show a tip of how Pi is calculated when the game is played the first time.

I am still not satisfied with this approach. If you have better idea, please let me know. I’ll try to make it better in following updates. But on the other hand, I found a few of my friends do like play this game a lot – they told me they like the sound effect (I made the sound effect a little musical – the higher score you have, the higher pitch it plays) and the subtle animation when two tiles merges. I would love to know what you think. Any feedback is welcome.
We built an incredibly easy single click OpenVPN setup tool for DigitalOcean and Rackspace during Sochi: http://www.tinfoilsecurity.com/vpn

Enter API key creds, it makes the box for you, sets it up, and hands you a config you can use for your client of choice. (The script is open source for those of you that don't want to enter creds - we don't store them, and actually remove access whenever we can; for example, we delete our own SSH key from DO because they let us).
I've never heard of ngrok, but the instantly obvious use-case is to allow testing of webhooks to my local machine. In the past we've done this by booting a temporary server on AWS and remote forwarding to our local machines, which is quite a bit more complicated. I already work on a node stack, so the npm install is wonderful. I expect I'll get a lot of use out of this. Thanks!
Referring to Cmd as Super is sort of unnecessary when most of the shortcuts in question are specific to OS X and don't work on the other platforms with a Super key...
This is amusing.
Here's the original (at least, what I believe is the original)
http://www.dack.com/web/bullshit.html
Most states require locksmiths to be certified and advertising services without being licensed is a bigger infraction than carrying picks.
The license has been criticized as not being truly "Open Source" or "free".

https://en.wikipedia.org/wiki/TrueCrypt#Licensing_and_Open_S...

Wikipedia lists it as "source-available".
This was a pretty light and fluffy piece:

" But the auto industry is different. In its early years, companies tried all kinds of ways of selling cars; you could buy them right at the factory, or at local department stores, or even from the Sears catalogue. But by the nineteen-twenties the industry’s major players had settled on a system of local, independently owned car dealers." - A good reporter would tell you why it settled on that system. It's behind the reasons these sorts of laws exist. When he does hint at it " the relevant Florida statute claims to be “providing consumer protection and fair trade.” he makes no attempt to even enlighten us as to why this might be the reasoning even if the reasoning is crappy and out of date at least discuss it

Oh, and it isn't just autos. " In most states, retailers and restaurants have to buy alcohol from wholesalers rather than directly from producers." Ok, pick the one industry that is heavily regulated due to religious and social reasons. Not really a great example to utilize given all the baggage and emotion there.

"But, according to a 2008 study, almost thirty per cent of jobs now require a license in some state or other, including many—auctioneer, shampooer, home-entertainment installer—where licensing seems totally unnecessary." Big sweeping claim without even referencing the study? Yikes.

I think Tesla should be able to sell directly. This though feels like an opinion piece from Tesla more than a reporter reporting on a story.
That's very ironic when you consider where the Apple came from. (An HP employee's free time.)
I'm surprised that Schneier would make such a comment. Entropy is entropy, the "difficulty" estimates already except that attackers are fully aware of the method and the dictionary used.
Reminds me of the twat-o-tron http://ifyoulikeitsomuchwhydontyougolivethere.com/the-twat-o...