skysight-inc/HackerNews huggingface dataset:
It's always kind of cute to see ridiculous headlines roll through.

Taking a look at the paper and a stream of thought about it.

- Researchers are affiliated with a university they aren't kooks

- These are physicists. They speak a different language. That will make decoding this paper difficult. It may have useful insight, but it is obscured by the jargon of a different discipline. Typically I haven't see continuous diffeq in crypto. >.>

- Essentially I believe this is a two-directional stream cipher, with prior clear?crypt?text from both sides feeding into the input.

- I'm not sure what unbounded precisely is being meant here with their coupling function.

- Almost zero crypto papers cited (I counted two, and they sounded fringe-y by title and were also published in physics journals).

Several key aspects have been neglected by the authors:

- Lack of citation of the current state of crypto- they betray nearly no understanding of the terminology of crypto nor present the contribution to the field in relation to the field.

- No analysis of the information-theoretic leakage of the communication system.

- No analysis of keyspaces, expected break time for chosen|known ciphertext, etc.

My take on it is that it's a well-intentioned but largely useless paper by non-experts. If they took the time to understand the field, it might have some valuable insights.

I would guess the coupling function as an idea results in a system design that leaks information like a sieve about both Alice and Bob. It might be a restatement of something like switching keys periodically, but I lack the vocab to interpret.
I am not concerned about a government stealing my domain. I am more concerned about a hacker stealing it by social engineering their way into my account with my registrar and transferring it away or modifying the nameservers.

With my perfect registrar, I'd be able to log into my account and check a box which says "Notify and delay all changes by 24 hours". So that even if somebody does get access to my account, if they try to transfer the domain away, an email/sms will immediately be sent to me to warn of the event, and the transfer wont begin until 24 hours later, giving me time to prevent it. Also, actions such as changing the account email address or phone number or the domains nameservers, or unchecking that "Notify" box, would also be subject to a 24 hour delay, and a notification. Also, I'd get a notification whenever a login occurred in my account from a new previously unseen IP address. Also, it would have 2FA, but that goes without saying.
I messed up the formatting. I meant to say:

Dealership pays you: $5,000
InstaMotor pays you: $5,500
---------------------------
You get paid an extra: $500
"Does Google use EXIF data from pictures as a ranking factor? Potentially, yes."

This is a simple, but brilliant optimization.

With the Manufacturer & Model info from the tag you could make an educated guess about professional vs. non-professional photography and draw conclusions about website's intent.

With the date & time you've got relevancy of time beyond just search results. EG if you're optimizing for freshest / relevant content a "new" article that contains a recent picture with positive PR signals could outrank another "new" article that is using old pictures.

With geo-data you've got an obviously powerful signal.

And on and on.

It is kind of crazy to think about the sheer # of breadcrumbs we leave online for GOOG (and, ahem, other organizations) to learn about us with.

PS -= This is hugely useful resource, thank you for submitting!
I think that is the amazing part here. It seems the researcher was doing the same type of work, implanting stimulators to study nerve function below the injury. Something in this case however is allowing on-demand capabilities and that is a mystery.
How to fix the Heartbleed SSL Bug on Ubuntu
Heartbleed – what we do
A service not in HK will get you your boards faster though, I'd pay 4x to get my boards this week instead of sometime in the next month.
I did notice that the UI gets slower and less responsive, but I blame myself for being a cheapo and expecting a $70 box to last years.

I'm waiting a bit to see if the next RokuBox or AmazonBox ends up supporting iTunes videos (which is a nice to have, but not a must have.)
Disagree with the premise. Excel is a great product because it's so flexible. The same product that financiers use to create valuation models can be used by your mum to create a grocery list, or your small business to create an invoice. A spreadsheet is a blank canvas which can be used to create pretty much anything, and doesn't force the user to use it for a single use case or in one specific way.
No, someone could disable the implant and remove use of limbs. The implant is not controlling the limbs, but providing stimulation that allows normal control to work.
Interesting - I certainly understand the intent but those notecards brought to mind a lot of questions.

One that I don't see mentioned elsewhere is about "By age 13, more than half of all girls are unhappy with their bodies." I'd love a source not because I doubt that it's true, but because I want to see a number for boys. 13 is the start of puberty, and most kids are clumsy and squeaky and looking longingly at the kids who are already attractive or athletic or just not so damn awkward. I take their point, but I didn't like my body at 13 and it wasn't because of gender roles. It's because my body didn't work very well.
"New" Pacific Island Consumes Its Neighbor
I'm curious about what you find scary. Scary for someone considering applying for the job or scary because it says something about us?

We put it in the job description because we think it's true[^1], but the last thing we want to do is scare people away.

[^1] If we get really big and you're in charge of operations, you'll be COO by definition. If we stay the size we are now, it seems unnecessary to call anyone a COO (or any of the other C*O roles).
Actually the opposite is true the EU governments have the national security get out clauses which a private company does not have access too.
Do's and Don'ts of Using Light Typefaces
CouchDB and the Heartbleed SSL/TLS Vulnerability
You can re-target the teleporters. And several teleporters can target one teleporter. And you can iterate over all teleporters and check where they are. I've said too much.
Agreed, that's a very large number of videos.

The lead-in copy on the landing page might need an iteration or two, "to help struggling site owners understand their site in search" read very strangely to me. I'm not a native speaker, though.
the hacking is a good way to bring publicity to the Palestinian cause and exposing Israeli crimes against Palestinians since mainstream media in US and the west ignores these crimes as they are controlled by Zionists and Masonics
MongoDB – Automation
Much easier to just manipulate the brain...

It is how a large portion of this country works already.
Probably less of a downside than not being able to move your lower body at all, but yeah.
From your link, emphasis mine, "The team prototyped the idea using an mbed-enabled NXP LPC1768 prototyping board, and then transitioned to a full custom design using the mbed HDK for NXP LPC11U24 board based on an ARM Cortex-M0+."

So the hardware may support hacking, but their software isn't designed to be hacked (e.g., requiring licenses).
I'm in the same boat -- the payments I collect for my products are split pretty evenly between Stripe & PayPal.

Answers:

1) As in being able to change the subscription price each month? Snappy Checkout does allow you to manually change the subscription price. But, I suppose making that change via the API would be the better way to go. If you're interested in digging into this some more, please send me an email with some more details on how you envision this working.

2) I've thought about this, but haven't tried it yet. If I could integrate it into the checkout window, then I agree it would offer the best flow. And, there is always the question of how many people are using PayPal Payments Pro and have the need for something like Snappy Checkout.
You are referring to using an index, correct? Because grep is absolutely, madly efficient for a doing a full search.

The index portion of a file system are called files and directories.

Several file names can refer to the same data. Those are called hard links.

So with hard links, I can refer to a Foo by their related Bar.

/foo/foo1
/foo/foo2
/foo/by_bar/bar1
/foo/by_bar/bar2
/foo/by_bar/bar3
/bar/bar1
/bar/bar2
/bar/bar3
/bar/by_foo/foo1
/bar/by_foo/foo2

If I am not mistaken, this accurately describes the limits of MongoDB in terms of mapping relations. I'm not a Mongo expert because no one could convince me otherwise to date, somebody correct me?
That sounds awesome in its own way. You could probably make millions in Houston with a restaurant featuring that.
Try to check other non-google analytics tool to know what is available if you plan to build something.

Simple start if this is an exercise.
Difference Between Successful and Very Successful People
Just to note, the MongoDB journal is basically a write ahead log and has been around since 1.8. It's not simple, you are correct, and involved remapping portions of memory privately, and leads to some inflated numbers on the virtual memory reporting side. There's a great write up here:

http://blog.mongodb.org/post/33700094220/how-mongodbs-journa...
And that, more than anything else, is why we should all use OBJ for static meshes whenever possible.

In a past life, I worked on .dae import/export code--COLLADA is almost a parody of everything you can do to overengineer (badly) a file format.

I don't understand why people fail to grasp that, for static meshes, we solved the problem decades ago; I say this having done the exact same thing many times reinventing a compact binary rep.

EDIT: As a colleague points out, yes, sometimes for assets OBJ is not optimal; I contend however that for interchange it's pretty good.
Build a bridge :)
https://gist.github.com/anonymous/0dea3ab11a2e71e6e7c7
Are you guys planning on doing custom cables as well (at least on the other sites)? I imagine the molding tooling makes this a no-go for anything but larger orders.
Just imagine if we had a few thousand hackers working on this stuff full-time, what could be accomplished.

Here's hoping it happens.
Getting around ngApp limitations with ngModule in AngularJS
Ask HN: CDN in China?
Over the past few weeks our customers in China have faced difficulty accessing our site. Our servers are in N. Virginia AWS data centers, and we have subscribed to 3 different CDNs - Cloudfront, Cloudflare and CDN.Net. The first loads of assets from these CDNs are erratic and have 30 seconds or more of latency.

The CDN performance we are seeing is comparable to hitting our servers directly. Overall the experience is quite bad, and none of our CDNs had service issues while we were facing issues. It is presently responding quite well but here is a typical access timing last week: http://www.webpagetest.org/result/140327_WJ_D3Z/1

I don't know why it is so erratic, and what we can do to fix the problem.

-- Are there CDNs that are guaranteed to work well (ChinaCache?)

-- Does anyone have a home-grown multi-CDN solution that is self configuring - if that is the way forward?

-- In general what is the best practice when dealing with content delivery to China?
Most professionals will scrub the meta data from images as part of the image optimization process - smaller images faster sites.
Don't drink your own Kool-Aid
Bitcoin isn't a new crypto algorithm. It's a distributed ledger algorithm that uses well known crypto protocols. It didn't invent its own magical hashing algorithm or anything of the sort.
Announcing Mozilla::PKIX, a New Certificate Verification Library
That’s Where The Money Is
> https://twitter.com/WarrenGuy/status/453510021930680320

Heh. Eliding the hex values of the password might have been a good idea.
This is exactly what the author recommends in the article.
Does anyone make a JVM that can save its memory image in the style of Smalltalk and Lisp VMs? This would give a potential solution to the Clojure startup time problem. (There was a JVM on Smalltalk named Frost.)
Would this type of weapon be able to shoot satellites right out of the sky?
Organizational Development Can Help Mature Startups
In regards to your first solution, I keep going back and forth on whether or not it's professional to add a conditional warning that detects an old browser and explains the upgrade process. I know there are some scripts you can throw on your sites that automatically do this, but I'm not sure if that's a good idea.
Should have used KeePass. Even HTTPS isn't perfect, so uploading your data to a third party is a bad idea.
This is surprisingly detailed design rationale which weighs many alternatives and gives careful consideration to possible tradeoffs. Great job by Nathaniel Smith and the numerical Python community.
I'm unclear on what you mean by "MITM... serving Javascript to EVERYONE". In a typical MITM scenario, you've logged into your coffee shop with an insecure network, or you are in some Middle Eastern country where all traffic is under control of the government.

Unless you are somehow able to route all traffic through your network, you cannot MITM "everyone", no matter even you have the private certificate for lastpass.com.
That's really interesting, how did you get these statistics (do you work for Bloomberg, or do they have this publicly available somewhere)?
USD is the only currency Snappy Checkout is able to handle right now.
Science vs. journalism, in one chart
I think this is one of the more important points. Most of what we were doing back then is now easily done by everyone.

We dropped trunks to get free conference lines so we could all be on the phone together. We scammed the phone companies for free long distance to talk to each other. We had private BBSs. All of that has been suplanted with every day tech and done better.

We cracked programs because we were young and couldn't afford software. You had to know someone, be in the scene, to get access to that stuff. Now there are thousands of websites.

All the really postive stuff is out there for everyone. It's the dark hacking that is thriving and I am not surprised it is not out in the open. But I am certain it is there... they just don't want the publicity. We used to do it for the thrill... they do it for the cash.

Although hacktivism is new. We were to busy trying to figure out how it worked to make any real statements.
The blog post was rather vague about 2.6's "better performance". Are there any concrete numbers?
Thanks for the reply Ian, look forward to trying the service out! Although I see lower down that it was meant as a joke, so perhaps not :P
Are you implying that a performant Mongo DB must keep all data in RAM? That's not true. We've got almost 1TB in a Mongo DB, and we sure don't have that much RAM.

You do have to be able to keep your indexes in RAM, but that's much less limiting.
The legality is unproven but Apple's General Counsel's office has embraced it. It is an increasingly mainstream idea. It should be standardized.
You get robbed, and then you get robbed again.

Then again, is this any surprise in a country like Nigeria? That country has a long, long way to go to claw its way from the absolute worst in terms of corruption.
Unpredictable and unbiased
Which side of your brain is more dominant?
It looks like it charges $.50 on top of Stripe. When you work with Stripe you still have to write a little bit of code to request the charge from your backend. SnappyCheckout looks to be a wrapper around Stripe (and Paypal) that takes care of that extra code you would normally have to write.
That's just part of being human, everyone does that. If you didn't, I'm saying you would have no desire to physically move.
Great point, I forgot about that. In that case, I wish they'd used * * * or something. @ just doesn't seem right to me.
Yep its key for a lot of technical computing and FORTRAN has had it for decades.
totally agreed. as engineers we'd all love for our children to follow in out footsteps, but if everyone was in STEM professions, what would become of the world?
The third Q&A "How can I tell google that multiple domains are related?" - "Use Hreflang" doesn't make any sense. This question does not reflect the question asked in the video, and the answer is incomplete. The question is about translated versions of international sites, that's not simply "related". And sitemaps work as well.

I think the site is a good idea, but if one of the first three results is flawed I'm not too sure about the overall quality.
Can you give examples? Are you talking about open-source projects that appeal to both coders and designers, yet are coder dominated? Or are you asking why there are more open-source coding projects versus designers? And what do you mean by "attract"? Do you mean in terms of popularity, or in participation?

Either way, I believe part of the cause is the inherent nature of the medium. When I commit new code to an open source project, the maintainer can easily see the diff, and in most big projects, there is automated testing and benchmarking so that the maintainer doesn't even have to do the full-regression testing themselves.

Furthermore, well-organized code libraries are divided into components...it's easier to chip away at these small units (whether they be files or function bodies) than it is to chip away at, say, a logo-image, that multiple people are working on.

Philosophically, code is more straightforward. While programmers may debate certain issues of style and design, if I were to take an existing code file and slash it in half, while increasing performance by 50% and not killing readability...and pass the automated test suite, there would be little debate about merging in my change.

However, how do you increase the "performance" of a visual design? There is no standard on aesthetically-performant, so cutting/adding 50% to a design means nothing on paper, and of course, there's not much in the way of regression/benchmark test suites for visual design. This is what makes visual design exciting from an artist's standpoint, and incredibly frustrating from a collaborative viewpoint.

And since many of the best open-source projects are collaborations...
7 ways I’ve almost killed FreshBooks
I said so below too, but OSH Park really is $5 per square inch, for three copies. Not $1. They are awesome, but not as cheap as you seem to be thinking.
An iPhone app and an *.io domain name? I'm content with the thousands of neurobiologists working on this stuff full-time.
I too use my tablet and phone these days for things I used to do on a pc. The natural question to ask, then, is what's the difference? What differentiates pc from mobile? I guess it's the OS, mostly. Android uand iOS are distinctly different from windows/OSX now, mostly because they're stripped down. But if they take on the same tasks as pc OSes, they'll have to get bigger, and then will the difference still matter?
It is a problem if you have a manual fulfillment process. But, not too important if you're currently using a checkout system elsewhere.
I'd expect most content management systems will do this, but there's tons of exif data hanging out on the Internet.
It was a parody of a misogynistic song.
It's established fact that Nigeria is a hot-spot for a lot of trouble. Just look at any of the metrics the UN publishes on corruption and murder rates.

Of course, this is just an average. There are parts that are fairly civilized, no worse than any asian country, but there are also parts that are out of control.
Instant search works great and is functional.
Where did I say that? I said that not being able to marry anybody at all you were attracted to is worse that not being able to live with one particular person that you might fall in love with.

Also, marriage has more legal implications than taxation.
Oops, my inch->cm was off by a factor of 2 there, very true!
Can you fill us in on what this actually means? "Stimulating" a nerve doesn't imply that you're bridging a severed connection or returning control to a higher center.
Different states have vastly different curriculums. A third grader from texas moves to california. The math class she's now in may be covering completely different material. It might assumes she has mastered skills she hasn't even seen yet. The common core solves that problem by bringing consistency to what subjects are covered when.
Author of OpenSSL vulnerability also wrote the spec
Link to the TLS/DTLS heartbeat spec: https://tools.ietf.org/html/draft-seggelmann-tls-dtls-heartbeat-01
Masstest for heartbleed vulnerability
https://gist.github.com/anonymous/12b15e3de9340655ed78

Variable to control the direction the robot moves, changed with the function phone.
You are using a computer that has Python installed, but not Java (perhaps for security reasons). But you need to run some Java code.
Fair enough. Here's one attempt at a fast high-level AES library, with hardware acceleration using AESNI, and some benchmarks:

http://tab.snarc.org/posts/haskell/2012-07-07-building-a-bet...
Is there a way to embed a picture within a payment link?

My friend could use this because her 'digital storefront' is literally Facebook and there's no way for her to sell things.
Ask HN: How do distributed certificate authorities (eg tack) handle Heartbleed?
With the announcement of the Heartbleed vulnerability, a lot of domains are getting a new set of SSL certificates in a short period of time. This seems to be a pretty straightforward process given the centralized nature of certificate authorities. Request/install a new cert. Have the old certificate revoked.

How does something like [Tack](http://tack.io/), which aims to replace traditional centralized certificate authorities with a distributed trust network, handle the case of mass revocation? Since so many certificates in the wild would have a really low trust metric around the same time, it seems like the opportunity would be there for an attack.
Link to the TLS/DTLS heartbeat spec: https://tools.ietf.org/html/draft-seggelmann-tls-dtls-heartb...
I've heard people say this before, but I'm a little confused by it. Do you only use one device? If not, how do you keep the PWs for your devices in sync without uploading your data somewhere?
It's amazing how addictive a nonsensical navigation system can be.

Also: has he been working out? His chin seems to shrink a bit with every new video.
Girls should be attracted into STEM by developing an educational/social environment that nurtures any indication that an individual female (or male) child is showing some interest.

Tempting girls into the field by dangling a carrot on a stick in the form of higher wages seems demeaning and backwards. What's more, in an age where automation is taking away more and more jobs it seems sensible to cultivate attitudes where enjoyment of work and achievement is valued more than direct personal income generation.

In any case, research shows that in countries where females are the most financially and socially free to do what they want they naturally tend towards roles related to medicine, caring and education, leaving the highly systematic jobs to men (engineering, computer science etc.). There's nothing wrong with that in and of itself, its just a difference, but we just need to make sure that anybody of any gender that exists on the spectrum of humanity is as free as possible to do what makes them happy.
Really? I've seen metadata scrubbed for privacy reasons, but never for size reduction. And realistically how much is saved in proportion to the image size?
Be sure to check out RethinkDB as well, which is pretty much mongo with a MUCH nicer query interface and saner locking.

http://rethinkdb.com/
http://rethinkdb.com/docs/comparison-tables/
Find a career in a growing field.

Though, I took your advice. Physics is extremely flexible but not very useful on its own.