skysight-inc/HackerNews huggingface dataset:
SHA-1 has been shown to not be collision-resistant. Correct me if you've heard otherwise, but I believe SHA-1 is still believed to be second-preimage resistant.

In other words, with fewer than
2 * * 80
trials, an attacker can generate two files that have the same SHA-1 hash. (In the case of C source files, this probably means embedding a nonsense comment in the middle of each file, probably several hundred to several thousand ASCII characters.) If an attacker can get the very carefully constructed benign file past code review and have the ability to modify the repository, they can substitute the very carefully crafted malicious file for the very carefully crafted benign file without changing the root of the Merkle tree.

Assuming that SHA-1 is still second-preimage resistant, it will take an attacker about
2 * * 159
attempts to come up with a file that has the same hash as a legitimate file not carefully constructed by the attacker.

So, the weaknesses in SHA-1 probably mean that exploiting those weaknesses in the context of git still requires a mole in the development team. Though, I wouldn't want to bet my life on nobody noticing a big nonsense comment in the middle of a C file or someone figuring out how to construct a reasonably reviewable C file as the carefully crafted benign file.

In any case, the weaknesses in SHA-1 still likely pose a significant difficulty in forging a git history without planting a mole in the dev team. It's much better than no cryptographic barriers to forgery.
Best Buy, the place where I had to literally explain to three employees six times that I did not want an extended warranty on my television? I'll pass.
Great article for highlighting the dnsmasq on OSX idea. I wasn't aware that you could run this there.

On the goal of having unlimited easy to configure real domains that point to locahost, another service of interst is localtest.me [1]. This offers *.localtest.me -> 127.0.0.1

[1]: http://readme.localtest.me/
Or perhaps Rust.
GitHub Founder Steps Down After Harassment Probe
I use KeePass synced via a Truecrypt encrypted volume on Dropbox, with a copy backed up elsewhere. Separate password for every account.

I have a couple of problems with identity providers. One is that they are, by necessity, a single point of failure. And because of that, they are more jucy targets. When someone exploits the provider, all of a sudden they can access any website that I have used that provider for. When the provider goes under or decides to stop operating the service, I'm probably SOL. If the service has an outage, I cannot use any website using it.

I also have issues with companies selling my personal info. At this point, yes. I do put more trust in a random website keeping my credentials safe for that website than Google keeping my credentials safe for every website that Google has in its clutches.

Public/private key crypto can work, but has issues of its own.
School and university are free, i.e. already paid with taxes, in Germany. The same goes for health care, although it is technically not a tax.
I like the open source angle. Good differentiator.
National healthcare and free education? What country are you talking about again?
What is the limit of human endurance.

If earlier it was assumed that -40 c would kill in 5 mins and now we have proof that someone has travelled at -62 c for 5+ hrs and with minimal oxygen.

Isn't that a black swan like event.

Obviously we can't test for these things but we can find limits through such incidences.

PS : whats with the downvotes. Do some folks want everyone to parrot the same line?
One gotcha of predicting is thinking of advancements as an invention followed by an almost inevitable progression towards better, cheeper and ubiquitous. Flying cars, household nuclear plants & lunar holidays have been possible with money-is-no-object technology but have stayed there while computers went from on Paper Turing machines to smartphones in your pocket thanks to Moore's law. Engines became ubiquitous in an economic process started by their invention. But, the economic process can independent to the discovery. They multiply each other so one can be worthless without the other. For space fairing, nuclear power, and lots of other things we never got a Moore's Law.

An interesting anecdote from the article is the first video call in 1964. That "invention" of the video call wasn't even an important event on the way to ubiquitous video calling. Modern video calls are a practically an inevitable outcome of a process driven by Moore's law and the internet. The idea of invention followed by iteration leading to ubiquity just doesn't apply here.

I think this is the strength and weakness of Ray Kurzweil (I like Ray Kurzweil warts, misfires and all). You might say that he gets caught by this gotcha. He expects an initial invention followed by improvements and refinements to launch a self propelled economic cycle like engines and computers did. Those things are rare and truly paradigm shifting. Also hard to predict.

OTOH, you might say he's on the right track because he's looking for the paradigm shifts. AI, Immortality. Etc.

I personally read Kurzweil similarly to the way I read Asimov. It's a form of art. I like Kurzweil's ideas aesthetically.
Out of Gas: Wearables Segmentation and the End of the Nike Fuelband
Geek rants on git
I, for one, would be extremely surprised if that happened. They are very thorough (even considering incomplete docs as a bug to be fixed).
We switched from github + Gitolite to gitlab a few months back and we're loving it. We've had no issues with it and it's really been a great move for us.
Free, as in everyone paid for it collectively (via taxes) and you don't need to pay directly to the college/university anymore. Not free as in noone pays.
Stop it, OpenSource! Google ain't gonna care about you ever
Looking at the lexer[0], it probably works on D and maybe C++.

[0] https://github.com/eudoxia0/cmacro/blob/master/grammar/lexin...
Very interesting but, a little disappointing. Like the author, I was hoping it really was a meteorite.
Easy HTTPS/SSL for development servers:WEBrick, lighttpd, SimpleHTTPServer, etc
What he means is something like non-reading-increments in hypertable.

How they function:

You write a+=1

if it doesn't exist in memory:
a=1
append +1 to commit-log
else:
a+=1 (in memory)
append to commit-log

After some time, 'a' is written to disk and the commit-log is checkpointed (so if a server crashes it doesn't have to read a very large commit log), and 'a' becomes immutable.

But you have to increment again the 'a' key, and it is immutable. So you create a new 'a':

And repeat again. After some time this is again persisted on disk and the commit log checkpointed.

Now you want to read the value of 'a':

If a merger has run, it reads different versions of data on disk and merges them, counters are merged and written as 1 key. So it reads 'a'.

If the merger has not run, it reads both versions of 'a', merges them in memory, and returns the value.

Now change '+1' to add_to_set(5). This is even better, because it updates the in-memory value, and if the hll doesn't change because '5' was already added to set, it doesn't even have to write/commit to log because no change is made.
Back when there were tollbooths where you had to pay cash, I remember seeing aggressive lane-changers, tailgaters, etc. pass by and then seeing them waiting in line, having gotten no further than us, at the toolbooth.
The primary article is from the Express, at http://www.express.co.uk/news/world/387763/Frugal-life-of-Mr... . The Huffington Post article you pointed to is only a synopsis, and a link to the full account. In the future, please reference the primary source.

Also, the HuffPo article's title, "... Is Notoriously Cheap" is a poor summary of the Express article, titled "Frugal life of Mr IKEA: Meet the flatpack billionaire who only flies economy"

The Express article does a good summary of Kamprad's frugal life, including mentioning his Porsche from the 1960s, his luxury villa, and his vineyard. That's not to say that he isn't frugal, but frugal is different than cheap.
I think it would be better to break up the data into a per state comparison with Europe countries. I think of the states as vastly different from state to state. NY vs Florida for example.
Africa’s Tech Edge
> the OpenBSD developers have done more to fix OpenSSL in the last two weeks that the OpenSSL developers done the last two years.

> one doubts that the OpenSSL developer understand the math and crypto in SSL and TLS, but they aren't the sharpest C programmers

I think you're selling them way too short!
We've been using GitLab for our production projects for almost a year now.

The biggest reason for moving from GitHub to GitLab was not having to worry about additional cost for creating new projects (we have hundreds of projects and most of them are rarely accessed long after they were created).

It's also neat that we have the ability to customize GitLab if we wanted to, e.g. in 2012 we ran some experiments to create projects from templates directly in the GitLab interface [1]

And lastly, since we're not in an environment with six-digit numbers of users and constant DDOS attacks - we're able to keep a much better uptime than we had before with GitHub.

[1] http://enga.ge/development/creating-a-sturdy-deployment-work...
I am working on a Brazilian public sector project, and since we only use open source alternatives running on our own servers (for security reasons), we chose Gitlab. It works nicely. The earlier versions consumed a lot of memory, but recently that's getting better. Would not recommend a too lightweight server, though.
The phrase often used in the UK is "free at the point of delivery" - it was one of the founding principles of the NHS:

http://www.nhs.uk/NHSEngland/thenhs/about/Pages/nhscoreprinc...

Pretty much everyone knows that the NHS is paid by taxpayers (NB I have met people working the UK public sector who had never given a moments thought to where the money they spent actually comes from, but they are pretty rare).
I am also native Chinese. In Hong Kong, "神" means God.
This explanation of how %r works here is incorrect:

> I knew about `%r` but hadn't realized that it escapes forward-slashes while leaving other regex symbols intact.

The correct explanation can also be found in the next sentence of your comment:

> But with the previous explanation of `%q`, in which arbitrary delimiters can be used, it makes sense...curly braces simply replace `/` as the delimiter, and `/` simply retains its non-specialness in regex.
We have gitlab set up at work for our small team, but we never use it. We just do regular old git operations from the CLI and use e-mail and Bugzilla for issue tracking. I've wondered if maybe there was a feature of Gitlab we're not using that we should, but so far nothing's stuck.
JOOQ newsletter (with new licensing options)
It's really not that bad. The U.S. / French per capita difference in 2010 looks to have been about $5000, if I squint at the graph. That's $20,000 after taxes for a family of four. U.S. out-of-pocket costs for health care[1] and education[2] aren't nearly that high, especially if, as the article claims, they're only counting real cash income and not employee-paid health premiums and other benefits.

[1] http://www.bls.gov/news.release/cesan.nr0.htm

[2] https://www.salliemae.com/assets/Core/how-America-pays/howam...
Sharp Rise In MERS Cases May Mean The Virus Is Evolving
Srcset and sizes landed in Blink
I would bet that this "long, long time" is like 3 or 4 years.
Last I looked, libnss still relied on libnspr, which brings it's own amount of overhead.
I'd assume you'd lose your domain.
If you're lucky someone else might pick up the gTLD and you could probably keep it then.
They are paid for by tax, the graphs however are post tax.
When we migrated over from CVS to git, we installed an instance of GitLab. It is really awesome, a private GitHub for your needs. The setup was a pain though, even after following the instructions. Nice to know they have a single installable package now at https://www.gitlab.com/downloads/.

We also use Atlassian Stash and JIRA for a client project (the client migrated from CVS to git) and honestly, found it to be quite similar in functionality and not too much better for the extra costs. Mostly, it helps that both (Stash and JIRA) are linked together, but I'm sure that can be done with GitLab and another issue tracking software like Bugzilla.
There's a famous (in the UK) example of how prevalent it seems to be in politics: a Labour aide, Jo Moore[1] eventually had to resign after issuing a memo on 9/11 basically saying "today would be a good day to bury bad news"

[1] http://en.wikipedia.org/wiki/Jo_Moore
You will find that SharePoint 2013 with FAST has already fixed those problems - search is really powerful and fully customizable.
I don't agree at all. I am betting that once LibreSSL is "done" it will get adopted heavily and the community will have a cleaner and more secure code base to work from going forward.
Hopefully in general it simply becomes howstuffcontinuestowork.

There is some neat stuff there, it would be a shame to lose it.
3 new content marketing tools to help you generate content AND ideas
We've been using Stash as well and I'm, for the most part, quite pleased with it. My biggest initial problem was a lack of GitHub style, convenience feature. In the last couple updates, they've filled in the biggest feature gaps and demonstrated they know what they're customers want.

I'd still like to see cleaner Jira integration.
If the information is available, why not offer to add it to someone's calendar?
These are some good tips. If you are into the Ruby language and want more, I recommend checking out Ruby Tapas http://www.rubytapas.com/ . I have no affiliation with it, just happy customer.
A nice feature is that it also features a REST API: http://doc.gitlab.com/ce/api/

One thing I’m curious about is performance, as with a personal project I found the `grit` git-ruby bindings rather sluggish when loading in multiple repos… The new `rugged` bindings are supposed to perform much better and if I understand in time Gitlab will switch to them.
Ada sounds like an excellent choice. Of course, it's No Fun By Design™, but it's very, very safe.
It was all going so well...

“It can’t be anything else. The shape is typical of meteorites – a fresh fracture surface on one side, while the other side is rounded,” said geologist Hans Amundsen.

Every hoax just needs one credible expert to put their name to it. This story may not have been a deliberate hoax but it ultimately was a hoax. It is good to see something debunked with some good, old-fashioned science!
If it were me I'd probably try and get an old oil rig that's headed for the scrap yard and put a large, uniform platform on it and try and land on that. If something goes terribly wrong it will happen 20 miles from anything. The majority of rigs don't bob, they either sit on the ocean floor or they're tethered down so the up and down motion that would happen when they're free is actually translated into more or less tension in the anchor cables.

I was thinking "barge" at first but if the seas were rough it'd get tossed about and make landing a disaster.

EDIT: It would probably cost millions for all the steel even at salvage value, but that's probably a lot cheaper than the insurance (if you can even buy it) for having a reusable rocket come back over land and attempt a landing, however remote the location.
predicting what people will actually want to use

Bingo.

When reviewing assorted long-term predictions, I've notice the primary issue with failed predictions isn't so much that we can't do X, but that we don't want to.

50-100 years ago, the big favorite was variations of living in space/Moon/Mars/etc. Yes, we could certainly do that. What the pundits failed to take into account was that for all the hard work involved in settling there, it's...boring. Yeah, the trip there is exciting ('cuz it's fast, violent, and failure would be spectacular), and being "the first" (or among such) would be a social thrill, but once there mere survival would be paramount & dominating with little time to explore stagnant rocks.

Likewise other predictions. Yeah, we can do them, but given a matter of diminishing returns on high costs we'd rather stare at pocket supercomputers with instant worldwide high-bandwidth communications.
LibreSSL is a FREE version of the SSL/TLS protocol forked from OpenSSL
tptacek faulted 'Practical Cryptography With Go' for recommending PBKDF2 over bcrypt and scrypt however this is not what Django is doing.

Django chose PBKDF2 of the three primarily because it was easily implemented without pulling in third-party dependencies, which is very helpful for Django's deployment. Given the choice of the three, I think most all Django core developers would say that scrypt or bcrypt would be better but of the three options, PBKDF2 was deemed to be the most acceptable for driving adoption. Before PBKDF2 was added it was using a fast hashing algorithm and had no way to select one so all three were considered improvements and PBKDF2 was considered the 'safest' for adoption, not the optimal one. Note that it is now fairly easy to add bcrypt or scrypt into your django deploy if you choose to.

I'd also add that the parent article, talks about PBKDF2 but I am not sure it is using it correctly. It makes no mention of how many rounds it is configured for and I'm not sure what they mean by 'dumb iterations'. It should be able to make it as slow as scrypt or bcrypt or on a single machine benchmark. The advantage of something like scrypt is that it pulls in complexity on memory as well as CPU.

Edit
For anyone interested in the decision making here, this was the summary ticket on Django password hashing and my summary at the time:

https://code.djangoproject.com/ticket/15367

https://groups.google.com/d/msg/django-developers/ko7V2wDVsd...
Clippy Was Only The Start, Cortana Has Many Personas
That's to be expected. But they got some very valuable data out of it.
Whenever I see new top-level domains I can't help but think that the internet would probably be nicer without any top-level domains at all. You can still always buy a sub-domain from someone.

Failing that, does anyone know if any of these top-level domains are to be sold cheaper? ".cheap" is actually not any cheaper than normal but a ".end" or something which cost only $2 a year might be pretty cool. Of course it'd be even easier to swat but you shouldn't have any problems if you use a long domain name.
Shameless self plug, the same thing for Java: https://github.com/norswap/caxap

Although I'll acknowledge the criticism made elsewhere in the comments: this is not really usable due to lack of tooling support.
It's close to the end of the list, but it's worth hearing more about Scheme Bricks and the music people do with it.

http://www.pawfal.org/dave/blog/2013/05/algorave-practice/
What problems have you found trying to write memory safe code?

It seems to me that you barely have to think about memory ownership anymore ever since unique_ptr and shared_ptr came along.
They won't be, they are doing another ocean landing in like 4 weeks. But hopefully sometime this year.
It would be interesting to see these graphs for discretionary income, or at least income compared to cost of living. I moved to Europe and part of that means I no longer need to own a car, saving a good deal. I also find I spend less on energy and rent (but perhaps that's because I lived in very expensive places in the US before; the bay area and Santa Monica). I _feel_ much wealthier than I was before, but I wonder how much of that is due to lower overhead? Would the average person experience the same?
The The Book of the New Sun by Gene Wolfe.
That’s awfully cynical. It also happens to be completely wrong. I extracted the following form a horrible Answers.com FAQ that was spread over 75 slides (barf):

"If the wrong code has been entered 7 times (35 consecutive button presses), the keypad will go into an anti-scan mode. This mode disables the keypad for one minute and the keypad lamp will flash. The anti-scan feature will turn off after one minute of keypad inactivity."

The Ford Explorer is hardly a “luxury-branded model”, and I’d venture that Ford uses this same system on all their models, across brands.
Optin Pop ups, the good, the bad and the ugly
Exactly. The income includes retirement and unemployment benefits but doesn't include other public benefits such as public healthcare, public education, public transportation. Being "after tax" it discounts for taxes that are usually higher in Europe but it doesn't discount for expenses that Americans generally have to pay with their income after tax but which many or most Europeans pay via tax (or don't have to pay at all) such as health care, college, third or fourth family car, higher cost for religious activities, higher cost for litigation, higher cost for private security etc.).

It is difficult to make good comparisons without taking the public spending into account or deducting for the part of the private income that Americans must allocate to expenses that are paid over the taxes Western European countries.

For most Europeans the value of free or almost free public benefits such as public healthcare, public education (from kindergarten to university), public transportation, low crime rate etc. is substantial.

Having lived in three European countries (Scandinavian, Iberian and now in the Balkans) and in the US (New York) I have maintained for years that American median wealth seems smaller than Western European wealth and that there is a huge public investment backlog in the US: Roads, airports, subways, railroads, hospitals, schools etc. is very outdated in many places (probably because much of it was built decades before similar infrastructure in Europe).

In America I felt like we would have to struggle just to make it into what felt like "middle class life". In Western Europe middle class life is a base from where people build their lives.
What Good Marathons and Bad Investments Have in Common
Me too. It's a great podcast. I never check out the website though, despite the pleadings from Josh and Chuck. I recall recently they were encouraging listeners to play the podcasts directly from the website, that the website has been revamped, etc.
The 7 faces of London’s tech scene
Of course, if the government can't be malicious on behalf of malicious people, then a less representative government could be a good thing for those with lesser means.
Hey yeah when you ignore all the results for the 50% of the population below the median, things look pretty rosy! USA USA!
Guess Who Makes More Than Bankers: Their Regulators
Technology and IT Marketing Agency UK | Tech Marketing Company
> “There are laws for people and there are laws for business, but you are a new category, a third category, people as businesses,” Brian Chesky, Airbnb’s chief executive, told an audience last fall. “As hosts, you are microentrepreneurs, and there are no laws written for microentrepreneurs.”

I'm not sure if this is genius or plain foolishness.

One one hand I agree with him about laws needing to change with the time.
On the other hand I just can see how he can think he can wave his hands and say that they don't fall under the existing laws and therefore aren't accountable to them.
John Cochrane vs. Financial Intermediation
Outside of the handful of major metro areas you can get a respectable house for around 100k and a really nice one for perhaps 200-300k. Can you even buy a trailer home in the Valley for 100k?

Edit: I went and looked on Redfin and most trailer homes in the valley go for quite a bit over 100k there are maybe 4 listings for trailers for 100k or less.

http://www.redfin.com/CA/Sunnyvale/1050-Borregas-Ave-94089/u...