skysight-inc/HackerNews huggingface dataset:
I have a couple realizations from this.

First off, at some point I became the person that would dig into a PoC for Ruby/OpenSSL/X509 bugs for hours. I've become a monster.

Secondly, I think that this is entirely wrong.

Standard disclaimer: I'm not a professional cryptographer. I have had to beat my head against ruby and the OpenSSL x509 bindings, so I know enough to probably make some very wrong statements.

That being said, the PoC is full of glaring errors. The ctx and cipher objects are created but never used. the Extension Factory is created and then entirely ignored because it's only used for the #issuer_certificate method. In addition, x509v3 extensions aren't used in any way during this PoC, so it has no reason to be there. And that's just the beginning.

I went through and picked apart the code in small bits to remove obfuscation and unnecessary actions while preserving the displayed output. Here's the massively cleaned up version:

#!/usr/bin/env ruby

require 'openssl'

key = OpenSSL::PKey::RSA.new(2048)
puts "Spoof must be in PEM format and saved as ca.pem"
raw = File.read "ca.pem"
ca_cert = OpenSSL::X509::Certificate.new raw

puts "before we sign the cert: #{ca_cert.verify(key)}"
ca_cert.sign(key, OpenSSL::Digest::SHA1.new)
puts "after we sign the cert: #{ca_cert.verify(key)}"

puts "Hijacked Certificate with chainloaded key saved @ #{ca_cert.serial}.pem"
printf "Verifying Keys Intergity: "
puts ca_cert.verify(key)

This removes all the variable duplications, doesn't write files because they have absolutely no impact on the behavior, and still displays the same output as the given PoC.

With a few final modifications it looks like this:

#!/usr/bin/env ruby

require 'openssl'

key = OpenSSL::PKey::RSA.new(2048)
ca_cert = OpenSSL::X509::Certificate.new(File.read("ca.pem"))

puts "before we sign the cert: #{ca_cert.verify(key)}"
ca_cert.sign(key, OpenSSL::Digest::SHA1.new)
puts "after we sign the cert: #{ca_cert.verify(key)}"

So what we've managed to demonstrate is that you can as a matter of fact sign SSL certificates with a private key.

Once again I may have _entirely_ missed the point on this and deleted a subtle line that had a major effect on the code. However with the sheer number of lines that were purely cargo culted for SSL implementations, I really think that this isn't an issue. I have an entire history of how I started with the original PoC and how I converted it to the above examples at https://github.com/adrienthebo/cve-2014-2734 ; please check it out if you think I made a mistake in my work.
Apple partnering with Shazam to develop a song-identification feature for iOS 8
Similar, but apparently "one-way": http://www.telescopictext.com/
I think WPF would be the same on Windows.
> There are no entanglements any more which link you to that event.

Not directly, but the information has spread out from your neurons into the surrounding matter ad nauseum. It's just we can't interpret the information anymore.

The event still happened in your past, you just can't see it through your limited human view of reality.
i recall learning that time "flows" both ways at the quantum scale, but i admit is has been a while since i've attended any lectures. has there been any new discoveries to say otherwise? i think i've read about research of both time reversal violations and time-invariance at the quantum scale.

also, what are peoples' thoughts on time being an emergent property at the macro scale and that down at the quantum level, everything is described by time independent equations, like the Wheeler-DeWitt equation? http://en.wikipedia.org/wiki/Wheeler%E2%80%93DeWitt_equation
A basic technique in bash is "UMQ": Use More Quotes
I wouldn't say I am a hater, but I really don't understand the enthusiasm for this product. Eating is one of lifes pleasures. Why reduce it to the most processed forms possible?

(I would make a bet that if it is launched in Spain, it will fail miserably. People here have a real passion for good food.)
Most likely of German descent. I seem to remember when travelling through Guatemala about 10 years ago that one of the locals that I got to know explained that the wealth in Guatemala, especially around Antigua, is concentrated in a number of immigrant families of European (primarily German) descent. There are about 13 large families and they tend to marry within that group.
There's good reason you got the most amount of resistance from physics majors. Intuition won't help you with theoretical physics. The only understanding is that achieved through studying the math in depth. Unless you've developed the formalism (in which case you'd be the subject of this article), you haven't reached any conclusions.

Hate to break it to you. There's no such thing as pedagogical theoretical physics- no shortcut to understanding physics.
Is this really new? IANAP, but I clearly remember being taught about the Arrow of Time as a probabilistic/thermodynamical phenomenon even in high school and I also read similar explanations that involved causality and probability theory without refering to quantum entanglement. Is the "quantum" bit even needed there for anything?
I like your concept a lot. It would be great addition to reading complex things.
Why Yahoo’s Not Going To Steal The Search Default For iPhone Away From Google
The bug reporter reported a legitimate bug. It lies on you to act on this information. If you ignore the bug and make other random changes to the code, it still is your responsibility to fix the bug - the fact that you made it harder to find the bug by altering the code is entirely your own doing. It does not fall upon the bug reporter to test your code for bugs for every change you make. To demand this, and to close the bug when they do not comply, is entirely the wrong thing to do.
Samsung Galaxy S5 fingerprint sensor hacked
Thanks for the link - it's exactly what I needed!
Samsung design platform
This already exists on Wikipedia.

Under preferences, select the Gadgets tab and enable "Navigation popups".

When hovering over a link in a Wikipedia article, a small popup will appear, in addition to some metadata about the link, the first paragraph of the article will appear, including links that may appear in that paragraph, which can also be hovered to make another popup appear.
I find the Google Dictionary plugin is pretty good for reading wikipedia like this...

https://chrome.google.com/webstore/detail/google-dictionary-...
The bible is Nielsen and Chuang's Quantum Computation and Quantum Information:
http://www.amazon.com/Quantum-Computation-Information-Cambri...
See also these resources in Nielsen's blog:
http://michaelnielsen.org/blog/writing/
I can't imagine anyone using PS to do flows.

I actually use Illustrator to handle the different artboards and do my flows and wireframes.

My team member uses Sketch for precision coordinates - our developers have Sketch too so they can just load it up and get coordinates for each slice.
AMD demos HSA for the server room with Java on top
Glasses use OLED display to simulate wearer's emotions
I like it a lot, my use of wikipedia often leads to a bunch of opened tabs and a lack of focus on what I was looking for in the first place (which might also be a great thing depending on your mood).
Wikipedia currently has a Beta feature name Hovercards

You can enable it here

https://en.wikipedia.org/wiki/Special:Preferences#mw-prefsec...
I would prefer to manage a issues page of some open source project rather than flip burgers...

Still, if the gardener is not doing a good job you can always change him/her...
> After some time, most of the particles in the coffee are correlated with air particles; the coffee has reached thermal equilibrium.

No doubt this is some way oversimplified explanation, but it still makes no sense.

Say I have hot coffee and lukewarm coffee. The lukewarm coffee will equilibrate faster. Does it interact with the air faster? What if I bring in coffee that's the same temperature as the air, so that it's instantly at equilibrium. Does it interact with the air instantly?
It will be great to see this as a Chrome/FF extension.
Good answers. Just a small comment: quantum entropy is a generalization of classical entropy. In particular, if A and B are classically correlated, then S(A|B) has all the properties of a classical entropy (Shannon's, in this case), for instance, it is non-negative.
C -> Varnish
PHP -> Yii
Ruby -> Merb
Scheme -> Arc
Clojure -> Core
JavaScript -> Multeor

Any languages in particular that you're interested in not covered above?
Stranger schemes have worked. Travelling to those sorts of places and eating with the locals often leads to effective and rapid weight loss thorough slightly unpleasant mechanisms. On a more serious note my sister had IBS for a couple of years and it went away completely and permanently after visiting Indonesia - presumably some gut flora transfer thing.
This reminds me of Apture, which Google acquired in 2011.
Agreed, that's the way I've seen these companies. AWS has truly become a layer that powers a huge part of the applications on the web.
Great!
I guess it is searching little bit too fast so that using browser's back button showing some other results for each key stroke.
Wow. Thanks. I am dealing with some crap I can't diagnose using New Relic and other logs; definitely gonna give this a shot.
I've heard lots of people sing praises for Redis source - https://github.com/antirez/redis. A cursory look into the source shows a very well documented code-base. It's one of the top items in my to-read-some-day list. Salvatore is an excellent C programmer and takes a lot of pain in writing good documentation, despite his not so great English skills. A shout out for him, thanks for setting an example.
Our approach has turned out to work really well, and very simply.

We have N servers in round-robin DNS. When our mobile client starts up, it does a DNS lookup, fetches the entire list of servers, and then picks one to connect to. If that connection fails, it tries another one, etc. until it runs out (which has never happened).

The point of the article is that this approach is vulnerable in the case where something about the client request harms the server -- either takes it down or impairs its response. In such a case, a single bad client could rotate successively through the round robin and take out every one of your servers.

The author is proposing a way to minimize the impact of such a bad actor while still providing a form of round-robin failover for well-behaved requests.
At or very near the Big Bang, the Universe was in a state of minimum Entropy i.e. minimum entanglement i.e. maximum order (in some sense).

Post Big bang the cosmological arrow of time is in the direction of increasing disorder i.e. increasing Entanglement i.e. decreasing order

On a smaller closed system, Before is when the system is more pure, less entangled, more ordered After is when it has become less ordered, more entangled.

Obvious really...
Fabien Sanglard http://fabiensanglard.net has some excellent code reviews on his website, particularly games.

You could read some of the code-bases he reviews, and then read his review. You'll be able to compare and contrast your opinions with his, and if there's interesting variation you can blog about it ;)
And what if you would move away from that surrounding matter? Or, say launch it away with near light speed, so it would get behind the horizon at some point. How is that situation different from the one in which I've just generated the number and the light cone haven't reached you yet?
Haskell -> XMonad
A Response To Fred Wilson: Actually, It's Great To Be A Young VC
I want my computer to get a concept of what I know. It should then gray out stuff I know and linkify stuff that might be new to me.
Semantic Web is the key word here. Decades of research went into that but this magic tool still is not anywhere near yet.
How long does it lasts ? Does this mean we have perfect food replacement for the apocalypse ?
The world’s most viewed picture is of a hill in Sonoma
I don't know why tim333 is being downvoted. The particular quote does sound iffy - Boltzmann did explain the cooling of coffee via purely classical processes.

The basic idea - the particle system moves throughout phase space. The vast majority of phase space consists of areas where thermal equilibrium is reached. If you compute the time it would take for the system to return to a non-equilibrium state, it's way larger than the age of the universe.

(Note: I'm not an amateur, though I did leave the field a few years back.)
How is it possible that this guy can do all this while he's still at stripe?
I love the talk. It's too sad to see Wufoo these days. All their great ideas about support disappeared after selling it to SurveyMonkey.
Thank you! I've had this feature for about 10 minutes and I already find it indispensable.
Link: https://en.wikipedia.org/wiki/Wikipedia:Tools/Navigation_pop...

Screenshot: http://i.imgur.com/lySrN1I.png
Thank you. I remember his Quake and Doom reviews. Will catch up on the others.
Well, Navigation popups seems something a bit different for me and not at all something intended for general consumption like the proposed changes (that I think is great).

First of all you need to have a Wikipedia account to enable them, and second this is something intended as an help for the editors. Wikipedia description of this function is:

"article previews and editing functions popup when hovering over links"
> And what if you would move away from that surrounding matter?

You can't :)

By surrounding matter I meant the rest of your body that isn't neurons, as well as the environment outside your body.
Nice work. I'm personally not a huge fan of autoplay, since there's a ton of stuff on SC and the search results aren't always accurate enough.

Volume control would also be ace. Not sure how easy that would be to implement - now that I think about it, I've never seen it on any of their widgets.
It's not news (it's been years that this connection has been made). Nick denied ages ago to be Satoshi a long time ago. Failure to use google isn't journalism.
Hmm, what would be awesome is a Django Debug Toolbar that works with DRF so that you can get additional __debug data attached to your AJAX requests/
I can appreciate the concern for eroding your title. I question the line where you decide who is an SE and who isn't.

I'm a recent cs grad who's dabbled in lots of c, java and python as my main languages. I'm getting into node and mongoDB. I drank the linux koolaid early so it pains me that I'm day jobbing as a jr dev building institutional investment tools, and I've got a fledging startup (Loodo.co).

Am I an SE yet?
Strange to see the Linux Kernel not being mentioned.

One of the best and clear-cut defined ways of managing source with documentations.
Wish they'd spend some more time fixing some bugs. Since 2.2 they've been pretty much non-stop on new features for the next version, and rarely have they stopped to fix bugs in .1 releases. It's happened, but mainly for huge show-stoppers.

There are all sorts of general bug regressions which affect generic coding and editing since 2.5 which are mildly annoying but happen many times a day when coding, that in JIRA haven't been touched.
3D photo tours in Google Maps (2012)
Incidentally, this was what my diploma thesis was about. The basic idea was to have a single »text« that contains lots of possible branching or expansion points, depending on certain criteria. Depending on those criteria you'd get a expanded or contracted text to read that would be tailored to what you already know or are interested about. Altering the text in small parts (like [−1½] mentioned in another comment – I found that one much later, though) was one part of it; inline expansions if necessary or wanted were a possible UX enhancement I thought of (avoiding a completely static text where you'd have to tell the engine everything beforehand).

Use cases I thought of were mainly adjusting texts explaining things (e.g. Wikipedia, school books, etc.) to the already existing knowledge of the reader. So that an article explaining a concept could look radically different (and going into increasingly more detail) depending on what the reader already knows. One proof of concept I created was adjusting the German Wikipedia article on Turing machines to three different levels (school, 1st semester CS student, 4th semester CS student) [75.3]. What each level does is either explaining things differently or leaving out parts altogether (no need horrifying a pupil with formulae). So my main focus was on providing something that reads well (expanding things inline still incur a context switch because they're not part of the original narrative) and finding a way how to model such things. Nothing automatic because a clear semantic model is needed for that to work.

Thesis can be found at [0.046], it's in German, but the abstract is in English too. Just in case someone might be interested in that.

[−1½] http://www.telescopictext.com/ mentioned by https://news.ycombinator.com/item?id=7602335

[75.3] http://hypftier.de/temp/turing.html – sorry, it's in German, but Google Translate seems to work fine.

[0.046] http://hypftier.de/temp/Diplomarbeit.pdf
Keyboard.IO Update [Arduino powered ergonomic keyboard with mechanical switches]
1. When you tell me the result 6296, my brain becomes only classically correlated with it, not entangled. The source of randomness (whether you got it through a quantum experiment or not) does not matter here, as I am only receiving the classical information.
2. After I forget it completely, all I can say is that I (my current body) am not correlated with the event --- but there is no reason to think of the event as being in my future. It's simply not correlated to me any longer. The process of forgetting means dumping all correlations with an event in the environment. For instance, neurons interact with blood stream that interacts with lungs, passing along those correlations to some air particles. So for my current body, the event never happened, although you might have written the number down and will always remember it. In other words, the past is relative.
That looks interesting. Does one need to have a background in QM before reading this? If yes, what would you suggest as a good read on basics of QM?
Ask HN: Canadian VPS hosting?
Hello HNers,

Could anyone please recommend a Canadian equivalent of Linode or DigitalOcean? I've done my googling, but the providers I've found seem amateurish and/or outdated, not to mention expensive.

Thanks.
I have some experience with Yii and coming from Django I'm not impressed with the _functionality_. Maybe the code is really great but why not study something Symphony which, arguably, achieves more and is therefore better at solving the same problem?
This is linked at the end of the Google Lens Blur article (https://news.ycombinator.com/item?id=7599397). It is related because it also calculates 3D data from the pictures.
Web Frameworks for Go
You should check the http://qt-project.org/downloads and just download the QtCreator
I think you get more benefit from reading code if you study something very close to what you are working on yourself, something in the same domain, in the same framework perhaps, or at least in the same programming language, at best something you are deeply involved in currently.

I never seem to get enough motivation to read deeply into random "grand" code bases like Lua or SQLLite, but some months ago I got into the habit of always studying a bunch of projects that use a given technology before I use this technology, and it greatly decreased the amount of time it takes me to get to a "idiomatic" coding style. So instead of diving in a random, I would recommend making researching existing code-bases related to what you are currently doing an integral part of your workflow.
Probability theory is how we model the arrow of time, but it's not a physical mechanism by which the arrow of time occurs. The article covers this distinction.
Sketch's main benefit is that it's built from the ground up to focus on vector-based design and composition, with a more modern, simplified approach to its interface. It makes it feel really light-on-its-feet and productive for UI design.

Photoshop is a powerhouse but has a lot of historical bloat built up over the years particularly around high-resolution bitmap editing. I mean it can paint a car out of a scene with a single brushstroke for chrissakes. Sketch has none of that, but in turn its vector feature set is super streamlined and thoughtful, so it's basically a UI designer's dream.

It would make a little more sense to compare it to Fireworks (may it rest in peace), as that was maybe a bit more suited to UI design than Photoshop.
How to create a co-ownership/partnership agreement on an app?
A few months ago I started on a freelance gig for someone who wanted a technical partner on an app idea. The unwritten agreement was that I would work for a small amount of pay during the project development with a long-term partnership/ownership agreement to make it worthwhile when we start generating income from it.

It's getting close to completion and I'm still in full control of the source code and server/data, but I'm still waiting for some kind of contractual agreement. My new business partner isn't clear on what is required to make it official so I decided to check in here for advice from people who have been in similar situations.

What should I be demanding to make sure I don't get burned on this? I've put a hell of a lot of work into it and although I've been told that this is will be a long-term partnership, I'd like some peace of mind.
Shuffle Sharding: massive and magical fault isolation / AWS / Cloud
Thanks for this list.

I was mostly looking for Python, Javascript, Haskell and C#.
Any help regarding that?

Also, as I believe this thread will also help others, you can go ahead and post about any other code-bases for other languages.
Well, even the Hovercards under Beta features also require a user account. And of course, there is the downside of now only having it enabled on the English Wikipedia.

What about the German or French Wikipedia? What about Wiktionary? Oh man, that is going to be hard.

Indeed, Navigation popups is not perfect and it is intended for editors first. But I mostly use it for speeding up my browsing.

But writing a general tool for all MediaWiki installations is going to be quite the task; a lot of MediaWiki wikis don't even have opening paragraphs like Wikipedia does (see Wiktionary for example). Sure, we can make some compromises and accept that non-encyclopaedia styled wikis don't apply to this tool.

I'd love to see a Firefox extension that did this. But for now; either Hovercards or Navigation popups provides the basics of the requested functionality.
C -> nginx
C++ -> Chrome
I mean REST has its place. For example, it has very predictable performance and well-known cache characteristics. The problem is when you want to fetch data in repeated rounds, or when you want to fetch data that isn't expressed well as a hierarchy (think a graph with cycles -- not uncommon). That's where it breaks down.

I think you can get pretty far with batched REST, but I'd like to see some way to query graphs in an easier way.
QT is under LGPL so unless you need to alter the QT source without open sourcing your changes, you can use it with no licensing costs.
You're welcome google (we are the rats labs that teached their system how to read)
> So for my current body, the event never happened, although you might have written the number down and will always remember it. In other words, the past is relative.

So where this event would be for you? In the future? Again?

Yes. Past is definitely relative. Special relativity is very specific about that ;)
AWS moves (smarlty) from ECU to vCPU
I really enjoyed skimming through Ian Piumarta's Maru, a Lisp in C, very pretty code, very concise. (I already mentioned it in other topics)

http://piumarta.com/software/maru/
Because we're not talking about the functionality but about the quality of the codebase? (Unless I'm misunderstanding).
Macintosh: Maximum Clipboard Size