skysight-inc/HackerNews huggingface dataset:
> Allergies aren't developed by ingesting the item responsible for the reaction.

Aren't they? I had no trouble finding an example to contradict you: http://en.wikipedia.org/wiki/Allergy#Non-food_proteins (first paragraph)

In general I'm not aware that we know all the causes of allergies.

> It seems that regulations require any poisons, drugs or other contaminants with the potential to be passed to the consumer through ingestion, must both be a relatively low dosage and completely out of the animal's system prior to slaughter.

What do you think "completely" means? It doesn't mean zero or even "undetectable"; it means there's some threshold level, anything below which is considered acceptable.

If you trust the people who are setting those thresholds, you have a lot more faith in the system than I do.
For the last question, couldn't a sector with a bad MAC get reported the same way that a hardware failure reading the sector would be? (Maybe that would produce misleading error messages to the user?)
It's not an inside view: I don't know more than what's reported in the media about the process behind those products.
I hope we're on our way towards that already. What you're describing sounds like what REST should be, in a perfectly implemented world. The problem is there are very few APIs that get it right. Github is the only one I can think of immediately - e.g https://api.github.com/repos/jcnelson/wish/events

By the way, the idea of the API as a filesystem (and the Internet as a network of filesystems) is something I've thought about a lot recently, and I'm in the process of building a shell around the idea. This includes `cat`ting URLs as if they were files, mounting endpoints as directories, and piping between services as processes... Figured I'd share due to the tangential similarity to WISH (it's even called wwwsh): https://github.com/spro/wwwsh
Man I've been having a run around recently with a notebook I just ordered.

First intuition is to just LUKs both disks. Ok, that might work, and then I see the horrible performance degradation from FHDing an SSD.

Second intuition is SED, and I got a Crucial m550 to hopefully satisfy that, but then I find out there is no documentation on if the ATA password is stored in the firmware. If it is, I'm just wasting my time, and I kind of just have to hope Crucial does the right thing and doesn't store the AES key anywhere. I also have to hope the marketing "hardware encryption" is true like on my 840 Pro, where I don't see any performance loss.

And even userspace level encryption of config files that use plaintext passwords is terrible (and lets be honest, way too many different programs hide credentials in plaintext somewhere for me to find all of them easily with a full desktop - off the top of my head, networkmanager, KDE-PIM, Telepathy, Firefox, and Steam all have their own independent unrelated credential stores).

In general I would just want to encrypt all of base ~, /var, and /etc, since that is where personal data can end up (and maybe /opt, because random stuff ends up there) - but then I'm still losing most of the reason of having an SSD, especially one with a hardware AES accelerator that would go unused.

And don't get me started on the mechanical drive, which I'm going to have to part bin when I get the thing and see if it has working hardware encryption. At least on that it isn't too bad to use LUKs, because then the overhead isn't as bad - but having overhead at all kind of sucks.
I'm pretty sure Amazon's drone delivery announcement was a PR stunt and not real.
Thanks for the info. What theorem prover did you use and how do you convert the security rules to a format that the prover understands?
Except in the 3rd world where the problem is less the drone crashing into you but rather the drone firing a hellfire missile at some suspected terrorist who happened to be near you at the wrong time.
Good point. In lots of cases these sites are actually doing the detection of the device class on the server and never returning a fully responsive site in the first place. There is certainly a balance to be had on responsive vs adaptive, in this case with this piece of guidance it is to give developers and users the chance to adapt more appropriately to the screen constraints at any time. Min-device-width is pretty much permenant so it is harder to adapt to when the user is on a big screen but only usng half of it.

For most content based sites there is not a huge amount of reason to have drastically different html, CSS or js. For apps we are yet to cover that fully.
I think ideally a yield should be very much more than just very similar to switching to another thread? It really ought to switch to a whole nother stack entirely, along the lines of Win32 fibers. Otherwise, you can't have a coroutine that calls a function that does the yielding for it.

If you do it properly, I suspect the correct calling convention for the yield function is undecidable. Which might be why C# doesn't do this...
the problem isn't with the height, it's with the distinction between commercial and amatuer.
Actually, I think coroutines are easier to understand in higher-level languages that support call/cc -- Scheme, for example. Yield is just another continuation, no different from return, throw, restart, etc.
PHP...Yes, you need serious help.
In the last few years, we seemed to have completely thrown away everything we're learned about UX and essentially made the same mistakes all over again. I don't know what started this trend but it's frustrating.

For example, something as simple as the Google PDF viewer: it took me forever to figure out how to save the file. There are no visual cues whatsoever to tell you how to save the PDF. Maybe it's "cooler" but this is something that you need to figure out to mouse over the bottom right corner and these buttons magically appear. I thought we were done with stupid UX decisions like this back in the 90s.

The same goes for Windows 8. I've been using Windows since 3.1, and I tried using Windows 8 for a good hour, before I gave up. There are too many things that are completely nonsensical and need explanation. It's enough to make me switch away from Windows entirely. How this atrocity could have gone through the entire Microsoft org without getting canned before launch is a testament to how broken that company is.

The opposite is iOS. I really don't like using Mac OS (I wiped off Mac OS from my company Mac laptop and installed Windows 7 on it to be more productive), but iOS can be learned by an infant, I've seen it with my own eyes. That's a testament to great design, because it's so intuitive that someone who wasn't alive 18 months ago can figure out how to use it.
I guess that is the question: is there a way to get the (superior) blockchain without the (inferior) currency?
I was recently surprised by this, when I tried to run a simple go web server in a chroot -- Apparently go defaults to dynamically linking to the host c libraries for domain lookups (partly this has to do with it being hard to do this with static code on OS X apparently).

The upshot is that while "go build" might be expected to create a static binary (that should be easy to run in a chroot) -- in practice it won't unless you manually rebuild your go toolchain, passing in a parameter to avoid cgo/linking to c libraries for name lookup.
What happens when ambitious dreamers get a hold of a giant spigot of cash?
> Still waiting to hear practical solutions, because the ones you gave thus far don't cut it in the real world, IMO.

That's because the real world is developing self driving cars, and they are relatively boring: there is no revenge in that, and they won't save the world.
Although I think this tool is fantastic, and an asset to the design community, i think it is an attempt at making the wrong tool for the job slightly less wrong. Photoshop was never designed, optimized, or planned around UI designers - it's audience is photographers.

I applaud projects like this, but sometimes its just better to use a tool that was build from the ground up around UI design, not an app that can be hacked to the point where it can somewhat deliver the results that UI designers need.

I personally use Sketch and Sketch Mirror and have found that the native support for device mirroring, retina resolutions, and CSS layer styles have become an essential part of my workflow. Photoshop gets REALLY messy as soon as you get a few iterations into a big project, and although there are hacks to get around some of the frustrations, at the end of the day they are just that: hacks.
Note / is valid in street address (e.g. Unit 22 1/2). I believe the provided regex [a-zA-Z\d\s\-\,\#\.\+]+ would reject that.
This looks way better than what Adobe is doing with https://projectparfait.adobe.com/
How is it different from the Adobe tool mentioned here earlier today ? (https://projectparfait.adobe.com/)
Either a troll, typo, or somebody incredibly naive. I'd be curious to hear from people with experience though what a realistic budget (both time and money) for something like this would be.
Web servers are why we decided that extracting data would be possible in some circumstances; the problems of needing to get the stack fragment to appear in the right place following the right data was why I said it would be difficult.
How can I test it. Put my email down and on a list now.

Also your email subject says subscribing and at the same time there is no unsubscribe link.

Maybe change subject to "Thank you for showing interest in Avocode"
This is amazing. No one who uses or likes photoshop for design has to switch, and developers never need to find a copy of photoshop again. This is a genius solution.

Also the fact that it's multiplatform is great. I'm looking forward to using this on linux.
Multigrid Methods with Repa
movie popcorn is also way above $4/day
Do you know of similar programs in San Francisco or that are online? I've been looking at product design courses for months.
Containers on Linux using LXC
I concede the point about the possibility of triggering crashes in say the kernel code. This however a) does not depend on repeated access to the encrypted drive, b) is only slightly less likely to occur with a wide-block mode, c) might be hard to meaningfully exploit, but I'll defer to your expertise on that one.

It also doesn't really seem to rely on multiple access to the ciphertext (you're not gonna brute force 16 bytes). And as I mentioned, you are not that likely to have your system partition on Dropbox, and I'd wager the contents and offsets of your user partition are not that easy to guess.

For a definition of non-malleability applicable to XTS, see "Security Notions for Disk Encryption".

Lastly, you're missing my point about CCA2 encryption - it does not solve the trusted platform problem, and an encryption system based on it is thus as vulnerable to Evil Maid attacks as your poor old XTS. Unless you want to exclude installation of malware from the definition of an Evil Maid attack, but then your usage of the term conflicts with just about everybody else's.
There's a difference of scale. The number of drones that amateurs could keep aloft while maintaining line-of-sight is small, but large-scale commercial activity could put millions of them up.

Of course, there are billions of birds flying around so it's probably manageable.
Mr. Summers also notes that the existing system requires “enormous investment” in mitigating credit-card fraud

Or, worded differently, the existing system protects consumers victimized by fraud, whereas Bitcoin doesn't (and won't ever be able to reverse a fraudulent transaction).

Fraud protection is a good thing. We should be trying to figure out how to get it into Bitcoin. YC should fund a company that aims to protect consumers from the risks of Bitcoin. Something like "trust us with your coins, and if we lose them, then this insurance company is guaranteed to pay you market rate for your losses."

I've been mulling over whether it'd be possible for Coinbase to get the equivalent of FDIC insurance. That would turn them from being "it's insane for anyone to trust you" into "you just became an awesome bank."

I can't think of any choice for exchanges or webwallets: either get insurance or erode consumer faith in bitcoin. And since it's so hard to get insurance, it's likely that the first one who does will have a huge advantage over everyone else.

I have no idea whether it's possible in practice to insure bitcoins on a large scale. I'm only saying that it's absolutely needed, because it's absolutely necessary for consumers to be able to trust some third-party service with their coins the way they trust a bank with their dollars. Either that, or make it trivial for people to manage their own coins as trivially as Coinbase does, which seems implausible.

When I point out that credit cards are superior to bitcoin from a consumer perspective, people sometimes counter with "you pay for that with 2% higher merchant fees, etc." But that's a small price to pay to guarantee you won't suddenly be unable to pay your phone bill next month due to theft. I've mentioned before, but someone once stole my credit card and got gas with it. I called up the credit card company and within 10 minutes the transaction was refunded and I was issued a new card. It would be amazing if that could be the case with bitcoin via some kind of insurance plan. I wonder if it's possible...
Thanks for the comments!

The game is indeed built with Unity. 3D models and animations were created in 3DS Max.

Game development was a hobby for me for a long time, with most of my experience coming from participating in 48 hour game jams, like the LD48. (http://www.ludumdare.com/) It's been an interesting journey transitioning a hobby project into a commercial release.

An interesting challenge that our team faced was that we all came from a programming background, so through the project we have had to find ways to fill all of the other requirements for the game.
Hyperinflation is actually a pretty rare event

Citation please?

Because I'm not even 30 and it's happened in some country at five times in my lifetime - that I'm aware of. Yugoslavia, Brazil, Argentina, Zimbabwe, Venezuela. I guess if you stay away from the ends of the alphabet you'll be fine. The US and Canada better watch out.
The headline seems somewhat editorialized for what Summers is actually saying, even as he is quoted in the article.

> “I’m not ready to stand with those who are sure they have seen the future here,” he concludes, “but it seems to me that it’s a serious mistake to write this off as either ill-conceived or illegitimate.”
and The Italian Job
We're in a semantic rut here. Like I said way upthread: I'm not trying to litigate the term "Evil Maid". I'm pointing out that Truecrypt+Dropbox is vulnerable to use-tamper-use attacks in ways that physical disk encryption isn't. Authenticated encryption rules these attacks out, because there is no way to fail anything but completely when modifying ciphertext on the stored image. Call the attack whatever you'd like; I've clearly mentally generalized the Evil Maid idea in a way that you haven't. Maybe I'm giving Joanna Rutkowska too much credit (but I doubt it :)

Regarding "multiple access to the ciphertext" --- you will indeed brute force 16 bytes, but you won't be trying to find a 128 bit needle in the haystack; you'll be looking for 128 bit blocks that happen to have a mix of innocuous bytes --- of which there will be many possibilities --- coupled with the opcode you want, and you'll have the bytes trailing the previous block and the bytes leading the subsequent block to play with as well to narrow your search. The attack will look a little bit like the byte-at-a-time attack on ECB.

I think that attack is significantly more plausible than you think it is. Apparently, so did Ferguson, since he brought it up ("Code modification attacks") in his NIST objection.
I was an intern 20 years ago, then or now if someone told me to get coffee I'd probably throw it in their face. I've (thankfully) never seen that. Have seen em do data entry, but at our company they write production code. I've seen guys condescend to them. They should shut up. These kids are smart and would gladly do their job for half the salary starting tomorrow.

My point is, anyone making over 80k/$40 an hour making their own flight arrangements, filling out their own expense reports, is a waste of valuable time. If I have a guy billing out $200/hr - he's in the office 8 or 9 hours a day max - (most people start and end work the same time everyday) - I don't want him wasting time on that crap. Needs an AA to do it. (Note our expense system sucks and our requirements are exact - you can easily spend an hour on an expense report)..
Maybe start using architect? :)
The problem is that it will be extremely difficult to actually enforce these regulations. Drones are incredibly cheap, and increasingly easy to use off the shelf. Short of an all-out ban on manufacturer and sale (which itself would be very difficult considering how ubiquitous the required components are), I just don't see what they can do. It will be like trying to ban P2P downloading. No matter how stiff and high-profile the penalties are, people are going to do it if it's incredibly cheap, easy, and useful.
I thought my site was clear but people disagree. Suggestions for Improvement?
> Under-utilized computers are not a waste of power, they're saving power.

Does this mean we should fill homes and datacenters with a larger number of machines operating at fractional capacity in an effort to be more efficient than a smaller number fully utilized machines?

This citation, ceteris paribus, seems to disagree: http://stackoverflow.com/questions/6128960/what-is-the-relat...

> I'm especially not OK with unknowingly donating my battery capacity and limited cell data so CrowdProcess can sell ...

That's fine, and I certainly agree, but it's off-topic to my question and this thread. I don't appreciate being summarily down-voted because every single comment is not in lock-step with berating the submitter on this point. There's a thread mentioning this, and I'm sure we all upvoted it.

Thanks.
For one, you can export to CSS, LESS, SASS and Stylus. I think Parfait only exports to CSS.
Maybe you are being down voted by fans of the former-planet Pluto? Sensitive bunch, those guys.
Thank you, that makes a lot of sense and finally clears it up for me.
This is very much the same reasoning behind protothreads[1]. As a bonus, the implementation of protothreads uses a neat trick reminiscent of Duff's device [2].

[1] http://dunkels.com/adam/pt/

[2] http://en.wikipedia.org/wiki/Duff's_device
I fear the stupidity and ignorance of inexperienced drone operators. Our airspace is complex with lots of rules and regulations to ensure safe separation of aircraft. Trained pilots have enough trouble obeying the rules and being safe, so I question whether someone who has no formal training is capable of doing so. What happens if an inexperienced drone operator is going down the Hudson River corridor without reading up on the radio procedures, while I'm barreling down at 140 knots? Pilots are trained to look up special airspace before doing a flight, but how would someone who just bought a drone off the shelf be familiar with these practices? There's no inherent reason that drones can't follow the same procedures and be just as safe as airplanes today, but it's dangerous to have the attitude of "buy it off the shelf and go fly it with no training."

The privacy issue doesn't concern me as much, since it's already possible to rent a helicopter and follow someone around all day. The only attribute that's changing is the cost: rather than paying $300/h for a helicopter, you can pay a couple bucks an hour for constant surveillance.
Doesn't matter which large company "gets" it -- what we really need is a good, decentralized, easy to use, open, optionally-anonymous identity system on the web. Easy-to-use being the key feature.

Until that happens, whether it's FB or Google or whomever else, we're stuck as the "product, not the consumer" (as Arrington correctly puts it).
I would hope this goes towards the iOS permission model. You would almost always login anonymously. Then pieces of information are requested on demand when a user takes action that specifically needs that information.
The crazy part is, this type of footage can easily be produced with less than a thousand dollars of gear, assuming we're okay with a GoPro and not a truly professional camera (and for breaking news coverage, I think GoPro quality is perfectly sufficient).

How much does a news helicopter cost? A thousand dollars an hour, plus huge initial costs?
I feel that beneath the surface, this is a poorly reasoned article that only works if you are confused about the difference between visual design and product design. Which is weird because the author makes a point of distinguishing the two.

His confusion probably stems from the assumption that great visual designers will become or should become great product designers. He's seeing beautiful products fail, and worried because the visual designers weren't solving important problems for users. But why would they be? They're visual designers.

His way of evaluating design doesn't make a lot of sense either. Facebook may be fine with Paper's performance if it is intended as a platform where they can experiment without disrupting the experience for most users. Carousel's engagement numbers probably have less to do with the design than the fact that it's hard to get users off of other photo management apps that they already use.
Looking at the job site https://circleci.com/jobs click on "For back-end/full stack developers"

Some of the characteristics we're looking for:
...
- young, raw, talented devs who can crank out code,

Are they really looking to hire young developers only or am I misunderstanding the job description?
Most of the responses are somewhat negative (although helpful), but as a back-end'ish guy trying to learn full stack, CSS is the one thing that is nails on the chalkboard for me to learn properly. I've got this bookmarked as a reference to succinctly explain these basics; Thanks!
Xapo's vault comes with insurance:
https://xapo.com/#aboutVault
Why talk about it and reduce their value in the market place?

I have hardly seen CEOs blog openly about their failures as well. It is career suicide. There are very few people who would think of these writeups as some sort of 'open' and 'honest' communication. And TBH, I think people do that only if those people are already successful and this was some one-off.
Sorry, maybe that metaphor doesn't quite work, I think I had some idea about lawyers who aren't directly contacted by the client but who are being pulled in after some procedural ball has already been put in motion. Maybe I should've said paralegal.

At any rate, less "You came to me for help in achieving legal goals X, Y, Z" and more "the civil-rights organization has hired me on your behalf".
OP here. The biggest issue for my first iteration of this site was clarity - people just didn't understand what it was or how it worked. I thought I fixed that with this iteration but, after showing it to a few friends, apparently not. Any suggestions on how to improve? I'll keep tweaking until I get it right!

Note: You may encounter bugs, site is not totally "ready" yet.