skysight-inc/HackerNews huggingface dataset:
"who is going to develop the compounds to replace the current set of antibiotics when they have become useless" - Academic science. Most of the basic, foundational research in clinical medicine is done by academia, not the pharmaceutical industry.
Yes, this. The same can be said for the V2. Technologically, it was wildly successful, and today most Russian rockets and many American rockets can be considered its direct descendants. However there's no question that it hastened the end of the war for the Germans.

I've often wondered what the world would look like if Germany had had the same militaristic and expansionist policies, yet hadn't devoted so many of its resources towards genocide and wonder weapons. It may be that Hitler's obsession with these things actually spared the world from a far more effective Nazi Germany, and thus an even longer and bloodier war.
Glacier is significantly cheaper than S3

Yes, as long as you put something in and almost never take it out.

They charge for deletions in the first 3 months

What if this is just disincentive to pull content out and treat Glacier like S3?

Power is not the driving cost for Internet scale infrastructure

It is not the only cost, but it is still one of the largest factors, no?

Sony and Panasonic continue to invest in a product that has no visible commercial uptake

That means nothing in and of itself. The only person who will win such a market needs to be one of the first there, innovator's dilemma, etc.

Facebook believes optical is a reasonable solution to their archive needs

Do they? I saw one mention in the author's previous post of James Hamilton commenting on a Facebook cold storage system using Blu-ray but is unclear to me if it is in production.

Assuming it is true though, it is likely an apples-to-oranges comparison. Glacier provides archival restoration for presumably largely enterprise-level customers. Facebook backs up data from users, and I'd presume this is from deactivated accounts, etc., and unlikely to need urgent restoration.
wow... the ego of this post is nauseating.... Some humility with others money and trust would be appropriate.
I have no data to back this up (would be interesting to see studies on this), but wouldn't a 'loser pays' afford less-wealthy plaintiffs to file as long as their chances of winning are good?

I agree that it would cause less filing among less-wealthy people/companies in some cases. But I'd also guess it would increase filings in other.

(assuming they can objectively and accurately determine their chance of winning, which isn't always a reasonable assumption)
This has been discussed before, about 9 months ago: https://news.ycombinator.com/item?id=6123720

And this page was largely written in 2007, although it's been updated a few times since.

I'll also note that Val's "Compare by hash considered harmful" is not a conclusion which is widely shared. One can also worry about two people randomly (assuming quality random number generators) choosing the same RSA public key. Or we can worry about all of the oxygen molecules in the room simultaneously randomly deciding to concentrate into a corner of the room such that you die of asphyxiation. Sure, these things are _possible_; but whether you should therefore say that "life on earth is clearly broken because we are only probablistically correct and not provably correct" might be considered by some to be a somewhat insane conclusion.
Thanks for the information. I have updated the tickets (also #2). We will get it sorted asap - there are some plumbing issues that I need to resolve on the main site to get this sorted.
The article isn't calling the submarine a fail; it's calling the Reich's use of it a fail.
Oracle. Not everyone, but most.
Thank you for the kind words, Erica.

While we were perfect for each other when we first met, I can agree that we are no longer 'right' for each other. We have amazing paths ahead of us and I'm so grateful for everything we had together.
If you search full first + last name on linkedin you can usually view the full profile without going into incognito.
The author handwaves away the power savings of powering down disks by talking about the capital cost of providing power.

"Unless the prices of copper, PDUs and diesel-generators have started following Moore’s Law,
this is probably more true today than in 2007."

But this is fallaciously assuming that Glacier servers would need to be like EC2 or S3 servers that are switched on for x random hours per day. This isn't the case at all.

Diesel generators, for instance - what's the use? If you're replicating the data around the world, it doesn't matter if your Glacier servers in one location are powered down for days.

Cooling, power - just switch off every single Glacier server at each location during the peak hours of the day. No additional capital costs, because you're never adding to peak power usage.

Distribution of reads - Profile customers based on how frequently they're reading from the data store. I bet 50% of customers never read a single byte back. Colocate these customers on the same servers, and you only have to power up the server once a month to check if the data is still there.

Bonus - Profile data access patterns with simple heuristics to determine what's likely to be read back in, and temporarily store that data in S3. Imagine a company that archives everything to Glacier daily, but restores day, week and month old backups regularly. Keep all data less than a month old in S3, and the rest on the indefinitely powered down servers talked about above.

I actually quite liked the author's case for BDXL, but it seems he's doing a straw man on other possible solutions. Well implemented BDXL more cost efficient than a naively implemented disk strategy? Not exactly news.
Agreed! Unfortunately these things are giving way to LCD's and the flat buttons, and not just in appliances. Cars are especially guilty of this (switching from knobs and buttons to touchscreens) which require visual attention instead of just feeling around and therefore make them more dangerous. It's an ugly trend that is inconvenient in the kitchen, but could be potentially life-endangering on the roads--I wish more companies would realize that!
you can't deal with those situations when you're implementing something that's actually anonymous

True, but this login isn't "actually anonymous" - but I can't think of a better term so I don't blame Facebook for using the one they did. It's effectively a global ID with no data attached to it.
I don't want XTS? Yes I do, for the purpose it was designed - block device level encryption. The title is misleading, and potentially dangerously so - I could see somebody switching to some CBC-like mode in TrueCrypt "coz tptacek said so" (even if that's not what he said).

And I think several statements are, well, let's say disputable. OK, XTS has the unnecessary complication of two keys, introduced in the standardization process. But the security in storage group (whatever it's called) has apparently seen the light is working on essentially allowing just one again.

Furthermore, XTS is denounced for having "unclear security goals", and the post leaves the impression that wide-block schemes are so much better. Yet their goals are essentially exactly the same as those of XTS, just on a sector as opposed to a (cipher) block level. And do correct me if I'm wrong, but I believe they are pretty clear: essentially ECB encryption of every cipher block on the disk, with a different key. In more concrete terms, I believe those translate to security under deterministic chosen-plaintext attacks, and non-malleability.

Finally Evil Maid attacks (at least the ones presented so far) have absolutely nothing to do with any cipher mode you're using, and everything to do with the trusted platform problem. Maybe in a Dropbox setting the attacker could benefit from the cut-n-paste abilities, but I'm not sure how realistic/severe those attacks would be (presumably you wouldn't have your system partition on Dropbox). I'm having a hard time imagining them, but then again there exist much smarter people than myself in this world.

Not to be only critical of the article, I do believe that the basic messages are sound: be aware of the limitations of FDE and don't use XTS in the contexts outside of FDE (unless you really know what you're doing, I guess). But the rest of it I could do without.
Nor should they! But I don't think that's an argument against this auth product, which only works if a user has an active facebook account (ie has trusted facebook with data) to begin with.

It's another developer option, one flavor among many, that developers can use to make it easier for users to log in. Given the reality that most people actually do use facebook, I think it's kind of interesting.
How do you get people to encourage each other if they don't care to begin with?
Great points. thanks for the feedback. I have an open issue to ensure that it is clearer to understand which elements are clickable. (b) is frustrating. (c) when I tested it today it loaded in 0.6 seconds, but I will work with Ilya on getting this sorted asap (https://github.com/google/WebFundamentals/issues/14).
Sadly, http://giveupandusetables.com is no longer up, because I always liked pointing to that.

The amount of time we spend fighting with CSS to do things that are simple is insane.

The web is not a well-designed platform. It grew organically out of a document system under the stewardship of a million browser developers with no leadership, and it shows. It's a series of hacks upon hacks upon hacks that only make a reasonable, decent computing platform by the combined might of the entire software industry making tools and frameworks and JavaScript optimizing compilers and whatnot for it.
I really hope this design pattern of huge fonts across the screen is a fad and will go away sometime soon. That and parallax scrolling. It's bugging me to no end for some reason. Am I alone in this?
A new way to see: Why Oculus Rift and Google Glass are on a collision course
The stupidity of the comparison means that I have no idea what is meant by "threatening." In terms of individual lives, regular homicide is far more threatening than terrorism, as is choking on your next meal. Even ignoring the entwining of terrorism with politics, that already makes this a meaningless comparison.

And it's not necessary, because surely we've got plenty of analogous pandemics in the field of medicine which can orientate ourselves to any looming crisis. The AIDs virus in the West is still fresh in our memory, and a far more appropriate comparison.
We are creating new versions of what we have already. When you hear something referred to, for example, as a "beta-lactam antibiotic", what that actually means is a more creative version of penicillin. We tack new functional groups onto antibiotics to try to outpace resistance mechanisms, but its a stalling tactic, not a solution.

New antibiotic classes are hard to find. You need to find compounds that are lethal to bacterial cells (but not our cells) that there's no pre-existing immunity to. That's an extremely tall order, and we've run out of easy sources for those compounds.
Pretty hilariously wrong, and you know it.

Supposed OTP constructions are defined as

e(i) == E(...) ^ m(i)

m(i) == D(...) ^ e(i)

where E(...) = D(...)

and where ... doesnt contain any of the following

e(j) for any j

m(k) for any k

j and k in same domain as i

Then, take a look at CTR...

CTR is E(i) = blockcipher(key, nonce . i)
and D(i) = E(i)

e(i) == blockcipher(key, nonce . i) ^ m(i)

m(i) == blockcipher(key, nonce . i) ^ e(i)

(i == counter, since it's the same in this example where counter and blocks start at the same number)

Therefore CTR is an OTP.
Until self-driving cars or a viable nationwide public transportation system comes along, a well-funded and sustained marketing campaign along the lines of "don't drink and drive" could help reduce fatalities (see [1] for the historical trend). Many people think they are the exception to the rule and can safely drive while texting or whatever. If, during the process of getting a license, drivers were forced to operate a driving simulator while texting it may cause them to realize how bad everyone is at this.

[1] http://responsibility.org/sites/default/files/files/AIDF%20R...
You can turn it on in Firefox Nightly.

https://wiki.mozilla.org/Electrolysis#Enabling_Electrolysis
IBM are also doing some amazing work in this area with their ninja polymer nanotech - http://www.research.ibm.com/articles/nanomedicine.shtml#fbid...
I've used a sudonym for years. FB depresses me? I guess
because I see my friends ageing. I did reserve my real
name; in case I ever really liked FB, but I am still using
a civil war veterans name.
Google around and pick the most popular one usually works, as least if you're using a more "trendy" framework.

For Rails, Devise seems to be the way to go, as it's the most popular by far[0]. It's what I'm using for my project.

[0]https://www.ruby-toolbox.com/categories/rails_authentication
Not everybody uses LinkedIn for job offers. I use mine to keep a cache of professional contacts that I've met and worked with in previous postings. I also frequently get ping'd by people with very good questions about my somewhat less common field.
This article seems to take no effort to distinguish whether increases in injuries, in the numerous places it states it, are also relative increases.

Do I care whether statistics show that I'm almost three times as likely to sustain a head injury from walking than biking if I don't know the percentage of time people spent doing those activities to generate those statistics? No, I don't.

Smoke and mirrors.
Yes, it's a known weakness. You have to rekey every X blocks.
What about the Photonic Fence that Bill Gates funded (http://intellectualventureslab.com/?page_id=6738)?

I think it was criticized because it required electrical power to run and that would have been a no go in sub-Saharan Africa but I imagine it would work great everywhere else.
Fixed.

That's beyond the scope of which mode, but it's important. However the less code one has, the fewer places there are for things to hide.
I might be weird, but I actually prefer working in an open layout. It might just be because I'm one of two programmers at my office and it's really helpful to be able to eavesdrop and talk to people as they walk by in order to figure out what's missing/working/not working.
It's one of the problems with the idea of using a time machine to kill Hitler. The problem is the Nazi party and Germany might actually end up with a more sane, capable and effective leader and end up winning the war.
Kings of the Internet | Confessions of a Black Hat
Given the amount of antibiotic resistant bugs that live in hospitals, I'm highly skeptical that longer hospital stays will result in decreased colonization with resistant species.
How Google Can Steal Facebook's Candy
What's more likely is that people that you contact via email are allowing LinkedIn to search their contact list.
We seem to start to really fail making distinction between anonymity and pseudonymity.

"Anonymous login" means you provide no identity information whatsoever. If you're "person #123456789" or "f93f9211-9f49-4bad-ad34-e00f8c536b0f" or whatever - you're not anonymous.
Storj – Dropbox for the Future
Not sure why you were downvoted; its true, you don't need large quantities of meat in a healthy diet.
Sorry, my first post was poorly written and I should have spent some more time on it before I hit post.

This is an assumption I have which is in no way scientifically proven.

I read an article a few years ago about McDonalds drastically reducing the amount of Penicillin used in its cows which lead me to believe that my consumption prior to that may have caused it.

I may have just become allergic to Penicillin for no reason but I do find it coincidental.
You're completely ignoring the capital cost of buying the miner.
Bacteriophages, while fun, and something I once wanted to work in, are nowhere near as "point and click" efficacious as antibiotics are, even under the most optimistic scenarios.
Bitcoin has many extremely strong advantages compared to gold that make it a far more pragmatic monetary asset/neutral currency. I would list them out but I'm sure you know them (very fast transfer anywhere in the world, maximum portability, etc).
FbStart, free tools and services worth up to $30,000
I'm half and half on this. I've got an office just outside the open workspace where the users are. I can catch most everything that comes up, but close my door if I need a bit of privacy.
Fog Creek goes out of their way to ensure that full-time developers have private offices (but not interns).
In practice, many encrypted filesystems already use encryption that's strictly worse than XTS, and they generally use the same block-based model as full disk encryption for exactly the same performance reasons.
Yes, printed.
To be more specific, I was talking about "Facebook App Link index" which seems to be the way for a developer to find a deeplink based on a given weblink while going through Facebook.

Look forward to discussing further and seeing how we can work together here to connect the webs.
Reading Excel Spreadsheets with Python and xlrd
Getting all your money stolen seems to feel better when it's due to the completely fair and transparent rules of the system than when it's due to the clueless bungling of the Man.
I shared an office with one other person at Microsoft and have the same at Google. That doesn't mean that everybody has that at either company.
FYI this is CrossRef DOIs, and the data is served by CrossRef. Take a look at our API, e.g. http://api.crossref.org/works/10.5555/12345678 and http://search.crossref.org

Any questions email, us at labs@crossref.org

*which are the kinds of DOI you're likely to be citing, but other Registration Agencies and types of DOIs exist
Sorry, as in my reply above. This is just an assumption I have. I am in no way able to prove it or have much knowledge myself in the area.
Hi Steve,

I remember the DMA situation from a few years ago being quite bad, and it looks like you or one of your colleagues has posted some good resources on that at

http://privatecore.com/resources-overview/physical-memory-at...

I realize that with PrivateCore you're taking quite a comprehensive approach to this problem and not bothering with more piecemeal counterforensic approaches, but I'm still curious about what counterforensic techniques exist for people who aren't going as far as you are. For example, can we make stock Linux deny memory access on external buses with a software policy, or is this simply not something that can be accomplished from software?

I imagine you have good arguments for why the piecemeal approach is likely to fail in the face of an skilled forensic attacker. But many of the attacks that you described to me when we last talked about this were more along the lines of hardware-assisted Evil Maid attacks in an unmonitored and unsupervised colo, rather than forensic attacks against an unmodified encrypted laptop. I'm curious about how different the threat scenarios are between these two cases now.
Why it only took ME less than 2 minutes to believe in Bitcoin
As far as I'm aware, I did not have a theme active.

I spent several hours debugging this. Chiefly the culprit turned out to be "Default Full Zoom Level" extension.

However, during the debugging process, I did a binary search through prefs.js looking for the problem. If I removed this line:

user_pref("browser.startup.homepage_override.mstone", "29.0");

... the browser worked properly again. Very peculiar. Of course, this was written into the prefs.js again upon exit, so when restarted the browser was broken again.

Classic Theme Restorer probably wasn't the problem. Probably the problem only showed up because that was the first restart post-upgrade (to enable the extension).
Whirlpool is unbroken. It uses the same design principles as AES, which both makes it a little more complicated than it could be, but also demonstrably secure against the attacks that plagued the MD4 family of hashes.
Disregard this. Update: https://news.ycombinator.com/item?id=7676747
Well now that FB launched their own app ad network or audience network it looks like you may not have a choice in some cases whether or not your app usage is shared with Facebook.

You're only choice now is to not use apps that display FB ads.
Wow, I didn't realize IEEE had their own citation format.

Amazon has the ISBN 9781405347587. The only other google result for this is your comment, which Google seems to have already indexed :)

Since Google Books doesn't have that ISBN, I would need 1) fail gracefully instead of giving a citation for the wrong book and 2) have a fallback API. I'm working on both of these. Thanks!
I was in a 1 or 2-person office while I was at IBM. Their policy (at that branch) was a private office for senior developers and up, two to an office otherwise.

I'm at Motive right now; the large majority of developers here have their own office. (And we're hiring: developers and testers, no telecom experience necessary, mostly in Austin, TX.)
Ripple doesn't solve the double-spending problem, as I understand it: it punts the problem to the user and tells them 'well, if someone abuses the trust you gave them, you obviously screwed up. Sucks to be you.' and lets them figure out who they can trust (if anyone). While a bitcoin is a bitcoin is a bitcoin.
Hey, libertarianism is great! Down with the state!

I get actually more pissed off with libertarian cargo-culting than with current government regulation. As much as government is in bed with big corps, it's so much easier to get to an antibiotic ban with a government capable of enforcing it than with a withered state.
The "Breakout" chart would be awesome if the color/stage change cell linked to the relevant result. Does anyone know o a resource like this?
Ask HN: Best U.S. Cities for developer careers?
I currently live in the NYC metro, which has a lot of great opportunities. I always see lists by places like Forbes that seem to have the usual suspects (SF, NYC, BOS, ATL) consistently, but sometimes have a surprise city.

Obviously not of us live in the big metros, so what are some of the other cities and metros that are booming for tech/development?
Coinbase is hosted on Heroku. So you are also trusting that Heroku and AWS don't have any disgruntled employees with production access that want to be instant millionaires.
It sounds like you don't have much experience with being an affiliate.

An affiliate is a "marketer on commission". Much like a salesman on commission.

>Get too successful and chances are the company you have an affiliate agreement with will get tired of paying out large sums to you (sound familiar?) They will either kill your relationship outright, or replicate your business model first and then kill your relationship once it's taken hold.

This is like saying if a salesman gets too successful at his company, they will fire him and make the sales themselves.

I've never heard of this happening, and it would be idiotic to do.
A company gets essentially free money from their affiliates. They take no risk and get marketers that are much smarter than the ones that are on the job market working for them. This is a dream for pretty much every company.
Even Google has affiliate programs.

>Also, other affiliates will do whatever they can to sabotage your efforts.

This is like saying your fellow salesmen will sabotage your efforts.

Nope. Remember, people aren't against you, they are for themselves.
Affiliates WILL copy what you are doing if you're successful, but that happens in sales as well. And who cares? The best will still be the best because they will come up with better things.

But this is irrelevant, because if you do what the parent comment says, they can't copy you unless they take control of your site.

>and trust me it will if you have success

Why should I trust you? What experience do you have? It sounds like you're exaggerating something you read somewhere.
Perhaps the word 'purchase' is more appropriate... "there's risk inherent in any purchase" ?