skysight-inc/HackerNews huggingface dataset:
I studied Game Design (in Brazil to take that course you must also learn product design in general), and I am a HORRIBLE artist.

And I get depressed every time someone call the artist on my team the designer.

No damnit, I am the designer (and the coder), I design stuff, I don't make the art of the stuff, I design how they work, how they should behave, how the user interacts, and I code that, and the artist make it pretty.

On my own country this is even worse, designer has no clear direct translation, AND sounds analogue to "desenho" ("desenho" in portuguese means "drawing" in english), so when I say I am a designer lots of people think I do "desenhos" (drawings), what I do now is call my profession in portuguese "projetista" (in english it would mean something like "guy that do projects") so that is clear to people what I do.
Precisely this. The examples in this article are all examples of innovation UI design, which is just a small, albeit highly visible edge of design.

That being said, startups like Uber, Waze, AirBnB, and Nest have all reached staggering levels of success by re-designing the entire stack of user experience in their respective markets. While the interfaces of these products are generally clean, they're not really the crux of the design innovation. Instead, the critical design innovation is elsewhere, in design of the systems, processes, technologies, and even business models that enable a magical end user experience.
Log charts are extremely rare (ex, not the default at Yahoo Finance, Google Finance or Bloomberg) so that comment seems pretty hyperbolic.
That footage is excellent and definitely show how valuable drones can be during disasters.

I don't envy the FAA. They are being dragged kicking and screaming into this new age of drone flight. It is going to take a while for good policies to emerge regarding the use of drones.

I personally am conflicted. I don't especially want a drove hovering over me wherever I go. What if it crashes into me? But I also want the freedom to go buy a drone and fly it wherever I damn well please (without having to have a permit or deal with red tape).

I'm not sure what the answer is. Require insurance for drone operators? Require licenses?
Callbacks seem simpler in a lot of these examples because they aren't really showing the power of promises.

Promises allow you to chain much more complex flows of information together in a way that would result in a mess of spaghetticode if attempted using callbacks.
Hey duaneb, I'm running marketing for Docker since the begining of the project. I have a budget close to 0 (apart for pizzas and beer for Docker meetups in the Bay area :)

That being said in re difference between Docker and LXC/Jails/Zones

* Docker is a whole platform, that makes containers easy to use and portable.

* We’ve added security, versioning etc...

* Our platform has an index of images, where they can be shared and downloaded.

* In addition to the index we offer image management functionality: creation, changes, storing, sharing, updating, etc of images...that at runtime, run inside containers

Hope this helps
Keep in mind that the simpler implementation of block layer encryption also makes it easier to implement and audit.

I'm not as confident in the design and implementation of encryption in e.g. ZFS as I am in full disk encryption.

I'm not sure Tarsnap is a great example of doing encryption at a high level either. As I understand it the encryption layer only deals with opaque chunks of data; it doesn't know anything about high-level concepts like files and folders that the Tarsnap application operates on.
I'd imagine it is the Product Design program at Stanford.
You have to keep the online revocation service up all the time. People will DDoS just for the lulz it causes when it being broken breaks everyone's browser.

While sitting in a meeting I realized there is one situation that online revocation helps: someone steals bank.com's DNS record. They can't necessarily MITM anyone with that.

But, TACK is probably a better countermeasure there.
Hey Nick, you can have all of it :)
Use after free in FreeBSD OpenSSL
Perhaps the previous, competent, dictator was replaced by Hitler.
Immediately reminds me of Hackers 90's movie and hackers establishing "turf" over public resources.
Facebook Gets it. Google Doesn’t.
What I'd like to see is a storage product that aggregates the unused storage space on EC2 instances.

* By default instance storage isn't attached, so there's probably a lot of completely available capacity.

* Even if attached, it's rare that the full capacity would be used, so thin provisioning would leave some space available.

* Some host machines won't be fully allocated.

I imagine taking this pool of capacity and using erasure coding and replication to build reliable storage. As your volumes come and go, you need to make sure it remains available, which is why I imagine erasure coding across a large number of customers. By integrating with the guest -> host assignment function you can ensure that you never lose data, if need be delaying scheduling until you've copied data elsewhere.

You'd have to throttle reads & writes to ensure that the guests weren't unduly impacted (easier with SSD's predictable IOPS), and the splitting and erasure coding would make for slow reads & writes as well. But this makes the economics a lot more attractive (free!).

One thing that suggests Glacier could be doing this: if I was AWS, and I was doing this, I would not be in any rush to tell EC2 customers that I was "stealing" their unused capacity!
Beg HN: 22 hours left for htop's native OS X support
So Coinbase is fine for the amounts that everyone would actually consider storing there? Nice hedge.
A smart way to reform Education
https://news.ycombinator.com/item?id=7364465
Pretty much, which basically gives state to stateless system..
There could be several future problems that you could optimize around. Speed, usability of API, NLP aspects of the problem, integrating with off the shelf solutions and so on. It really depends on what you want. If you want to learn a language for the sake of learning it, more power to you. Go forth and pick one of those. Python is fun. I have heard amazing things about Clojure. If you want to ship, just ship!

A coworker of mine said something amazing the other day: Whilst an Architect worried about Python vs Scala vs Java, someone shipped in PHP.
I used to do antibiotic drug discovery for a living. You hit the nail on the head.

I'll go so far as to say that we've found all of the important bacterial targets (e.g., ribosome, peptidoglycan, DNA gyrase & a few others).

That's probably an overstatement....but I (and many others) spent a large amount of time/$/effort looking for antibacterial targets that might have been overlooked. In the end, my conclusion was that we've already found the softest, most vulnerable targets within bacteria and we've known about them for a long time.

What to do? I think 2 things. Find new ways to hit the existing validated targets (people are doing this, but it ain't easy). The only other "idea" that I've had (and I'm sure others have had it, too), is that maybe we can find multiple "weak" targets that, when hit in combination, are just as good at inactivating a single "thing" like the bacterial ribosome. But that's probably even more difficult than finding new ways to hit well-validated targets.
Pip install secureconfig
I wholeheartedly agree. I chose those texts for their accessibility and simply as a demonstration.
Shame it doesn't work at all on IE 9; I have to use IE at work, and I do a lot of reading here, so this tool would be fantastic if I could use it... or even see what it does.
"Hello? Emergency services? Someone is having a heart attack. The address i--"
Epic trailer for upcoming live-action Anime Parody
> What if it crashes into me?

First world problems. Literally.
This (edit: I mean this comment of mine) is off-topic, so I'll demote it to the bottom, but since I've spent the last month telling people what isn't appropriate on HN, I want to point out something that is.

This thread contains excellent comments, especially wmacmil's: https://news.ycombinator.com/item?id=7676945. It's great when someone with directly relevant experience adds so substantive a comment on an interesting question, and gets properly upvoted. Nearly all the other comments right now are substantive and insightful too.
The address coverage in OSM for much of Europe is superior to the U.S. The road network is also pretty solid there.

Especially Germany and the U.K., but there are other active communities.

Also, in the U.S., the Nominatim instance setup on openstreetmap.org mostly falls back to address range data imported from Tiger. That data isn't really part of OSM. It gives great coverage, but there are some limits to the accuracy.
After reading the original article and this whole thread, including some quite useful discussions about the security goals of disk encryption, I'm convinced that this is extremely hard (with XTS) under realistic attack scenarios.

However, I've been reminded that a realistic attacker can do much more to an FDE volume than we would first imagine. So, I'm planning to try to play around with this to improve my intuition of how bad the attacks actually are. Thanks for the challenge.

... huh. Actually, suppose the attacker could somehow cause a very large number of file downloads to happen (with known sequence, timing, and contents). The Birthday Paradox gives the attacker a high probability of being able to see a pair of files from two separate sets of files (of different kinds and different origins) land on a particular sector at different times. When that happens, the attacker can then substitute one for the other.

If we think of a computer for some reason downloading and storing a lot of "trusted" files and a lot of "untrusted" files, and that the attacker can see empirically where each file was stored, then when a trusted file gets stored at an offset where an untrusted file was previously stored, the attacker will be able to substitute the contents of the latter for the contents of the former. For this attack to be harmful, the untrusted file that was stored at that location just needs to contain something that it would be harmful for the attacker to be able to replace the corresponding trusted file with.
Seems like a lot of fiddling to cover up the brokenness of the system. I think a complete lack of patents would be a good system.
>> I don't especially want a drove hovering over me wherever I go.

I think this is the future, and it is inevitable. We are going to have lots and lots of tiny drones flying around our cities. Some will be doing light-package deliveries, some will be doing photos and videos for journalism, some will be collecting information for various web apps, and so on. And all of them will be equipped (required by regulation) with sensors and software to avoid colliding with objects, people and each other.
Well, guess what, development were once viewed as a useless hobby, then the cure for all problems, then as a problematic profession that didn't deliver what was expected (because it didn't cure all problems), and then finally got in a place where most people know what to expect.

In fact, I guess most professions followed that exact sequence. Design is kind of an outlier, because it found its place several times, but people keep forgetting where it is. I think that's due to people neglecting it during bad times, that often last enough for forgetting.

Anyway, welcome to a new iteration.
A fictitious one?
Ahh, so the effectiveness of this devices is actually a matter of perspective...
As I understand it the encryption layer only deals with opaque chunks of data

Correct.

it doesn't know anything about high-level concepts like files and folders that the Tarsnap application operates on.

Tarsnap doesn't really operate on high-level concepts like files and folders. It flattens everything into a tar archive, then encrypts and signs that. That does however ensure that data and metadata are kept together, in a way that encrypting individual disk sectors does not.
That said, I would encourage folks to try it on stimulating pieces as well. It's great for keeping your mind focused. And as I state somewhere in the site, with all of the options I've built in, there really is no pressure to read quickly.

This despite the fact that it can certainly be used for speed reading as well.
Look! Design is fantastic. Organizations that take design seriously make products far better than those that don't. We should applaud and defend the companies that take it seriously, because they're all that's left in this country between something worthwhile and third world mediocrity. Paul Graham said it best in his New York Times interview last year:

>“If there’s not going to be another Google,” Graham said, “then we’re so deeply screwed that we all should be getting bags of silver and shotguns.”

Praise God and pass the ammunition, brother.

The problems in the startup ecosystem are outside the control of entrepreneurs and employees -- it's related to monetary policy and political dysfunction. Problems in VC, downstream from even larger problems in legacy political structures. That political decisions made free $$$$ available to investors to shove $$$ towards useless products to pay $$ to employees to create such useless products is not the fault of the people at the bottom of that stream.

Blaming the little guy is trivial. Blaming the big guys (many of whom have been dead for a century) is not as cathartic or as risk-free.
"saw this work"

You mean saw a mock-up, employee of ConsumerPhysics.
Yes. Scanning is needed but not for all use cases.

If you add user interaction, then spreeder could add a sideways pop up widget that showed the whole paragraph with highlighted word. That solves the problem of reading quick as well as pausing and scanning back.

My concern was that your app didn't help me read quick. Maybe it was the issues you mentioned. Are you sure you can read it quick if the app is optimised?
In other words, pretend it's not happening and magic will fix it.

No other species has become extinct, therefore we can't.
> Almost ALL problems have a technical/legislative solution for them.

Legislative solutions should only be considered as a last resort, not the first option. Pretty much all laws that I can think of come with unintended consequences, and sometimes create larger problems than they solve. Top examples: alcohol prohibition and the war on drugs.

Also, as you yourself pointed out, enforcement is a big issue requiring a lot of resources and placing a lot of responsibility (and also authority, that maybe they shouldn't have) on the police.
According to the chart, RIPEMD-160 is deprecated. Does anyone know of a citation?
It's a vicious cycle. Americans believe that governments are incapable of improving anything because the U.S. government (both Federal and state levels) is notoriously corrupt and incompetent. This in turn causes Americans to be apathetic about fixing their government.
“Five years from now, this is going to be commonplace, that people use drones to document news stories” I realize this statement is probably obvious in the abstract, but the footage makes it viscerally obvious.
Here's some notes I wrote down on how to connect to Essex University via an ARPANET gateway, log in to Essex University, and run MUD! I must have been about 15 at the time. I wrote it on one page of a Zork map, as you can see.

http://www.donhopkins.com/home/images/EssexMUDLogin.jpg

Thanks a lot to Richard A. Bartle and Michael Lawrie for sharing!

Here are the instructions and some notes to explain what the commands mean:

MUD: Multi User Dungeon

@O 42 -- This was the old TIP command to open a connection to an NCP host id #42 (NCP host IDs were 8 bits. The TIP command to connect to a host was later changed to @L. See "User's Guide to the Terminal IMP" at http://www.dtic.mil/cgi-bin/GetTRDoc?Location=U2&doc=GetTRDo... . IMP 42 was in London -- see http://www.rfc-editor.org/ien/ien42.txt )

%CON ESX TORUS EPSS 52200300 -- That's a command to the gateway to connect to Essex University in the UK.

LOG 1776,1776 -- That logs you into the guest account for Americans to play MUD.

Password BUZBY

TY GUID.TXT -- That types out the intro guide to MUD.

RU DSKB:MUD[2011,2653] -- That runs MUD.

K/P or K/B Logs off
Don't forget that S3 costs additional $0.12/GB for transfer out.

So either cheap VPSs or dedicated servers are still much cheaper if you don't want to deal with Glacier.
As an aside, I was surprised (in a good way) at how well the video blended in with the page. Pixel-perfect alignment of the first thumbnail of the video with the slightly-animated image shown before, and near-instantaneous starting when I played. No flicker, no buffering, just play immediately.
> If I read Pride and Prejudice I'll do it for my own enjoyment, at whatever pace I like.

...and some people will want to read it fast, with a tool like this. There are more nuanced answers to why someone might want to speed read certain texts but in response to your post I believe that is enough.

Even as an avid reader, I know there is a time and place for different techniques and there's no harm in general to using tools like this (even for novels, etc.). I do think that people should, if they can, learn to enjoy reading at some point and that if this became the norm for reading in school there would be a problem, but until then...
The HSMs are converted to Firebase security rules.
The theorem proover is used to verify somewhat arbitrary higher level properties

So for item trade* I was specifying the that no new items could be introduced (dupe bugs) or removed from the system, and that a player could never get stuck in a state they could never leave (deadlock). The HSM abstraction is just a useful notation for developing such protocols, though the formal verification actually operated on the Firebase security rule level.

* https://github.com/tomlarkworthy/firesafe/wiki/Send-Item

EDIT: reply to oggy's child question as I can't reply underneath.

The actual spec prooving bit is secret sauce territory until I work out what the future holds for this project.
I'm truly sick of hearing that the phone is the only device that matters. I use my phone very, very sparingly, and only when I'm away from my laptop. A phone isn't the nicest device for consuming the web, and I doubt it's even the most popular.
And does my laptop have a device token that can be used?
Exactly that. We can quite well be at awe to people that managed to collect difficult sets of data, instead of the people that made a superficial analysis on it and discovered something. While still reserving some respect for the people that do difficult analysis, of course.

That problem is not specific to the social sciences. As far as I know, only physics are making some inroads on that change of attitude, but even there it's restricted to a few fields where data collection is extremely expensive (much more than at social sciences).

I think that's one much needed change to adapt science to our current world.
Don't forget that S3 costs additional $0.12/GB for transfer out.

Dedicated servers are still much cheaper than even Glacier.
LinkedIn is a great analog for its target audience. Meaningless flattery is the primary social currency, users are constantly harassed to engage in pointless drivel that distracts from real productive work, exorbitant fees are exchanged for products and services of dubious value, and everyone pretends to be your friend while they secretly resent you. Sounds just like a corporate job to me!

Seriously though, I don't know if you can grow a social network for professionals without mimicking a lot of the bad things that are inherent in the modern work place.
It's probably not too hard to get a web server to effectively echo the 'corrupt' / reassembled packet it eventually receives? I guess it depends on how much control you have over the content that directly precedes the disclosed kernel memory.

But there are probably ways to get a system to echo the data it receives that are less likely to be logged.
"N of M" transactions might entail this. The idea is that 3 parties have the key and 2 are required to transact. So if you lose yours, you call up one other party.
"Critics say one problem with the FAA's current policy – that amateurs
can fly drones below 400 feet but commercial operators cannot – is
that it doesn't seem to address any specific safety concerns."

The critics may not realize that this restriction largely has
the effect of separating drone air traffic from air traffic containing
humans, which is generally limited to 500 feet above ground,
modulo take, landing, and, as always, emergencies.

http://www.flightsimaviation.com/data/FARS/part_91-119.html
Has anyone tried Layervault? I've never used them but they look like they do something similar. They also have an open source ruby library for inspecting PSD files called PSD.rb which is how I know of them.
The real question then is: is there really a peak hour for datacenter usage/consumption? What's the consumption difference between peak and regular hours (and low-demand hours)

How much power does Amazon use during mornings compared to Netflix watching peak time?
Very good point. I stand corrected.
There's an app for that: https://www.billguard.com/
Replacing the PC
http://www.smbc-comics.com/?id=2920
I'm one of the two tools engineers at the company and what we're building is a few months from being released. Since I'm on tools, I didn't actually work on the responsive layout stuff, so I won't really be able to your questions about how we did that in detail.

What I can say is that what you're seeing are basically constraints and if you define lots of constraints, you can then use a constraints solver to help you automatically lay out your app on different devices based on rules you've defined. We're only beginning to explore these ideas at the moment, but we're definitely open to suggestions in the meantime.

If you're curious to know more about constraints and layout, check out the links below.

Regarding the notion of authoring content and then adding the whizz bang later, we're definitely interested in solving those problems, but it's going to take a while to get there. Ultimately, I think it's going to take an approach similar to what ember did, where you take a routes first approach. Once you have your routes, you then create the parts that determine what content/data needs to be show based on those routes. Once you're that far you, can then work on two layout strategies: one rendered by the server as static HTML and one that is rendered on the fly in clients with javascript enabled. My hope is that people are super lazy about the static HTML site, basically doing as little design as possible, leaving the final design looking more like the web before frames even existed; i.e. one long scrolling document with anchors jumping to the content you want, and reverse anchors taking you back to where you just were. I'm even curious if we could get back entirely to document oriented design as a fallback instead of some weird unusable frankenstein we get today when designers eager to make things rich and interactive also attempt make the same design support legacy browsers and the visually impaired.

[0] http://gridstylesheets.org/

[1] https://news.ycombinator.com/item?id=7353944

[2] https://developer.apple.com/library/ios/documentation/userex...

[3] https://harlanhaskins.com/2014/03/02/laying-out-ios-uis-in-c...

[4] https://news.ycombinator.com/item?id=7330683
Definitely going to use this from now on -- will make my life so much easier.