skysight-inc/HackerNews huggingface dataset:
It is a hard problem, and it's a positive sign that Google acknowledges the problem. Providing end-to-end security also goes against the trend of expanding the non-open parts of their Android app suite.

In addition to the reported bug, this plugin is handing cleartext back to Google-controlled code. Web apps and good security are still miles apart.

But this is still a significant change from a year ago when we heard internet portal CEO kvetching about the NSA and not even mentioning and-to-end encryption.

There is still a VERY long way to go before this counts as democratizing end-to-end security. Any portal that has real time communication tools and a social graph could also provide tools for automating Web-of-trust and key exchange.

All journeys etc.
Anaconda is an easy-to-install distribution that contains many many Python packages. It is not a virtual machine.

The Data Science Toolbox also contains Python and the most popular packages for doing data science. Besides that, it also contains R and, again, some great packages.

The main difference, though, is that the DST aims to be a platform where authors and teachers can create custom software and data bundles for their readers and students. (I have been thinking about creating a bundle that would install Anaconda on the DST.)

If you only need to use Python, then Anaconda may very well satisfy your needs. Good luck!
It's also worth saying that the "soft power" of a Royal Visit, not even the Queen, is immense. A visit from the US President is probably on par with a visit from the Queen in terms of soft power projection, no other head of state in the world would garner anything close.

A visit from the Duke and Duchess of Cambridge probably eclipses either.

The goodwill benefit to the UK is immense. Taking the politics out of it is also very useful, see the recent state visit to Ireland, any elected British head of state would not have been able to produce such a meaningful and symbolic event.
Once you assume the browser you are using for secrets is actively hostile, it's a pretty Sisyphian task to try and guarantee anything.
As others before me have said, this pattern works as expected. Putting it through regexper, you can visually see this.

http://www.regexper.com/#%2F(%5Cd)%5CD*%24%2F
I'm surprised you were downvoted. I think this suggestion makes a ton of sense. It's certainly the shortest path to having a significantly improved first-party language for Android and Google does have a working relationship with Jetbrains.

I think it's very unlikely that this is in the works since, if it were, you'd expect Google to have thrown significant weight towards kotlin development (https://github.com/JetBrains/kotlin/graphs/contributors).
Series A is the new Series B
So, your argument is that - because you actually see some code that simply propagates an error, it's easier to reason about where the error ends up being handled? That's like saying you'd rather search for a needle in a haystack than a needle on a platter.

With un-checked exception handling code, all I have to do is look for "catches" in the call stack to my function. That code stands out and it's easy to find. With Golang, I have to spend way more energy analyzing every caller in the stack because they all touch my error.
As long as you can publish on the web, as long as you can write an email, as long as you can make a phone call, send a text, or even talk to the person standing next to you, culture still goes on. There's literally no way to stop it without the death of mankind.

What you're worried about is that we won't be able to buy a copy of the next superhero movie. Oh well. There's still plenty of free and worthwhile works of media that can never be forced to close.
Show HN: 140 World Cup – Visualisation of World Cup Tweets
well. Probably as soon as the NSA requests it.
Nice of him to provide some test data.
I've been thinking of trying my hand at an app that is nothing more than a thin layer on top of email. It would receive email, occasionally send email, but not really do anything else with the user's actual email account.

I'm not very familiar with email other than as a user, so my question is: how easy would this be? Ideally I want to avoid mucking about too much with the email protocols or store a person's entire collection of emails...
When something has an error, you have approximately four choices:

1) fix it locally
2) terminate
3) ignore
4) delegate decision to caller

(1) is rarely an option because failure conditions are usually beyond the control of the low-level code performing the operation. That's because error conditions usually occur at the edges of an application, typically I/O of some sort, and typically are the implementation of a higher-level semantic action. If you're trying to open a file or connect to an address, what can you reasonably do if the file is missing or the network is unavailable?

(2) is not an option for systems beyond a trivial size, unless the system is composed out of little executables. There's an argument for going this route in an actor system, but most Go apps are not actor systems.

(3) is usually only an option for throwaway programs - they're probably better off terminating, in case they do something bad after preconditions have been violated.

Which leaves (4) - delegation to the caller. This is the most composable option, since it lets the composer of the components control the error strategy. In its most flexible form, this looks something like Lisp conditions; it's easy enough to emulate with a stack of error handler callbacks, but the benefits only come when the handling system is consistently used everywhere. The more common version is to unwinds the stack until someone is able to deal with the problem.

Whether you unwind explicitly with checks to an 'err' return code, or implicitly with panic, or with longjmp, or with exceptions in a language with that feature, doesn't really matter. You're still doing the same thing, semantically and with code flow.

Which error handling strategy is more error prone?

The most manual one - the one that makes it easiest to drop the error on the floor, or otherwise molest it on its path from cause to handler - would be my bet.

Java's pathology here is statically checked exceptions; this encourages molestation of the error on its path, since the error value potentially needs to be of a different type at different points in the code flow. This risks obscuring the cause of the error, since errors are a function of implementation - but Java encourages expressing errors in terms of interface.

C++'s pathology is that it allows code flow through user provided code that is ill suited to throwing exceptions. The added complexity spawns whole books worth of material on how to write C++ code in an exception safe manner.

Good exception handling style in languages with sane exceptions normally means almost never catching exceptions except for high level orchestration routines; reacting to unwinding by cleaning up resources; and generally taking a transactional approach to operations.

I believe that good error handling with explicit error codes doesn't do anything semantically different in response to an error - it just does it all manually, i.e. in an error-prone fashion. And it's my biggest problem with Go.
The whole financing of the Royals was updated fairly recently:

http://en.wikipedia.org/wiki/Sovereign_Grant_Act_2011
I ran adword campaign twice. Each time I got about 1000 visitors. It really surprised me that I did not even got one order even after running campaigns twice. I don't know if it is price or trust.

From google analytics, i see my homepage bounce rate is 45% which is not bad. People have visited contact us page but no one contacted us. Avg. spend time by visitors on site is around 7 mins.

I have tried my social circle also and my friends have also spread the word. My price range is between $60 and $700. With that wide range I should have few sales by now but no.

Someone is offering me a huge email list have email addresses of indian professionals like doctors, engineers etc. I am skeptical to buy this list as the word out there is do not buy lists. The sellers is saying list is authentic and they update it every week.

I like your idea about forums and partnership with blog owners. I will act on it soon.

Thanks a lot.
You are right that you won't see many researchers publicly talking about human-level AI, or framing their research in terms of the search for general AI. But that doesn't mean the field is "dead".

For example, I work in aging and, to a lesser extent, neuroscience. I have had many private conversations with researchers who will candidly say that the long-term goal of their work is lifespan extension or cognitive enhancement. Yet, for the purposes of grant and paper-writing, you'd never write such a thing; it would sound too speculative.

I'm not in AI, but I strongly suspect the same thing is going on there. There are probably a lot of AI researchers who want to see human-level or higher general AI happen, and are working on it, but simply can't say so in public. We know it's possible, since we have an existence proof in the human brain.
If you are asking if there are monarchs with real power, then yes there are several. In the middle east you have countries like Jordan, Saudi Arabia, Qatar, UAE. There are even several in Europe; Vatican City, Monaco, Liechtenstein.

You could even argue that the reserve powers of the British monarch are indeed great, although, if they ever tried to exercise them in there own right there would probably be a constitutional crisis, and without broad public support they would not prevail.
Bitcoin is back: Price quietly jumps 80%
I guess there's always some wiggle room on most deployments. However, where I used to work, some of the guys at that department were conducting research on flying foxes as their migration patterns southern to northern parts of Queensland (Australia) were pretty much unknown (IIRC). The requirements there gets pretty tough. Also, the power consumption becomes a major factor as it will limit the amount of useful work the device can do, ie sensing, communication etc.

Anecdote: I learned about another project where they studied opossums. They put a collar with a small wireless device around their necks to track their movements and habits, but couldn't understand why a disproportionate amount of opossums died for some reason.... The reason was that the device had a small red LED that would blink to indicate that it was working, and the opossum, being a nocturnal animal became quite visible in the night, to the joy of all predators :) :S
It's a nostalgic symbol of 2,000+ years of history.
KCG Holdings Suspects Its Trading Code Was Stolen
I'm upvoting this because of the extent to which it illustrates my point. Or, conversely, the extent to which it plays along with my point. My head hurts.
If you are building a PHP/MySQL app, I'm not sure that I would start with docker. Actually, I know I wouldn't start with docker.

Very few apps will ever get to the point where they have millions of users, and even fewer will need to use docker to orchestrate what should amount to < 5 servers (1 proxy, 2 web fronts, 1 cache, 1 db) to start to handle that kind of load.

Once you are at that kind of scale, where you are handling 5+ containers/machines, then it might make sense to look at docker, chef, puppet, etc... but for the rest of us, starting with docker feels like premature optimization for scale that will likely never happen.

The only sensible part of docker at small scale is if you are inside a larger org and you are deploying a lot of apps and you are using docker to simplify deployment (sort of like WAR files in javaland...sort of), but even then for php/mysql a git checkout or rsync works like a champ.
An older example. One that attracted a lot of attention in the 90s, but was soon forgotten and is now largely a historical curiosity, even though it should have caused people to be aware of the pitfalls of unsupervised intelligence way before Snowden: https://en.wikipedia.org/wiki/Clipper_chip
Noah's Ark in Swift
HN (and similar tech-oriented forums) often host outraged discussions of government over-reactions.

They also host excited discussions of linguistic technologies like Siri or Watson.

Here we have a government agency attempting to push the envelope of technology in hopes of reducing their over-reactions. Seems like the sort of thing that would be greeted warmly but, nope, apparently not.
Thought experiment:

As a culture we've been pretty effective lately at electing miserable disappointing failures to public office. This seems a relatively uncontroversial observation, and note I'm careful not to name any names so as to not appear biased toward one side or the other of the one coin we've been dealt.

Precondition 2 is everyone has social media accounts where they say stuff no one cares about, constantly. The CB radio of this decade.

Precondition 3 is anyone planning an assassination is smart enough to self censor and say nothing about the entire topic.

Given the above preconditions, the only rational conclusion is 99.9% of the population will continually be whining and complaining, and you can focus your attentions on the 0.1% who are at least considering doing something bad enough to self censor.

So the thought experiment is Obama comes to visit a city and the guy who gets a SS visit is the only guy in the whole city who's not rambling on in social media about "Kenya" or "Can't believe I wasted my vote on him" or writing racial slurs or "he broke every campaign promise" or whatever.
Not in the slightest. When a product is new it doesn't matter how great it is if there's no one finding the right customers for it and helping them understand why it's right for them.
This is absolutely not the government requiring someone to do something by court order.

it was also revealed that NSA had secretly paid RSA Security $10 million to use Dual_EC_DRBG

This instance is unsettling -- especially to RSA customers -- but it is very much a different beast from a court or legal order requiring installation of a backdoor.
For use of language to circumvent government filtering, see http://en.wikipedia.org/wiki/Baidu_10_Mythical_Creatures_%28...

(I suppose that's timely with the Tianamen Square anniversary)
Questions to Ask Potential Advisors: The Master List
This isn't a bug / complaint / observation of a vulnerability of End-to-End per se, you could argue Microsoft could be NSL'd to do the same to a user's operating system.

To counter this you'd need a secure, distributed way to release updates in Chrome. I don't think that's quite in scope of what this project is trying to accomplish.
Isn't that Windows CE?
He has very little power in comparison to say Obama. Cameron has the ability to appoint and remove Cabinet members and steer the party very broadly.

Senior Civil Servants and Minister's aides have far more power comparative to the press coverage they receive.
Who was forced to use the Clipper chip?

As your link points out, all the government could do was try to encourage manufacturers to go along, but even in the crypto wars of the 90's they couldn't make anyone get on board.

EDIT Did anyone use the Clipper chip in any shipping product, ever? Note that a positive answer to this still wouldn't answer the question of a company being forced to do it by government order.
> Compatibility with Internet Explorer 8

That was sarcasm.
Disruption Of Cryptolocker And Gameover Zeus Botnet
Realizing that you don't have as much experience with passenger trains, but just out of curiosity about the physics --

On a theoretical passenger train where there is exactly zero coupler slack... say this train travels on a perfectly straight and level track so there's no need for coupler slack at all, maybe the cars are actually welded together for this experiment --

Would it be particularly difficult for a single engine to start the train?

(Assume the train isn't ridiculously heavy or anything. This is really just curiosity about whether slack and/or draft gear make a difference when starting from a standstill.)
Industry leaders attack Chicago Tech Week over ludicrously sexist ads
How Crowdsourcing And Machine Learning Will Change The Way We Design Cities
Intel Haswell has integrated GPU. I have been using one for ~ 1 year. It supports VGA, DVI, HDMI output all at the same time. Works well. Power is better than the I7 I used before.
Yeah, but that's not how an average C program looks like, and the fact that I was able to cook this up in several seconds is absolutely meaningless at best and seriously misleading at worst.
gaudi doesn't generate YAML for fig. DSLs are similar but the goal is not the same.

The difference between fig and gaudi is that in addition to fetch containers from Docker index or via custom Dockerfile gaudi will generate it's own Dockerfile (from templates).

All containers are started with the same base image and are more customizable than Docker index containers
You know, if we had DRM infrastructure we could actually trust, this wouldn't be a problem. Granted, having DRM we can trust may well be itself an insurmountable problem.
Probably worlds simplest server/private cloud system
Human-like AI isn't necessary for singularity events, especially the ones that end up killing all of us.

We don't need to understand consciousness or cognition to create optimization processes that end up hurting (or killing) humanity.

It surprises me how many people seem ignorant of this fact.
UK government's password checker sends plaintext password in the URL over HTTP
Twitter-Scale Computing with OpenJDK
> Human-like AI is a dead field, or at least dead as far we can tell. We're not even sure how to build it because conceptually we don't even have a grasp on consciousness or cognition.

The current optimism around A.I. is the result not of real advances in the field, but the very useful outcomes that arise from doing pattern matching and machine learning on big data sets. When people can type "weather today" into Google and get a little card that shows the weather in Philadelphia today, it's hard not to be impressed, not realizing that these tricks don't bring us closer to "real A.I."

As a counter-example, take something very simple like search-and-replace. Word processors have had this function for decades, and it hasn't gotten any better. How long will it be before I can tell my word processor to replace all occurrences of {singular proper noun phrase} with {plural proper noun} and shoot it off to my boss without double-checking each replacement?
"which to this day contains no sailors because they are still in disgrace for their mutiny at Spithead in 1797. "

Quite Right.
Think haikus but in code.
The security details page[1] makes for interesting reading. Hopefully the new norm is 'E2E' encryption. It's actually starting to feel inevitable, and the hopelessness that followed in the wake of the 'Summer of Security' is perhaps evaporating bit by bit, through universal encryption, bit by bit.

-

[1] https://protonmail.ch/pages/security_details.php
If you don't need a "cloud VPS" and you decide to get a dedicated, don't get an OVH server (been there done that), go for a Hetzner [0] with plans starting at 32G RAM DDR3 + Core i7 for just €49 (~$67)

If you need cheap bandwidth nothing beats D.O... So it all depends on your app needs. You should take a look at current LowEndBox [1] offers. I got a couple of 5Gig RAM + 2 cores (2.0Ghz/e) VPS's for $6/month in a limited offer 2 years ago (and I still have them and I'm very happy with the service!) Seriously, there's some nice stuff there...

[0] https://www.hetzner.de/en/

[1] http://lowendbox.com/
Love the designs, think the white ones my favorite!
What a great project with what looks like 3 really talented guys. My one gripe is the @protonmail.ch domain requirement.
The "bunch of assets" that the crown effectively surrendered in return for financial dependence on parliament is the Crown Estate, currently worth GBP 8.1 billion (USD 13.6 billion).

They also pay tax: "In 1992, The Queen volunteered to pay income tax and capital gains tax, and since 1993 her personal income has been taxable as for any other taxpayer. The Queen has always been subject to Value Added Tax and pays local rates on a voluntary basis." I also assume that she does minimal tax avoidance.

http://en.wikipedia.org/wiki/Crown_Estate

http://www.royal.gov.uk/TheRoyalHousehold/Royalfinances/Taxa...
My "favorite" latest (intentional) confusion is from Intel who decided to name chips "Celeron" that are both Haswell-based and Atom-based. Why intentional you may ask? Because they can begin offering Haswell-based ones at first, get high praises for the performance of budget laptops, and then in new generations switch to the Atom-based Celerons, which can be anywhere from 2x as weaker to slightly less weaker, but costs Intel half the price to make them, and they could be offering them for the same price to OEMs, since it's "Celeron" after all.
Yes, it does matter. I have little to no interest in Swift if it's walled off into the Apple infrastructure.

I would be very interested if it was opened up and available for Linux.
Right - and we're saying that it's not. Exceptions handled incorrectly are not anymore dangerous than incorrectly handling an error in Golang. At least with exceptions, I can easily see the code that handles them in contrast to the code that doesn't.

>> At any point in a function, you can suddenly jump...

That's kind of the point. There's a separate path for exceptional behavior, which is what makes reasoning about exception paths easier.

>> It's certainly possible to write correct programs with exceptions, but it's quite hard, and almost no one does it correctly.

You keep saying that, but where's the proof that Golang programs are any more "correct"? How exactly are you quantifying that?

>> Explicit is way better than implicit by an order of magnitude.

That's like saying that having to think about putting one foot in front of the other is better than just walking down the street. It's rather ridiculous to say that.

>> It means you can look at any Go code and instantly understand what the control flow will be.

Not at all because your control of flow is now so concerned with error handling that you can't see the intended "happy path" logic.
I remember when I was learning SQL, I thought "Why doesn't the database just look up the records faster by storing them in a B+ tr.... Oh, wait, it does that already." SQL is FAST!
No, no, no; you misunderstand. I'm not saying that's an evil thing; I'm perfectly happy to say "We'll talk sometime" and let it happen when it happens, and I suspect everybody else is as well. What people are objecting to is SAYING "We'll talk at 3pm" and MEANING "We'll talk sometime". If you don't want to make a plan, the proper way to do that is to not make a plan, instead of making a plan and then thinking later "Well geeze, I gave my word that I'd meet this guy at 3pm but I'd really like to take a walk instead, so maybe I'll show up this evening instead".
Technically, while they both capture the same digit, the match itself it different, including either everything before that digit or everything after it. But I tend to liberally use lookaround to keep the actual match clean myself; maybe others go more often for a capturing group. (Well, and not being able to use arbitrary-length lookaround in most engines might be a reason too.)
Python beat PCRE to Unicode support by several years.

(So there at least was an advantage)
Clickable: https://www.warrantygenius.com/.

[Can't believe one still needs to do this here.]
How do you guard against over-fitting?
Tell me honestly what you think of the quality and independence of news today? Why are Nielsen Ratings so important? Is news driven more by journalistic principles and pursuit of the truth, or by the profit motive?

If the truth is oxygen of democracy, then journalism is the lifeblood and distorting the truth for increased revenue is unethical.
The site uses Google Analytics. Easy to deduce the service's usefulness in a critical situation from there…