skysight-inc/HackerNews huggingface dataset:
Indie Labels Face YouTube Block Over Unsigned New Terms For Paid Service
Do we all have this blind optimism that someday, one day, we can actually wake up and read the news that there finally is a magic pill to solve our problems? All of these articles read the same - link bait title convincing you that the magic bullet might be here, followed by an article analyzing the diet, and a conclusion that there is still no magic bullet; that diet and exercise have (and continue to be) the tried-and-true (boring) methods for longevity, weight management and overall health. How is it that we still get sucked in?
This effect is also seen in cricket where the new ball and the old ball do different things, and also the ball is actively manipulated (within rules).
Is it just me or is there no way to create encrypted and either SSD or magnetic volume types via the Ruby SDK?
I'd need some convincing.
http://www.beyondveg.com/nicholson-w/angel-1984/angel-1984-1...
Sorry, I didn't notice that it was submitted previously: TFTL.
Creative Destruction Yada Yada
>assume a somewhat determined and active attacker

Cryptology is founded on an academic, mathematical, and logical basis. Your don't assume your attack is active or determined, you assume that any flaw that exists could and will be exploited against you.

The founding principle of modern cryptography is to paraphrase: "If an attack knows the entire system, but if they lack the key they cannot recover the data."

>that does not mean that there is no place for JavaScript cryptography as protection against casual passive eavesdroppers

Yes, it does. It means you are no longer using cryptography and simply doing obfuscation at that point. Mathematical crypto is out the window and gone, you admitted it. Your goal isn't crypto, but stopping casual and passive eavesdroppers. So you might as well use DES, or RC2. The algorithm doesn't matter any more. Its just a question of defining casual.

:.:.:

My post is regards to client side webpage crypto, not application level node.js crypto.
Glyphs that are not supported should fallback to a font that does support them.
You're right to point out the difference between targeted and general attacks, but you're also misrepresenting the problem. An attack on SSL can take quite awhile to research and implement, but then can be used widely. One would expect the exact same scenario to play out with any javascript crypto library, as it does with all software.

So, yeah - if you rolled your very own library that's unique to this planet for exactly one website, congratulations! You're secure as long as there are no attackers! Doesn't really say anything useful about your security though. Or about the viability of using a fundamentally broken crypto platform to do crypto.
What I can't understand is how there is so much money in YouTube views for the same demographic. Who is buying ads on Tobuscus, Captain Sparklez, etc. for a primarily 8-12 year old male audience? I guess I could just watch some and see, if I could stand it.
I am quite sure that fat is the most satiating macro, not protein.
You are if you write hieroglyphics. From another point of view you are when you write English too.
I've been paleo for about a year now and, while I like the results, we're talking about a 35 woman study (70 total women divided into two groups). That's the basis for an alpha study, not a conclusive result. I'd love to say that "this is the proof we paleos have been wanting to show everyone!" but the sample size is just too small. Yes, it's encouraging but let's not blow it out of proportion.
> Online multiplayer doesn't happen well without servers to mediate the experience. Those servers cost money. This remains a massive unsolved problem in the gaming industry.

Coming to think of it, I believe Disney has a good solution in their Club Penguin setup. The way it works is that the basic multiplayer game is totally free, has no advertising and is supervised (you earn a 24 hour ban for saying 'shit' ;-). The child registers a penguin avatar, which collects points in games and runs around common spaces.

However, for the penguin to be able to use the points to collect fuzzy pets or buy some clothing items requires a paid subscription, which runs around 5 euro/month. I've authorized spending (via credit card, but out of the piggy bank) for one or three months per year ...
http://www.choosemyplate.gov/downloads/mini_poster_English_f...

It's still the square meal from the 1970's with some small adjustments. Eat a small plate that looks like that. The meat portion should be 4 ounces or so.
Germany in the 30s wasn't the Holocaust. The Holocaust emerged from it. Had people known where things would go, maybe they could have stopped it.

Today we have history to tell us where things could go. If we don't allow comparisons to the early stages, might we unwittingly make later stages more likely?
What about using the Stanford JS Crypto library through a Google Chrome plugin (in addition to SSL) for an added layer of security?

Edit: Reading on, I see that the author addressed SJCL and browser plugins separately, but I still think that most of the problems raised in the article could by solved by using them in conjunction. That gives you a secure channel for delivering peer-reviewed encryption algorithms.
Not really a fair comparison. If we're comparing to USB keys, you should at least compare to ephemeral SSDs rather than EBS SSDs. Unlike EBS, your USB disk isn't made for 99.999% durability, doesn't allow snapshotting, etc.
"Cave people" ate whatever they could get their hands on: it's time to put this diet fad to rest. Now, should you eat mostly vegetables, a little fruit, lean protein and some healthy fats while skipping the processed foods and sugars? Yeah, but stop acting like you're getting back to something from the "cave days."
The Paleo diet is all the rage here in The Netherlands as well. While I applaud people being conscious about their nutrition, I find the caveman-parabole hilarious. Most cavemen didn't live to see 40, and there's the little thing called evolution, too. People can adapt to different eating habits even within their own lifespan, let alone in +10,000 years.

The magic bullet for diets: a moderate intake of food from a diverse diet consisting mostly of fresh fruit, vegetables and some form of protein, paired with ample exercise. Wether you call it 'Paleo' and leave out 'modern' ingredients, leave out the carbs and call it Atkins, or focus on good carbs and good fat (South Beach), it doesn't matter. My wife lost a good amount of weight by eating until she didn't feel hungry anymore, and exercising regularly.
Scientific Ideas That Scientists Wish You Would Stop Misusing
Nope, all engineers have been re-assigned to making ubuntu.com responsive and blogging incessantly about it.

Phones and operating systems will have to wait.
I seriously think it was all the crazy warez custom title screen that could be larger then the actual game. Back then you had to be "known" and go through the initiation of making sure you weren't someone that could harm them through intent or stupidity.
WordPress E-shop Χαμένοι στην Μετάφραση -
It's the same argument for vegetarians/vegans as well. When you have an unlimited supply of food (and variety of foods), you can eat without thinking, and eating without thinking leads to poor food choices. When you specifically and consciously limit that variety, you have to become much more creative and active in how to enjoy the foods you eat while staying vegan/paleo/whatever. The problem is that the people following these diets attribute it to the diet itself, when in actuality it's the methodology of food selection from a subset of healthier foods that was the real attributor to their success.
Hmm, two studies.

Try this:

http://scholar.google.com.au/scholar?q=diabetes+and+diet&btn...

The rest of your post seems to be just rhetoric vaguely around your injured pride and the subsequent posturing.

Again I am sorry I upset you.
good luck with the audit.

http://pastebin.com/9catw4X7
Does anyone know of a good "get up and running with emacs" style tutorial which includes setting up of package management/repositories aimed at the emacs newbie?

The built-in tutorial is great for learning to edit with emacs, but I'm looking for something that will quickly explain the state of the nation with regard to emacs package management.
Another Reporter that tries to explain nature... Good luck. She mentions Heart Disease and other things ... HMM Dear Reporter do you even know that paleolithic people were living up to the age of 25-30? What are you talking about? Do you even understand that's that how they spend their days? Food for them was the purpose of life. Not getting in a car going to work ordering online going back and watch the kids watching TV...

It's weird you should go and watch some of your own BBC documentaries.
My Friend the Murder Statistic
Easily share code between GitHub repositories
Another Reporter that tries to explain nature... Good luck. She mentions Heart Disease and other things ... HMM Dear Reporter do you even know that paleolithic people were living up to the age of 25-30? What are you talking about? Do you even understand that's that how they spend their days? Food for them was the purpose of life. Not getting in a car going to work ordering online going back and watch the kids watching TV...

It's weird you should go and watch some of your own BBC documentaries.

And my opinion in that, you can't actually follow. Pre-historic diet, you'd be STARVED to DEATH! It means you eat once a month pretty much!

I am a big fan of eating healthy thought, and yes you can achieve that. BALANCE is the key. You can have your mcd's or whatever it is you crave in the world we living but 1-2 times a month? Eat your sweets etc 1-2 times a week? Eat salads, nicely cooked meat etc etc.

I am against of precooked food thats bad stuff for your self. Generally Cook your own food is the best solution in life I guess.
Maybe wrong BS version?

$ sudo pip install BeautifulSoup
Downloading/unpacking BeautifulSoup
Downloading BeautifulSoup-3.2.1.tar.gz
Running setup.py (path:/tmp/pip_build_root/BeautifulSoup/setup.py) egg_info for package BeautifulSoup

Installing collected packages: BeautifulSoup
Running setup.py install for BeautifulSoup

Successfully installed BeautifulSoup
Cleaning up...
The problem is, current usage seems to be to use 'zero day' as a synonym for 'just released' when speaking about vulnerabilities, which I agree is wrong. A '0day' by definition will not be known about by the public, so cannot feature in a public announcement.
Fixing our relationship with the Millennial generation
Diffie-Hellman also isn't secure against determined and active attackers (with power on the network). What you say about cryptology is utter nonsense.

> Your goal isn't crypto, but stopping casual and passive eavesdroppers. So you might as well use DES, or RC2. The algorithm doesn't matter any more.

Nonsense, it's not obfuscation. If it was obfuscation, people logging the sent data would have a reasonable chance of decrypting it. If you use JavaScript to AES encrypt things (with a good password), passive eavesdroppers cannot decrypt it later without breaking AES.
I submitted a Show HN yesterday what I believe a potential legitimate use case for javascript crypto (or more specifically, in-browser client-side crypto):

Bring Your Own Filesystem (https://github.com/diafygi/byoFS)

Example chat demo: https://diafygi.github.io/byoFS/examples/chat/

It seems like an unhosted-style app (unhosted.org) can mitigate all of the OP's concerns.

> Secure delivery of Javascript to browsers is a chicken-egg problem.

I address some this in the byoFS README[1] and again in an /r/crypto discussion[2].

Since the webapp is unhosted, the webapp is built to work when being served from anywhere, including your local filesystem. This means that you could download the webapp anonymously, inspect/audit/checksum it, then run it from your local filesystem in the browser (try it! just right click and Save As...). Alternatively, you could load it from a server that you would trust to kill itself rather than comply with a secret court-ordered compromise (e.g. Lavabit, Internet Archive, etc.).

Additionally, since the webapp is just static files, all the webapp server sees is anonymous requests (over https to prevent MITM). It doesn't know who is requesting the static files, so it would be difficult to perform a targeted malicious injection. You would have to broadcast the injection, which is generally ill-advised since it might be spotted by a vigilant third party. Most of the surveillance injection attacks that have been leaked have been targeted, so this basically cuts off that attack vector.

So, in order to compromise this webapp through injection, you'd have to hack into the trusted static server and blindly serve the injection to everyone who requests the webapp (hopefully including your target). This is basically the same attack vector you'd have to do if you were trying to inject something into a download-and-install local application.

I don't think javascript crypto is universally a good idea, but for this unhosted use case, it can limit attack vectors to the same as download-and-install local applications.

> Browser Javascript is hostile to cryptography.

True, which is why WebCryptoAPI should be prioritized, and I can stop using SJCL in byoFS. Once APIs for crypto primitives are baked into browsers, this argument disappears.

> The "view-source" transparency of Javascript is illusory.

It's certainly much better than inspecting desktop apps. Also, if your webapp is unhosted, you can certainly publish a signed hash of the static files, which can be verified after you download the app and before you run it.

One infrastructure improvement that might be very helpful would be to be able to buy an SSL certificate from a CA that is limited to a particular file hash, which the browser checks before showing the connection as "validated" (maybe a checkmark beside the https lock?).

[1] - https://github.com/diafygi/byoFS#security-and-philosophy

[2] - https://pay.reddit.com/r/crypto/comments/289w7x/bring_your_o...
Wow. Spurred on by your discoveries, I found this: http://weboob.org/applications/qhavedate

"QHaveDate is a graphical application able to interact with dating websites, and help you manage your numerous conquests."

I, uh, don't really know where to start with that.
> protection against the attack model of the passive eavesdropper

My argument would be that trying to protect against passive attackers with JS adds nothing beyond what SSL already offers.

Which is already required as a matter of course, and already compromises the payload if SSL is broken (again).
> Making banana plants less susceptible to diseases is a secondary goal for us. Our primary goal is to help Dale develop new types of banana that are more nutritious – specifically, much richer in Vitamin A and Iron that the body can absorb.

I don’t like some details.

The banana needs a little more energy to produce more Vitamin A, so the plant will yield fewer bananas and these bananas will be more expensive. You will get more Vitamin A but fewer carbohydrates. I’m not sure that this is a good deal in the very poor parts of the word.

The problem with the Iron content is easier to see. The banana has to take the Iron from the soil, unless it’s a very rich Iron zone, so you need to use a fertilizer to replace the Iron. This also makes the bananas more expensive.
> FFS, I'm a Java programmer, and I can't work out how to make this shit work most of the time.

One of the first instructions on how to make a mod was -- first, download this decompiler. Wat?
That's total BS, you can notice alising patterns easily at much higher resolutions than your suggesting.

http://en.wikipedia.org/wiki/Aliasing

PS: I noticed issues standing ~10 feet from a 50' 4k screen.
Is 3D Printing The Future Of Making Things?
Compared to the past 30 years of 'package management', which basically amounted to hand copying and managing tons of files from all kinds of different sources, with all kinds of different version numbers, MELPA and package.el are absolutely incredible.

Sure, there are problems, but they'll be fixed eventually.
You must be well off? Fortune seems far more important to me now that it's rather late in the day to be doing anything about it ... [fame can hang for all I care].
Ah yes thats the problem, I am using beautifulsoup4==4.3.2.

Try pip install beautifulsoup4
Yes and no. Most mainstream paleo isn't low carb enough to keep you in ketosis. Sisson's Primal Blueprint is probably the closest to advocating for keto. In reality the mechanism for weight loss is most likely increased satiety from higher P&F intake vs Carb intake (without dropping below ~50g C/day for keto).
I was under the impression that hunger is primarily a distribution issue, not an issue of production. Gates implicitly states that the vitamin A deficit is mainly a result of a one-sided diet. But isn't the one-sided diet itself a result of a lack of alternatives? So, if alternatives cannot currently be distributed to meet demand, how would a new breed of bananas solve that? Don't they also have to get distributed into those regions first?
It only mentions the working conditions in those fullmilment centers as a brief aside: apparently the building is air-conditioned and water is readily available -- no mention if there's time available for a drink during your shift. I guess you can write an article about just the technical marvels of these buildings, but don't forget that it's only half of the picture.

The motto "work hard. have fun. make history." printed in 2m letters struck me as Orwellian.
Thanks (and thanks to the other replies !). So a complex number has a single representation when using real and imaginary parts, but an infinity of representations if you use angle and magnitude (just add or subtract 2π radians). I guess that should have been clear from the article, I just needed to sleep on it.
The biology of the human body and food is so complex, science is nowhere close to understanding it helpfully enough to design a diet, even if you call it an old diet. I'd bet you'd find a high correlation between unhealthy diet and degree of "scientific" perspective people had on their diet. I offer the United States as exhibit one.
Could you please elaborate on some examples of this?
It's any MITM attack, not just XSS, right?
Electrically Remineralising Teeth To Reverse Tooth Decay
Later this year.
Oyster Brings Its Netflix For Books To Android
How to Anonymize Everything You Do Online
Bitcoin Faces Biggest Threat yet: a Miner Takeover
VersionPress – Version Control Plugin for WordPress
How One Elementary Mistake Cost This Entrepreneur 9 Months Of Business
There are some interesting legal barriers to overcome in some of those cases.

In my country, faxes are legally recognized as evidence, but email isn't, so there's a strong incentive to fax documents.

A law recognizing electronic signatures might help things, but it's still pretty cumbersome.

I tried to build a solution for "escribanos" - the U.S. approximate equivalent is notaries, but they're specialized lawyers actually - and the legal hurdles proved impossible to overcome.

Stuff that is being done with fax machines out of ignorance would be a better place to start, but there you have to face conservatism (an admittedly easier barrier than legal obstacles).
Sure, TLS probably covers many use cases. But if protection against overzealous public Wifi spots is your goal, or uploading encrypted files to something like Mega over HTTP, there are still uses that TLS cannot cover.

Again, I am not advocating JavaScript crypto. I'm just putting it in its place.
If anyone's wondering what the notched semicircle looks like, you can see it along with quite a few (all?) of the new pictographs on this pdf: http://www.unicode.org/charts/PDF/Unicode-7.0/U70-1F300.pdf
The biggest problem in the UK is: groupthink. The national identity is oriented around just how conformant and pliable an individual is, in relation to their peers, and thinking what everyone else thinks is, fundamentally, at the core of what it means to be an Englishman. Don't rock the boat, don't go outside the boundaries of 'acceptable society', and so on.

Well, I'm sorry to say, but you English deserve your oppression. It will be a long road travelled hard before the UK is anywhere near the free, spirited nation it claims itself to be. I can only imagine there are new breeds of dissidents in the British isles, and I can only hope they rise some day to shock British culture out of its utterly self-righteous stupor.
Tried that. Performance is bad and gameplay needs tweaking
I feel like rather than diet fads, for weight loss. People just need to learn about Ketosis[0] and how to trigger it in your body (hint: have a tiny amount of carbs).[2]

Your body turns into a fat burning machine. Any way you can achieve it without feeling like you are starving is going to be an effective weight loss strategy. Paleo, Atkins, Lemon/Honey/Coffee/whatever detox, etc. You cut out carbs, your liver starts burning fat.

But beware: They (the scientific community) haven't reached consensus on whether you should do this long term[1]. It seems to be trending towards "it's probably okay" though. I think it puts more strain on your kidney's (because of the ketons)

[0] https://en.wikipedia.org/wiki/Ketosis

[1] http://scholar.google.com/scholar?q=long+term+ketosis&btnG=&...

[2] Disclaimer: I'm not a dr. I most likely am wrong about more than 1 thing I've said :-)
So, putting poo into unicode is just the same as hieroglyphs? Or hebrew or arabic or chinese characters? Still don't agree.
I never claimed that the polish of the UI in the original was irrelevant.
eating "hamburgers" where the buns are made from two deep fried chicken breasts

You're referring to KFC's Double Down I assume, but if you look at it's nutrition facts (1) it's not as bad as you think, especially for a Paleo/Atkins based diet. And it's delicious.

1 - http://fast-food-nutrition.findthebest.com/l/1377/KFC-Origin...
I disagree that just because its possible for a malicious or comprimised server to send evil javascript, javascript crypto should not be done.

You have to analyze the threat model. Take the note taking webapp they use as an example. Without javascript crypto, anyone who breaks into the server can read everyones notes. Likewise, the FBI can get a warrant and have the owner of the web application turn over everyones notes.

If they do use javascript crypto, instead of just getting a warrant for the machine, the fbi has to convince the owner of the site to modify their source code to target an individual user to steal their key. That is a significant difference. Also, the victim user has to log in again for that attack to be successful, if they just used the server for a couple weeks and left, they are safe.

Likewise, an attacker who breaks into the server can't get a dump of all the notes in the system. They again have to modify the source code which could be noticed by the owners and users and takes some level of sophistication more than the average aim and shoot attacker

So is javascript security perfect right now? no... but that doesn't mean it should be dismissed
How I started BetaList
> Vitamin A deficiency in developing countries causes hundreds of thousands of children to go blind each year. It also reduces the body’s ability to fight infection, which raises the fatality rates in poor countries from infectious diseases like measles. Iron deficiency is so serious and widespread that in Uganda, for example, more than 40 percent of young children have stunted growth and 73 percent are anemic.

I take your point that calories aren't trivial for a developing world staple but it's difficult to see it counter-balancing that situation.