skysight-inc/HackerNews huggingface dataset:
One (amongst others) huge problem with this is: I need to take your word granted for it. I have no means whatsoever to check whether any of this is true. The Snowden revelations showed very clear that all regulatory control mechanisms in the USA failed. I'm pretty sure this is the case in UK and Germany (my home country) as well. In history we learned that where there is no oversight there will be misuse for sure. Sorry, but ubiquitous surveillance is far too intrusive to rely only on a word given.
Q&A with pmarca and howardlindzon
Well, not necessarily. It's the most calorie dense, perhaps, but not always the most satiating.

For instance, the best index put together so far lists potatoes as the most satiating. And the number two is a very lean fish.

[0] - (pdf) http://www.ernaehrungsdenkwerkstatt.de/fileadmin/user_upload...
How about the trans fats?

edit: just realized there's supposedly no trans fats in KFC food. This is surprising and interesting. (apparently trans-fat free since 2007 http://en.wikipedia.org/wiki/KFC)
Banker Trojan Bypasses SSL Mechanism
I was under the impression that client side crypto was always a bad idea, is this really news?
Meet “Spire”, The Wearable Breath Tracker That Calms You Down
Warren Buffett on Scorecards, Investing, Friends, and the Family Motto
Where The Heck Are Canada's Corporate VCs?
How would HDDs fare in this test?

I'm an overly cautious person when it comes to data so I'm still holding off - these results look promising enough to throw some of that caution to the wind.
Shen is pretty amazing, it's a full fledged functional language with lots of features and lots of compilation backends. I don't think there's a lot of ground for a comparison with ki, which is much more limited in scope.
How to Query Your Java Objects with XPath
> "The most well known simulator to any Android developer is probably (and ironically) the one that iOS developers use from Apple."

I get it. Ironically Google didn't copy Apple for once, and their solution turned out bad. So now they need to ironically copy it, please, Google, pretty please. But the real irony is that Android developers both get to boast about Android being open source, yet when they need something, they go beg Google implement it for them.

And Google really can't implement an efficient iOS simulator for them, because there's no Android desktop operating system.

You see, while it's getting a bit old to hear Tim Cook brag at every keynote about how "only Apple can make everything work seamlessly together", truth is, they indeed share a kernel and over half their APIs between their desktop and mobile operating systems. This is why the iOS simulator is that good. Tim Cook knows it.

While a supposed "thin layer" Android simulator has to interface all its APIs with Windows and then do it all over again for OSX, and then again for Linux (common POSIX APIs notwithstanding), every version with its unique quirks and bugs, not matching the platform it's simulating.

So instead of that ball of pain, Google chose the easier task of virtualizing the actual hardware and then running the whole Android stack on top of that.

In their particular circumstances, this was, and remains the only feasible way of doing it, and no amount of blog whining will change that.

Turns out you really can't copy some things so easily.
I'm curious... (and I'm only being a little flippant, I promise) Does this also mean that the new BBC series can be freely distributed on Bit torrent without fear of copyright infringement?
You're assuming that private cars are the current dominant form of transport. That's not always the case.

Transport planners i've come across would probably start wittering about modal shift. If introducing more taxis into a city leads to a modal shift from taxis to cars, it's a good thing. But if it leads to a modal shift from buses to taxis, it's a bad thing.

A Machiavellian transport engineer might even consider restricting taxis so as to maximise the available modal shift to buses (or rail etc), to make projects to introduce those easier to sell.
Eventual Consistency in Real-time Web Apps
That's not a problem with JavaScript, though. In that case, he could send whatever he wanted.
You should follow the Paleo diet if you don't want to live past your 60's like the Inuit and the Masai, who have been on a low carb diet for generations and have very low life expectancy.

Just research what science (not blogs) has to say about spending your life in ketosis.

Plus, there's nothing Paleolithic about the Paleo diet:
http://www.youtube.com/watch?v=BMOjVYgYaG8
While you are correct that a server can serve me malicious Javascript encryption code that discloses my keys, there's a big difference: the act cannot be hidden.

If my secret keying material instead is on some company's servers it can be taken surreptitiously (by court order or not).
I have followed a vegan whole foods diet for over more than 2 years (and lost 50 lbs of fat). Protein is the least of my problems on such a diet. When you eat enough calories from whole plant foods (whole grains, legumes, vegetables), you get plenty of protein. When your calories consist of vegetable oils, sodas and white flour products, that's where you might get into trouble.
Complete beginners:
http://ergoemacs.org/misc/list_of_emacs_starter_kits.html
http://unix.stackexchange.com/questions/6170/what-are-some-e...

Tricks and tips for experienced users: http://whattheemacsd.com/

General Emacs blogs and news:
http://planet.emacsen.org/
I'd much rather people pay for stability. Tricking people to pay for 64 bytes of code and a new color pallet for a diamond encrusted pixel sword in order to offer stability was a mistake. Education needed to happen, this shit is hard, and it's a lot of work. When I go to a store, I don't see a sign "Pizza is free" only to walk over and find that if I want to put toppings on the pizza, well those cost $0.99 per single slice of pepperoni on the pizza. In order to get a full pizza experience, including peppers, cheese, and sauce, I'm not paying $30 for the free pizza. It's dishonest, and we're the ones allowing it to happen.
Did you read the website? It's version control for the database as well. I don't suppose you could undo deleting a post with just git haha
I think a vegan would intentionally need to try to avoid protein, or a specific amino acid, to run into any issues (or be uneducated about basic nutrition, in which case any diet could be dangerous).

B12 is a different issue. I cheat and eat Corn Flakes and plain Cheerios with various types of fortified "milks".
Sometimes you don't need the data to be decrypted on the host.

Your crypte is still useful if the host doesn't want to decrypt anything. Javascript crypto as an alternative to SSL makes no sence, an implementation in which the server never gets the plaintext is currently only possible with client side javascript crypto.
>[...]can be from someone you can't trust.

So authentication? We are talking about Authentication right? Because I said that. The weakness of DHE is that you can't authenticate who are you are talking too.

>You shouldn't use JS crypto if your attack model includes active attackers on the network.

A crypto model has to include every possible attack vector. Crypto isn't something that happens in a vacuum. You assume the worst always. If you ever say, "No, nobody would go that far" you aren't doing crypto, your doing obfuscation. Once a message leaves your hand, everything that can go wrong, will go wrong.

In crypto research people suggested moving away from SHA-1 because an attack was found, not because it was remotely possible but because it logically and mathematically existed. Crypto is about numbers and logics, not models and cost expense analysis, and what an attacker could do.

Obfuscation is a game of frustration where you create a bar, and keep raising it. Your system is fundamentally broken, but you count on people getting frustrated, or bored. Before they break it. Its game of wits.

:.:.:

The system you're talking about isn't crypto. Its obfuscation. Your counting on somebody not moving beyond A,B, and C. Getting frustrated and giving up. Crypto doesn't do that.
I've stopped reading at: "You could use SSL/TLS to solve this problem, but that's expensive and complicated."
I played COD a little bit, modern games are just too hard. I need something fun and relaxing.
Insane. I was speaking about Spotify API about an hour ago on IRC, Google'd around, found this, disregarded it (how new can it be?) and now it's at the top of HN.

This keeps happening to me, with docker release, with deis, with vagrant, so many things I talk about and then I look at hn and they're there, just waiting for me.

This happens so often, we all say here to check HN after we discuss something, because there will no doubt be a link ready for us. Starting to wonder if this is actually just a news feed where you see what you need to see.
The Master of the Life
Nestor Perez, a prominent meditation teacher, uncovers you the secret of the most important thing in your life and opens your eyes on the subject that you have probably thought of but never fully realized.
Hakan Calhanoglu's absurd free-kick from near the half-field line has to rank up there with Roberto Carlos's: http://www.highlighthub.com/hakan-calhanoglu-scores-amazing-...
This article has virtually nothing to do with password hashing, but the fact that readers routinely take that away from it is part of why I don't like it much either. We didn't promote it, or post it on HN; I think I posted it to Twitter once, and now people re-find it once a year.

I'll absolutely win an argument with you (or, I think, anyone else) about browser Javascript crypto. It's simply a bad idea. I just don't think this particular article will.

We don't reject browser Javascript crypto "despite any benefits". We reject it because those benefits are illusory. It's clear that browser crypto makes people feel better, but TSA airport security also makes the majority of Americans feel better too.
End-to-end encryption basically requires crypto to be done on the client side. But there are different kinds of "client side."

The JavaScript sandbox is basically impossible to lock down. The plug-in that Google is developing is a much different beast.
Agreed that the human body is adaptable, but I would argue that it's also adaptable to an idle lifestyle of 14 hrs/day in a chair. There are many examples of individuals with indolent lifestyles or office jobs who are living well into their 70s and beyond. My own father is an example - never walked, never exercised, smoked for 50 years - and is pushing 90, albeit not in great health but mentally still sound.

I think most of us would enjoy a better quality of life if we ate optimally and stayed active, but genetics seems to be a key factor nonetheless; luck of the draw.
are there any reliable SSDs??

For most rational definitions of reliable, absolutely. In this case inexpensive MLC or even TLC drives withstood hundreds of TB or more of writes before failing, clearly indicating their remaining lifespan the entire time. In the common applications of these drives, they're unlikely to ever see tens of TB of writes.

They can't last forever. It is odd that the Intel "bricks" itself, and that sounds more like a fault than anything (I'm at a loss to explain how that makes sense as a behavior, beyond maybe "hiding your data after you've lost the ability to wipe it"), but again it was clearly communicating the entire time that its death was imminent.

As an aside, that power test you linked was an extreme test of thousands upon thousands of abrupt power cuts while a write-back cache was enabled and populated, against a very small number of drives. It is not relevant to consumer products (where few or no drives have power retention), but it's even odder in the enterprise space, where power assurance is at the rack or even center scale, not component by component.
Show HN: Unbabel Integration with Zendesk. Multilingual Customer Support
I've updated the Shortcuts help screen on Windows :)
No, it does not overlook that "major use case". You're confused between wanting something to work in a specific way, and whether things actually work that way. If there's a "#1 most common fallacious reasoning strategy" employed by advocates of browser crypto, it's that one.
Actually their EULA states that you are not allowed to redistribute Mojang's code (compiled or decompiled) in any way.

Mods are created using the decompiled client, and built against that. But when they are released, they do not contain any of Mojang's code.

Installing mods is done by copying compiled .class files into the client .jar
I assumed they were referring to this.
http://www.bbc.co.uk/news/uk-27853591

Which is a much more moderate message.

I'm not really convinced that the UK is becoming any more racist overall, it's just that the internet has given those who are already that way inclined a platform.
Sadly not. The BBC has copyright on the things they produce themselves if not on the Sherlock character.
PGP being "too hard" doesn't mean that browser crypto "has its place". As I said upthread: if there's a "#1 most common fallacious reasoning strategy" for browser crypto experts, it's this one: "we really need browser crypto to work, therefore it works". No.
Update: I've implemented the "Archive" feature. Thanks again for the suggestion! http://5iler.com/
Here's what I was able to find on it.

http://www.unicode.org/L2/L2010/10395-typikon.pdf
It's only wasted in the short term. If you optimize so much that you have a lot of unused resources left, you just use them in your next game.
Can you cite the claims you make, like the original EULA, and correspondence which said it was okay to monetize gameplay? Otherwise, I have to disregard this comment. You may be right, but without those pieces of information, I have to defer to the post by the founder which could have legal ramifications if proved false.
I agree that any discussion of using JavaScript-crypto instead of SSL is nuts and likely a strawman complaint.

But just because it's "the best we can do," that doesn't mean it's a good idea.

EDIT 1 minute before I made this comment 'tptacek said the fallacy better elsewhere on this page "we really need browser crypto to work, therefore it works"."
>WHY CAN'T I USE TLS/SSL TO DELIVER THE JAVASCRIPT CRYPTO CODE?
You can. It's harder than it sounds, but you safely transmit Javascript crypto to a browser using SSL. The problem is, having established a secure channel with SSL, you no longer need Javascript cryptography; you have "real" cryptography. Meanwhile, the Javascript crypto code is still imperiled by other browser problems.

NSA has got the keys.

I'm an activist in a regime and extra level of indirection may slow them down.
My colleagues who do this more than I say that while it's possible, it's rare for an attacker to be able to sniff traffic without being able to interfere with traffic.
All you have to do is pick a domain that isn't currently being used. A quick check on namecheap.com and I can have:

priorpermission.com

priorconsent.org

priorconsent.me

all for < £10
The guidelines are worse than useless for example making no distinction on types of carbohydrates and essentially the food pyramid was the result of lobbying and not evidence. There's a Harvard food pyramid thats different from the one on cereal boxes.
what about distributed as signed browser extensions?
It seems to be worthwhile to post it again. Nate Lawson wrote:

> I made JS crypto a very minor part of the talk because I thought it would be obvious why it is a bad idea. Apparently, I was wrong to underestimate the grip it seems to have on web developers.

That was in 2010. Judging from many of the reactions here, today, web developers still very very very much want to believe it's possible.

Although smart people sometimes feel silly repeating themselves, some messages need to be delivered at regular intervals, especially messages most people don't want to hear.
The closing sentence might just have said "calories in vs calories out".
I think the problem is when using JavaScript crypto instead of TLS, not in addition to. The article should probably address this specifically.
The published source code is only the client-side. So not quite open-source, at least in my book if a client is open-source the protocol it implements ought to be documented somewhere or the implementation provided.
N-6 fatty acid over consumption is still a huge problem, trans or not. Anything cooked in vegetable oils is bad for you. I believe the rise in vegetable oil (soy, corn, sunflower, canola, peanut) consumption is a key factor in the obesity epidemic. It has the effect of lowering metabolism and increasing inflammation.
>The threat from Qutbism Islamic Fundamentalism (Wahhabi/Salafist inspired terrorism) is real and intelligence organisations work constantly to prevent attacks.

Is it more real than the threat from a government forcing disabled people into suicide? Or retooling 'reform' on the economy with zero-hours contracts, depressed wages, and asset inflation?

If anyone was looking to protect the elderly, the young, and the incapacitated, do you really think they'd hire GCHQ, Group 4, Capita, and the rest?

Oh - and we know the spooks keep personal files. This has been going on for decades. Anyone to the left of Enoch Powell was fair game - including at least one former Prime Minister.

http://www.theguardian.com/commentisfree/2006/mar/15/comment...

Are you telling us this has all stopped, because Internet, and because (we're told) you never saw it personally, so it doesn't happen?
Can confirm, I've been involved in Rust since 2011 and Mozilla at large began talking about Rust (publicly, though without great fanfare) in 2010.

Furthermore, saying that Rust has been worked on "since 2006" is misleading. From then until 2009 it was just the work of one man idly tinkering in his free time, hardly a serious project.
That would be a funny joke, except the guy who submitted it seems to be dead serious in thinking he found a secret message.
There is evidence of a "hunger gene" or "starvation gene" that tells us to gorge when we can, because there may be no food for a week. It seems to be more strongly expressed in some groups than in others, for example some of the native Americans who have huge obesity problems in the modern era, apparently because their systems don't know how to handle so many white carbohydrates e.g. sugar.

The "thrifty gene" hypothesis:
http://en.wikipedia.org/wiki/Thrifty_gene_hypothesis

For them, it seems that meats, vegetables, fruits and native whole grains probably should be the majority of their diet, and adding sugars, processed grains, and toxins like alcohol have been disastrous.
This was actually an enjoyable read. The best part for me was making good on the promise they made with BetaList, having successfully featured Pinterest, Mailbox, IFTTT, and so on.
The 'print' button opens a very readable version: http://harpers.org/print/?pid=243068
A shorter, more comprehensible version:

import requests

from bs4 import BeautifulSoup

from urlparse import urljoin

URL = 'http://philadelphia.craigslist.org/search/sss?sort=date&quer...

BASE = 'http://philadelphia.craigslist.org/cpg/'

response = requests.get(URL)

soup = BeautifulSoup(response.content)

for listing in soup.find_all('p',{'class':'row'}):

if listing.find('span',{'class':'price'}):

price = int(listing.text[2:6])

if 100 < price <=250:

print listing.text

print urljoin(BASE, listing.a['href']) + '\n'
I did, but I missed that bit. Which is bad! Having database versioning rolled in makes it interesting to people like me as well.

If the developers are reading this: move that info up to the top of the page! Currently it's buried down in the "Features" section, making it easy to miss. Don't hide your light under a bushel :-)
Congrats! Same here! I went low carb a few months ago and I will reach 25 pounds down next week probably.
I ran a Counter Strike: Source and Team Fortress 2 gaming community for years and neither of the two were extremely challenging or expensive to maintain in the technical sense. The hardest part was keeping the servers populated and dealing with internal drama that occurred amongst clan members.
I actually have one of these on my desk. The chain is a bit of a task to install. The licencing is kind of weird on it. The chain it self isn't bad to work with. I just with they would give more resources and tutorials for it. They give you a blinking LED example and send you off on your way...
In fact we do. E.g. 50 shades of grey started out as a fanfic of Twilight.
> I think a vegan would intentionally need to try to avoid protein, or a specific amino acid, to run into any issues

It's certainly possible for a vegan to miss certain amino acids, but it's not as hard as it's made out to be to get them all.
I hate this post, but mostly because I'm afraid of how accurate it is.

It is disturbing how quickly we forget the lessons of history -- even history still within living memory that shaped the entire future of Europe -- and instead allow an "it would never happen to me" mentality to take over.
Well the numbers are from the Food and Agriculture Organization of the United Nations, and I can't think what reason they'd have to produce flawed statistics, but then again I can't find the original study methodology so there's no way to be sure.
Some people like to play the game, some like to play with the code behind the game.
Dammit, still no glyph for the Artist Formerly Known As Prince.

Don't they realize how much of 1990s music history is unwritable thanks to this glaring omission?
Right, so you are using equivocation -- using the same term with two different meanings -- when you use "effectively aggregate our desires". In one use, it means "internalize externalities". In other, it means, well, its not really clear what it means specifically in terms of forming a government -- but its clear it doesn't mean internalize externalities since that's what the government is intended to do, not what is done to form it -- but you use the same term to misleading pretend its the same problem.
It's important to note that, generally speaking, you don't need packages if you are an emacs newbie. I tend to generally give the same advice to vim newbies who think they absolutely need to have 10 packages to put !COLORS! to be productive.

The emacs distribution comes with everything under the sun, plus the kitchen sink already. And I mean it literally.

Loading more packages, without understanding elisp and/or how emacs generally work, doesn't translate to "more productivity" in my mind.

That's how you would approach packages in a sane way:

- you start using emacs
- you start tweaking a mode that you use often
- you decide the tweak is still not enough and/or you envision a better way to do things
- you look up online for an alternative emacs package/mode
- you install it

The built-in package manager helps you only with the last step. And to be honest, there's not much that you have to do if you want to install it by hand, because at this point you should be at least familiar with elisp and emacs.

Another important note: elisp packages are mostly "stale". There are some big packages which are continuously improving, but whenever I read some mode sources, I discover they were last updated years ago, and didn't really need any changes.

I used to check for a couple of big packages manually on a year basis before using "package". Now I can automate the task, but I actually only update whenever I have a bug I noticed or I have time to read the full changelog.

You don't want your editor to have different behavior between updates, really.
Plus it depends what exercise you're doing. If you're doing heavy weight training (5/3/1, Starting Strength etc) then 52g of protein in one meal isn't that much.
Is overwhelming consensus a joke or are you genuinely that close minded arrogant and misinformed? ???
The Atlantic Challenge