skysight-inc/HackerNews huggingface dataset:
what if I break in to the network through a web server? or happen to find an open network port in my hospital room?

Security is done in layers. Physical access is 1 layer, network security is another, requiring proper authentication/authorization for your software is yet another, etc. Each layer stops a percentage of hackers. If you skip important layers like auth, you're allowing a larger number of people in, simple as that.

It's the equivalent of saying "but ofcourse I leave a large pile of cash in the middle of my dining room, my front door is locked, that's secure, right? Putting it in a safe or even a locked closet is just a burden." It ignores basic security principles.
WiFi packet payloads:

> So in theory, we should have just grabbed the header. However, a single wrong line in the configuration file caused us to grab the packet payload too. Had we ever audited the data on the disks, we would have found the bug and fixed it, but... nobody ever noticed. Oops.

That is Google's official opinion of the story.

Some european countries (Germany, Austria) bag to differ. Google captured all WiFi data (unencrypted & encrypted). As a result of the war-driving (http://en.wikipedia.org/wiki/War_driving ) Google StreetView cars were banned in these countries (Google had to delete the harddrives) and as a result there is a huge empty spot on the StreetView coverage in central Europe (only a few cities in Germany, no street coverage at all in Austria): http://en.wikipedia.org/wiki/Google_Street_View_in_Europe#Co... . Some attacked the car: http://www.austriantimes.at/news/General_News/2010-04-08/223...

one of many news articles about this issue on heise.de (German): http://www.heise.de/newsticker/meldung/Datenschuetzer-Street...

Google promised to delete the captured WiFi data but failed to do so: http://www.telegraph.co.uk/technology/google/9432518/Google-... , official letter: http://www.telegraph.co.uk/technology/google/9432552/Google-...
This is one of the technological/mathematical developments, along with multi-sig, that has great promise for improving the security and flexibility of Bitcoin. One of the worries for people with large bitcoin holdings is the being-hit-by-a-bus problem. With normal property the legal system provides the flexibility and rules by which valuable goods can be passed on to heirs. With Bitcoin, the loss of keys can mean huge amounts of value are irrecoverably lost. I hope that Shamir Secret Sharing is used as the basis for a bitcoin startup that allows bitcoin users to easily specify a set of trusted people who can come together to reconstruct keys on the event that the original holder of the keys is incapacitated or deceased.
I'm working on some software in this area (https://www.penflip.com/). A book is a basic git repository holding a collection of markdown files and images, which are compiled into PDF/epub/html with a single click in the browser. There's a web UI that essentially wraps git functionality, which has proven useful for collaborating with (and receiving feedback from) non-technical people. It's pretty simplified.

Several open sourced tools are used behind the scenes, including some mentioned here (e.g. pandoc).
Messi es un perro
Easy. Tibetans are humans, with a small contribution of special adaptations from another species.

A human that has one Neanderthal gene is not a Neanderthal. Therefore, Neanderthals are still extinct.
Treasury and Justice Departments effectively rule that Bitcoin is legitimate
I had the same question.

It seems to run on unlicensed (I.e. noisey) spectrum because existing ZigBee devices can be retrofitted.

The tens of thousands of devices and 50 square miles per bridge makes no sense to me. That's like a cell tower. I'm assuming it's a mistake.
And I discover today that Imgur has a (previously unbeknownst to me) 256 image-per-user limit.

Anonymous uploads are still free.

Hrm.
Try researchfields.com -- HN-like site dedicated to researchers and grad students for discussing that sort of thing.
Are the unique secrets defined by the user or at manufacture time?

If by the manufacturer, then it is potentially a security and privacy concern.
The linked paper is quite interesting [0]. It does indeed sound like TLA+, the formal methods tool set they used, has worked out very well. One quote: "[W]e have found that software engineers more readily grasp the concept and practical value of TLA+ if we dub it: Exhaustively-testable pseudo-code. We initially avoid the words ‘formal’, ‘verification’, and ‘proof’, due to the widespread view that formal methods are impractical."

[0] http://research.microsoft.com/en-us/um/people/lamport/tla/fo...
Open it up to everyone, that's how you can make it more inclusive.

edit: The invite-only thing is incredibly lame. I signed up a few minutes ago to see what product hunt was all about because it was being discussed in this thread (never heard of it before). I doubt I'll lose any sleep over forgetting its existence.
Already posted today: https://news.ycombinator.com/item?id=7979847
First you need the thing to be optically clear. Then you need it to be watertight even with 100 MPH winds blowing on it. And once that's done, you'll find water inside anyway. Condensation can easily form in a closed container which moves at varying speeds through varying temperatures and has water cooling it suddenly sometimes. You may even end up needing a heater inside the thing before you've got it perfect.
There seems to be a fundamental trade-off between latency and throughput, with stream processors optimizing for latency and batch processors optimizing for throughput. The post says stream processors are actually used for reprocessing in production at LinkedIn, and simplifying things might well worth it being slower, but do they know how much slower this is than using Hadoop?
This is the actual hack that saved the astronauts of the Apollo XIII
Hey amscanne -

It's solely based on throughput. The helium bridge has very little state. Our true limitation will be how much we can put in the air to a single bridge. Our metro networks will have a lot of bridges.
Honestly, the G+ photos UI is sufficiently fucked up that I've never been able to sort any of this out.

I see Google's offerings as suits my needs. And Photos hasn't offered that.

I disagree on HYO, because reasons. Persistent broadband, a $25 device, and 5 watts will get you a server. The software's free. Some form of distributed federated caching gets you redundancy and load balancing. Search is the tough nut, though there are a few projects which have been working at that (e.g., YaCy) for a while now.

Otherwise it's just protocols, autoconfiguration, and adoption.
We are the product that Facebook has been testing
> On modern OS's, don't threads generally start up quicker and take less memory than processes?

Yes... but the thing is, that's largely as a function of sharing data!

The OS can skip image relocation for the executable and it's dynamic libraries by sharing the same data with the other threads of the process. Process metadata is shared, so no new process entries need be created.

Your program can skip the parsing of configuration files, command line arguments, and other initialization by sharing the same data already parsed read and initialized by the other threads of the process.

On some platforms, there's fork(), which lets you retain some of the advantages of shared data. Not all of them: For example, one of the tradeoffs of a compacting garbage collector is that the relocation of data can cause those pages to become no longer shared between the forked processes, even if the data on those pages was otherwise untouched and identical, because the compacting isn't shared between processes.

The general trick is to keep a pool of processes ready to handle work, much as efficient thread pools avoid spinning up new threads for every tasklet.
lol made me laugh
Well, they don't tell you the bitrate. WSPR is a protocol that can make worldwide contact on the HF bands (3-30MHz) with 0.01mW of power. The catch is that it takes 2 minutes to send a message like "KD2DTW/FN30".

900MHz signals don't propagate like HF (by refracting off the top of the ionosphere), but they do have interesting propagation characteristics like bouncing off of passing airplanes. If you have a protocol that can extract signals from below the noise floor, and enough erasure coding (reed-solomon, etc.) to handle bursts without connectivity, you can build an urban network fairly easily. The only problem is that it's not that useful.

My guess is that they are like FitBit and just plan to blanket every home with one of these things, and allow devices to roam to whatever access point is closest (like when you walk past someone's house with a FitBit, and notice yours has synced).
Thanks
i'll check google hack growth for tips. I cant however fake my growth like reddit since my website is so far only a landing page with a call to action. What i need first is to draw more traffic to the site
Thanks!
World Cup  Disaster
Facebook’s Head Of Policy On Emotion Experiment: “That’s Innovation”
Hey Kazinator -

We only use the same hardware standard as Zigbee. Nothing else.
> I only live 6 miles from work

Why'd you use a car then? That's a very nice bike ride. (I'm from The Netherlands so excuse my ignorance if there isn't even a physical way to bike around your area).
Especially given as having access to a home natural gas supply is not a given. I didn't even know that was a thing until I moved to the UK.
We don't need two of these posts on the front page. Perhaps you could post a link to the paper as a comment in the other one? (That's what we tend to do when there's a current popular article and it's not too fluffy.)
Ask HN: MailChimp not working
Has anyone had experience with MailChimp failing to verify your email domain?
I have collected a list of email signups and the first time that I am trying to send a campaign I am prompted to verify my email domain before I can send the campaign.
The trouble is that MailChimp claims to send me a verification code but I am not receiving it on my end. Needless to say that I have contacted MailChimp support over more than 24 hours ago but no response..
I basically have an account that I can do nothing with it.
Anyone with a similar experience?
Funny story - when I first started using Twitter a few years back, I had tweeted about some AI news. Pretty soon after that , I had a new follower that was trying to have a conversation with me - it was retweeting stuff randomly and sending some weird replies to me - it all seemed quite odd. Turned out that it was @cyc_ai - the Twitter handle of the the Cyc AI system, presumably trying hard to emulate a person - but failing unfortunately!
I don't know about Clojure, but . in Java is ambiguous in the grammar, since it's also used for method calls. And . is function composition in Haskell. I can understand why Rust would want a different sigil.
Why should I define democracy, chemical entropy or anything else which I am not an expert on -- and lots of academics have put much time and energy into defining?

Look up democracy index and freedom index on wikipedia, which I referenced.

Russia has fallen a lot further on the central ones of those, as I wrote. I asked if that ALSO was a Western conspiracy, which the Russian media are full of.

The POINT was -- the paid Russian propagandists aren't allowed to write that. They mostly go away.

It seems the whole internet quality suffers, not only HN, from those Russian astroturf trolls in most languages.

(Israel is not only beside the point -- as I've heard it described, if you put three Israelis in a room you'll find at least four hard opinions on most any subject. :-) The same goes for the media. In general, democracies put under pressure from terrorism aren't pretty: By definition, terrorism scares the voters. That results in that the governments throw out the law books, because they want to get reelected. See Germany, USA, Italy, Israel, Britain, etc.)
This is moving the wrong direction. We want to use automation to reduce the number of jobs, not to create makework for it's own sake. This is the key statement:

There are a lot of areas where it makes sense to divide labor between humans and computers—we are very good at some things computers are terrible at and vice versa—and some of these require huge amounts of human resources.

As entrepreneurs it's our task to make computers better at the things that they aren't good at. It will require groundbreaking technology, a lot of work and incredible amounts of risk...but if not us, then who? We're blessed with the ability to make tools that make lives easier, we should be doing everything we can do make machines do more work so that humans can do less.

If Adam Smith was right and land, labor, capital is the relevant equation, then automation is a way to create nearly unlimited amounts of labor. Human brains are probably the most powerful computers to ever exist, it's unlikely that busy work is the best way to utilize them. A focus on creating jobs just exacerbates the social problems of capitalism. When people mention basic income, they usually also mention automation as a way to mitigate the loss in the labor force. If we push for more jobs instead of automating away jobs, we're just delaying the best outcome.

The most important question of the 21st century is "What can be automated?". Reducing the number of jobs is our great calling. Paradoxically, we'll have to employ at lot of smart people to make progress toward that goal. I think that's the real challenge, and it's one that we can rise to.
> End-to-end Security

Not, it should be noted, End-to-end Encryption :)

It would seem, according to another comment in this thread, as if the bridges and platform have de-facto access to all traffic unless another layer of encryption is performed.

Apart from some vague notions to 256 bit and SSL there is very little written about the security and threat model of the network.

Unless I am also reading the marketing wrong, this also seems to be positioning itself as a new communication network - completely centralized to a single company/organization - with no published standards. Compared to wifi, bluetooth and to an extent the mobile network - I can't see a winning use case for this.
I'm curious, do you really need a text editor for log files? It seems like the wrong tool, after all, you're not editing your logs. I have never found a case where `cat example.log | grep Error | less` is insufficient.

Granted, I think a good editor should be able to handle files of any size, but if atom sacrifices that for the ability to let an extension display anything it wants inline with the text, it doesn't seem like a catastrophic loss.
Nagios site down: No monitoring by Nagios?
Ask HN: Good Laptop without WebCam?
I'm looking for laptop without webcam. Specs: Year 2013+, 15"+ screen, AMD or Intel processor, 8GB+ DDR memory, 250GB+ 5400rpm hard drive, DVD-R/RW is a plus. Price $500 or less. I've looked on NewEgg, Amazon, TigerDirect but most newer laptops all come with webcam installed. Any ideas ?
The generating password stuff is cool (though I use nothing like them)

I like how data can be totally thrown off as to where I am physically by geotagged images that are arbitrarily tagged with me.
It says:
Database Error: Unable to connect to the database:Could not connect to MySQL
ClustrixDB - San Francisco, San Jose, or Seattle

---- Senior Software Engineer ----

Clustrix is solving one of the most difficult open problems in the software database industry today: scaling SQL. We’ve built our own distributed relational database from the ground up. Now we’re looking for smart and motivated folks to join our small team of developers and take this technology to the next level. We work on:

- a C codebase written mostly in continuation-passing style
database fundamentals: B-trees, logging and recovery, checkpointing, MVCC

- a Paxos-based distributed system: group membership, transaction consensus, global checkpoint

- a query planner and compiler, modeled on the Cascades Framework, which generates distributed queries

- a rebalancer, which manages data distribution across the cluster

You should be someone with experience in databases, file systems, or other systems at scale and comfortable with designing efficient programs in C.

Here are some things that make Clustrix a great place to work:

- Our team is small, so you get to own significant projects and contribute in a big way to the product.

- We have a lot of interesting problems to work on, in a variety of areas.

- Our customers love us. We help them do things they could never do with their legacy SQL databases.

- We are passionate about making our software work better and faster

Our customer base is growing, both in number and in size of deployment. Their clusters keep getting bigger and their workloads more varied, so you will see interesting challenges and solutions in solving those.

We have offices in Seattle, San Jose, and San Francisco, with all the perks you expect from a startup (happy hours, snacks, hoodies, etc).

Let’s build a scalable database!

http://www.clustrix.com/company/careers/openings/
I'm sorry, but that it's a wasted emotion. Economists are not software developers. They do the minimal they need and nothing more. It's like complaining that a masseur has poor baking skills.

Get over it! It's a support tool for them and until they demand that you take their code as a perfect example, developed have no need to complain.
Oh really, didn't realize that. I guess I should have done more research before posting! That's awesome!
Apply to a credit card with your bank. Without credit they are usually easy to get accepted to.

Use your card for your normal purchases, don't just buy big things for the sake of purchasing things. Pay off your bill ON TIME every time.

What I like to do is pay off most of the bill before it is due, and keep 5-10% of the bill for when they report it. This keeps your utilization at that low % which keeps your score up.

Another thing to do if you can get multiple cards is set up an recurring purchase on one of them like netflix and make it so it auto pays the bill monthly. This way you are keeping it active while not really spending anything.
European agencies start questioning Facebook about its emotion study
Wasted time on a wasted subject. The person that compiled it had nothing better to do... Economists are not developers and should not imagine to be ones.
It takes a lot of time and effort to be one.
Here's an interesting blurb about how they were using TLA+. TL;DR is is that, unsurpisingly, model checking trumps proving in roi:

We have found formal specification and model-checking to yield high return on investment. In addition
to model checkers, many formal specification methods also support formal machine-checked proof.
TLA+ has such a system. The TLA+ proof system has several compelling benefits; for example, it supports
hierarchical proof. After doing only a small number of such proofs, author C.N. has found that
hierarchical structure is an effective way to handle the otherwise overwhelming amount of detail that
arises in formal proofs of even small systems. Another benefit of the TLA+ proof system is that it takes

as input the same specification text as the model-checker. This allows users to find most of the errors
quickly using the model-checker, and switch to the proof system if even more confidence is required.
Even though formal machine-checked proof is the only way to achieve the highest levels of confidence
in a design, use of formal proof is rarely justified. The issue is cost; formal proof still takes vastly more
human effort than model-checking. We are continuing to experiment with the TLA+ proof system, but
currently model-checking remains the sweet spot in return on investment for our problem domain. We
suspect that proof will only be a worthwhile return on investment for one or two of the most critical
core algorithms.
Interesting that you won't replace Qt with Rust, because I'm considering doing it. The reasons:

- Qt core (QList, QMap) can be replaced with Rust std lib

- I don't use QML and Javascript (because Javascript errors don't show up at compile time)

- The only thing missing from Rust is QWidgets, but I'm sure there will be something to replace it

I wouldn't like to use a Rust port of Qt just to get QWidgets for Rust, because it would also mean shipping huge Qt core libraries with my Windows application. I don't need them so I don't want to do that.
The site says specifically that one bridge can cover tens of thousands of devices and 50 square miles.

It also seems to be based on ZigBee (that is, ZigBee devices can be retrofitted) so it's 2.4ghz, 915mhz or 868mhz.

Like you said, there are plenty of ways to go one way (from a powerful transmitter). But those are noisy frequencies for a weak transmitter to make it several miles...

Anyways, agreed that the plan is probably fitbit-style. But the crazy specs make it seem a bit like snake oil to me...
So then why don't they just call it a savings account and a checking account? Wallet is an implementation detail at this point that the average user shouldn't have to learn when there's already a word in their vocabulary.
The paywall has to go.

As researchers, the very purpose behind publishing is to make our work available to as many people as possible. The ACM and other publishers used to facilitate this. Now, the role they play has the exact opposite effect - that of restricting access to information. Furthermore, requiring authors to hand over copyright, as opposed to licensing their work to ACM under suitable terms (e.g. creative commons) no longer make sense. I note the recent introduction of author-pays publishing, and this is a step in the right direction, but the prices seem way out of line given distribution costs.

I made the decision several years ago that I will not allow my scholarly work to be restricted from those who wish to view it but aren't members. As such, I refuse to publish in any venue that does not allow open access. I see the ACM primarily as a racket, acting like a self-interested, for-profit corporation - not an one that represents the true ethos of the scientific community, which involves openly sharing the results of research.

I encourage anyone who still has any faith in the paywall publishing ecosystem to watch the recent Aaron Swartz documentary, "The Internet's own Boy". This will make you angry and realise how corrupt the system of ACM, IEEE, Elsevier and similar organisations truly is. If ACM wishes to have any relevance going forward, it needs fundamental change, lead from the top.
You should probably work here. -> mark@helium.co
Amazon refuses to bend to the FTC's demands over in-app purchases
This is a good point. I guess what I should say is that I'm looking forward to the day when Bitcoin banks are FDIC backed and we can move on from being paranoid about security.
I should note that I'm a hobbyist/enthusiast type of customer; if you're losing business on price grounds, I can definitely see where a price cut would help.

(Also, it doesn't help that the wiki is crufty and out of date, and boot menu, last time I rebooted, was still on CentOS 5.)
New puzzle game on android for puzzle lovers, – BRAND LOGO PUZZLE
You like puzzle and wanna get familiar with world's top brand and Logos?
"BRAND LOGO PUZZLE" can be the right game for you. It's graphics, content, gameplay options are simply awesome!

"Brand Logo Puzzle" is the ultimate puzzle game with logos for the people of all ages. It's free to download and available on all Android devices.
::Features::
- Get familiar with worlds most popular brands with puzzles.
- The fist version of this game include over 100 logos and the next version is coming up.
- Play and share your performance with your friends through online leaderboard.
- High quality graphical interface.
- 7 different languages
Gender segregation in IeSF, why women can't compete in gaming competitions